last executing test programs: 14.052713883s ago: executing program 1 (id=280): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000180)='./file1\x00', 0x410000c1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[], 0xfe3c) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) 12.179496153s ago: executing program 1 (id=285): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x756, &(0x7f00000002c0)="$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") ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4008550d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setscheduler(0x0, 0x2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r1 = userfaultfd(0x1) socket$nl_route(0x10, 0x3, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, 0x0, 0x0) write$binfmt_misc(r2, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0x0) 8.511260613s ago: executing program 1 (id=296): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000940)='./bus\x00', 0x8, &(0x7f00000004c0)={[{@autodefrag}, {@acl}, {@max_inline={'max_inline', 0x3d, [0x54]}}, {@ssd}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@ssd}, {@noenospc_debug}, {@barrier}, {@nodiscard}, {@acl}]}, 0x1, 0x55a4, &(0x7f000000ac40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x8d) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) 6.416774305s ago: executing program 4 (id=300): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000340)=0x19) ioctl$TCFLSH(r0, 0x540b, 0x2) 6.251480825s ago: executing program 4 (id=302): mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='pstore\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mkdir(&(0x7f0000000580)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000000)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file1'}, 0x3a}], [], 0x2f}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r0, &(0x7f0000003040)={0x2020}, 0x2020) 5.884810248s ago: executing program 4 (id=303): mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(0xffffffffffffffff, 0x40084149, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$bt_BT_SECURITY(r3, 0x111, 0xe, 0x0, 0x20001f00) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r4, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x54, 0x0, 0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) 5.668807199s ago: executing program 2 (id=305): fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x1ff}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socket(0x18, 0x1, 0x0) r0 = socket(0x18, 0x2, 0x0) close(r0) r1 = socket(0x800000018, 0x2, 0x0) setsockopt$sock_int(r1, 0xffff, 0x1000, 0x0, 0x0) bind$unix(r1, 0x0, 0x0) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) socket(0x18, 0x1, 0x0) writev(r0, &(0x7f00000004c0)=[{0x0}], 0x1) 5.599774769s ago: executing program 2 (id=306): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0xd8, 0x43, 0xa0, 0xd8, 0x98, 0x1a8, 0x178, 0x178, 0x1a8, 0x178, 0x49, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'bridge_slave_0\x00', {}, {}, 0x4}, 0x12a, 0x70, 0xd8, 0x0, {0x0, 0x7a010000}}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x7fff, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2a0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r3, 0x0, 0x0) connect$packet(r3, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) 4.384997226s ago: executing program 2 (id=308): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r4 = syz_open_pts(r3, 0x141601) r5 = dup(0xffffffffffffffff) ioctl$SCSI_IOCTL_GET_IDLUN(r5, 0x5382, 0x0) fcntl$setstatus(r4, 0x4, 0x102800) write(r4, &(0x7f0000000000)="d5", 0xfffffedf) 4.092709687s ago: executing program 1 (id=311): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) shmdt(0x0) socket$packet(0x11, 0x3, 0x300) syz_clone(0x28380080, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) 3.282698382s ago: executing program 2 (id=314): mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='pstore\x00', 0x0, 0x0) mkdir(&(0x7f0000000580)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000000)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file1'}, 0x3a}], [], 0x2f}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r0, &(0x7f0000003040)={0x2020}, 0x2020) 3.224833782s ago: executing program 3 (id=315): r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000080), 0x4) 3.150483773s ago: executing program 2 (id=317): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4c2480) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@union={0xd, 0x0, 0x0, 0x5, 0x1}, @restrict={0xf}, @enum64={0xa, 0x0, 0x0, 0x13, 0x1, 0x8}]}, {0x0, [0x30, 0x61]}}, 0x0, 0x40, 0x0, 0x0, 0x4, 0x0, @void, @value}, 0x28) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r4 = syz_open_procfs(r2, &(0x7f0000000400)='ns\x00') bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000600)={0x1b4298bbb0829369, 0x4, 0x2, 0x6, r2}) unlinkat(r4, &(0x7f0000000040)='./mnt\x00', 0x200) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000140)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x7, 0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'}, 0xd8) 3.149842162s ago: executing program 3 (id=318): bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8, &(0x7f00000005c0)={[{@errors_remount}, {}]}, 0x4, 0x4f3, &(0x7f00000012c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000d80), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x10000000000002a9, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 2.980590843s ago: executing program 0 (id=319): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0xb}}], 0x4000000000002d9, 0x10022, 0x0) 1.924768279s ago: executing program 3 (id=320): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) syz_emit_vhci(&(0x7f00000009c0)=@HCI_EVENT_PKT={0x4, @hci_ev_simple_pair_complete={{0x36, 0x7}, {0xa1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0xa) 1.899590449s ago: executing program 0 (id=321): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0xb, 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCGFLAGS1(r2, 0x8004745a, &(0x7f00000019c0)) 1.88797845s ago: executing program 1 (id=322): bpf$PROG_LOAD(0x5, 0x0, 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x2a4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x1210011, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@nfs_export_on}], [], 0x2c}) r3 = socket$packet(0x11, 0x3, 0x300) r4 = dup(r3) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r5, 0x40000000af01, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000b00)) r7 = dup(r6) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000000)={0x1, r7}) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f00000003c0)={0x1, r4}) 1.648754811s ago: executing program 2 (id=323): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe050000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xa0320080, 0x0, 0x0, 0x0, 0x0, 0x0) 1.648522171s ago: executing program 3 (id=324): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x2, @link_local, 'gre0\x00'}}, 0x1e) write$binfmt_aout(r0, 0x0, 0x0) 1.648374251s ago: executing program 0 (id=325): r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0xa8882) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000180), 0x0, 0x0) openat$qrtrtun(0xffffff9c, &(0x7f0000000140), 0x202202) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_mr_cache\x00') write$vga_arbiter(r2, &(0x7f0000000000)=@other={'lock', ' ', 'io'}, 0x8) write$vga_arbiter(r2, &(0x7f00000001c0)=@other={'decodes', ' ', 'none'}, 0xd) socketpair$nbd(0x1, 0x1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.300273472s ago: executing program 3 (id=326): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r1}, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r7, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0xa, 0x0, 0x5, 0x0, 0x0, 0xdf}) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) 1.221042163s ago: executing program 0 (id=327): mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000580)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000000)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file1'}, 0x3a}], [], 0x2f}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r0, &(0x7f0000003040)={0x2020}, 0x2020) 1.001552584s ago: executing program 4 (id=328): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = add_key$user(&(0x7f0000000040), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000700)="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", 0x13c, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f00000004c0), &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000300)="d3fcd708de62b3ff27352e6ac172199fa1e1e6363efa801fab66eeefbfe7293b9450f2f0b475486f2f", 0x29, 0xffffffffffffffff) r5 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000500)="da1103b23d6e9ec7b0960f8a45520fdee8bbafd038af5357cc2bf5969a77a332ef6c7c1a675389b16063696dee3af27a8f971dbce5b93d02d840ee08d2d124e67fa17642c4d99d45aa878237a1663a31f7ef396e4b22", 0x56, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000400)={r4, r3, r5}, 0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={'wp384\x00'}}) 296.697558ms ago: executing program 1 (id=329): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) getpgid(0xffffffffffffffff) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x7a, 0x0, &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x6, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "e6dd3c3d"}, 0x0, 0x1, {0x0}}) close(r2) bpf$PROG_LOAD(0x5, 0x0, 0x0) 296.425988ms ago: executing program 4 (id=330): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000070000000100010009"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630b00c145f94cd977", 0x18, 0xffffffffffffffff) 262.427838ms ago: executing program 0 (id=331): setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000003201"], 0x138) 65.685349ms ago: executing program 3 (id=332): syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000400)=ANY=[], 0x1, 0xf04, &(0x7f0000000f40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x42408058) 228.99µs ago: executing program 0 (id=333): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x8000000, 0x0, 0xff, 0x1, 0x6}, 0x20) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x30dd3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@metacopy_on}], [], 0x2c}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, 0x0) renameat2(r3, &(0x7f0000000380)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r4, &(0x7f0000000040)='./file1\x00', 0x0) 0s ago: executing program 4 (id=334): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000087}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000801000000000000004000000850000000500000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="0500"/12], 0x10) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.98' (ED25519) to the list of known hosts. syzkaller login: [ 53.974380][ T4153] cgroup: Unknown subsys name 'net' [ 54.091136][ T4153] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 55.529869][ T4153] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 56.897717][ T4167] chnl_net:caif_netlink_parms(): no params data found [ 56.930750][ T4168] chnl_net:caif_netlink_parms(): no params data found [ 56.976884][ T4178] chnl_net:caif_netlink_parms(): no params data found [ 57.061281][ T4174] chnl_net:caif_netlink_parms(): no params data found [ 57.081037][ T4167] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.088597][ T4167] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.096960][ T4167] device bridge_slave_0 entered promiscuous mode [ 57.109291][ T4181] chnl_net:caif_netlink_parms(): no params data found [ 57.132787][ T4167] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.140011][ T4167] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.148020][ T4167] device bridge_slave_1 entered promiscuous mode [ 57.185841][ T4167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.197953][ T4167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.275839][ T4178] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.283002][ T4178] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.291119][ T4178] device bridge_slave_0 entered promiscuous mode [ 57.306796][ T4168] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.313851][ T4168] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.322524][ T4168] device bridge_slave_0 entered promiscuous mode [ 57.332591][ T4167] team0: Port device team_slave_0 added [ 57.340801][ T4167] team0: Port device team_slave_1 added [ 57.346744][ T4178] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.353892][ T4178] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.361744][ T4178] device bridge_slave_1 entered promiscuous mode [ 57.379736][ T4168] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.386985][ T4168] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.394944][ T4168] device bridge_slave_1 entered promiscuous mode [ 57.467547][ T4174] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.475190][ T4174] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.483165][ T4174] device bridge_slave_0 entered promiscuous mode [ 57.492784][ T4168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.502883][ T4167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.509903][ T4167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.535950][ T4167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.549797][ T4178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.568055][ T4174] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.575396][ T4174] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.583220][ T4174] device bridge_slave_1 entered promiscuous mode [ 57.591818][ T4168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.601666][ T4167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.609146][ T4167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.635621][ T4167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.653609][ T4178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.663261][ T4181] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.670471][ T4181] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.678681][ T4181] device bridge_slave_0 entered promiscuous mode [ 57.709646][ T4181] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.717254][ T4181] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.725647][ T4181] device bridge_slave_1 entered promiscuous mode [ 57.777072][ T4174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.797020][ T4168] team0: Port device team_slave_0 added [ 57.805483][ T4178] team0: Port device team_slave_0 added [ 57.819993][ T4174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.833128][ T4167] device hsr_slave_0 entered promiscuous mode [ 57.840208][ T4167] device hsr_slave_1 entered promiscuous mode [ 57.853438][ T4168] team0: Port device team_slave_1 added [ 57.860502][ T4178] team0: Port device team_slave_1 added [ 57.867938][ T4181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.908137][ T4181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.919811][ T4174] team0: Port device team_slave_0 added [ 57.957272][ T4174] team0: Port device team_slave_1 added [ 57.976221][ T4181] team0: Port device team_slave_0 added [ 57.982582][ T4178] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.990106][ T4178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.017162][ T4178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.029583][ T4168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.037514][ T4168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.063645][ T4168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.084335][ T4181] team0: Port device team_slave_1 added [ 58.097489][ T4178] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.104438][ T4178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.130676][ T4178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.142433][ T4168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.149698][ T4168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.175842][ T4168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.222124][ T4174] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.229519][ T4174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.255583][ T4174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.271017][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.278563][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.304746][ T4181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.317353][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.324306][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.351796][ T4181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.365156][ T4174] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.372108][ T4174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.398422][ T4174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.457904][ T4168] device hsr_slave_0 entered promiscuous mode [ 58.464891][ T4168] device hsr_slave_1 entered promiscuous mode [ 58.471566][ T4168] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.479905][ T4168] Cannot create hsr debugfs directory [ 58.531806][ T4178] device hsr_slave_0 entered promiscuous mode [ 58.539010][ T4178] device hsr_slave_1 entered promiscuous mode [ 58.545786][ T4178] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.553362][ T4178] Cannot create hsr debugfs directory [ 58.569618][ T4174] device hsr_slave_0 entered promiscuous mode [ 58.576526][ T4174] device hsr_slave_1 entered promiscuous mode [ 58.583127][ T4174] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.590974][ T4174] Cannot create hsr debugfs directory [ 58.597759][ T1334] Bluetooth: hci2: command 0x0409 tx timeout [ 58.604458][ T1334] Bluetooth: hci0: command 0x0409 tx timeout [ 58.604958][ T4169] Bluetooth: hci4: command 0x0409 tx timeout [ 58.610735][ T1334] Bluetooth: hci1: command 0x0409 tx timeout [ 58.623109][ T4169] Bluetooth: hci3: command 0x0409 tx timeout [ 58.635138][ T4181] device hsr_slave_0 entered promiscuous mode [ 58.642115][ T4181] device hsr_slave_1 entered promiscuous mode [ 58.648858][ T4181] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.656456][ T4181] Cannot create hsr debugfs directory [ 58.959151][ T4167] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 58.972644][ T4167] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 58.982685][ T4167] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 58.993771][ T4167] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 59.040463][ T4178] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 59.050336][ T4178] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 59.063727][ T4178] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 59.092296][ T4178] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 59.165605][ T4181] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 59.176096][ T4181] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 59.190882][ T4181] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 59.211508][ T4181] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 59.249365][ T4167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.287875][ T4174] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 59.300280][ T683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.310063][ T683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.326693][ T4174] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 59.339111][ T4167] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.350123][ T4174] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 59.369344][ T683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.379007][ T683] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.388452][ T683] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.395739][ T683] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.405275][ T683] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.428629][ T4168] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 59.442472][ T4174] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 59.459554][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.469656][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.480325][ T3105] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.487493][ T3105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.499699][ T683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.510049][ T4168] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 59.521854][ T4168] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 59.531384][ T4168] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 59.563509][ T4178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.575285][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.584057][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.595351][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.603867][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.623862][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.633206][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.651603][ T4178] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.667121][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.676260][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.703906][ T683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.715065][ T683] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.741144][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.750375][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.760842][ T3105] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.768055][ T3105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.777442][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.792182][ T4167] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.803715][ T4167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.821533][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.830468][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.839134][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.849955][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.858732][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.865823][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.877890][ T4181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.919418][ T683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.929792][ T683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.942297][ T683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.959244][ T683] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.969083][ T683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.978705][ T683] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.987996][ T683] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.013966][ T4178] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 60.026548][ T4178] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.042907][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.066139][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.089306][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.098139][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.107896][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.133967][ T4168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.158568][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.172728][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.187478][ T4181] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.218460][ T4168] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.233183][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.241163][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.251105][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.259037][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.267140][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.277664][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.286285][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.293323][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.301845][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.326097][ T4167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.345782][ T4174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.352739][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.361636][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.371341][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.380303][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.390021][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.397208][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.406378][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.415523][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.424219][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.432814][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.439952][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.448689][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.458823][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.467460][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.474502][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.482642][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.509339][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.520265][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.529407][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.538882][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.548495][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.573298][ T4178] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.588111][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.598100][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.608567][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.617660][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.626587][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.634306][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.643432][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.652550][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.661569][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.670327][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.675905][ T4215] Bluetooth: hci3: command 0x041b tx timeout [ 60.683620][ T4215] Bluetooth: hci4: command 0x041b tx timeout [ 60.696869][ T4215] Bluetooth: hci1: command 0x041b tx timeout [ 60.703000][ T4215] Bluetooth: hci0: command 0x041b tx timeout [ 60.710066][ T4215] Bluetooth: hci2: command 0x041b tx timeout [ 60.719310][ T4168] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 60.731646][ T4168] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.746854][ T4174] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.753795][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.763335][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.772559][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.781340][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.790162][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.798954][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.807598][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.816795][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.825358][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.833816][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.843591][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.855068][ T4181] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.910424][ T4167] device veth0_vlan entered promiscuous mode [ 60.921700][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.932143][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.949191][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.959078][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.967875][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.974992][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.983667][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.992582][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.001324][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.008504][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.016499][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.025922][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.034655][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.042958][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.052243][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.061177][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.069319][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.093186][ T4167] device veth1_vlan entered promiscuous mode [ 61.111031][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.121634][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.139029][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.149050][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.185936][ T4178] device veth0_vlan entered promiscuous mode [ 61.213899][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.221948][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.231197][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.239332][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.248504][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.257675][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.265655][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.282451][ T4174] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 61.293106][ T4174] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.320595][ T4181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.332356][ T4168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.341347][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.350522][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.360066][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.371353][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.380363][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.388458][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.417491][ T4178] device veth1_vlan entered promiscuous mode [ 61.436106][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.450566][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.476361][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.485309][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.496486][ T4167] device veth0_macvtap entered promiscuous mode [ 61.553137][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.563124][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.572563][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.582458][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.601091][ T4167] device veth1_macvtap entered promiscuous mode [ 61.619623][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.636348][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.645176][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.659786][ T4178] device veth0_macvtap entered promiscuous mode [ 61.674052][ T4178] device veth1_macvtap entered promiscuous mode [ 61.695586][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.704316][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.713090][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.722209][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.733567][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.741617][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.750802][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.760063][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.767846][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.781623][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.791883][ T4168] device veth0_vlan entered promiscuous mode [ 61.805424][ T4174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.828172][ T4168] device veth1_vlan entered promiscuous mode [ 61.840019][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.853807][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.866493][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.878356][ T4178] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.896226][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.904256][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.913206][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.922518][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.932155][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.942878][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.952861][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.970122][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.981372][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.991963][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.005116][ T4178] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.019797][ T4178] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.029287][ T4178] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.039083][ T4178] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.049102][ T4178] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.061503][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.069883][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.078891][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.088379][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.097696][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.106760][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.116241][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.124901][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.132699][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.142964][ T4167] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.152301][ T4167] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.161352][ T4167] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.161416][ T4167] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.192435][ T4181] device veth0_vlan entered promiscuous mode [ 62.239481][ T4168] device veth0_macvtap entered promiscuous mode [ 62.251714][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.262073][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.294091][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.304231][ T4181] device veth1_vlan entered promiscuous mode [ 62.320526][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.328903][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.345748][ T4168] device veth1_macvtap entered promiscuous mode [ 62.360201][ T4174] device veth0_vlan entered promiscuous mode [ 62.370864][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.380162][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.388717][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.441418][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.450698][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.473460][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.473606][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.488689][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.494057][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.509867][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.520868][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.533281][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.541701][ T4181] device veth0_macvtap entered promiscuous mode [ 62.551534][ T4174] device veth1_vlan entered promiscuous mode [ 62.567512][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.577215][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.585602][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.593426][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.602852][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.615135][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.629064][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.639265][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.649892][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.661918][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.678294][ T4168] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.687459][ T4168] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.697310][ T4168] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.706390][ T4168] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.724024][ T4181] device veth1_macvtap entered promiscuous mode [ 62.737484][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.746120][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.754167][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.762590][ T4215] Bluetooth: hci2: command 0x040f tx timeout [ 62.768839][ T4215] Bluetooth: hci0: command 0x040f tx timeout [ 62.773390][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.775335][ T4215] Bluetooth: hci1: command 0x040f tx timeout [ 62.790002][ T4215] Bluetooth: hci4: command 0x040f tx timeout [ 62.797322][ T4215] Bluetooth: hci3: command 0x040f tx timeout [ 62.829026][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.833603][ T4174] device veth0_macvtap entered promiscuous mode [ 62.843876][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.859089][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.868208][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.877330][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.892490][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.903941][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.914605][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.926122][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.936229][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.946990][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.958779][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.978179][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.985932][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.986876][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.993893][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.009721][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.019459][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.038337][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.050069][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.060437][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.071137][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.082005][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.092590][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.104783][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.118710][ T4174] device veth1_macvtap entered promiscuous mode [ 63.135405][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.143544][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.155803][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.168131][ T4181] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.180486][ T4181] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.193658][ T4181] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.203837][ T4181] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.233284][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.253142][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.263384][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.274282][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.284225][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.294954][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.305129][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.317183][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.328515][ T4174] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.362358][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.371487][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.373141][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.417980][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.428312][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.438666][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.450445][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.461691][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.492699][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.502870][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.514677][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.524798][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.541105][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.553368][ T4174] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.619002][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.652759][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.732573][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.743885][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.752798][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.026275][ T4174] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.197427][ T4174] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.332542][ T4174] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.557405][ T4174] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.723296][ T683] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.737345][ T683] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.751446][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.810133][ T683] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.818682][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.835662][ T13] Bluetooth: hci3: command 0x0419 tx timeout [ 64.846492][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.851890][ T683] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.861735][ T13] Bluetooth: hci4: command 0x0419 tx timeout [ 64.882342][ T13] Bluetooth: hci1: command 0x0419 tx timeout [ 64.891032][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.903214][ T13] Bluetooth: hci0: command 0x0419 tx timeout [ 64.925083][ T13] Bluetooth: hci2: command 0x0419 tx timeout [ 64.954728][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.971536][ T683] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.991490][ T683] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.003240][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.029116][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.042028][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.068866][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.174997][ T4212] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 65.248527][ T4259] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 65.414915][ T4212] usb 4-1: Using ep0 maxpacket: 16 [ 65.510380][ T4252] loop2: detected capacity change from 0 to 32768 [ 65.660237][ T4252] ======================================================= [ 65.660237][ T4252] WARNING: The mand mount option has been deprecated and [ 65.660237][ T4252] and is ignored by this kernel. Remove the mand [ 65.660237][ T4252] option from the mount to silence this warning. [ 65.660237][ T4252] ======================================================= [ 66.242021][ T4212] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 66.307977][ T4212] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 66.389095][ T4212] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.427355][ T4257] loop1: detected capacity change from 0 to 32768 [ 66.488059][ T4212] usb 4-1: config 0 descriptor?? [ 66.500653][ T4159] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by udevd (4159) [ 66.527766][ T4252] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 66.537388][ T4216] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 66.583236][ T4212] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input5 [ 67.416814][ T3532] bcm5974 4-1:0.0: could not read from device [ 67.439826][ T4212] usb 4-1: USB disconnect, device number 2 [ 67.446464][ T3532] bcm5974 4-1:0.0: could not read from device [ 67.464778][ T4257] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 67.496398][ T4257] BTRFS info (device loop1): using free space tree [ 67.506310][ T4216] usb 5-1: Using ep0 maxpacket: 32 [ 67.517201][ T4257] BTRFS info (device loop1): has skinny extents [ 67.569621][ T4275] syz.2.3 (4275) used greatest stack depth: 19968 bytes left [ 67.644918][ T4216] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 67.670142][ T4216] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 67.735173][ T4167] ocfs2: Unmounting device (7,2) on (node local) [ 67.744166][ T4257] BTRFS info (device loop1): enabling ssd optimizations [ 67.752294][ T4216] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 67.791624][ T4216] usb 5-1: config 1 has no interface number 0 [ 67.802583][ T4216] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 67.942441][ T4216] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 67.998876][ T4216] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 68.010860][ T4216] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.079072][ T4216] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 68.112772][ T4303] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11'. [ 68.215110][ T4216] snd_usb_pod 5-1:1.1: set_interface failed [ 68.225293][ T4216] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 68.258150][ T4303] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.272139][ T4216] snd_usb_pod: probe of 5-1:1.1 failed with error -71 [ 68.314855][ T4216] usb 5-1: USB disconnect, device number 2 [ 68.579207][ T4316] loop0: detected capacity change from 0 to 256 [ 69.425852][ T4316] FAT-fs (loop0): Directory bread(block 64) failed [ 69.434754][ T4316] FAT-fs (loop0): Directory bread(block 65) failed [ 69.441387][ T4316] FAT-fs (loop0): Directory bread(block 66) failed [ 69.474801][ T4316] FAT-fs (loop0): Directory bread(block 67) failed [ 69.485133][ T4316] FAT-fs (loop0): Directory bread(block 68) failed [ 69.588690][ T4316] FAT-fs (loop0): Directory bread(block 69) failed [ 69.601211][ T4303] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.638723][ T4316] FAT-fs (loop0): Directory bread(block 70) failed [ 69.674522][ T4316] FAT-fs (loop0): Directory bread(block 71) failed [ 69.681543][ T4316] FAT-fs (loop0): Directory bread(block 72) failed [ 69.729598][ T4316] FAT-fs (loop0): Directory bread(block 73) failed [ 70.493725][ T4326] sched: RT throttling activated [ 70.651162][ T4329] loop1: detected capacity change from 0 to 512 [ 70.761105][ T4303] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.970788][ T4329] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 70.982710][ T4329] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.385691][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.392375][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.754338][ T4303] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.412099][ T4303] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.437693][ T4303] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.457059][ T4303] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.491644][ T4303] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.618983][ T4362] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 73.627538][ T4364] loop4: detected capacity change from 0 to 256 [ 73.934682][ T4216] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 73.962446][ T4368] Zero length message leads to an empty skb [ 73.986531][ T4357] loop2: detected capacity change from 0 to 32768 [ 74.043992][ T4357] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.23 (4357) [ 74.067539][ T4350] loop3: detected capacity change from 0 to 32768 [ 74.095960][ T4357] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 74.111655][ T4357] BTRFS info (device loop2): using free space tree [ 74.120106][ T4357] BTRFS info (device loop2): has skinny extents [ 74.184852][ T4216] usb 1-1: Using ep0 maxpacket: 32 [ 74.201367][ T4350] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 74.313661][ T4216] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 74.336229][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 74.346331][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 74.446675][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 74.575572][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #29a!!! [ 74.790300][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10!!! [ 74.910324][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 74.964764][ T4216] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 74.999834][ T4216] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 75.028415][ T4216] usb 1-1: config 1 has no interface number 0 [ 75.038965][ T4216] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 75.053142][ T4216] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 75.073084][ T4216] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 75.093654][ T4216] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.120957][ T4357] BTRFS info (device loop2): enabling ssd optimizations [ 75.267271][ T4216] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 75.294387][ T4178] ocfs2: Unmounting device (7,3) on (node local) [ 75.328093][ T4405] loop1: detected capacity change from 0 to 128 [ 75.509454][ T4405] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 75.625073][ T4405] ext4 filesystem being mounted at /9/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 76.618182][ T4216] snd_usb_pod 1-1:1.1: set_interface failed [ 76.625713][ T4216] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 76.684280][ T4216] snd_usb_pod: probe of 1-1:1.1 failed with error -71 [ 76.746504][ T4216] usb 1-1: USB disconnect, device number 2 [ 79.018409][ T4433] loop3: detected capacity change from 0 to 4096 [ 79.181981][ T4422] loop2: detected capacity change from 0 to 32768 [ 79.408626][ T1334] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 79.993102][ T4438] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 80.048359][ T1334] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 80.095608][ T1334] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 80.199198][ T1334] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 80.277473][ T1334] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 80.317266][ T1334] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.439719][ T1334] usb 1-1: invalid MIDI out EP 0 [ 80.991036][ T4450] bridge0: port 3(gretap0) entered blocking state [ 80.998010][ T4450] bridge0: port 3(gretap0) entered disabled state [ 81.013209][ T4450] device gretap0 entered promiscuous mode [ 81.022830][ T4450] bridge0: port 3(gretap0) entered blocking state [ 81.029571][ T4450] bridge0: port 3(gretap0) entered forwarding state [ 81.056461][ T4450] device gretap0 left promiscuous mode [ 81.062818][ T4450] bridge0: port 3(gretap0) entered disabled state [ 81.181878][ T1334] snd-usb-audio: probe of 1-1:27.0 failed with error -22 [ 81.345316][ T4452] udevd[4452]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 81.437334][ T1334] usb 1-1: USB disconnect, device number 3 [ 81.495254][ T1107] cfg80211: failed to load regulatory.db [ 81.844357][ T4461] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 82.537492][ T4308] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 82.631165][ T4445] loop4: detected capacity change from 0 to 32768 [ 82.853895][ T4445] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 82.954765][ T4308] usb 2-1: Using ep0 maxpacket: 32 [ 83.135787][ T4308] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 83.204393][ T4308] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 83.346633][ T4308] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 83.497316][ T4308] usb 2-1: config 1 has no interface number 0 [ 83.693041][ T4308] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 83.724637][ T4308] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 83.759344][ T4308] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 83.776794][ T4308] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.862001][ T4308] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 83.877022][ T4181] ocfs2: Unmounting device (7,4) on (node local) [ 83.956976][ T4457] loop3: detected capacity change from 0 to 32768 [ 83.980432][ T4476] netlink: 4 bytes leftover after parsing attributes in process `syz.0.50'. [ 84.033526][ T4476] netlink: 28 bytes leftover after parsing attributes in process `syz.0.50'. [ 84.081632][ T4457] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.45 (4457) [ 84.240281][ T4457] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 84.266692][ T4457] BTRFS info (device loop3): using free space tree [ 84.303940][ T4457] BTRFS info (device loop3): has skinny extents [ 84.558686][ T4308] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 86.104021][ T1107] snd_usb_pod 2-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 86.240585][ T4499] usb 2-1: USB disconnect, device number 2 [ 86.265620][ T4499] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 86.326602][ T4457] BTRFS error (device loop3): open_ctree failed [ 86.425096][ T4513] loop0: detected capacity change from 0 to 128 [ 86.586989][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 86.596390][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 86.605477][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 86.607146][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 87.412680][ T4513] EXT4-fs (loop0): Test dummy encryption mode enabled [ 87.433981][ T4538] syz.3.59[4538] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 87.434474][ T4538] syz.3.59[4538] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 87.471370][ T4513] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 87.506135][ T4513] ext4 filesystem being mounted at /12/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 87.658374][ T4518] crypto_alloc_aead failed rc=-4 [ 88.165362][ T4553] fscrypt (loop0): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 89.065690][ T4572] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 89.151601][ T4579] loop1: detected capacity change from 0 to 1024 [ 89.252975][ T4579] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 89.274809][ T4579] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.330919][ T26] audit: type=1326 audit(1731795184.644:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4581 comm="syz.3.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e01157719 code=0x7ffc0000 [ 89.374790][ T7] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 89.395981][ T4583] loop3: detected capacity change from 0 to 512 [ 89.414705][ T26] audit: type=1326 audit(1731795184.694:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4581 comm="syz.3.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e01157719 code=0x7ffc0000 [ 89.518401][ T4583] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 89.555167][ T4583] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.618372][ T4583] EXT4-fs error (device loop3): ext4_xattr_block_get:546: inode #15: comm syz.3.81: corrupted xattr block 32 [ 89.632354][ T7] usb 3-1: Using ep0 maxpacket: 32 [ 89.775730][ T7] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 89.802637][ T7] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 89.907683][ T7] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 90.005992][ T7] usb 3-1: config 1 has no interface number 0 [ 90.063184][ T7] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 90.075146][ T26] audit: type=1326 audit(1731795185.184:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4581 comm="syz.3.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1e01157719 code=0x7ffc0000 [ 90.212191][ T7] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 90.278807][ T26] audit: type=1326 audit(1731795185.234:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4581 comm="syz.3.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e01157719 code=0x7ffc0000 [ 90.372839][ T26] audit: type=1326 audit(1731795185.244:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4581 comm="syz.3.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e01157719 code=0x7ffc0000 [ 90.379407][ T7] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 90.484987][ T26] audit: type=1326 audit(1731795185.554:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4581 comm="syz.3.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1e01157719 code=0x7ffc0000 [ 90.494088][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.506993][ C1] vkms_vblank_simulate: vblank timer overrun [ 90.553761][ T26] audit: type=1326 audit(1731795185.554:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4581 comm="syz.3.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e01157719 code=0x7ffc0000 [ 90.575737][ C1] vkms_vblank_simulate: vblank timer overrun [ 90.594023][ T4584] loop4: detected capacity change from 0 to 32768 [ 90.641768][ T7] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 90.649055][ T26] audit: type=1326 audit(1731795185.554:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4581 comm="syz.3.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e01157719 code=0x7ffc0000 [ 90.689307][ T4584] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.70 (4584) [ 90.729420][ T4304] libceph: connect (1)[c::]:6789 error -101 [ 90.746149][ T4304] libceph: mon0 (1)[c::]:6789 connect error [ 90.752764][ T26] audit: type=1326 audit(1731795185.564:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4581 comm="syz.3.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1e01157719 code=0x7ffc0000 [ 90.774816][ C1] vkms_vblank_simulate: vblank timer overrun [ 90.784467][ T4608] ceph: No mds server is up or the cluster is laggy [ 90.795420][ T4304] libceph: connect (1)[c::]:6789 error -101 [ 90.801603][ T4304] libceph: mon0 (1)[c::]:6789 connect error [ 90.810028][ T4584] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 90.829071][ T4584] BTRFS info (device loop4): using free space tree [ 90.845935][ T4584] BTRFS info (device loop4): has skinny extents [ 90.853376][ T26] audit: type=1326 audit(1731795185.574:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4581 comm="syz.3.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e01157719 code=0x7ffc0000 [ 90.875504][ C1] vkms_vblank_simulate: vblank timer overrun [ 90.896351][ T4574] loop0: detected capacity change from 0 to 32768 [ 91.138598][ T4629] loop3: detected capacity change from 0 to 4096 [ 91.158632][ T4574] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 91.195404][ T7] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 91.215985][ T4629] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 91.340436][ T4584] BTRFS info (device loop4): enabling ssd optimizations [ 91.704104][ T4649] loop_set_status: loop0 () has still dirty pages (nrpages=8) [ 92.275487][ T7] snd_usb_pod 3-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 92.539825][ T4174] ocfs2: Unmounting device (7,0) on (node local) [ 92.639515][ T4665] loop1: detected capacity change from 0 to 1024 [ 92.698575][ T4499] usb 3-1: USB disconnect, device number 2 [ 92.717088][ T4499] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 92.851993][ T4665] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,lazytime,noblock_validity,,errors=continue. Quota mode: none. [ 93.830282][ T4308] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 93.898126][ T4672] loop3: detected capacity change from 0 to 40427 [ 94.101714][ T4308] usb 1-1: Using ep0 maxpacket: 16 [ 94.147579][ T4672] F2FS-fs (loop3): invalid crc value [ 94.206925][ T4672] F2FS-fs (loop3): Found nat_bits in checkpoint [ 94.889871][ T4694] Process accounting resumed [ 94.942686][ T4308] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.964482][ T4308] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.976208][ T4308] usb 1-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 94.985423][ T4308] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.005512][ T4308] usb 1-1: config 0 descriptor?? [ 95.286949][ T4672] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0 [ 97.511412][ T4713] loop0: detected capacity change from 0 to 64 [ 97.544977][ T4308] usbhid 1-1:0.0: can't add hid device: -71 [ 97.552212][ T4308] usbhid: probe of 1-1:0.0 failed with error -71 [ 97.582317][ T4308] usb 1-1: USB disconnect, device number 4 [ 98.239866][ T26] kauditd_printk_skb: 32 callbacks suppressed [ 98.239882][ T26] audit: type=1800 audit(1731795193.267:44): pid=4713 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.92" name="file1" dev="loop0" ino=18 res=0 errno=0 [ 99.299814][ T4730] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 99.577308][ T4736] loop1: detected capacity change from 0 to 8 [ 100.579344][ T4743] netlink: 4 bytes leftover after parsing attributes in process `syz.4.100'. [ 101.439687][ T4419] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 103.997896][ T4419] usb 3-1: Using ep0 maxpacket: 8 [ 104.787186][ T4767] Cannot find add_set index 0 as target [ 105.332906][ T4419] usb 3-1: unable to read config index 0 descriptor/all [ 105.356274][ T4419] usb 3-1: can't read configurations, error -71 [ 105.973550][ T4499] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 106.249626][ T4499] usb 4-1: Using ep0 maxpacket: 32 [ 106.368840][ T4499] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.463217][ T4499] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.505976][ T4499] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 106.566977][ T4499] usb 4-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 106.612876][ T4499] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.648693][ T4499] usb 4-1: config 0 descriptor?? [ 106.930477][ T4787] loop4: detected capacity change from 0 to 32768 [ 106.979442][ T4216] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 107.027207][ T4797] loop2: detected capacity change from 0 to 32768 [ 107.063046][ T4787] XFS (loop4): Mounting V5 Filesystem [ 107.083042][ T4805] loop0: detected capacity change from 0 to 32768 [ 107.095642][ T4797] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.118 (4797) [ 107.113723][ T4797] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 107.129739][ T4797] BTRFS info (device loop2): using free space tree [ 107.136478][ T4797] BTRFS info (device loop2): has skinny extents [ 107.156719][ T4787] XFS (loop4): Ending clean mount [ 107.164824][ T4805] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.121 (4805) [ 107.203213][ T4787] XFS (loop4): Quotacheck needed: Please wait. [ 107.229870][ T4216] usb 2-1: Using ep0 maxpacket: 16 [ 107.241790][ T4805] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 107.255168][ T4805] BTRFS info (device loop0): using free space tree [ 107.262093][ T4805] BTRFS info (device loop0): has skinny extents [ 107.325301][ T4787] XFS (loop4): Quotacheck: Done. [ 107.346892][ T4216] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.394759][ T4216] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 107.422192][ T4216] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.450776][ T3067] BTRFS warning (device loop2): checksum verify failed on 5341184 wanted 0xc53d3c5bb04ba5dfc01f4c277f0b81815915cb99da5074f609a3f7f617cf284a found 0xcdc4403faaff968e0982b3168142692f30fabb7d4c779447005ee6961d0a5a3f level 0 [ 107.483354][ T4797] BTRFS warning (device loop2): failed to read root (objectid=10): -5 [ 107.530725][ T4216] usb 2-1: config 0 descriptor?? [ 107.589185][ T4216] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input7 [ 107.625311][ T4797] BTRFS error (device loop2): open_ctree failed [ 107.677252][ T4805] BTRFS info (device loop0): enabling ssd optimizations [ 107.793622][ T3532] bcm5974 2-1:0.0: could not read from device [ 107.824594][ T4216] bcm5974 2-1:0.0: could not read from device [ 108.055588][ T3532] bcm5974 2-1:0.0: could not read from device [ 108.078689][ T4216] input: failed to attach handler mousedev to device input7, error: -5 [ 108.119294][ T4216] usb 2-1: USB disconnect, device number 3 [ 108.125569][ T3532] bcm5974 2-1:0.0: could not read from device [ 108.244108][ T4861] loop0: detected capacity change from 0 to 2048 [ 108.406092][ T4861] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 108.420894][ T4861] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 110.014739][ T4854] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 110.052123][ T4854] Bluetooth: hci2: Injecting HCI hardware error event [ 110.061060][ T4184] Bluetooth: hci2: hardware error 0x00 [ 110.082325][ T4499] usbhid 4-1:0.0: can't add hid device: -71 [ 110.093197][ T4499] usbhid: probe of 4-1:0.0 failed with error -71 [ 110.113280][ T4499] usb 4-1: USB disconnect, device number 3 [ 110.138152][ T4787] XFS (loop4): User initiated shutdown received. [ 110.156000][ T4787] XFS (loop4): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x10c/0x150 (fs/xfs/xfs_fsops.c:481). Shutting down filesystem. [ 110.171031][ T4787] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 110.182357][ T4869] input: syz0 as /devices/virtual/input/input8 [ 110.186076][ T4871] netlink: 'syz.2.126': attribute type 10 has an invalid length. [ 110.319669][ T4871] device syz_tun entered promiscuous mode [ 110.424027][ T4181] XFS (loop4): Unmounting Filesystem [ 110.448170][ T4871] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 110.517098][ T4881] xt_nat: multiple ranges no longer supported [ 111.087645][ T4871] syz.2.126 (4871) used greatest stack depth: 18840 bytes left [ 111.206849][ T4885] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 111.223209][ T4885] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 111.258394][ T4885] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 111.406221][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 111.424218][ T4896] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 111.714653][ T4902] loop2: detected capacity change from 0 to 1024 [ 111.887728][ T4902] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 111.898608][ T4902] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 111.909676][ T4902] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 112.015294][ T4902] journal_init_common: Cannot get buffer for journal superblock [ 112.024005][ T4902] EXT4-fs (loop2): Could not load journal inode [ 112.855213][ T4912] loop1: detected capacity change from 0 to 1024 [ 113.987057][ T4396] hfsplus: b-tree write err: -5, ino 4 [ 114.539323][ T4915] delete_channel: no stack [ 115.017793][ T4931] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 115.537449][ T4916] loop0: detected capacity change from 0 to 32768 [ 116.215990][ T4186] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by udevd (4186) [ 116.369177][ T4946] loop4: detected capacity change from 0 to 32768 [ 120.844358][ T4990] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 123.150808][ T4307] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 123.362838][ T4309] libceph: connect (1)[c::]:6789 error -101 [ 123.370451][ T4309] libceph: mon0 (1)[c::]:6789 connect error [ 123.385202][ T4309] libceph: connect (1)[c::]:6789 error -101 [ 123.392317][ T4309] libceph: mon0 (1)[c::]:6789 connect error [ 123.576093][ T4307] usb 2-1: Using ep0 maxpacket: 32 [ 123.585604][ T5004] ceph: No mds server is up or the cluster is laggy [ 123.654154][ T4304] libceph: connect (1)[c::]:6789 error -101 [ 123.660264][ T4304] libceph: mon0 (1)[c::]:6789 connect error [ 123.711009][ T5015] netlink: 4 bytes leftover after parsing attributes in process `syz.2.172'. [ 123.723692][ T4307] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 123.903008][ T4307] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 123.941849][ T4307] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 123.968282][ T4307] usb 2-1: Product: syz [ 123.984442][ T4307] usb 2-1: Manufacturer: syz [ 123.989278][ T4307] usb 2-1: SerialNumber: syz [ 124.001792][ T4307] usb 2-1: config 0 descriptor?? [ 124.011120][ T4499] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 124.052338][ T4307] usb 2-1: can't set config #0, error -71 [ 124.073788][ T4307] usb 2-1: USB disconnect, device number 4 [ 124.384668][ T4499] usb 1-1: Using ep0 maxpacket: 16 [ 124.592327][ T4499] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.615808][ T4499] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 124.643994][ T4499] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.685078][ T4499] usb 1-1: config 0 descriptor?? [ 124.735579][ T4499] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input9 [ 124.925697][ T5037] netlink: 132 bytes leftover after parsing attributes in process `syz.3.179'. [ 124.997006][ T3532] bcm5974 1-1:0.0: could not read from device [ 125.013136][ T4499] usb 1-1: USB disconnect, device number 5 [ 125.019948][ T5013] bcm5974 1-1:0.0: could not read from device [ 125.135017][ T3532] bcm5974 1-1:0.0: could not read from device [ 125.347061][ T3532] bcm5974 1-1:0.0: could not read from device [ 125.474593][ T3532] bcm5974 1-1:0.0: could not read from device [ 126.332088][ T5051] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 127.760620][ T5065] netlink: 4 bytes leftover after parsing attributes in process `syz.1.186'. [ 127.844358][ T5072] loop3: detected capacity change from 0 to 164 [ 127.953759][ T5074] loop2: detected capacity change from 0 to 64 [ 127.989378][ T5072] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet. [ 128.151702][ T5077] loop4: detected capacity change from 0 to 1024 [ 128.390191][ T5077] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 128.406952][ T5077] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 128.418013][ T5077] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 128.443431][ T5077] journal_init_common: Cannot get buffer for journal superblock [ 128.451563][ T5077] EXT4-fs (loop4): Could not load journal inode [ 128.636364][ T26] audit: type=1800 audit(1731795224.382:45): pid=5074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.190" name="file1" dev="loop2" ino=18 res=0 errno=0 [ 129.186340][ T5082] loop4: detected capacity change from 0 to 4096 [ 132.237888][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.246030][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.139327][ T4216] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 137.599237][ T5126] loop4: detected capacity change from 0 to 1024 [ 139.062375][ T5128] loop1: detected capacity change from 0 to 64 [ 139.837545][ T5126] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 139.847669][ T5126] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 139.858966][ T5126] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 139.873273][ T5126] journal_init_common: Cannot get buffer for journal superblock [ 139.881116][ T5126] EXT4-fs (loop4): Could not load journal inode [ 139.893856][ T26] audit: type=1800 audit(1731795235.678:46): pid=5128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.205" name="file1" dev="loop1" ino=18 res=0 errno=0 [ 140.101400][ T5134] loop0: detected capacity change from 0 to 4096 [ 140.445668][ T5134] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 140.566122][ T4216] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 141.029643][ T5131] loop3: detected capacity change from 0 to 32768 [ 141.227313][ T5131] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.208 (5131) [ 141.575436][ T5131] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 141.621701][ T5161] syz.2.219[5161] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 141.623759][ T5161] syz.2.219[5161] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 141.707623][ T5131] BTRFS info (device loop3): using free space tree [ 141.784996][ T5131] BTRFS info (device loop3): has skinny extents [ 141.804473][ T4216] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 141.816261][ T4216] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 141.827318][ T4216] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 141.840857][ T4216] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 141.864872][ T4216] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.869855][ T5165] No such timeout policy "syz0" [ 143.270128][ T4216] usb 2-1: invalid MIDI out EP 0 [ 143.300918][ T4216] snd-usb-audio: probe of 2-1:27.0 failed with error -22 [ 143.310026][ T4216] usb 2-1: USB disconnect, device number 5 [ 143.328119][ T4452] udevd[4452]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 143.383548][ T5131] BTRFS error (device loop3): open_ctree failed [ 144.729519][ T4415] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 144.816637][ T4310] Bluetooth: hci4: command 0x0405 tx timeout [ 145.040375][ T4415] usb 3-1: Using ep0 maxpacket: 16 [ 145.137204][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 145.171570][ T4415] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.286634][ T4415] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 145.520308][ T4415] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.567873][ T4415] usb 3-1: config 0 descriptor?? [ 145.633222][ T4415] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input10 [ 145.738447][ T5213] loop1: detected capacity change from 0 to 4096 [ 145.778066][ T5216] netlink: 4 bytes leftover after parsing attributes in process `syz.4.233'. [ 145.810239][ T5216] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.824568][ T5213] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 145.928367][ T5216] device bridge_slave_1 left promiscuous mode [ 145.945513][ T5216] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.015149][ T3532] bcm5974 3-1:0.0: could not read from device [ 146.079229][ T4415] bcm5974 3-1:0.0: could not read from device [ 146.109087][ T3532] bcm5974 3-1:0.0: could not read from device [ 146.116873][ T4415] input: failed to attach handler mousedev to device input10, error: -5 [ 146.151153][ T4415] usb 3-1: USB disconnect, device number 6 [ 146.165029][ T3532] bcm5974 3-1:0.0: could not read from device [ 146.182341][ T3532] bcm5974 3-1:0.0: could not read from device [ 146.412318][ T4216] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 147.618820][ T4216] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 147.658481][ T4216] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 147.691408][ T4216] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 147.718721][ T4216] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 148.542980][ T4216] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.591825][ T5252] loop0: detected capacity change from 0 to 1024 [ 148.602042][ T4216] usb 4-1: invalid MIDI out EP 0 [ 148.619206][ T5254] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 148.666338][ T4216] snd-usb-audio: probe of 4-1:27.0 failed with error -22 [ 148.808853][ T4453] udevd[4453]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 148.924143][ T4216] usb 4-1: USB disconnect, device number 4 [ 149.176909][ T5238] loop4: detected capacity change from 0 to 32768 [ 149.218437][ T5263] ceph: No mds server is up or the cluster is laggy [ 149.227018][ T4247] libceph: connect (1)[c::]:6789 error -101 [ 149.233141][ T4247] libceph: mon0 (1)[c::]:6789 connect error [ 149.649131][ T5246] loop1: detected capacity change from 0 to 40427 [ 149.750174][ T5273] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 149.865249][ T5238] BTRFS: device fsid d4515e72-4b5f-44ec-805d-b3edf811e7f1 devid 1 transid 8 /dev/loop4 scanned by syz.4.242 (5238) [ 149.906539][ T5246] F2FS-fs (loop1): Wrong SIT boundary, start(1536) end(2560) blocks(512) [ 149.940521][ T4184] Bluetooth: hci0: link tx timeout [ 149.948289][ T5238] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 149.948992][ T4184] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 149.962135][ T5246] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 150.041960][ T5238] BTRFS info (device loop4): using free space tree [ 150.049145][ T5238] BTRFS info (device loop4): has skinny extents [ 150.057645][ T5246] F2FS-fs (loop1): Unrecognized mount option "errors=continue" or missing value [ 150.098301][ T5288] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 151.519891][ T5238] BTRFS error (device loop4): open_ctree failed [ 152.167822][ T4417] Bluetooth: hci0: command 0x0406 tx timeout [ 156.371961][ T5341] loop1: detected capacity change from 0 to 512 [ 157.098358][ T5341] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=2802c018, mo2=0002] [ 157.133923][ T5341] System zones: 0-2, 18-18, 34-35 [ 157.240045][ T5351] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 157.310447][ T5341] EXT4-fs (loop1): mounted filesystem without journal. Opts: lazytime,noinit_itable,debug,,errors=continue. Quota mode: writeback. [ 157.335838][ T5341] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.769608][ T5361] loop2: detected capacity change from 0 to 32768 [ 158.974544][ T5361] JBD2: Ignoring recovery information on journal [ 160.140715][ T5388] loop1: detected capacity change from 0 to 2048 [ 160.389132][ T5361] JBD2: recovery failed [ 160.395931][ T5361] (syz.2.278,5361,1):ocfs2_journal_load:1083 ERROR: Failed to load journal! [ 160.420707][ T5361] (syz.2.278,5361,0):ocfs2_check_volume:2429 ERROR: ocfs2 journal load failed! -5 [ 160.444874][ T5361] (syz.2.278,5361,1):ocfs2_check_volume:2485 ERROR: status = -5 [ 160.548839][ T5361] (syz.2.278,5361,0):ocfs2_mount_volume:1824 ERROR: status = -5 [ 160.564283][ T5388] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 160.624895][ T5388] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.661872][ T5361] (syz.2.278,5361,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 160.718171][ T5400] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 161.988712][ T5405] No such timeout policy "syz0" [ 165.302310][ T5435] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 165.360526][ T5435] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 165.428654][ T5435] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 165.459722][ T5440] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 166.021706][ T5426] loop1: detected capacity change from 0 to 32768 [ 166.039326][ T5452] No such timeout policy "syz0" [ 168.114947][ T26] audit: type=1326 audit(1731795264.185:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5464 comm="syz.0.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f583c7719 code=0x7ffc0000 [ 168.245764][ T26] audit: type=1326 audit(1731795264.226:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5464 comm="syz.0.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f9f583c7719 code=0x7ffc0000 [ 168.347038][ T5469] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 168.391120][ T26] audit: type=1326 audit(1731795264.226:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5464 comm="syz.0.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f583c7719 code=0x7ffc0000 [ 168.444541][ T26] audit: type=1326 audit(1731795264.236:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5464 comm="syz.0.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f9f583c7719 code=0x7ffc0000 [ 168.516346][ T5473] loop3: detected capacity change from 0 to 512 [ 168.539425][ T26] audit: type=1326 audit(1731795264.236:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5464 comm="syz.0.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f583c7719 code=0x7ffc0000 [ 168.602545][ T26] audit: type=1326 audit(1731795264.236:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5464 comm="syz.0.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f583c7719 code=0x7ffc0000 [ 168.739125][ T26] audit: type=1326 audit(1731795264.236:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5464 comm="syz.0.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f9f583c7719 code=0x7ffc0000 [ 168.823732][ T26] audit: type=1326 audit(1731795264.246:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5464 comm="syz.0.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 168.854038][ T5473] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,bsddf,. Quota mode: writeback. [ 168.866641][ T5473] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.879070][ T26] audit: type=1326 audit(1731795264.246:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5464 comm="syz.0.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f583c7719 code=0x7ffc0000 [ 168.909543][ T26] audit: type=1326 audit(1731795264.246:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5464 comm="syz.0.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f583c7719 code=0x7ffc0000 [ 169.979457][ T5505] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 170.473373][ T5514] overlayfs: overlapping lowerdir path [ 171.762372][ C0] ------------[ cut here ]------------ [ 171.768186][ C0] WARNING: CPU: 0 PID: 5527 at net/mac80211/tx.c:4851 __ieee80211_beacon_get+0x183d/0x2080 [ 171.778328][ C0] Modules linked in: [ 171.782331][ C0] CPU: 0 PID: 5527 Comm: syz.1.329 Not tainted 5.15.172-syzkaller #0 [ 171.790489][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 171.798056][ T5532] loop3: detected capacity change from 0 to 4096 [ 171.800719][ C0] RIP: 0010:__ieee80211_beacon_get+0x183d/0x2080 [ 171.800768][ C0] Code: ff e8 17 cd b4 f7 0f 0b e9 4b fa ff ff e8 0b cd b4 f7 0f 0b e9 3b fe ff ff e8 ff cc b4 f7 0f 0b e9 06 ee ff ff e8 f3 cc b4 f7 <0f> 0b e9 91 f0 ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 2d ea [ 171.833223][ C0] RSP: 0018:ffffc90000007840 EFLAGS: 00010246 [ 171.839439][ C0] RAX: ffffffff89cba6ad RBX: 0000000000000000 RCX: ffff88805e7a8000 [ 171.847476][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 171.855603][ C0] RBP: ffffc90000007a70 R08: ffffffff89cb9738 R09: ffffffff89cb910b [ 171.863679][ C0] R10: 0000000000000003 R11: ffff88805e7a8000 R12: dffffc0000000000 [ 171.871702][ C0] R13: ffff888062ab0c80 R14: ffff888062ab2298 R15: 1ffff92000000f18 [ 171.879685][ C0] FS: 00007f8df08266c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 171.888634][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 171.895231][ C0] CR2: 000000110c3a7bd1 CR3: 000000005b806000 CR4: 00000000003506f0 [ 171.903214][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 171.911224][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 171.919224][ C0] Call Trace: [ 171.922498][ C0] [ 171.925331][ C0] ? __warn+0x15b/0x300 [ 171.929521][ C0] ? __ieee80211_beacon_get+0x183d/0x2080 [ 171.935231][ C0] ? report_bug+0x1b7/0x2e0 [ 171.939747][ C0] ? handle_bug+0x3d/0x70 [ 171.944080][ C0] ? exc_invalid_op+0x16/0x40 [ 171.948768][ C0] ? asm_exc_invalid_op+0x16/0x20 [ 171.953811][ C0] ? __ieee80211_beacon_get+0x29b/0x2080 [ 171.959450][ C0] ? __ieee80211_beacon_get+0x8c8/0x2080 [ 171.965072][ C0] ? __ieee80211_beacon_get+0x183d/0x2080 [ 171.970813][ C0] ? __ieee80211_beacon_get+0x183d/0x2080 [ 171.976532][ C0] ? ieee80211_beacon_get_template+0x30/0x30 [ 171.982526][ C0] ? __lock_acquire+0x1295/0x1ff0 [ 171.987566][ C0] ? mark_lock+0x98/0x340 [ 171.991902][ C0] ieee80211_beacon_get_tim+0xb7/0x950 [ 171.997388][ C0] ? mark_lock+0x98/0x340 [ 172.001710][ C0] ? __ieee80211_beacon_get+0x2080/0x2080 [ 172.007446][ C0] ? read_lock_is_recursive+0x10/0x10 [ 172.012929][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 172.018973][ C0] mac80211_hwsim_beacon_tx+0xe2/0x8a0 [ 172.024454][ C0] ? do_raw_spin_unlock+0x137/0x8b0 [ 172.029706][ C0] __iterate_interfaces+0x21e/0x4b0 [ 172.034908][ C0] ? mac80211_hwsim_vendor_cmd_test+0x340/0x340 [ 172.041184][ C0] ? mac80211_hwsim_vendor_cmd_test+0x340/0x340 [ 172.047456][ C0] ieee80211_iterate_active_interfaces_atomic+0xaf/0x140 [ 172.054484][ C0] mac80211_hwsim_beacon+0xa7/0x180 [ 172.059708][ C0] ? hw_scan_work+0xe70/0xe70 [ 172.064395][ C0] __hrtimer_run_queues+0x598/0xcf0 [ 172.069629][ C0] ? hrtimer_interrupt+0x980/0x980 [ 172.074762][ C0] ? ktime_get_update_offsets_now+0x407/0x420 [ 172.080872][ C0] hrtimer_run_softirq+0x196/0x2c0 [ 172.086004][ C0] handle_softirqs+0x3a7/0x930 [ 172.090763][ C0] ? __irq_exit_rcu+0x157/0x240 [ 172.095604][ C0] ? do_softirq+0x240/0x240 [ 172.100239][ C0] ? irqtime_account_irq+0xd0/0x1e0 [ 172.105432][ C0] __irq_exit_rcu+0x157/0x240 [ 172.110134][ C0] ? irq_exit_rcu+0x20/0x20 [ 172.114631][ C0] irq_exit_rcu+0x5/0x20 [ 172.119082][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 172.124707][ C0] [ 172.127646][ C0] [ 172.130575][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 172.136569][ C0] RIP: 0010:finish_lock_switch+0x91/0x100 [ 172.142277][ C0] Code: 45 31 c9 68 f7 aa 59 81 e8 9c 11 09 00 48 83 c4 08 4c 89 ff e8 50 db fe ff eb 32 4c 89 ff e8 e6 5a e4 08 e8 c1 46 2d 00 fb 5b <41> 5c 41 5d 41 5e 41 5f c3 44 89 f1 80 e1 07 80 c1 03 38 c1 7c 87 [ 172.161895][ C0] RSP: 0018:ffffc90003d46e98 EFLAGS: 00000286 [ 172.167977][ C0] RAX: 9203d852f9c82500 RBX: ffff888023723bb4 RCX: ffffffff81632d68 [ 172.175957][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8b2a80 RDI: ffffffff8ad90540 [ 172.183918][ C0] RBP: ffffc90003d46f10 R08: dffffc0000000000 R09: fffffbfff20ec839 [ 172.191913][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 172.199897][ C0] R13: 1ffff1101720760b R14: ffff8880b903b058 R15: ffff8880b903a300 [ 172.207883][ C0] ? mark_lock+0x98/0x340 [ 172.212209][ C0] finish_task_switch+0x134/0x630 [ 172.217250][ C0] ? __switch_to_asm+0x34/0x60 [ 172.222007][ C0] __schedule+0x12cc/0x45b0 [ 172.226527][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 172.232501][ C0] ? rcu_is_watching+0x11/0xa0 [ 172.237383][ C0] ? asm_sysvec_call_function_single+0x16/0x20 [ 172.243528][ C0] ? release_firmware_map_entry+0x190/0x190 [ 172.249455][ C0] ? mark_lock+0x98/0x340 [ 172.253776][ C0] preempt_schedule_irq+0xf7/0x1c0 [ 172.258899][ C0] ? __cond_resched+0x20/0x20 [ 172.263575][ C0] irqentry_exit+0x53/0x80 [ 172.268018][ C0] asm_sysvec_call_function_single+0x16/0x20 [ 172.274010][ C0] RIP: 0010:seqcount_lockdep_reader_access+0x185/0x1e0 [ 172.280859][ C0] Code: 42 80 3c 23 00 74 08 4c 89 ff e8 36 61 09 00 f6 44 24 41 02 75 4c f7 44 24 18 00 02 00 00 74 01 fb 48 c7 44 24 20 0e 36 e0 45 <4b> c7 04 34 00 00 00 00 66 43 c7 44 34 09 00 00 43 c6 44 34 0b 00 [ 172.300477][ C0] RSP: 0018:ffffc90003d47280 EFLAGS: 00000206 [ 172.306562][ C0] RAX: 9203d852f9c82500 RBX: 1ffff920007a8e58 RCX: ffffffff81632d68 [ 172.314550][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8b2a80 RDI: ffffffff8ad90540 [ 172.322509][ C0] RBP: ffffc90003d47360 R08: dffffc0000000000 R09: fffffbfff20ec839 [ 172.330490][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 172.338561][ C0] R13: ffff88813fffb7c0 R14: 1ffff920007a8e54 R15: ffffc90003d472c0 [ 172.346984][ C0] ? mark_lock+0x98/0x340 [ 172.351312][ C0] ? bad_range+0x2c0/0x2c0 [ 172.355776][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 172.361771][ C0] ? print_irqtrace_events+0x210/0x210 [ 172.367362][ C0] bad_range+0x77/0x2c0 [ 172.371516][ C0] get_page_from_freelist+0x3b5f/0x3d40 [ 172.377106][ C0] ? __alloc_pages+0x700/0x700 [ 172.381860][ C0] ? __next_zones_zonelist+0xa4/0x130 [ 172.387247][ C0] ? prepare_alloc_pages+0x35d/0x5b0 [ 172.392548][ C0] __alloc_pages+0x272/0x700 [ 172.397129][ C0] ? __rmqueue_pcplist+0x23a0/0x23a0 [ 172.402443][ C0] ? alloc_pages+0x458/0x570 [ 172.407022][ C0] __vmalloc_node_range+0x5ab/0x8c0 [ 172.412250][ C0] vmalloc_user+0x70/0x80 [ 172.416572][ C0] ? vb2_vmalloc_alloc+0xee/0x330 [ 172.421585][ C0] vb2_vmalloc_alloc+0xee/0x330 [ 172.426445][ C0] ? vb2_common_vm_close+0x140/0x140 [ 172.431719][ C0] __vb2_queue_alloc+0x6f4/0x12d0 [ 172.436768][ C0] vb2_core_reqbufs+0x985/0x11c0 [ 172.441703][ C0] ? vb2_verify_memory_type+0x560/0x560 [ 172.447265][ C0] ? mutex_lock_io_nested+0x60/0x60 [ 172.452473][ C0] ? vb2_verify_memory_type+0x1f3/0x560 [ 172.458007][ C0] vb2_ioctl_reqbufs+0x391/0x640 [ 172.462963][ C0] __video_do_ioctl+0xa44/0xe40 [ 172.467809][ C0] ? video_ioctl2+0x30/0x30 [ 172.472324][ C0] ? __might_fault+0xb4/0x110 [ 172.477015][ C0] video_usercopy+0xa87/0x1120 [ 172.481800][ C0] ? video_ioctl2+0x30/0x30 [ 172.486296][ C0] ? v4l_printk_ioctl+0x130/0x130 [ 172.491351][ C0] ? __fget_files+0x413/0x480 [ 172.496028][ C0] v4l2_ioctl+0x181/0x1d0 [ 172.500346][ C0] ? v4l2_poll+0x2a0/0x2a0 [ 172.504776][ C0] __se_sys_ioctl+0xf1/0x160 [ 172.509379][ C0] do_syscall_64+0x3b/0xb0 [ 172.513807][ C0] ? clear_bhb_loop+0x15/0x70 [ 172.518503][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 172.524409][ C0] RIP: 0033:0x7f8df23cf719 [ 172.528816][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.548456][ C0] RSP: 002b:00007f8df0826038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 172.556886][ C0] RAX: ffffffffffffffda RBX: 00007f8df2587058 RCX: 00007f8df23cf719 [ 172.564984][ C0] RDX: 0000000020000040 RSI: 00000000c0145608 RDI: 0000000000000005 [ 172.572986][ C0] RBP: 00007f8df244275e R08: 0000000000000000 R09: 0000000000000000 [ 172.580979][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 172.588941][ C0] R13: 0000000000000000 R14: 00007f8df2587058 R15: 00007ffda0584088 [ 172.596934][ C0] [ 172.600007][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 172.607305][ C0] CPU: 0 PID: 5527 Comm: syz.1.329 Not tainted 5.15.172-syzkaller #0 [ 172.615466][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 172.625525][ C0] Call Trace: [ 172.628802][ C0] [ 172.631651][ C0] dump_stack_lvl+0x1e3/0x2d0 [ 172.636330][ C0] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 172.641969][ C0] ? panic+0x860/0x860 [ 172.646034][ C0] ? __ieee80211_beacon_get+0x1790/0x2080 [ 172.651917][ C0] ? __ieee80211_beacon_get+0x1790/0x2080 [ 172.657632][ C0] panic+0x318/0x860 [ 172.661538][ C0] ? __warn+0x16a/0x300 [ 172.665692][ C0] ? fb_is_primary_device+0xd0/0xd0 [ 172.670890][ C0] ? __ieee80211_beacon_get+0x183d/0x2080 [ 172.676695][ C0] __warn+0x2b2/0x300 [ 172.680683][ C0] ? __ieee80211_beacon_get+0x183d/0x2080 [ 172.686400][ C0] report_bug+0x1b7/0x2e0 [ 172.690871][ C0] handle_bug+0x3d/0x70 [ 172.695025][ C0] exc_invalid_op+0x16/0x40 [ 172.699626][ C0] asm_exc_invalid_op+0x16/0x20 [ 172.704576][ C0] RIP: 0010:__ieee80211_beacon_get+0x183d/0x2080 [ 172.710905][ C0] Code: ff e8 17 cd b4 f7 0f 0b e9 4b fa ff ff e8 0b cd b4 f7 0f 0b e9 3b fe ff ff e8 ff cc b4 f7 0f 0b e9 06 ee ff ff e8 f3 cc b4 f7 <0f> 0b e9 91 f0 ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 2d ea [ 172.730502][ C0] RSP: 0018:ffffc90000007840 EFLAGS: 00010246 [ 172.736581][ C0] RAX: ffffffff89cba6ad RBX: 0000000000000000 RCX: ffff88805e7a8000 [ 172.744562][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 172.752654][ C0] RBP: ffffc90000007a70 R08: ffffffff89cb9738 R09: ffffffff89cb910b [ 172.760622][ C0] R10: 0000000000000003 R11: ffff88805e7a8000 R12: dffffc0000000000 [ 172.768757][ C0] R13: ffff888062ab0c80 R14: ffff888062ab2298 R15: 1ffff92000000f18 [ 172.776932][ C0] ? __ieee80211_beacon_get+0x29b/0x2080 [ 172.782561][ C0] ? __ieee80211_beacon_get+0x8c8/0x2080 [ 172.788201][ C0] ? __ieee80211_beacon_get+0x183d/0x2080 [ 172.793922][ C0] ? ieee80211_beacon_get_template+0x30/0x30 [ 172.799910][ C0] ? __lock_acquire+0x1295/0x1ff0 [ 172.804944][ C0] ? mark_lock+0x98/0x340 [ 172.809304][ C0] ieee80211_beacon_get_tim+0xb7/0x950 [ 172.814756][ C0] ? mark_lock+0x98/0x340 [ 172.819218][ C0] ? __ieee80211_beacon_get+0x2080/0x2080 [ 172.824952][ C0] ? read_lock_is_recursive+0x10/0x10 [ 172.830320][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 172.836327][ C0] mac80211_hwsim_beacon_tx+0xe2/0x8a0 [ 172.841786][ C0] ? do_raw_spin_unlock+0x137/0x8b0 [ 172.846979][ C0] __iterate_interfaces+0x21e/0x4b0 [ 172.852171][ C0] ? mac80211_hwsim_vendor_cmd_test+0x340/0x340 [ 172.858404][ C0] ? mac80211_hwsim_vendor_cmd_test+0x340/0x340 [ 172.864636][ C0] ieee80211_iterate_active_interfaces_atomic+0xaf/0x140 [ 172.871662][ C0] mac80211_hwsim_beacon+0xa7/0x180 [ 172.876850][ C0] ? hw_scan_work+0xe70/0xe70 [ 172.881513][ C0] __hrtimer_run_queues+0x598/0xcf0 [ 172.886713][ C0] ? hrtimer_interrupt+0x980/0x980 [ 172.891819][ C0] ? ktime_get_update_offsets_now+0x407/0x420 [ 172.897878][ C0] hrtimer_run_softirq+0x196/0x2c0 [ 172.902980][ C0] handle_softirqs+0x3a7/0x930 [ 172.907733][ C0] ? __irq_exit_rcu+0x157/0x240 [ 172.912600][ C0] ? do_softirq+0x240/0x240 [ 172.917109][ C0] ? irqtime_account_irq+0xd0/0x1e0 [ 172.922305][ C0] __irq_exit_rcu+0x157/0x240 [ 172.926974][ C0] ? irq_exit_rcu+0x20/0x20 [ 172.931473][ C0] irq_exit_rcu+0x5/0x20 [ 172.935723][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 172.941347][ C0] [ 172.944304][ C0] [ 172.947260][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 172.953236][ C0] RIP: 0010:finish_lock_switch+0x91/0x100 [ 172.958944][ C0] Code: 45 31 c9 68 f7 aa 59 81 e8 9c 11 09 00 48 83 c4 08 4c 89 ff e8 50 db fe ff eb 32 4c 89 ff e8 e6 5a e4 08 e8 c1 46 2d 00 fb 5b <41> 5c 41 5d 41 5e 41 5f c3 44 89 f1 80 e1 07 80 c1 03 38 c1 7c 87 [ 172.978539][ C0] RSP: 0018:ffffc90003d46e98 EFLAGS: 00000286 [ 172.984597][ C0] RAX: 9203d852f9c82500 RBX: ffff888023723bb4 RCX: ffffffff81632d68 [ 172.992562][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8b2a80 RDI: ffffffff8ad90540 [ 173.000525][ C0] RBP: ffffc90003d46f10 R08: dffffc0000000000 R09: fffffbfff20ec839 [ 173.008485][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 173.016452][ C0] R13: 1ffff1101720760b R14: ffff8880b903b058 R15: ffff8880b903a300 [ 173.024419][ C0] ? mark_lock+0x98/0x340 [ 173.028745][ C0] finish_task_switch+0x134/0x630 [ 173.033780][ C0] ? __switch_to_asm+0x34/0x60 [ 173.038552][ C0] __schedule+0x12cc/0x45b0 [ 173.043048][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 173.049029][ C0] ? rcu_is_watching+0x11/0xa0 [ 173.053796][ C0] ? asm_sysvec_call_function_single+0x16/0x20 [ 173.059941][ C0] ? release_firmware_map_entry+0x190/0x190 [ 173.065827][ C0] ? mark_lock+0x98/0x340 [ 173.070145][ C0] preempt_schedule_irq+0xf7/0x1c0 [ 173.075252][ C0] ? __cond_resched+0x20/0x20 [ 173.079944][ C0] irqentry_exit+0x53/0x80 [ 173.084350][ C0] asm_sysvec_call_function_single+0x16/0x20 [ 173.090317][ C0] RIP: 0010:seqcount_lockdep_reader_access+0x185/0x1e0 [ 173.097168][ C0] Code: 42 80 3c 23 00 74 08 4c 89 ff e8 36 61 09 00 f6 44 24 41 02 75 4c f7 44 24 18 00 02 00 00 74 01 fb 48 c7 44 24 20 0e 36 e0 45 <4b> c7 04 34 00 00 00 00 66 43 c7 44 34 09 00 00 43 c6 44 34 0b 00 [ 173.116846][ C0] RSP: 0018:ffffc90003d47280 EFLAGS: 00000206 [ 173.122922][ C0] RAX: 9203d852f9c82500 RBX: 1ffff920007a8e58 RCX: ffffffff81632d68 [ 173.130882][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8b2a80 RDI: ffffffff8ad90540 [ 173.138866][ C0] RBP: ffffc90003d47360 R08: dffffc0000000000 R09: fffffbfff20ec839 [ 173.146826][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 173.154790][ C0] R13: ffff88813fffb7c0 R14: 1ffff920007a8e54 R15: ffffc90003d472c0 [ 173.162756][ C0] ? mark_lock+0x98/0x340 [ 173.167084][ C0] ? bad_range+0x2c0/0x2c0 [ 173.171491][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 173.177461][ C0] ? print_irqtrace_events+0x210/0x210 [ 173.182906][ C0] bad_range+0x77/0x2c0 [ 173.187054][ C0] get_page_from_freelist+0x3b5f/0x3d40 [ 173.192640][ C0] ? __alloc_pages+0x700/0x700 [ 173.197387][ C0] ? __next_zones_zonelist+0xa4/0x130 [ 173.202761][ C0] ? prepare_alloc_pages+0x35d/0x5b0 [ 173.208035][ C0] __alloc_pages+0x272/0x700 [ 173.212611][ C0] ? __rmqueue_pcplist+0x23a0/0x23a0 [ 173.217888][ C0] ? alloc_pages+0x458/0x570 [ 173.222470][ C0] __vmalloc_node_range+0x5ab/0x8c0 [ 173.227666][ C0] vmalloc_user+0x70/0x80 [ 173.231985][ C0] ? vb2_vmalloc_alloc+0xee/0x330 [ 173.236997][ C0] vb2_vmalloc_alloc+0xee/0x330 [ 173.241853][ C0] ? vb2_common_vm_close+0x140/0x140 [ 173.247128][ C0] __vb2_queue_alloc+0x6f4/0x12d0 [ 173.252153][ C0] vb2_core_reqbufs+0x985/0x11c0 [ 173.257086][ C0] ? vb2_verify_memory_type+0x560/0x560 [ 173.262636][ C0] ? mutex_lock_io_nested+0x60/0x60 [ 173.267820][ C0] ? vb2_verify_memory_type+0x1f3/0x560 [ 173.273364][ C0] vb2_ioctl_reqbufs+0x391/0x640 [ 173.278315][ C0] __video_do_ioctl+0xa44/0xe40 [ 173.283161][ C0] ? video_ioctl2+0x30/0x30 [ 173.287669][ C0] ? __might_fault+0xb4/0x110 [ 173.292340][ C0] video_usercopy+0xa87/0x1120 [ 173.297098][ C0] ? video_ioctl2+0x30/0x30 [ 173.301599][ C0] ? v4l_printk_ioctl+0x130/0x130 [ 173.306631][ C0] ? __fget_files+0x413/0x480 [ 173.311473][ C0] v4l2_ioctl+0x181/0x1d0 [ 173.315788][ C0] ? v4l2_poll+0x2a0/0x2a0 [ 173.320186][ C0] __se_sys_ioctl+0xf1/0x160 [ 173.324780][ C0] do_syscall_64+0x3b/0xb0 [ 173.329184][ C0] ? clear_bhb_loop+0x15/0x70 [ 173.333859][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 173.339741][ C0] RIP: 0033:0x7f8df23cf719 [ 173.344142][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.363815][ C0] RSP: 002b:00007f8df0826038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 173.372213][ C0] RAX: ffffffffffffffda RBX: 00007f8df2587058 RCX: 00007f8df23cf719 [ 173.380187][ C0] RDX: 0000000020000040 RSI: 00000000c0145608 RDI: 0000000000000005 [ 173.388142][ C0] RBP: 00007f8df244275e R08: 0000000000000000 R09: 0000000000000000 [ 173.396119][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 173.404074][ C0] R13: 0000000000000000 R14: 00007f8df2587058 R15: 00007ffda0584088 [ 173.412043][ C0] [ 173.415170][ C0] Kernel Offset: disabled [ 173.419494][ C0] Rebooting in 86400 seconds..