last executing test programs: 1m24.878620061s ago: executing program 4 (id=269): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="00224f00000015a8407a330b93bf028003000000"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x60400) r2 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r2, 0x81044804, &(0x7f0000000400)={0x1, 0x100}) ioctl$HIDIOCGUSAGE(r1, 0x40184810, 0x0) 1m22.547897852s ago: executing program 4 (id=281): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) io_uring_setup(0x0, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendto$llc(r5, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, 0x0, 0x0) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000100)="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", 0xfffffffffffffdb0, 0x4040004, 0x0, 0xfffffffb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 1m21.841716586s ago: executing program 4 (id=288): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x8, &(0x7f0000000180)={[{@nodiscard}, {}, {@alloc_mode_def}, {@fsync_mode_posix}, {@noflush_merge}, {@disable_roll_forward}, {@age_extent_cache}, {@noacl}, {@heap}, {@resuid}, {@noextent_cache}, {@resuid}, {@jqfmt_vfsold}]}, 0x1, 0x5505, &(0x7f0000002480)="$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") open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=@FILEID_INO32_GEN={0x8, 0x1, {0x4}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0xff80}], 0x1, 0x0, 0x0, 0x2c}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) io_setup(0x3fe, &(0x7f0000000100)) 1m20.85144195s ago: executing program 4 (id=296): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x89901) ppoll(&(0x7f00000001c0)=[{r2, 0x88}, {r2, 0x2000}, {r3, 0x4c00}, {r2, 0x8400}, {r1, 0x200}], 0x5, &(0x7f00000002c0)={0x77359400}, &(0x7f0000000300)={[0x82a9]}, 0x8) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) 1m19.520059747s ago: executing program 4 (id=301): r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f003, 0x4}) 1m17.276142728s ago: executing program 4 (id=308): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$key(0xf, 0x3, 0x2) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe050000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0x3}, 0x18) sched_setaffinity(0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) mount$9p_fd(0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@cachetag={'cachetag', 0x3d, 'GPL\x00'}}], [{@obj_role={'obj_role', 0x3d, 'c:::\x00'}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}]}}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, 0x0, &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x0) tkill(0x0, 0xb) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xc, &(0x7f0000000040), 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4001, @loopback}, 0x10) r5 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, 0xffffffffffffffff) 1m17.057332349s ago: executing program 32 (id=308): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$key(0xf, 0x3, 0x2) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe050000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0x3}, 0x18) sched_setaffinity(0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) mount$9p_fd(0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@cachetag={'cachetag', 0x3d, 'GPL\x00'}}], [{@obj_role={'obj_role', 0x3d, 'c:::\x00'}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}]}}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, 0x0, &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x0) tkill(0x0, 0xb) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xc, &(0x7f0000000040), 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4001, @loopback}, 0x10) r5 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, 0xffffffffffffffff) 11.793943631s ago: executing program 1 (id=554): r0 = gettid() r1 = openat$full(0xffffffffffffff9c, 0x0, 0x14001, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net/ip6_tables_names\x00') lseek(r2, 0x200000002, 0x0) shutdown(r1, 0x1) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)=0x0) r4 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) read$midi(r4, &(0x7f0000000240)=""/248, 0xf8) openat$tun(0xffffffffffffff9c, 0x0, 0x10201, 0x0) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}, {0x102, 0x81, 0x6, 0xf8}}}, 0xa) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r5, 0x0, 0x400000000000009, &(0x7f0000937fed)=""/16, 0x0) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000080)={0x13, 0x10, 0xfa00, {&(0x7f00000005c0)}}, 0x18) timer_settime(r3, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 11.466676613s ago: executing program 0 (id=557): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000300), 0x40000000000000fb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000040)) 10.859243096s ago: executing program 1 (id=564): fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$rxrpc(0xffffffffffffffff, 0x0, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) connect$rxrpc(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000180)=0x6) write$dsp(r4, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) 8.391988198s ago: executing program 0 (id=577): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='batadv_slave_0\x00', 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) 7.423045403s ago: executing program 1 (id=582): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x5c, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xffe0}}, [@TCA_RATE={0x6, 0x5, {0xa8, 0x7b}}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_IIF={0x8}]}}]}, 0x5c}}, 0x0) r0 = socket(0x10, 0x803, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x10080, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r3 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000480), 0x4) sendmsg$tipc(r3, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000180)="290000002000190f00003fffffffda0602000000ffe80001dd0000040d001800ea11c21d0005000000", 0x29}], 0x1) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000", 0x11, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, 0x0, 0x0, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2102, 0x0) 7.179955124s ago: executing program 0 (id=583): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) 7.126852975s ago: executing program 0 (id=586): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='westwood\x00', 0x9) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0xfffffffffffffee2, 0x407006}, 0x104) 7.075933025s ago: executing program 2 (id=588): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000240)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 6.851990096s ago: executing program 3 (id=591): socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x400000}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) inotify_init1(0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f00000011c0)={0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r4, 0x28, 0x2, 0x0, 0x0) 5.96911487s ago: executing program 1 (id=593): fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$rxrpc(0xffffffffffffffff, 0x0, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) socket$inet6(0xa, 0x6, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000180)=0x6) write$dsp(r4, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) 5.819950711s ago: executing program 3 (id=595): prlimit64(0x0, 0xe, &(0x7f0000000240)={0xc, 0xfffffffffffff800}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) tkill(r0, 0x35) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = timerfd_create(0x4, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r3, 0x40309439, &(0x7f0000000040)={0x3, 0x1, 0xa}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) prctl$PR_CAPBSET_READ(0x17, 0x29) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) socket$inet_udplite(0x2, 0x2, 0x88) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) read$FUSE(0xffffffffffffffff, &(0x7f0000000000)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000073013f000000000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb30f, @void, @value}, 0x94) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000300)=ANY=[@ANYRES64=r2], 0x30}, 0x1, 0x0, 0x0, 0x44810}, 0x5) socket$nl_generic(0x10, 0x3, 0x10) 5.747463752s ago: executing program 0 (id=596): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x4b, 0xec, 0x2, 0x20, 0x6a2, 0x3, 0xb48c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x9, 0x0, 0x0, 0xc9, 0xc8, 0xb7}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000180)={0x20, 0x14, 0x2, "31a9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.591938882s ago: executing program 3 (id=598): r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x200000, &(0x7f0000001200), 0x0, 0x559e, &(0x7f000000ac40)="$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") ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x5000940e, &(0x7f0000000200)={{}, "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"}) 3.532760802s ago: executing program 2 (id=599): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="cbf212b35ad1df8b39878ded7e45818c87ba6fcb66e2f7f5d1dd6e1c934f3e186c98eb443986c54a44aa13bd15b4113e2cf2c07240cb816d4e47ebccf4f6f8672ae9f3480b3adf5c7b15fe89451820c60304e38efc5200ae7f3a3a673b23b38b2c8bc2c09940d91e3f527260c203cbc8d8b3a7a6c55b4f3927ab5bacd9d54cf478e779e68e77a05b3a8f5fac36344672d59123df956d9812e783d17bf9480e90e2acbc397c13fc9a0c7596b1ac43c4b240a628d385dd6e9c4ebfbc6a306d439614d97cd489c0c81073908be3d3ad4014f348", @ANYRES16, @ANYBLOB="000329bd7000fedbdf250b000000980005800800010065746800080001007564700008000100657468000800010065746800070001006962000008000100756470000800010065746800080001007564700008000100756470004c00028008000400000000000800030000000000080001000b0000000800010000000000080001001700000008000300fdffffff080002004700000008000400000000000800040000010000180004801300010062726f6164636173742d6c696e6b0000540003800800030006000000080003000300000008000200020000000800030002000000080002000800000008000100001000000800020007000000080003000200000008000300ff7f000008000100000000008c000280040004002c000380080002000700000008000200ff0700000800010000000000080002000500000008000200360800000800010006000000040004000400040008"], 0x458}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x34, 0x0, 0x0, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8}]}, 0x34}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10000500", 0x33fe0}], 0x1}, 0x0) 3.493736813s ago: executing program 2 (id=600): sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) r0 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r0, 0x84, 0x72, &(0x7f0000000000)=""/4071, &(0x7f0000001080)=0xfe7) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff05000500", 0x2c}, {&(0x7f00000019c0)="06bb", 0x2}], 0x2}, 0x0) 3.297653673s ago: executing program 2 (id=603): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x5c, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xffe0}}, [@TCA_RATE={0x6, 0x5, {0xa8, 0x7b}}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_IIF={0x8}]}}]}, 0x5c}}, 0x0) r0 = socket(0x10, 0x803, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x10080, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r3 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000480), 0x4) sendmsg$tipc(r3, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000180)="290000002000190f00003fffffffda0602000000ffe80001dd0000040d001800ea11c21d0005000000", 0x29}], 0x1) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000", 0x11, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, 0x0, 0x0, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2102, 0x0) 2.972492025s ago: executing program 5 (id=606): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {@barrier}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@noquota}, {@nogrpid}, {@noauto_da_alloc}, {@mblk_io_submit}]}, 0x1, 0x56a, &(0x7f00000015c0)="$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") setxattr$trusted_overlay_upper(&(0x7f00000003c0)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) 2.949794775s ago: executing program 3 (id=607): syz_usb_connect$cdc_ncm(0x6, 0x6f, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000020000402505a1a860000102030109025d00020105e00409f7052400d4137bf1aae76c4e53897209c4ffff"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.747948306s ago: executing program 5 (id=608): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='xdp_exception\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='xdp_exception\x00', r1}, 0x18) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, r4}, 0x40) syz_emit_ethernet(0x16, &(0x7f0000000280)={@remote, @local, @void, {@llc={0x4, {@snap={0xaa, 0x1, "88", "b69bc7", 0x892f}}}}}, 0x0) 2.728271106s ago: executing program 5 (id=609): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000380)={[{@auto_da_alloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@stripe={'stripe', 0x3d, 0x7}}, {@usrjquota}, {@orlov}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@max_batch_time}, {@data_err_abort}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") mount$afs(0x0, &(0x7f0000000080)='./file2\x00', 0x0, 0x2050090, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x42a00) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x11, r0, 0x0) madvise(&(0x7f00007fe000/0x800000)=nil, 0x800000, 0x19) getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) 2.607531227s ago: executing program 1 (id=610): socket$key(0xf, 0x3, 0x2) syz_mount_image$ext4(&(0x7f0000000240)='ext2\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000540)={[{@test_dummy_encryption}]}, 0x1, 0x23a, &(0x7f0000000580)="$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") socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r3, 0x4b66, &(0x7f00000000c0)={0x12f, &(0x7f0000000080)=[{}]}) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) write$proc_mixer(0xffffffffffffffff, 0x0, 0x2a) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 2.479968827s ago: executing program 5 (id=611): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f0000000040)={0x5a0, 0x0, 0x356, 0x600, 0x7, 0x2, 0x18, 0x2, {0x6, 0x4}, {0xf, 0x5}, {0x7, 0x9, 0x1}, {0x2, 0x1}, 0x2, 0x40, 0x5, 0x100, 0x1, 0x2, 0x5, 0x6, 0x7, 0xf51b, 0x6, 0xe58f, 0x32, 0x100, 0x2, 0x4}) 2.442406008s ago: executing program 5 (id=612): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002740)}, 0x4000) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCINQ(r5, 0x541b, 0x0) connect$bt_sco(r5, &(0x7f0000000040), 0x8) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000600)={0x1f, @none}, 0x8) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000440)=0x40, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000180)) 2.242728338s ago: executing program 2 (id=613): syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_mode_change={{0x14, 0x6}, {0x54, 0xc8, 0x1, 0x101}}}, 0x9) fstatfs(0xffffffffffffffff, 0x0) 1.016020215s ago: executing program 5 (id=614): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCGFLAGS1(r1, 0x8004745a, &(0x7f00000019c0)) 917.140476ms ago: executing program 2 (id=615): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x68034) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x0) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_open_dev$media(0x0, 0x3, 0x0) syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000001640)=0x4f1d, 0x4) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) 916.936366ms ago: executing program 3 (id=616): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x320, 0x8, 0x7f02ae, 0x0, 0x200, 0x3f0, 0x2e8, 0x2e8, 0x3f0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x300, 0x320, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r1}}, @common=@hl={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private2, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) 870.705866ms ago: executing program 1 (id=617): socket$can_j1939(0x1d, 0x2, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr, 0xfffffffc}, 0x1c) listen(r0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000000c0)=0x7, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r1, &(0x7f0000000040)='u', 0xa792a, 0x801, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0x541b, &(0x7f0000000240)={0xffffffffffffffff}) close_range(r3, 0xffffffffffffffff, 0x0) 870.250346ms ago: executing program 3 (id=618): sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x5}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x4000) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000240)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="010000000000000000001e00000008000300", @ANYRES32=r3, @ANYBLOB="bc002f800c000200000000000000000008000100000000009c000380050002000000000014000380060001000000000008000200000000000500020000000000080001"], 0xd8}}, 0x0) 0s ago: executing program 0 (id=619): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000340)={0x40, 0xf, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000780)={0x2c, &(0x7f0000000580)={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000007c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.239' (ED25519) to the list of known hosts. syzkaller login: [ 43.132902][ T4011] cgroup: Unknown subsys name 'net' [ 43.396253][ T4011] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 43.740950][ T4011] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 45.196991][ T4026] chnl_net:caif_netlink_parms(): no params data found [ 45.224953][ T4023] chnl_net:caif_netlink_parms(): no params data found [ 45.243610][ T4030] chnl_net:caif_netlink_parms(): no params data found [ 45.358170][ T4030] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.360061][ T4030] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.362392][ T4030] device bridge_slave_0 entered promiscuous mode [ 45.365885][ T4023] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.367629][ T4023] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.374067][ T4023] device bridge_slave_0 entered promiscuous mode [ 45.400769][ T4030] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.402620][ T4030] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.404929][ T4030] device bridge_slave_1 entered promiscuous mode [ 45.407506][ T4023] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.409091][ T4023] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.411421][ T4023] device bridge_slave_1 entered promiscuous mode [ 45.428326][ T4026] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.430087][ T4026] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.432340][ T4026] device bridge_slave_0 entered promiscuous mode [ 45.449485][ T4034] chnl_net:caif_netlink_parms(): no params data found [ 45.455092][ T4026] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.456728][ T4026] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.458995][ T4026] device bridge_slave_1 entered promiscuous mode [ 45.469640][ T4023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.477123][ T4023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.494598][ T4030] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.517369][ T4030] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.535417][ T4026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.539617][ T4023] team0: Port device team_slave_0 added [ 45.547095][ T4032] chnl_net:caif_netlink_parms(): no params data found [ 45.564250][ T4026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.567759][ T4023] team0: Port device team_slave_1 added [ 45.578493][ T4030] team0: Port device team_slave_0 added [ 45.584484][ T4030] team0: Port device team_slave_1 added [ 45.650737][ T4030] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.652427][ T4030] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.658064][ T4030] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.663452][ T4026] team0: Port device team_slave_0 added [ 45.676914][ T4023] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.678546][ T4023] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.684657][ T4023] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.696965][ T4030] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.698566][ T4030] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.704556][ T4030] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.708370][ T4026] team0: Port device team_slave_1 added [ 45.710509][ T4034] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.712141][ T4034] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.714329][ T4034] device bridge_slave_0 entered promiscuous mode [ 45.717297][ T4023] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.718893][ T4023] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.724888][ T4023] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.734024][ T4032] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.735612][ T4032] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.737862][ T4032] device bridge_slave_0 entered promiscuous mode [ 45.757423][ T4034] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.759044][ T4034] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.761687][ T4034] device bridge_slave_1 entered promiscuous mode [ 45.766562][ T4032] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.768209][ T4032] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.770857][ T4032] device bridge_slave_1 entered promiscuous mode [ 45.805903][ T4032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.808371][ T4026] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.810276][ T4026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.815956][ T4026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.835370][ T4032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.892085][ T4030] device hsr_slave_0 entered promiscuous mode [ 45.930174][ T4030] device hsr_slave_1 entered promiscuous mode [ 45.985753][ T4026] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.987429][ T4026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.993151][ T4026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.997609][ T4034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.061799][ T4023] device hsr_slave_0 entered promiscuous mode [ 46.100290][ T4023] device hsr_slave_1 entered promiscuous mode [ 46.160236][ T4023] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.162246][ T4023] Cannot create hsr debugfs directory [ 46.166450][ T4034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.202564][ T4032] team0: Port device team_slave_0 added [ 46.240015][ T4032] team0: Port device team_slave_1 added [ 46.267585][ T4034] team0: Port device team_slave_0 added [ 46.278291][ T4034] team0: Port device team_slave_1 added [ 46.281296][ T4032] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.282982][ T4032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.288924][ T4032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.293265][ T4032] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.294874][ T4032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.300702][ T4032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.361814][ T4026] device hsr_slave_0 entered promiscuous mode [ 46.400244][ T4026] device hsr_slave_1 entered promiscuous mode [ 46.439870][ T4026] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.441616][ T4026] Cannot create hsr debugfs directory [ 46.480275][ T4034] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.481858][ T4034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.487372][ T4034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.508609][ T4034] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.516498][ T4034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.522832][ T4034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.592092][ T4032] device hsr_slave_0 entered promiscuous mode [ 46.630154][ T4032] device hsr_slave_1 entered promiscuous mode [ 46.680496][ T4032] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.682231][ T4032] Cannot create hsr debugfs directory [ 46.781877][ T4034] device hsr_slave_0 entered promiscuous mode [ 46.820285][ T4034] device hsr_slave_1 entered promiscuous mode [ 46.859879][ T4034] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.861594][ T4034] Cannot create hsr debugfs directory [ 46.920584][ T1960] Bluetooth: hci0: command 0x0409 tx timeout [ 46.922579][ T1960] Bluetooth: hci1: command 0x0409 tx timeout [ 46.962776][ T4023] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 47.010082][ T1960] Bluetooth: hci3: command 0x0409 tx timeout [ 47.011680][ T1960] Bluetooth: hci2: command 0x0409 tx timeout [ 47.017153][ T4023] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 47.056790][ T4023] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 47.080121][ T4065] Bluetooth: hci4: command 0x0409 tx timeout [ 47.099184][ T4023] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 47.208790][ T4030] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 47.243724][ T4030] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 47.272745][ T4030] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 47.328371][ T4030] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 47.428519][ T4026] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.445885][ T4026] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.480827][ T4026] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.540413][ T4026] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 47.627023][ T4032] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 47.676371][ T4023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.678192][ T4032] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 47.718034][ T4032] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 47.781933][ T4032] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 47.854062][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.857414][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.863730][ T4023] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.868741][ T4034] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 47.895122][ T4034] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 47.932090][ T4034] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 47.982661][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.989420][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.992438][ T331] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.994138][ T331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.996821][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.022133][ T4034] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.063900][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.066336][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.068571][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.070344][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.074070][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.076595][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.091297][ T4030] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.102340][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.105359][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.107762][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 48.112018][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.114412][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.124279][ T4026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.143825][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.146273][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.156485][ T4030] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.178091][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.180783][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.183485][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.185862][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.188159][ T382] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.189881][ T382] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.193639][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.196067][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.198328][ T382] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.199925][ T382] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.202251][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.206090][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.209437][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.213443][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.234494][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.237606][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.243820][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.248562][ T4023] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.258358][ T4026] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.265045][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.268304][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.272111][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.297563][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 48.301873][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.304293][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.306959][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.310636][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.312389][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.334488][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.336816][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.339150][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.362626][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.365139][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.367490][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.369169][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.373859][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.378530][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.381271][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.398093][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.401971][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 48.403780][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 48.412254][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.415684][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.418133][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.429494][ T4032] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.434375][ T4030] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.452707][ T4034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.455859][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 48.458378][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.464145][ T4023] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.470283][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.472496][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.507856][ T4032] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.513668][ T4034] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.517709][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.521955][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.524301][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.526589][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.531286][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.533566][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.535777][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 48.538358][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.545646][ T4026] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.557995][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.560829][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.562949][ T382] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.564679][ T382] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.566807][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.569629][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.574102][ T382] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.575657][ T382] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.578771][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.584337][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.586547][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.588868][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.591454][ T382] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.592979][ T382] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.611791][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.615932][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.624352][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.626969][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.653043][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.655368][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 48.657254][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 48.658989][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 48.663216][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.665695][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.668058][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.670940][ T331] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.672470][ T331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.677380][ T4023] device veth0_vlan entered promiscuous mode [ 48.689433][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.694175][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.698711][ T4030] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.715888][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 48.718421][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.723137][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.725846][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.737910][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.741403][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.743709][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.753546][ T4023] device veth1_vlan entered promiscuous mode [ 48.759626][ T4032] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.771264][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 48.774107][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.778725][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 48.781798][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 48.798449][ T4026] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.821306][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 48.823724][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 48.826176][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.828708][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.837194][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.839639][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.845159][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 48.847895][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.863942][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 48.866446][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.868994][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.878593][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.906436][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.908897][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.915377][ T4023] device veth0_macvtap entered promiscuous mode [ 48.929322][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 48.933288][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 48.935639][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.938473][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.943961][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.946160][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 48.948451][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.959265][ T4023] device veth1_macvtap entered promiscuous mode [ 48.965265][ T4026] device veth0_vlan entered promiscuous mode [ 48.970814][ T4034] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.975214][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 48.977562][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.980701][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.982958][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.985196][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.998037][ T4030] device veth0_vlan entered promiscuous mode [ 49.005432][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 49.007236][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 49.011867][ T4070] Bluetooth: hci1: command 0x041b tx timeout [ 49.013316][ T4070] Bluetooth: hci0: command 0x041b tx timeout [ 49.016391][ T4026] device veth1_vlan entered promiscuous mode [ 49.028076][ T4032] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.046973][ T4023] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.057503][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 49.060892][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 49.063158][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.065963][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.089289][ T4023] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.091604][ T4069] Bluetooth: hci2: command 0x041b tx timeout [ 49.093552][ T4069] Bluetooth: hci3: command 0x041b tx timeout [ 49.097633][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.101675][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.106425][ T4030] device veth1_vlan entered promiscuous mode [ 49.125908][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 49.128055][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 49.138974][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.144205][ T4023] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.146456][ T4023] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.148497][ T4023] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.157429][ T4023] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.160701][ T4070] Bluetooth: hci4: command 0x041b tx timeout [ 49.169314][ T4026] device veth0_macvtap entered promiscuous mode [ 49.189531][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 49.192303][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 49.194575][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 49.196425][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 49.224844][ T4026] device veth1_macvtap entered promiscuous mode [ 49.262960][ T4034] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.275159][ T4030] device veth0_macvtap entered promiscuous mode [ 49.297020][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.298829][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.302142][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 49.304658][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 49.308045][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.314039][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 49.316603][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.319037][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 49.323819][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 49.327955][ T4030] device veth1_macvtap entered promiscuous mode [ 49.332454][ T4026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.335166][ T4026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.341589][ T4026] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.349267][ T4026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.352790][ T4026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.356137][ T4026] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.359091][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 49.361498][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.363981][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.366426][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.368925][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.398042][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 49.400489][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.404013][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.406290][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.412103][ T4026] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.414082][ T4026] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.416010][ T4026] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.417922][ T4026] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.436606][ T4032] device veth0_vlan entered promiscuous mode [ 49.446472][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 49.449098][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.457362][ T4032] device veth1_vlan entered promiscuous mode [ 49.466034][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.466274][ T4030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.467934][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.471481][ T4030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.474257][ T4030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.476565][ T4030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.481536][ T4030] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.489201][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 49.494342][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 49.496540][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.498813][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.516745][ T4030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.519112][ T4030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.522992][ T4030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.525315][ T4030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.528829][ T4030] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.541405][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 49.543788][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.546936][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.558402][ T4034] device veth0_vlan entered promiscuous mode [ 49.572383][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 49.574787][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.577415][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.589347][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.597984][ T4030] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.602613][ T4030] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.604619][ T4030] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.606579][ T4030] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.675973][ T4034] device veth1_vlan entered promiscuous mode [ 49.690893][ T4032] device veth0_macvtap entered promiscuous mode [ 49.695484][ T4032] device veth1_macvtap entered promiscuous mode [ 49.707585][ T4032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.710853][ T4032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.713036][ T4032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.715291][ T4032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.717536][ T4032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.721688][ T4032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.725229][ T4032] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.729048][ T4032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.732067][ T4032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.734212][ T4032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.736590][ T4032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.739523][ T4032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.743400][ T4032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.746842][ T4032] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.760870][ T4032] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.762856][ T4032] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.764927][ T4032] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.766889][ T4032] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.861832][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.863840][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.882558][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 49.884952][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 49.887293][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 49.893719][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.896245][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 49.899683][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.904787][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.907321][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.911136][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.099449][ T4103] process 'syz.1.6' launched './file0' with NULL argv: empty string added [ 50.501323][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 50.898801][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.908958][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.937850][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 50.941538][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 51.002705][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.004631][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.019647][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 51.033351][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.040204][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.065344][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 51.072031][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.074000][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.076810][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 51.090738][ T13] Bluetooth: hci0: command 0x040f tx timeout [ 51.092439][ T13] Bluetooth: hci1: command 0x040f tx timeout [ 51.183678][ T4070] Bluetooth: hci3: command 0x040f tx timeout [ 51.881534][ T4070] Bluetooth: hci2: command 0x040f tx timeout [ 51.884443][ T4104] Bluetooth: hci4: command 0x040f tx timeout [ 51.994074][ T4034] device veth0_macvtap entered promiscuous mode [ 52.051675][ T382] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.053705][ T382] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.968374][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 52.971257][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 52.973789][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 52.977227][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 53.046796][ T4034] device veth1_macvtap entered promiscuous mode [ 53.260081][ T4069] Bluetooth: hci1: command 0x0419 tx timeout [ 53.261593][ T4069] Bluetooth: hci0: command 0x0419 tx timeout [ 53.264279][ T4070] Bluetooth: hci3: command 0x0419 tx timeout [ 53.287163][ T4128] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10'. [ 53.887756][ T4133] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9'. [ 54.722404][ T4104] Bluetooth: hci4: command 0x0419 tx timeout [ 54.731830][ T4104] Bluetooth: hci2: command 0x0419 tx timeout [ 55.695317][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.699034][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.701446][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.703716][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.705868][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.708095][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.710327][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.712579][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.716235][ T4034] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.981369][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.984190][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.992594][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.999378][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.856069][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.856093][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.856107][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.856120][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.856138][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.856151][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.857328][ T4034] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.984398][ T4152] netlink: 'syz.4.5': attribute type 1 has an invalid length. [ 58.679772][ C1] sched: RT throttling activated [ 59.410889][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.413792][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.418762][ T4034] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.423739][ T4034] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.426742][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 59.439208][ T4034] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.448551][ T4034] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.052442][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.054296][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.057153][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.467052][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.469723][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.647772][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.637150][ T4221] udc-core: couldn't find an available UDC or it's busy [ 67.638882][ T4221] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 70.280535][ T26] audit: type=1326 audit(70.240:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4234 comm="syz.2.35" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92c91368 code=0x7ffc0000 [ 70.307692][ T26] audit: type=1326 audit(70.260:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4234 comm="syz.2.35" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92c91368 code=0x7ffc0000 [ 70.373373][ T26] audit: type=1326 audit(70.330:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4234 comm="syz.2.35" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=178 compat=0 ip=0xffff92c91368 code=0x7ffc0000 [ 70.382792][ T26] audit: type=1326 audit(70.340:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4234 comm="syz.2.35" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92c91368 code=0x7ffc0000 [ 70.407551][ T26] audit: type=1326 audit(70.340:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4234 comm="syz.2.35" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92c91368 code=0x7ffc0000 [ 70.487441][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.489195][ T2055] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.500548][ T7] cfg80211: failed to load regulatory.db [ 70.599072][ T4248] udc-core: couldn't find an available UDC or it's busy [ 70.602064][ T4248] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 70.623954][ T4252] udc-core: couldn't find an available UDC or it's busy [ 70.625564][ T4252] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 74.657262][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 74.662191][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.664018][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.668264][ T4279] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 76.048668][ T4301] netlink: 708 bytes leftover after parsing attributes in process `syz.4.53'. [ 76.233669][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 76.248412][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.260150][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.466245][ T4307] udc-core: couldn't find an available UDC or it's busy [ 76.471256][ T4307] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 80.725546][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 80.732310][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 80.734084][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 80.738287][ T4347] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 80.858095][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 81.046395][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.048185][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.067843][ T4356] xt_NFQUEUE: number of total queues is 0 [ 82.088726][ T4351] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.236643][ T4351] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.154503][ T4121] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.165726][ T4121] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.271339][ T4382] Zero length message leads to an empty skb [ 87.736777][ T4413] netlink: 4 bytes leftover after parsing attributes in process `syz.3.82'. [ 89.777269][ T4443] loop2: detected capacity change from 0 to 40427 [ 89.970029][ T4443] F2FS-fs (loop2): Unrecognized mount option "age_extent_cache" or missing value [ 90.855548][ T4457] syz.4.91 (4457): /proc/4457/oom_adj is deprecated, please use /proc/4457/oom_score_adj instead. [ 91.262746][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 91.282964][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 91.286760][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 93.823778][ T4491] syz.3.103 (4491): drop_caches: 2 [ 95.309726][ T4511] netlink: 4 bytes leftover after parsing attributes in process `syz.2.110'. [ 95.315603][ T4121] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.327384][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 95.342751][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 95.347998][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 95.401352][ T4508] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 95.420610][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 95.464733][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 95.492673][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 96.161237][ T4520] loop0: detected capacity change from 0 to 40427 [ 96.260505][ T4520] F2FS-fs (loop0): Unrecognized mount option "age_extent_cache" or missing value [ 97.029102][ T4540] udc-core: couldn't find an available UDC or it's busy [ 97.069920][ T4540] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 97.348010][ T4544] netlink: 48 bytes leftover after parsing attributes in process `syz.0.120'. [ 97.363592][ T4544] netlink: 12 bytes leftover after parsing attributes in process `syz.0.120'. [ 97.411411][ T4547] udc-core: couldn't find an available UDC or it's busy [ 97.413175][ T4547] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 98.938638][ T4564] device bond_slave_0 entered promiscuous mode [ 98.940222][ T4564] device bond_slave_1 entered promiscuous mode [ 99.049801][ T4564] device macsec1 entered promiscuous mode [ 99.051192][ T4564] device bond0 entered promiscuous mode [ 99.129676][ T4567] device wlan0 entered promiscuous mode [ 99.470007][ T4567] device macsec1 entered promiscuous mode [ 99.478176][ T4567] device wlan0 left promiscuous mode [ 100.978640][ T4576] loop4: detected capacity change from 0 to 40427 [ 101.978973][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 101.982681][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 101.984492][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 102.024959][ T4576] F2FS-fs (loop4): Unrecognized mount option "age_extent_cache" or missing value [ 102.073353][ T4588] device bridge1 entered promiscuous mode [ 102.529458][ T4595] binder: 4592:4595 tried to acquire reference to desc 0, got 1 instead [ 102.557438][ T4595] binder: tried to use weak ref as strong ref [ 102.559114][ T4595] binder: 4592:4595 Acquire 1 refcount change on invalid ref 1 ret -22 [ 102.650679][ T4605] IPVS: length: 60 != 8 [ 102.744786][ T4607] netlink: 8 bytes leftover after parsing attributes in process `syz.1.141'. [ 102.779726][ T4607] device bond_slave_0 entered promiscuous mode [ 102.781187][ T4607] device bond_slave_1 entered promiscuous mode [ 102.791214][ T4607] device macsec1 entered promiscuous mode [ 102.796045][ T4607] device bond0 entered promiscuous mode [ 103.953044][ T4628] udc-core: couldn't find an available UDC or it's busy [ 103.954627][ T4628] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 104.149392][ T4634] IPv6: NLM_F_REPLACE set, but no existing node found! [ 104.237638][ T4630] loop3: detected capacity change from 0 to 40427 [ 104.286986][ T4630] F2FS-fs (loop3): Unrecognized mount option "age_extent_cache" or missing value [ 104.458919][ T4642] netlink: 8 bytes leftover after parsing attributes in process `syz.1.156'. [ 106.288362][ T4654] binder: 4650:4654 ioctl 4018620d 0 returned -22 [ 106.290819][ T4654] binder: 4650:4654 ioctl c0306201 0 returned -14 [ 106.298089][ T4104] Bluetooth: hci0: command 0x0409 tx timeout [ 107.816775][ T4671] binder: 4670:4671 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 107.824560][ T4671] binder: 4671 RLIMIT_NICE not set [ 107.869105][ T4672] binder: 4670:4672 tried to acquire reference to desc 0, got 1 instead [ 107.873492][ T4671] binder: 4671 RLIMIT_NICE not set [ 107.878564][ T4671] binder: 4671 RLIMIT_NICE not set [ 107.885791][ T4671] binder: 4670:4671 got transaction with invalid handle, 0 [ 107.893377][ T4671] binder: 4670:4671 transaction failed 29201/-22, size 72-24 line 3242 [ 107.895435][ T4671] binder: send failed reply for transaction 10 to 4670:4672 [ 107.919989][ T1535] binder: undelivered TRANSACTION_ERROR: 29190 [ 107.949593][ T7] binder: undelivered TRANSACTION_COMPLETE [ 107.951302][ T7] binder: undelivered TRANSACTION_ERROR: 29201 [ 109.084758][ T4684] loop0: detected capacity change from 0 to 40427 [ 109.270507][ T4684] F2FS-fs (loop0): Unrecognized mount option "age_extent_cache" or missing value [ 109.705569][ T4686] netlink: 8 bytes leftover after parsing attributes in process `syz.3.171'. [ 109.835570][ T4697] device vlan2 entered promiscuous mode [ 110.863871][ T26] audit: type=1326 audit(110.820:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4704 comm="syz.0.177" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92f66368 code=0x7ffc0000 [ 110.874287][ T26] audit: type=1326 audit(110.830:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4704 comm="syz.0.177" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=81 compat=0 ip=0xffff92f66368 code=0x7ffc0000 [ 111.056667][ T26] audit: type=1326 audit(111.010:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4704 comm="syz.0.177" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92f66368 code=0x7ffc0000 [ 111.062264][ T26] audit: type=1326 audit(111.020:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4704 comm="syz.0.177" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92f66368 code=0x7ffc0000 [ 111.071572][ T4705] netlink: 664 bytes leftover after parsing attributes in process `syz.0.177'. [ 113.536038][ T4734] loop1: detected capacity change from 0 to 40427 [ 115.992163][ T4734] F2FS-fs (loop1): Unrecognized mount option "age_extent_cache" or missing value [ 116.084256][ T4758] netlink: 8 bytes leftover after parsing attributes in process `syz.4.192'. [ 117.334790][ T4775] netlink: 8 bytes leftover after parsing attributes in process `syz.1.196'. [ 120.128867][ T4790] netlink: 8 bytes leftover after parsing attributes in process `syz.0.205'. [ 120.139289][ T4788] udc-core: couldn't find an available UDC or it's busy [ 120.140997][ T4788] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 120.558623][ T4793] loop1: detected capacity change from 0 to 40427 [ 120.567629][ T4793] F2FS-fs (loop1): Unrecognized mount option "age_extent_cache" or missing value [ 121.441684][ T4798] netlink: 8 bytes leftover after parsing attributes in process `syz.0.208'. [ 121.547137][ T4798] device bond_slave_0 entered promiscuous mode [ 121.548668][ T4798] device bond_slave_1 entered promiscuous mode [ 121.552746][ T4798] device macsec1 entered promiscuous mode [ 121.557651][ T4798] device bond0 entered promiscuous mode [ 121.578842][ T4805] netlink: 8 bytes leftover after parsing attributes in process `syz.3.211'. [ 121.601627][ T4805] device vlan2 entered promiscuous mode [ 121.806883][ T4812] netlink: 'syz.2.213': attribute type 10 has an invalid length. [ 121.808797][ T4812] netlink: 40 bytes leftover after parsing attributes in process `syz.2.213'. [ 121.858342][ T4812] team0: Port device geneve0 added [ 121.942326][ T4818] IPVS: length: 60 != 8 [ 122.368808][ T4831] loop2: detected capacity change from 0 to 40427 [ 122.412979][ T4831] F2FS-fs (loop2): Unrecognized mount option "age_extent_cache" or missing value [ 122.519013][ T4839] syz.1.225 sent an empty control message without MSG_MORE. [ 122.592650][ T4840] netlink: 8 bytes leftover after parsing attributes in process `syz.0.226'. [ 122.756877][ T4845] netlink: 8 bytes leftover after parsing attributes in process `syz.4.227'. [ 122.801769][ T4845] device vlan2 entered promiscuous mode [ 123.470652][ T4868] ODEBUG: Out of memory. ODEBUG disabled [ 123.602931][ T4868] syz.1.237 (4868): drop_caches: 2 [ 123.962814][ T4876] loop3: detected capacity change from 0 to 40427 [ 123.989579][ T4875] device syzkaller0 entered promiscuous mode [ 124.004361][ T4880] device bond_slave_0 entered promiscuous mode [ 124.005762][ T4880] device bond_slave_1 entered promiscuous mode [ 124.009082][ T4880] device macsec1 entered promiscuous mode [ 124.011222][ T4880] device bond0 entered promiscuous mode [ 124.014245][ T4876] F2FS-fs (loop3): Unrecognized mount option "age_extent_cache" or missing value [ 124.017252][ T4879] netlink: 8 bytes leftover after parsing attributes in process `syz.1.242'. [ 124.027133][ T4879] device vlan2 entered promiscuous mode [ 128.500333][ T4911] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 128.518053][ T4919] device bond_slave_0 entered promiscuous mode [ 128.519633][ T4919] device bond_slave_1 entered promiscuous mode [ 128.521434][ T4919] device macsec1 entered promiscuous mode [ 128.522891][ T4919] device bond0 entered promiscuous mode [ 129.787936][ T4950] loop2: detected capacity change from 0 to 40427 [ 131.245403][ T2055] ieee802154 phy1 wpan1: encryption failed: -22 [ 131.301170][ T4950] F2FS-fs (loop2): Unrecognized mount option "age_extent_cache" or missing value [ 131.409009][ T4962] udc-core: couldn't find an available UDC or it's busy [ 131.414756][ T4962] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 131.456297][ T4965] binder: 4963:4965 tried to acquire reference to desc 0, got 1 instead [ 131.479498][ T4965] binder: 4963:4965 got transaction with invalid data ptr [ 131.490844][ T4965] binder: 4963:4965 transaction failed 29201/-14, size 0-4088 line 3186 [ 131.520610][ T4104] binder: undelivered TRANSACTION_COMPLETE [ 131.522409][ T4104] binder: undelivered TRANSACTION_ERROR: 29201 [ 131.525725][ T4104] binder: undelivered transaction 18, process died. [ 132.233914][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 132.501019][ T4998] udc-core: couldn't find an available UDC or it's busy [ 132.502666][ T4998] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 133.188228][ T5009] loop4: detected capacity change from 0 to 40427 [ 133.271683][ T5009] F2FS-fs (loop4): Unrecognized mount option "age_extent_cache" or missing value [ 133.761770][ T5024] netlink: 134656 bytes leftover after parsing attributes in process `syz.2.294'. [ 133.763892][ T5024] netlink: zone id is out of range [ 133.765170][ T5024] netlink: zone id is out of range [ 133.766305][ T5024] netlink: zone id is out of range [ 133.767520][ T5024] netlink: zone id is out of range [ 133.768996][ T5024] netlink: get zone limit has 4 unknown bytes [ 134.388883][ T5036] ======================================================= [ 134.388883][ T5036] WARNING: The mand mount option has been deprecated and [ 134.388883][ T5036] and is ignored by this kernel. Remove the mand [ 134.388883][ T5036] option from the mount to silence this warning. [ 134.388883][ T5036] ======================================================= [ 135.200563][ T5038] udc-core: couldn't find an available UDC or it's busy [ 135.202846][ T5038] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 136.520953][ T4013] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 136.523171][ T4013] Bluetooth: hci4: Injecting HCI hardware error event [ 136.525531][ T144] Bluetooth: hci4: hardware error 0x00 [ 137.644765][ T5062] loop3: detected capacity change from 0 to 40427 [ 137.728884][ T5062] F2FS-fs (loop3): Unrecognized mount option "age_extent_cache" or missing value [ 138.658494][ T136] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.776394][ T136] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.883822][ T136] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.087399][ T136] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.109256][ T5068] chnl_net:caif_netlink_parms(): no params data found [ 139.442601][ T5068] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.444225][ T5068] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.446939][ T5068] device bridge_slave_0 entered promiscuous mode [ 139.472829][ T5068] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.474995][ T5068] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.478371][ T5068] device bridge_slave_1 entered promiscuous mode [ 139.747476][ T5102] loop3: detected capacity change from 0 to 40427 [ 139.782191][ T5102] F2FS-fs (loop3): Unrecognized mount option "age_extent_cache" or missing value [ 139.790337][ T5068] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 139.819552][ T5068] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.723569][ T4068] Bluetooth: hci3: command 0x0409 tx timeout [ 141.040872][ T5068] team0: Port device team_slave_0 added [ 141.045480][ T5068] team0: Port device team_slave_1 added [ 141.098997][ T5068] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.100928][ T5068] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.111192][ T5068] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.129630][ T5068] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.133415][ T5068] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.154700][ T5068] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.332174][ T5068] device hsr_slave_0 entered promiscuous mode [ 141.380283][ T5068] device hsr_slave_1 entered promiscuous mode [ 141.419914][ T5068] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 141.421680][ T5068] Cannot create hsr debugfs directory [ 141.990511][ T5068] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 142.042697][ T5068] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 142.098565][ T5160] loop0: detected capacity change from 0 to 40427 [ 142.134491][ T5068] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 142.148232][ T5160] F2FS-fs (loop0): Unrecognized mount option "age_extent_cache" or missing value [ 142.181619][ T5068] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 142.455863][ T5068] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.521853][ T4121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 142.524136][ T4121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 142.537623][ T5068] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.570477][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 142.572967][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 142.575342][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.577167][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.595316][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 142.601681][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 142.618879][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 142.637477][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.639055][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.668239][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 142.672383][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 142.730528][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 142.738843][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 142.759916][ T4068] Bluetooth: hci3: command 0x041b tx timeout [ 142.779377][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 142.818513][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 142.839029][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 142.848657][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 142.858708][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 142.867678][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 142.894796][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 142.906730][ T5068] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 143.473376][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 143.475505][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 143.489838][ T5068] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.527775][ T136] device hsr_slave_0 left promiscuous mode [ 144.576657][ T136] device hsr_slave_1 left promiscuous mode [ 144.821629][ T136] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.840808][ T5222] Bluetooth: hci3: command 0x040f tx timeout [ 144.863618][ T136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.068786][ T136] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.154786][ T136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.550527][ T136] device bridge_slave_1 left promiscuous mode [ 145.553269][ T136] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.662521][ T136] device bridge_slave_0 left promiscuous mode [ 145.664054][ T136] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.724889][ T136] device bond0 left promiscuous mode [ 145.726426][ T136] device bond_slave_0 left promiscuous mode [ 145.727953][ T136] device bond_slave_1 left promiscuous mode [ 145.846237][ T5235] loop1: detected capacity change from 0 to 40427 [ 145.860987][ T136] device veth1_macvtap left promiscuous mode [ 145.862721][ T136] device veth0_macvtap left promiscuous mode [ 145.864219][ T136] device veth1_vlan left promiscuous mode [ 145.865687][ T136] device veth0_vlan left promiscuous mode [ 145.889115][ T5235] F2FS-fs (loop1): Unrecognized mount option "age_extent_cache" or missing value [ 147.057923][ T5222] Bluetooth: hci3: command 0x0419 tx timeout [ 147.298180][ T136] team0 (unregistering): Port device team_slave_1 removed [ 147.307076][ T136] team0 (unregistering): Port device team_slave_0 removed [ 147.577953][ T136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 148.046309][ T136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 148.366533][ T136] bond0 (unregistering): Released all slaves [ 148.480379][ T5254] xt_NFQUEUE: number of total queues is 0 [ 148.918693][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 149.868730][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 149.964579][ T5068] device veth0_vlan entered promiscuous mode [ 149.971475][ T5068] device veth1_vlan entered promiscuous mode [ 150.030747][ T5276] netlink: 8 bytes leftover after parsing attributes in process `syz.2.357'. [ 150.049889][ T4163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 150.052417][ T4163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 150.054910][ T4163] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 150.057890][ T4163] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 150.081178][ T4163] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 150.087525][ T4163] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 150.119692][ T5068] device veth0_macvtap entered promiscuous mode [ 150.131936][ T4163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 150.140489][ T4163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 150.143018][ T4163] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 150.308629][ T5286] loop3: detected capacity change from 0 to 40427 [ 150.314954][ T5068] device veth1_macvtap entered promiscuous mode [ 150.345701][ T5068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.358406][ T5068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.412185][ T5068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.414535][ T5068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.416863][ T5068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.419118][ T5068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.431527][ T5286] F2FS-fs (loop3): Unrecognized mount option "age_extent_cache" or missing value [ 150.439867][ T5068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.442117][ T5068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.453649][ T5068] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.466251][ T5068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.468715][ T5068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.484010][ T5068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.486400][ T5068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.488522][ T5068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.498497][ T5068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.557051][ T5068] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.489136][ T5068] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.517831][ T5068] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.522470][ T5068] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.539132][ T5068] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.622106][ T4121] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 151.624559][ T4121] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 151.626773][ T4121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 151.629201][ T4121] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 151.686152][ T4121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 153.043330][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.045403][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.051204][ T4163] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 153.070517][ T4224] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.072589][ T4224] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.075447][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 154.786984][ T5328] netlink: 8 bytes leftover after parsing attributes in process `syz.0.369'. [ 155.469917][ T5348] loop0: detected capacity change from 0 to 40427 [ 155.735350][ T5348] F2FS-fs (loop0): Unrecognized mount option "age_extent_cache" or missing value [ 157.262298][ T5374] xt_NFQUEUE: number of total queues is 0 [ 157.276445][ T5370] netlink: 'syz.5.381': attribute type 10 has an invalid length. [ 157.366395][ T5370] team0: Port device netdevsim0 added [ 157.516408][ T5386] udc-core: couldn't find an available UDC or it's busy [ 157.518118][ T5386] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 157.599259][ T5389] netlink: 8 bytes leftover after parsing attributes in process `syz.0.384'. [ 158.801205][ T5403] netlink: 8 bytes leftover after parsing attributes in process `syz.0.388'. [ 158.956745][ T5412] netlink: 'syz.1.389': attribute type 8 has an invalid length. [ 159.522870][ T5422] loop3: detected capacity change from 0 to 40427 [ 159.856107][ T5422] F2FS-fs (loop3): Unrecognized mount option "age_extent_cache" or missing value [ 161.489469][ T5445] netlink: 20 bytes leftover after parsing attributes in process `syz.0.398'. [ 161.612857][ T5447] netlink: 8 bytes leftover after parsing attributes in process `syz.2.400'. [ 166.352862][ T5496] netlink: 20 bytes leftover after parsing attributes in process `syz.5.413'. [ 166.364421][ T5492] loop0: detected capacity change from 0 to 40427 [ 166.428324][ T5492] F2FS-fs (loop0): Unrecognized mount option "age_extent_cache" or missing value [ 166.513002][ T5505] netlink: 8 bytes leftover after parsing attributes in process `syz.5.416'. [ 166.581898][ T5507] netlink: 20 bytes leftover after parsing attributes in process `syz.3.415'. [ 169.059683][ T5550] udc-core: couldn't find an available UDC or it's busy [ 169.088860][ T5550] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 169.096126][ T4067] Bluetooth: hci2: command 0x0406 tx timeout [ 170.149450][ T4067] Bluetooth: hci1: command 0x0406 tx timeout [ 170.167519][ T4067] Bluetooth: hci0: command 0x0406 tx timeout [ 170.548319][ T5569] netlink: 20 bytes leftover after parsing attributes in process `syz.1.430'. [ 170.820109][ T5571] loop3: detected capacity change from 0 to 40427 [ 170.904595][ T5571] F2FS-fs (loop3): Unrecognized mount option "age_extent_cache" or missing value [ 170.912576][ T5580] netlink: 28 bytes leftover after parsing attributes in process `syz.1.433'. [ 173.705594][ T5611] netlink: 20 bytes leftover after parsing attributes in process `syz.1.443'. [ 176.474245][ T5627] netlink: 28 bytes leftover after parsing attributes in process `syz.1.447'. [ 176.651329][ T5639] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input3 [ 176.761532][ T5653] netlink: 'syz.1.454': attribute type 4 has an invalid length. [ 176.836197][ T5657] netlink: 'syz.1.454': attribute type 4 has an invalid length. [ 176.891875][ T5663] netlink: 20 bytes leftover after parsing attributes in process `syz.1.457'. [ 178.832992][ T5680] netlink: 28 bytes leftover after parsing attributes in process `syz.3.462'. [ 178.833040][ T5683] udc-core: couldn't find an available UDC or it's busy [ 178.842400][ T5683] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 179.232976][ T5698] netlink: 20 bytes leftover after parsing attributes in process `syz.2.470'. [ 181.815196][ T5714] netlink: 28 bytes leftover after parsing attributes in process `syz.0.476'. [ 185.835400][ T5756] capability: warning: `syz.1.487' uses deprecated v2 capabilities in a way that may be insecure [ 185.869388][ T26] audit: type=1326 audit(185.820:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5747 comm="syz.0.485" exe="/root/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff92f66368 code=0x0 [ 188.087211][ T5791] capability: warning: `syz.3.495' uses 32-bit capabilities (legacy support in use) [ 188.121193][ T5794] netlink: 'syz.2.496': attribute type 12 has an invalid length. [ 188.378138][ T5798] xt_NFQUEUE: number of total queues is 0 [ 189.874768][ T5823] netlink: 28 bytes leftover after parsing attributes in process `syz.2.502'. [ 191.741421][ T5843] netlink: 44 bytes leftover after parsing attributes in process `syz.1.506'. [ 193.324410][ T2055] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.694391][ T5871] xt_NFQUEUE: number of total queues is 0 [ 195.470574][ T5897] netlink: 16 bytes leftover after parsing attributes in process `syz.2.518'. [ 195.472637][ T5897] netlink: 4 bytes leftover after parsing attributes in process `syz.2.518'. [ 195.503894][ T5902] binder: 5899:5902 got transaction to invalid handle, 1 [ 195.505556][ T5902] binder: 5899:5902 transaction failed 29201/-22, size 0-0 line 2917 [ 195.535965][ T5222] binder: undelivered TRANSACTION_ERROR: 29201 [ 195.835566][ T5908] loop3: detected capacity change from 0 to 40427 [ 196.429967][ T5908] F2FS-fs (loop3): Unrecognized mount option "age_extent_cache" or missing value [ 198.238339][ T4013] Bluetooth: hci1: command 0x0406 tx timeout [ 198.249329][ T5942] xt_NFQUEUE: number of total queues is 0 [ 198.330901][ T5956] binder: 5947:5956 tried to acquire reference to desc 0, got 1 instead [ 198.334209][ T5956] binder: 5947:5956 got transaction with invalid data ptr [ 198.335945][ T5956] binder: 5947:5956 transaction failed 29201/-14, size 0-4088 line 3186 [ 198.370110][ T5955] netlink: 16 bytes leftover after parsing attributes in process `syz.2.534'. [ 198.378067][ T5955] netlink: 4 bytes leftover after parsing attributes in process `syz.2.534'. [ 198.604102][ T26] audit: type=1326 audit(198.560:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5968 comm="syz.3.536" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9dcb368 code=0x7ffc0000 [ 198.614749][ T26] audit: type=1326 audit(198.570:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5968 comm="syz.3.536" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=202 compat=0 ip=0xffffb9dcb368 code=0x7ffc0000 [ 198.639835][ T26] audit: type=1326 audit(198.570:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5968 comm="syz.3.536" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9dcb368 code=0x7ffc0000 [ 198.677534][ T26] audit: type=1326 audit(198.570:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5968 comm="syz.3.536" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9dcb368 code=0x7ffc0000 [ 198.756110][ T5977] netlink: 'syz.3.539': attribute type 29 has an invalid length. [ 198.758543][ T5977] netlink: 'syz.3.539': attribute type 29 has an invalid length. [ 198.762243][ T5977] netlink: 'syz.3.539': attribute type 29 has an invalid length. [ 198.955543][ T5978] x_tables: ip_tables: osf match: only valid for protocol 6 [ 199.731763][ T4068] binder: undelivered TRANSACTION_COMPLETE [ 199.736372][ T4068] binder: undelivered TRANSACTION_ERROR: 29201 [ 199.939941][ T1960] binder: undelivered transaction 25, process died. [ 200.962439][ T5997] xt_NFQUEUE: number of total queues is 0 [ 201.147639][ T6007] netlink: 16 bytes leftover after parsing attributes in process `syz.3.547'. [ 201.211154][ T6007] netlink: 4 bytes leftover after parsing attributes in process `syz.3.547'. [ 203.216470][ T6045] xt_NFQUEUE: number of total queues is 0 [ 203.394124][ T6054] netlink: 16 bytes leftover after parsing attributes in process `syz.2.558'. [ 204.142607][ T4029] Bluetooth: hci3: link tx timeout [ 204.143995][ T4029] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 204.146028][ T4029] Bluetooth: hci3: link tx timeout [ 204.147179][ T4029] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 205.183897][ T6089] netlink: 24 bytes leftover after parsing attributes in process `syz.5.566'. [ 205.191713][ T4027] Bluetooth: hci3: link tx timeout [ 205.192912][ T4027] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 205.194665][ T6090] xt_NFQUEUE: number of total queues is 0 [ 205.241237][ T4027] Bluetooth: hci3: link tx timeout [ 205.242841][ T4027] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 205.386880][ T6103] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 205.417237][ T4027] Bluetooth: hci3: link tx timeout [ 205.418461][ T4027] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 205.472558][ T6103] loop2: detected capacity change from 0 to 2048 [ 205.617234][ T4027] Bluetooth: hci3: link tx timeout [ 205.618509][ T4027] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 205.621953][ T6103] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 205.717257][ T6103] EXT4-fs (loop2): mounted filesystem without journal. Opts: nouid32,mblk_io_submit,i_version,,errors=continue. Quota mode: none. [ 205.743193][ T6119] udc-core: couldn't find an available UDC or it's busy [ 205.774207][ T6119] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 205.802423][ T6123] udc-core: couldn't find an available UDC or it's busy [ 205.803984][ T6123] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 206.199996][ T4104] Bluetooth: hci3: command 0x0406 tx timeout [ 206.259131][ T6128] udc-core: couldn't find an available UDC or it's busy [ 206.261082][ T6128] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 206.365884][ T6132] xt_NFQUEUE: number of total queues is 0 [ 206.412915][ T6138] udc-core: couldn't find an available UDC or it's busy [ 206.414690][ T6138] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 206.533813][ T4027] Bluetooth: hci3: link tx timeout [ 206.535667][ T4027] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 206.537890][ T4027] Bluetooth: hci3: link tx timeout [ 206.539160][ T4027] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 207.029931][ T4027] Bluetooth: hci3: link tx timeout [ 207.031871][ T4027] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 207.550553][ T4027] Bluetooth: hci3: link tx timeout [ 207.551910][ T4027] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 207.660454][ T6162] loop5: detected capacity change from 0 to 64 [ 207.730344][ T6162] hfs: get root inode failed [ 207.944071][ T6180] xt_NFQUEUE: number of total queues is 0 [ 211.023547][ T4104] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 211.040043][ T4104] Bluetooth: hci2: Injecting HCI hardware error event [ 211.041775][ T4027] Bluetooth: hci2: hardware error 0x00 [ 211.087602][ T4029] Bluetooth: hci3: link tx timeout [ 211.088870][ T4029] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 211.275727][ T6205] netlink: 'syz.2.600': attribute type 10 has an invalid length. [ 211.319387][ T6205] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.346071][ T6205] device batadv0 entered promiscuous mode [ 211.348575][ T6205] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 211.385591][ T6208] loop5: detected capacity change from 0 to 512 [ 211.423867][ T6198] loop3: detected capacity change from 0 to 32768 [ 211.482043][ T6198] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.598 (6198) [ 211.520097][ T6208] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 211.621185][ T6198] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 211.624013][ T6198] BTRFS info (device loop3): using free space tree [ 211.625477][ T6198] BTRFS info (device loop3): has skinny extents [ 211.688990][ T6198] BTRFS info (device loop3): enabling ssd optimizations [ 211.791346][ T6239] loop5: detected capacity change from 0 to 1024 [ 211.815883][ T4029] Bluetooth: hci3: link tx timeout [ 211.817089][ T4029] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 211.851291][ T6239] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 211.904088][ T6239] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,barrier,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,noquota,nogrpid,noauto_da_alloc,mblk_io_submit,,errors=continue. Quota mode: none. [ 212.050707][ T6248] loop5: detected capacity change from 0 to 1024 [ 212.130900][ T6248] EXT4-fs (loop5): Ignoring removed orlov option [ 212.154296][ T6248] EXT4-fs (loop5): mounted filesystem without journal. Opts: auto_da_alloc,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,usrjquota=,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 212.167319][ T6251] loop1: detected capacity change from 0 to 128 [ 213.656378][ T4029] Bluetooth: hci3: link tx timeout [ 213.657649][ T4029] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 213.677637][ T4029] Bluetooth: hci3: link tx timeout [ 213.678835][ T4029] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 213.889246][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 214.680102][ T7] Bluetooth: hci3: command 0x0405 tx timeout [ 214.728499][ T7] [ 214.729280][ T7] ============================= [ 214.730467][ T7] WARNING: suspicious RCU usage [ 214.731610][ T7] 5.15.173-syzkaller #0 Not tainted [ 214.732832][ T7] ----------------------------- [ 214.733940][ T7] net/sched/sch_api.c:304 suspicious rcu_dereference_protected() usage! [ 214.735841][ T7] [ 214.735841][ T7] other info that might help us debug this: [ 214.735841][ T7] [ 214.738057][ T7] [ 214.738057][ T7] rcu_scheduler_active = 2, debug_locks = 1 [ 214.739898][ T7] 8 locks held by kworker/0:0/7: [ 214.740971][ T7] #0: ffff0000e54cb138 ((wq_completion)wg-crypt-wg0#4){+.+.}-{0:0}, at: process_one_work+0x66c/0x11b8 [ 214.743526][ T7] #1: ffff80001bc17c00 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_one_work+0x6ac/0x11b8 [ 214.746348][ T7] #2: ffff0000e732c318 (&peer->endpoint_lock){++-.}-{2:2}, at: wg_socket_send_skb_to_peer+0x64/0x1a8 [ 214.748971][ T7] #3: ffff800014c92340 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x18/0x54 [ 214.751139][ T7] #4: ffff800014c92340 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x18/0x54 [ 214.753409][ T7] #5: ffff800014c92340 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x18/0x54 [ 214.755516][ T7] #6: ffff0000c0f83108 (&sch->q.lock){+.-.}-{2:2}, at: __dev_queue_xmit+0x8a0/0x2ac8 [ 214.757505][ T7] #7: ffff800014c922e0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x10/0x4c [ 214.759622][ T7] [ 214.759622][ T7] stack backtrace: [ 214.760965][ T7] CPU: 0 PID: 7 Comm: kworker/0:0 Not tainted 5.15.173-syzkaller #0 [ 214.762682][ T7] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 214.764889][ T7] Workqueue: wg-crypt-wg0 wg_packet_tx_worker [ 214.766175][ T7] Call trace: [ 214.766922][ T7] dump_backtrace+0x0/0x530 [ 214.767911][ T7] show_stack+0x2c/0x3c [ 214.768768][ T7] dump_stack_lvl+0x108/0x170 [ 214.769817][ T7] dump_stack+0x1c/0x58 [ 214.770785][ T7] lockdep_rcu_suspicious+0x188/0x1e0 [ 214.772029][ T7] qdisc_lookup+0xc8/0x64c [ 214.773036][ T7] qdisc_tree_reduce_backlog+0x208/0x4a4 [ 214.774349][ T7] pfifo_tail_enqueue+0x280/0x38c [ 214.775489][ T7] tbf_enqueue+0x2f8/0x5f0 [ 214.776475][ T7] dev_qdisc_enqueue+0x60/0x35c [ 214.777524][ T7] __dev_queue_xmit+0x1018/0x2ac8 [ 214.778628][ T7] dev_queue_xmit+0x24/0x34 [ 214.779691][ T7] ip6_finish_output2+0x132c/0x1cec [ 214.780911][ T7] __ip6_finish_output+0x580/0x6ec [ 214.782068][ T7] ip6_finish_output+0x40/0x218 [ 214.783191][ T7] ip6_output+0x274/0x594 [ 214.784176][ T7] ip6_local_out+0x120/0x160 [ 214.785231][ T7] udp_tunnel6_xmit_skb+0x43c/0x938 [ 214.786437][ T7] send6+0x560/0x930 [ 214.787303][ T7] wg_socket_send_skb_to_peer+0xfc/0x1a8 [ 214.788597][ T7] wg_packet_tx_worker+0x1a8/0x714 [ 214.789726][ T7] process_one_work+0x790/0x11b8 [ 214.790906][ T7] worker_thread+0x910/0x1034 [ 214.791993][ T7] kthread+0x37c/0x45c [ 214.793012][ T7] ret_from_fork+0x10/0x20 [ 215.747545][ T4029] Bluetooth: hci3: link tx timeout [ 215.748973][ T4029] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 215.754657][ T4029] Bluetooth: hci3: link tx timeout [ 215.755860][ T4029] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 217.479229][ T4029] Bluetooth: hci3: link tx timeout [ 217.480637][ T4029] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 219.406127][ T4029] Bluetooth: hci3: link tx timeout [ 219.407340][ T4029] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 219.469209][ T4029] Bluetooth: hci3: link tx timeout [ 219.470513][ T4029] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 219.480131][ T4029] Bluetooth: hci3: link tx timeout [ 219.481317][ T4029] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa