last executing test programs: 5.329978729s ago: executing program 1 (id=138): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) getpid() bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='sched_switch\x00', r4}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@bridge_getneigh={0x20, 0x1e, 0x3c964e403b131b43, 0x70bd27, 0x8000000, {0x7, 0x0, 0x0, 0x0, 0x0, 0xa12}}, 0x20}}, 0x0) 4.205252546s ago: executing program 1 (id=142): mlockall(0x2) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) socket(0x40000000015, 0x5, 0x0) socket(0x40000000015, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000040)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0x495, &(0x7f0000000200)={0x0, 0x3661, 0x0, 0x1, 0x29}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) 2.750426078s ago: executing program 1 (id=151): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0xe, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xfe, 0x7ffc0002}]}) get_mempolicy(0x0, 0x0, 0x8f3f, &(0x7f0000fff000/0x1000)=nil, 0x4) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f00000001c0)={0x4000000, 0x2}) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000040)={0x4000000}) io_uring_setup(0x14897, &(0x7f0000000340)={0x0, 0xfcd3, 0x8000, 0x40001, 0xfffffffe}) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="840000001200050100000000000000"], 0x84}, 0x1, 0x0, 0x0, 0x40}, 0x20040810) close_range(r0, 0xffffffffffffffff, 0x0) 2.61605117s ago: executing program 1 (id=154): r0 = socket(0x11, 0x3, 0x0) setsockopt$sock_int(r0, 0xffff, 0x800, &(0x7f0000000000), 0x4) 2.462052993s ago: executing program 2 (id=156): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="00000001000000000000000cfa00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 2.436770323s ago: executing program 1 (id=158): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) dup(0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x200c0084) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000380)='./bus\x00', 0x8, &(0x7f00000003c0)={[{@space_cache_v1}, {@metadata_ratio={'metadata_ratio', 0x3d, 0x3}}, {@ref_verify}, {@compress_algo={'compress', 0x3d, 'no'}}, {@clear_cache}, {@noacl}, {@space_cache_v1}, {@datasum}, {@nospace_cache}]}, 0x1, 0x55ae, &(0x7f000000ac40)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840), 0x0, 0x0, 0x0, 0x41}, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r1, 0x7) 2.387698644s ago: executing program 2 (id=159): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0x1, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x34, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0xef8}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x6}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0xc}, @TCA_HHF_QUANTUM={0x8, 0x2, 0x4}, @TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x7}, @TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x1ec}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000013006bcc9e3be34c6e17aa310769876c1d0000007ea60864160af36514001ac004000202080002000600010076e6f06cea2618c3ecb525c89c32f292b156a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 2.269561415s ago: executing program 4 (id=161): mlockall(0x2) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) socket(0x40000000015, 0x5, 0x0) socket(0x40000000015, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000040)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0x495, &(0x7f0000000200)={0x0, 0x3661, 0x0, 0x1, 0x29}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) 1.206320921s ago: executing program 4 (id=162): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x8, 0x8, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f00000001c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) 1.120399713s ago: executing program 2 (id=163): syz_usb_connect(0x1, 0x24, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0x46, 0x79, 0x34, 0x8, 0x5372, 0x2303, 0xedfd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x1, 0xa0, 0x1, [{{0x9, 0x4, 0x44, 0xe9, 0x0, 0x38, 0x15, 0x4f, 0xd}}]}}]}}, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) 1.062016224s ago: executing program 4 (id=164): r0 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 1.027430744s ago: executing program 4 (id=165): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0xe, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xfe, 0x7ffc0002}]}) get_mempolicy(0x0, 0x0, 0x8f3f, &(0x7f0000fff000/0x1000)=nil, 0x4) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f00000001c0)={0x4000000, 0x2}) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000040)={0x4000000}) io_uring_setup(0x14897, &(0x7f0000000340)={0x0, 0xfcd3, 0x8000, 0x40001, 0xfffffffe}) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="840000001200050100000000000000"], 0x84}, 0x1, 0x0, 0x0, 0x40}, 0x20040810) close_range(r0, 0xffffffffffffffff, 0x0) 834.774957ms ago: executing program 3 (id=167): sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfffff801}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8051}, 0x40000) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="780000001a0001002abd7000000000000a"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0) 812.294048ms ago: executing program 4 (id=168): setrlimit(0x0, &(0x7f0000000000)={0x0, 0xfffffffbffffffff}) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000080)=ANY=[@ANYBLOB='0'], 0x30}], 0x1}, 0x0) 706.05691ms ago: executing program 3 (id=169): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7fff, 0x40) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) 704.141789ms ago: executing program 3 (id=170): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$inet6(r0, &(0x7f0000000200)={&(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=[@flowinfo={{0x14, 0x29, 0xb, 0x5}}], 0x18}, 0x800) 632.05257ms ago: executing program 4 (id=171): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00979ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) 624.066261ms ago: executing program 3 (id=173): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0x1, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x34, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0xef8}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x6}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0xc}, @TCA_HHF_QUANTUM={0x8, 0x2, 0x4}, @TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x7}, @TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x1ec}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) socket$kcm(0x10, 0x2, 0x0) bind$phonet(0xffffffffffffffff, &(0x7f0000000240)={0x23, 0x1, 0x8, 0x3}, 0x10) 524.257412ms ago: executing program 0 (id=174): r0 = syz_open_dev$loop(&(0x7f0000000300), 0x8f, 0x0) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, 0x0) 421.999584ms ago: executing program 0 (id=175): r0 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 421.853204ms ago: executing program 2 (id=176): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$FUSE_GETXATTR(r0, &(0x7f0000004200)={0x18, 0xfffffffffffffffe}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) 403.919254ms ago: executing program 1 (id=177): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r1}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 371.185195ms ago: executing program 0 (id=178): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0xe, &(0x7f00000011c0)=ANY=[@ANYBLOB="b702000000000080bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e240000000000004504040001ffffff9404000001000a00b7040000000100006a0af2fe000000008500000078000000b70000000000000095000000000000009e17f199a68b061b93d83298a8cdda1ce784909b849d5550ad855dab54d8877a6db61d69f2ffcaa10350e11cb97ce8df1bc9a0c4eeceb9171e43405d621ffbc9b0d8ca56b50f0c010d631f6dbc8486bc5d5bf2ca8285056892db03cf1c62dd7c08a90b189d190c341035de53a9a53608c10556e5734eb84049761451ce540c772e069f80cb201b2de17dfdb4b60939d5d6aed4062049b87e03e2cd18568136207304e26f7fcc059c062234d5595f6fbaa187b81d1106000000000f0000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8000000000000000b91c61bd99dc89f12907af7dccd106cb937b450f859ce8292a79c3e40000b59b0fc46d6cec3c080a882add4e1179bd4a44f231a2d73148be428ba953df4aece69311687f4122073a236c3a32efa04137d46f0247d2638da3261c8162bb7c7824be6195a66d2e17e122040e11001131ce319045e5b3334e68475ac3f46aa2837f9004600daded9b19b35eebe52613c346e255421b23a278fd00004270b1cd5fc9aa2286ccca37db965d9dd366598f5ec993cb0cf127e2a46cfbdf63eea190d86a4d1b75ae98480100d33128954a7d093a54f7e75b3753508ca3c41685d1e407315e59d626c23b3f89a926e9382966853774e7dd1f1a2177cdf2802237c177d543e8da47a01f05e117e53518270239b69c117e2637c31085f4d8a596b6edab26afaf6605b231199f38a6fc7eb83714387450ea18eafbace8eec18a4b2c442e7b88a7611c1283bec84e1715fb9f4fcaf52c08058fc4f21c0ad71adabdd850aed3feec6eaab347bdf474e17b9aa345d1e6e3bb83f90230bdf53e7d0e5c3f914d905422b83f30936674ba8f0bffaf2305c0972df71fe5f4e01506471e897bced7798509e64df360d95f9a4099f864b0ba45efbdbd1d9db21a1d5c065567fd70aae68096827fa5c2d9bd20292344c7dcf6241447cfbb05b5d0fdb4e08afbac5397b64aa369922ed7ed8918f97294b6854210d2b93aaf92159dbaa2f186d4a420c68d6baf1c31de4f0bf478bfd51bb1e96ea849a80ae5a89be7e38474c7aade344d68324f9e12a6b9770e6bd12ae69efffaee58040753701af84c2924c1b5aea1650f42c9ae9820a33095f062fb88313d035ea405515a61a4be64f9fa0985c5be592090cc48291004609fdac2ab6100000000000000a84570c7c00d647daf8af334050b61e9b2d3f0adad1d1ff47be19b8da2799e9ecef8efabe73f92dbd0760f8bbd9c710bd1371e2b5d9a2ea2190f5e4f5cd641cdfe5d89f84a368ef7e6ff1eacdc0ec9e97b8f9c9e314661ea0aa8a104008d188b66b3a4aedeed9df4238a08fc2fb1007233cc2c87fcaa0cccd8ec03444471c1dd660c73acc17bff740d199a7c0c52c63c0408b5158e0000000c275eedb02f141113cf2c55b2c08c2c68cc99d2bb5840fba332e1c82862ec9b90104c48e41d32a47ac94ddee815dba8aeb5d3121cf247a81aef7805b020e9eec44cbe3055be69fe066824ba2292b9cdce41635fc00df96fb10a3a8cc60c4a76c65ebbb0640e0a29de94edf5cbefac1c5fa96e7080af804b22cabce10ea52f1018527f4aa39cdafa3eff63de2a7f50d042667820f6f86f276afb2b81da301e031351ee13013137e9d5cec0c84d7e3f82c6fd12eb98f9ea654bcb9ce59a2015183c6e65bb0537e611b830d74c30fb8207fca0990acdbb51e4e234026e00000000b3ebae3eb52c140953a350fcf0124b1a30b1afc29ea56f8413686d912eb8118d73ef9c6d3843ebcb555301c0205dd3040000002e334319c8979c322e92fbc2c400009f2404b941553843de114fdb03"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xfe, 0x7ffc0002}]}) get_mempolicy(0x0, 0x0, 0x8f3f, &(0x7f0000fff000/0x1000)=nil, 0x4) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f00000001c0)={0x4000000, 0x2}) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000040)={0x4000000}) io_uring_setup(0x14897, &(0x7f0000000340)={0x0, 0xfcd3, 0x8000, 0x40001, 0xfffffffe}) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="840000001200050100000000000000"], 0x84}, 0x1, 0x0, 0x0, 0x40}, 0x20040810) close_range(r0, 0xffffffffffffffff, 0x0) 237.262986ms ago: executing program 3 (id=179): r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b00)="1d35ad", 0x3}], 0x1}, 0x4000) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0x80000039f8, 0x4) sendto$inet6(r0, &(0x7f0000000000)="8d", 0x1, 0x40, 0x0, 0x0) 187.300107ms ago: executing program 2 (id=180): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, 0x0) 185.794087ms ago: executing program 0 (id=181): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x3a, 0x0, &(0x7f0000000040)=0xffffffffffffff65) 49.984019ms ago: executing program 3 (id=182): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={r1, 0x0, 0x0, 0x4000}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x13, r2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) 49.733339ms ago: executing program 2 (id=183): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0x1, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x34, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0xef8}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x6}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0xc}, @TCA_HHF_QUANTUM={0x8, 0x2, 0x4}, @TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x7}, @TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x1ec}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) 49.622399ms ago: executing program 0 (id=184): r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x121602, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) 0s ago: executing program 0 (id=185): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000c00), 0x20001, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r0, 0x3309) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.243' (ED25519) to the list of known hosts. syzkaller login: [ 34.110249][ T4285] cgroup: Unknown subsys name 'net' [ 34.373637][ T4285] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 34.728377][ T4285] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 35.856860][ T4307] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 35.856980][ T4306] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 35.861891][ T4306] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 35.864634][ T4306] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 35.870573][ T4307] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 35.870653][ T4306] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 35.873385][ T4307] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 35.875088][ T4306] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 35.877328][ T4307] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 35.879517][ T4306] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 35.881131][ T4307] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 35.882864][ T4306] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 35.884700][ T4307] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 35.886676][ T4306] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 35.891107][ T4310] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 35.893267][ T4303] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 35.900183][ T4306] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 35.902812][ T4306] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 35.905118][ T4307] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 35.905238][ T4306] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 35.907293][ T4312] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 35.910197][ T4306] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 35.912146][ T4312] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 35.915813][ T4312] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 35.918018][ T4312] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 35.921182][ T4312] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 35.926178][ T4298] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 35.931352][ T4312] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 35.936363][ T4312] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 35.938814][ T4298] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 36.178636][ T4304] chnl_net:caif_netlink_parms(): no params data found [ 36.191697][ T4295] chnl_net:caif_netlink_parms(): no params data found [ 36.201610][ T4297] chnl_net:caif_netlink_parms(): no params data found [ 36.212945][ T4296] chnl_net:caif_netlink_parms(): no params data found [ 36.284985][ T4297] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.287058][ T4297] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.289827][ T4297] device bridge_slave_0 entered promiscuous mode [ 36.317466][ T4297] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.319608][ T4297] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.322229][ T4297] device bridge_slave_1 entered promiscuous mode [ 36.378880][ T4304] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.380861][ T4304] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.383387][ T4304] device bridge_slave_0 entered promiscuous mode [ 36.387291][ T4295] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.389430][ T4295] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.392024][ T4295] device bridge_slave_0 entered promiscuous mode [ 36.396879][ T4297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.404052][ T4296] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.406098][ T4296] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.409219][ T4296] device bridge_slave_0 entered promiscuous mode [ 36.412104][ T4304] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.414637][ T4304] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.417229][ T4304] device bridge_slave_1 entered promiscuous mode [ 36.421733][ T4309] chnl_net:caif_netlink_parms(): no params data found [ 36.430308][ T4295] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.432182][ T4295] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.434826][ T4295] device bridge_slave_1 entered promiscuous mode [ 36.442625][ T4297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.449987][ T4296] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.451938][ T4296] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.454408][ T4296] device bridge_slave_1 entered promiscuous mode [ 36.491674][ T4304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.496852][ T4295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.501671][ T4297] team0: Port device team_slave_0 added [ 36.504783][ T4297] team0: Port device team_slave_1 added [ 36.508223][ T4296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.516526][ T4304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.529348][ T4295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.543867][ T4296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.573948][ T4304] team0: Port device team_slave_0 added [ 36.576201][ T4297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.578151][ T4297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.585786][ T4297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.591086][ T4295] team0: Port device team_slave_0 added [ 36.602884][ T4304] team0: Port device team_slave_1 added [ 36.605065][ T4297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.607043][ T4297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.614486][ T4297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.620602][ T4295] team0: Port device team_slave_1 added [ 36.631923][ T4296] team0: Port device team_slave_0 added [ 36.648238][ T4309] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.653505][ T4309] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.656073][ T4309] device bridge_slave_0 entered promiscuous mode [ 36.660055][ T4296] team0: Port device team_slave_1 added [ 36.661732][ T4309] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.663695][ T4309] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.666176][ T4309] device bridge_slave_1 entered promiscuous mode [ 36.682005][ T4295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.683935][ T4295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.694973][ T4295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.699375][ T4295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.701249][ T4295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.708584][ T4295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.721967][ T4304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.723915][ T4304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.731271][ T4304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.760698][ T4304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.762755][ T4304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.770576][ T4304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.777629][ T4296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.779923][ T4296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.786956][ T4296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.792026][ T4309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.830567][ T4297] device hsr_slave_0 entered promiscuous mode [ 36.868776][ T4297] device hsr_slave_1 entered promiscuous mode [ 36.934289][ T4309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.969928][ T4295] device hsr_slave_0 entered promiscuous mode [ 37.008641][ T4295] device hsr_slave_1 entered promiscuous mode [ 37.058485][ T4295] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.060666][ T4295] Cannot create hsr debugfs directory [ 37.062700][ T4296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.064606][ T4296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.072109][ T4296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.095898][ T4309] team0: Port device team_slave_0 added [ 37.115056][ T4309] team0: Port device team_slave_1 added [ 37.160030][ T4304] device hsr_slave_0 entered promiscuous mode [ 37.199273][ T4304] device hsr_slave_1 entered promiscuous mode [ 37.248444][ T4304] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.250627][ T4304] Cannot create hsr debugfs directory [ 37.329053][ T4309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.331013][ T4309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.338233][ T4309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.353296][ T4309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.355273][ T4309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.363058][ T4309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.400175][ T4296] device hsr_slave_0 entered promiscuous mode [ 37.438848][ T4296] device hsr_slave_1 entered promiscuous mode [ 37.478564][ T4296] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.480758][ T4296] Cannot create hsr debugfs directory [ 37.590190][ T4309] device hsr_slave_0 entered promiscuous mode [ 37.628858][ T4309] device hsr_slave_1 entered promiscuous mode [ 37.668552][ T4309] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.670679][ T4309] Cannot create hsr debugfs directory [ 37.769665][ T4297] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.815586][ T4297] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.865294][ T4297] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.904058][ T4297] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.928916][ T4312] Bluetooth: hci2: command 0x0409 tx timeout [ 37.929917][ T4308] Bluetooth: hci3: command 0x0409 tx timeout [ 37.976382][ T4304] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 38.008464][ T4301] Bluetooth: hci1: command 0x0409 tx timeout [ 38.008597][ T4308] Bluetooth: hci4: command 0x0409 tx timeout [ 38.010266][ T4301] Bluetooth: hci0: command 0x0409 tx timeout [ 38.043476][ T4304] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 38.080130][ T4304] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 38.120348][ T4304] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 38.189671][ T4295] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 38.238473][ T4295] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 38.285922][ T4295] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 38.310469][ T4295] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 38.383624][ T4296] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.427113][ T4296] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.480800][ T4296] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.522455][ T4297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.535586][ T4296] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.626351][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 38.630465][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 38.644028][ T4297] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.656106][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 38.659123][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 38.662112][ T1589] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.664181][ T1589] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.667104][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 38.670219][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 38.672807][ T1589] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.674829][ T1589] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.678095][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 38.692778][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 38.695719][ T4309] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 38.714125][ T4309] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 38.745045][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 38.753635][ T4309] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 38.794271][ T4309] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 38.843609][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 38.847168][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 38.850150][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 38.863127][ T4304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.869534][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 38.872309][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 38.891825][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 38.895088][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 38.900588][ T4295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.912031][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 38.914958][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 38.928337][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 38.936423][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 38.941208][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 38.943536][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 38.946141][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 38.952190][ T4304] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.959422][ T4295] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.963912][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 38.966610][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 38.969543][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.971416][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.986009][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 38.992396][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 38.995074][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 38.997638][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.999658][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.006300][ T4296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.010442][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 39.013168][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 39.016421][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.020209][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.022109][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.024439][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 39.039473][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 39.042192][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.044728][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.046821][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.049650][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 39.062731][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 39.066033][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 39.073818][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 39.093677][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 39.096533][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 39.100838][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.109543][ T4296] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.113962][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 39.116871][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 39.132694][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 39.135333][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.137967][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 39.141753][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.144352][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 39.149199][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 39.154157][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 39.156827][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.161461][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.163461][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.173746][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 39.176527][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 39.180850][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 39.184375][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 39.192448][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 39.194630][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 39.208016][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 39.215329][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.217899][ T4373] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.219953][ T4373] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.223914][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 39.226696][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 39.237168][ T4297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.247612][ T4309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.260108][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 39.262795][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.265386][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 39.280283][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 39.283217][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 39.285760][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.301095][ T4309] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.306700][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 39.310563][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.313051][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 39.317016][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 39.321782][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 39.330024][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 39.332552][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 39.335558][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 39.347729][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 39.355913][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.359074][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.361022][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.363368][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 39.365993][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 39.374359][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 39.376882][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.404830][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 39.407312][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 39.410836][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.413417][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.415355][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.417696][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 39.426010][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 39.431153][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 39.434083][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 39.436779][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 39.440801][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 39.443535][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 39.446165][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.449148][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 39.462047][ T4296] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.471756][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 39.474510][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.477157][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 39.485283][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 39.487422][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 39.491907][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.497958][ T4295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.512703][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 39.522789][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 39.525479][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 39.532154][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 39.543232][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 39.552577][ T4297] device veth0_vlan entered promiscuous mode [ 39.559196][ T4297] device veth1_vlan entered promiscuous mode [ 39.571009][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 39.573643][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 39.575796][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 39.605327][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 39.608015][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 39.615364][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 39.644666][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 39.647374][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 39.654070][ T4297] device veth0_macvtap entered promiscuous mode [ 39.666106][ T4304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.672687][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 39.675297][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 39.677935][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 39.685135][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 39.687812][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 39.694540][ T4297] device veth1_macvtap entered promiscuous mode [ 39.709845][ T4295] device veth0_vlan entered promiscuous mode [ 39.729421][ T4295] device veth1_vlan entered promiscuous mode [ 39.748058][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 39.752588][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 39.755173][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 39.765707][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 39.770351][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 39.772537][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 39.791557][ T4297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.797430][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 39.805106][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 39.807703][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 39.811091][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 39.813782][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 39.816310][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 39.826202][ T4296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.833740][ T4297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.841321][ T4304] device veth0_vlan entered promiscuous mode [ 39.843944][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 39.846755][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 39.850451][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 39.853261][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 39.855428][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 39.860370][ T4309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.870143][ T4297] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.872715][ T4297] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.875125][ T4297] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.877488][ T4297] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.892267][ T4304] device veth1_vlan entered promiscuous mode [ 39.906101][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 39.909956][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 39.912855][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 39.933627][ T4295] device veth0_macvtap entered promiscuous mode [ 39.939867][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 39.942504][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 39.945035][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 39.947802][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 39.980726][ T4295] device veth1_macvtap entered promiscuous mode [ 40.003726][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 40.006471][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 40.008769][ T4312] Bluetooth: hci3: command 0x041b tx timeout [ 40.011104][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.017663][ T4304] device veth0_macvtap entered promiscuous mode [ 40.019861][ T4301] Bluetooth: hci2: command 0x041b tx timeout [ 40.034293][ T4304] device veth1_macvtap entered promiscuous mode [ 40.038225][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 40.041064][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 40.043539][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 40.046274][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.049519][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.052026][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.066552][ T4296] device veth0_vlan entered promiscuous mode [ 40.084934][ T4295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.087879][ T4295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.091951][ T4301] Bluetooth: hci4: command 0x041b tx timeout [ 40.091973][ T4312] Bluetooth: hci1: command 0x041b tx timeout [ 40.095909][ T4295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.098030][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 40.108221][ T4312] Bluetooth: hci0: command 0x041b tx timeout [ 40.109459][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.116369][ T4296] device veth1_vlan entered promiscuous mode [ 40.136139][ T4304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.140086][ T4304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.142827][ T4304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.145707][ T4304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.150124][ T4304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.152356][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 40.155110][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 40.157832][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 40.161451][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.164742][ T4295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.167569][ T4295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.177452][ T4295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.183448][ T4295] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.185843][ T4295] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.188174][ T4295] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.191519][ T4295] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.196597][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 40.199600][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.204416][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.206568][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.211226][ T4296] device veth0_macvtap entered promiscuous mode [ 40.214008][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 40.216879][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.225142][ T4304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.227939][ T4304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.231139][ T4304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.233909][ T4304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.237837][ T4304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.242662][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 40.245183][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 40.247741][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 40.252217][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.267535][ T4296] device veth1_macvtap entered promiscuous mode [ 40.282582][ T4304] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.285007][ T4304] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.287366][ T4304] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.290949][ T4304] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.324659][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 40.327014][ T484] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.327172][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 40.330166][ T484] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.335891][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.339981][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 40.372814][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 40.375577][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.385603][ T4296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.390253][ T4296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.392963][ T4296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.395774][ T4296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.399024][ T4296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.402065][ T4296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.406370][ T4296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.409162][ T4309] device veth0_vlan entered promiscuous mode [ 40.429188][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.431633][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.434154][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 40.436875][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.469475][ T4296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.472518][ T4296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.475173][ T4296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.477987][ T4296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.481937][ T4296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.484725][ T4296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.490414][ T4296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.503950][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 40.509716][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.520503][ T4296] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.522902][ T4296] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.525268][ T4296] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.527673][ T4296] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.560125][ T484] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.562390][ T484] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.583996][ T4373] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.584249][ T4408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.586296][ T4373] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.590646][ T4309] device veth1_vlan entered promiscuous mode [ 40.594788][ T4408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.605046][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 40.608004][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 40.618045][ T4373] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.622159][ T4373] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.625862][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 40.679371][ T1589] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.681641][ T1589] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.695574][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 40.722071][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 40.724982][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.748049][ T4309] device veth0_macvtap entered promiscuous mode [ 40.769813][ T4373] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.772307][ T4373] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.775895][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 40.782917][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 40.800710][ T4309] device veth1_macvtap entered promiscuous mode [ 40.838209][ T4309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.841638][ T4309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.844354][ T4309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.847400][ T4309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.850537][ T4309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.853294][ T4309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.856029][ T4309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.859780][ T4309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.863718][ T4309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.870964][ T4309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.873853][ T4309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.876677][ T4309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.880217][ T4309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.883450][ T4309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.886192][ T4309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.889891][ T4309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.892941][ T4309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.896695][ T4309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.905445][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 40.908077][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 40.912020][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.915235][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 40.918742][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.924642][ T4309] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.927069][ T4309] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.933742][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.946917][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.961793][ T4309] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.967167][ T4309] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.001036][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 41.250204][ T4415] loop1: detected capacity change from 0 to 16 [ 41.316700][ T4415] erofs: (device loop1): erofs_superblock_csum_verify: invalid checksum 0x80a9593b, 0x7bbbea8c expected [ 41.907354][ T4416] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.911252][ T4416] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.935156][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 42.011241][ T4416] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.013443][ T4416] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.016667][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 42.225016][ T4308] Bluetooth: hci2: command 0x040f tx timeout [ 42.226682][ T4308] Bluetooth: hci3: command 0x040f tx timeout [ 42.228454][ T4308] Bluetooth: hci4: command 0x040f tx timeout [ 42.230168][ T4308] Bluetooth: hci0: command 0x040f tx timeout [ 42.231795][ T4308] Bluetooth: hci1: command 0x040f tx timeout [ 42.798308][ C0] sched: RT throttling activated [ 43.304636][ T4432] loop2: detected capacity change from 0 to 512 [ 43.367013][ T4432] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 43.529522][ T4372] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 43.925363][ T4444] loop3: detected capacity change from 0 to 512 [ 43.928218][ T4444] ======================================================= [ 43.928218][ T4444] WARNING: The mand mount option has been deprecated and [ 43.928218][ T4444] and is ignored by this kernel. Remove the mand [ 43.928218][ T4444] option from the mount to silence this warning. [ 43.928218][ T4444] ======================================================= [ 43.938113][ T4444] EXT4-fs: Ignoring removed oldalloc option [ 44.016586][ T4444] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 44.159072][ T4444] EXT4-fs (loop3): orphan cleanup on readonly fs [ 44.174614][ T4444] Quota error (device loop3): do_check_range: Getting block 196613 out of range 1-5 [ 44.177633][ T4444] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 44.180369][ T4444] EXT4-fs error (device loop3): ext4_acquire_dquot:6814: comm syz.3.12: Failed to acquire dquot type 1 [ 44.198514][ T4444] EXT4-fs (loop3): 1 truncate cleaned up [ 44.222959][ T4444] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 44.796457][ T4312] Bluetooth: hci1: command 0x0419 tx timeout [ 44.798211][ T4312] Bluetooth: hci0: command 0x0419 tx timeout [ 44.802587][ T4312] Bluetooth: hci4: command 0x0419 tx timeout [ 44.804275][ T4312] Bluetooth: hci3: command 0x0419 tx timeout [ 44.805929][ T4312] Bluetooth: hci2: command 0x0419 tx timeout [ 45.098369][ T4372] usb 1-1: Using ep0 maxpacket: 32 [ 45.102872][ T4372] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 45.105070][ T4372] usb 1-1: config 0 has no interface number 0 [ 45.106861][ T4372] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 45.139535][ T4372] usb 1-1: config 0 interface 196 has no altsetting 0 [ 45.144306][ T4372] usb 1-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 45.146890][ T4372] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.160100][ T4372] usb 1-1: Product: syz [ 45.161298][ T4372] usb 1-1: Manufacturer: syz [ 45.162593][ T4372] usb 1-1: SerialNumber: syz [ 45.172129][ T4372] usb 1-1: config 0 descriptor?? [ 45.174867][ T4430] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 46.354598][ T4372] ipheth 1-1:0.196: ipheth_get_macaddr: usb_control_msg: -110 [ 46.356914][ T4372] ipheth: probe of 1-1:0.196 failed with error -110 [ 46.813426][ T4449] loop4: detected capacity change from 0 to 40427 [ 46.821320][ T4449] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x3ffff [ 46.825458][ T4449] F2FS-fs (loop4): invalid crc value [ 46.970525][ T4297] EXT4-fs (loop2): unmounting filesystem. [ 47.005973][ T4304] EXT4-fs (loop3): unmounting filesystem. [ 47.050760][ T4449] F2FS-fs (loop4): Found nat_bits in checkpoint [ 48.972818][ T4471] netlink: 32 bytes leftover after parsing attributes in process `syz.3.16'. [ 49.325673][ T4476] serio: Serial port ptm0 [ 49.588558][ T4447] usb 1-1: USB disconnect, device number 2 [ 50.227929][ T4492] netlink: 16 bytes leftover after parsing attributes in process `syz.1.19'. [ 50.948558][ T4496] Zero length message leads to an empty skb [ 51.577962][ T4502] hub 9-0:1.0: USB hub found [ 51.581390][ T4502] hub 9-0:1.0: 8 ports detected [ 53.120066][ T1962] cfg80211: failed to load regulatory.db [ 53.444788][ T4524] loop1: detected capacity change from 0 to 128 [ 54.011864][ T4527] serio: Serial port ptm0 [ 54.681452][ T4533] tipc: Started in network mode [ 54.682939][ T4533] tipc: Node identity 62cd543a120e, cluster identity 4711 [ 54.684889][ T4533] tipc: Enabled bearer , priority 0 [ 54.786414][ T4533] device syzkaller0 entered promiscuous mode [ 55.703183][ T4532] tipc: Resetting bearer [ 55.805375][ T4532] tipc: Disabling bearer [ 55.827128][ T4544] tipc: Started in network mode [ 55.838521][ T4544] tipc: Node identity 0e6645876bb2, cluster identity 4711 [ 55.840644][ T4544] tipc: Enabled bearer , priority 0 [ 55.848473][ T4544] device syzkaller0 entered promiscuous mode [ 55.947027][ T4544] tipc: Resetting bearer [ 55.965051][ T4543] tipc: Resetting bearer [ 56.089997][ T4543] tipc: Disabling bearer [ 56.140655][ T4551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.143194][ T4551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.583442][ T4560] netlink: 32 bytes leftover after parsing attributes in process `syz.2.39'. [ 56.829061][ T4560] netlink: 32 bytes leftover after parsing attributes in process `syz.2.39'. [ 58.777071][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 58.800455][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.805130][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.494067][ T4582] ip6_vti0 speed is unknown, defaulting to 1000 [ 59.497398][ T4582] ip6_vti0 speed is unknown, defaulting to 1000 [ 59.500915][ T4586] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 59.503529][ T4586] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 59.519380][ T4582] ip6_vti0 speed is unknown, defaulting to 1000 [ 59.716062][ T4582] infiniband syz2: set active [ 59.718852][ T14] ip6_vti0 speed is unknown, defaulting to 1000 [ 59.741728][ T4582] infiniband syz2: added ip6_vti0 [ 59.845929][ T4582] RDS/IB: syz2: added [ 59.847534][ T4582] smc: adding ib device syz2 with port count 1 [ 59.863939][ T4582] smc: ib device syz2 port 1 has pnetid [ 59.866827][ T1962] ip6_vti0 speed is unknown, defaulting to 1000 [ 59.873108][ T4582] ip6_vti0 speed is unknown, defaulting to 1000 [ 59.920094][ T4591] tipc: Enabled bearer , priority 0 [ 59.924768][ T4591] device syzkaller0 entered promiscuous mode [ 59.926660][ T4580] loop2: detected capacity change from 0 to 32768 [ 59.943482][ T4580] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.45 (4580) [ 59.962976][ T4580] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 59.965958][ T4580] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 59.973292][ T4580] BTRFS info (device loop2): enabling disk space caching [ 59.975290][ T4580] BTRFS info (device loop2): metadata ratio 3 [ 59.976988][ T4580] BTRFS info (device loop2): doing ref verification [ 59.986420][ T4580] BTRFS info (device loop2): use no compression [ 59.988156][ T4580] BTRFS info (device loop2): force clearing of disk cache [ 59.999209][ T4580] BTRFS info (device loop2): disabling disk space caching [ 60.016719][ T4591] tipc: Resetting bearer [ 60.020600][ T4582] ip6_vti0 speed is unknown, defaulting to 1000 [ 60.035769][ T4590] tipc: Resetting bearer [ 60.241895][ T4590] tipc: Disabling bearer [ 60.255312][ T4582] ip6_vti0 speed is unknown, defaulting to 1000 [ 60.267687][ T4580] BTRFS info (device loop2): enabling ssd optimizations [ 60.273982][ T4580] BTRFS info (device loop2): rebuilding free space tree [ 61.022154][ T4580] BTRFS info (device loop2): disabling free space tree [ 61.024402][ T4580] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 61.027148][ T4580] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 61.169662][ T4582] ip6_vti0 speed is unknown, defaulting to 1000 [ 61.182352][ T4297] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 61.375156][ T4582] ip6_vti0 speed is unknown, defaulting to 1000 [ 61.608415][ T4308] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 62.771696][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 62.776571][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.779028][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.020076][ T4639] ip6_vti0 speed is unknown, defaulting to 1000 [ 64.111187][ T4643] netlink: 32 bytes leftover after parsing attributes in process `syz.1.55'. [ 64.532316][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.535793][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.653047][ T4655] loop0: detected capacity change from 0 to 512 [ 65.655418][ T4655] EXT4-fs: Ignoring removed oldalloc option [ 66.799389][ T4308] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 67.860477][ T4655] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 67.875830][ T4655] EXT4-fs: failed to create workqueue [ 67.877281][ T4655] EXT4-fs (loop0): mount failed [ 69.282301][ T4666] netlink: 16 bytes leftover after parsing attributes in process `syz.4.59'. [ 70.393961][ T4698] rdma_rxe: rxe_register_device failed with error -23 [ 70.396225][ T4698] rdma_rxe: failed to add ip6_vti0 [ 70.550532][ T4695] loop2: detected capacity change from 0 to 512 [ 71.385532][ T4695] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 71.495287][ T4695] EXT4-fs (loop2): 1 orphan inode deleted [ 71.499556][ T4538] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 71.502892][ T4538] EXT4-fs error (device loop2): ext4_release_dquot:6850: comm kworker/u4:10: Failed to release dquot type 1 [ 71.521944][ T4695] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 71.533951][ T4707] netlink: 32 bytes leftover after parsing attributes in process `syz.0.68'. [ 71.869945][ T4675] loop3: detected capacity change from 0 to 32768 [ 71.877823][ T4297] EXT4-fs (loop2): unmounting filesystem. [ 73.097162][ T4733] loop2: detected capacity change from 0 to 512 [ 73.596861][ T4733] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 75.236786][ T4747] ip6_vti0 speed is unknown, defaulting to 1000 [ 75.464266][ T4297] EXT4-fs (loop2): unmounting filesystem. [ 75.700733][ T4438] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by udevd (4438) [ 75.919230][ T4762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.921954][ T4762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.073744][ T4778] loop2: detected capacity change from 0 to 512 [ 77.076060][ T4778] ext4: Bad value for 'min_batch_time' [ 77.096529][ T4776] loop1: detected capacity change from 0 to 512 [ 77.106288][ T4776] EXT4-fs: Ignoring removed oldalloc option [ 77.115864][ T4776] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 77.139537][ T4441] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 77.171506][ T4776] EXT4-fs (loop1): orphan cleanup on readonly fs [ 77.175150][ T4776] Quota error (device loop1): do_check_range: Getting block 196613 out of range 1-5 [ 77.177794][ T4776] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 77.191138][ T4778] binder: 4777:4778 tried to acquire reference to desc 0, got 1 instead [ 77.193967][ T4776] EXT4-fs error (device loop1): ext4_acquire_dquot:6814: comm syz.1.84: Failed to acquire dquot type 1 [ 77.224746][ T4776] EXT4-fs (loop1): 1 truncate cleaned up [ 77.243713][ T4776] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 77.268103][ T14] binder: undelivered TRANSACTION_COMPLETE [ 77.287663][ T4781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.301431][ T4781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.312433][ T4372] binder: undelivered transaction 5, process died. [ 77.562645][ T4295] EXT4-fs (loop1): unmounting filesystem. [ 77.671157][ T4790] loop1: detected capacity change from 0 to 256 [ 77.691653][ T4790] FAT-fs (loop1): Directory bread(block 64) failed [ 77.693645][ T4790] FAT-fs (loop1): Directory bread(block 65) failed [ 77.695600][ T4790] FAT-fs (loop1): Directory bread(block 66) failed [ 77.697404][ T4790] FAT-fs (loop1): Directory bread(block 67) failed [ 77.702777][ T4790] FAT-fs (loop1): Directory bread(block 68) failed [ 77.704536][ T4790] FAT-fs (loop1): Directory bread(block 69) failed [ 77.706519][ T4790] FAT-fs (loop1): Directory bread(block 70) failed [ 77.712385][ T4790] FAT-fs (loop1): Directory bread(block 71) failed [ 77.715152][ T4790] FAT-fs (loop1): Directory bread(block 72) failed [ 77.717409][ T4790] FAT-fs (loop1): Directory bread(block 73) failed [ 77.916105][ T4774] loop3: detected capacity change from 0 to 32768 [ 77.950618][ T4774] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 77.964548][ T4774] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 77.973481][ T4774] BTRFS info (device loop3): enabling disk space caching [ 77.979801][ T4774] BTRFS info (device loop3): metadata ratio 3 [ 77.985771][ T4774] BTRFS info (device loop3): doing ref verification [ 77.993021][ T4774] BTRFS info (device loop3): use no compression [ 77.998773][ T4774] BTRFS info (device loop3): force clearing of disk cache [ 78.005087][ T4774] BTRFS info (device loop3): disabling disk space caching [ 78.017028][ T4795] tipc: Enabled bearer , priority 0 [ 78.026388][ T4795] device syzkaller0 entered promiscuous mode [ 78.045776][ T4799] loop1: detected capacity change from 0 to 512 [ 78.058901][ T4794] tipc: Resetting bearer [ 78.094918][ T4799] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 78.150263][ T4794] tipc: Disabling bearer [ 78.183189][ T4774] BTRFS info (device loop3): enabling ssd optimizations [ 78.186146][ T4774] BTRFS info (device loop3): rebuilding free space tree [ 78.197701][ T4295] EXT4-fs (loop1): unmounting filesystem. [ 78.234781][ T4774] BTRFS info (device loop3): disabling free space tree [ 78.236985][ T4774] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 78.254954][ T4774] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 79.546127][ T4304] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 79.661551][ T4842] netlink: 32 bytes leftover after parsing attributes in process `syz.0.98'. [ 79.954198][ T4842] netlink: 32 bytes leftover after parsing attributes in process `syz.0.98'. [ 80.012722][ T4849] tipc: Enabled bearer , priority 0 [ 80.193284][ T4842] netlink: 32 bytes leftover after parsing attributes in process `syz.0.98'. [ 80.389531][ T4858] tipc: Started in network mode [ 80.390866][ T4858] tipc: Node identity ca86c15cc561, cluster identity 4711 [ 80.392942][ T4858] tipc: Enabled bearer , priority 0 [ 80.404312][ T4833] loop4: detected capacity change from 0 to 40427 [ 80.443019][ T4833] F2FS-fs (loop4): invalid crc value [ 80.452484][ T4858] device syzkaller0 entered promiscuous mode [ 80.462745][ T4833] F2FS-fs (loop4): Found nat_bits in checkpoint [ 81.373985][ T4833] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 81.789989][ T4371] tipc: Node number set to 1891849274 [ 81.792271][ T4371] tipc: Node number set to 266846556 [ 82.348587][ T4874] xt_policy: output policy not valid in PREROUTING and INPUT [ 82.623917][ T4877] syz.4.97: attempt to access beyond end of device [ 82.623917][ T4877] loop4: rw=2049, sector=45096, nr_sectors = 112 limit=40427 [ 82.791815][ T4857] tipc: Resetting bearer [ 83.120513][ T4857] tipc: Disabling bearer [ 83.262614][ T4309] syz-executor: attempt to access beyond end of device [ 83.262614][ T4309] loop4: rw=2049, sector=45208, nr_sectors = 8 limit=40427 [ 83.598459][ T4888] loop0: detected capacity change from 0 to 512 [ 83.600855][ T4888] EXT4-fs: Ignoring removed oldalloc option [ 83.669598][ T4888] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 83.784205][ T4888] EXT4-fs (loop0): orphan cleanup on readonly fs [ 83.801503][ T4888] Quota error (device loop0): do_check_range: Getting block 196613 out of range 1-5 [ 83.804435][ T4888] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 83.807081][ T4888] EXT4-fs error (device loop0): ext4_acquire_dquot:6814: comm syz.0.109: Failed to acquire dquot type 1 [ 83.825779][ T4888] EXT4-fs (loop0): 1 truncate cleaned up [ 83.830159][ T4888] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 86.222913][ T4906] loop3: detected capacity change from 0 to 512 [ 86.309116][ T4906] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 86.358997][ T4906] EXT4-fs (loop3): shut down requested (0) [ 86.534167][ T4296] EXT4-fs (loop0): unmounting filesystem. [ 86.540798][ T4897] loop4: detected capacity change from 0 to 32768 [ 86.554477][ T4897] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.110 (4897) [ 86.567838][ T4897] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 86.578403][ T4897] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 86.580828][ T4897] BTRFS info (device loop4): enabling disk space caching [ 86.582751][ T4897] BTRFS info (device loop4): metadata ratio 3 [ 86.584506][ T4897] BTRFS info (device loop4): doing ref verification [ 86.586296][ T4897] BTRFS info (device loop4): use no compression [ 86.588028][ T4897] BTRFS info (device loop4): force clearing of disk cache [ 86.591715][ T4897] BTRFS info (device loop4): disabling disk space caching [ 86.759775][ T4916] netlink: 32 bytes leftover after parsing attributes in process `syz.2.116'. [ 86.854924][ T4304] EXT4-fs (loop3): unmounting filesystem. [ 86.857761][ T4897] BTRFS info (device loop4): enabling ssd optimizations [ 86.861180][ T4897] BTRFS info (device loop4): rebuilding free space tree [ 86.880329][ T4897] BTRFS info (device loop4): disabling free space tree [ 86.894687][ T4897] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 86.904810][ T4897] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 87.106386][ T4916] netlink: 32 bytes leftover after parsing attributes in process `syz.2.116'. [ 87.874838][ T4918] loop0: detected capacity change from 0 to 40427 [ 87.917604][ T4918] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 87.934139][ T4918] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 88.000921][ T4918] F2FS-fs (loop0): invalid crc value [ 88.047832][ T4918] F2FS-fs (loop0): Found nat_bits in checkpoint [ 88.054922][ T4309] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 88.148068][ T4918] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 88.162351][ T4918] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 88.206118][ T4960] tipc: Started in network mode [ 88.207584][ T4960] tipc: Node identity 080211, cluster identity 4711 [ 88.233806][ T4960] tipc: Enabled bearer , priority 0 [ 88.239510][ T4960] device syzkaller0 entered promiscuous mode [ 88.241801][ T4960] tipc: Resetting bearer [ 89.331774][ T4406] tipc: Node number set to 134353152 [ 92.964896][ T5007] tipc: Enabled bearer , priority 0 [ 92.980597][ T5007] device syzkaller0 entered promiscuous mode [ 93.001314][ T5006] tipc: Resetting bearer [ 93.115712][ T5006] tipc: Disabling bearer [ 93.240052][ T4988] loop4: detected capacity change from 0 to 40427 [ 93.291049][ T4988] F2FS-fs (loop4): invalid crc value [ 93.317354][ T4988] F2FS-fs (loop4): Found nat_bits in checkpoint [ 93.351765][ T5002] loop0: detected capacity change from 0 to 32768 [ 93.359835][ T5020] netlink: 116 bytes leftover after parsing attributes in process `syz.2.139'. [ 93.378997][ T27] audit: type=1326 audit(93.320:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5019 comm="syz.2.139" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffba75a9a8 code=0x7ffc0000 [ 93.398480][ T27] audit: type=1326 audit(93.330:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5019 comm="syz.2.139" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=236 compat=0 ip=0xffffba75a9a8 code=0x7ffc0000 [ 93.411160][ T5002] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.131 (5002) [ 93.426745][ T27] audit: type=1326 audit(93.330:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5019 comm="syz.2.139" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffba75a9a8 code=0x7ffc0000 [ 93.445948][ T27] audit: type=1326 audit(93.330:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5019 comm="syz.2.139" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffba75a9a8 code=0x7ffc0000 [ 93.473899][ T27] audit: type=1326 audit(93.330:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5019 comm="syz.2.139" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffba75a9a8 code=0x7ffc0000 [ 93.476949][ T5002] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 93.480354][ T27] audit: type=1326 audit(93.330:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5019 comm="syz.2.139" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffba75a9a8 code=0x7ffc0000 [ 93.493391][ T27] audit: type=1326 audit(93.330:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5019 comm="syz.2.139" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffba75a9a8 code=0x7ffc0000 [ 93.499365][ T27] audit: type=1326 audit(93.330:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5019 comm="syz.2.139" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=425 compat=0 ip=0xffffba75a9a8 code=0x7ffc0000 [ 93.505512][ T27] audit: type=1326 audit(93.330:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5019 comm="syz.2.139" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffba75a9a8 code=0x7ffc0000 [ 93.509652][ T4988] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 93.512805][ T27] audit: type=1326 audit(93.330:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5019 comm="syz.2.139" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=203 compat=0 ip=0xffffba75a9a8 code=0x7ffc0000 [ 93.515680][ T5002] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 93.537646][ T5002] BTRFS info (device loop0): enabling disk space caching [ 93.543331][ T5002] BTRFS info (device loop0): metadata ratio 3 [ 93.545142][ T5002] BTRFS info (device loop0): doing ref verification [ 93.782552][ T5002] BTRFS info (device loop0): use no compression [ 93.851429][ T5002] BTRFS info (device loop0): force clearing of disk cache [ 94.344972][ T5002] BTRFS info (device loop0): disabling disk space caching [ 94.930495][ T5002] BTRFS info (device loop0): enabling ssd optimizations [ 94.937456][ T5002] BTRFS info (device loop0): rebuilding free space tree [ 94.968987][ T5002] BTRFS info (device loop0): disabling free space tree [ 94.970907][ T5002] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 94.973696][ T5002] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 95.063998][ T4309] syz-executor: attempt to access beyond end of device [ 95.063998][ T4309] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 95.296770][ T5063] tipc: Enabling of bearer rejected, already enabled [ 95.348959][ T5063] tipc: Resetting bearer [ 95.436297][ T4296] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 95.740667][ T5076] tipc: Started in network mode [ 95.748489][ T5076] tipc: Node identity 8ae999121d83, cluster identity 4711 [ 95.757280][ T5076] tipc: Enabled bearer , priority 0 [ 95.766933][ T5076] device syzkaller0 entered promiscuous mode [ 95.807112][ T5070] tipc: Resetting bearer [ 95.890320][ T5070] tipc: Disabling bearer [ 95.940753][ T5085] netlink: 116 bytes leftover after parsing attributes in process `syz.1.151'. [ 96.204018][ T5095] ip6_vti0 speed is unknown, defaulting to 1000 [ 96.311606][ T5104] tipc: Enabling of bearer rejected, already enabled [ 97.576911][ T5121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.589797][ T5102] loop1: detected capacity change from 0 to 32768 [ 97.608136][ T5121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.624827][ T5102] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.158 (5102) [ 97.649230][ T5102] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 97.652119][ T5102] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 97.658833][ T5102] BTRFS info (device loop1): enabling disk space caching [ 97.660753][ T5102] BTRFS info (device loop1): metadata ratio 3 [ 97.662424][ T5102] BTRFS info (device loop1): doing ref verification [ 97.664152][ T5102] BTRFS info (device loop1): use no compression [ 97.665828][ T5102] BTRFS info (device loop1): force clearing of disk cache [ 97.667728][ T5102] BTRFS info (device loop1): disabling disk space caching [ 97.690930][ T5123] netlink: 116 bytes leftover after parsing attributes in process `syz.4.165'. [ 97.716284][ T5125] tipc: Enabled bearer , priority 0 [ 97.733487][ T5125] device syzkaller0 entered promiscuous mode [ 97.765583][ T5124] tipc: Resetting bearer [ 97.867352][ T5102] BTRFS info (device loop1): enabling ssd optimizations [ 97.871525][ T5124] tipc: Disabling bearer [ 97.876263][ T5102] BTRFS info (device loop1): rebuilding free space tree [ 97.902488][ T5102] BTRFS info (device loop1): disabling free space tree [ 97.922414][ T5102] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 97.937020][ T5102] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 98.055601][ T5156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.062747][ T5153] tipc: Enabled bearer , priority 0 [ 98.065106][ T5156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.104144][ T5153] device syzkaller0 entered promiscuous mode [ 98.195979][ T5153] tipc: Resetting bearer [ 98.208926][ T5152] tipc: Resetting bearer [ 98.232021][ T4295] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 98.301471][ T5152] tipc: Disabling bearer [ 98.353847][ T5167] netlink: 116 bytes leftover after parsing attributes in process `syz.0.178'. [ 98.462819][ T5169] device pim6reg1 entered promiscuous mode [ 98.600350][ T5177] tipc: Enabling of bearer rejected, already enabled [ 98.629043][ T5178] page:00000000d7eb8592 refcount:4 mapcount:1 mapping:000000009fa3c057 index:0x0 pfn:0x1371f7 [ 98.632383][ T5178] memcg:ffff0000cc72c000 [ 98.633573][ T5178] aops:shmem_aops ino:1c [ 98.634733][ T5178] flags: 0x5ffd80000080015(locked|uptodate|lru|swapbacked|node=0|zone=2|lastcpupid=0x7ff) [ 98.637532][ T5178] raw: 05ffd80000080015 fffffc0003ee1648 fffffc0003f10d48 ffff0000facd0368 [ 98.639882][ T5178] raw: 0000000000000000 0000000000000000 0000000400000000 ffff0000cc72c000 [ 98.642282][ T5178] page dumped because: VM_BUG_ON_FOLIO(folio_mapped(folio)) [ 98.644275][ T5178] ------------[ cut here ]------------ [ 98.645707][ T5178] kernel BUG at mm/filemap.c:153! [ 98.647302][ T5178] Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP [ 98.649353][ T5178] Modules linked in: [ 98.650322][ T5178] CPU: 1 PID: 5178 Comm: syz.3.182 Not tainted 6.1.142-syzkaller #0 [ 98.652408][ T5178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 98.654986][ T5178] pstate: 804000c5 (Nzcv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 98.657064][ T5178] pc : filemap_unaccount_folio+0x464/0x50c [ 98.658735][ T5178] lr : filemap_unaccount_folio+0x464/0x50c [ 98.660324][ T5178] sp : ffff8000211f7140 [ 98.661545][ T5178] x29: ffff8000211f7150 x28: ffff8000211f74c0 x27: dfff800000000000 [ 98.663784][ T5178] x26: ffff70000423ee3c x25: 0000000000000001 x24: ffff8000211f74c0 [ 98.666044][ T5178] x23: ffff8000211f7200 x22: ffff0000facd0368 x21: fffffc0003dc7dd8 [ 98.668466][ T5178] x20: ffff0000facd0368 x19: fffffc0003dc7dc0 x18: 0000000000000000 [ 98.670713][ T5178] x17: 0000000000000000 x16: ffff8000082e7c3c x15: 0000000000000000 [ 98.672958][ T5178] x14: 00000000ffffffff x13: 0000000000000001 x12: 0000000000ff0100 [ 98.675234][ T5178] x11: ff008000087ae04c x10: 0000000000000000 x9 : ffff8000087ae04c [ 98.677538][ T5178] x8 : ffff0000d9273780 x7 : 0000000000000001 x6 : 0000000000000001 [ 98.679761][ T5178] x5 : ffff8000211f6b78 x4 : ffff800015164800 x3 : ffff80000852e344 [ 98.682080][ T5178] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000039 [ 98.684348][ T5178] Call trace: [ 98.685264][ T5178] filemap_unaccount_folio+0x464/0x50c [ 98.686788][ T5178] __filemap_remove_folio+0xc0/0x4d4 [ 98.688266][ T5178] filemap_remove_folio+0xcc/0x1bc [ 98.689724][ T5178] truncate_inode_folio+0x6c/0x84 [ 98.691049][ T5178] shmem_undo_range+0x400/0x1610 [ 98.692488][ T5178] shmem_evict_inode+0x204/0x8a0 [ 98.693859][ T5178] evict+0x3c8/0x810 [ 98.694961][ T5178] iput+0x764/0x7f4 [ 98.696074][ T5178] dentry_unlink_inode+0x360/0x438 [ 98.697501][ T5178] __dentry_kill+0x320/0x598 [ 98.698765][ T5178] dentry_kill+0xc8/0x248 [ 98.699987][ T5178] dput+0x238/0x454 [ 98.701056][ T5178] __fput+0x480/0x7c0 [ 98.702186][ T5178] ____fput+0x20/0x30 [ 98.703296][ T5178] task_work_run+0x1ec/0x270 [ 98.704555][ T5178] do_notify_resume+0x1f70/0x2b0c [ 98.705944][ T5178] el0_svc+0x98/0x138 [ 98.707116][ T5178] el0t_64_sync_handler+0x84/0xf0 [ 98.708565][ T5178] el0t_64_sync+0x18c/0x190 [ 98.709835][ T5178] Code: f004a1a1 911c0021 aa1303e0 94037abd (d4210000) [ 98.711762][ T5178] ---[ end trace 0000000000000000 ]--- [ 98.734270][ T5183] random: crng reseeded on system resumption [ 98.740325][ T5183] PM: hibernation: Basic memory bitmaps created [ 98.747124][ T5182] PM: hibernation: Basic memory bitmaps freed [ 99.111928][ T5178] Kernel panic - not syncing: Oops - BUG: Fatal exception [ 99.113933][ T5178] SMP: stopping secondary CPUs [ 99.115279][ T5178] Kernel Offset: disabled [ 99.116455][ T5178] CPU features: 0x080000,02070084,26017203 [ 99.118089][ T5178] Memory Limit: none [ 99.489745][ T5178] Rebooting in 86400 seconds..