last executing test programs: 13.54167559s ago: executing program 2 (id=98): syz_mount_image$reiserfs(&(0x7f0000000140), &(0x7f0000001140)='./file6\x00', 0x98, &(0x7f0000000280), 0x1, 0x10ef, &(0x7f00000022c0)="$eJzs2DGLE0EYBuB3dg/kqshcvx5oYSHHHfEPXKGQxsLaLljZmUrJz/HnyFX2R3pTBOyVTQwJEhDJYuB4Hlh252Vmvp1yvgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDvLPlekosmqdusSVKSrrubLJJ02/zx17ZJydv3k9mrj+PXs8209FmT0q9aj+vN01rHdVxv6suL22d19unzh3avZEmX+9V8ev5mOehR+trtoDsCAADAw/DzaKMT1wcAAAD+ZrBGAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAA6vajSVKSrrubLJJ0p/0tAAAA4EglTd6NDuWbNsDOi3wblZRHu+RH6edc58uB9QAAAMC/KXv38ec5z5O9/DJnubrajH+/srxN2iTXf+xzv5pP18/lfFr+5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAGCqAAAA//9TGNII") openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0xff, 0x0, &(0x7f00000007c0)) open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20) 12.699876052s ago: executing program 2 (id=102): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000240)={[{@nodiscard}, {@jqfmt_vfsv1}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@dioread_nolock}, {@data_err_ignore}]}, 0x1, 0x571, &(0x7f0000000780)="$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") setxattr$system_posix_acl(&(0x7f0000000140)='.\x00', &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000000c0)={{}, {0x1, 0x7}, [], {0x4, 0x3}, [], {0x10, 0x5}, {0x20, 0x2}}, 0x24, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x181441, 0x148) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x80642, 0x150) 11.472039673s ago: executing program 2 (id=108): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000200)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), 0x4) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000040)=0x2, 0x4) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000140)="020000000980ffff", 0x8) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 10.36469785s ago: executing program 2 (id=119): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x180) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x38b1012, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) umount2(&(0x7f0000000140)='./file0/file0\x00', 0x0) 10.157154906s ago: executing program 2 (id=122): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3a, &(0x7f00000000c0)=0x1, 0x4) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000040)={[{@test_dummy_encryption}, {@grpquota}]}, 0x2, 0xbbf, &(0x7f0000000440)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0xd01ce0, 0x0, 0x80, 0x0, &(0x7f0000000080)) chdir(&(0x7f00000003c0)='./bus\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x0) 9.441612573s ago: executing program 2 (id=128): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x101100, 0xa8) r1 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsmount(r1, 0x0, 0x6) fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f0000001cc0)='nolazytime', &(0x7f0000001d00)="6bc4fc", 0x3) 9.313770427s ago: executing program 32 (id=128): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x101100, 0xa8) r1 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsmount(r1, 0x0, 0x6) fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f0000001cc0)='nolazytime', &(0x7f0000001d00)="6bc4fc", 0x3) 3.624616929s ago: executing program 0 (id=190): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@newchain={0x74, 0x64, 0x0, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0xf, 0xfff2}, {0x9, 0x4}}, [@f_rsvp={{0x9}, {0x44, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x400, 0x3, 0xed7}, {0xe74, 0x3, 0x80000000}, 0x84, 0x5, 0x2}}, @TCA_RSVP_SRC={0x8, 0x3, @local}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x5, 0x10}}, @TCA_RSVP_DST={0x8, 0x2, @rand_addr=0x64010102}]}}]}, 0x74}}, 0x5eb39fcad4dec9cc) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r0, 0xc138fd0a, &(0x7f00000002c0)="0400000000000000060000007e01") 3.523094132s ago: executing program 0 (id=192): syz_clone3(&(0x7f0000000080)={0xa40700, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x7}, '\x00', "5171bb672965593497418688ac68cb126474cd3660dab9e2086e246728d7a040", '\x00\x00=*', "1202000000040030"}, 0x58) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x132, 0xffffffffffffffff, 0xffffd000) 3.511046402s ago: executing program 1 (id=193): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000054000000060a010400000000000000000100000008000b40000000000900010073797a30000000002c0004802800018008000100666962001c00028008000240000000030800034000000001080001"], 0xdc}}, 0x4040010) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100fcfffffffcdbdf250700000008000300", @ANYRES32=r2, @ANYBLOB="140004006e69637666300000000000000000000008000500060000001400178004"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 3.18907443s ago: executing program 0 (id=194): mkdir(&(0x7f0000000150)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./config/usb_gadget/g_syz\x00', 0x1ff) mkdir(&(0x7f0000000500)='./config/usb_gadget/g_syz/functions/ecm.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g_syz/functions/ecm.usb0/ifname\x00', 0x1, 0x0) pwritev(r0, &(0x7f0000002180)=[{&(0x7f0000000b40)="35330fa233927534c65872ad16d4f5a4c5", 0x11}], 0x1, 0xe, 0x6) 3.17076029s ago: executing program 3 (id=195): syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x90, &(0x7f0000003280)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000006900)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xe9) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) 3.051663054s ago: executing program 0 (id=196): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2.967157356s ago: executing program 0 (id=197): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x1) sendmsg$NL80211_CMD_START_NAN(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8014}, 0x40080) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="5800000002060102000034e40000000004000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f727400001f000c00078008000640"], 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x5c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 2.911553717s ago: executing program 0 (id=198): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000012c0)=ANY=[@ANYBLOB="12010000c6700610f71400058544010203010902120001000000000904"], 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000080)=ANY=[@ANYBLOB="400e00000000"], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000300)={0x0, 0x7f, 0x6, &(0x7f00000002c0)={0x10, "dbe59aa96be76f16b24f7fa82127993690ff06d3586655d666db04ee3f6df95bc9"}}) 2.743318341s ago: executing program 3 (id=199): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300030e0000002cbd7000fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af030006f7ffffffffffffff24ac14142600e5ffffffffffff0100"], 0x70}, 0x1, 0x7}, 0x0) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='dummy_hcd.0\x00', 0xb) 2.38530159s ago: executing program 3 (id=200): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001c40)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) preadv2(r0, &(0x7f0000003500)=[{&(0x7f0000000180)=""/72, 0x48}], 0x1, 0x0, 0x7b, 0x10) 2.269603393s ago: executing program 3 (id=201): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000002280)={0x3, &(0x7f0000000180)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x40, 0x0, 0x9}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) 2.166176156s ago: executing program 3 (id=202): bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f00000000c0)={@remote, r2}, 0x14) sendmmsg$inet6(r0, &(0x7f0000000500)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x1, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=[@pktinfo={{0x24, 0x29, 0x32, {@remote, r2}}}], 0x28}}], 0x1, 0x0) 2.115151757s ago: executing program 4 (id=203): r0 = socket(0xa, 0x3, 0x87) r1 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000540)={'veth1_macvtap\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x40, r2}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40, r2}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x8936, &(0x7f0000000000)) 2.03050993s ago: executing program 1 (id=204): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.975226451s ago: executing program 4 (id=205): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x80, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 1.966962391s ago: executing program 3 (id=206): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) 1.706952147s ago: executing program 4 (id=207): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uac1.usb0/c_chmask\x00', 0x20c00, 0x8) 1.579081361s ago: executing program 1 (id=208): fallocate(0xffffffffffffffff, 0x10, 0x800, 0x8000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x80000) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000980), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000009c0)={0x1}) epoll_pwait2(r0, &(0x7f00000021c0)=[{}], 0x1, 0x0, 0x0, 0x0) 1.547549961s ago: executing program 4 (id=209): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2084ce, &(0x7f0000000100), 0x3, 0x454, &(0x7f0000000280)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x4, 0x102000001, 0x0, 0xfffffffffffff7fd}) 1.097516263s ago: executing program 1 (id=210): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300030e0000002cbd7000fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af030006f7ffffffffffffff24ac14142600e5ffffffffffff0100"], 0x70}, 0x1, 0x7}, 0x0) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='dummy_hcd.0\x00', 0xb) 879.946208ms ago: executing program 1 (id=211): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=@newtfilter={0x7c, 0x2c, 0xf3f, 0x70fd2c, 0x25dfdbbd, {0x0, 0x0, 0x0, r2, {0xc, 0xc}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4c, 0x2, [@TCA_BASIC_EMATCHES={0x48, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x3c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x38, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x1}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x1000, 0x86, 0x1}, {0x5, 0x7}}}, @TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_VAR="93f9007da8a7ec75"]}, @TCA_EM_META_RVALUE={0xffdf, 0x3, [@TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x88}, {0x0, 0x9}}}]}}]}]}]}}]}, 0xdb}, 0x1, 0x0, 0x0, 0x20041090}, 0xc080) 435.504959ms ago: executing program 1 (id=212): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) pselect6(0x0, 0x0, &(0x7f00000000c0)={0x9}, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32=r3, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140002"], 0x4c}}, 0x0) 336.066452ms ago: executing program 4 (id=213): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x1c, r2, 0x83625fc5352ba305, 0x0, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x20008000) socket$nl_netfilter(0x10, 0x3, 0xc) 0s ago: executing program 4 (id=214): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) syz_open_dev$video(&(0x7f0000000000), 0x3, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r2, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.106' (ED25519) to the list of known hosts. [ 66.543255][ T4173] cgroup: Unknown subsys name 'net' [ 66.684904][ T4173] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.101398][ T4173] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 69.489802][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 69.547919][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 69.571873][ T4197] chnl_net:caif_netlink_parms(): no params data found [ 69.662983][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 69.683491][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.690754][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.700054][ T4194] device bridge_slave_0 entered promiscuous mode [ 69.722589][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.729905][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.738136][ T4194] device bridge_slave_1 entered promiscuous mode [ 69.785707][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.792934][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.801025][ T4190] device bridge_slave_0 entered promiscuous mode [ 69.824056][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.831346][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.839816][ T4190] device bridge_slave_1 entered promiscuous mode [ 69.854892][ T4196] chnl_net:caif_netlink_parms(): no params data found [ 69.864668][ T4197] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.871895][ T4197] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.880567][ T4197] device bridge_slave_0 entered promiscuous mode [ 69.890346][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.909078][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.926863][ T4197] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.934271][ T4197] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.942731][ T4197] device bridge_slave_1 entered promiscuous mode [ 69.980350][ T4194] team0: Port device team_slave_0 added [ 70.010005][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.022197][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.038665][ T4194] team0: Port device team_slave_1 added [ 70.062199][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.069580][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.077341][ T4186] device bridge_slave_0 entered promiscuous mode [ 70.094129][ T4197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.106251][ T4197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.126392][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.133979][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.142486][ T4186] device bridge_slave_1 entered promiscuous mode [ 70.170349][ T4190] team0: Port device team_slave_0 added [ 70.189957][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.196942][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.223394][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.243661][ T4190] team0: Port device team_slave_1 added [ 70.249880][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.256976][ T4196] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.265705][ T4196] device bridge_slave_0 entered promiscuous mode [ 70.280959][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.287934][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.314113][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.328362][ T4197] team0: Port device team_slave_0 added [ 70.341119][ T4196] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.348230][ T4196] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.356810][ T4196] device bridge_slave_1 entered promiscuous mode [ 70.365724][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.381565][ T4197] team0: Port device team_slave_1 added [ 70.401979][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.419823][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.426796][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.452825][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.479263][ T4196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.497082][ T4196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.519436][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.526499][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.553568][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.583760][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.590872][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.617056][ T4197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.646180][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.653274][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.679595][ T4197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.693568][ T4186] team0: Port device team_slave_0 added [ 70.716698][ T4194] device hsr_slave_0 entered promiscuous mode [ 70.723644][ T4194] device hsr_slave_1 entered promiscuous mode [ 70.736051][ T4186] team0: Port device team_slave_1 added [ 70.744593][ T4196] team0: Port device team_slave_0 added [ 70.754141][ T4190] device hsr_slave_0 entered promiscuous mode [ 70.761315][ T4190] device hsr_slave_1 entered promiscuous mode [ 70.767992][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.775931][ T4190] Cannot create hsr debugfs directory [ 70.798770][ T4196] team0: Port device team_slave_1 added [ 70.812345][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.819550][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.845825][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.891649][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.898750][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.925124][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.950995][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.958007][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.984058][ T4196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.018782][ T4197] device hsr_slave_0 entered promiscuous mode [ 71.025658][ T4197] device hsr_slave_1 entered promiscuous mode [ 71.033673][ T4197] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.041646][ T4197] Cannot create hsr debugfs directory [ 71.047605][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.054732][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.081354][ T4196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.156977][ T4186] device hsr_slave_0 entered promiscuous mode [ 71.163989][ T4186] device hsr_slave_1 entered promiscuous mode [ 71.171283][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.179949][ T4186] Cannot create hsr debugfs directory [ 71.180099][ T1110] Bluetooth: hci0: command 0x0409 tx timeout [ 71.192707][ T1110] Bluetooth: hci1: command 0x0409 tx timeout [ 71.232318][ T4196] device hsr_slave_0 entered promiscuous mode [ 71.239560][ T4196] device hsr_slave_1 entered promiscuous mode [ 71.246089][ T4196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.254081][ T4196] Cannot create hsr debugfs directory [ 71.268902][ T1107] Bluetooth: hci3: command 0x0409 tx timeout [ 71.274961][ T1107] Bluetooth: hci2: command 0x0409 tx timeout [ 71.348805][ T1107] Bluetooth: hci4: command 0x0409 tx timeout [ 71.422587][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.429249][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.531087][ T4194] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.542901][ T4194] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.552840][ T4194] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.565646][ T4194] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.630412][ T4190] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 71.645168][ T4190] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.658896][ T4190] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.679020][ T4190] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 71.715887][ T4186] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.734590][ T4186] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.763056][ T4186] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.775045][ T4186] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.786237][ T4197] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.800225][ T4197] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.810462][ T4197] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.832404][ T4197] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.857373][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.903246][ T4196] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.914630][ T4196] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.935804][ T4196] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.950280][ T4196] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.964360][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.974476][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.985322][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.016922][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.026667][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.036914][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.044197][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.055608][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.095593][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.104673][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.114862][ T1282] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.122006][ T1282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.153793][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.167006][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.185488][ T4197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.221735][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.232125][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.241161][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.249955][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.257773][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.272090][ T4197] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.283872][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.303031][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.315883][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.326278][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.335293][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.344425][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.353220][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.361937][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.370498][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.377554][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.385604][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.394785][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.403604][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.410731][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.418453][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.426563][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.435851][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.452335][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.490354][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.499411][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.507861][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.518061][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.528034][ T1282] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.535159][ T1282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.544700][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.553768][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.563477][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.572904][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.582314][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.591403][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.601771][ T1282] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.608902][ T1282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.616685][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.637949][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.661009][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.670260][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.678996][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.688367][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.700080][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.709401][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.718083][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.727913][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.736842][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.745669][ T1170] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.752800][ T1170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.761311][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.770344][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.779785][ T1170] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.786863][ T1170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.796700][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.806802][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.815210][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.823786][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.850162][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.858516][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.871740][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.882892][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.892023][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.901085][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.909007][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.916710][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.927465][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.936617][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.953050][ T4197] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.964905][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.979275][ T4196] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.990668][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.001415][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.011725][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.027907][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.038403][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.076847][ T4190] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 73.116458][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.137348][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.146824][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.156046][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.164771][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.174481][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.185031][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.194446][ T1170] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.201581][ T1170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.210839][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.220584][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.232422][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.241274][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.249964][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.258860][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.259266][ T4231] Bluetooth: hci1: command 0x041b tx timeout [ 73.268234][ T1170] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.280041][ T1170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.288372][ T4231] Bluetooth: hci0: command 0x041b tx timeout [ 73.290916][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.304839][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.313486][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.333276][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.342101][ T4231] Bluetooth: hci2: command 0x041b tx timeout [ 73.348259][ T4231] Bluetooth: hci3: command 0x041b tx timeout [ 73.355517][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.380875][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.405811][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.419169][ T4231] Bluetooth: hci4: command 0x041b tx timeout [ 73.440904][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.457650][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.479879][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.500264][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.512264][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.532867][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.560053][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.613074][ T4197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.632574][ T4196] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.645123][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.657704][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.672347][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.682126][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.696100][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.723944][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.740355][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.774001][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.791592][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.815908][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.857357][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.865395][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.882241][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.891901][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.902978][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.911855][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.941659][ T4197] device veth0_vlan entered promiscuous mode [ 73.965709][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.975182][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.985667][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.994330][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.010227][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.035930][ T4197] device veth1_vlan entered promiscuous mode [ 74.047318][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.086166][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.095354][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.106194][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.115497][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.128509][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.143786][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.157788][ T4194] device veth0_vlan entered promiscuous mode [ 74.184560][ T4197] device veth0_macvtap entered promiscuous mode [ 74.201859][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.216122][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.225303][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.234363][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.246724][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.261943][ T4197] device veth1_macvtap entered promiscuous mode [ 74.274373][ T4194] device veth1_vlan entered promiscuous mode [ 74.305531][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.315215][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.327082][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.337008][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.352843][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.365388][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.376239][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.386446][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.394984][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.410984][ T4186] device veth0_vlan entered promiscuous mode [ 74.436387][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.463010][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.477325][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.487284][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.495663][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.504569][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.513737][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.527804][ T4197] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.548632][ T4197] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.557381][ T4197] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.567649][ T4197] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.588477][ T4186] device veth1_vlan entered promiscuous mode [ 74.622962][ T4194] device veth0_macvtap entered promiscuous mode [ 74.647806][ T4186] device veth0_macvtap entered promiscuous mode [ 74.656016][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.666904][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.675337][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.685790][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.695422][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.705687][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.714929][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.723911][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.733163][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.742088][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.760719][ T4194] device veth1_macvtap entered promiscuous mode [ 74.782179][ T4186] device veth1_macvtap entered promiscuous mode [ 74.798402][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.814477][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.824045][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.832684][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.842043][ T4196] device veth0_vlan entered promiscuous mode [ 74.858471][ T4196] device veth1_vlan entered promiscuous mode [ 74.874146][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.883615][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.892453][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.902239][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.915181][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.937719][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.972637][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.983837][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.998484][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.008215][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.018332][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.027847][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.037611][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.046825][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.073837][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.091228][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.102268][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.117436][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.131264][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.150470][ T4194] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.159928][ T4194] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.170945][ T4194] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.180946][ T4194] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.194214][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.203243][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.212181][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.221971][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.236539][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.247594][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.263290][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.274147][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.285231][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.295953][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.307416][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.319298][ T4190] device veth0_vlan entered promiscuous mode [ 75.339976][ T4231] Bluetooth: hci0: command 0x040f tx timeout [ 75.346102][ T4231] Bluetooth: hci1: command 0x040f tx timeout [ 75.361739][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.370896][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.380022][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.388518][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.415226][ T4186] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.421235][ T4231] Bluetooth: hci3: command 0x040f tx timeout [ 75.427781][ T4186] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.439978][ T4186] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.440003][ T4231] Bluetooth: hci2: command 0x040f tx timeout [ 75.457741][ T4186] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.474318][ T4190] device veth1_vlan entered promiscuous mode [ 75.483137][ T4240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.492956][ T4196] device veth0_macvtap entered promiscuous mode [ 75.502640][ T4240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.503791][ T7] Bluetooth: hci4: command 0x040f tx timeout [ 75.553226][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.564343][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.573188][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.581493][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.624649][ T4239] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.635313][ T4239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.654520][ T4190] device veth0_macvtap entered promiscuous mode [ 75.664417][ T4196] device veth1_macvtap entered promiscuous mode [ 75.676492][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.686195][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.694625][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.704695][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.714083][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.735457][ T4190] device veth1_macvtap entered promiscuous mode [ 75.760216][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.771742][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.787327][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.798464][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.809534][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.820933][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.833463][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.881770][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.899729][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.916896][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.931108][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.941444][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.952109][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.963305][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.973930][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.986220][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.999633][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.019797][ T1170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.027656][ T1170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.028653][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.051879][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.070680][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.084251][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.097488][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.128611][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.145266][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.158344][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.169876][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.184619][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.194583][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.202487][ T4269] loop2: detected capacity change from 0 to 4096 [ 76.212638][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.227300][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.248140][ T1170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.259633][ T4196] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.268376][ T4196] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.278146][ T1170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.285587][ T4196] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.295460][ T4196] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.319646][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.336603][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.347227][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.370370][ T4271] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 76.378207][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.398836][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.415153][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.425268][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.437120][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.450627][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.465630][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.480221][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.489257][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.511951][ T4190] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.524188][ T4190] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.533778][ T4190] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.544637][ T4190] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.574228][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.602202][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.629138][ T4269] syz.2.3 (4269) used greatest stack depth: 18768 bytes left [ 76.633178][ T4240] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.651837][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.664002][ T4240] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.701373][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.813849][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.879842][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.893758][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.930153][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.930779][ T4275] loop2: detected capacity change from 0 to 8 [ 76.938014][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.938625][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.969109][ T4277] loop1: detected capacity change from 0 to 512 [ 77.043730][ T1282] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.059516][ T1282] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.079550][ T4275] SQUASHFS error: zstd decompression error: 2 [ 77.094053][ T4277] EXT4-fs error (device loop1): ext4_get_branch:178: inode #13: block 2: comm syz.1.2: invalid block [ 77.140691][ T4275] SQUASHFS error: zstd decompression failed, data probably corrupt [ 77.151306][ T4239] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.160283][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.188118][ T4275] SQUASHFS error: Failed to read block 0x62b: -5 [ 77.195911][ T4277] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.2: invalid indirect mapped block 10 (level 1) [ 77.209769][ T4275] SQUASHFS error: Unable to read metadata cache entry [629] [ 77.217411][ T4275] SQUASHFS error: Unable to read directory block [629:ff26] [ 77.218149][ T4239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.249449][ T4277] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.2: invalid indirect mapped block 8 (level 1) [ 77.274028][ T4277] EXT4-fs (loop1): 1 truncate cleaned up [ 77.285380][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.296430][ T4277] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 77.378441][ T4285] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 77.399223][ T4263] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 77.421001][ T4263] Bluetooth: hci1: command 0x0419 tx timeout [ 77.427799][ T4263] Bluetooth: hci0: command 0x0419 tx timeout [ 77.506976][ T4263] Bluetooth: hci2: command 0x0419 tx timeout [ 77.520214][ T4263] Bluetooth: hci3: command 0x0419 tx timeout [ 77.579497][ T1110] Bluetooth: hci4: command 0x0419 tx timeout [ 77.734398][ T4300] process 'syz.1.10' launched './file0' with NULL argv: empty string added [ 77.774092][ T4297] device syzkaller1 entered promiscuous mode [ 77.908990][ T4263] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 77.979123][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 78.118616][ T4228] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 78.159177][ T4263] usb 1-1: Using ep0 maxpacket: 16 [ 78.219397][ T4231] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 78.278960][ T4263] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 78.291174][ T4263] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 78.322174][ T4319] input: syz1 as /devices/virtual/input/input5 [ 78.380824][ T4263] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 78.395054][ T4263] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 78.409090][ T4290] udevd[4290]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 78.413163][ T4263] usb 1-1: SerialNumber: syz [ 78.508946][ T4228] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.521971][ T4263] usb 1-1: 0:2 : does not exist [ 78.530845][ T4228] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.543873][ T4228] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 78.565075][ T4228] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.586791][ T4228] usb 5-1: config 0 descriptor?? [ 78.724969][ T4332] loop1: detected capacity change from 0 to 512 [ 78.796424][ T4332] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 78.824652][ T4332] EXT4-fs (loop1): 1 truncate cleaned up [ 78.839354][ T4332] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,errors=remount-ro,data_err=abort,noload,data_err=ignore,noblock_validity,. Quota mode: none. [ 79.196513][ T4340] Illegal XDP return value 1848585456, expect packet loss! [ 79.261016][ T4342] Zero length message leads to an empty skb [ 79.288898][ T4228] usb 5-1: language id specifier not provided by device, defaulting to English [ 79.389517][ T4263] usb 1-1: USB disconnect, device number 2 [ 79.436877][ T4346] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 79.597790][ T4349] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 79.703778][ T4281] udevd[4281]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 79.805442][ T4192] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 79.816462][ T4192] CPU: 0 PID: 4192 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 79.824163][ T4192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 79.834259][ T4192] Workqueue: hci3 hci_rx_work [ 79.839103][ T4192] Call Trace: [ 79.842425][ T4192] [ 79.845389][ T4192] dump_stack_lvl+0x188/0x250 [ 79.850108][ T4192] ? show_regs_print_info+0x20/0x20 [ 79.855339][ T4192] ? load_image+0x410/0x410 [ 79.859897][ T4192] sysfs_create_dir_ns+0x26a/0x290 [ 79.865048][ T4192] ? sysfs_warn_dup+0xa0/0xa0 [ 79.869757][ T4192] ? kthread+0x42e/0x520 [ 79.874047][ T4192] ? do_raw_spin_unlock+0x11d/0x230 [ 79.879289][ T4192] kobject_add_internal+0x5ba/0xcd0 [ 79.884537][ T4192] kobject_add+0x160/0x230 [ 79.889005][ T4192] ? kobject_init+0x1c0/0x1c0 [ 79.893729][ T4192] ? __raw_spin_lock_init+0x41/0x100 [ 79.899059][ T4192] ? klist_children_get+0x50/0x50 [ 79.904158][ T4192] ? get_device_parent+0x121/0x3e0 [ 79.909306][ T4192] device_add+0x470/0x1050 [ 79.913755][ T4192] ? device_initialize+0x2a5/0x4d0 [ 79.918917][ T4192] hci_conn_add_sysfs+0xd1/0x1e0 [ 79.923898][ T4192] le_conn_complete_evt+0xc2e/0x14d0 [ 79.929235][ T4192] ? cs_le_create_conn+0x5e0/0x5e0 [ 79.934398][ T4192] ? __mutex_trylock_common+0x15c/0x260 [ 79.939995][ T4192] hci_le_meta_evt+0x285/0x3ca0 [ 79.945034][ T4192] ? hci_event_packet+0x363/0x1310 [ 79.950187][ T4192] ? __lock_acquire+0x7b50/0x7b50 [ 79.955258][ T4192] ? hci_remote_host_features_evt+0x240/0x240 [ 79.961461][ T4192] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 79.967135][ T4192] ? mark_lock+0x94/0x320 [ 79.971504][ T4192] ? mutex_unlock+0x10/0x10 [ 79.976048][ T4192] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 79.982091][ T4192] ? lock_chain_count+0x20/0x20 [ 79.986985][ T4192] ? __rwlock_init+0x140/0x140 [ 79.991789][ T4192] hci_event_packet+0xe0b/0x1310 [ 79.996779][ T4192] ? _raw_spin_unlock+0x40/0x40 [ 80.001668][ T4192] ? rcu_lock_release+0x20/0x20 [ 80.006652][ T4192] ? hci_send_to_monitor+0x9c/0x4a0 [ 80.011900][ T4192] hci_rx_work+0x255/0xa10 [ 80.016373][ T4192] process_one_work+0x867/0xff0 [ 80.021275][ T4192] ? worker_detach_from_pool+0x240/0x240 [ 80.026941][ T4192] ? lockdep_hardirqs_off+0x70/0x100 [ 80.032281][ T4192] ? _raw_spin_lock_irq+0xb7/0xf0 [ 80.037344][ T4192] ? _raw_spin_lock_irqsave+0x100/0x100 [ 80.042942][ T4192] ? wq_worker_running+0x97/0x170 [ 80.048014][ T4192] worker_thread+0xad7/0x12a0 [ 80.052777][ T4192] kthread+0x42e/0x520 [ 80.056914][ T4192] ? rcu_lock_release+0x20/0x20 [ 80.061812][ T4192] ? kthread_blkcg+0xd0/0xd0 [ 80.066442][ T4192] ret_from_fork+0x1f/0x30 [ 80.070953][ T4192] [ 80.079066][ T4228] uclogic 0003:256C:006D.0001: failed retrieving string descriptor #100: -71 [ 80.087915][ T4228] uclogic 0003:256C:006D.0001: failed retrieving pen parameters: -71 [ 80.100330][ T4192] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 80.113937][ T4192] Bluetooth: hci3: failed to register connection device [ 80.124514][ T4228] uclogic 0003:256C:006D.0001: failed probing pen v1 parameters: -71 [ 80.173798][ T4228] uclogic 0003:256C:006D.0001: failed probing parameters: -71 [ 80.215781][ T4228] uclogic: probe of 0003:256C:006D.0001 failed with error -71 [ 80.297422][ T4228] usb 5-1: USB disconnect, device number 2 [ 80.517368][ T4377] loop1: detected capacity change from 0 to 2048 [ 80.544307][ T4376] loop0: detected capacity change from 0 to 128 [ 80.627589][ T4263] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 80.665926][ T4377] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 80.679151][ T4377] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.711252][ T4376] FAT-fs (loop0): error, invalid FAT chain (i_pos 548, last_block 8) [ 80.719764][ T4376] FAT-fs (loop0): Filesystem has been set read-only [ 80.726511][ T4376] FAT-fs (loop0): error, corrupted file size (i_pos 548, 522) [ 80.881081][ T1107] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 81.008933][ T4263] usb 4-1: config 0 has no interfaces? [ 81.172911][ T4263] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 81.182428][ T4228] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 81.206849][ T4263] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.221987][ T4263] usb 4-1: Product: syz [ 81.226436][ T4263] usb 4-1: Manufacturer: syz [ 81.234066][ T4263] usb 4-1: SerialNumber: syz [ 81.245937][ T4263] usb 4-1: config 0 descriptor?? [ 81.301418][ T1107] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.438727][ T4228] usb 1-1: Using ep0 maxpacket: 8 [ 81.539694][ T4263] usb 4-1: USB disconnect, device number 2 [ 81.609366][ T4228] usb 1-1: unable to get BOS descriptor or descriptor too short [ 81.685271][ T4228] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 81.703555][ T4228] usb 1-1: can't read configurations, error -71 [ 82.108818][ T4263] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 82.147952][ T4401] loop1: detected capacity change from 0 to 131072 [ 82.156025][ T1107] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.165972][ T1107] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 82.180533][ T1107] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 82.195240][ T1107] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.209333][ T4401] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(0) [ 82.217668][ T4401] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 82.234613][ T4401] F2FS-fs (loop1): invalid crc value [ 82.244216][ T1107] usb 5-1: config 0 descriptor?? [ 82.276120][ T4401] F2FS-fs (loop1): Found nat_bits in checkpoint [ 82.386929][ T4401] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 82.394669][ T4401] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 82.490344][ T4263] usb 3-1: config 1 interface 0 altsetting 13 endpoint 0x81 has invalid maxpacket 16416, setting to 1024 [ 82.526068][ T4416] loop3: detected capacity change from 0 to 32768 [ 82.556423][ T4263] usb 3-1: config 1 interface 0 altsetting 13 endpoint 0x2 has invalid wMaxPacketSize 0 [ 82.583297][ T4263] usb 3-1: config 1 interface 0 has no altsetting 0 [ 82.591063][ T4416] ======================================================= [ 82.591063][ T4416] WARNING: The mand mount option has been deprecated and [ 82.591063][ T4416] and is ignored by this kernel. Remove the mand [ 82.591063][ T4416] option from the mount to silence this warning. [ 82.591063][ T4416] ======================================================= [ 82.609503][ T4228] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 82.744357][ T4416] XFS (loop3): Mounting V5 Filesystem [ 82.794744][ T1107] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 82.838970][ T4263] usb 3-1: string descriptor 0 read error: -22 [ 82.855698][ T4263] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 82.864971][ T4263] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.906309][ T4416] XFS (loop3): Ending clean mount [ 82.931388][ T4416] XFS (loop3): Quotacheck needed: Please wait. [ 82.960524][ T1107] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 82.980584][ T4416] XFS (loop3): Quotacheck: Done. [ 82.990051][ T4228] usb 1-1: config 0 has an invalid interface number: 255 but max is 0 [ 83.021501][ T4228] usb 1-1: config 0 has no interface number 0 [ 83.048184][ T4228] usb 1-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 83.114280][ T4228] usb 1-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 83.169285][ T4228] usb 1-1: config 0 interface 255 has no altsetting 0 [ 83.176144][ T4228] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 83.206704][ T4228] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.229407][ T4228] usb 1-1: config 0 descriptor?? [ 83.256040][ T4196] XFS (loop3): Unmounting Filesystem [ 83.270496][ T4228] cp210x 1-1:0.255: cp210x converter detected [ 83.485072][ T4263] keytouch 0003:0926:3333.0003: fixing up Keytouch IEC report descriptor [ 83.518010][ T4263] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/0003:0926:3333.0003/input/input6 [ 83.670329][ T4263] keytouch 0003:0926:3333.0003: input,hidraw1: USB HID v0.05 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 83.690080][ T4228] cp210x 1-1:0.255: failed to get vendor val 0x000e size 3: -32 [ 83.750388][ T4263] usb 3-1: USB disconnect, device number 2 [ 83.941208][ T4440] fido_id[4440]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 83.964679][ T4228] cp210x 1-1:0.255: GPIO initialisation failed: -19 [ 83.983807][ T4228] usb 1-1: cp210x converter now attached to ttyUSB0 [ 84.084773][ T4448] netlink: 8 bytes leftover after parsing attributes in process `syz.3.70'. [ 84.095929][ T4448] netlink: 4 bytes leftover after parsing attributes in process `syz.3.70'. [ 84.125666][ T4448] netlink: 'syz.3.70': attribute type 12 has an invalid length. [ 84.152932][ T4448] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.162311][ T4448] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.171126][ T4448] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.179910][ T4448] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.201726][ T4448] netlink: 8 bytes leftover after parsing attributes in process `syz.3.70'. [ 84.251264][ T4448] netlink: 4 bytes leftover after parsing attributes in process `syz.3.70'. [ 84.269974][ T4228] usb 1-1: USB disconnect, device number 4 [ 84.276106][ T4448] netlink: 'syz.3.70': attribute type 12 has an invalid length. [ 84.301991][ T4228] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 84.317402][ T4228] cp210x 1-1:0.255: device disconnected [ 84.424036][ T4454] netlink: 'syz.2.72': attribute type 2 has an invalid length. [ 84.673398][ T4468] loop2: detected capacity change from 0 to 128 [ 84.707853][ T4468] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 84.719066][ T4468] ext4 filesystem being mounted at /23/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 84.951588][ T4478] netlink: 4 bytes leftover after parsing attributes in process `syz.2.82'. [ 84.965610][ T1110] usb 5-1: USB disconnect, device number 3 [ 85.116727][ T4487] input: syz1 as /devices/virtual/input/input7 [ 85.501986][ T4484] device batadv_slave_1 entered promiscuous mode [ 85.509429][ T4485] netlink: 4 bytes leftover after parsing attributes in process `syz.4.85'. [ 85.534744][ T4485] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.595291][ T4485] device batadv_slave_1 left promiscuous mode [ 85.678441][ T4485] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.788251][ T4504] loop0: detected capacity change from 0 to 512 [ 85.982911][ T4504] EXT4-fs (loop0): mounted filesystem without journal. Opts: i_version,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 86.009623][ T4504] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.025791][ T4494] loop3: detected capacity change from 0 to 40427 [ 86.034733][ T4514] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 86.095624][ T4494] F2FS-fs (loop3): invalid crc value [ 86.135525][ T4494] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 86.148473][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 86.157150][ T4263] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 86.218933][ T1107] Bluetooth: hci3: command 0x0406 tx timeout [ 86.411940][ T4494] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 86.452928][ T4519] loop2: detected capacity change from 0 to 8192 [ 86.519122][ T4519] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 86.529301][ T4519] REISERFS (device loop2): using ordered data mode [ 86.535963][ T4519] reiserfs: using flush barriers [ 86.541909][ T4263] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 86.555150][ T4263] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 86.564922][ T4519] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 86.584355][ T4519] REISERFS (device loop2): checking transaction log (loop2) [ 86.645780][ T4196] attempt to access beyond end of device [ 86.645780][ T4196] loop3: rw=2049, want=45104, limit=40427 [ 86.658896][ T4263] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 86.672688][ T4263] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 86.690573][ T4263] usb 5-1: SerialNumber: syz [ 86.723918][ T4519] REISERFS (device loop2): Using tea hash to sort names [ 86.735152][ T4519] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 86.783702][ T13] cfg80211: failed to load regulatory.db [ 86.981709][ T4263] usb 5-1: 0:2 : does not exist [ 87.018419][ T4263] usb 5-1: USB disconnect, device number 4 [ 87.336535][ T4281] udevd[4281]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 87.387656][ T4533] loop2: detected capacity change from 0 to 512 [ 87.452279][ T4533] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 87.479088][ T4533] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 87.545814][ T4533] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodiscard,jqfmt=vfsv1,mb_optimize_scan=0x0000000000000001,dioread_nolock,data_err=ignore,,errors=continue. Quota mode: writeback. [ 87.635315][ T4533] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.645878][ T4263] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 87.696384][ T4533] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #2: comm syz.2.102: corrupted inode contents [ 87.751676][ T4533] EXT4-fs error (device loop2): ext4_dirty_inode:6077: inode #2: comm syz.2.102: mark_inode_dirty error [ 87.771656][ T4533] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #2: comm syz.2.102: corrupted inode contents [ 87.796290][ T4541] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #2: comm syz.2.102: corrupted inode contents [ 87.850800][ T4543] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 87.859459][ T4541] EXT4-fs error (device loop2): ext4_dirty_inode:6077: inode #2: comm syz.2.102: mark_inode_dirty error [ 87.872669][ T4541] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #2: comm syz.2.102: corrupted inode contents [ 87.893243][ T4541] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #2: comm syz.2.102: mark_inode_dirty error [ 87.907260][ T4541] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #2: comm syz.2.102: corrupted inode contents [ 87.930638][ T4541] EXT4-fs error (device loop2): ext4_dirty_inode:6077: inode #2: comm syz.2.102: mark_inode_dirty error [ 87.990487][ T4544] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #2: comm syz.2.102: corrupted inode contents [ 88.022445][ T4548] input: syz0 as /devices/virtual/input/input8 [ 88.091289][ T4263] usb 2-1: unable to get BOS descriptor or descriptor too short [ 88.181710][ T4263] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 88.198207][ T4263] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 88.234209][ T4263] usb 2-1: config 1 interface 0 altsetting 36 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 88.254524][ T4263] usb 2-1: config 1 interface 0 has no altsetting 0 [ 88.399653][ T4557] Set syz1 is full, maxelem 4 reached [ 88.425956][ T4263] usb 2-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice= 0.40 [ 88.457056][ T4263] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.484904][ T4263] usb 2-1: Product: syz [ 88.492536][ T4263] usb 2-1: Manufacturer: syz [ 88.497186][ T4263] usb 2-1: SerialNumber: syz [ 88.511796][ T4562] netem: change failed [ 88.601350][ T4564] loop0: detected capacity change from 0 to 1024 [ 88.668739][ T4564] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a016c118, mo2=0002] [ 88.692631][ T4564] System zones: 0-1, 3-12 [ 88.710512][ T4564] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_dev=0x0000000000000007,debug,nodioread_nolock,min_batch_time=0x0000000000000006,debug_want_extra_isize=0x0000000000000080,grpquota,nodelalloc,jqfmt=vfsv1,norecovery,,errors=continue. Quota mode: writeback. [ 88.766564][ T4564] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2809: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 88.852302][ T4263] usb 2-1: USB disconnect, device number 2 [ 89.173196][ T4576] loop0: detected capacity change from 0 to 2048 [ 89.246515][ T4576] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 89.332963][ T4576] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 89.391474][ T4576] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 89.424225][ T4576] UDF-fs: Scanning with blocksize 512 failed [ 89.490679][ T4576] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 89.841243][ T4589] netlink: 'syz.4.123': attribute type 7 has an invalid length. [ 89.853489][ T4589] netlink: 'syz.4.123': attribute type 8 has an invalid length. [ 90.028507][ T4593] loop0: detected capacity change from 0 to 1024 [ 90.045868][ T4591] netlink: 'syz.4.126': attribute type 19 has an invalid length. [ 90.067960][ T4593] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 90.088498][ T4591] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.097493][ T4591] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.106351][ T4591] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.115120][ T4591] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.127540][ T4591] netlink: 'syz.4.126': attribute type 19 has an invalid length. [ 90.179925][ T4593] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,bsddf,delalloc,resuid=0x000000000000ee01,init_itable,nodelalloc,grpid,quota,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 90.277929][ T9] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.413023][ T9] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.562306][ T9] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.743097][ T9] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.798077][ T26] audit: type=1326 audit(1786095838.832:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4612 comm="syz.3.136" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9a623700d9 code=0x0 [ 90.842666][ T4614] loop4: detected capacity change from 0 to 764 [ 90.923580][ T4614] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 91.375938][ T4632] gadgetfs: bound to dummy_udc driver [ 91.389906][ T4637] ip_tables: iptables: counters copy to user failed while replacing table [ 91.401168][ T4637] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 91.604660][ T4646] device bridge1 entered promiscuous mode [ 91.657988][ T4650] syz.3.145 uses obsolete (PF_INET,SOCK_PACKET) [ 91.692289][ T4646] team0: Port device bridge1 added [ 91.698078][ T4619] chnl_net:caif_netlink_parms(): no params data found [ 91.733947][ T4649] bridge0: port 3(team0) entered blocking state [ 91.785741][ T4649] bridge0: port 3(team0) entered disabled state [ 91.842539][ T4649] device team0 entered promiscuous mode [ 91.858477][ T4649] device team_slave_0 entered promiscuous mode [ 91.892992][ T4649] device team_slave_1 entered promiscuous mode [ 91.942362][ T4649] bridge0: port 3(team0) entered blocking state [ 91.949094][ T4649] bridge0: port 3(team0) entered forwarding state [ 92.459682][ T4691] overlayfs: upper fs does not support tmpfile. [ 92.516214][ T4619] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.540803][ T4619] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.562123][ T4619] device bridge_slave_0 entered promiscuous mode [ 92.661057][ T4619] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.669580][ T4619] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.677862][ T4619] device bridge_slave_1 entered promiscuous mode [ 92.714773][ T4703] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 92.763240][ T4703] bond1: (slave lo): Enslaving as an active interface with an up link [ 92.788941][ T4703] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 92.899564][ T4226] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 92.922140][ T4619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.939534][ T13] Bluetooth: hci3: command 0x0409 tx timeout [ 92.988195][ T4619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.190958][ T4619] team0: Port device team_slave_0 added [ 93.228897][ T4619] team0: Port device team_slave_1 added [ 93.328827][ T4226] usb 5-1: config 0 has no interfaces? [ 93.356218][ T4729] loop1: detected capacity change from 0 to 512 [ 93.376260][ T4619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.396238][ T4619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.463309][ T4619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.512672][ T4619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.529070][ T4226] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 93.550378][ T4226] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 93.578071][ T4619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.634053][ T4226] usb 5-1: Product: syz [ 93.691322][ T4226] usb 5-1: Manufacturer: syz [ 93.759173][ T4226] usb 5-1: SerialNumber: syz [ 93.844872][ T4226] usb 5-1: config 0 descriptor?? [ 93.858805][ T4619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.892429][ T4729] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,bsddf,stripe=0x0000000000000005,journal_ioprio=0x0000000000000007,. Quota mode: writeback. [ 93.919329][ T4729] ext4 filesystem being mounted at /42/file3 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.104804][ T9] device hsr_slave_0 left promiscuous mode [ 94.114126][ T9] device hsr_slave_1 left promiscuous mode [ 94.121275][ T4729] EXT4-fs (loop1): shut down requested (1) [ 94.139322][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.155301][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.167243][ T13] usb 5-1: USB disconnect, device number 5 [ 94.224182][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.262517][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.290864][ T9] device bridge_slave_1 left promiscuous mode [ 94.299405][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.327746][ T9] device bridge_slave_0 left promiscuous mode [ 94.365044][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.473264][ T9] device veth1_vlan left promiscuous mode [ 94.490291][ T9] device veth0_vlan left promiscuous mode [ 94.617227][ T4806] capability: warning: `syz.0.171' uses deprecated v2 capabilities in a way that may be insecure [ 94.932776][ T4828] loop3: detected capacity change from 0 to 128 [ 95.029046][ T4230] Bluetooth: hci3: command 0x041b tx timeout [ 95.072366][ T4828] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,nodelalloc,,errors=continue. Quota mode: none. [ 95.093011][ T4828] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.225863][ T4834] loop0: detected capacity change from 0 to 64 [ 95.270375][ T9] team0 (unregistering): Port device team_slave_1 removed [ 95.379479][ T9] team0 (unregistering): Port device team_slave_0 removed [ 95.434955][ T4838] loop3: detected capacity change from 0 to 2048 [ 95.479238][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 95.503431][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 95.555884][ T4838] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 95.717773][ T9] bond0 (unregistering): Released all slaves [ 95.837941][ T4848] input: syz0 as /devices/virtual/input/input9 [ 96.179600][ T4859] loop3: detected capacity change from 0 to 256 [ 96.246275][ T4824] bridge0: port 3(team0) entered disabled state [ 96.253156][ T4824] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.261720][ T4824] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.306374][ T26] audit: type=1800 audit(1786095844.342:3): pid=4859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.191" name="file1" dev="loop3" ino=1048591 res=0 errno=0 [ 96.346175][ T26] audit: type=1800 audit(1786095844.382:4): pid=4859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.191" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=1048592 res=0 errno=0 [ 96.504619][ T4866] using random self ethernet address [ 96.519501][ T4866] using random host ethernet address [ 96.624983][ T4868] loop3: detected capacity change from 0 to 4096 [ 96.798696][ T4875] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 96.927084][ T4824] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.962963][ T4877] dummy_hcd dummy_hcd.0: remove, state 1 [ 96.971226][ T4877] usb usb1: USB disconnect, device number 1 [ 97.048775][ T4225] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 97.056784][ T4225] usb usb1-port1: attempt power cycle [ 97.124258][ T21] Bluetooth: hci3: command 0x040f tx timeout [ 97.156020][ T4877] dummy_hcd dummy_hcd.0: stopped [ 97.168167][ T4877] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 97.237723][ T4824] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.249830][ T4824] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.259687][ T4824] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.268706][ T4824] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.399460][ T4824] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 97.408407][ T4824] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 97.417676][ T4824] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 97.426609][ T4824] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 97.484438][ T4619] device hsr_slave_0 entered promiscuous mode [ 97.503000][ T4619] device hsr_slave_1 entered promiscuous mode [ 97.556501][ T4619] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 97.573898][ T4619] Cannot create hsr debugfs directory [ 98.021082][ T26] audit: type=1800 audit(1786095846.062:5): pid=4899 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.207" name="c_chmask" dev="configfs" ino=35361 res=0 errno=0 [ 98.195433][ T4904] loop4: detected capacity change from 0 to 512 [ 98.203071][ T4619] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 98.256437][ T4619] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 98.296520][ T4619] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 98.324782][ T4619] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 98.370286][ T4904] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 98.424460][ T4904] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 98.522343][ T4904] EXT4-fs (loop4): 1 truncate cleaned up [ 98.655585][ T4904] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 98.838001][ T4619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.873021][ T4920] netlink: 20 bytes leftover after parsing attributes in process `syz.1.211'. [ 98.904102][ T4765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 98.915351][ T4765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 98.937809][ T4619] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.013811][ T4778] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 99.034894][ T4778] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 99.052801][ T4778] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.059954][ T4778] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.091074][ T4778] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 99.105740][ T4778] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 99.114551][ T4778] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.121704][ T4778] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.136345][ T4778] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 99.168128][ T4778] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 99.180145][ T4230] Bluetooth: hci3: command 0x0419 tx timeout [ 99.235439][ T4778] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 99.256863][ T4778] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 99.320268][ T4778] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 99.382151][ T4778] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 99.400668][ T4778] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 99.416442][ T4778] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 99.427207][ T4778] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 99.474944][ T4778] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 99.525804][ T4778] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 99.539123][ T4778] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 99.551033][ T4619] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 99.770413][ T4874] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 99.782198][ T4874] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 99.790640][ T4874] CPU: 1 PID: 4874 Comm: syz.0.198 Not tainted syzkaller #0 [ 99.797953][ T4874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 99.808081][ T4874] RIP: 0010:set_link_state+0x27/0x11d0 [ 99.813579][ T4874] Code: ff ff 90 55 41 57 41 56 41 55 41 54 53 48 83 ec 50 49 89 fe 48 bb 00 00 00 00 00 fc ff df e8 60 88 42 fb 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 0b ab 87 fb 4d 8b 26 4c 89 74 24 10 [ 99.833213][ T4874] RSP: 0018:ffffc900047bf7c8 EFLAGS: 00010046 [ 99.839324][ T4874] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff88801da39dc0 [ 99.847330][ T4874] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 99.855335][ T4874] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 99.863340][ T4874] R10: dffffc0000000000 R11: fffff520008f7ee8 R12: 0000000000000a02 [ 99.871358][ T4874] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 99.879406][ T4874] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 99.888378][ T4874] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 99.894991][ T4874] CR2: 00007f5b06e9d7c0 CR3: 0000000063ad1000 CR4: 00000000003506e0 [ 99.902994][ T4874] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 99.910994][ T4874] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 99.918999][ T4874] Call Trace: [ 99.922303][ T4874] [ 99.925264][ T4874] ? _raw_spin_lock+0x40/0x40 [ 99.929970][ T4874] ? lock_chain_count+0x20/0x20 [ 99.934847][ T4874] ? mutex_lock_io_nested+0x60/0x60 [ 99.940080][ T4874] dummy_pullup+0xbd/0x120 [ 99.944529][ T4874] ? dummy_set_selfpowered+0x150/0x150 [ 99.950023][ T4874] usb_gadget_disconnect+0xd0/0x3a0 [ 99.955257][ T4874] usb_gadget_remove_driver+0x4a/0x350 [ 99.960753][ T4874] usb_gadget_unregister_driver+0x15d/0x4c0 [ 99.966681][ T4874] raw_release+0xd6/0x260 [ 99.971045][ T4874] ? raw_open+0x510/0x510 [ 99.975403][ T4874] __fput+0x212/0x8c0 [ 99.979422][ T4874] task_work_run+0x125/0x1a0 [ 99.984047][ T4874] do_exit+0x635/0x2110 [ 99.988236][ T4874] ? put_task_struct+0x80/0x80 [ 99.993026][ T4874] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 99.999042][ T4874] ? _raw_spin_lock_irq+0xb7/0xf0 [ 100.004103][ T4874] do_group_exit+0x12c/0x2f0 [ 100.008725][ T4874] ? lockdep_hardirqs_on+0x94/0x140 [ 100.013959][ T4874] get_signal+0x7eb/0x12e0 [ 100.018420][ T4874] arch_do_signal_or_restart+0xe6/0x12a0 [ 100.024104][ T4874] ? get_sigframe_size+0x10/0x10 [ 100.029085][ T4874] ? exit_to_user_mode_loop+0x3b/0x130 [ 100.034574][ T4874] exit_to_user_mode_loop+0x9e/0x130 [ 100.039887][ T4874] exit_to_user_mode_prepare+0xee/0x180 [ 100.045472][ T4874] syscall_exit_to_user_mode+0x16/0x40 [ 100.050963][ T4874] do_syscall_64+0x58/0xa0 [ 100.055411][ T4874] ? clear_bhb_loop+0x30/0x80 [ 100.060121][ T4874] ? clear_bhb_loop+0x30/0x80 [ 100.064831][ T4874] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 100.070751][ T4874] RIP: 0033:0x7fa28da4ed6b [ 100.075194][ T4874] Code: Unable to access opcode bytes at RIP 0x7fa28da4ed41. [ 100.082585][ T4874] RSP: 002b:00007fa28bca4f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 100.091028][ T4874] RAX: fffffffffffffffc RBX: 0000000000000003 RCX: 00007fa28da4ed6b [ 100.099071][ T4874] RDX: 00007fa28bca5fd0 RSI: 0000000080085502 RDI: 0000000000000003 [ 100.107074][ T4874] RBP: 00007fa28bca5fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 100.115074][ T4874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000080085502 [ 100.123070][ T4874] R13: 0000000800000000 R14: 0000000000000000 R15: 00007fa28db04882 [ 100.131080][ T4874] [ 100.134141][ T4874] Modules linked in: [ 100.138084][ T4874] ---[ end trace a2729cf6d94cd5df ]--- [ 100.143553][ T4874] RIP: 0010:set_link_state+0x27/0x11d0 [ 100.149077][ T4874] Code: ff ff 90 55 41 57 41 56 41 55 41 54 53 48 83 ec 50 49 89 fe 48 bb 00 00 00 00 00 fc ff df e8 60 88 42 fb 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 0b ab 87 fb 4d 8b 26 4c 89 74 24 10 [ 100.168714][ T4874] RSP: 0018:ffffc900047bf7c8 EFLAGS: 00010046 [ 100.174814][ T4874] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff88801da39dc0 [ 100.182845][ T4874] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 100.190851][ T4874] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 100.198852][ T4874] R10: dffffc0000000000 R11: fffff520008f7ee8 R12: 0000000000000a02 [ 100.206852][ T4874] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 100.214849][ T4874] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 100.223838][ T4874] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 100.230454][ T4874] CR2: 00007f5b06e9d7c0 CR3: 0000000063ad1000 CR4: 00000000003506e0 [ 100.240190][ T4874] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 100.248204][ T4874] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 100.256226][ T4874] Kernel panic - not syncing: Fatal exception [ 100.262405][ T4874] Kernel Offset: disabled [ 100.266746][ T4874] Rebooting in 86400 seconds..