last executing test programs: 14.86079287s ago: executing program 0 (id=39): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20040084) 13.814262481s ago: executing program 0 (id=44): r0 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x40702) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x20800, 0x0) poll(0x0, 0x0, 0x2) ioctl$USBDEVFS_CONNECTINFO(r1, 0x80045505, &(0x7f0000002a40)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000100)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x800, 0xb0e, 0xf73, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000180)={r4}) setsockopt$inet_int(r2, 0x0, 0xb, &(0x7f00000000c0)=0x1ff, 0x4) 13.09818278s ago: executing program 0 (id=46): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r0}, 0x18) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448cb, 0x0) 11.543437989s ago: executing program 1 (id=53): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8) close_range(r0, 0xffffffffffffffff, 0x0) 11.503485033s ago: executing program 0 (id=55): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) umount2(&(0x7f0000000380)='./file0\x00', 0x1) 11.43514594s ago: executing program 1 (id=58): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(&(0x7f0000000300), &(0x7f0000000040)='.\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x2200cd0, 0x0) 11.408394892s ago: executing program 0 (id=59): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x44, 0x20, 0x1, 0x70bd27, 0x0, {0xa, 0x0, 0x0, 0x40}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'hsr0\x00'}, @FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'veth1_vlan\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040804}, 0x4008000) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x40084) 9.711713666s ago: executing program 1 (id=61): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) r0 = socket$pptp(0x18, 0x1, 0x2) r1 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x2a200) io_uring_setup(0x5b54, &(0x7f0000000040)={0x0, 0x2df0, 0x0, 0x0, 0x2b2}) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000c40)={0x0, 0xfe72}) close_range(r0, 0xffffffffffffffff, 0x0) 9.35466517s ago: executing program 0 (id=66): r0 = socket$pppoe(0x18, 0x1, 0x0) readv(r0, &(0x7f0000000a80)=[{&(0x7f0000000580)=""/248, 0xf8}, {0x0}, {0x0}], 0x3) 9.267742238s ago: executing program 3 (id=67): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(r0, 0x1) 8.641434688s ago: executing program 32 (id=66): r0 = socket$pppoe(0x18, 0x1, 0x0) readv(r0, &(0x7f0000000a80)=[{&(0x7f0000000580)=""/248, 0xf8}, {0x0}, {0x0}], 0x3) 8.462924976s ago: executing program 3 (id=70): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = syz_open_procfs(0x0, &(0x7f0000000040)) name_to_handle_at(r0, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)=@FILEID_BTRFS_WITH_PARENT_ROOT={0x28, 0x4e, {0x1, 0x5, 0x9, 0xc3e9, 0x8, 0xffff}}, &(0x7f0000000100), 0x600) 7.881678832s ago: executing program 1 (id=72): syz_usb_connect(0x5, 0x24, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0x8d, 0x32, 0xd5, 0x8, 0x5ef, 0x8884, 0xd3dd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x35, 0xe8, 0x9, [{{0x9, 0x4, 0x3, 0x0, 0x0, 0xc0, 0x6, 0xd7, 0x52}}]}}]}}, 0x0) 7.556856813s ago: executing program 3 (id=74): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='kfree\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x8, 0x0, 0x401}, 0xc) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) 7.263456971s ago: executing program 3 (id=75): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 6.255784108s ago: executing program 3 (id=79): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000c2bd0b20f8061b3039bb0102030109021b0001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 4.747733344s ago: executing program 2 (id=83): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df89507000000fb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd71d2f96ded9c4b91545f71db0906cb51780f908fa61634ac7bb85d9f04f3dff0a948e81cd3229979aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99bb4cb5c7190648132f6ff1f6cb79b93f20752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae793030000004ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf458aac3314007c3e35d5e4bed6b897608b01e7e26a54433e5f5c74a2ee3c2fc50067be05a677f122b7dba7010830b879a41b579d44158fb89ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe9530547201664db91cf1885ecc2f106b66cd99131523c99f6102ddd7403791b3a7ac59b256cc4c938fe01740ae4f19b5204ca305b1666b0c2a7e5015d6d530995843adfbac3954306d4cd82257d4d2c3283d45dbae43548fed9879328f114f7c8238ac955391b24614d91be1701ae07c170a9c299fcf3d0ac4cea07e88fbf66b697883af17a06ac3f9954eb2fbd20f101802cd023fc48c5d464c16059cc9dce8558c5322ac7612db0e2725427628c2c41a21f0d2f3962e32f710bf9e216ff1694e8d88c8a81328744b36d9ef9f08c0ea3ccd4f8729e2f00a044a95000000", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 4.740775994s ago: executing program 2 (id=85): syz_usb_connect(0x3, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0xca, 0xb4, 0xc5, 0x8, 0xc72, 0x14, 0x578a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xb, 0x0, 0xe0, 0x9, [{{0x9, 0x4, 0xf4, 0x5, 0x1, 0x1d, 0xf4, 0x52, 0x8, [], [{{0x9, 0x5, 0xb, 0x0, 0x10, 0x40, 0x1, 0x7f}}]}}]}}]}}, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0}) 4.605856357s ago: executing program 1 (id=86): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x141440, 0x0) lseek(r1, 0x0, 0x4) read$FUSE(r1, 0x0, 0x0) r2 = getpid() remap_file_pages(&(0x7f000053f000/0x1000)=nil, 0x3f, 0x0, 0x20, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000080)=0xf8802132, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000055c0)=[{{&(0x7f0000001640)={0xa, 0xf, 0xfffffc01, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0xe}, 0x1c, 0x0}}], 0x1, 0x4001c00) socket$inet_tcp(0x2, 0x1, 0x0) eventfd(0x7) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) r6 = eventfd(0x1) dup3(r5, r6, 0x80000) 3.2234719s ago: executing program 1 (id=88): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xfb, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) 3.213581691s ago: executing program 3 (id=89): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x60000000000, 0x80000001, 0x146, 0x62, 0x2, 0xfffffffffffffff6, 0x2004c6, 0x2, 0xfffffffffffffffc, 0x36b0, 0xfffffffffffff001, 0x5, 0x3, 0x400000000, 0x1], 0x80a0000, 0x140}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r0 = syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000001580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.131100909s ago: executing program 4 (id=90): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xd, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x62280) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000440)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, r1, 0x35, 0x0, @void}, 0x10) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) r3 = semget$private(0x0, 0x5, 0x0) semtimedop(r3, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) fcntl$setlease(r5, 0x400, 0x1) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0xa1, 0x0, &(0x7f0000000640)="b44c806748f06309624431ed337301000000010000009c1fd05dacf5bb80c9b7ee0fae7a6a53200386ce51def6a4effb86e8e2ad7cb4645c2b9c0614907d40080cd6f4e5b5da60159633bb490c4af96c8663ad81b86b898d9435af40b29d0936e15fb284457b0bc44d54579a75db65633809f4e37ef15070c36fdb9660809c71e250fab354c5772fee217712b65392884be1910d626c1aecba99c72b0f8ebfa195", 0x0, 0x407, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2}, 0x50) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x24001804) syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x0) 1.643777062s ago: executing program 4 (id=91): futex(&(0x7f0000004000)=0x2, 0x8d, 0xfffffffd, 0x0, 0x0, 0x0) 1.643491832s ago: executing program 2 (id=92): bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="05000000", @ANYRES32], 0x20) 1.509066495s ago: executing program 2 (id=93): ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f0000000100)) r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r3, 0xc06c4124, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 565.197356ms ago: executing program 2 (id=94): timer_create(0x0, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) ioctl$FS_IOC_SETVERSION(r0, 0x40082103, 0x0) 391.688293ms ago: executing program 2 (id=95): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0500000002000000ff0f00000900000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x0) syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) 171.508634ms ago: executing program 4 (id=96): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x3, &(0x7f0000000180)=0x8000, 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) 131.090478ms ago: executing program 4 (id=97): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x200000) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x2, &(0x7f00000000c0)={[0x65e]}, 0x8) 3.70795ms ago: executing program 4 (id=98): unshare(0x2000400) creat(0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) 0s ago: executing program 4 (id=99): syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) fchmodat(0xffffffffffffff9c, 0x0, 0x1ff) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.31' (ED25519) to the list of known hosts. [ 53.498099][ T4170] cgroup: Unknown subsys name 'net' [ 53.635090][ T4170] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 55.064782][ T4170] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 56.998547][ T4181] chnl_net:caif_netlink_parms(): no params data found [ 57.106797][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 57.149461][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 57.162298][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 57.207265][ T4181] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.215269][ T4181] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.223637][ T4181] device bridge_slave_0 entered promiscuous mode [ 57.235557][ T4181] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.243560][ T4181] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.253365][ T4181] device bridge_slave_1 entered promiscuous mode [ 57.298860][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 57.318833][ T4181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.342655][ T4181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.375217][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.382491][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.390837][ T4184] device bridge_slave_0 entered promiscuous mode [ 57.398672][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.407352][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.417094][ T4189] device bridge_slave_0 entered promiscuous mode [ 57.454332][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.461610][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.469495][ T4184] device bridge_slave_1 entered promiscuous mode [ 57.477011][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.484255][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.492546][ T4189] device bridge_slave_1 entered promiscuous mode [ 57.505664][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.512917][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.521070][ T4186] device bridge_slave_0 entered promiscuous mode [ 57.545980][ T4181] team0: Port device team_slave_0 added [ 57.552347][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.559416][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.567994][ T4186] device bridge_slave_1 entered promiscuous mode [ 57.592214][ T4181] team0: Port device team_slave_1 added [ 57.617399][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.628268][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.660538][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.671221][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.688551][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.698583][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.706000][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.714207][ T4192] device bridge_slave_0 entered promiscuous mode [ 57.734633][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.741768][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.767961][ T4181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.781724][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.799154][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.806390][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.814626][ T4192] device bridge_slave_1 entered promiscuous mode [ 57.828736][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.835840][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.861899][ T4181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.881395][ T4184] team0: Port device team_slave_0 added [ 57.904417][ T4189] team0: Port device team_slave_0 added [ 57.915518][ T4184] team0: Port device team_slave_1 added [ 57.931145][ T4186] team0: Port device team_slave_0 added [ 57.946290][ T4189] team0: Port device team_slave_1 added [ 57.968997][ T4186] team0: Port device team_slave_1 added [ 57.976635][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.001952][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.008928][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.034953][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.054759][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.072572][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.079521][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.105975][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.124934][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.134215][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.160385][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.186716][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.193906][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.219957][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.234337][ T4181] device hsr_slave_0 entered promiscuous mode [ 58.241335][ T4181] device hsr_slave_1 entered promiscuous mode [ 58.258015][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.265213][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.291427][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.317061][ T4192] team0: Port device team_slave_0 added [ 58.323470][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.330644][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.357022][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.385519][ T4192] team0: Port device team_slave_1 added [ 58.435873][ T4189] device hsr_slave_0 entered promiscuous mode [ 58.442514][ T4189] device hsr_slave_1 entered promiscuous mode [ 58.449170][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.457343][ T4189] Cannot create hsr debugfs directory [ 58.472257][ T4186] device hsr_slave_0 entered promiscuous mode [ 58.479970][ T4186] device hsr_slave_1 entered promiscuous mode [ 58.486514][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.494218][ T4186] Cannot create hsr debugfs directory [ 58.513540][ T4184] device hsr_slave_0 entered promiscuous mode [ 58.520303][ T4184] device hsr_slave_1 entered promiscuous mode [ 58.526974][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.534676][ T4184] Cannot create hsr debugfs directory [ 58.552607][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.562363][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.588620][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.633277][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.640522][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.666934][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.691260][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 58.697806][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 58.779735][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 58.785987][ T21] Bluetooth: hci3: command 0x0409 tx timeout [ 58.792665][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 58.846921][ T4192] device hsr_slave_0 entered promiscuous mode [ 58.854093][ T4192] device hsr_slave_1 entered promiscuous mode [ 58.860813][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.868443][ T4192] Cannot create hsr debugfs directory [ 58.974044][ T4181] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 59.006144][ T4181] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 59.028620][ T4181] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 59.042878][ T4181] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 59.078868][ T4189] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 59.088488][ T4189] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 59.099393][ T4189] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 59.120295][ T4189] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 59.163286][ T4186] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 59.173530][ T4186] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 59.189298][ T4186] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 59.199409][ T4186] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 59.295881][ T4192] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 59.328096][ T4192] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 59.344184][ T4192] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 59.353454][ T4192] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 59.401693][ T4181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.411609][ T4184] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 59.427680][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.447587][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.456746][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.467377][ T4184] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 59.476714][ T4184] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 59.491729][ T4184] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 59.503933][ T4181] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.529034][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.537528][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.547614][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.574464][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.592207][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.605335][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.615837][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.623227][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.659129][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.667697][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.675742][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.686854][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.696816][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.706322][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.715159][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.722274][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.750548][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.758862][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.768053][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.777344][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.784551][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.793212][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.802519][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.811225][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.819536][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.826651][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.834680][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.849459][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.859069][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.868850][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.877546][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.884740][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.901102][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.915762][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.926122][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.937552][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.946260][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.957620][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.965896][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.976844][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.985668][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.992752][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.006948][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.027080][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.036597][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.045267][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.056264][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.066354][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.075796][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.084579][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.098488][ T4181] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 60.109415][ T4181] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.125554][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.136558][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.146675][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.155253][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.165679][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.174782][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.183772][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.191619][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.199314][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.208343][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.217442][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.225762][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.233714][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.246670][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.258003][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.270311][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.289325][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.299185][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.318397][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.333658][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.344535][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.351655][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.366803][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.377115][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.391279][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.400348][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.407476][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.415572][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.425082][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.433616][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.440730][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.448420][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.457280][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.466534][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.473639][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.482087][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.490419][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.500930][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.510178][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.519520][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.546243][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.556454][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.565253][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.581132][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.595787][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.604795][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.618783][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.629015][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.663943][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.675972][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.692148][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.708419][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.717106][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.732478][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.744456][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.754034][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.763064][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.771436][ T4242] Bluetooth: hci1: command 0x041b tx timeout [ 60.776286][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.785742][ T2856] Bluetooth: hci0: command 0x041b tx timeout [ 60.793748][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.802370][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.811339][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.821891][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.831023][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.848314][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.856641][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.861590][ T4227] Bluetooth: hci2: command 0x041b tx timeout [ 60.872571][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.886082][ T4227] Bluetooth: hci3: command 0x041b tx timeout [ 60.903292][ T4192] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 60.930056][ T4227] Bluetooth: hci4: command 0x041b tx timeout [ 60.945807][ T4192] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.967457][ T4181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.976639][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.986131][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.994935][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.004785][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.031101][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.038604][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.094241][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.135794][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.161572][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.169060][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.191324][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.206874][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.248630][ T4181] device veth0_vlan entered promiscuous mode [ 61.256739][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.273898][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.284416][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.292693][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.314135][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.341696][ T4181] device veth1_vlan entered promiscuous mode [ 61.348567][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.370322][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.377841][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.409233][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.426105][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.437251][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.450990][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.466551][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.475613][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.495513][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.504058][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.519339][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.528199][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.544593][ T4186] device veth0_vlan entered promiscuous mode [ 61.564968][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.580892][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.607623][ T4181] device veth0_macvtap entered promiscuous mode [ 61.628888][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.642915][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.653792][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.663454][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.683354][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.692079][ T4186] device veth1_vlan entered promiscuous mode [ 61.701654][ T4181] device veth1_macvtap entered promiscuous mode [ 61.719889][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.728659][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.737605][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.761296][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.773560][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.791423][ T4184] device veth0_vlan entered promiscuous mode [ 61.797997][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.810713][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.818879][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.828995][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.837553][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.846729][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.855721][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.874750][ T4181] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.886359][ T4181] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.896191][ T4181] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.905253][ T4181] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.925659][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.934013][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.943064][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.954101][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.973744][ T4186] device veth0_macvtap entered promiscuous mode [ 61.983764][ T4186] device veth1_macvtap entered promiscuous mode [ 61.993994][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.002942][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.011324][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.021155][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.030023][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.038742][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.059466][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.071250][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.083141][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.101342][ T4184] device veth1_vlan entered promiscuous mode [ 62.119016][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.128029][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.137747][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.149139][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.161580][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.173149][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.185605][ T4189] device veth0_vlan entered promiscuous mode [ 62.210276][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.218425][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.229049][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.239698][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.248026][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.257417][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.265876][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.275953][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.284963][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.293595][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.302304][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.312251][ T4192] device veth0_vlan entered promiscuous mode [ 62.327444][ T4186] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.339407][ T4186] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.348437][ T4186] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.357890][ T4186] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.373682][ T4189] device veth1_vlan entered promiscuous mode [ 62.404550][ T4192] device veth1_vlan entered promiscuous mode [ 62.429628][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.438117][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.452775][ T4184] device veth0_macvtap entered promiscuous mode [ 62.484416][ T4184] device veth1_macvtap entered promiscuous mode [ 62.519480][ T4189] device veth0_macvtap entered promiscuous mode [ 62.542000][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.551289][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.559447][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.568491][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.577698][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.607042][ T4189] device veth1_macvtap entered promiscuous mode [ 62.631629][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.640985][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.649475][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.671702][ T4192] device veth0_macvtap entered promiscuous mode [ 62.681711][ T4271] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.697349][ T4192] device veth1_macvtap entered promiscuous mode [ 62.703904][ T4271] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.719274][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.727790][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.739358][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.754453][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.764561][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.775470][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.787131][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.798121][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.809039][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.819254][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.830278][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.841628][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.857016][ T4184] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.860471][ T4242] Bluetooth: hci0: command 0x040f tx timeout [ 62.868436][ T4184] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.881234][ T4184] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.890732][ T4242] Bluetooth: hci1: command 0x040f tx timeout [ 62.891325][ T4184] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.907886][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.917831][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.926387][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.931388][ T4242] Bluetooth: hci2: command 0x040f tx timeout [ 62.938521][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.947773][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.957111][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.965983][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.974924][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.990497][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.006671][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.017117][ T4242] Bluetooth: hci4: command 0x040f tx timeout [ 63.021390][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.030312][ T4242] Bluetooth: hci3: command 0x040f tx timeout [ 63.036877][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.049445][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.060702][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.072292][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.081038][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.094052][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.104709][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.115216][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.125240][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.135997][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.146081][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.157135][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.168803][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.193472][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.202593][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.212534][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.222527][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.233585][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.244718][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.256043][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.266742][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.276805][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.287389][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.299391][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.308957][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.320239][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.330735][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.341202][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.351190][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.361813][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.371749][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.382222][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.395465][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.418108][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.427077][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.436419][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.445136][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.455335][ T4271] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.475732][ T4271] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.483678][ T4192] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.502767][ T4192] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.511835][ T4192] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.520803][ T4192] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.541506][ T4189] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.550648][ T4189] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.559352][ T4189] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.569257][ T4189] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.581784][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.605449][ T1239] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.631292][ T1239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.659326][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.745605][ T1239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.757667][ T1239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.787514][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.827863][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.874505][ T1239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.882807][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.919017][ T4271] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.927047][ T1239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.934708][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.964501][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.992167][ T4271] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.019928][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.038623][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.081851][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.093533][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.110442][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.123703][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.169387][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.334897][ T4307] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 64.455753][ T4311] process 'syz.3.11' launched '/dev/fd/6' with NULL argv: empty string added [ 64.579814][ T4234] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 64.831736][ T4234] usb 1-1: Using ep0 maxpacket: 8 [ 64.930973][ T4242] Bluetooth: hci1: command 0x0419 tx timeout [ 64.931332][ T4242] Bluetooth: hci0: command 0x0419 tx timeout [ 64.964041][ T4234] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 64.964133][ T4234] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 64.964154][ T4234] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 64.964176][ T4234] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 64.964197][ T4234] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 64.964247][ T4234] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 64.964268][ T4234] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.186112][ T4242] Bluetooth: hci2: command 0x0419 tx timeout [ 65.188667][ T4242] Bluetooth: hci3: command 0x0419 tx timeout [ 65.188698][ T4242] Bluetooth: hci4: command 0x0419 tx timeout [ 66.119772][ T4355] usbtmc 1-1:16.0: simple usb_control_msg failed -32 [ 66.180843][ T7] usb 1-1: USB disconnect, device number 2 [ 66.279783][ T4241] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 66.389952][ T4242] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 66.520079][ T4241] usb 2-1: Using ep0 maxpacket: 8 [ 66.640858][ T4241] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 66.651780][ T4241] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 66.666975][ T4241] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 66.709404][ T4241] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 66.760409][ T4242] usb 3-1: config 1 has an invalid interface descriptor of length 5, skipping [ 66.776528][ T4241] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 66.801575][ T4242] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 66.864678][ T4242] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 66.903984][ T4241] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 66.985692][ T4241] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.059721][ T4242] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 67.074200][ T4242] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 67.083855][ T4242] usb 3-1: SerialNumber: syz [ 67.090900][ T4241] usbtmc: probe of 2-1:16.0 failed with error -22 [ 67.391185][ T4242] usb 3-1: 0:2 : does not exist [ 67.396674][ T4242] usb 3-1: unit 5 not found! [ 67.429662][ T4242] usb 3-1: USB disconnect, device number 2 [ 67.459823][ T4379] udevd[4379]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 67.711299][ T7] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 67.972751][ T4391] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 67.991205][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 68.069760][ T7] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 68.099222][ T7] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 68.917126][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 69.049874][ T7] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 69.059665][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 69.067885][ T7] usb 5-1: SerialNumber: syz [ 69.160211][ T4227] usb 2-1: USB disconnect, device number 2 [ 69.448387][ T7] usb 5-1: 0:2 : does not exist [ 69.465847][ T7] usb 5-1: USB disconnect, device number 2 [ 69.524471][ T4410] usb usb8: usbfs: interface 0 claimed by hub while 'syz.0.44' sets config #0 [ 71.438105][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.454966][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.631326][ T4379] udevd[4379]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 71.824501][ T4256] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 72.296295][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 72.317338][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 72.326314][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 72.335242][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 72.347195][ T4447] ======================================================= [ 72.347195][ T4447] WARNING: The mand mount option has been deprecated and [ 72.347195][ T4447] and is ignored by this kernel. Remove the mand [ 72.347195][ T4447] option from the mount to silence this warning. [ 72.347195][ T4447] ======================================================= [ 72.382135][ C0] vkms_vblank_simulate: vblank timer overrun [ 72.395089][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 72.396209][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 72.404104][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #108!!! [ 72.413160][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 72.421881][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10a!!! [ 73.652484][ T4241] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 74.167737][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.213082][ T4463] netlink: 12 bytes leftover after parsing attributes in process `syz.2.64'. [ 74.810350][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.915089][ T4475] hub 8-0:1.0: USB hub found [ 74.921906][ T4475] hub 8-0:1.0: 1 port detected [ 75.079723][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.371141][ T26] audit: type=1326 audit(1766369452.117:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4473 comm="syz.3.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f245af59749 code=0x7ffc0000 [ 75.619478][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.631057][ T26] audit: type=1326 audit(1766369452.137:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4473 comm="syz.3.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f245af59749 code=0x7ffc0000 [ 75.669697][ T4241] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 75.677806][ T4241] usb 5-1: can't read configurations, error -71 [ 75.719869][ T26] audit: type=1326 audit(1766369452.377:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4473 comm="syz.3.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7f245af59749 code=0x7ffc0000 [ 75.789639][ T26] audit: type=1326 audit(1766369452.377:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4473 comm="syz.3.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f245af59749 code=0x7ffc0000 [ 75.850769][ T26] audit: type=1326 audit(1766369452.387:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4473 comm="syz.3.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f245af59749 code=0x7ffc0000 [ 75.939690][ T4242] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 76.188760][ T4242] usb 2-1: Using ep0 maxpacket: 8 [ 76.379007][ T4507] overlayfs: missing 'workdir' [ 77.019950][ T4242] usb 2-1: config 0 has an invalid interface number: 3 but max is 0 [ 77.028012][ T4242] usb 2-1: config 0 has no interface number 0 [ 77.086305][ T4521] netlink: 20 bytes leftover after parsing attributes in process `syz.4.81'. [ 77.358849][ T4526] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 77.891409][ T4327] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 78.120909][ T4528] orangefs_mount: mount request failed with -4 [ 78.151361][ T1108] Bluetooth: hci1: command 0x0409 tx timeout [ 78.210230][ T4242] usb 2-1: New USB device found, idVendor=05ef, idProduct=8884, bcdDevice=d3.dd [ 78.239763][ T4242] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.260125][ T4242] usb 2-1: Product: syz [ 78.264325][ T4242] usb 2-1: Manufacturer: syz [ 78.285846][ T4242] usb 2-1: SerialNumber: syz [ 78.315240][ T4242] usb 2-1: config 0 descriptor?? [ 78.345413][ T4490] chnl_net:caif_netlink_parms(): no params data found [ 78.446010][ T4327] usb 4-1: Using ep0 maxpacket: 32 [ 78.590134][ T4327] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 78.657910][ T4547] mmap: syz.1.86 (4547) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 79.977935][ T4242] usb 2-1: USB disconnect, device number 3 [ 80.039700][ T7] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 80.050948][ T4327] usb 4-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 80.061252][ T4554] netlink: 16 bytes leftover after parsing attributes in process `syz.4.87'. [ 80.070079][ T4327] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.078164][ T4327] usb 4-1: Product: syz [ 80.088307][ T4327] usb 4-1: Manufacturer: syz [ 80.100841][ T4327] usb 4-1: config 0 descriptor?? [ 80.129880][ T4327] usb 4-1: can't set config #0, error -71 [ 80.144333][ T4327] usb 4-1: USB disconnect, device number 3 [ 80.209661][ T1108] Bluetooth: hci1: command 0x041b tx timeout [ 80.673698][ T4561] capability: warning: `syz.4.90' uses 32-bit capabilities (legacy support in use) [ 81.534563][ T23] cfg80211: failed to load regulatory.db [ 81.694247][ T4490] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.714002][ T4490] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.755898][ T4490] device bridge_slave_0 entered promiscuous mode [ 81.789834][ T7] usb 3-1: device not accepting address 3, error -71 [ 81.845213][ T4490] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.852518][ T4327] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 81.862662][ T4490] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.881136][ T4490] device bridge_slave_1 entered promiscuous mode [ 82.026352][ T4490] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.080537][ T4490] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.238764][ T4490] team0: Port device team_slave_0 added [ 82.297264][ T4242] Bluetooth: hci1: command 0x040f tx timeout [ 82.308836][ T9] device hsr_slave_0 left promiscuous mode [ 82.334722][ T9] device hsr_slave_1 left promiscuous mode [ 82.355198][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.373162][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.399186][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.420062][ T4327] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 82.438010][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.445649][ T4327] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.465689][ T4327] usb 4-1: Product: syz [ 82.470373][ T4327] usb 4-1: Manufacturer: syz [ 82.474997][ T4327] usb 4-1: SerialNumber: syz [ 82.506572][ T9] device bridge_slave_1 left promiscuous mode [ 82.523475][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.572865][ T9] device bridge_slave_0 left promiscuous mode [ 82.599836][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.743735][ T9] device veth1_macvtap left promiscuous mode [ 82.758321][ T9] device veth0_macvtap left promiscuous mode [ 82.770835][ T9] device veth1_vlan left promiscuous mode [ 82.796434][ T9] device veth0_vlan left promiscuous mode [ 82.989989][ T4327] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 83.263049][ T4190] ================================================================== [ 83.271459][ T4190] BUG: KASAN: slab-out-of-bounds in hci_le_meta_evt+0x12c0/0x3b80 [ 83.279315][ T4190] Read of size 1 at addr ffff888079968c0a by task kworker/u5:4/4190 [ 83.287307][ T4190] [ 83.289649][ T4190] CPU: 1 PID: 4190 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 83.297217][ T4190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 83.307292][ T4190] Workqueue: hci3 hci_rx_work [ 83.312008][ T4190] Call Trace: [ 83.315319][ T4190] [ 83.318273][ T4190] dump_stack_lvl+0x168/0x230 [ 83.322985][ T4190] ? show_regs_print_info+0x20/0x20 [ 83.328216][ T4190] ? load_image+0x3b0/0x3b0 [ 83.332749][ T4190] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 83.338163][ T4190] print_address_description+0x60/0x2d0 [ 83.343738][ T4190] ? hci_le_meta_evt+0x12c0/0x3b80 [ 83.348898][ T4190] kasan_report+0xdf/0x130 [ 83.353344][ T4190] ? hci_le_meta_evt+0x12c0/0x3b80 [ 83.358486][ T4190] hci_le_meta_evt+0x12c0/0x3b80 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 83.363464][ T4190] ? hci_event_packet+0x2b0/0x12f0 [ 83.368761][ T4190] ? hci_remote_host_features_evt+0x280/0x280 [ 83.374883][ T4190] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 83.380541][ T4190] ? mark_lock+0x94/0x320 [ 83.384899][ T4190] ? mutex_unlock+0x10/0x10 [ 83.389439][ T4190] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 83.395444][ T4190] ? lock_chain_count+0x20/0x20 [ 83.400320][ T4190] ? __rwlock_init+0x140/0x140 [ 83.405110][ T4190] hci_event_packet+0xe05/0x12f0 [ 83.410073][ T4190] ? lockdep_hardirqs_on+0x94/0x140 [ 83.415295][ T4190] ? rcu_lock_release+0x20/0x20 [ 83.420195][ T4190] ? hci_send_to_monitor+0x9c/0x4a0 [ 83.425409][ T4190] hci_rx_work+0x255/0xa10 [ 83.429866][ T4190] process_one_work+0x863/0x1000 [ 83.434820][ T4190] ? worker_detach_from_pool+0x240/0x240 [ 83.440457][ T4190] ? lockdep_hardirqs_off+0x70/0x100 [ 83.445758][ T4190] ? _raw_spin_lock_irq+0xab/0xe0 [ 83.450788][ T4190] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 83.456163][ T4190] ? wq_worker_running+0x97/0x170 [ 83.461190][ T4190] worker_thread+0xaa8/0x12a0 [ 83.465874][ T4190] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 83.471779][ T4190] ? lockdep_hardirqs_on+0x94/0x140 [ 83.476994][ T4190] ? lockdep_hardirqs_on+0x94/0x140 [ 83.482200][ T4190] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 83.488115][ T4190] kthread+0x436/0x520 [ 83.492196][ T4190] ? rcu_lock_release+0x20/0x20 [ 83.497051][ T4190] ? kthread_blkcg+0xd0/0xd0 [ 83.501678][ T4190] ret_from_fork+0x1f/0x30 [ 83.506109][ T4190] [ 83.509142][ T4190] [ 83.511469][ T4190] Allocated by task 4598: [ 83.515796][ T4190] __kasan_kmalloc+0xb5/0xf0 [ 83.520419][ T4190] __alloc_skb+0x22c/0x750 [ 83.524859][ T4190] vhci_write+0xbc/0x450 [ 83.529118][ T4190] vfs_write+0x712/0xd00 [ 83.533370][ T4190] ksys_write+0x14d/0x250 [ 83.537726][ T4190] do_syscall_64+0x4c/0xa0 [ 83.542152][ T4190] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 83.548054][ T4190] [ 83.550387][ T4190] The buggy address belongs to the object at ffff888079968800 [ 83.550387][ T4190] which belongs to the cache kmalloc-1k of size 1024 [ 83.564444][ T4190] The buggy address is located 10 bytes to the right of [ 83.564444][ T4190] 1024-byte region [ffff888079968800, ffff888079968c00) [ 83.578244][ T4190] The buggy address belongs to the page: [ 83.583894][ T4190] page:ffffea0001e65a00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x79968 [ 83.594049][ T4190] head:ffffea0001e65a00 order:3 compound_mapcount:0 compound_pincount:0 [ 83.602376][ T4190] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 83.610371][ T4190] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff888016841dc0 [ 83.619082][ T4190] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 83.627705][ T4190] page dumped because: kasan: bad access detected [ 83.634137][ T4190] page_owner tracks the page as allocated [ 83.639859][ T4190] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x152a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 1239, ts 83254973266, free_ts 83240707833 [ 83.658294][ T4190] get_page_from_freelist+0x1b77/0x1c60 [ 83.663863][ T4190] __alloc_pages+0x1e1/0x470 [ 83.668472][ T4190] new_slab+0xc0/0x4b0 [ 83.672563][ T4190] ___slab_alloc+0x81e/0xdf0 [ 83.677163][ T4190] __kmalloc+0x1cd/0x330 [ 83.681540][ T4190] ieee802_11_parse_elems_crc+0xab/0x10c0 [ 83.687288][ T4190] ieee80211_bss_info_update+0x75d/0xaa0 [ 83.692948][ T4190] ieee80211_ibss_rx_queued_mgmt+0x16d0/0x29c0 [ 83.699139][ T4190] ieee80211_iface_work+0x70e/0xc60 [ 83.704351][ T4190] process_one_work+0x863/0x1000 [ 83.709304][ T4190] worker_thread+0xaa8/0x12a0 [ 83.714001][ T4190] kthread+0x436/0x520 [ 83.718079][ T4190] ret_from_fork+0x1f/0x30 [ 83.722514][ T4190] page last free stack trace: [ 83.727196][ T4190] free_unref_page_prepare+0x637/0x6c0 [ 83.732663][ T4190] free_unref_page+0x94/0x280 [ 83.737353][ T4190] __unfreeze_partials+0x1a5/0x200 [ 83.742472][ T4190] put_cpu_partial+0x12d/0x190 [ 83.747278][ T4190] qlist_free_all+0x35/0x90 [ 83.751796][ T4190] kasan_quarantine_reduce+0x150/0x160 [ 83.757262][ T4190] __kasan_slab_alloc+0x2f/0xd0 [ 83.762117][ T4190] slab_post_alloc_hook+0x4c/0x380 [ 83.767232][ T4190] kmem_cache_alloc_node+0x12d/0x2d0 [ 83.772522][ T4190] __alloc_skb+0xf4/0x750 [ 83.776881][ T4190] sk_stream_alloc_skb+0x1fa/0xa60 [ 83.782023][ T4190] tcp_sendmsg_locked+0xc3e/0x3590 [ 83.787132][ T4190] tcp_sendmsg+0x2b/0x40 [ 83.791376][ T4190] sock_write_iter+0x29c/0x380 [ 83.796189][ T4190] vfs_write+0x712/0xd00 [ 83.800432][ T4190] ksys_write+0x14d/0x250 [ 83.804761][ T4190] [ 83.807083][ T4190] Memory state around the buggy address: [ 83.812714][ T4190] ffff888079968b00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 83.820805][ T4190] ffff888079968b80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 83.829138][ T4190] >ffff888079968c00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 83.837197][ T4190] ^ [ 83.841539][ T4190] ffff888079968c80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 83.849603][ T4190] ffff888079968d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 83.857717][ T4190] ================================================================== [ 83.865794][ T4190] Disabling lock debugging due to kernel taint [ 83.875198][ T4190] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 83.882439][ T4190] CPU: 1 PID: 4190 Comm: kworker/u5:4 Tainted: G B syzkaller #0 [ 83.891398][ T4190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 83.901478][ T4190] Workqueue: hci3 hci_rx_work [ 83.906216][ T4190] Call Trace: [ 83.909524][ T4190] [ 83.912482][ T4190] dump_stack_lvl+0x168/0x230 [ 83.917195][ T4190] ? show_regs_print_info+0x20/0x20 [ 83.922446][ T4190] ? load_image+0x3b0/0x3b0 [ 83.926992][ T4190] panic+0x2c9/0x7f0 [ 83.930911][ T4190] ? bpf_jit_dump+0xd0/0xd0 [ 83.935440][ T4190] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 83.941384][ T4190] ? _raw_spin_unlock+0x40/0x40 [ 83.946261][ T4190] ? hci_le_meta_evt+0x12c0/0x3b80 [ 83.951396][ T4190] check_panic_on_warn+0x80/0xa0 [ 83.956360][ T4190] ? hci_le_meta_evt+0x12c0/0x3b80 [ 83.961491][ T4190] end_report+0x6d/0xf0 [ 83.965673][ T4190] kasan_report+0x102/0x130 [ 83.970207][ T4190] ? hci_le_meta_evt+0x12c0/0x3b80 [ 83.975346][ T4190] hci_le_meta_evt+0x12c0/0x3b80 [ 83.980307][ T4190] ? hci_event_packet+0x2b0/0x12f0 [ 83.985459][ T4190] ? hci_remote_host_features_evt+0x280/0x280 [ 83.991550][ T4190] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 83.997227][ T4190] ? mark_lock+0x94/0x320 [ 84.001688][ T4190] ? mutex_unlock+0x10/0x10 [ 84.006209][ T4190] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 84.012213][ T4190] ? lock_chain_count+0x20/0x20 [ 84.017092][ T4190] ? __rwlock_init+0x140/0x140 [ 84.021886][ T4190] hci_event_packet+0xe05/0x12f0 [ 84.026855][ T4190] ? lockdep_hardirqs_on+0x94/0x140 [ 84.032084][ T4190] ? rcu_lock_release+0x20/0x20 [ 84.037069][ T4190] ? hci_send_to_monitor+0x9c/0x4a0 [ 84.042306][ T4190] hci_rx_work+0x255/0xa10 [ 84.046760][ T4190] process_one_work+0x863/0x1000 [ 84.051746][ T4190] ? worker_detach_from_pool+0x240/0x240 [ 84.057461][ T4190] ? lockdep_hardirqs_off+0x70/0x100 [ 84.062807][ T4190] ? _raw_spin_lock_irq+0xab/0xe0 [ 84.067865][ T4190] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 84.073269][ T4190] ? wq_worker_running+0x97/0x170 [ 84.078317][ T4190] worker_thread+0xaa8/0x12a0 [ 84.083041][ T4190] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 84.088954][ T4190] ? lockdep_hardirqs_on+0x94/0x140 [ 84.094188][ T4190] ? lockdep_hardirqs_on+0x94/0x140 [ 84.099416][ T4190] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 84.105343][ T4190] kthread+0x436/0x520 [ 84.109449][ T4190] ? rcu_lock_release+0x20/0x20 [ 84.114326][ T4190] ? kthread_blkcg+0xd0/0xd0 [ 84.118940][ T4190] ret_from_fork+0x1f/0x30 [ 84.123414][ T4190] [ 84.126748][ T4190] Kernel Offset: disabled [ 84.131087][ T4190] Rebooting in 86400 seconds..