last executing test programs: 15.68013347s ago: executing program 2 (id=458): mkdir(&(0x7f0000000300)='./file0\x00', 0x181) r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000080)='0.0.0.0:0:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='mount_timeout\x00', &(0x7f0000000180)='1\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 11.616909183s ago: executing program 2 (id=471): clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc01c586a, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000180)='vlan1\x00', 0x40100, &(0x7f00000001c0)={@_ha_fsid={[0x7, 0xd]}, {0x2, 0x2dd, 0x7, 0x5}}, 0x3, &(0x7f0000000200), &(0x7f0000000300)=0x8}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000020000000900010073797a300000000040000000120a01040000000000000000020000000900010073797a30000000000900020073797a300000000008000300000000040c0004800800040000000002140000001100010000000000000000000000000a"], 0x88}}, 0x0) r2 = getpgid(0x0) r3 = syz_pidfd_open(r2, 0x0) process_madvise(r3, &(0x7f0000000080)=[{&(0x7f0000000000)="854b", 0x2}], 0x20, 0x14, 0x0) pipe2(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r5 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SOUND_PCM_READ_CHANNELS(r5, 0x80045006, &(0x7f00000010c0)) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) ppoll(&(0x7f00000003c0)=[{0xffffffffffffffff, 0x20}, {r0, 0x200}, {r1}, {r3, 0x71}, {r4, 0x9004}, {r5, 0x600}], 0x6, &(0x7f0000000440)={r6, r7+10000000}, &(0x7f0000000480), 0x8) r8 = socket$inet6(0xa, 0x2, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r9) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {0xd}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r13, 0xae60) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x6, &(0x7f00000002c0)=@framed={{0x18, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x10001}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x80}, @alu={0x7, 0x1, 0x9}]}, &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) ioctl$KVM_SET_GSI_ROUTING(r13, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x3, 0x1, 0x0, 0x0, @sint={0x2, 0x3ff}}]}) sendmsg$IPSET_CMD_ADD(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) ioctl$KVM_CLEAR_DIRTY_LOG(r13, 0xc018aec0, &(0x7f0000000900)={0x4, 0x0, 0x140, &(0x7f0000000500)=[0x81, 0xc, 0x3, 0xe9b, 0x46b, 0x9, 0x7, 0xdf, 0xfffffffffffffff7, 0xd1, 0x4, 0x1, 0x7, 0x0, 0x800, 0x9, 0xd1d, 0xd0, 0x0, 0x3, 0x7, 0xdf76, 0x4, 0x8000, 0x214b, 0x3, 0x9, 0x30000000, 0x5, 0x0, 0x8, 0x7, 0x3, 0x7, 0x3, 0x9, 0x8000, 0x0, 0xbbc, 0x6, 0x1, 0x1, 0x3, 0x6, 0x728d71b1, 0x40, 0x16, 0x9, 0x6375, 0x8, 0x2a1f0b41, 0x0, 0x101, 0x10001, 0x100, 0x8001, 0x2, 0x9, 0x8d6, 0x8001, 0xd, 0x5, 0x3, 0x0, 0x10001, 0x40, 0x4, 0x8, 0x7, 0x5, 0x6, 0xffffffffffffffff, 0x3, 0xff, 0x8000, 0x0, 0xbb5, 0x10000, 0x7, 0x9, 0x5, 0x100000000, 0x7, 0x8, 0x80000000, 0x6, 0x3, 0x800, 0x0, 0x708d, 0x8c, 0x3, 0x8, 0x3, 0x7ff, 0x5, 0x599, 0xa, 0xfff, 0xa00000, 0xffffffffffffff95, 0x9, 0x9fe, 0x9, 0x7ff, 0x2, 0x1, 0x423, 0x9a, 0x6, 0xc638, 0x8, 0x9, 0x46, 0x7fff, 0x1, 0x4, 0x60, 0x8, 0x2, 0x6b2, 0x5, 0x1, 0x9, 0x7, 0x2, 0x6, 0x9]}) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000ac0)=@raw={'raw\x00', 0x3c1, 0x1a6cc7, 0x2a8, 0xf0, 0x5802, 0x294, 0xf0, 0x294, 0x1d8, 0x378, 0x378, 0x1d8, 0x378, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @empty}, @private0, [], [], 'macvtap0\x00', 'vlan1\x00', {}, {}, 0x0, 0x0, 0x9}, 0x0, 0xa8, 0xf0, 0x52020000}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', {0x3}}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x3, 0x0, 0x6536, 0xdfc, 0x25676d1d, 0x1000, 0x1ff, 0x81]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) 11.280084981s ago: executing program 3 (id=476): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@newspdinfo={0x1c, 0x24, 0x701, 0x70bd27, 0x25dfdbff, 0x400, [@XFRMA_SPD_IPV6_HTHRESH={0x6, 0x4, {0x0, 0xfb}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='e100\x00', 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r2, &(0x7f00000001c0)='0000:00:03.0\x00', 0xc) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/e100/bind\x00', 0x1, 0x0) write(r3, &(0x7f0000000240)='0000:00:03.0\x00', 0xc) 8.039658265s ago: executing program 3 (id=490): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x9, 0xd75, 0x1, {0x1, @vbi={0x8, 0x8000, 0x3, 0x41416770, [0x82, 0x7], [0xc153], 0x1}}, 0xd3}) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r1 = epoll_create(0x5) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000280)={0x1}) close(0x3) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, 0x0, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x20, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x972, &(0x7f0000006680)) madvise(&(0x7f0000463000/0x2000)=nil, 0x2000, 0x17) migrate_pages(0x0, 0x71, 0x0, 0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYRES32=r2], 0x7c}, 0x1, 0x0, 0x0, 0x20000001}, 0xc4) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000000000000a64000000060a0b1600000000000000000200000838000480340001800b0001006e756d67656e000024000280080004400000000b08000340001c0000080001400000001608000340089dd3850900010073797a31000000000900020073797a22000000001400000011000100000000000a00000000000000"], 0x8c}, 0x1, 0x0, 0x0, 0x850}, 0x440400c1) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[@ANYBLOB="180000002f00090028bd70000000000004000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x10) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed, 0x4}]}) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0xe45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x8, 0x9, 0x0, 0x600, 0x80, 0x89, 0x8, 0x8, 0x8d], 0x100000, 0x240246}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) close(0x3) syz_open_dev$ttys(0xc, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) 6.802733224s ago: executing program 3 (id=494): mkdir(&(0x7f0000000300)='./file0\x00', 0x181) r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000080)='0.0.0.0:0:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='mount_timeout\x00', &(0x7f0000000180)='1\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 5.101026463s ago: executing program 0 (id=499): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) 4.943443466s ago: executing program 0 (id=500): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x74}, {0x6, 0x0, 0x0, 0x7fff0000}]}) lremovexattr(0x0, 0x0) 4.862643048s ago: executing program 0 (id=501): io_setup(0x4, &(0x7f00000014c0)=0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') io_submit(r0, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0xfffe, r1, 0x0}]) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) 4.825561959s ago: executing program 1 (id=502): clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0xfffffffd, 0x7, 0x0, 0x1, 0x2000000003, 0x0, 0x82a, 0x0, 0x81, 0x7, 0x0, 0x0, 0x7}) 4.712286412s ago: executing program 1 (id=503): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f0000006680)) sysfs$2(0x2, 0x7ff, 0x0) 4.668329073s ago: executing program 0 (id=504): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x48103, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) getpid() openat$sysfs(0xffffffffffffff9c, &(0x7f0000000d00)='/sys/power/mem_sleep', 0x122102, 0x0) syz_open_procfs(0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001a0)='./nfsd/max_block_size\x00', 0x1, 0x0) write(r1, &(0x7f00000000c0)="3b548c99760cdf41eaa056a5e06abfa5ac7926a4527f57afb69e01dd4a5555392c8b1d65c44b79e8784ac3d3dea7f237f9f252c787a8dec49ada90257d186997a416788a404540b4052159a36594963d0264568b20eab45022ee726c59fa7319e32181aa5ec13a81cba3342bd64af8d448665ab5eb73f312944c10829fc6e8", 0x7f) 4.659913433s ago: executing program 1 (id=505): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) listen(0xffffffffffffffff, 0x5) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x2, 0x184, 0x2, 0xd, 0xf1, 0x100000001, 0x1, 0x5, 0xfffffffffffffffc, 0x29, 0x0, 0x2, 0x0, 0x2], 0xffff1001, 0x43103}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x3, 0x1000000000, 0x0, 0x200000000000043, 0x2000004, 0x0, 0x2004cb, 0x0, 0xa7f, 0x68ff, 0x7, 0x8000000009, 0x803, 0x0, 0x9, 0x2], 0xeeee8000, 0x102280}) ioctl$KVM_RUN(r3, 0xae80, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 3.809164033s ago: executing program 1 (id=506): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x9, 0xd75, 0x1, {0x1, @vbi={0x8, 0x8000, 0x3, 0x41416770, [0x82, 0x7], [0xc153], 0x1}}, 0xd3}) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r1 = epoll_create(0x5) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000280)={0x1}) close(0x3) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, 0x0, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x20, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x972, &(0x7f0000006680)) madvise(&(0x7f0000463000/0x2000)=nil, 0x2000, 0x17) migrate_pages(0x0, 0x71, 0x0, 0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYRES32=r2], 0x7c}, 0x1, 0x0, 0x0, 0x20000001}, 0xc4) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000000000000a64000000060a0b1600000000000000000200000838000480340001800b0001006e756d67656e000024000280080004400000000b08000340001c0000080001400000001608000340089dd3850900010073797a31000000000900020073797a22000000001400000011000100000000000a00000000000000"], 0x8c}, 0x1, 0x0, 0x0, 0x850}, 0x440400c1) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[@ANYBLOB="180000002f00090028bd70000000000004000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x10) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed, 0x4}]}) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0xe45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x8, 0x9, 0x0, 0x600, 0x80, 0x89, 0x8, 0x8, 0x8d], 0x100000, 0x240246}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) close(0x3) syz_open_dev$ttys(0xc, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) 3.808550843s ago: executing program 3 (id=507): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000080)={0x22, 0x200, 0x66, 0x8}, 0x10) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$KVM_SET_MEMORY_ATTRIBUTES(0xffffffffffffffff, 0x4020aed2, 0x0) sendmsg$netlink(r3, 0x0, 0x0) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7c, 0x10000, 0x8000, 0x4, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0x8, 0x40080000006, 0xb06c}, 0x0, 0x0) 3.638947986s ago: executing program 0 (id=508): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.659825159s ago: executing program 0 (id=509): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000080008d804dd0000000000000109022400010000a008090400fe01030001000921fffffd0122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x18, &(0x7f00000012c0)=ANY=[@ANYBLOB="001105"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f00000000c0), 0xc, 0x88000) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000480)={0x0, 0x6e, 0x8, 0x0}) 2.566912811s ago: executing program 3 (id=510): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="020d000014000000000000010000000005000600000000000a0080ff00000000fc010000000000000000000000000000000000000000000005000500000000000a00000000000000000000000000000000000000000000000000000000000000080012"], 0xa0}}, 0x24004080) 2.474602073s ago: executing program 1 (id=511): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, 0x18}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC(r2, 0x4068aea3, &(0x7f0000001000)) 2.276087627s ago: executing program 1 (id=512): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000140)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e500090400000001"], 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000002010104000000000000000002001000240002801400018008000100e000000108000200e00000010c000280050001"], 0x5c}, 0x1, 0x0, 0x0, 0x4800}, 0x4000) write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f0000000100)={0xf, 0x8, 0xfa00, {r2, 0xf}}, 0x10) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) mlock(&(0x7f0000bff000/0x400000)=nil, 0x400000) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0xc4) pwritev2(r5, &(0x7f0000000180)=[{&(0x7f0000000080)="15", 0x1}], 0x1, 0x5401, 0x0, 0x0) copy_file_range(r5, &(0x7f0000000400)=0x3ff, r5, 0x0, 0x6, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl(r4, 0x4038ae7a, &(0x7f0000000200)=' \x00\x00\x00\x00\x00\x00@') writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000014001080800418e00000308fcff", 0x58}], 0x1) r7 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000080), 0x8000, 0x0) pread64(r7, &(0x7f00000009c0)=""/4096, 0x1000, 0x5) ioctl(r4, 0x4048aec9, &(0x7f0000000300)) ioctl(r6, 0x4048aecb, &(0x7f0000000400)) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2.234202159s ago: executing program 4 (id=513): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000200)=""/73, 0x49}], 0x2}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getpid() socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000440)={0x2, 0x2, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) sendmmsg(r4, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 1.926977646s ago: executing program 3 (id=514): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r1, &(0x7f0000000040)='7', 0x1) write$char_usb(r1, &(0x7f0000000bc0)="be", 0x1) r2 = openat$dsp(0xffffff9c, &(0x7f0000000000), 0x20000, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x80, 0x4, 0xd8f9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r4, 0x100000) syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000780)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) openat$ubi_ctrl(0xffffff9c, &(0x7f00000001c0), 0x1c1, 0x0) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=ANY=[], 0x138c}, 0x1, 0x0, 0x0, 0x48000}, 0x8000) splice(r7, 0x0, r5, 0x0, 0x16a, 0x1200000000000000) ioctl$SG_SET_TIMEOUT(r5, 0x2201, &(0x7f0000000180)=0x5) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$SOUND_MIXER_READ_RECMASK(r2, 0x80044dfd, &(0x7f0000000080)) syz_usb_disconnect(r0) socket$inet_tcp(0x2, 0x1, 0x0) 1.911696076s ago: executing program 2 (id=515): syz_open_dev$video4linux(0x0, 0x2a2, 0x101000) syz_emit_ethernet(0x2a, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0x6b, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="1c3513000000", &(0x7f0000000980)=""/4103, 0x0, 0x30520cf7f25f0c64, 0x0, 0x0}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x2) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0xc0305302, &(0x7f0000000340)={0x4, 0x5, 0x0, 0x0, 0x5718, 0x63}) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/drivers/dummy_udc/unbind\x00', 0x1, 0x0) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x34, r3, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008011}, 0x4) write(r2, &(0x7f0000000400)='dummy_udc.0', 0xb) openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/platform/drivers/dummy_udc/bind\x00', 0x1, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='.\x00', &(0x7f0000000080)='btrfs\x00', 0xc000, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) close(0x3) 1.75297055s ago: executing program 4 (id=516): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) listen(0xffffffffffffffff, 0x5) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x2, 0x184, 0x2, 0xd, 0xf1, 0x100000001, 0x1, 0x5, 0xfffffffffffffffc, 0x29, 0x0, 0x2, 0x0, 0x2], 0xffff1001, 0x43103}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x3, 0x1000000000, 0x0, 0x200000000000043, 0x2000004, 0x0, 0x2004cb, 0x0, 0xa7f, 0x68ff, 0x7, 0x8000000009, 0x803, 0x0, 0x9, 0x2], 0xeeee8000, 0x102280}) ioctl$KVM_RUN(r3, 0xae80, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 1.546742715s ago: executing program 2 (id=517): socket$rds(0x15, 0x5, 0x0) syz_open_pts(0xffffffffffffffff, 0x81) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a7565aba55a87d2a251c295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507a0592c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd106926acb583ad63a4e7e1ca17c1b6aac63fefa9dcbe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'lo\x00', 0x0}) signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x800) syz_io_uring_setup(0xf0c, &(0x7f0000000400)={0x0, 0x595d, 0x8, 0x1, 0x1000051}, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000080)) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0xa) fchdir(r5) r6 = open(&(0x7f0000000080)='./bus\x00', 0x1031c2, 0x0) ftruncate(r6, 0x2007ffb) r7 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r7, 0x402, 0x8000003d) fcntl$setsig(r7, 0xa, 0x21) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYRES32=r3, @ANYBLOB='@\x00'], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x20024090) 1.545849145s ago: executing program 4 (id=518): r0 = openat(0xffffffffffffff9c, &(0x7f00000001a0)='./nfsd/max_block_size\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)="3b548c99760cdf41eaa056a5e06abfa5ac7926a4527f57afb69e01dd4a5555392c8b1d65c44b79e8784ac3d3dea7f237f9f252c787a8dec49ada90257d186997a416788a404540b4052159a36594963d0264568b20eab45022ee726c59fa7319e32181aa5ec13a81cba3342bd64af8d448665ab5eb73f312944c10829fc6e8", 0x7f) 1.379612848s ago: executing program 4 (id=519): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/connector\x00') setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x2, 0x1, 0x2, 0xc, 0xbc, 0x101}, 0x20) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x8, 0xfe00}, {0x7, 0x0, 0x8}, {}, {0x5}, {0x7, 0x0, 0x0, 0x0}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x1a}}]}, &(0x7f0000000ac0)='syzkaller\x00', 0xf, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r1, 0x8b32, &(0x7f0000000040)) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r4 = io_uring_setup(0x2e08, &(0x7f00000001c0)={0x0, 0xfffffffc, 0x0, 0xffffffff, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.006344487s ago: executing program 4 (id=520): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 705.253074ms ago: executing program 4 (id=521): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000080)={0x22, 0x200, 0x66, 0x8}, 0x10) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$KVM_SET_MEMORY_ATTRIBUTES(0xffffffffffffffff, 0x4020aed2, 0x0) sendmsg$netlink(r3, 0x0, 0x0) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7c, 0x10000, 0x8000, 0x4, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0x8, 0x40080000006, 0xb06c}, 0x0, 0x0) 704.553304ms ago: executing program 2 (id=531): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 2 (id=522): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x800008, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x800, 0x62) r0 = openat$dsp1(0xffffff9c, &(0x7f00000003c0), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.144' (ED25519) to the list of known hosts. [ 58.097502][ T4174] cgroup: Unknown subsys name 'net' [ 58.234467][ T4174] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 59.457901][ T4174] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 60.900260][ T4197] chnl_net:caif_netlink_parms(): no params data found [ 60.924691][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 60.952652][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 60.983845][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 61.034211][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 61.102292][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.110091][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.118046][ T4189] device bridge_slave_0 entered promiscuous mode [ 61.152986][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.160194][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.168398][ T4189] device bridge_slave_1 entered promiscuous mode [ 61.178809][ T4197] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.185920][ T4197] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.193766][ T4197] device bridge_slave_0 entered promiscuous mode [ 61.232291][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.239571][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.247199][ T4194] device bridge_slave_0 entered promiscuous mode [ 61.254829][ T4197] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.261952][ T4197] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.270296][ T4197] device bridge_slave_1 entered promiscuous mode [ 61.282240][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.290110][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.297735][ T4187] device bridge_slave_0 entered promiscuous mode [ 61.311975][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.319267][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.326914][ T4187] device bridge_slave_1 entered promiscuous mode [ 61.334344][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.341595][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.350064][ T4194] device bridge_slave_1 entered promiscuous mode [ 61.361101][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.368213][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.377230][ T4188] device bridge_slave_0 entered promiscuous mode [ 61.386354][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.403501][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.432996][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.440209][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.447801][ T4188] device bridge_slave_1 entered promiscuous mode [ 61.469859][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.480732][ T4197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.492917][ T4197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.504379][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.534032][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.549828][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.560698][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.572444][ T4189] team0: Port device team_slave_0 added [ 61.580015][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.602289][ T4197] team0: Port device team_slave_0 added [ 61.614110][ T4189] team0: Port device team_slave_1 added [ 61.638547][ T4197] team0: Port device team_slave_1 added [ 61.660436][ T4194] team0: Port device team_slave_0 added [ 61.668370][ T4187] team0: Port device team_slave_0 added [ 61.688339][ T4188] team0: Port device team_slave_0 added [ 61.698145][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.705236][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.731271][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.744484][ T4194] team0: Port device team_slave_1 added [ 61.753217][ T4187] team0: Port device team_slave_1 added [ 61.765441][ T4188] team0: Port device team_slave_1 added [ 61.774514][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.781585][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.807765][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.830650][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.837639][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.863891][ T4197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.912438][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.919507][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.945414][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.956867][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.964219][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.991046][ T4197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.002812][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.009824][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.035922][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.049003][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.055958][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.083073][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.096461][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.103768][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.129848][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.141836][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.148784][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.174749][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.196283][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.203316][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.229232][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.292511][ T4187] device hsr_slave_0 entered promiscuous mode [ 62.299333][ T4187] device hsr_slave_1 entered promiscuous mode [ 62.308604][ T4189] device hsr_slave_0 entered promiscuous mode [ 62.315550][ T4189] device hsr_slave_1 entered promiscuous mode [ 62.322451][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.330387][ T4189] Cannot create hsr debugfs directory [ 62.352991][ T4197] device hsr_slave_0 entered promiscuous mode [ 62.359900][ T4197] device hsr_slave_1 entered promiscuous mode [ 62.366508][ T4197] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.374418][ T4197] Cannot create hsr debugfs directory [ 62.393556][ T4188] device hsr_slave_0 entered promiscuous mode [ 62.400967][ T4188] device hsr_slave_1 entered promiscuous mode [ 62.407590][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.415336][ T4188] Cannot create hsr debugfs directory [ 62.486326][ T4194] device hsr_slave_0 entered promiscuous mode [ 62.493132][ T4194] device hsr_slave_1 entered promiscuous mode [ 62.500845][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.508409][ T4194] Cannot create hsr debugfs directory [ 62.619889][ T4198] Bluetooth: hci4: command 0x0409 tx timeout [ 62.629175][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 62.632289][ T4198] Bluetooth: hci3: command 0x0409 tx timeout [ 62.635207][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 62.670289][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 62.811913][ T4189] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.858512][ T4189] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.868070][ T4189] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.879191][ T4187] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 62.891729][ T4187] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 62.901786][ T4189] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.911852][ T4188] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.925199][ T4187] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 62.940114][ T4188] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.956367][ T4187] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 62.971624][ T4188] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.000115][ T4188] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.068798][ T4194] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.077987][ T4194] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.086935][ T4194] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.102336][ T4194] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.180738][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.220225][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.234341][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.246556][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.254698][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.265940][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.275707][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.282985][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.291603][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.303926][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.312333][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.319423][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.337080][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.351005][ T4197] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.361910][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.371647][ T4197] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.382487][ T4197] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.397298][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.416451][ T4197] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.427132][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.435323][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.444217][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.456026][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.464870][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.491017][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.504158][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.512903][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.524921][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.534405][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.543259][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.558610][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.567623][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.582224][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.590885][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.598784][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.608055][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.616342][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.625281][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.661120][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.670913][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.681201][ T1229] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.688358][ T1229] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.698172][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.707625][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.720160][ T1229] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.727249][ T1229] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.736321][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.744608][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.758152][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.767482][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.787249][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.798254][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.807202][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.816957][ T401] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.824076][ T401] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.836411][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.875974][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.886133][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.894932][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.904785][ T401] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.911892][ T401] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.921552][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.931441][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.942077][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.951563][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.960374][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.968719][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.977203][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.987744][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.027335][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.036331][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.046413][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.053639][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.064954][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.073886][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.082612][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.089707][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.097299][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.106040][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.115492][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.124429][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.133145][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.142266][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.156979][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.165047][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.176078][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.183708][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.204776][ T4197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.215066][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.224572][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.234112][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.243063][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.252567][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.262111][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.270644][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.278947][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.292172][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.301323][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.312899][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.326829][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.337216][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.346813][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.366718][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.388216][ T4194] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 64.409115][ T4194] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.445789][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.455327][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.480468][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.496052][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.505198][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.530998][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.538810][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.555531][ T4197] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.598538][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.608361][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.639307][ T4248] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.646401][ T4248] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.692775][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.705953][ T4198] Bluetooth: hci0: command 0x041b tx timeout [ 64.709202][ T4232] Bluetooth: hci1: command 0x041b tx timeout [ 64.724867][ T4198] Bluetooth: hci3: command 0x041b tx timeout [ 64.731540][ T4198] Bluetooth: hci2: command 0x041b tx timeout [ 64.737575][ T4198] Bluetooth: hci4: command 0x041b tx timeout [ 64.752423][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.762032][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.772441][ T4248] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.779555][ T4248] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.789489][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.798046][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.805706][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.816767][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.833982][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.844833][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.852912][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.884595][ T4197] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 64.895618][ T4197] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.917991][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.927172][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.936358][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.946747][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.955964][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.964632][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.973839][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.982718][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.991381][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.003705][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.011355][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.048411][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.057558][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.066379][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.077286][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.086628][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.096551][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.105545][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.131089][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.140125][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.149581][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.158229][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.168672][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.176993][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.199068][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.214352][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.224975][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.233663][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.260536][ T4189] device veth0_vlan entered promiscuous mode [ 65.267993][ T4187] device veth0_vlan entered promiscuous mode [ 65.276363][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.285253][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.294150][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.302276][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.315870][ T4194] device veth0_vlan entered promiscuous mode [ 65.327620][ T4189] device veth1_vlan entered promiscuous mode [ 65.342129][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.353277][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.362043][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.381241][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.388754][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.405695][ T4187] device veth1_vlan entered promiscuous mode [ 65.418274][ T4194] device veth1_vlan entered promiscuous mode [ 65.432379][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.447790][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.456863][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.467061][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.475661][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.506321][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.514837][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.523676][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.532581][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.541089][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.549739][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.559189][ T4188] device veth0_vlan entered promiscuous mode [ 65.568042][ T4197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.578002][ T4189] device veth0_macvtap entered promiscuous mode [ 65.595074][ T4187] device veth0_macvtap entered promiscuous mode [ 65.607198][ T4188] device veth1_vlan entered promiscuous mode [ 65.626829][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.635339][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.644712][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.653058][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.662316][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.670954][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.681628][ T4187] device veth1_macvtap entered promiscuous mode [ 65.695946][ T4189] device veth1_macvtap entered promiscuous mode [ 65.726044][ T4188] device veth0_macvtap entered promiscuous mode [ 65.736979][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.745571][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.754627][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.763666][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.772528][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.781490][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.811697][ T4197] device veth0_vlan entered promiscuous mode [ 65.827489][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.840953][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.850762][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.859049][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.867352][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.876257][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.885594][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.894629][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.903893][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.915780][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.926940][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.938638][ T4188] device veth1_macvtap entered promiscuous mode [ 65.952289][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.960153][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.968158][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.981191][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.990580][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.999523][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.013833][ T4194] device veth0_macvtap entered promiscuous mode [ 66.023045][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.033628][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.049329][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.063675][ T4187] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.072627][ T4187] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.081604][ T4187] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.091092][ T4187] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.106652][ T4189] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.115821][ T4189] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.124836][ T4189] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.133957][ T4189] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.146118][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.154993][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.163880][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.174267][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.186038][ T4194] device veth1_macvtap entered promiscuous mode [ 66.195723][ T4197] device veth1_vlan entered promiscuous mode [ 66.218236][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.287003][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.302105][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.312770][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.323266][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.335026][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.349870][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.360598][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.370577][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.381263][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.391951][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.402466][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.413306][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.439171][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.447832][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.460182][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.469213][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.477867][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.486594][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.505847][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.521263][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.531754][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.543184][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.554823][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.564754][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.575777][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.586378][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.597085][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.609605][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.620467][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.633612][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.650544][ T4197] device veth0_macvtap entered promiscuous mode [ 66.665809][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.684088][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.693460][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.703141][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.712680][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.723106][ T4194] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.732028][ T4194] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.741030][ T4194] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.749791][ T4194] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.775139][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.775744][ T4197] device veth1_macvtap entered promiscuous mode [ 66.783743][ T4233] Bluetooth: hci2: command 0x040f tx timeout [ 66.789892][ T4176] Bluetooth: hci4: command 0x040f tx timeout [ 66.800759][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.810000][ T4188] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.818717][ T4188] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.828679][ T4233] Bluetooth: hci3: command 0x040f tx timeout [ 66.835009][ T4233] Bluetooth: hci0: command 0x040f tx timeout [ 66.838066][ T4188] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.842378][ T4233] Bluetooth: hci1: command 0x040f tx timeout [ 66.853974][ T4188] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.897879][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.906099][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.964330][ T4248] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.982734][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.990221][ T4248] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.003746][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.013524][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.015567][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.032686][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.042607][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.053131][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.063321][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.073835][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.084955][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.097252][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.110382][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.120552][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.128461][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.140615][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.164464][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.180490][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.195556][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.207650][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.218121][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.228610][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.238739][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.249495][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.262729][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.279883][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.289657][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.331563][ T4197] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.346666][ T4197] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.351366][ T4271] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 67.356426][ T4197] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.389457][ T4271] CIFS: Attempting to mount \\127.0.0.1\share [ 67.391348][ T4197] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.396474][ T4271] CIFS: VFS: No username specified [ 67.467860][ T4248] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.515497][ T4248] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.527715][ T1229] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.547409][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.564645][ T1229] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.577684][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.577681][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.601370][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.616155][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.749067][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.756913][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.817355][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.103771][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.127809][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.161890][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.264701][ T1229] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.301579][ T1229] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.657067][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.859253][ T4275] Bluetooth: hci0: command 0x0419 tx timeout [ 68.980474][ T2282] Bluetooth: hci1: command 0x0419 tx timeout [ 69.015451][ T4275] Bluetooth: hci3: command 0x0419 tx timeout [ 69.256533][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.266064][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.278866][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 69.281677][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.299048][ T4275] Bluetooth: hci2: command 0x0419 tx timeout [ 69.369008][ T4275] Bluetooth: hci4: command 0x0419 tx timeout [ 69.434446][ T4291] Zero length message leads to an empty skb [ 69.647945][ T4306] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 69.748873][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 69.778851][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 69.808890][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 69.828862][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 69.848859][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 69.878867][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 69.888877][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 69.898859][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 69.918868][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 71.343057][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.652194][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.919568][ T7] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 75.522261][ T4335] process 'syz.2.16' launched '/dev/fd/-1/./file0' with NULL argv: empty string added [ 75.835726][ T4363] capability: warning: `syz.2.23' uses deprecated v2 capabilities in a way that may be insecure [ 80.526280][ T26] audit: type=1800 audit(1786867342.766:2): pid=4433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.44" name="zoned" dev="configfs" ino=33972 res=0 errno=0 [ 80.591693][ T26] audit: type=1800 audit(1786867342.796:3): pid=4433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.44" name="memory_backed" dev="configfs" ino=33973 res=0 errno=0 [ 80.614960][ T4436] comedi comedi0: Minor 3 could not be opened [ 80.700023][ T26] audit: type=1800 audit(1786867342.796:4): pid=4433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.44" name="zone_nr_conv" dev="configfs" ino=33974 res=0 errno=0 [ 80.720823][ C0] vkms_vblank_simulate: vblank timer overrun [ 80.783103][ T4443] netlink: 'syz.4.50': attribute type 21 has an invalid length. [ 80.967734][ T4443] netlink: 128 bytes leftover after parsing attributes in process `syz.4.50'. [ 81.149902][ T26] audit: type=1800 audit(1786867342.796:5): pid=4433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.44" name="power" dev="configfs" ino=33975 res=0 errno=0 [ 81.591995][ T4443] netlink: 'syz.4.50': attribute type 5 has an invalid length. [ 81.592365][ T3158] cfg80211: failed to load regulatory.db [ 81.799769][ T4443] netlink: 'syz.4.50': attribute type 6 has an invalid length. [ 81.914660][ T4443] netlink: 3 bytes leftover after parsing attributes in process `syz.4.50'. [ 82.902581][ T4464] netlink: 20 bytes leftover after parsing attributes in process `syz.3.54'. [ 87.448165][ T4532] device batadv_slave_0 entered promiscuous mode [ 87.456032][ T4531] device batadv_slave_0 left promiscuous mode [ 87.615775][ T4537] 9pnet_virtio: no channels available for device syz [ 88.817620][ T4553] netlink: 12 bytes leftover after parsing attributes in process `syz.0.80'. [ 88.977006][ T4556] netlink: 8 bytes leftover after parsing attributes in process `syz.2.82'. [ 88.989192][ T4556] netlink: 8 bytes leftover after parsing attributes in process `syz.2.82'. [ 88.999179][ T4556] netlink: 8 bytes leftover after parsing attributes in process `syz.2.82'. [ 89.011064][ T4556] netlink: 8 bytes leftover after parsing attributes in process `syz.2.82'. [ 89.020736][ T4556] netlink: 8 bytes leftover after parsing attributes in process `syz.2.82'. [ 89.037073][ T4556] 9pnet_virtio: no channels available for device syz [ 92.631218][ T4574] netlink: 28 bytes leftover after parsing attributes in process `syz.1.86'. [ 92.702654][ T4574] netlink: 28 bytes leftover after parsing attributes in process `syz.1.86'. [ 93.411367][ T4606] jffs2: notice: (4606) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 94.414500][ T4617] i2c i2c-0: delete_device: Can't find device in list [ 96.638607][ T2282] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 99.180198][ T2282] usb 3-1: unable to read config index 0 descriptor/all [ 99.191789][ T2282] usb 3-1: can't read configurations, error -71 [ 99.266080][ T4653] netlink: 12 bytes leftover after parsing attributes in process `syz.4.111'. [ 99.420204][ T4663] netlink: 8 bytes leftover after parsing attributes in process `syz.1.110'. [ 99.916725][ T4654] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.924950][ T4654] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.328081][ T4687] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 100.491073][ T4654] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.526920][ T4654] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.846412][ T4654] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.855715][ T4654] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.865450][ T4654] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.875071][ T4654] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.975301][ T4678] netlink: 24 bytes leftover after parsing attributes in process `syz.4.119'. [ 101.002946][ T4681] netlink: 24 bytes leftover after parsing attributes in process `syz.4.119'. [ 101.034649][ T4686] netlink: 68 bytes leftover after parsing attributes in process `syz.3.121'. [ 101.050335][ T4654] syz.1.110 (4654) used greatest stack depth: 19920 bytes left [ 102.039108][ T23] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 102.160764][ T4709] binder: 4708:4709 ioctl 9361 45 returned -22 [ 102.371890][ T4724] autofs4:pid:4724:autofs_fill_super: called with bogus options [ 102.589993][ T23] usb 2-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 0.00 [ 102.605881][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 103.500205][ T23] usb 2-1: Product: syz [ 103.504413][ T23] usb 2-1: Manufacturer: syz [ 103.552713][ T4742] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 103.659740][ T23] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input5 [ 103.836121][ T4293] usb 2-1: USB disconnect, device number 2 [ 104.016275][ T4757] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 105.971734][ T4794] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.979705][ T4794] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.077699][ T4800] netlink: 68 bytes leftover after parsing attributes in process `syz.1.161'. [ 108.198710][ T4843] netlink: 40 bytes leftover after parsing attributes in process `syz.1.176'. [ 108.604667][ T4868] comedi comedi0: comedi_config --init_data is deprecated [ 108.696334][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 109.379178][ T4871] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 113.409388][ T4233] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 113.989354][ T4233] usb 4-1: Using ep0 maxpacket: 8 [ 114.309701][ T4233] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 114.338391][ T4233] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 114.357707][ T4233] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 114.368498][ T4233] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 114.396184][ T4233] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 114.437477][ T4233] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.409416][ T4233] usb 4-1: GET_CAPABILITIES returned 0 [ 115.415386][ T4233] usbtmc 4-1:16.0: can't read capabilities [ 116.586982][ T7] usb 4-1: USB disconnect, device number 3 [ 120.848185][ T5064] kvm: pic: single mode not supported [ 120.852532][ T5064] kvm: pic: single mode not supported [ 120.955006][ T5064] kvm: pic: level sensitive irq not supported [ 121.046913][ T5064] kvm: pic: non byte read [ 123.859665][ T5106] 9pnet_virtio: no channels available for device syz [ 124.251112][ T5125] netlink: 8 bytes leftover after parsing attributes in process `syz.2.247'. [ 124.390962][ T5133] lo speed is unknown, defaulting to 1000 [ 124.505693][ T5133] lo speed is unknown, defaulting to 1000 [ 125.485734][ T5133] lo speed is unknown, defaulting to 1000 [ 126.064568][ T3158] Bluetooth: hci2: command 0x0406 tx timeout [ 126.155409][ T5133] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 126.613516][ T5133] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 127.630235][ T5133] lo speed is unknown, defaulting to 1000 [ 127.772395][ T5133] lo speed is unknown, defaulting to 1000 [ 127.932641][ T5133] lo speed is unknown, defaulting to 1000 [ 127.939413][ T5133] lo speed is unknown, defaulting to 1000 [ 127.946210][ T5133] lo speed is unknown, defaulting to 1000 [ 127.953686][ T5133] lo speed is unknown, defaulting to 1000 [ 127.960836][ T5133] lo speed is unknown, defaulting to 1000 [ 128.477735][ T5129] ODEBUG: Out of memory. ODEBUG disabled [ 128.686669][ T5162] lo speed is unknown, defaulting to 1000 [ 130.233607][ T5185] gadgetfs: bound to dummy_udc driver [ 130.331326][ T4275] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 130.490247][ T5196] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 130.769319][ T4275] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 130.789180][ T4275] usb 1-1: config 0 has no interface number 0 [ 130.805198][ T4275] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 130.846425][ T4275] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 130.877444][ T4275] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 130.900318][ T4275] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 130.938947][ T4275] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 130.958266][ T4275] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.981708][ T4275] usb 1-1: config 0 descriptor?? [ 131.000273][ T5182] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 131.019397][ T5182] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 131.040540][ T4275] ldusb 1-1:0.55: Interrupt in endpoint not found [ 131.245864][ T13] usb 1-1: USB disconnect, device number 2 [ 131.845592][ T5228] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.275'. [ 131.891401][ T5222] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.275'. [ 132.010751][ T5224] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.275'. [ 132.792158][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.798566][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.878694][ T5129] Set syz1 is full, maxelem 65536 reached [ 132.956162][ T5240] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 132.966037][ T5240] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.976170][ T5240] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.999948][ T5240] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 133.264369][ T5259] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 133.309246][ T5259] overlayfs: failed to set xattr on upper [ 133.336358][ T5259] overlayfs: ...falling back to index=off,metacopy=off. [ 135.336978][ T5285] device bond_slave_0 entered promiscuous mode [ 135.343573][ T5285] device bond_slave_1 entered promiscuous mode [ 135.371912][ T5289] fuse: Bad value for 'fd' [ 135.403114][ T5291] netlink: 8 bytes leftover after parsing attributes in process `syz.3.296'. [ 135.444165][ T5290] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 135.556746][ T5291] device bond_slave_0 left promiscuous mode [ 135.562800][ T5291] device bond_slave_1 left promiscuous mode [ 135.637644][ T5278] ib_srp: QP creation failed for dev syz0: -22 [ 137.074107][ T5325] syz.4.308 uses obsolete (PF_INET,SOCK_PACKET) [ 137.722034][ T5339] 9pnet_virtio: no channels available for device syz [ 138.882641][ T5354] mmap: syz.3.321 (5354) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 139.147684][ T5364] ======================================================= [ 139.147684][ T5364] WARNING: The mand mount option has been deprecated and [ 139.147684][ T5364] and is ignored by this kernel. Remove the mand [ 139.147684][ T5364] option from the mount to silence this warning. [ 139.147684][ T5364] ======================================================= [ 139.509359][ T13] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 140.983503][ T5383] netlink: 36 bytes leftover after parsing attributes in process `syz.1.329'. [ 141.389261][ T13] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 141.579994][ T4198] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 142.160877][ T4198] Bluetooth: hci4: Injecting HCI hardware error event [ 142.710434][ T4190] Bluetooth: hci4: hardware error 0x00 [ 142.879389][ T13] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 142.892862][ T13] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 142.902474][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.914955][ T13] usb 5-1: config 0 descriptor?? [ 142.939234][ T13] usb 5-1: can't set config #0, error -71 [ 142.952773][ T13] usb 5-1: USB disconnect, device number 2 [ 144.264266][ T5402] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 148.328924][ T4293] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 148.393054][ T4176] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 148.437595][ T4176] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 148.604148][ T4293] usb 5-1: Using ep0 maxpacket: 32 [ 148.664600][ T3158] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 148.759327][ T4293] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 148.773343][ T4293] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 148.788405][ T4293] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 148.802092][ T4293] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 148.829336][ T4293] usb 5-1: config 0 interface 0 has no altsetting 0 [ 149.070215][ T4293] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 149.082424][ T4293] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 149.091712][ T4293] usb 5-1: Product: syz [ 149.096903][ T4293] usb 5-1: Manufacturer: syz [ 149.103205][ T4293] usb 5-1: SerialNumber: syz [ 149.111649][ T3158] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 149.123974][ T4293] usb 5-1: config 0 descriptor?? [ 149.170396][ T4293] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 149.199499][ T4293] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 149.229091][ T3158] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 149.494877][ T4293] usb 5-1: USB disconnect, device number 3 [ 149.499578][ C0] ldusb 5-1:0.0: usb_submit_urb failed (-19) [ 149.508431][ T5454] ldusb 5-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 149.516650][ T5494] ldusb 5-1:0.0: Couldn't submit HID_REQ_SET_REPORT -19 [ 149.539079][ T3158] usb 2-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 149.558993][ T4293] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 149.568179][ T3158] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.585944][ T3158] usb 2-1: Product: syz [ 149.598856][ T3158] usb 2-1: Manufacturer: syz [ 149.603629][ T3158] usb 2-1: SerialNumber: syz [ 149.670516][ T3158] ti_usb_3410_5052 2-1:2.0: TI USB 5052 2 port adapter converter detected [ 149.677690][ T5501] netlink: 8 bytes leftover after parsing attributes in process `syz.0.363'. [ 149.696923][ T3158] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 149.759441][ T3158] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 149.820343][ T3158] usb 2-1: USB disconnect, device number 3 [ 150.744856][ T3158] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 150.776214][ T5459] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.809497][ T3158] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 150.841338][ T5459] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.860345][ T3158] ti_usb_3410_5052 2-1:2.0: device disconnected [ 151.345970][ T5526] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 151.816171][ T5459] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.844647][ T5459] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.870556][ T5459] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.911519][ T5459] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.106592][ T4199] Bluetooth: hci3: link tx timeout [ 152.112117][ T4199] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 152.195655][ T5539] netlink: 68 bytes leftover after parsing attributes in process `syz.2.386'. [ 152.327763][ T5541] lo speed is unknown, defaulting to 1000 [ 152.341661][ T5539] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 152.387730][ T4199] Bluetooth: hci3: link tx timeout [ 152.393117][ T4199] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 152.410788][ T4199] Bluetooth: hci3: link tx timeout [ 152.416017][ T4199] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.310837][ T4190] Bluetooth: hci3: link tx timeout [ 153.315992][ T4190] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.357583][ T4190] Bluetooth: hci3: link tx timeout [ 153.362763][ T4190] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.551821][ T5560] netlink: 8 bytes leftover after parsing attributes in process `syz.4.380'. [ 153.656855][ T5560] lo speed is unknown, defaulting to 1000 [ 153.798381][ T5560] siw: device registration error -23 [ 154.134038][ T5583] netlink: 36 bytes leftover after parsing attributes in process `syz.2.388'. [ 154.144468][ T23] Bluetooth: hci3: command 0x0406 tx timeout [ 154.380844][ T4190] Bluetooth: hci3: link tx timeout [ 154.386015][ T4190] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 154.457390][ T5593] netlink: 68 bytes leftover after parsing attributes in process `syz.0.391'. [ 154.672609][ T5598] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 155.513006][ T4190] Bluetooth: hci3: link tx timeout [ 155.518157][ T4190] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 155.787697][ T5616] netlink: 8 bytes leftover after parsing attributes in process `syz.3.397'. [ 155.802108][ T5616] netlink: 8 bytes leftover after parsing attributes in process `syz.3.397'. [ 155.812414][ T5616] netlink: 8 bytes leftover after parsing attributes in process `syz.3.397'. [ 155.822726][ T5616] netlink: 8 bytes leftover after parsing attributes in process `syz.3.397'. [ 155.832224][ T5616] netlink: 8 bytes leftover after parsing attributes in process `syz.3.397'. [ 155.860419][ T5616] 9pnet_virtio: no channels available for device syz [ 157.470654][ T5621] lo speed is unknown, defaulting to 1000 [ 157.563137][ T4190] Bluetooth: hci3: link tx timeout [ 157.568309][ T4190] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 157.754295][ T4190] Bluetooth: hci3: link tx timeout [ 157.759787][ T4190] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 157.856811][ T5630] netlink: 12 bytes leftover after parsing attributes in process `syz.1.399'. [ 157.927964][ T5636] 9pnet_virtio: no channels available for device syz [ 157.960260][ T5634] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 158.409226][ T4269] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 158.669322][ T4269] usb 3-1: Using ep0 maxpacket: 8 [ 159.449406][ T4269] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 159.470821][ T4269] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 159.491511][ T4269] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 159.512025][ T4269] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 159.549357][ T4269] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 159.569320][ T4269] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.951617][ T4269] usb 3-1: GET_CAPABILITIES returned 0 [ 159.957358][ T4269] usbtmc 3-1:16.0: can't read capabilities [ 160.093011][ T5695] netlink: 12 bytes leftover after parsing attributes in process `syz.4.414'. [ 160.252662][ T5695] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 160.375755][ T5701] 9pnet_virtio: no channels available for device syz [ 160.445085][ T5704] o2cb: This node has not been configured. [ 160.473240][ T5704] o2cb: Cluster check failed. Fix errors before retrying. [ 160.510545][ T4293] usb 3-1: USB disconnect, device number 4 [ 160.518086][ T5704] (syz.4.418,5704,1):user_dlm_register:675 ERROR: status = -22 [ 160.531042][ T5704] (syz.4.418,5704,0):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "file1" [ 160.736586][ T5714] jffs2: notice: (5714) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 160.781936][ T5714] device lo entered promiscuous mode [ 160.819091][ T5714] device tunl0 entered promiscuous mode [ 160.873616][ T5714] device gre0 entered promiscuous mode [ 161.095747][ T5714] device gretap0 entered promiscuous mode [ 161.164362][ T5714] device erspan0 entered promiscuous mode [ 161.234878][ T5730] comedi comedi0: comedi_config --init_data is deprecated [ 161.480516][ T5714] device ip_vti0 entered promiscuous mode [ 161.509974][ T5714] device ip6_vti0 entered promiscuous mode [ 161.739453][ T5714] device sit0 entered promiscuous mode [ 161.757042][ T4190] Bluetooth: hci3: link tx timeout [ 161.762248][ T4190] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 161.893968][ T26] audit: type=1326 audit(1786867424.136:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5737 comm="syz.3.428" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81d98670d9 code=0x7ffc0000 [ 161.974645][ T26] audit: type=1326 audit(1786867424.136:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5737 comm="syz.3.428" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f81d98670d9 code=0x7ffc0000 [ 162.008760][ T26] audit: type=1326 audit(1786867424.136:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5737 comm="syz.3.428" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81d98670d9 code=0x7ffc0000 [ 162.025016][ T5714] device ip6tnl0 entered promiscuous mode [ 162.075058][ T26] audit: type=1326 audit(1786867424.136:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5737 comm="syz.3.428" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f81d98670d9 code=0x7ffc0000 [ 162.223445][ T4190] Bluetooth: hci3: link tx timeout [ 162.229173][ T4190] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 163.024771][ T26] audit: type=1326 audit(1786867424.136:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5737 comm="syz.3.428" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81d98670d9 code=0x7ffc0000 [ 163.049226][ T26] audit: type=1326 audit(1786867424.136:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5737 comm="syz.3.428" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f81d98670d9 code=0x7ffc0000 [ 163.073588][ T26] audit: type=1326 audit(1786867424.136:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5737 comm="syz.3.428" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81d98670d9 code=0x7ffc0000 [ 163.097945][ T26] audit: type=1326 audit(1786867424.136:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5737 comm="syz.3.428" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f81d98670d9 code=0x7ffc0000 [ 163.123210][ T26] audit: type=1326 audit(1786867424.196:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5737 comm="syz.3.428" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81d98670d9 code=0x7ffc0000 [ 163.147716][ T26] audit: type=1326 audit(1786867424.196:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5737 comm="syz.3.428" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81d98670d9 code=0x7ffc0000 [ 163.234140][ T5714] device ip6gre0 entered promiscuous mode [ 163.413995][ T5714] device syz_tun entered promiscuous mode [ 163.421015][ T4190] Bluetooth: hci3: link tx timeout [ 163.426128][ T4190] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 163.452134][ T5714] device ip6gretap0 entered promiscuous mode [ 163.566067][ T5714] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.573405][ T5714] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.648064][ T5714] device bridge0 entered promiscuous mode [ 163.654567][ T4190] Bluetooth: hci3: link tx timeout [ 163.659871][ T4190] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 165.400708][ T4190] Bluetooth: hci3: link tx timeout [ 165.406702][ T4190] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 165.621706][ T5792] netlink: 20 bytes leftover after parsing attributes in process `syz.4.445'. [ 165.761015][ T4190] Bluetooth: hci3: link tx timeout [ 165.766450][ T4190] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 166.530404][ T5795] binder: 5794:5795 ioctl c00c6211 0 returned -22 [ 167.400682][ T4190] Bluetooth: hci3: link tx timeout [ 167.405921][ T4190] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 167.946501][ T5816] netlink: 8 bytes leftover after parsing attributes in process `syz.4.454'. [ 168.004934][ T5816] netlink: 4 bytes leftover after parsing attributes in process `syz.4.454'. [ 169.253737][ T5718] Set syz1 is full, maxelem 65536 reached [ 169.723804][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805fd55c00: rx timeout, send abort [ 170.224724][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805fd55000: rx timeout, send abort [ 170.233497][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805fd55c00: abort rx timeout. Force session deactivation [ 170.870092][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805fd55000: abort rx timeout. Force session deactivation [ 171.266901][ T5478] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 171.283033][ T5478] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 171.443292][ T5856] netlink: 28 bytes leftover after parsing attributes in process `syz.1.462'. [ 171.551427][ T5478] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 172.059890][ T5478] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 172.255050][ T4190] Bluetooth: hci3: link tx timeout [ 172.260661][ T4190] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 172.268605][ T4190] Bluetooth: hci3: link tx timeout [ 172.274379][ T4190] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 172.282655][ T5846] ceph: No mds server is up or the cluster is laggy [ 172.469853][ T4198] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 172.739605][ T4293] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 172.819632][ T4231] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 173.022356][ T9] blk_update_request: I/O error, dev sda, sector 770358 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0 [ 173.034453][ T9] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2032 starting block 96295) [ 173.046677][ T9] Buffer I/O error on device sda1, logical block 96256 [ 173.054455][ T9] blk_update_request: I/O error, dev sda, sector 778534 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0 [ 173.066487][ T9] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2032 starting block 97318) [ 173.078478][ T9] Buffer I/O error on device sda1, logical block 97278 [ 173.085419][ T9] Buffer I/O error on device sda1, logical block 97279 [ 173.092379][ T9] blk_update_request: I/O error, dev sda, sector 782430 op 0x1:(WRITE) flags 0x0 phys_seg 16 prio class 0 [ 173.103732][ T9] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2032 starting block 97812) [ 173.115682][ T9] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2032 starting block 97830) [ 173.115783][ T4349] Buffer I/O error on device sda1, logical block 97765 [ 173.127253][ T9] Buffer I/O error on device sda1, logical block 97774 [ 173.141122][ T9] Buffer I/O error on device sda1, logical block 97775 [ 173.147990][ T9] Buffer I/O error on device sda1, logical block 97776 [ 173.155039][ T9] Buffer I/O error on device sda1, logical block 97777 [ 173.161938][ T9] Buffer I/O error on device sda1, logical block 97778 [ 173.168829][ T9] Buffer I/O error on device sda1, logical block 97779 [ 173.176034][ T9] blk_update_request: I/O error, dev sda, sector 721206 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0 [ 173.187296][ T9] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2028 starting block 90151) [ 173.198884][ T9] blk_update_request: I/O error, dev sda, sector 729374 op 0x1:(WRITE) flags 0x0 phys_seg 3 prio class 0 [ 173.210139][ T9] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2028 starting block 91174) [ 173.304060][ T3521] blk_update_request: I/O error, dev sda, sector 1050774 op 0x1:(WRITE) flags 0x800 phys_seg 5 prio class 0 [ 173.389638][ T4231] usb 2-1: config 0 interface 0 altsetting 251 has an invalid endpoint with address 0x0, skipping [ 173.409056][ T3521] Aborting journal on device sda1-8. [ 173.449911][ T4231] usb 2-1: config 0 interface 0 has no altsetting 0 [ 173.484942][ T5180] blk_update_request: I/O error, dev sda, sector 1048886 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 173.497324][ T5180] blk_update_request: I/O error, dev sda, sector 1048886 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 173.509452][ T5180] Buffer I/O error on dev sda1, logical block 131072, lost sync page write [ 173.518904][ T5901] ceph: No mds server is up or the cluster is laggy [ 173.541515][ T3521] JBD2: Error -5 detected when updating journal superblock for sda1-8. [ 173.612568][ T5919] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.476: Detected aborted journal [ 173.742706][ T4231] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 173.764223][ T5180] blk_update_request: I/O error, dev sda, sector 310 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 0 [ 173.776059][ T5180] blk_update_request: I/O error, dev sda, sector 310 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 0 [ 173.787290][ T5180] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 173.816081][ T5919] EXT4-fs (sda1): I/O error while writing superblock [ 173.830400][ T4231] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 173.863041][ T4174] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 173.875847][ T5919] EXT4-fs (sda1): Remounting filesystem read-only [ 173.901322][ T4231] usb 2-1: Product: syz [ 173.937556][ T4231] usb 2-1: Manufacturer: syz [ 173.948219][ T5924] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.478: Detected aborted journal [ 173.961176][ T5180] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 173.971239][ T5924] EXT4-fs (sda1): I/O error while writing superblock [ 173.977981][ T5924] EXT4-fs (sda1): Remounting filesystem read-only [ 173.993218][ T4198] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 174.002103][ T9] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2028 starting block 91667) [ 174.006039][ T5180] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 174.015037][ T9] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2028 starting block 91686) [ 174.022696][ T4248] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm kworker/u4:5: Detected aborted journal [ 174.034223][ T9] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm kworker/u4:0: Detected aborted journal [ 174.057023][ T9] EXT4-fs (sda1): previous I/O error to superblock detected [ 174.058069][ T4174] EXT4-fs (sda1): I/O error while writing superblock [ 174.066484][ T150] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 174.079834][ T9] EXT4-fs (sda1): I/O error while writing superblock [ 174.082404][ T4231] usb 2-1: SerialNumber: syz [ 174.087525][ T9] EXT4-fs (sda1): Remounting filesystem read-only [ 174.096518][ T5906] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.471: Detected aborted journal [ 174.098617][ T9] EXT4-fs (sda1): ext4_writepages: jbd2_start: 9223372036854775804 pages, ino 2035; err -30 [ 174.119744][ T9] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2035 starting block 100391) [ 174.131983][ T9] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2035 starting block 101414) [ 174.135610][ T4231] usb 2-1: config 0 descriptor?? [ 174.153852][ T4174] EXT4-fs (sda1): Remounting filesystem read-only [ 174.166400][ T5180] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 174.177439][ T5180] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 174.187032][ T5906] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.471: Detected aborted journal [ 174.204973][ T5920] Buffer I/O error on dev sda1, logical block 132, lost async page write [ 174.214004][ T5920] Buffer I/O error on dev sda1, logical block 221, lost async page write [ 174.239361][ T4174] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 174.255288][ T5899] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.481: Detected aborted journal [ 174.257359][ T150] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 174.277818][ T5899] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.481: Detected aborted journal [ 174.314727][ T4231] snd-usb-audio: probe of 2-1:0.0 failed with error -22 [ 174.382275][ T4300] udevd[4300]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 174.489828][ T5478] usb 2-1: USB disconnect, device number 4 [ 174.558225][ T5920] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 174.842792][ T5936] block device autoloading is deprecated and will be removed. [ 175.012971][ T5939] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 175.170376][ T5940] tmpfs: Unknown parameter 'usrquota' [ 175.865123][ T4231] 0000:00:03.0 (uninitialized): Cannot find proper PCI device base address, aborting [ 177.428043][ T5478] Bluetooth: hci1: command 0x2016 tx timeout [ 178.299683][ T5964] ceph: No mds server is up or the cluster is laggy [ 178.627840][ T3926] EXT4-fs error: 84 callbacks suppressed [ 178.627856][ T3926] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #121: comm crond: reading directory lblock 0 [ 178.640653][ T5963] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.494: Detected aborted journal [ 178.671656][ T5963] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.494: Detected aborted journal [ 178.682777][ T5963] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.494: Detected aborted journal [ 178.697030][ T5963] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.494: Detected aborted journal [ 178.738969][ T5963] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.494: Detected aborted journal [ 178.750169][ T3926] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #116: comm crond: reading directory lblock 0 [ 178.797957][ T5963] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.494: Detected aborted journal [ 178.833381][ T4174] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 178.854508][ T5963] EXT4-fs: 109 callbacks suppressed [ 178.854524][ T5963] EXT4-fs (sda1): Remounting filesystem read-only [ 178.861061][ T4174] EXT4-fs (sda1): Remounting filesystem read-only [ 178.897369][ T5982] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.499: Detected aborted journal [ 178.929429][ T5982] EXT4-fs (sda1): Remounting filesystem read-only [ 178.945318][ T5982] EXT4-fs (sda1): Remounting filesystem read-only [ 179.027910][ T5979] EXT4-fs (sda1): Remounting filesystem read-only [ 179.042200][ T5984] EXT4-fs (sda1): Remounting filesystem read-only [ 179.100380][ T5984] EXT4-fs (sda1): Remounting filesystem read-only [ 179.141595][ T5986] EXT4-fs (sda1): Remounting filesystem read-only [ 179.194226][ T5986] EXT4-fs (sda1): Remounting filesystem read-only [ 179.207168][ T5988] EXT4-fs (sda1): Remounting filesystem read-only [ 180.209324][ T4269] Bluetooth: hci1: command 0x0406 tx timeout [ 180.283378][ T6000] binder: 5999:6000 ioctl c00c6211 0 returned -22 [ 181.738998][ T4198] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 181.993750][ T5907] Set syz1 is full, maxelem 65536 reached [ 182.038882][ T4198] usb 1-1: Using ep0 maxpacket: 8 [ 182.048898][ T4176] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 182.183273][ T6024] smc: net device vlan1 applied user defined pnetid SYZ2 [ 182.201072][ T4198] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.244015][ T4198] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.266465][ T4198] usb 1-1: config 0 interface 0 has no altsetting 0 [ 182.277356][ T4198] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 182.286781][ T4198] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.313268][ T4198] usb 1-1: config 0 descriptor?? [ 182.339687][ T4198] usb 1-1: can't set config #0, error -71 [ 182.347963][ T4198] usb 1-1: USB disconnect, device number 3 [ 182.479963][ T4176] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 182.490917][ T4293] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 182.529000][ T4176] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 182.629857][ T4176] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 182.643289][ T4176] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 182.656792][ T4176] usb 2-1: SerialNumber: syz [ 182.774462][ T4293] usb 4-1: Using ep0 maxpacket: 32 [ 182.969343][ T4293] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 182.977846][ T4293] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 183.014751][ T6014] netlink: 4 bytes leftover after parsing attributes in process `syz.1.512'. [ 183.018852][ T4293] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 183.034966][ T6014] netlink: 12 bytes leftover after parsing attributes in process `syz.1.512'. [ 183.066549][ T6042] netlink: 36 bytes leftover after parsing attributes in process `syz.1.512'. [ 183.084847][ T6014] netlink: 8 bytes leftover after parsing attributes in process `syz.1.512'. [ 183.103333][ T4293] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 183.138839][ T6014] netlink: 8 bytes leftover after parsing attributes in process `syz.1.512'. [ 183.147729][ T4293] usb 4-1: config 0 interface 0 has no altsetting 0 [ 183.339355][ T6051] binder: 6049:6051 ioctl c00c6211 0 returned -22 [ 183.369013][ T4293] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 183.378192][ T4293] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 183.764361][ T4174] EXT4-fs error: 80 callbacks suppressed [ 183.764389][ T4174] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 183.818364][ T3559] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #259: comm udevd: reading directory lblock 0 [ 183.881821][ T4174] EXT4-fs: 67 callbacks suppressed [ 183.882114][ T4174] EXT4-fs (sda1): Remounting filesystem read-only [ 183.882872][ T3559] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 183.912199][ T3559] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 183.962939][ T3559] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 183.983932][ T4199] ------------[ cut here ]------------ [ 183.992198][ T4199] WARNING: CPU: 1 PID: 4199 at net/bluetooth/hci_conn.c:443 hci_conn_timeout+0x24f/0x450 [ 183.998707][ T6053] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.522: Detected aborted journal [ 184.002237][ T4199] Modules linked in: [ 184.002295][ T4199] CPU: 1 PID: 4199 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 184.002316][ T4199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 184.002329][ T4199] Workqueue: hci1 hci_conn_timeout [ 184.002361][ T4199] RIP: 0010:hci_conn_timeout+0x24f/0x450 [ 184.002384][ T4199] Code: 8b 8d e8 94 74 de f8 48 8b 35 35 63 ab 04 bf 08 00 00 00 48 89 da 5b 41 5c 41 5d 41 5e 41 5f 5d e9 26 2a 6e f8 e8 b1 51 99 f8 <0f> 0b e9 35 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c dd fd [ 184.002408][ T4199] RSP: 0018:ffffc90002ecfc08 EFLAGS: 00010293 [ 184.002432][ T4199] RAX: ffffffff88dfaaff RBX: ffff88801879a138 RCX: ffff8880799abb80 [ 184.002445][ T4199] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 184.002456][ T4199] RBP: 00000000ffffffff R08: ffff88801879a013 R09: 1ffff110030f3402 [ 184.002470][ T4199] R10: dffffc0000000000 R11: ffffed10030f3403 R12: ffff88802aa2e808 [ 184.002484][ T4199] R13: dffffc0000000000 R14: ffff88801879a000 R15: ffff88801879a010 [ 184.002499][ T4199] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 184.002515][ T4199] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 184.023505][ T3559] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1642: comm udevd: reading directory lblock 0 [ 184.025504][ T4199] CR2: 0000200000004000 CR3: 000000005b7df000 CR4: 00000000003506e0 [ 184.037906][ T3559] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1480: comm udevd: reading directory lblock 0 [ 184.040987][ T4199] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 184.041004][ T4199] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 184.041017][ T4199] Call Trace: [ 184.041024][ T4199] [ 184.041036][ T4199] process_one_work+0x867/0xff0 [ 184.041076][ T4199] ? worker_detach_from_pool+0x240/0x240 [ 184.041095][ T4199] ? lockdep_hardirqs_off+0x70/0x100 [ 184.041119][ T4199] ? _raw_spin_lock_irq+0xb7/0xf0 [ 184.041137][ T4199] ? _raw_spin_lock_irqsave+0x100/0x100 [ 184.053543][ T6053] EXT4-fs (sda1): Remounting filesystem read-only [ 184.066710][ T4199] ? wq_worker_running+0x97/0x170 [ 184.066771][ T4199] worker_thread+0xad7/0x12a0 [ 184.066822][ T4199] kthread+0x42e/0x520 [ 184.066840][ T4199] ? rcu_lock_release+0x20/0x20 [ 184.066858][ T4199] ? kthread_blkcg+0xd0/0xd0 [ 184.066879][ T4199] ret_from_fork+0x1f/0x30 [ 184.066914][ T4199] [ 184.066936][ T4199] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 184.066947][ T4199] CPU: 1 PID: 4199 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 184.066967][ T4199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 184.066979][ T4199] Workqueue: hci1 hci_conn_timeout [ 184.067002][ T4199] Call Trace: [ 184.067009][ T4199] [ 184.067016][ T4199] dump_stack_lvl+0x188/0x250 [ 184.067039][ T4199] ? show_regs_print_info+0x20/0x20 [ 184.067058][ T4199] ? load_image+0x410/0x410 [ 184.067084][ T4199] panic+0x2f8/0x850 [ 184.067104][ T4199] ? bpf_jit_dump+0xd0/0xd0 [ 184.067127][ T4199] ? ret_from_fork+0x1f/0x30 [ 184.067145][ T4199] ? hci_conn_timeout+0x24f/0x450 [ 184.067164][ T4199] __warn+0x248/0x2b0 [ 184.067180][ T4199] ? hci_conn_timeout+0x24f/0x450 [ 184.067199][ T4199] report_bug+0x1b9/0x2e0 [ 184.067221][ T4199] handle_bug+0x3a/0x70 [ 184.067237][ T4199] exc_invalid_op+0x16/0x40 [ 184.067252][ T4199] asm_exc_invalid_op+0x16/0x20 [ 184.081297][ T3541] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #2: comm syslogd: reading directory lblock 0 [ 184.089235][ T4199] RIP: 0010:hci_conn_timeout+0x24f/0x450 [ 184.089263][ T4199] Code: 8b 8d e8 94 74 de f8 48 8b 35 35 63 ab 04 bf 08 00 00 00 48 89 da 5b 41 5c 41 5d 41 5e 41 5f 5d e9 26 2a 6e f8 e8 b1 51 99 f8 <0f> 0b e9 35 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c dd fd [ 184.089276][ T4199] RSP: 0018:ffffc90002ecfc08 EFLAGS: 00010293 [ 184.089292][ T4199] RAX: ffffffff88dfaaff RBX: ffff88801879a138 RCX: ffff8880799abb80 [ 184.089304][ T4199] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 184.089314][ T4199] RBP: 00000000ffffffff R08: ffff88801879a013 R09: 1ffff110030f3402 [ 184.089326][ T4199] R10: dffffc0000000000 R11: ffffed10030f3403 R12: ffff88802aa2e808 [ 184.089346][ T4199] R13: dffffc0000000000 R14: ffff88801879a000 R15: ffff88801879a010 [ 184.089367][ T4199] ? hci_conn_timeout+0x24f/0x450 [ 184.089393][ T4199] ? hci_conn_timeout+0x24f/0x450 [ 184.089416][ T4199] process_one_work+0x867/0xff0 [ 184.089451][ T4199] ? worker_detach_from_pool+0x240/0x240 [ 184.089469][ T4199] ? lockdep_hardirqs_off+0x70/0x100 [ 184.089494][ T4199] ? _raw_spin_lock_irq+0xb7/0xf0 [ 184.089512][ T4199] ? _raw_spin_lock_irqsave+0x100/0x100 [ 184.089533][ T4199] ? wq_worker_running+0x97/0x170 [ 184.089554][ T4199] worker_thread+0xad7/0x12a0 [ 184.089600][ T4199] kthread+0x42e/0x520 [ 184.089617][ T4199] ? rcu_lock_release+0x20/0x20 [ 184.089635][ T4199] ? kthread_blkcg+0xd0/0xd0 [ 184.089654][ T4199] ret_from_fork+0x1f/0x30 [ 184.089684][ T4199] [ 184.089944][ T4199] Kernel Offset: disabled [ 184.493892][ T4199] Rebooting in 86400 seconds..