last executing test programs: 7.953503728s ago: executing program 2 (id=125): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = syz_usbip_server_init(0x1) fcntl$F_GET_RW_HINT(r0, 0x40b, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) msgrcv(0x0, 0x0, 0x9a, 0x2, 0x4800) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000000)='./mydev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mydev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mydev/kmsg\x00', 0x1, 0x0) write$FUSE_DIRENTPLUS(r2, 0x0, 0x3c00) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) shmctl$SHM_STAT_ANY(0x0, 0xf, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x40000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, 0x0) r7 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) socket$nl_netfilter(0x10, 0x3, 0xc) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0xffe0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000180)={0x6, r4, 0x80000}) 6.22567838s ago: executing program 2 (id=128): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x5420, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000040)={0x0, 0x0, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, 0x76e0}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r2, &(0x7f0000000000)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {0x0, 0xfe}, {}, @result}], 0x1c) 6.18864243s ago: executing program 1 (id=129): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180)={'#! ', './file1/../file0', [], 0xa, "be6ee11976a9c134dd87951379f5e768b826aad8555f237fab070119"}, 0x30) write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000006e00000000000000000000000000000000000000009d00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd00000003000000deff00", [0x13, 0xf311211]}}) 5.975000316s ago: executing program 3 (id=130): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SET_ENDIAN(0x14, 0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000020000000000000002000004000000000000000002000000000000000000000002000000000000000100000000000001"], 0x0, 0x4e}, 0x20) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdir(&(0x7f0000000400)='./my_configfs/target/usb_gadget\x00', 0x1ff) mkdir(&(0x7f0000000500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff) mkdir(&(0x7f0000000600)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1\x00', 0x1ff) 5.608431105s ago: executing program 1 (id=131): socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x45, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfc}, 0x48) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7005}, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000), 0x8) 5.575685805s ago: executing program 2 (id=132): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000140)={0x2, 0x86, 0x2}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f00000002c0)=[{0x6, 0xfd, 0x8, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x800000000000, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x2, 0x1, 0x7}}, 0xe8) 5.37635664s ago: executing program 4 (id=134): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x20010, 0xffffffffffffffff, 0xec776000) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x111, 0x0) getpid() r1 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x0, 'veth0_to_hsr\x00', {0x4}, 0x3}) write(r1, &(0x7f0000000480)="1c0000001a009b8a140000003b00"/28, 0x1c) recvmmsg(r1, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 5.37616367s ago: executing program 1 (id=135): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @sack_perm, @window={0x3, 0x9, 0x9}, @window={0x3, 0x6, 0xff81}, @window={0x3, 0x8, 0x6}, @timestamp, @sack_perm, @window={0x3, 0x1, 0x5}], 0x8) sendmmsg$inet(r0, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000003c0)='4', 0x1}], 0x1}}], 0x1, 0x4000000) r1 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x810, 0x0, 0x0) 5.35989074s ago: executing program 4 (id=136): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x19, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa7e3}, 0x94) syz_usb_connect(0x0, 0x6b, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="93430000520033d087277b9b108b4ab51c"], 0xfe33) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000"], 0xfe33) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, 0x0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd7000fcdbdf", @ANYRES32, @ANYRES32], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x810) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x8946, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x14000004}, 0xc010) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x44) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r9 = io_uring_setup(0x694d, &(0x7f00000000c0)={0x0, 0x41f0b, 0x0, 0x2, 0x253}) io_uring_register$IORING_REGISTER_FILES(r9, 0x1e, 0x0, 0x0) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x4001, @link_local, 'vlan0\x00'}}, 0x1e) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x48000) setsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, 0x0, 0x0) 3.813331328s ago: executing program 1 (id=137): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) listxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)=""/16, 0x19) lsetxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./sys\x00', 0x0, &(0x7f00000002c0)='./sys\x00', 0x6, 0x2) 3.813116638s ago: executing program 3 (id=138): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = epoll_create1(0x0) fcntl$dupfd(r1, 0x0, r0) socketpair$unix(0x1, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_flowlabel\x00') read$FUSE(r5, &(0x7f00000000c0)={0x2020}, 0x2020) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000009b40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x50, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x92}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x14}]}}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) 3.766721999s ago: executing program 1 (id=139): prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) capset(&(0x7f0000000080)={0x20080522, 0xffffffffffffffff}, 0x0) fanotify_mark(0xffffffffffffffff, 0x105, 0x4800003a, r0, 0x0) truncate(0x0, 0x7f0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000380)={0x8, 0x4c, 0x2ba5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000180)={r4}) 2.824317212s ago: executing program 3 (id=142): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x800, 0x70bd29, 0x25cfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0x1, 0x7}, {0x0, 0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44045}, 0x4000) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000084) 2.681452735s ago: executing program 3 (id=144): socket$inet6(0xa, 0x3, 0x6) r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x77) lsetxattr$security_ima(&(0x7f00000004c0)='./bus\x00', &(0x7f0000000500), &(0x7f0000000640)=ANY=[@ANYBLOB="01"], 0x2, 0x1) mmap$snddsp_status(&(0x7f0000c82000/0x4000)=nil, 0x1000, 0x4, 0x20010, r0, 0x82000000) 2.540476978s ago: executing program 2 (id=145): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x4e20, 0x3, 'dh\x00', 0x362b1e0022c07b6a, 0x2, 0x6a}, 0x2c) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000580)={{0x84, @multicast1, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x7b}, {@multicast2, 0x4e22, 0x2, 0xc8, 0x80012d58, 0x12d5c}}, 0x44) 2.409488322s ago: executing program 0 (id=146): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x2c, r2, 0x201, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xad}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x80) 2.409324162s ago: executing program 3 (id=147): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, 0x0) readv(r0, &(0x7f00000006c0)=[{&(0x7f0000000400)=""/233, 0xe9}, {0x0}], 0x2) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) wait4(0x0, 0x0, 0x40000000, &(0x7f0000000240)) unshare(0x20000400) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) syz_emit_vhci(&(0x7f0000000700)=ANY=[@ANYBLOB="02c92010000c000500188f08000e00eb390bff0700"], 0x15) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x1c, &(0x7f0000000680)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) unshare(0x20080) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$OCFS2_IOC_MOVE_EXT(r3, 0x40406f06, 0x0) r4 = syz_open_dev$swradio(0x0, 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0205647, 0x0) pidfd_send_signal(r1, 0x21, 0x0, 0x0) 2.224616266s ago: executing program 0 (id=148): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r0, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x303de1f53b11ae}, 0x20008840) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000012c0)=0x44fb, 0x4) recvmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x3ffffffffffff2e, 0x1000400000de, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) 1.756324968s ago: executing program 4 (id=149): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) listxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)=""/16, 0x19) lsetxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./sys\x00', 0x0, &(0x7f00000002c0)='./sys\x00', 0x6, 0x2) 1.756016828s ago: executing program 3 (id=150): r0 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000054c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002a80)=[@cred={{0x1c, 0x1, 0x2, {r0}}}], 0x20}}], 0x1, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 1.712860779s ago: executing program 0 (id=151): socket$igmp(0x2, 0x3, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) quotactl$Q_QUOTAON(0xffffffff80000201, 0x0, 0x0, 0x0) 1.64749333s ago: executing program 4 (id=152): syz_open_dev$tty1(0xc, 0x4, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) r1 = memfd_secret(0x80000) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0xbc) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) 1.502693164s ago: executing program 0 (id=153): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) 1.502186814s ago: executing program 4 (id=154): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c0000001800050000000000000000002d000000000000010101000005"], 0x2c}}, 0x0) 1.376234127s ago: executing program 4 (id=155): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000140)={0x2, 0x86, 0x2}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f00000002c0)=[{0x6, 0xfd, 0x8, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x800000000000, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x2, 0x1, 0x7}}, 0xe8) 1.376028907s ago: executing program 2 (id=156): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r1, 0xaea2, 0x4) 1.356770407s ago: executing program 0 (id=157): r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x800, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x3c, 0x2, 0x4, "d02066000000000000000000565c000f30807278f8983c3c0a31965ebd9ca8ac", 0x20363059}) 384.454711ms ago: executing program 2 (id=158): io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0x14, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0x1ed) rmdir(&(0x7f00000001c0)='./config/usb_gadget/g1/functions/uac1.usb0\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r0 = syz_open_dev$cec(&(0x7f00000000c0), 0xffffffffffffffff, 0xa2243) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000040)={'\x00\f\x00', 0x0, 0x5, 0x2, 0x0, 0xc, "00000000020000000000002100", "00004702", "0052008f", '\x00', ["fdfeffbf84a438dfc5d5c010", "d78cb8b0211a83be12ff0bff", "0000efffffffffffbfff00", "000003cefd70f14003556000"]}) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffff7, 0xffffffffffffffff, 0x6, 0x9, 0x9, 0x7fff, "16b0bc450cfc47961ed5d8167d4f7865", 0x1, 0x52, 0x1, 0x49, 0x9, 0x9, 0xd}) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000140)={"4497acf4", 0xb, 0x15, 0x0, 0x3, 0x3000006, 'U\x00', "1575a859", '\x00', '\'q6O', ["aabe8459c62224475793e8a7", "000400000000000000000040", "fa0700f22b42a3023be516d1"]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', 0x0, 0x8, 0x0) 16.15608ms ago: executing program 0 (id=159): syz_open_dev$vim2m(&(0x7f0000000280), 0x40003, 0x2) socket$inet(0xa, 0x801, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x80) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r3, 0x0, 0x81, &(0x7f0000000600)={'nat\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x8000000000000001, 0x1, 0x2, 0xcc62, 0x9], 0x0, 0x0}, 0x78) msgget(0x1, 0x501) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x20, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x10}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x56010000}}, [@printk={@d, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {0x7, 0x0, 0x2}, {}, {}, {0x25}}], {{0x6}, {0x5, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) sendmmsg(0xffffffffffffffff, &(0x7f0000000040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="28000000000000002900000002"], 0x28}}], 0x1, 0x4008040) r5 = socket$inet(0x2, 0xa, 0x200000) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000080)={'lo\x00', {0x2, 0x4e23, @local}}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) 0s ago: executing program 1 (id=160): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x9}) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x109) fremovexattr(r2, &(0x7f0000000000)=@known='system.posix_acl_default\x00') close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.65' (ED25519) to the list of known hosts. [ 62.120476][ T4174] cgroup: Unknown subsys name 'net' [ 62.253546][ T4174] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 63.738465][ T4174] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 65.173134][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 65.207230][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 65.237211][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 65.300032][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 65.356507][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.363816][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.373303][ T4186] device bridge_slave_0 entered promiscuous mode [ 65.389438][ T4198] chnl_net:caif_netlink_parms(): no params data found [ 65.407008][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.414094][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.422115][ T4186] device bridge_slave_1 entered promiscuous mode [ 65.443831][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.450960][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.459421][ T4188] device bridge_slave_0 entered promiscuous mode [ 65.473316][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.480603][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.488507][ T4188] device bridge_slave_1 entered promiscuous mode [ 65.542652][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.549849][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.558595][ T4187] device bridge_slave_0 entered promiscuous mode [ 65.568286][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.590629][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.605817][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.618319][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.625604][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.633638][ T4187] device bridge_slave_1 entered promiscuous mode [ 65.643065][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.706419][ T4188] team0: Port device team_slave_0 added [ 65.714287][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.732085][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.739363][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.747955][ T4191] device bridge_slave_0 entered promiscuous mode [ 65.762059][ T4188] team0: Port device team_slave_1 added [ 65.769791][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.781503][ T4186] team0: Port device team_slave_0 added [ 65.787577][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.794740][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.803034][ T4191] device bridge_slave_1 entered promiscuous mode [ 65.810091][ T4198] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.817229][ T4198] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.825284][ T4198] device bridge_slave_0 entered promiscuous mode [ 65.850353][ T4186] team0: Port device team_slave_1 added [ 65.875517][ T4198] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.882735][ T4198] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.890992][ T4198] device bridge_slave_1 entered promiscuous mode [ 65.903826][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.911044][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.937361][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.950100][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.957184][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.983423][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.001738][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.008806][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.035391][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.056253][ T4187] team0: Port device team_slave_0 added [ 66.068473][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.075746][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.101830][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.114620][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.136331][ T4187] team0: Port device team_slave_1 added [ 66.144101][ T4198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.175589][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.195846][ T4198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.216812][ T4186] device hsr_slave_0 entered promiscuous mode [ 66.223911][ T4186] device hsr_slave_1 entered promiscuous mode [ 66.251273][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.258488][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.285073][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.307161][ T4188] device hsr_slave_0 entered promiscuous mode [ 66.314045][ T4188] device hsr_slave_1 entered promiscuous mode [ 66.321053][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.329841][ T4188] Cannot create hsr debugfs directory [ 66.349462][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.356655][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.383392][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.405339][ T4191] team0: Port device team_slave_0 added [ 66.419299][ T4198] team0: Port device team_slave_0 added [ 66.437806][ T4191] team0: Port device team_slave_1 added [ 66.464963][ T4198] team0: Port device team_slave_1 added [ 66.529909][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.537796][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.566573][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.578712][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.585847][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.611985][ T4198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.627226][ T4187] device hsr_slave_0 entered promiscuous mode [ 66.634126][ T4187] device hsr_slave_1 entered promiscuous mode [ 66.642737][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.650734][ T4187] Cannot create hsr debugfs directory [ 66.670242][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.677342][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.703852][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.715681][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.722632][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.748610][ T4198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.845919][ T13] Bluetooth: hci4: command 0x0409 tx timeout [ 66.865373][ T4198] device hsr_slave_0 entered promiscuous mode [ 66.872137][ T4198] device hsr_slave_1 entered promiscuous mode [ 66.879740][ T4198] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.887702][ T4198] Cannot create hsr debugfs directory [ 66.897109][ T4191] device hsr_slave_0 entered promiscuous mode [ 66.904470][ T4191] device hsr_slave_1 entered promiscuous mode [ 66.912070][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.919716][ T4191] Cannot create hsr debugfs directory [ 66.925547][ T2238] Bluetooth: hci0: command 0x0409 tx timeout [ 66.935040][ T13] Bluetooth: hci1: command 0x0409 tx timeout [ 66.935141][ T2238] Bluetooth: hci2: command 0x0409 tx timeout [ 66.941205][ T13] Bluetooth: hci3: command 0x0409 tx timeout [ 67.146653][ T4188] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 67.158948][ T4188] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 67.181489][ T4188] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 67.191763][ T4188] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 67.236211][ T4187] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 67.256127][ T4187] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 67.275084][ T4187] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 67.292681][ T4187] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 67.338855][ T4186] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 67.353171][ T4186] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 67.372319][ T4186] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 67.383469][ T4186] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 67.454747][ T4198] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 67.464557][ T4198] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 67.479941][ T4198] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 67.499789][ T4198] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 67.527000][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.561237][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.588298][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.598083][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.608351][ T4191] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.623267][ T4191] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.639744][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.651821][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.660215][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.671883][ T4191] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.700568][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.709839][ T4191] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.719995][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.729603][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.739761][ T4209] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.747069][ T4209] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.756791][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.765874][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.774513][ T4209] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.781787][ T4209] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.790140][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.799743][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.816175][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.825253][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.834090][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.841207][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.863851][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.876695][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.884665][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.896085][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.904457][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.911613][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.920815][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.949517][ T398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.959384][ T398] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.970034][ T398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.978384][ T398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.987404][ T398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.996404][ T398] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.012793][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.036152][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.046051][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.054419][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.063752][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.073457][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.082174][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.091464][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.100237][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.110370][ T398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.119607][ T398] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.130079][ T398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.139710][ T398] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.148759][ T398] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.155838][ T398] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.182833][ T4188] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 68.194053][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.218055][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.229322][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.241178][ T398] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.250267][ T398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.259292][ T398] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.267979][ T398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.276805][ T398] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.285666][ T398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.293989][ T398] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.302569][ T398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.311217][ T398] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.319749][ T398] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.327304][ T398] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.375375][ T398] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.388358][ T398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.397406][ T398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.407430][ T398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.417593][ T398] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.426956][ T398] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.466308][ T398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.482606][ T398] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.503737][ T4198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.517349][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.529965][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.544355][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.556882][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.586462][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.602949][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.621645][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.645846][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.666278][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.677237][ T4198] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.690065][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.703812][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.722298][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.750171][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.758758][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.768262][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.776333][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.785374][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.793708][ T4209] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.800804][ T4209] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.808733][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.818405][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.827167][ T4209] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.834230][ T4209] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.842175][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.851640][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.860132][ T4209] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.867221][ T4209] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.874925][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.882363][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.890112][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.899267][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.908036][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.921483][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.930065][ T4234] Bluetooth: hci4: command 0x041b tx timeout [ 68.937543][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.946633][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.953731][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.967324][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.005841][ T2284] Bluetooth: hci2: command 0x041b tx timeout [ 69.014634][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.029952][ T2284] Bluetooth: hci3: command 0x041b tx timeout [ 69.037727][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.051687][ T2284] Bluetooth: hci1: command 0x041b tx timeout [ 69.059755][ T2284] Bluetooth: hci0: command 0x041b tx timeout [ 69.062658][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.075709][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.084625][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.093594][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.103414][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.112336][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.129786][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.163529][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.176626][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.193199][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.202734][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.212129][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.220285][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.227952][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.238018][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.263401][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.272252][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.296828][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.314135][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.323004][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.334266][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.350273][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.361061][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.370309][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.388471][ T4188] device veth0_vlan entered promiscuous mode [ 69.398570][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.412517][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.429631][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.441380][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.479023][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.495828][ T4188] device veth1_vlan entered promiscuous mode [ 69.505272][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.513855][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.526221][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.551657][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.565925][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.574404][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.616900][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.630182][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.645705][ T4186] device veth0_vlan entered promiscuous mode [ 69.673368][ T4188] device veth0_macvtap entered promiscuous mode [ 69.685600][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.694514][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.705710][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.714390][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.725071][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.746581][ T4186] device veth1_vlan entered promiscuous mode [ 69.767525][ T4188] device veth1_macvtap entered promiscuous mode [ 69.793894][ T4187] device veth0_vlan entered promiscuous mode [ 69.809852][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.818905][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.828074][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.836194][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.844315][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.853041][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.861279][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.869224][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.877379][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.894116][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.916167][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.923689][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.931502][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.940704][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.952505][ T4187] device veth1_vlan entered promiscuous mode [ 69.962116][ T4186] device veth0_macvtap entered promiscuous mode [ 69.973862][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.989467][ T4198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.006466][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.014633][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.023172][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.031478][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.041112][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.053099][ T4186] device veth1_macvtap entered promiscuous mode [ 70.063504][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.071548][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.080518][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.089409][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.113966][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.126839][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.139619][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.157227][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.167102][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.179335][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.190344][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.203108][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.221502][ T4186] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.231246][ T4186] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.240548][ T4186] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.250292][ T4186] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.267151][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.277003][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.289077][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.299775][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.310188][ T4188] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.319308][ T4188] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.328800][ T4188] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.337857][ T4188] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.358190][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.367869][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.396912][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.407102][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.429853][ T4198] device veth0_vlan entered promiscuous mode [ 70.437816][ T4187] device veth0_macvtap entered promiscuous mode [ 70.472978][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.481350][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.490145][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.499269][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.507902][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.530247][ T4198] device veth1_vlan entered promiscuous mode [ 70.539882][ T4187] device veth1_macvtap entered promiscuous mode [ 70.554683][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.564047][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.573176][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.582195][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.636955][ T4191] device veth0_vlan entered promiscuous mode [ 70.660921][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.669976][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.678239][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.731212][ T4191] device veth1_vlan entered promiscuous mode [ 70.742461][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.754289][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.764772][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.776614][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.788306][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.804502][ T4198] device veth0_macvtap entered promiscuous mode [ 70.841906][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.851941][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.862026][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.870801][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.880324][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.889167][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.900434][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.910989][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.921330][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.932274][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.944141][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.956476][ T4198] device veth1_macvtap entered promiscuous mode [ 70.978032][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.986928][ T4237] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.987655][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.001191][ T4237] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.004502][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.011294][ T2284] Bluetooth: hci4: command 0x040f tx timeout [ 71.024631][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.029132][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.039801][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.048709][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.057586][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.087120][ T2284] Bluetooth: hci0: command 0x040f tx timeout [ 71.091842][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.104049][ T2284] Bluetooth: hci1: command 0x040f tx timeout [ 71.107018][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.110238][ T2284] Bluetooth: hci3: command 0x040f tx timeout [ 71.126178][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.126629][ T2284] Bluetooth: hci2: command 0x040f tx timeout [ 71.141972][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.155049][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.167335][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.182061][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.197505][ T4187] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.206769][ T4187] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.216211][ T4187] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.225273][ T4187] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.248526][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.257712][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.268170][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.279765][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.290443][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.301499][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.313188][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.327995][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.339351][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.361636][ T4198] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.370802][ T4198] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.380354][ T4198] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.389677][ T4198] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.412855][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.421880][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.440022][ T4209] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.445606][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.448928][ T4209] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.467646][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.489579][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.506546][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.515992][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.525903][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.545707][ T4191] device veth0_macvtap entered promiscuous mode [ 71.634051][ T4191] device veth1_macvtap entered promiscuous mode [ 71.649810][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.656698][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.711868][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.723362][ T4237] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.738038][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.754311][ T4237] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.763832][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.774383][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.779809][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.787005][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.837276][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.889928][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.925611][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.975961][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.992731][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.025346][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.033657][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.044414][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.063631][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.102615][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.121546][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.142483][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.165175][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.197351][ T4284] ======================================================= [ 72.197351][ T4284] WARNING: The mand mount option has been deprecated and [ 72.197351][ T4284] and is ignored by this kernel. Remove the mand [ 72.197351][ T4284] option from the mount to silence this warning. [ 72.197351][ T4284] ======================================================= [ 72.210696][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.251193][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.262813][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.280379][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.291692][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.302443][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.314298][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.332788][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.344335][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.366196][ T398] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.374562][ T4191] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.383572][ T398] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.386227][ T4191] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.401195][ T4191] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.410343][ T4191] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.429286][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.437271][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.446951][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.485586][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.555403][ T23] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 72.606868][ T4237] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.620372][ T4237] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.637178][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.692941][ T4237] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.707695][ T4237] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.718257][ T398] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.795065][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 72.825487][ T4298] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.834023][ T4298] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.908382][ T2284] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 72.916786][ T23] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 72.951211][ T23] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 73.022937][ T4302] netlink: 60 bytes leftover after parsing attributes in process `syz.0.15'. [ 73.089169][ T4263] Bluetooth: hci4: command 0x0419 tx timeout [ 73.135262][ T23] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 73.144447][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.161819][ T23] usb 3-1: Product: syz [ 73.166583][ T23] usb 3-1: Manufacturer: syz [ 73.171214][ T23] usb 3-1: SerialNumber: syz [ 73.177729][ T4263] Bluetooth: hci3: command 0x0419 tx timeout [ 73.187720][ T4263] Bluetooth: hci1: command 0x0419 tx timeout [ 73.193824][ T4263] Bluetooth: hci0: command 0x0419 tx timeout [ 73.287401][ T144] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.315676][ T2284] usb 5-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 73.324415][ T2284] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 73.393444][ T144] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.425574][ T1108] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 73.471084][ T23] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 73.496084][ T2284] usb 5-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 73.524743][ T2284] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.539066][ T26] audit: type=1326 audit(1786349910.442:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4312 comm="syz.3.20" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f351bdcf0d9 code=0x7ffc0000 [ 73.548779][ T2284] usb 5-1: Product: syz [ 73.585909][ T23] snd-usb-audio: probe of 3-1:1.1 failed with error -22 [ 73.588470][ T26] audit: type=1326 audit(1786349910.482:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4312 comm="syz.3.20" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f351bdcf0d9 code=0x7ffc0000 [ 73.600316][ T2284] usb 5-1: Manufacturer: syz [ 73.629538][ T26] audit: type=1326 audit(1786349910.482:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4312 comm="syz.3.20" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f351bdcf0d9 code=0x7ffc0000 [ 73.645686][ T23] usb 3-1: USB disconnect, device number 2 [ 73.668825][ T26] audit: type=1326 audit(1786349910.482:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4312 comm="syz.3.20" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7f351bdcf0d9 code=0x7ffc0000 [ 73.693404][ T26] audit: type=1326 audit(1786349910.482:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4312 comm="syz.3.20" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f351bdcf0d9 code=0x7ffc0000 [ 73.702257][ T4294] udevd[4294]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 73.718336][ T26] audit: type=1326 audit(1786349910.482:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4312 comm="syz.3.20" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f351bdcf0d9 code=0x7ffc0000 [ 73.761753][ T2284] usb 5-1: SerialNumber: syz [ 73.762560][ T26] audit: type=1326 audit(1786349910.482:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4312 comm="syz.3.20" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f351bdcf0d9 code=0x7ffc0000 [ 73.779264][ T2284] usb 5-1: config 0 descriptor?? [ 73.790772][ T26] audit: type=1326 audit(1786349910.482:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4312 comm="syz.3.20" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f351bdcf0d9 code=0x7ffc0000 [ 73.822330][ T26] audit: type=1326 audit(1786349910.482:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4312 comm="syz.3.20" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f351bdcf0d9 code=0x7ffc0000 [ 73.846656][ T26] audit: type=1326 audit(1786349910.482:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4312 comm="syz.3.20" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f351bdcf0d9 code=0x7ffc0000 [ 73.872594][ T2284] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 73.891226][ T144] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.925425][ T1108] usb 1-1: unable to get BOS descriptor or descriptor too short [ 73.978679][ T1108] usb 1-1: not running at top speed; connect to a high speed hub [ 74.021394][ T144] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.024672][ T4322] ieee802154 phy0 wpan0: encryption failed: -22 [ 74.075119][ T1108] usb 1-1: config 9 has an invalid interface number: 124 but max is 0 [ 74.083341][ T1108] usb 1-1: config 9 has no interface number 0 [ 74.503549][ T1108] usb 1-1: config 9 interface 124 altsetting 195 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 74.782235][ T1108] usb 1-1: config 9 interface 124 altsetting 195 endpoint 0xB has an invalid bInterval 0, changing to 4 [ 74.827584][ T1108] usb 1-1: config 9 interface 124 altsetting 195 endpoint 0xB has invalid wMaxPacketSize 0 [ 74.885246][ T1108] usb 1-1: config 9 interface 124 has no altsetting 0 [ 74.954400][ T4232] usb 5-1: USB disconnect, device number 2 [ 75.105324][ T1108] usb 1-1: New USB device found, idVendor=fff0, idProduct=fff0, bcdDevice=42.b4 [ 75.160070][ T1108] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.189173][ T1108] usb 1-1: Product: syz [ 75.197991][ T1108] usb 1-1: Manufacturer: syz [ 75.211790][ T1108] usb 1-1: SerialNumber: syz [ 75.224745][ T4314] chnl_net:caif_netlink_parms(): no params data found [ 75.625378][ T1108] usbtest 1-1:9.124: couldn't get endpoints, -71 [ 75.741669][ T1108] usbtest: probe of 1-1:9.124 failed with error -71 [ 76.162466][ T4263] Bluetooth: hci2: command 0x0409 tx timeout [ 76.216815][ T1108] usb 1-1: USB disconnect, device number 2 [ 76.338253][ T4374] netlink: 8 bytes leftover after parsing attributes in process `syz.2.37'. [ 76.572552][ T4314] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.579876][ T4314] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.325119][ T4314] device bridge_slave_0 entered promiscuous mode [ 77.356627][ T4314] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.387378][ T4314] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.424735][ T4314] device bridge_slave_1 entered promiscuous mode [ 77.498921][ T4314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.513050][ T4314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.751635][ T4314] team0: Port device team_slave_0 added [ 77.788803][ T4314] team0: Port device team_slave_1 added [ 77.926767][ T4314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.114846][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #212!!! [ 78.134854][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #312!!! [ 78.144839][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #312!!! [ 78.154830][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #392!!! [ 78.164966][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #392!!! [ 78.174841][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #392!!! [ 78.184844][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #392!!! [ 78.194836][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #392!!! [ 78.204830][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #392!!! [ 78.224840][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #392!!! [ 79.043059][ T4233] Bluetooth: hci2: command 0x041b tx timeout [ 79.150548][ T4314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.176579][ C1] vkms_vblank_simulate: vblank timer overrun [ 79.177009][ T4423] gadgetfs: bound to dummy_udc driver [ 79.377679][ T4314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.438244][ T4314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.484951][ T4314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.510900][ C1] vkms_vblank_simulate: vblank timer overrun [ 79.635243][ T4314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.676753][ T4438] capability: warning: `syz.3.58' uses 32-bit capabilities (legacy support in use) [ 79.683392][ T4437] netlink: 8 bytes leftover after parsing attributes in process `syz.2.57'. [ 79.702096][ T4438] program syz.3.58 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 79.896468][ T4314] device hsr_slave_0 entered promiscuous mode [ 79.912314][ T4314] device hsr_slave_1 entered promiscuous mode [ 79.929794][ T4314] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.946713][ T4314] Cannot create hsr debugfs directory [ 80.196461][ T4452] netlink: 28 bytes leftover after parsing attributes in process `syz.3.62'. [ 80.253462][ T4452] netlink: 16 bytes leftover after parsing attributes in process `syz.3.62'. [ 81.130912][ T4487] process 'syz.0.69' launched './file0' with NULL argv: empty string added [ 81.165534][ T23] Bluetooth: hci2: command 0x040f tx timeout [ 81.179702][ T4488] netlink: 40 bytes leftover after parsing attributes in process `syz.4.70'. [ 81.271178][ T144] device hsr_slave_0 left promiscuous mode [ 81.289239][ T144] device hsr_slave_1 left promiscuous mode [ 81.330134][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.349919][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.377232][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.429264][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.457946][ T144] device bridge_slave_1 left promiscuous mode [ 81.471029][ T4499] cifs: Unknown parameter ' ' [ 81.478525][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.510850][ T144] device bridge_slave_0 left promiscuous mode [ 81.545615][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.795016][ T4263] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 81.964083][ T144] device veth1_macvtap left promiscuous mode [ 81.996081][ T144] device veth0_macvtap left promiscuous mode [ 82.012465][ T144] device veth1_vlan left promiscuous mode [ 82.032166][ T144] device veth0_vlan left promiscuous mode [ 82.164962][ T4263] usb 5-1: Using ep0 maxpacket: 32 [ 82.275036][ T2238] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 83.156060][ T4263] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 83.177725][ T4263] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.186486][ T4263] usb 5-1: Product: syz [ 83.190760][ T4263] usb 5-1: Manufacturer: syz [ 83.201639][ T4263] usb 5-1: SerialNumber: syz [ 83.244913][ T4234] Bluetooth: hci2: command 0x0419 tx timeout [ 83.275167][ T2238] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 83.309919][ T4263] usb 5-1: config 0 descriptor?? [ 83.319108][ T2238] usb 3-1: config 0 has no interface number 0 [ 83.329699][ T2238] usb 3-1: config 0 interface 8 altsetting 0 has an invalid endpoint with address 0x9F, skipping [ 83.625030][ T4263] airspy 5-1:0.0: usb_control_msg() failed -32 request 09 [ 83.634963][ T2238] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 83.655239][ T4263] airspy 5-1:0.0: Could not detect board [ 83.689966][ T2238] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 83.698259][ T4263] airspy: probe of 5-1:0.0 failed with error -32 [ 83.716453][ T2238] usb 3-1: Product: syz [ 83.722752][ T2238] usb 3-1: SerialNumber: syz [ 83.753923][ T2238] usb 3-1: config 0 descriptor?? [ 83.827587][ T2238] usbhid 3-1:0.8: couldn't find an input interrupt endpoint [ 84.314162][ T144] team0 (unregistering): Port device team_slave_1 removed [ 85.313363][ T4517] usb 5-1: USB disconnect, device number 3 [ 85.443768][ T144] team0 (unregistering): Port device team_slave_0 removed [ 85.494460][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 86.816520][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 86.847206][ T4530] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 86.998461][ T1108] usb 3-1: USB disconnect, device number 3 [ 87.028993][ T7] cfg80211: failed to load regulatory.db [ 87.150323][ T144] bond0 (unregistering): Released all slaves [ 87.181052][ T4542] netlink: 12 bytes leftover after parsing attributes in process `syz.3.81'. [ 87.220035][ T4540] netlink: 228 bytes leftover after parsing attributes in process `syz.0.88'. [ 87.235003][ T4542] netlink: 20 bytes leftover after parsing attributes in process `syz.3.81'. [ 87.285528][ T4542] netlink: 20 bytes leftover after parsing attributes in process `syz.3.81'. [ 87.883306][ T4548] loop2: detected capacity change from 0 to 7 [ 88.322233][ T4294] loop2: [ 88.326361][ T4294] loop2: partition table partially beyond EOD, truncated [ 88.402170][ T4548] loop2: [ 88.405447][ T4548] loop2: partition table partially beyond EOD, truncated [ 89.325985][ T4314] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.492206][ T4314] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.548287][ T4314] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.599303][ T4314] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.886025][ T4314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.931514][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 90.966726][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 91.336891][ T4314] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.074798][ C0] sched: RT throttling activated [ 93.153897][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 93.169797][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 93.341913][ T4365] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.349302][ T4365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.468470][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 93.540071][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 93.545047][ T7] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 93.618233][ T4365] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.625389][ T4365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.684224][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 93.739149][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 93.783250][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 93.831841][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 93.890763][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 93.922260][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 93.951074][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 93.998806][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 94.015039][ T7] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 94.031101][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 94.039596][ T7] usb 1-1: config 0 has no interface number 0 [ 94.063940][ T7] usb 1-1: config 0 interface 8 altsetting 0 has an invalid endpoint with address 0x9F, skipping [ 94.070111][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 94.130226][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 94.178360][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 94.204008][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 94.212576][ T2284] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 94.262665][ T7] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 94.286521][ T23] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 94.290822][ T7] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 94.361204][ T7] usb 1-1: Product: syz [ 94.375041][ T7] usb 1-1: SerialNumber: syz [ 94.415826][ T7] usb 1-1: config 0 descriptor?? [ 94.465014][ T2284] usb 3-1: Using ep0 maxpacket: 8 [ 94.478285][ T7] usbhid 1-1:0.8: couldn't find an input interrupt endpoint [ 94.585078][ T2284] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.616679][ T2284] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 94.667348][ T2284] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 94.677017][ T23] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 94.693895][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.724844][ T2284] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.762587][ T2284] usb 3-1: config 0 descriptor?? [ 94.789063][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 94.831427][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 94.902754][ T4314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.978768][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 94.996085][ T23] cxacru_cm: 16 callbacks suppressed [ 94.996110][ T23] cxacru 4-1:1.0: send of cm 0x90 failed (-71) [ 95.005561][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 95.061068][ T4517] usb 3-1: USB disconnect, device number 4 [ 95.099272][ T4630] cxacru 4-1:1.0: Direct firmware load for cxacru-fw.bin failed with error -2 [ 95.119828][ T23] usb 4-1: USB disconnect, device number 2 [ 95.138135][ T4314] device veth0_vlan entered promiscuous mode [ 95.165323][ T4630] cxacru 4-1:1.0: Falling back to sysfs fallback for: cxacru-fw.bin [ 95.173869][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 95.174490][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 95.229924][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 95.253656][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 95.296153][ T4314] device veth1_vlan entered promiscuous mode [ 95.443304][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 95.443802][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 95.449596][ T4314] device veth0_macvtap entered promiscuous mode [ 95.462576][ T4314] device veth1_macvtap entered promiscuous mode [ 95.480458][ T4314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.480482][ T4314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.480494][ T4314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.480508][ T4314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.480519][ T4314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.480533][ T4314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.480543][ T4314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.480557][ T4314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.487851][ T4314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.487991][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 95.488616][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 95.489159][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 95.489702][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 95.495520][ T4314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.629441][ T4314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.629463][ T4314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.629481][ T4314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.629494][ T4314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.629507][ T4314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.629517][ T4314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.629530][ T4314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.631895][ T4314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.634214][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 96.636292][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 96.743070][ T4314] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.743106][ T4314] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.743130][ T4314] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.743163][ T4314] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.168437][ T4329] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.168460][ T4329] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.180909][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 97.335383][ T4327] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.335407][ T4327] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.335637][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 98.698465][ T2284] usb 1-1: USB disconnect, device number 3 [ 100.750529][ T4688] netlink: 20 bytes leftover after parsing attributes in process `syz.0.114'. [ 103.155702][ T4709] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 103.162608][ T4709] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 103.293419][ T4709] vhci_hcd vhci_hcd.0: Device attached [ 103.565057][ T4233] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 104.058845][ T4710] vhci_hcd: connection reset by peer [ 104.067494][ T398] vhci_hcd: stop threads [ 104.072507][ T398] vhci_hcd: release socket [ 104.633775][ T398] vhci_hcd: disconnect device [ 104.766368][ T4721] loop8: detected capacity change from 0 to 7 [ 104.822623][ T4721] Dev loop8: unable to read RDB block 7 [ 104.916289][ T4721] loop8: unable to read partition table [ 104.939922][ T4721] loop8: partition table beyond EOD, truncated [ 104.961606][ T4721] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 108.120527][ T4767] netlink: 8 bytes leftover after parsing attributes in process `syz.3.142'. [ 108.130878][ T4767] netlink: 12 bytes leftover after parsing attributes in process `syz.3.142'. [ 108.685099][ T4233] vhci_hcd: vhci_device speed not set [ 111.082083][ T4816] [ 111.084468][ T4816] ====================================================== [ 111.091500][ T4816] WARNING: possible circular locking dependency detected [ 111.098544][ T4816] syzkaller #0 Not tainted [ 111.102983][ T4816] ------------------------------------------------------ [ 111.110029][ T4816] syz.2.158/4816 is trying to acquire lock: [ 111.115949][ T4816] ffffffff8ceceff0 (gadget_subsys.su_mutex){+.+.}-{3:3}, at: configfs_rmdir+0x638/0x980 [ 111.125734][ T4816] [ 111.125734][ T4816] but task is already holding lock: [ 111.133109][ T4816] ffff8880727a33f0 (&sb->s_type->i_mutex_key#21){+.+.}-{3:3}, at: vfs_rmdir+0xe1/0x410 [ 111.142801][ T4816] [ 111.142801][ T4816] which lock already depends on the new lock. [ 111.142801][ T4816] [ 111.153408][ T4816] [ 111.153408][ T4816] the existing dependency chain (in reverse order) is: [ 111.162519][ T4816] [ 111.162519][ T4816] -> #2 (&sb->s_type->i_mutex_key#21){+.+.}-{3:3}: [ 111.171311][ T4816] down_write+0x38/0x60 [ 111.175999][ T4816] configfs_depend_item_unlocked+0x14f/0x430 [ 111.182517][ T4816] usbg_make_tpg+0x1f3/0x580 [ 111.187816][ T4816] target_fabric_make_tpg+0xa0/0x6d0 [ 111.193642][ T4816] configfs_mkdir+0x511/0x9e0 [ 111.198850][ T4816] vfs_mkdir+0x386/0x570 [ 111.203622][ T4816] do_mkdirat+0x1dd/0x5c0 [ 111.208475][ T4816] __x64_sys_mkdir+0x6a/0x80 [ 111.213681][ T4816] do_syscall_64+0x4c/0xa0 [ 111.218618][ T4816] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 111.225033][ T4816] [ 111.225033][ T4816] -> #1 (&opts->dep_lock){+.+.}-{3:3}: [ 111.232681][ T4816] __mutex_lock_common+0x1e5/0x2400 [ 111.238403][ T4816] mutex_lock_nested+0x17/0x20 [ 111.243689][ T4816] tcm_set_name+0x26/0x90 [ 111.248541][ T4816] function_make+0x195/0x350 [ 111.253653][ T4816] configfs_mkdir+0x511/0x9e0 [ 111.258850][ T4816] vfs_mkdir+0x386/0x570 [ 111.263613][ T4816] do_mkdirat+0x1dd/0x5c0 [ 111.268473][ T4816] __x64_sys_mkdir+0x6a/0x80 [ 111.273585][ T4816] do_syscall_64+0x4c/0xa0 [ 111.278520][ T4816] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 111.284937][ T4816] [ 111.284937][ T4816] -> #0 (gadget_subsys.su_mutex){+.+.}-{3:3}: [ 111.293193][ T4816] __lock_acquire+0x2c66/0x7b50 [ 111.298575][ T4816] lock_acquire+0x19e/0x400 [ 111.303599][ T4816] __mutex_lock_common+0x1e5/0x2400 [ 111.309318][ T4816] mutex_lock_nested+0x17/0x20 [ 111.314791][ T4816] configfs_rmdir+0x638/0x980 [ 111.319991][ T4816] vfs_rmdir+0x19d/0x410 [ 111.324755][ T4816] do_rmdir+0x27f/0x710 [ 111.329435][ T4816] __x64_sys_rmdir+0x45/0x50 [ 111.334543][ T4816] do_syscall_64+0x4c/0xa0 [ 111.339500][ T4816] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 111.345916][ T4816] [ 111.345916][ T4816] other info that might help us debug this: [ 111.345916][ T4816] [ 111.356139][ T4816] Chain exists of: [ 111.356139][ T4816] gadget_subsys.su_mutex --> &opts->dep_lock --> &sb->s_type->i_mutex_key#21 [ 111.356139][ T4816] [ 111.371413][ T4816] Possible unsafe locking scenario: [ 111.371413][ T4816] [ 111.378869][ T4816] CPU0 CPU1 [ 111.384245][ T4816] ---- ---- [ 111.389601][ T4816] lock(&sb->s_type->i_mutex_key#21); [ 111.395067][ T4816] lock(&opts->dep_lock); [ 111.402000][ T4816] lock(&sb->s_type->i_mutex_key#21); [ 111.410068][ T4816] lock(gadget_subsys.su_mutex); [ 111.415089][ T4816] [ 111.415089][ T4816] *** DEADLOCK *** [ 111.415089][ T4816] [ 111.423326][ T4816] 3 locks held by syz.2.158/4816: [ 111.428356][ T4816] #0: ffff888145e02460 (sb_writers#13){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 111.437601][ T4816] #1: ffff88805ee06ee0 (&default_group_class[depth - 1]#2/1){+.+.}-{3:3}, at: do_rmdir+0x1b0/0x710 [ 111.450552][ T4816] #2: ffff8880727a33f0 (&sb->s_type->i_mutex_key#21){+.+.}-{3:3}, at: vfs_rmdir+0xe1/0x410 [ 111.461262][ T4816] [ 111.461262][ T4816] stack backtrace: [ 111.467161][ T4816] CPU: 1 PID: 4816 Comm: syz.2.158 Not tainted syzkaller #0 [ 111.474590][ T4816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 111.484879][ T4816] Call Trace: [ 111.488206][ T4816] [ 111.491138][ T4816] dump_stack_lvl+0x188/0x250 [ 111.495857][ T4816] ? load_image+0x410/0x410 [ 111.500363][ T4816] ? show_regs_print_info+0x20/0x20 [ 111.505580][ T4816] ? print_circular_bug+0x12b/0x1a0 [ 111.510790][ T4816] check_noncircular+0x296/0x330 [ 111.515895][ T4816] ? add_chain_block+0x9b0/0x9b0 [ 111.520850][ T4816] ? lockdep_lock+0xf1/0x1f0 [ 111.525461][ T4816] ? __lock_acquire+0x2844/0x7b50 [ 111.530498][ T4816] ? mark_lock+0x94/0x320 [ 111.534834][ T4816] ? _find_first_zero_bit+0xd1/0xf0 [ 111.540032][ T4816] __lock_acquire+0x2c66/0x7b50 [ 111.544897][ T4816] ? __lock_acquire+0x13dc/0x7b50 [ 111.549925][ T4816] ? verify_lock_unused+0x140/0x140 [ 111.555132][ T4816] ? __lock_acquire+0x1305/0x7b50 [ 111.560182][ T4816] lock_acquire+0x19e/0x400 [ 111.564807][ T4816] ? configfs_rmdir+0x638/0x980 [ 111.569805][ T4816] ? __might_sleep+0xf0/0xf0 [ 111.574511][ T4816] ? read_lock_is_recursive+0x10/0x10 [ 111.579894][ T4816] __mutex_lock_common+0x1e5/0x2400 [ 111.585114][ T4816] ? configfs_rmdir+0x638/0x980 [ 111.590108][ T4816] ? configfs_rmdir+0x638/0x980 [ 111.594981][ T4816] ? __rwlock_init+0x140/0x140 [ 111.599754][ T4816] ? rcu_lock_release+0x5/0x20 [ 111.604541][ T4816] ? mutex_lock_io_nested+0x60/0x60 [ 111.609767][ T4816] ? _raw_spin_unlock+0x24/0x40 [ 111.614630][ T4816] mutex_lock_nested+0x17/0x20 [ 111.619406][ T4816] configfs_rmdir+0x638/0x980 [ 111.624187][ T4816] vfs_rmdir+0x19d/0x410 [ 111.628478][ T4816] do_rmdir+0x27f/0x710 [ 111.632652][ T4816] ? d_delete_notify+0x150/0x150 [ 111.637598][ T4816] ? getname_flags+0x1f9/0x4f0 [ 111.642363][ T4816] __x64_sys_rmdir+0x45/0x50 [ 111.646963][ T4816] do_syscall_64+0x4c/0xa0 [ 111.651393][ T4816] ? clear_bhb_loop+0x30/0x80 [ 111.656069][ T4816] ? clear_bhb_loop+0x30/0x80 [ 111.660762][ T4816] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 111.666743][ T4816] RIP: 0033:0x7f19390560d9 [ 111.671162][ T4816] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.691399][ T4816] RSP: 002b:00007f19372ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 111.699832][ T4816] RAX: ffffffffffffffda RBX: 00007f19392ddfa0 RCX: 00007f19390560d9 [ 111.707904][ T4816] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000001c0 [ 111.715875][ T4816] RBP: 00007f19390ed024 R08: 0000000000000000 R09: 0000000000000000 [ 111.723845][ T4816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.731824][ T4816] R13: 00007f19392de038 R14: 00007f19392ddfa0 R15: 00007fff7e556298 [ 111.739907][ T4816] [ 111.801649][ T4820] syz.0.159 uses obsolete (PF_INET,SOCK_PACKET)