last executing test programs: 1m18.262379434s ago: executing program 4 (id=5): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000500)='./bus\x00', 0x18418, &(0x7f0000000200)=ANY=[@ANYRES8=0x0, @ANYRES8], 0xfe, 0x4b1, &(0x7f0000001d00)="$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") setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) truncate(&(0x7f0000000100)='./file1\x00', 0x20fdfffffe) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f00000003c0)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) creat(&(0x7f0000000e40)='./file1\x00', 0x18) 1m17.815819518s ago: executing program 2 (id=6): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e21, 0x1, @loopback, 0x13}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc674d000000f8f7", "c5998c867c22b401046a89606ffcf92e", "2c5be7ad", "a0ca05c0707e52f4"}, 0x28) recvfrom$inet6(r1, &(0x7f00000000c0)=""/3, 0x3, 0x300, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x10000008ebe, 0x3) 1m17.622314994s ago: executing program 4 (id=7): syz_usb_connect$uac3(0x3, 0x80, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x103d, 0x100, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0xd8, 0x10, 0xc, {0x8, 0xb, 0x1, 0x2, 0x1, 0x1, 0x30, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xe, 0x0, 0x3, {0xa, 0x25, 0x25, 0x7fffffff, 0xc, 0x180}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x7f, 0x4, 0x0, {0xa, 0x25, 0x25, 0x400, 0x8f, 0x2}}}}}}}}]}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="280000002a0003050002000000000000180000800c0000000d"], 0x28}], 0x1}, 0x14008010) 1m16.942885006s ago: executing program 4 (id=11): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x18, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6bdbb7dd}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xa7}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x14, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) 1m16.584990808s ago: executing program 32 (id=11): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x18, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6bdbb7dd}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xa7}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x14, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) 1m14.611412941s ago: executing program 2 (id=23): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = syz_open_dev$loop(0x0, 0xf, 0xc28c2) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, 0x0) fallocate(r2, 0x11, 0x0, 0x5345) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x1800, 0x61, 0x11, 0x70}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 1m11.81575032s ago: executing program 2 (id=29): r0 = getpgrp(0x0) prlimit64(r0, 0x7, &(0x7f0000000680)={0x5, 0xd}, 0x0) syz_pidfd_open(r0, 0x0) r1 = socket(0x1, 0x3, 0x0) bind$unix(r1, 0x0, 0x0) ioctl$SIOCGETMIFCNT_IN6(r1, 0x89e0, 0x0) 1m11.574933319s ago: executing program 2 (id=30): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000500)='./bus\x00', 0x18418, &(0x7f0000000200)=ANY=[@ANYRES8=0x0, @ANYRES8], 0xfe, 0x4b1, &(0x7f0000001d00)="$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") setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) truncate(&(0x7f0000000100)='./file1\x00', 0x20fdfffffe) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f00000003c0)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) creat(&(0x7f0000000e40)='./file1\x00', 0x18) 1m10.952900478s ago: executing program 2 (id=34): syz_usb_connect$uac3(0x3, 0x80, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x103d, 0x100, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0xd8, 0x10, 0xc, {0x8, 0xb, 0x1, 0x2, 0x1, 0x1, 0x30, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xe, 0x0, 0x3, {0xa, 0x25, 0x25, 0x7fffffff, 0xc, 0x180}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x7f, 0x4, 0x0, {0xa, 0x25, 0x25, 0x400, 0x8f, 0x2}}}}}}}}]}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="280000002a0003050002000000000000180000800c0000000d"], 0x28}], 0x1}, 0x14008010) 1m10.530840422s ago: executing program 1 (id=35): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4040000) 1m10.397441336s ago: executing program 1 (id=37): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="310300000000000000000900000008000300", @ANYRES32=r2, @ANYBLOB="08000600", @ANYRES32], 0x24}}, 0x0) 1m10.25952093s ago: executing program 1 (id=38): r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-256\x00'}, 0x58) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = accept4$alg(r1, 0x0, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendfile(r4, r5, 0x0, 0x4) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0xf6d, 0x0, 0x6, 0x7fffffff, 0x0, 0x4, 0xfff, 0x0, 0x100, 0x0, 0x0, 0x400, 0x3, 0x0, 0xfffffffffffffff9, 0x6, 0x0, 0x1003, 0x2000000000008, 0x6, 0x0, 0x8000000000005a, 0x3, 0x1}) readv(r0, 0x0, 0x0) r6 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) fchdir(r6) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, &(0x7f0000000040)={0xf, 0xf3, 0x0, {r6}}, 0x20) 1m8.598859333s ago: executing program 2 (id=41): r0 = getpgrp(0x0) prlimit64(r0, 0x7, &(0x7f0000000680)={0x5, 0xd}, 0x0) syz_pidfd_open(r0, 0x0) r1 = socket(0x1, 0x3, 0x0) bind$unix(r1, 0x0, 0x0) ioctl$SIOCGETMIFCNT_IN6(r1, 0x89e0, 0x0) 1m7.979564803s ago: executing program 33 (id=41): r0 = getpgrp(0x0) prlimit64(r0, 0x7, &(0x7f0000000680)={0x5, 0xd}, 0x0) syz_pidfd_open(r0, 0x0) r1 = socket(0x1, 0x3, 0x0) bind$unix(r1, 0x0, 0x0) ioctl$SIOCGETMIFCNT_IN6(r1, 0x89e0, 0x0) 1m7.510460169s ago: executing program 1 (id=45): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000500)='./bus\x00', 0x18418, &(0x7f0000000200)=ANY=[@ANYRES8=0x0, @ANYRES8], 0xfe, 0x4b1, &(0x7f0000001d00)="$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") setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) truncate(&(0x7f0000000100)='./file1\x00', 0x20fdfffffe) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f00000003c0)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) creat(&(0x7f0000000e40)='./file1\x00', 0x18) 1m6.792623021s ago: executing program 1 (id=48): r0 = socket(0x40000000015, 0x5, 0x0) bind$l2tp6(r0, &(0x7f0000001540)={0xa, 0x0, 0x4, @remote, 0xffffffff}, 0x20) 1m6.2027671s ago: executing program 1 (id=49): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="3fabf82df2c3"}) write$tun(r0, &(0x7f00000000c0)={@val={0x8, 0x800}, @val={0x7, 0x3, 0x3, 0x2, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x5, 0x28, 0x0, 0x0, 0x8, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x25}, @broadcast}, {{0x8100, 0x88a8, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x5}}}}, 0x36) 1m5.88000695s ago: executing program 34 (id=49): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="3fabf82df2c3"}) write$tun(r0, &(0x7f00000000c0)={@val={0x8, 0x800}, @val={0x7, 0x3, 0x3, 0x2, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x5, 0x28, 0x0, 0x0, 0x8, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x25}, @broadcast}, {{0x8100, 0x88a8, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x5}}}}, 0x36) 37.929576125s ago: executing program 0 (id=123): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) 37.686897153s ago: executing program 0 (id=124): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = dup(r0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000480)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x24040800) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000340)={r3}, 0x8) 37.432899561s ago: executing program 0 (id=126): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$OSF_MSG_REMOVE(r1, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000003c0)=ANY=[], 0xe0c}, 0x1, 0x0, 0x0, 0x20}, 0x4) recvmsg$can_j1939(r1, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000001240)=""/4096, 0x1000}], 0x1}, 0x20000000) 37.210916048s ago: executing program 3 (id=127): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x7d, @dev={0xfe, 0x80, '\x00', 0x28}, 0xfffffff8}, 0x1c) bind$l2tp6(r0, 0x0, 0x0) 37.085682202s ago: executing program 0 (id=128): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x80000034) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0xef2}]}) socketpair$unix(0x1, 0x2, 0x0, 0x0) unshare(0x2000400) close_range(r1, 0xffffffffffffffff, 0x200000000000000) 36.970886386s ago: executing program 3 (id=130): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f00001bd000/0x2000)=nil, 0x6000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r3 = fsmount(r0, 0x1, 0x0) fchdir(r3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="09000000040000000400000007"], 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r4}, 0x18) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@generic={&(0x7f0000000300)='./file0\x00', 0x0, 0x8}, 0x18) 36.071797855s ago: executing program 0 (id=134): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100002d3d6a08c6050592ac29000000010902240003000000000904020000ff4f9b000904b000003a3846000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 35.700011396s ago: executing program 3 (id=135): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xc, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8"}) landlock_restrict_self(0xffffffffffffffff, 0xc) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(0xffffffffffffffff, 0x40405514, 0x0) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x800000f0147) 34.705529329s ago: executing program 3 (id=140): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x7d, @dev={0xfe, 0x80, '\x00', 0x28}, 0xfffffff8}, 0x1c) bind$l2tp6(r0, 0x0, 0x0) 34.422936898s ago: executing program 3 (id=141): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 34.270939353s ago: executing program 0 (id=144): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) mount(&(0x7f0000000080)=@filename='./cgroup\x00', &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x2000, 0x0) 34.196614795s ago: executing program 3 (id=145): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f00001bd000/0x2000)=nil, 0x6000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r3 = fsmount(r0, 0x1, 0x0) fchdir(r3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="09000000040000000400000007"], 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r4}, 0x18) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@generic={&(0x7f0000000300)='./file0\x00', 0x0, 0x8}, 0x18) 31.014933137s ago: executing program 7 (id=154): capset(&(0x7f0000000300)={0x20080522}, &(0x7f00000003c0)={0x6, 0xa2f, 0x9, 0x200, 0xe6c, 0x6}) r0 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffbf7, 0x1, 0x2, 0x0, 0x4, 0x7ffe, "7f2c00", 0x1, 0x56, 0x1, 0xfa, 0x9, 0x1}) 30.893327681s ago: executing program 7 (id=155): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 30.755954965s ago: executing program 7 (id=157): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000040)={0x2, @pix={0x2978, 0x5b, 0x47524247, 0x7, 0x41, 0x1, 0xb, 0x6, 0x1, 0x1, 0x2, 0x1}}) 30.542900402s ago: executing program 7 (id=158): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = syz_open_dev$loop(0x0, 0xf, 0xc28c2) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, 0x0) fallocate(r3, 0x11, 0x0, 0x5345) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x1800, 0x61, 0x11, 0x70}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 28.312534843s ago: executing program 7 (id=163): r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-256\x00'}, 0x58) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = accept4$alg(r1, 0x0, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendfile(r5, r6, 0x0, 0x4) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0xf6d, 0x0, 0x6, 0x7fffffff, 0x0, 0x4, 0xfff, 0x0, 0x100, 0x0, 0x0, 0x400, 0x3, 0x0, 0xfffffffffffffff9, 0x6, 0x0, 0x1003, 0x2000000000008, 0x6, 0x0, 0x8000000000005a, 0x3, 0x1}) readv(r0, 0x0, 0x0) r7 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) fchdir(r7) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, &(0x7f0000000040)={0xf, 0xf3, 0x0, {r7}}, 0x20) 26.416140894s ago: executing program 6 (id=170): syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b2c, &(0x7f0000000040)) 26.21797422s ago: executing program 6 (id=171): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) 26.21745907s ago: executing program 7 (id=172): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, &(0x7f0000000540)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 24.385571059s ago: executing program 6 (id=174): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = syz_open_dev$loop(0x0, 0xf, 0xc28c2) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, 0x0) fallocate(r3, 0x11, 0x0, 0x5345) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x1800, 0x61, 0x11, 0x70}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 23.249778645s ago: executing program 6 (id=175): ioctl$VHOST_VDPA_SET_GROUP_ASID(0xffffffffffffffff, 0x4008af7c, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x8101, 0x0) r0 = syz_open_dev$cec(&(0x7f00000001c0), 0xffffffffffffffff, 0x200) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000340)={'\x00\f\x00', 0x0, 0x5, 0x2, 0x200000, 0x9, "00000000020000000900", "00004702", "03000800", "97ad3700", ["fdffffff84a438dfc5d5c010", "d78cb8b0211a83be12ff0bff"]}) r1 = landlock_create_ruleset(&(0x7f0000000340)={0x1411, 0x1}, 0x18, 0x0) landlock_restrict_self(r1, 0xa) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000002c0)={"4497acf4", 0x3, 0x80, 0x0, 0x8000006, 0x1000002, "550000000100", "5922b1fa", "0725ebde", '\'q6O', ["2f7984214422244777b5e8a7", "00000000000000deff00", "fa0700f62b42b0023be516d1", "000000eaff01001b00800001"]}) 22.81076996s ago: executing program 6 (id=176): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000127d80)={0x4, [], 0x9, "4b7f9aa284e273"}) 21.85744829s ago: executing program 6 (id=178): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 18.582990175s ago: executing program 35 (id=144): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) mount(&(0x7f0000000080)=@filename='./cgroup\x00', &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x2000, 0x0) 18.503058087s ago: executing program 36 (id=145): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f00001bd000/0x2000)=nil, 0x6000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r3 = fsmount(r0, 0x1, 0x0) fchdir(r3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="09000000040000000400000007"], 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r4}, 0x18) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@generic={&(0x7f0000000300)='./file0\x00', 0x0, 0x8}, 0x18) 16.952299817s ago: executing program 5 (id=188): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x4ffe6, 0x8864000000000000) close_range(r0, 0xffffffffffffffff, 0x200000000000000) socket$nl_generic(0x10, 0x3, 0x10) 16.667790496s ago: executing program 5 (id=189): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') pread64(r1, &(0x7f0000000280)=""/172, 0xac, 0xe0) 16.454944543s ago: executing program 5 (id=190): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000840)=ANY=[@ANYBLOB="2c0000002d0001002dbd7000ffdba64c08000d00", @ANYRES32=r0], 0x2c}], 0x1, 0x0, 0x0, 0x20004880}, 0xc000) 16.22038076s ago: executing program 5 (id=191): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 16.093306725s ago: executing program 5 (id=192): r0 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x280000d, 0x11, r0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[]) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0) 15.878871531s ago: executing program 5 (id=193): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x1a8) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x451, 0x8001008, r0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r1, 0x1, 0x800002b, r2, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x112) 11.032337106s ago: executing program 37 (id=172): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, &(0x7f0000000540)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.518140301s ago: executing program 38 (id=178): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 0s ago: executing program 39 (id=193): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x1a8) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x451, 0x8001008, r0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r1, 0x1, 0x800002b, r2, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x112) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.94' (ED25519) to the list of known hosts. [ 71.586456][ T4261] cgroup: Unknown subsys name 'net' [ 71.721538][ T4261] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 73.225391][ T4261] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 74.827187][ T4286] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 74.827187][ T4284] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 74.830862][ T4286] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 74.838987][ T4284] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 74.843863][ T4286] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 74.851939][ T4284] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 74.870769][ T4284] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 74.872048][ T4286] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 74.880050][ T4284] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 74.886675][ T4286] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 74.894255][ T4284] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 74.899479][ T4286] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 74.910378][ T4284] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 74.914857][ T4286] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 74.922526][ T4284] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 74.930101][ T4286] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 74.935875][ T4284] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 74.943396][ T4286] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 74.948628][ T4284] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 74.956225][ T4286] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 74.969306][ T4276] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.013370][ T48] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.021684][ T4287] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 75.032123][ T4282] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.051469][ T4287] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 75.060810][ T4287] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 75.068602][ T4287] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 75.077021][ T4287] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 75.084714][ T4287] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 75.092022][ T4287] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 75.460873][ T4288] chnl_net:caif_netlink_parms(): no params data found [ 75.586892][ T4288] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.594926][ T4288] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.603469][ T4288] device bridge_slave_0 entered promiscuous mode [ 75.613170][ T4274] chnl_net:caif_netlink_parms(): no params data found [ 75.625681][ T4288] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.632854][ T4288] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.656762][ T4288] device bridge_slave_1 entered promiscuous mode [ 75.682968][ T4283] chnl_net:caif_netlink_parms(): no params data found [ 75.713098][ T4288] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.742908][ T4275] chnl_net:caif_netlink_parms(): no params data found [ 75.754541][ T4288] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.771293][ T4273] chnl_net:caif_netlink_parms(): no params data found [ 75.817945][ T4288] team0: Port device team_slave_0 added [ 75.854361][ T4288] team0: Port device team_slave_1 added [ 75.889893][ T4274] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.900647][ T4274] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.908733][ T4274] device bridge_slave_0 entered promiscuous mode [ 75.920471][ T4274] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.927978][ T4274] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.936356][ T4274] device bridge_slave_1 entered promiscuous mode [ 75.995087][ T4288] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.002104][ T4288] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.029010][ T4288] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.066036][ T4283] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.073171][ T4283] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.081947][ T4283] device bridge_slave_0 entered promiscuous mode [ 76.090306][ T4288] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.097646][ T4288] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.124137][ T4288] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.147359][ T4274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.159015][ T4274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.176011][ T4283] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.183230][ T4283] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.191932][ T4283] device bridge_slave_1 entered promiscuous mode [ 76.212149][ T4275] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.219438][ T4275] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.227702][ T4275] device bridge_slave_0 entered promiscuous mode [ 76.243035][ T4275] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.251855][ T4275] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.260322][ T4275] device bridge_slave_1 entered promiscuous mode [ 76.268155][ T4273] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.275500][ T4273] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.283347][ T4273] device bridge_slave_0 entered promiscuous mode [ 76.292568][ T4273] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.299796][ T4273] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.308166][ T4273] device bridge_slave_1 entered promiscuous mode [ 76.332070][ T4283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.373096][ T4274] team0: Port device team_slave_0 added [ 76.388161][ T4283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.405263][ T4273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.416444][ T4274] team0: Port device team_slave_1 added [ 76.430997][ T4275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.443087][ T4275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.470022][ T4273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.499895][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.507835][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.534032][ T4274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.550607][ T4288] device hsr_slave_0 entered promiscuous mode [ 76.557756][ T4288] device hsr_slave_1 entered promiscuous mode [ 76.591070][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.599895][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.629531][ T4274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.644204][ T4273] team0: Port device team_slave_0 added [ 76.652607][ T4283] team0: Port device team_slave_0 added [ 76.661086][ T4275] team0: Port device team_slave_0 added [ 76.669249][ T4275] team0: Port device team_slave_1 added [ 76.686242][ T4273] team0: Port device team_slave_1 added [ 76.699375][ T4283] team0: Port device team_slave_1 added [ 76.756531][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.767507][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.794120][ T4273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.806782][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.813962][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.839982][ T4273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.851605][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.858955][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.885099][ T4275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.901046][ T4283] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.908318][ T4283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.938864][ T4283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.957732][ T4283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.965728][ T4283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.992081][ T4283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.009305][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.016416][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.042670][ T4275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.064559][ T4282] Bluetooth: hci2: command 0x0409 tx timeout [ 77.064574][ T4287] Bluetooth: hci1: command 0x0409 tx timeout [ 77.070899][ T4282] Bluetooth: hci3: command 0x0409 tx timeout [ 77.077528][ T4284] Bluetooth: hci0: command 0x0409 tx timeout [ 77.132390][ T4274] device hsr_slave_0 entered promiscuous mode [ 77.139228][ T4274] device hsr_slave_1 entered promiscuous mode [ 77.145456][ T4287] Bluetooth: hci4: command 0x0409 tx timeout [ 77.152527][ T4274] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.160604][ T4274] Cannot create hsr debugfs directory [ 77.230179][ T4273] device hsr_slave_0 entered promiscuous mode [ 77.237327][ T4273] device hsr_slave_1 entered promiscuous mode [ 77.244116][ T4273] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.251693][ T4273] Cannot create hsr debugfs directory [ 77.277962][ T4283] device hsr_slave_0 entered promiscuous mode [ 77.284806][ T4283] device hsr_slave_1 entered promiscuous mode [ 77.291418][ T4283] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.299204][ T4283] Cannot create hsr debugfs directory [ 77.308670][ T4275] device hsr_slave_0 entered promiscuous mode [ 77.315750][ T4275] device hsr_slave_1 entered promiscuous mode [ 77.322309][ T4275] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.329942][ T4275] Cannot create hsr debugfs directory [ 77.617552][ T4288] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 77.642270][ T4288] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 77.672546][ T4288] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 77.684806][ T4288] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 77.796801][ T4283] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 77.810929][ T4283] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 77.826534][ T4283] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 77.844149][ T4283] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 77.901568][ T4274] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 77.911344][ T4274] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 77.927689][ T4274] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 77.940132][ T4274] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 77.974764][ T4288] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.007707][ T4273] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.022738][ T4273] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.054301][ T4273] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.065207][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 78.076357][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 78.092366][ T4288] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.100614][ T4273] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.149539][ T4283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.167974][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 78.179865][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 78.189397][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.196767][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.238450][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 78.249134][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 78.258404][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 78.266641][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 78.276411][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 78.285373][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.292482][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.301301][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 78.311432][ T4283] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.341389][ T4275] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.357659][ T4275] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.386585][ T4274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.398216][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 78.409066][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 78.419323][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 78.429530][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 78.439222][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 78.448255][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.455424][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.463200][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 78.472960][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 78.484058][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.491391][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.499553][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 78.508568][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 78.518545][ T4275] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.531601][ T4275] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.560977][ T4274] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.572953][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 78.582328][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 78.590775][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 78.599886][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 78.609166][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 78.619005][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 78.628141][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 78.636340][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 78.645709][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 78.655256][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 78.663772][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 78.672648][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 78.688075][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.695272][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.703107][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 78.715100][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 78.724872][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 78.737441][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 78.762638][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 78.772780][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 78.781789][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 78.791158][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.798343][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.806433][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 78.815589][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 78.824347][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 78.832963][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 78.841586][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 78.888465][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 78.907759][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 78.922187][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 78.932842][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 78.948789][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 78.963350][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 78.996599][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 79.004867][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.023616][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.038407][ T4273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.061337][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 79.092868][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 79.127363][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 79.141332][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 79.149804][ T4284] Bluetooth: hci3: command 0x041b tx timeout [ 79.149813][ T4287] Bluetooth: hci2: command 0x041b tx timeout [ 79.156072][ T4281] Bluetooth: hci1: command 0x041b tx timeout [ 79.156104][ T4281] Bluetooth: hci0: command 0x041b tx timeout [ 79.201012][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 79.224391][ T4287] Bluetooth: hci4: command 0x041b tx timeout [ 79.241910][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.263031][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.302176][ T4273] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.353182][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.370376][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.396464][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.403692][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.465455][ T4275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.487096][ T4288] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.504627][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.512847][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.532197][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.547860][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.555152][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.571504][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 79.580172][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 79.595991][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.627183][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.661571][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.681771][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.707744][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.736741][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.758399][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.790371][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.813031][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 79.839941][ T4275] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.895524][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 79.911699][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 79.934670][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.960823][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.989082][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.996322][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.007447][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.054459][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.067973][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.077563][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.084795][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.094732][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.104464][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.116417][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.150376][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 80.169185][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 80.177434][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.256339][ T4274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.290289][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.305388][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.331259][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.355492][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.367037][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.384785][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 80.392380][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 80.420814][ T4283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.480168][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.493173][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.506303][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.520771][ T4275] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.533973][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.558222][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.568894][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.645768][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 80.665543][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 80.700106][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 80.720151][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 80.731128][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 80.740771][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 80.769500][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 80.786533][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 80.814668][ T4283] device veth0_vlan entered promiscuous mode [ 80.835564][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 80.852592][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 80.861068][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 80.877360][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 80.891224][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 80.901127][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 80.918208][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 80.928908][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 80.942300][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 80.953236][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 80.962311][ T4288] device veth0_vlan entered promiscuous mode [ 80.975116][ T4274] device veth0_vlan entered promiscuous mode [ 81.001760][ T4283] device veth1_vlan entered promiscuous mode [ 81.030113][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 81.045784][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.053327][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.088737][ T4274] device veth1_vlan entered promiscuous mode [ 81.105914][ T4288] device veth1_vlan entered promiscuous mode [ 81.122426][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.203269][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 81.216401][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 81.224606][ T4287] Bluetooth: hci3: command 0x040f tx timeout [ 81.224643][ T4287] Bluetooth: hci0: command 0x040f tx timeout [ 81.224670][ T4287] Bluetooth: hci1: command 0x040f tx timeout [ 81.234122][ T4287] Bluetooth: hci2: command 0x040f tx timeout [ 81.247738][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 81.257983][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 81.266983][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 81.276037][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 81.286345][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 81.300951][ T4283] device veth0_macvtap entered promiscuous mode [ 81.313949][ T4284] Bluetooth: hci4: command 0x040f tx timeout [ 81.337696][ T4283] device veth1_macvtap entered promiscuous mode [ 81.352479][ T4288] device veth0_macvtap entered promiscuous mode [ 81.370806][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 81.379237][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 81.389005][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.399002][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.409904][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 81.419103][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 81.428593][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 81.437873][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 81.448122][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 81.459250][ T4274] device veth0_macvtap entered promiscuous mode [ 81.496792][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.506584][ T4288] device veth1_macvtap entered promiscuous mode [ 81.523184][ T4273] device veth0_vlan entered promiscuous mode [ 81.535618][ T4274] device veth1_macvtap entered promiscuous mode [ 81.543242][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 81.556167][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 81.564792][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 81.579141][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.594317][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.601956][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 81.611154][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 81.621194][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.633236][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.646417][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.655605][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.683030][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.696187][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.709331][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.719542][ T4275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.731490][ T4273] device veth1_vlan entered promiscuous mode [ 81.746812][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.760231][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 81.772471][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 81.789904][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 81.801465][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 81.820779][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.831584][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.843238][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.869899][ T4288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.880927][ T4288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.891777][ T4288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.903436][ T4288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.915817][ T4288] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.923235][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 81.932626][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 81.941767][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 81.952272][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 81.965437][ T4274] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.975132][ T4274] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.984310][ T4274] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.993048][ T4274] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.005395][ T4283] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.018012][ T4283] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.027937][ T4283] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.036869][ T4283] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.064608][ T4288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.076683][ T4288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.088843][ T4288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.099726][ T4288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.112321][ T4288] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.123998][ T4288] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.132745][ T4288] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.142427][ T4288] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.161092][ T4288] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.181975][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 82.198410][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 82.208020][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.217783][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.233028][ T4273] device veth0_macvtap entered promiscuous mode [ 82.302325][ T4273] device veth1_macvtap entered promiscuous mode [ 82.341778][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 82.360725][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 82.370399][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.380517][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.440290][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.454236][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.464175][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.475219][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.485629][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.496643][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.507354][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.518270][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.531262][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.549916][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.560070][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.569021][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.578199][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.603857][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.616439][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.625258][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.636161][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.648281][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.659268][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.669904][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.680446][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.691987][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.709452][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 82.722259][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 82.731833][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 82.745093][ T4275] device veth0_vlan entered promiscuous mode [ 82.765392][ T4273] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.779961][ T4273] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.788880][ T4273] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.797807][ T4273] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.810216][ T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.821601][ T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.842816][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.859994][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.873700][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 82.881760][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 82.910244][ T4275] device veth1_vlan entered promiscuous mode [ 82.964465][ T4300] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.972358][ T4300] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.000191][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 83.000707][ T4300] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.016107][ T4300] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.045979][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 83.069108][ T4275] device veth0_macvtap entered promiscuous mode [ 83.115442][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.151827][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.162723][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.172877][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.181433][ T4300] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.195878][ T4275] device veth1_macvtap entered promiscuous mode [ 83.204673][ T4300] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.212829][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.280658][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 83.314181][ T4284] Bluetooth: hci2: command 0x0419 tx timeout [ 83.316019][ T4287] Bluetooth: hci1: command 0x0419 tx timeout [ 83.320272][ T4284] Bluetooth: hci0: command 0x0419 tx timeout [ 83.326280][ T4287] Bluetooth: hci3: command 0x0419 tx timeout [ 83.346099][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 83.354377][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 83.379125][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.390383][ T4284] Bluetooth: hci4: command 0x0419 tx timeout [ 83.433455][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.449149][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.460007][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.462179][ T4361] loop4: detected capacity change from 0 to 128 [ 83.470712][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.487875][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.497942][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.509154][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.521757][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.546411][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.573050][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.590046][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.602568][ T4361] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 83.621731][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.634406][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.652878][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.683727][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.710526][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.738816][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.760384][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.774288][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.781738][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.793582][ T4361] loop4: detected capacity change from 128 to 64 [ 83.812215][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.833043][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 83.851644][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.874940][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.914866][ T4275] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.944073][ T4275] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.952868][ T4275] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.993687][ T4275] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.041722][ T4288] syz-executor: attempt to access beyond end of device [ 84.041722][ T4288] loop4: rw=2049, sector=83, nr_sectors = 1 limit=64 [ 84.074581][ T4288] Buffer I/O error on dev loop4, logical block 83, lost sync page write [ 84.403737][ T4300] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.411647][ T4300] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.524955][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.571707][ T4331] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.589830][ T4331] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.610348][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 84.739049][ T4300] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.866962][ T4300] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.937682][ T4300] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.012535][ T4300] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.703039][ T128] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 85.881269][ T4282] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 85.890040][ T4282] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 85.899511][ T4287] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 85.909072][ T4287] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 85.917180][ T4287] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 85.918353][ T128] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.925265][ T4287] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 85.947748][ T128] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.071978][ T128] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 86.126752][ T128] usb 4-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 86.153958][ T128] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.195144][ T128] usb 4-1: config 0 descriptor?? [ 86.639402][ T128] sony 0003:054C:09CC.0001: unknown main item tag 0x0 [ 86.666526][ T125] cfg80211: failed to load regulatory.db [ 86.683991][ T128] sony 0003:054C:09CC.0001: unknown main item tag 0x0 [ 86.690885][ T128] sony 0003:054C:09CC.0001: unknown main item tag 0x0 [ 86.708074][ T128] sony 0003:054C:09CC.0001: unknown main item tag 0x0 [ 86.728372][ T128] sony 0003:054C:09CC.0001: unknown main item tag 0x0 [ 86.759904][ T128] sony 0003:054C:09CC.0001: unknown main item tag 0x0 [ 86.800242][ T128] sony 0003:054C:09CC.0001: hidraw0: USB HID vff.fd Device [HID 054c:09cc] on usb-dummy_hcd.3-1/input0 [ 86.862199][ T128] sony 0003:054C:09CC.0001: failed to claim input [ 87.666538][ T4408] chnl_net:caif_netlink_parms(): no params data found [ 88.023868][ T4287] Bluetooth: hci4: command 0x0409 tx timeout [ 88.231644][ T4300] device hsr_slave_0 left promiscuous mode [ 88.253084][ T4300] device hsr_slave_1 left promiscuous mode [ 88.295037][ T4300] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.302642][ T4300] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.322925][ T4300] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.342298][ T4300] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.369712][ T4318] usb 4-1: USB disconnect, device number 2 [ 88.376556][ T4300] device bridge_slave_1 left promiscuous mode [ 88.385182][ T4300] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.480345][ T4300] device bridge_slave_0 left promiscuous mode [ 88.558442][ T4300] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.720029][ T4300] device veth1_macvtap left promiscuous mode [ 88.907245][ T4300] device veth0_macvtap left promiscuous mode [ 89.012803][ T4300] device veth1_vlan left promiscuous mode [ 89.108111][ T4300] device veth0_vlan left promiscuous mode [ 89.699084][ T4318] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 89.884979][ T4318] usb 4-1: Using ep0 maxpacket: 8 [ 89.893158][ T4318] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1536, setting to 64 [ 89.916241][ T4318] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid maxpacket 5632, setting to 64 [ 89.932932][ T4318] usb 4-1: config 0 interface 0 has no altsetting 0 [ 89.950905][ T4318] usb 4-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 89.976737][ T4318] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.998582][ T4318] usb 4-1: Product: syz [ 90.002835][ T4318] usb 4-1: Manufacturer: syz [ 90.011946][ T4318] usb 4-1: SerialNumber: syz [ 90.039724][ T4318] usb 4-1: config 0 descriptor?? [ 90.068066][ T4318] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 found [ 90.077086][ T4470] loop2: detected capacity change from 0 to 128 [ 90.103627][ T4287] Bluetooth: hci4: command 0x041b tx timeout [ 90.119317][ T4470] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 90.261581][ T4318] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 now disconnected [ 90.280423][ T4318] snd_usb_toneport: probe of 4-1:0.0 failed with error -22 [ 90.283765][ T4470] loop2: detected capacity change from 128 to 64 [ 90.303234][ T4473] syz.2.30: attempt to access beyond end of device [ 90.303234][ T4473] loop2: rw=0, sector=117, nr_sectors = 1 limit=64 [ 90.465102][ T4319] usb 4-1: USB disconnect, device number 3 [ 90.635806][ T4283] syz-executor: attempt to access beyond end of device [ 90.635806][ T4283] loop2: rw=2049, sector=83, nr_sectors = 1 limit=64 [ 90.650141][ T4283] Buffer I/O error on dev loop2, logical block 83, lost sync page write [ 91.029354][ T4300] team0 (unregistering): Port device team_slave_1 removed [ 91.121871][ T4300] team0 (unregistering): Port device team_slave_0 removed [ 91.200363][ T4300] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 91.215597][ T4484] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 91.300214][ T4300] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 92.193689][ T4287] Bluetooth: hci4: command 0x040f tx timeout [ 92.460907][ T4300] bond0 (unregistering): Released all slaves [ 92.710512][ T4408] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.730593][ T4408] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.755513][ T4408] device bridge_slave_0 entered promiscuous mode [ 92.789821][ T4408] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.818668][ T4408] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.839458][ T4408] device bridge_slave_1 entered promiscuous mode [ 92.957819][ T4408] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.012015][ T4408] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.196596][ T4408] team0: Port device team_slave_0 added [ 93.246538][ T4408] team0: Port device team_slave_1 added [ 93.343224][ T4408] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.403577][ T4408] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.503621][ T4408] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.540488][ T4408] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.592677][ T4408] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.680225][ T4408] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.790916][ T4506] ubi31: attaching mtd0 [ 93.791001][ T4506] ubi31 error: ubi_attach_mtd_dev: bad VID header (16384) or data offsets (16448) [ 93.901948][ T4408] device hsr_slave_0 entered promiscuous mode [ 93.932368][ T4408] device hsr_slave_1 entered promiscuous mode [ 94.107063][ T4514] loop1: detected capacity change from 0 to 128 [ 94.243899][ T4300] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.260064][ T4514] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 94.287162][ T4287] Bluetooth: hci4: command 0x0419 tx timeout [ 94.523038][ T4287] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 94.542137][ T4287] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 94.550349][ T4287] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 94.558919][ T4287] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 94.568537][ T4287] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 94.576865][ T4282] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 94.585921][ T4514] loop1: detected capacity change from 128 to 64 [ 94.694610][ T4300] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.811192][ T4300] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.832593][ T4274] syz-executor: attempt to access beyond end of device [ 94.832593][ T4274] loop1: rw=2049, sector=83, nr_sectors = 1 limit=64 [ 94.854751][ T4274] Buffer I/O error on dev loop1, logical block 83, lost sync page write [ 94.893789][ T125] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 94.959148][ T4300] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.113734][ T125] usb 1-1: Using ep0 maxpacket: 32 [ 95.127466][ T125] usb 1-1: config 3 has an invalid interface number: 214 but max is 0 [ 95.152431][ T125] usb 1-1: config 3 has no interface number 0 [ 95.187085][ T125] usb 1-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice= e.ae [ 95.203809][ T125] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.212046][ T125] usb 1-1: Product: syz [ 95.216880][ T125] usb 1-1: Manufacturer: syz [ 95.233925][ T125] usb 1-1: SerialNumber: syz [ 95.351436][ T4408] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 95.386199][ T4408] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 95.455444][ T4408] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 95.478326][ T125] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:3.214/input/input5 [ 95.515947][ T4408] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 95.543703][ T3625] bcm5974 1-1:3.214: could not read from device [ 95.643294][ T125] usb 1-1: USB disconnect, device number 2 [ 95.650154][ T3625] bcm5974 1-1:3.214: could not read from device [ 95.851447][ T4520] chnl_net:caif_netlink_parms(): no params data found [ 96.342212][ T4520] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.349785][ T4520] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.359939][ T4520] device bridge_slave_0 entered promiscuous mode [ 96.380102][ T4520] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.387587][ T4520] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.401591][ T4520] device bridge_slave_1 entered promiscuous mode [ 96.664614][ T4284] Bluetooth: hci3: command 0x0409 tx timeout [ 96.801405][ T4287] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 96.871280][ T4287] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 96.882755][ T4287] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 96.920116][ T4287] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 96.953117][ T4287] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 96.966079][ T4287] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.062031][ T4408] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.158925][ T4520] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.221184][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 97.238900][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 97.250114][ T4520] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.286119][ T4520] team0: Port device team_slave_0 added [ 97.295636][ T4520] team0: Port device team_slave_1 added [ 97.320165][ T4520] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.332726][ T4520] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.399962][ T4520] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.474103][ T4408] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.295169][ T4520] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.302195][ T4520] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.329400][ T4520] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.430008][ T4520] device hsr_slave_0 entered promiscuous mode [ 98.437458][ T4520] device hsr_slave_1 entered promiscuous mode [ 98.444717][ T4520] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.453091][ T4520] Cannot create hsr debugfs directory [ 98.617705][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 98.632400][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 98.656245][ T4464] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.663443][ T4464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.743671][ T4287] Bluetooth: hci3: command 0x041b tx timeout [ 98.754276][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 98.778160][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 98.800387][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 98.816241][ T4464] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.823583][ T4464] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.856458][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 99.045656][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 99.063630][ T4287] Bluetooth: hci0: command 0x0409 tx timeout [ 99.135969][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 99.179742][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 99.304875][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 99.323026][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 99.340038][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 99.354418][ T4300] device hsr_slave_0 left promiscuous mode [ 99.371037][ T4300] device hsr_slave_1 left promiscuous mode [ 99.377746][ T4300] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.391787][ T4300] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.400205][ T4300] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.415127][ T4300] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.423039][ T4300] device bridge_slave_1 left promiscuous mode [ 99.436313][ T4300] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.448896][ T4300] device bridge_slave_0 left promiscuous mode [ 99.459751][ T4300] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.488989][ T4300] device veth1_macvtap left promiscuous mode [ 99.495337][ T4300] device veth0_macvtap left promiscuous mode [ 99.501618][ T4300] device veth1_vlan left promiscuous mode [ 99.508139][ T4300] device veth0_vlan left promiscuous mode [ 99.909093][ T4575] Zero length message leads to an empty skb [ 100.111713][ T4580] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 100.292676][ T4300] team0 (unregistering): Port device team_slave_1 removed [ 100.334789][ T4300] team0 (unregistering): Port device team_slave_0 removed [ 100.374453][ T4300] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 100.414976][ T4300] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 100.663926][ T4287] Bluetooth: hci5: command 0x1003 tx timeout [ 100.671222][ T4282] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 100.733908][ T4300] bond0 (unregistering): Released all slaves [ 100.833735][ T4282] Bluetooth: hci3: command 0x040f tx timeout [ 100.951392][ T4408] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 100.965040][ T4408] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 100.995467][ T4551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 101.004353][ T4551] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 101.013251][ T4551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 101.035161][ T4551] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 101.106892][ T4551] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 101.143745][ T4282] Bluetooth: hci0: command 0x041b tx timeout [ 101.179289][ T4520] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 101.236898][ T4520] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 101.261393][ T4520] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 101.299372][ T4520] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 102.034630][ T4546] chnl_net:caif_netlink_parms(): no params data found [ 102.140779][ T4520] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.233793][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 102.241830][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 102.270767][ T4520] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.298632][ T4546] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.305906][ T4546] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.314256][ T4546] device bridge_slave_0 entered promiscuous mode [ 102.340593][ T4546] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.358674][ T4546] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.375119][ T4546] device bridge_slave_1 entered promiscuous mode [ 102.422205][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 102.432949][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 102.464300][ T4464] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.471515][ T4464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.489910][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 102.509167][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 102.528710][ T4464] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.535986][ T4464] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.564578][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 102.594675][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 102.614319][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 102.658046][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 102.673776][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 102.754955][ T4408] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.789272][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 102.812159][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 102.835650][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 102.895404][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 102.904021][ T4282] Bluetooth: hci3: command 0x0419 tx timeout [ 102.934739][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 102.987619][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 103.019852][ T4614] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 103.045339][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 103.122905][ T4464] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.186914][ T4546] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.223822][ T4282] Bluetooth: hci0: command 0x040f tx timeout [ 103.274038][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 103.298749][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 103.323243][ T4546] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.517033][ T4464] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.844140][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 104.568888][ T4464] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.619024][ T4546] team0: Port device team_slave_0 added [ 104.633036][ T4546] team0: Port device team_slave_1 added [ 104.751130][ T4546] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.774614][ T4546] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.853552][ T4546] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.918237][ T4464] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.998874][ T4546] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.031067][ T4546] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.058274][ T26] audit: type=1326 audit(1780279144.759:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4639 comm="syz.0.66" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f47d219ce59 code=0x0 [ 105.125566][ T4546] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.214527][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 105.231224][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 105.303971][ T4282] Bluetooth: hci0: command 0x0419 tx timeout [ 105.340247][ T4546] device hsr_slave_0 entered promiscuous mode [ 105.353116][ T4546] device hsr_slave_1 entered promiscuous mode [ 105.360353][ T4546] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.368554][ T4546] Cannot create hsr debugfs directory [ 105.435664][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 105.471531][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 105.511902][ T4520] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.569273][ T4408] device veth0_vlan entered promiscuous mode [ 105.593112][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 105.601910][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 105.632102][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 105.661226][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 105.747024][ T4408] device veth1_vlan entered promiscuous mode [ 106.175509][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 106.201171][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 106.233389][ T4408] device veth0_macvtap entered promiscuous mode [ 106.303714][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 106.328886][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 106.356571][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 106.379767][ T4408] device veth1_macvtap entered promiscuous mode [ 107.322568][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 107.409107][ T4408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.473578][ T4408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.513229][ T4408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.540065][ T4408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.574764][ T4408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.585908][ T4408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.605380][ T4408] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.765987][ T4546] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 107.821585][ T4546] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 107.832332][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 107.843557][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 107.928573][ T4408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.963633][ T4408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.998937][ T4408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.052618][ T4408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.083530][ T4408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.115900][ T4408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.287087][ T4408] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.326809][ T4546] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 108.589002][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 108.681103][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 108.878509][ T4408] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.233586][ T4408] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.270524][ T4408] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.317177][ T4408] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.363263][ T4546] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 109.435899][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 109.457040][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 109.580669][ T4520] device veth0_vlan entered promiscuous mode [ 109.615713][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 109.627036][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 109.650828][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 109.663217][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 109.690775][ T4520] device veth1_vlan entered promiscuous mode [ 110.137558][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 110.187278][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 110.227575][ T4465] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.232449][ T4520] device veth0_macvtap entered promiscuous mode [ 110.251695][ T4465] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.284745][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 110.313041][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 110.400590][ T4520] device veth1_macvtap entered promiscuous mode [ 110.635351][ T4546] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.660034][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 110.700422][ T4520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.704503][ T4551] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.733527][ T4520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.748744][ T4551] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.770513][ T4520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.790451][ T4520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.818363][ T4520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.853766][ T4520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.882830][ T4520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.903057][ T4520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.921716][ T4520] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.101917][ T4464] device hsr_slave_0 left promiscuous mode [ 111.132373][ T4464] device hsr_slave_1 left promiscuous mode [ 111.149525][ T4464] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.198762][ T4464] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.242140][ T4464] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.312789][ T4464] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.370733][ T4464] device bridge_slave_1 left promiscuous mode [ 111.414084][ T4464] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.472013][ T4464] device bridge_slave_0 left promiscuous mode [ 111.493514][ T4464] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.680624][ T4464] device veth1_macvtap left promiscuous mode [ 111.714514][ T4464] device veth0_macvtap left promiscuous mode [ 111.771593][ T4464] device veth1_vlan left promiscuous mode [ 111.800430][ T4464] device veth0_vlan left promiscuous mode [ 112.577819][ T26] audit: type=1326 audit(1780279408.310:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4724 comm="syz.3.79" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7c23f9ce59 code=0x0 [ 112.897498][ T4464] team0 (unregistering): Port device team_slave_1 removed [ 112.948429][ T4464] team0 (unregistering): Port device team_slave_0 removed [ 113.069212][ T4464] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 113.117324][ T4464] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 113.719326][ T4464] bond0 (unregistering): Released all slaves [ 113.830163][ T4551] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 113.839127][ T4551] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 113.848751][ T4551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 113.870640][ T4520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.895049][ T4520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.905796][ T4520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.916755][ T4520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.927549][ T4520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.938646][ T4520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.950583][ T4520] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.997908][ T4546] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.031735][ T4551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 114.054178][ T4551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 114.093030][ T4551] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 114.112464][ T4551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 114.134794][ T4520] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.147636][ T4520] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.166798][ T4520] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.177777][ T4520] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.335008][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 114.370690][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 114.380954][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.388158][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.396748][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 114.407230][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 114.416058][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.423293][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.492534][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 114.536185][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 114.577971][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 114.628860][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 114.674970][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 114.774944][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 114.783102][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 114.831736][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 114.874776][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 114.898330][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 114.932704][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 114.951147][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 114.975179][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.983073][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.998581][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 115.077498][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 115.193639][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.211958][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.254750][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 115.878319][ T4771] input: syz0 as /devices/virtual/input/input6 [ 116.922370][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 116.981598][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 117.045304][ T4546] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.687895][ T4803] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 118.469045][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 118.502272][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 118.568747][ T4546] device veth0_vlan entered promiscuous mode [ 118.594391][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 118.614068][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 118.634451][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 118.677792][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 118.711083][ T4546] device veth1_vlan entered promiscuous mode [ 118.800301][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 118.819245][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 118.854808][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 118.888987][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 118.935983][ T4546] device veth0_macvtap entered promiscuous mode [ 118.985663][ T4546] device veth1_macvtap entered promiscuous mode [ 119.089477][ T4546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.176548][ T4546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.211950][ T4546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.258972][ T4546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.287049][ T4546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.342644][ T4546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.364277][ T4546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.387769][ T4546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.431034][ T4546] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.440434][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 119.448959][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 119.499656][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 119.524677][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 119.558043][ T4546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.644238][ T4546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.684497][ T4546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.735901][ T4546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.799305][ T4847] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 119.804190][ T4546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.843664][ T4546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.863526][ T4546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.893602][ T4546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.926983][ T4546] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.947137][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 119.973558][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 119.994327][ T4546] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.003076][ T4546] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.071081][ T4546] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.110737][ T4546] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.370236][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.393540][ T4320] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 120.444531][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.453229][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 120.500505][ T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.539061][ T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.559203][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 120.584153][ T4320] usb 6-1: Using ep0 maxpacket: 16 [ 120.605603][ T4320] usb 6-1: unable to get BOS descriptor or descriptor too short [ 120.635666][ T4320] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 120.669363][ T4320] usb 6-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 120.707943][ T4320] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.782072][ T4320] usb 6-1: Product: syz [ 120.828574][ T4320] usb 6-1: Manufacturer: syz [ 120.867600][ T4320] usb 6-1: SerialNumber: syz [ 121.121447][ T4320] usb 6-1: Audio class v2/v3 interfaces need an interface association [ 121.156087][ T4320] snd-usb-audio: probe of 6-1:1.0 failed with error -22 [ 121.273574][ T4278] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 121.543837][ T4278] usb 7-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x92, skipping [ 121.732097][ T4278] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 121.750991][ T4278] usb 7-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=9e.7f [ 121.773634][ T4278] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.788685][ T4278] usb 7-1: Product: syz [ 121.797666][ T4278] usb 7-1: Manufacturer: syz [ 121.819537][ T4278] usb 7-1: SerialNumber: syz [ 121.851376][ T4278] usb 7-1: config 0 descriptor?? [ 121.889044][ T4278] redrat3 7-1:0.0: Couldn't find all endpoints [ 122.091613][ T4278] usb 7-1: USB disconnect, device number 2 [ 122.683622][ T4278] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 122.700041][ T4892] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 122.888725][ T4278] usb 7-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x92, skipping [ 122.922465][ T4278] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 122.989212][ T4278] usb 7-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=9e.7f [ 123.030858][ T4278] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.083090][ T4278] usb 7-1: Product: syz [ 123.092777][ T4278] usb 7-1: Manufacturer: syz [ 123.120230][ T4278] usb 7-1: SerialNumber: syz [ 123.149712][ T4278] usb 7-1: config 0 descriptor?? [ 123.181556][ T4278] redrat3 7-1:0.0: Couldn't find all endpoints [ 123.383436][ T4323] usb 7-1: USB disconnect, device number 3 [ 124.573365][ T26] audit: type=1326 audit(1780280188.304:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4933 comm="syz.0.128" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f47d219ce59 code=0x0 [ 125.813563][ T4323] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 125.953957][ T4959] binder: 4958:4959 ioctl 4018620d 0 returned -22 [ 126.015845][ T4323] usb 1-1: config 0 has an invalid interface number: 176 but max is 2 [ 126.032007][ T4323] usb 1-1: config 0 has no interface number 1 [ 126.078210][ T4323] usb 1-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 126.105287][ T4323] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.141932][ T4323] usb 1-1: config 0 descriptor?? [ 126.367191][ T4323] qcserial 1-1:0.2: Qualcomm USB modem converter detected [ 126.876192][ T4979] sg_write: data in/out 435164/162 bytes for SCSI command 0x0-- guessing data in; [ 126.876192][ T4979] program syz.7.139 not setting count and/or reply_len properly [ 129.141456][ T5019] netlink: 256 bytes leftover after parsing attributes in process `syz.5.149'. [ 130.801035][ T5050] netlink: 'syz.6.156': attribute type 10 has an invalid length. [ 130.820326][ T5050] netlink: 40 bytes leftover after parsing attributes in process `syz.6.156'. [ 130.849481][ T5050] device dummy0 entered promiscuous mode [ 130.850194][ T5053] vim2m vim2m.0: Fourcc format (0x47524247) invalid. [ 130.867258][ T5050] bridge0: port 3(dummy0) entered blocking state [ 130.899384][ T5050] bridge0: port 3(dummy0) entered disabled state [ 130.923638][ T5050] bridge0: port 3(dummy0) entered blocking state [ 130.930325][ T5050] bridge0: port 3(dummy0) entered forwarding state [ 132.754051][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.760855][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 143.754612][ T4282] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 143.764468][ T4282] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 143.772250][ T4282] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 143.780135][ T4282] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 143.787781][ T4282] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 143.795185][ T4282] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 143.864719][ T4282] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 143.873809][ T4282] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 143.882115][ T4282] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 143.894799][ T4282] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 143.902360][ T4282] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 143.910555][ T4282] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 144.458940][ T5274] chnl_net:caif_netlink_parms(): no params data found [ 144.610695][ T5272] chnl_net:caif_netlink_parms(): no params data found [ 144.788746][ T5274] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.802705][ T5274] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.831286][ T5274] device bridge_slave_0 entered promiscuous mode [ 144.896111][ T5274] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.903298][ T5274] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.942008][ T5274] device bridge_slave_1 entered promiscuous mode [ 145.088878][ T5272] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.105840][ T5272] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.124282][ T5272] device bridge_slave_0 entered promiscuous mode [ 145.140337][ T5274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 145.155998][ T5297] netlink: 8 bytes leftover after parsing attributes in process `syz.5.190'. [ 145.165185][ T5272] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.172315][ T5272] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.185204][ T5272] device bridge_slave_1 entered promiscuous mode [ 145.205279][ T5274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.316812][ T5272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 145.872216][ T4282] Bluetooth: hci5: command 0x0409 tx timeout [ 145.943776][ T4282] Bluetooth: hci6: command 0x0409 tx timeout [ 147.954196][ T4282] Bluetooth: hci5: command 0x041b tx timeout [ 148.023722][ T4282] Bluetooth: hci6: command 0x041b tx timeout [ 150.024838][ T4282] Bluetooth: hci5: command 0x040f tx timeout [ 150.103714][ T4282] Bluetooth: hci6: command 0x040f tx timeout [ 150.904624][ T4287] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 150.919657][ T4287] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 150.928150][ T4287] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 150.936156][ T4287] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 150.946225][ T4287] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 150.953596][ T4287] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 152.103639][ T4287] Bluetooth: hci5: command 0x0419 tx timeout [ 152.183680][ T4282] Bluetooth: hci6: command 0x0419 tx timeout [ 152.983823][ T4287] Bluetooth: hci7: command 0x0409 tx timeout [ 155.063585][ T4287] Bluetooth: hci7: command 0x041b tx timeout [ 155.440444][ T4282] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 155.451424][ T4282] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 155.460936][ T4282] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 155.472891][ T4282] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 155.480633][ T4282] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 155.488168][ T4282] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 157.153678][ T4282] Bluetooth: hci7: command 0x040f tx timeout [ 157.553676][ T4282] Bluetooth: hci8: command 0x0409 tx timeout [ 159.223947][ T4282] Bluetooth: hci7: command 0x0419 tx timeout [ 159.624055][ T4287] Bluetooth: hci8: command 0x041b tx timeout [ 161.703894][ T4287] Bluetooth: hci8: command 0x040f tx timeout [ 161.849297][ T4282] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 161.863294][ T4282] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 161.873873][ T4282] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 161.882497][ T4282] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 161.891735][ T4282] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 161.899073][ T4282] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 163.784007][ T4287] Bluetooth: hci8: command 0x0419 tx timeout [ 163.943671][ T4287] Bluetooth: hci9: command 0x0409 tx timeout [ 166.028227][ T4287] Bluetooth: hci9: command 0x041b tx timeout [ 168.103652][ T4287] Bluetooth: hci9: command 0x040f tx timeout [ 170.183560][ T4287] Bluetooth: hci9: command 0x0419 tx timeout [ 183.033936][ T3640] udevd[3640]: worker [4355] /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.1 is taking a long time [ 194.189344][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.195763][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 203.424540][ T4282] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 203.434092][ T4282] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 203.442000][ T4282] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 203.450708][ T4282] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 203.458549][ T4282] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 203.467289][ T4282] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 203.794575][ T4287] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 203.803861][ T4287] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 203.812710][ T4287] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 203.821536][ T4287] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 203.829447][ T4287] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 203.837055][ T4287] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 205.543637][ T4287] Bluetooth: hci10: command 0x0409 tx timeout [ 205.863625][ T4287] Bluetooth: hci11: command 0x0409 tx timeout [ 207.623679][ T4287] Bluetooth: hci10: command 0x041b tx timeout [ 207.943584][ T4287] Bluetooth: hci11: command 0x041b tx timeout [ 209.703662][ T4287] Bluetooth: hci10: command 0x040f tx timeout [ 210.023727][ T4287] Bluetooth: hci11: command 0x040f tx timeout [ 211.484511][ T4282] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 211.493552][ T4282] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 211.501445][ T4282] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 211.509713][ T4282] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 211.517438][ T4282] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 211.525767][ T4282] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 211.783695][ T4287] Bluetooth: hci10: command 0x0419 tx timeout [ 212.103585][ T4287] Bluetooth: hci11: command 0x0419 tx timeout [ 213.543633][ T4287] Bluetooth: hci12: command 0x0409 tx timeout [ 215.525261][ T4282] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 215.535851][ T4282] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 215.544111][ T4282] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 215.552847][ T4282] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 215.560797][ T4282] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 215.568330][ T4282] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 215.623794][ T4282] Bluetooth: hci12: command 0x041b tx timeout [ 217.623741][ T4282] Bluetooth: hci13: command 0x0409 tx timeout [ 217.703689][ T4282] Bluetooth: hci12: command 0x040f tx timeout [ 219.703671][ T4282] Bluetooth: hci13: command 0x041b tx timeout [ 219.786294][ T4282] Bluetooth: hci12: command 0x0419 tx timeout [ 221.783663][ T4282] Bluetooth: hci13: command 0x040f tx timeout [ 222.534510][ T4287] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 222.544280][ T4287] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 222.552325][ T4287] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 222.561524][ T4287] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 222.570417][ T4287] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 222.579858][ T4287] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 223.863736][ T4287] Bluetooth: hci13: command 0x0419 tx timeout [ 224.663741][ T4287] Bluetooth: hci14: command 0x0409 tx timeout [ 226.743840][ T4287] Bluetooth: hci14: command 0x041b tx timeout [ 228.823840][ T4287] Bluetooth: hci14: command 0x040f tx timeout [ 230.903637][ T4287] Bluetooth: hci14: command 0x0419 tx timeout [ 255.639498][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.645889][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 263.498658][ T4282] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 263.507520][ T4282] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 263.515843][ T4282] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 263.536432][ T4282] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 263.550221][ T4282] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 263.557798][ T4282] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 264.614431][ T4287] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 264.623918][ T4287] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 264.631644][ T4287] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 264.639680][ T4287] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 264.647349][ T4287] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 264.655067][ T4287] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 265.623851][ T4287] Bluetooth: hci15: command 0x0409 tx timeout [ 266.743688][ T4287] Bluetooth: hci16: command 0x0409 tx timeout [ 267.703703][ T4287] Bluetooth: hci15: command 0x041b tx timeout [ 267.943573][ T4287] Bluetooth: hci6: command 0x0406 tx timeout [ 267.949655][ T4287] Bluetooth: hci5: command 0x0406 tx timeout [ 268.823694][ T4287] Bluetooth: hci16: command 0x041b tx timeout [ 269.783845][ T4287] Bluetooth: hci15: command 0x040f tx timeout [ 270.903686][ T4287] Bluetooth: hci16: command 0x040f tx timeout [ 271.694742][ T4287] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 271.705932][ T4287] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 271.715180][ T4287] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 271.724232][ T4287] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 271.731940][ T4287] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 271.740371][ T4287] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 271.863696][ T4287] Bluetooth: hci15: command 0x0419 tx timeout [ 272.983634][ T4287] Bluetooth: hci16: command 0x0419 tx timeout [ 273.063602][ T4287] Bluetooth: hci7: command 0x0406 tx timeout [ 273.783690][ T4287] Bluetooth: hci17: command 0x0409 tx timeout [ 275.863550][ T4287] Bluetooth: hci17: command 0x041b tx timeout [ 275.963908][ T4282] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 275.972713][ T4282] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 275.980765][ T4282] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 275.988738][ T4282] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 275.996671][ T4282] Bluetooth: hci18: unexpected cc 0x0c25 length: 249 > 3 [ 276.005193][ T4282] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 276.103752][ T27] INFO: task kworker/u4:4:56 blocked for more than 143 seconds. [ 276.111716][ T27] Not tainted syzkaller #0 [ 276.128239][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 276.141043][ T27] task:kworker/u4:4 state:D stack:26000 pid:56 ppid:2 flags:0x00004000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 276.155215][ T27] Workqueue: events_unbound fsnotify_connector_destroy_workfn [ 276.193709][ T27] Call Trace: [ 276.197072][ T27] [ 276.200038][ T27] __schedule+0x11d1/0x40e0 [ 276.240514][ T27] ? __sched_text_start+0x8/0x8 [ 276.268342][ T27] ? kthread_data+0x4b/0xc0 [ 276.272936][ T27] ? wq_worker_sleeping+0x60/0x280 [ 276.323504][ T27] schedule+0xb9/0x180 [ 276.328163][ T27] schedule_timeout+0xbd/0x2d0 [ 276.332988][ T27] ? console_conditional_schedule+0x40/0x40 [ 276.343521][ T27] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 276.349575][ T27] ? lock_chain_count+0x20/0x20 [ 276.354721][ T27] ? _raw_spin_lock_irq+0xb7/0xf0 [ 276.359795][ T27] ? _raw_spin_lock_irqsave+0x100/0x100 [ 276.366838][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 276.372095][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 276.377466][ T27] ? wait_for_completion+0x276/0x5a0 [ 276.390624][ T27] wait_for_completion+0x2c7/0x5a0 [ 276.395910][ T27] ? io_schedule+0xd0/0xd0 [ 276.400388][ T27] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 276.412666][ T27] ? debug_object_active_state+0x6a/0x380 [ 276.418584][ T27] __synchronize_srcu+0x2b9/0x350 [ 276.428538][ T27] ? synchronize_srcu_expedited+0x20/0x20 [ 276.434428][ T27] ? rcu_read_lock_any_held+0x130/0x130 [ 276.440037][ T27] ? __rwlock_init+0x140/0x140 [ 276.444968][ T27] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 276.450920][ T27] ? synchronize_srcu+0x192/0x1b0 [ 276.456539][ T27] ? process_one_work+0x7b0/0x1160 [ 276.461713][ T27] fsnotify_connector_destroy_workfn+0x40/0xa0 [ 276.468218][ T27] ? process_one_work+0x7b0/0x1160 [ 276.473375][ T27] process_one_work+0x8a2/0x1160 [ 276.478809][ T27] ? worker_detach_from_pool+0x240/0x240 [ 276.485478][ T27] ? _raw_spin_lock_irq+0xb7/0xf0 [ 276.490563][ T27] ? _raw_spin_lock_irqsave+0x100/0x100 [ 276.497501][ T27] ? kthread_data+0x4b/0xc0 [ 276.502079][ T27] worker_thread+0xaa2/0x1270 [ 276.507242][ T27] kthread+0x29d/0x330 [ 276.511357][ T27] ? worker_clr_flags+0x1a0/0x1a0 [ 276.516800][ T27] ? kthread_blkcg+0xd0/0xd0 [ 276.521436][ T27] ret_from_fork+0x1f/0x30 [ 276.531698][ T27] [ 276.535346][ T27] INFO: task udevd:4355 blocked for more than 143 seconds. [ 276.542584][ T27] Not tainted syzkaller #0 [ 276.552286][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 276.561348][ T27] task:udevd state:D stack:24112 pid:4355 ppid:3640 flags:0x00004002 [ 276.571966][ T27] Call Trace: [ 276.575647][ T27] [ 276.578620][ T27] __schedule+0x11d1/0x40e0 [ 276.583206][ T27] ? __sched_text_start+0x8/0x8 [ 276.588984][ T27] ? __mutex_trylock_common+0x86/0x260 [ 276.595478][ T27] ? trace_raw_output_contention_end+0xd0/0xd0 [ 276.601697][ T27] schedule+0xb9/0x180 [ 276.607463][ T27] schedule_preempt_disabled+0xf/0x20 [ 276.612897][ T27] __mutex_lock+0x562/0xaf0 [ 276.619190][ T27] ? __mutex_lock+0x3b2/0xaf0 [ 276.624170][ T27] ? uevent_show+0x16c/0x320 [ 276.628812][ T27] ? mutex_lock_nested+0x10/0x10 [ 276.634632][ T27] uevent_show+0x16c/0x320 [ 276.639112][ T27] dev_attr_show+0x50/0xb0 [ 276.644595][ T27] sysfs_kf_seq_show+0x349/0x4b0 [ 276.649600][ T27] ? device_get_ownership+0xa0/0xa0 [ 276.655397][ T27] seq_read_iter+0x49b/0xd50 [ 276.660050][ T27] ? common_file_perm+0x171/0x1c0 [ 276.665730][ T27] vfs_read+0x4a7/0xa00 [ 276.669941][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 276.675718][ T27] ? kernel_read+0x1e0/0x1e0 [ 276.680366][ T27] ? __x64_sys_newfstat+0x19a/0x220 [ 276.685925][ T27] ? __fdget_pos+0x2b5/0x360 [ 276.690584][ T27] ksys_read+0x14c/0x250 [ 276.695324][ T27] ? vfs_write+0xa30/0xa30 [ 276.699799][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 276.706060][ T27] do_syscall_64+0x4c/0xa0 [ 276.710520][ T27] ? clear_bhb_loop+0x60/0xb0 [ 276.716316][ T27] ? clear_bhb_loop+0x60/0xb0 [ 276.721052][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 276.731141][ T27] RIP: 0033:0x7f779e0a7407 [ 276.740382][ T27] RSP: 002b:00007ffdc6c3a360 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 276.759075][ T27] RAX: ffffffffffffffda RBX: 00007f779e01d880 RCX: 00007f779e0a7407 [ 276.769364][ T27] RDX: 0000000000001000 RSI: 000055d8eafe6830 RDI: 0000000000000008 [ 276.782842][ T27] RBP: 00007f779e1efff0 R08: 0000000000000000 R09: 0000000000000000 [ 276.793335][ T27] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000a [ 276.808883][ T27] R13: 00007f779e1efea0 R14: 0000000000000000 R15: 000055d8eaf9e500 [ 276.818763][ T27] [ 276.821855][ T27] INFO: task kworker/u4:9:4465 blocked for more than 144 seconds. [ 276.843595][ T27] Not tainted syzkaller #0 [ 276.848586][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 276.865770][ T27] task:kworker/u4:9 state:D stack:26352 pid:4465 ppid:2 flags:0x00004000 [ 276.880282][ T27] Workqueue: events_unbound fsnotify_mark_destroy_workfn [ 276.889623][ T27] Call Trace: [ 276.892939][ T27] [ 276.901522][ T27] __schedule+0x11d1/0x40e0 [ 276.908476][ T27] ? __sched_text_start+0x8/0x8 [ 276.913395][ T27] ? kthread_data+0x4b/0xc0 [ 276.923211][ T27] ? wq_worker_sleeping+0x60/0x280 [ 276.931351][ T27] schedule+0xb9/0x180 [ 276.941224][ T27] schedule_timeout+0xbd/0x2d0 [ 276.952281][ T27] ? console_conditional_schedule+0x40/0x40 [ 276.958408][ T27] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 276.964650][ T27] ? lock_chain_count+0x20/0x20 [ 276.969558][ T27] ? _raw_spin_lock_irq+0xb7/0xf0 [ 276.975345][ T27] ? _raw_spin_lock_irqsave+0x100/0x100 [ 276.980945][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 276.986539][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 276.991791][ T27] ? wait_for_completion+0x276/0x5a0 [ 276.997207][ T27] wait_for_completion+0x2c7/0x5a0 [ 277.002511][ T27] ? io_schedule+0xd0/0xd0 [ 277.007329][ T27] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 277.013274][ T27] ? debug_object_active_state+0x6a/0x380 [ 277.019512][ T27] __synchronize_srcu+0x2b9/0x350 [ 277.024828][ T27] ? synchronize_srcu_expedited+0x20/0x20 [ 277.030604][ T27] ? rcu_read_lock_any_held+0x130/0x130 [ 277.037056][ T27] ? __rwlock_init+0x140/0x140 [ 277.041870][ T27] ? ktime_get_mono_fast_ns+0x199/0x1b0 [ 277.048052][ T27] ? synchronize_srcu+0x192/0x1b0 [ 277.053133][ T27] ? process_one_work+0x7b0/0x1160 [ 277.069233][ T27] fsnotify_mark_destroy_workfn+0x106/0x2f0 [ 277.077419][ T27] ? fsnotify_connector_destroy_workfn+0xa0/0xa0 [ 277.089745][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 277.097202][ T27] ? process_one_work+0x7b0/0x1160 [ 277.102373][ T27] process_one_work+0x8a2/0x1160 [ 277.112709][ T27] ? worker_detach_from_pool+0x240/0x240 [ 277.120762][ T27] ? _raw_spin_lock_irq+0xb7/0xf0 [ 277.131129][ T27] ? _raw_spin_lock_irqsave+0x100/0x100 [ 277.139142][ T27] ? kthread_data+0x4b/0xc0 [ 277.149291][ T27] worker_thread+0xd27/0x1270 [ 277.156231][ T27] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 277.162180][ T27] ? __kthread_parkme+0x162/0x1c0 [ 277.173041][ T27] kthread+0x29d/0x330 [ 277.178694][ T27] ? worker_clr_flags+0x1a0/0x1a0 [ 277.183934][ T27] ? kthread_blkcg+0xd0/0xd0 [ 277.188577][ T27] ret_from_fork+0x1f/0x30 [ 277.193055][ T27] [ 277.196412][ T27] INFO: task syz.0.144:4990 blocked for more than 144 seconds. [ 277.207438][ T27] Not tainted syzkaller #0 [ 277.212411][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 277.229630][ T27] task:syz.0.144 state:D stack:28464 pid:4990 ppid:4275 flags:0x00004004 [ 277.241203][ T27] Call Trace: [ 277.252943][ T27] [ 277.258407][ T27] __schedule+0x11d1/0x40e0 [ 277.263006][ T27] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 277.277826][ T27] ? _raw_spin_unlock+0x40/0x40 [ 277.282750][ T27] ? queue_work_on+0x196/0x1f0 [ 277.289430][ T27] ? __sched_text_start+0x8/0x8 [ 277.294515][ T27] ? wq_worker_last_func+0x40/0x40 [ 277.299679][ T27] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 277.305715][ T27] ? prepare_to_wait_event+0x430/0x470 [ 277.311236][ T27] schedule+0xb9/0x180 [ 277.315458][ T27] synchronize_rcu_expedited+0x6e6/0x890 [ 277.321157][ T27] ? synchronize_rcu+0x3f0/0x3f0 [ 277.326205][ T27] ? lock_chain_count+0x20/0x20 [ 277.331110][ T27] ? __bitmap_and+0x30c/0x330 [ 277.336090][ T27] ? _find_next_bit+0xea/0x130 [ 277.340915][ T27] ? sync_rcu_exp_done_unlocked+0x140/0x140 [ 277.347013][ T27] ? text_poke_sync+0x20/0x20 [ 277.351896][ T27] ? wake_bit_function+0x200/0x200 [ 277.357160][ T27] synchronize_rcu+0x128/0x3f0 [ 277.362000][ T27] ? schedule_delayed_monitor_work+0x160/0x160 [ 277.368525][ T27] ? rcu_read_lock_any_held+0xb0/0x130 [ 277.374874][ T27] ? rcu_read_lock_bh_held+0xf0/0xf0 [ 277.380231][ T27] sched_core_get+0xab/0x1c0 [ 277.385592][ T27] sched_core_alloc_cookie+0x71/0xa0 [ 277.390927][ T27] ? sched_core_share_pid+0xd4/0x770 [ 277.409962][ T27] sched_core_share_pid+0x336/0x770 [ 277.417931][ T27] ? sched_core_free+0x70/0x70 [ 277.422750][ T27] ? security_task_prctl+0xd0/0x100 [ 277.433235][ T27] __se_sys_prctl+0x237/0x1100 [ 277.438959][ T27] ? __x64_sys_prctl+0xc0/0xc0 [ 277.444086][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 277.449332][ T27] ? __x64_sys_prctl+0x1c/0xc0 [ 277.454388][ T27] do_syscall_64+0x4c/0xa0 [ 277.458871][ T27] ? clear_bhb_loop+0x60/0xb0 [ 277.463825][ T27] ? clear_bhb_loop+0x60/0xb0 [ 277.468600][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 277.474750][ T27] RIP: 0033:0x7f47d219ce59 [ 277.479206][ T27] RSP: 002b:00007f47d312f028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 277.487914][ T27] RAX: ffffffffffffffda RBX: 00007f47d2415fa0 RCX: 00007f47d219ce59 [ 277.496005][ T27] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000003e [ 277.504820][ T27] RBP: 00007f47d2232d6f R08: 0000000000000000 R09: 0000000000000000 [ 277.512839][ T27] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 277.520931][ T27] R13: 00007f47d2416038 R14: 00007f47d2415fa0 R15: 00007ffcf2f51278 [ 277.529092][ T27] [ 277.532198][ T27] INFO: task syz.3.145:4993 blocked for more than 144 seconds. [ 277.539898][ T27] Not tainted syzkaller #0 [ 277.545656][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 277.555802][ T27] task:syz.3.145 state:D stack:25424 pid:4993 ppid:4273 flags:0x00004004 [ 277.566507][ T27] Call Trace: [ 277.569824][ T27] [ 277.572793][ T27] __schedule+0x11d1/0x40e0 [ 277.577779][ T27] ? __sched_text_start+0x8/0x8 [ 277.582693][ T27] ? __mutex_trylock_common+0x86/0x260 [ 277.588525][ T27] ? trace_raw_output_contention_end+0xd0/0xd0 [ 277.595179][ T27] schedule+0xb9/0x180 [ 277.599309][ T27] schedule_preempt_disabled+0xf/0x20 [ 277.605044][ T27] __mutex_lock+0x562/0xaf0 [ 277.609595][ T27] ? __mutex_lock+0x3b2/0xaf0 [ 277.614702][ T27] ? synchronize_rcu_expedited+0x3c0/0x890 [ 277.620572][ T27] ? mutex_lock_nested+0x10/0x10 [ 277.626058][ T27] ? do_raw_spin_lock+0x128/0x2f0 [ 277.631130][ T27] ? __rwlock_init+0x140/0x140 [ 277.637714][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 277.642968][ T27] synchronize_rcu_expedited+0x3c0/0x890 [ 277.648986][ T27] ? synchronize_rcu+0x3f0/0x3f0 [ 277.654966][ T27] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 277.661454][ T27] ? lock_chain_count+0x20/0x20 [ 277.666822][ T27] ? namespace_unlock+0x1d7/0x430 [ 277.671910][ T27] ? __lock_acquire+0x7d10/0x7d10 [ 277.677350][ T27] ? __wake_up+0x12e/0x1a0 [ 277.681822][ T27] ? __wake_up_bit+0x210/0x210 [ 277.690608][ T27] ? shrink_dentry_list+0x688/0x6a0 [ 277.699202][ T27] ? up_write+0x1bb/0x420 [ 277.704332][ T27] namespace_unlock+0x23f/0x430 [ 277.709248][ T27] ? __lock_acquire+0x7d10/0x7d10 [ 277.714729][ T27] ? umount_tree+0xe20/0xe20 [ 277.719365][ T27] ? umount_mnt+0x2c0/0x2c0 [ 277.724248][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 277.729487][ T27] ? __fput+0x7b6/0x920 [ 277.734018][ T27] dissolve_on_fput+0x103/0x130 [ 277.738928][ T27] __fput+0x7b6/0x920 [ 277.742970][ T27] task_work_run+0x1d0/0x260 [ 277.748659][ T27] ? task_work_cancel+0x220/0x220 [ 277.754674][ T27] ? exit_to_user_mode_loop+0x3b/0x110 [ 277.760537][ T27] exit_to_user_mode_loop+0xe6/0x110 [ 277.766269][ T27] exit_to_user_mode_prepare+0xee/0x180 [ 277.771887][ T27] syscall_exit_to_user_mode+0x16/0x40 [ 277.777877][ T27] do_syscall_64+0x58/0xa0 [ 277.782337][ T27] ? clear_bhb_loop+0x60/0xb0 [ 277.787823][ T27] ? clear_bhb_loop+0x60/0xb0 [ 277.792571][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 277.798889][ T27] RIP: 0033:0x7f7c23f9ce59 [ 277.803349][ T27] RSP: 002b:00007fff790118b8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 277.812114][ T27] RAX: 0000000000000000 RBX: 00007f7c24217da0 RCX: 00007f7c23f9ce59 [ 277.820795][ T27] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 277.829065][ T27] RBP: 00007f7c24217da0 R08: 00007f7c24216128 R09: 0000000000000000 [ 277.837338][ T27] R10: 00000000003ff394 R11: 0000000000000246 R12: 000000000001f4fe [ 277.845610][ T27] R13: 00007f7c2421618c R14: 000000000001f332 R15: 00007f7c24216180 [ 277.857913][ T27] [ 277.861051][ T27] [ 277.861051][ T27] Showing all locks held in the system: [ 277.870192][ T27] 1 lock held by rcu_tasks_kthre/12: [ 277.875722][ T27] #0: ffffffff8cb2e770 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 277.887422][ T27] 1 lock held by rcu_tasks_trace/13: [ 277.892742][ T27] #0: ffffffff8cb2ef90 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 277.904213][ T27] 1 lock held by khungtaskd/27: [ 277.909099][ T27] #0: ffffffff8cb2dde0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 277.919350][ T27] 3 locks held by kworker/u4:2/32: [ 277.924950][ T27] #0: ffff888017479138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 277.936552][ T27] #1: ffffc90000a8fd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 277.947342][ T4282] Bluetooth: hci17: command 0x040f tx timeout [ 277.970602][ T27] #2: ffffffff8dd49768 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xa/0x50 [ 277.993602][ T27] 2 locks held by kworker/u4:4/56: [ 277.998858][ T27] #0: ffff888017479138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 278.010325][ T27] #1: ffffc90001577d00 (connector_reaper_work){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 278.020986][ T27] 1 lock held by dhcpcd/3935: [ 278.026053][ T4282] Bluetooth: hci18: command 0x0409 tx timeout [ 278.033980][ T27] #0: ffffffff8dd49768 (rtnl_mutex){+.+.}-{3:3}, at: devinet_ioctl+0x288/0x1af0 [ 278.043316][ T27] 2 locks held by getty/4030: [ 278.048540][ T27] #0: ffff88814cebd098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 278.058628][ T27] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x429/0x1390 [ 278.069229][ T27] 3 locks held by kworker/0:5/4318: [ 278.074776][ T27] #0: ffff88814ccf5938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 278.086096][ T27] #1: ffffc90004827d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 278.100137][ T27] #2: ffffffff8dd49768 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x15/0x30 [ 278.110147][ T27] 6 locks held by kworker/1:6/4320: [ 278.115597][ T27] 4 locks held by udevd/4355: [ 278.120307][ T27] #0: ffff88802e396e80 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xad/0xd50 [ 278.129475][ T27] #1: ffff8880266f9888 (&of->mutex){+.+.}-{3:3}, at: kernfs_seq_start+0x58/0x410 [ 278.139071][ T27] #2: ffff88807b89b578 (kn->active#5){++++}-{0:0}, at: kernfs_seq_start+0xae/0x410 [ 278.148962][ T27] #3: ffff88807a929118 (&dev->mutex){....}-{3:3}, at: uevent_show+0x16c/0x320 [ 278.158195][ T27] 2 locks held by kworker/u4:9/4465: [ 278.163729][ T27] #0: ffff888017479138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 278.175247][ T27] #1: ffffc90004cafd00 ((reaper_work).work){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 278.185864][ T4282] Bluetooth: hci8: command 0x0406 tx timeout [ 278.192048][ T27] 2 locks held by kworker/u4:11/4551: [ 278.197905][ T27] 2 locks held by syz.0.144/4990: [ 278.203068][ T27] #0: ffffffff8c9ec328 (sched_core_mutex){+.+.}-{3:3}, at: sched_core_get+0x49/0x1c0 [ 278.213944][ T27] #1: ffffffff8cb33ab8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x2ec/0x890 [ 278.225473][ T27] 1 lock held by syz.3.145/4993: [ 278.230458][ T27] #0: ffffffff8cb33ab8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3c0/0x890 [ 278.241808][ T27] 3 locks held by kvm-nx-lpage-re/5133: [ 278.247605][ T27] #0: ffffffff8cb56868 (cgroup_mutex){+.+.}-{3:3}, at: cgroup_attach_task_all+0x22/0xe0 [ 278.257757][ T27] #1: ffffffff8c9ca6b0 (cpu_hotplug_lock){++++}-{0:0}, at: cgroup_attach_lock+0xd/0x30 [ 278.267838][ T27] #2: ffffffff8cb56a50 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: cgroup_attach_task_all+0x2c/0xe0 [ 278.279217][ T27] 1 lock held by dhcpcd/5140: [ 278.284141][ T27] #0: ffff88805c116130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xce0 [ 278.294286][ T27] 1 lock held by dhcpcd/5239: [ 278.299001][ T27] #0: ffff88805b29c130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xce0 [ 278.309028][ T27] 1 lock held by syz-executor/5272: [ 278.314505][ T27] #0: ffffffff8dd49768 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x824/0xfc0 [ 278.325078][ T27] 1 lock held by syz-executor/5274: [ 278.330315][ T27] #0: ffffffff8dd49768 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x824/0xfc0 [ 278.340110][ T27] 1 lock held by syz-executor/5318: [ 278.346187][ T27] #0: ffffffff8dd49768 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x824/0xfc0 [ 278.355891][ T27] 1 lock held by syz-executor/5321: [ 278.361213][ T27] #0: ffffffff8dd49768 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x824/0xfc0 [ 278.371135][ T27] 1 lock held by syz-executor/5324: [ 278.376869][ T27] #0: ffffffff8dd49768 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x824/0xfc0 [ 278.386595][ T27] 1 lock held by syz-executor/5327: [ 278.391831][ T27] #0: ffffffff8dd49768 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x824/0xfc0 [ 278.401659][ T27] 1 lock held by syz-executor/5330: [ 278.407092][ T27] #0: ffffffff8dd49768 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x824/0xfc0 [ 278.419088][ T27] 1 lock held by syz-executor/5333: [ 278.427658][ T27] #0: ffffffff8dd49768 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x824/0xfc0 [ 278.448976][ T27] 1 lock held by syz-executor/5336: [ 278.457264][ T27] #0: ffffffff8dd49768 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x824/0xfc0 [ 278.473023][ T27] 1 lock held by syz-executor/5339: [ 278.478919][ T27] #0: ffffffff8dd49768 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x824/0xfc0 [ 278.488838][ T27] 1 lock held by syz-executor/5342: [ 278.494287][ T27] #0: ffffffff8dd49768 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x824/0xfc0 [ 278.504044][ T27] 1 lock held by syz-executor/5345: [ 278.509283][ T27] #0: ffffffff8dd49768 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x824/0xfc0 [ 278.519055][ T27] 1 lock held by syz-executor/5348: [ 278.524892][ T27] #0: ffffffff8dd49768 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x824/0xfc0 [ 278.538711][ T27] 1 lock held by syz-executor/5351: [ 278.547300][ T27] #0: ffffffff8dd49768 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x824/0xfc0 [ 278.557327][ T27] [ 278.559689][ T27] ============================================= [ 278.559689][ T27] [ 278.570949][ T27] NMI backtrace for cpu 0 [ 278.575332][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 278.582570][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 278.592654][ T27] Call Trace: [ 278.595967][ T27] [ 278.598930][ T27] dump_stack_lvl+0x188/0x24e [ 278.603645][ T27] ? irq_work_queue+0xb8/0x140 [ 278.608455][ T27] ? show_regs_print_info+0x12/0x12 [ 278.613688][ T27] ? load_image+0x400/0x400 [ 278.618227][ T27] ? vprintk_emit+0x59f/0x6a0 [ 278.622964][ T27] ? printk_sprint+0x460/0x460 [ 278.627779][ T27] nmi_cpu_backtrace+0x3e6/0x460 [ 278.632766][ T27] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 278.638974][ T27] ? _printk+0xda/0x130 [ 278.643174][ T27] ? load_image+0x400/0x400 [ 278.647728][ T27] ? load_image+0x400/0x400 [ 278.652274][ T27] ? nmi_trigger_cpumask_backtrace+0xf3/0x450 [ 278.658390][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 278.664500][ T27] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 278.670533][ T27] watchdog+0xeee/0xf30 [ 278.674733][ T27] ? watchdog+0x1ed/0xf30 [ 278.679117][ T27] kthread+0x29d/0x330 [ 278.683223][ T27] ? hungtask_pm_notify+0x40/0x40 [ 278.688295][ T27] ? kthread_blkcg+0xd0/0xd0 [ 278.692939][ T27] ret_from_fork+0x1f/0x30 [ 278.697407][ T27] [ 278.700888][ T27] Sending NMI from CPU 0 to CPUs 1: [ 278.706232][ C1] NMI backtrace for cpu 1 [ 278.706242][ C1] CPU: 1 PID: 4551 Comm: kworker/u4:11 Not tainted syzkaller #0 [ 278.706258][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 278.706268][ C1] Workqueue: bat_events batadv_nc_worker [ 278.706300][ C1] RIP: 0010:lock_release+0x21c/0x920 [ 278.706326][ C1] Code: 89 44 24 28 83 f8 32 0f 83 f1 04 00 00 4b 8d 04 b6 4c 8d 24 c3 48 89 c3 4c 89 e7 48 8b 74 24 10 e8 59 c8 c9 08 44 89 7c 24 3c <44> 89 fa 85 c0 0f 84 d9 01 00 00 4d 85 e4 0f 84 03 03 00 00 4d 8d [ 278.706339][ C1] RSP: 0018:ffffc900033d7a40 EFLAGS: 00000046 [ 278.706352][ C1] RAX: 0000000000000001 RBX: 000000000000000a RCX: 0000000000000001 [ 278.706362][ C1] RDX: 0000000000000000 RSI: ffffffff8cb2dde0 RDI: ffff88802542a8f0 [ 278.706374][ C1] RBP: ffffc900033d7b60 R08: ffffffff8e200c2f R09: 1ffffffff1c40185 [ 278.706386][ C1] R10: dffffc0000000000 R11: fffffbfff1c40186 R12: ffff88802542a8f0 [ 278.706398][ C1] R13: dffffc0000000000 R14: 0000000000000002 R15: 0000000000000002 [ 278.706408][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 278.706422][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 278.706433][ C1] CR2: 00007ffeebe30e0c CR3: 000000000c88e000 CR4: 00000000003526e0 [ 278.706459][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 278.706468][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 278.706477][ C1] Call Trace: [ 278.706482][ C1] [ 278.706488][ C1] ? batadv_nc_process_nc_paths+0xba/0x390 [ 278.706512][ C1] ? __lock_acquire+0x7d10/0x7d10 [ 278.706536][ C1] ? batadv_nc_fwd_flush+0x330/0x330 [ 278.706557][ C1] ? batadv_nc_fwd_flush+0x330/0x330 [ 278.706579][ C1] batadv_nc_process_nc_paths+0x2f7/0x390 [ 278.706602][ C1] ? batadv_nc_process_nc_paths+0xba/0x390 [ 278.706624][ C1] batadv_nc_worker+0x527/0x600 [ 278.706646][ C1] ? process_one_work+0x7b0/0x1160 [ 278.706664][ C1] process_one_work+0x8a2/0x1160 [ 278.706686][ C1] ? worker_detach_from_pool+0x240/0x240 [ 278.706706][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 278.706725][ C1] ? _raw_spin_lock_irqsave+0x100/0x100 [ 278.706744][ C1] ? kthread_data+0x4b/0xc0 [ 278.706768][ C1] worker_thread+0xaa2/0x1270 [ 278.706789][ C1] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 278.706810][ C1] ? __kthread_parkme+0x162/0x1c0 [ 278.706835][ C1] kthread+0x29d/0x330 [ 278.706847][ C1] ? worker_clr_flags+0x1a0/0x1a0 [ 278.706864][ C1] ? kthread_blkcg+0xd0/0xd0 [ 278.706878][ C1] ret_from_fork+0x1f/0x30 [ 278.706903][ C1] [ 278.758501][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 278.758550][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 278.758603][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 278.758635][ T27] Call Trace: [ 278.758657][ T27] [ 278.758685][ T27] dump_stack_lvl+0x188/0x24e [ 278.758750][ T27] ? memcpy+0x3c/0x60 [ 278.758820][ T27] ? show_regs_print_info+0x12/0x12 [ 278.758873][ T27] ? load_image+0x400/0x400 [ 278.758967][ T27] panic+0x2e5/0x730 [ 278.759028][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 278.759122][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 278.759187][ T27] ? __irq_work_queue_local+0x12c/0x190 [ 278.759281][ T27] ? nmi_trigger_cpumask_backtrace+0x35b/0x450 [ 278.759369][ T27] ? nmi_trigger_cpumask_backtrace+0x360/0x450 [ 278.759475][ T27] watchdog+0xf2d/0xf30 [ 278.759557][ T27] ? watchdog+0x1ed/0xf30 [ 278.759626][ T27] kthread+0x29d/0x330 [ 278.759671][ T27] ? hungtask_pm_notify+0x40/0x40 [ 279.054949][ T27] ? kthread_blkcg+0xd0/0xd0 [ 279.059574][ T27] ret_from_fork+0x1f/0x30 [ 279.064047][ T27] [ 279.067676][ T27] Kernel Offset: disabled [ 279.072047][ T27] Rebooting in 86400 seconds..