last executing test programs: 7.339898693s ago: executing program 3 (id=211): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002a40)=@delchain={0x668, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x63c, 0x2, [@TCA_BPF_ACT={0x638, 0x1, [@m_bpf={0xfc, 0x11, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_NAME={0x5, 0x6, '\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x3, 0xffffffffffffffff, 0x10001, 0x6}}]}, {0x9d, 0x6, "a41f25d22b1bae1b6bfb4a42ad5ba9db462fca41280c331f630e2c9f0be1093117392575082305ebc27660464ef802792ce06133244235023f0f4882fc0a47f4d5e499a8857cd81b0e6fda422cbc53ad098872214190756df6bbd0e760248aa97e200702fd569bd27d4a70df1d4a123ffc42d2592c81751e15e260622f14aeaaca5dc8acab93651fdd1d5614d98f28fc76d402e1028d910282"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_xt={0xdc, 0x5, 0x0, 0x0, {{0x7}, {0xb4, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xae, 0x6, {0x7, 'raw\x00', 0x7, 0x100, "5922b40f3b9231ba6e0c37dcda932a70335da3c7ed969269be350eede0a5fda559f5cb1d2965da3399446c574f0d7ed3b4810fc3efe0304c7bb1d3ed00a60a15519cae499f11ac626316a075637035e57ffcbd48e9b64edfcef2bcef40dc7e09e080d742bd84c2df1d8326e58c401490153b89d988036ca696f840b6fd058e9831b7d555"}}]}, {0x4}, {0xc, 0x7, {0x0, 0xeb0757422c733451}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_bpf={0xb8, 0x8, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}]}, {0x7d, 0x6, "5d3aee85a6264cff4a2163adaec321e008985cfa435b8922eeb16f1932265618158a3fe72c442a68b182e8f673f9251a03dc831c5947be17ca906c3dcb99adb55bc5f0ad8886f235f45d7e29bb727715f2e7a3200ac63eb79f7a023835874514b60b0177c40370157c0c21b37875e7e4a2e75b3cc54be7d719"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_tunnel_key={0xf8, 0x8, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast1}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private0}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @local}]}, {0x81, 0x6, "51719d53a2b05eda58a80a40d29b01394b8749d7d9ef9f47cce75187b6f333f4bfe797fa4227bf38cf0b71e1b4888d8d1ed410a788c182ba498076ca9ab3d63a8f29175d44a2e8364296c34ac0cdb8972288ecf6515bec4861a53e1e18e54679f5666b0536d0a008aa9b3be1f5e00c4c72460249c372de16eb2cfc1571"}, {0xc}, {0xc, 0x8, {0x3, 0xddc47d017e85c037}}}}, @m_xt={0x2ac, 0x13, 0x0, 0x0, {{0x7}, {0x158, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x74, 0x6, {0x9, 'nat\x00', 0xef, 0x7, "859b467c76be5255b2d4f6101cf6d6cb72c6b46512ecba82df24523b07075e859fd68154d7171a2ca3415ec79cc8ff85b058dae9f1d49e867787957d80637320c0378f6dd94a52c2fc85"}}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TARG={0x2a, 0x6, {0x800, 'security\x00', 0x1, 0x7}}, @TCA_IPT_TARG={0x8f, 0x6, {0x8, 'filter\x00', 0xd, 0x6ccd, "51100666dd78f1337c421065ba00caa97aaa8e1aa207a78c6d7e2a3e620334de1a64a8d40af7536c5a07a1997c6fd28e7ed1f866f9454e1014a5129fbeaf1a76cb7b54d80907f7d86c39ff782b12b0422666997d539a25e55b0591b44929ef0dcea5434727"}}]}, {0x12d, 0x6, "3f664d65ad79178dad4d7815e4c50308bf9a3f35e2b90387936ecd06a67777e4d51dfa578f9f5021013f0c9a057b8f82000000000000000000000000007f81188b2cda51230f1a7c6035500fcba2a0c1e8df61c1a24ebdf1b89f29be8825795496195eb50cd86bf94eb7c2f2f3cd2a74145b5e23908868d084fa1aeb5cf35b1d008b539cc91d0cb1e1304dc65d40df4446cb4725e42a047c2fc7ba3b1e387f5628b3c86a55e4972d016f00000378526b1797e51bbca47fa852a731a6d7b7678b453e7c5c4642b54dcee1032681e6853f7c2f7f8aa5667dceac0f2e9f55d94a322ff7f926c35a7b8745989c4b1c88fbc02fb1d34f0dc8917bc6a1b7ffa0d4bbddada56c96a3f61363e90cdb6db84cab4aff681e54e5af5ebafd066309a6e03c9bdba1eb03c25e75d04d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x668}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 7.04955316s ago: executing program 3 (id=213): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000200)="72056dca193ce7", 0x7) 6.946310572s ago: executing program 3 (id=216): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x20000040) r0 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6.737892047s ago: executing program 3 (id=220): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a2e0000001d0a83cd3ca60000000000000a0000090900010073797a3100000000090002"], 0x54}, 0x1, 0x0, 0x0, 0x40091}, 0x24004844) 6.560128952s ago: executing program 3 (id=221): add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x800}, 0x50) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="043e1f0a00c900"], 0x22) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x9590f6cc3ea35512) accept(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x20, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x20}}, 0x0) 3.73481969s ago: executing program 3 (id=224): setgroups(0x41b7, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0]) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/instances/inst1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/events/irq_vectors/local_timer_exit/enable\x00', 0x1, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='1', 0x1) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0xfffe, @loopback}}, 0x1e) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={r3, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) 3.429659177s ago: executing program 4 (id=229): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) poll(&(0x7f0000000340)=[{r0, 0x8000}], 0x1, 0x9) 3.366378069s ago: executing program 2 (id=230): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x30, 0x0, 0xb, 0x301, 0x0, 0x0, {0x7}, [@NFTA_COMPAT_NAME={0xa, 0x1, '@%(,.\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008804}, 0x4000000) 3.33516716s ago: executing program 1 (id=231): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b924, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0x0, 0xb}, {0x1, 0x6}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xad43, 0x2, 0x0, 0x10000, 0x2}, 0x100, 0x1, 0x1, 0x5, 0x1000, 0x12, 0xc, 0x1e, 0x7, 0x1, {0x9, 0x2, 0x1, 0x6, 0x4, 0xfd}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x20000010) 3.265493732s ago: executing program 4 (id=233): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, 0x0, 0x0) r1 = getpid() r2 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000500)={0x5, 0x0, [{0x100000, 0x0, 0x0}, {0x40000, 0xa1, &(0x7f0000000240)=""/161}, {0x60000, 0x0, 0x0}, {0x3b000, 0x0, 0x0}, {0x100000, 0x81, &(0x7f0000000440)=""/129}]}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r2) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b0000000000000000000000c4ffffff00", @ANYBLOB, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="01000000000000000500"/28], 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendto$inet(r0, 0x0, 0x0, 0x8000, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) r5 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(r5, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') r7 = openat(r6, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0) write(r7, &(0x7f0000000d00)='nf 127.0.0.1 2000000000 l\\calhost\n', 0x24) 3.075894506s ago: executing program 2 (id=234): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r2) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x30, r3, 0x109, 0x0, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xb}]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x0) 3.002300018s ago: executing program 1 (id=235): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xc9a9c042ad77c5e5) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f0000000040), 0x0, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c4605069e0d00000000000000000300030009000000ca020000380000005e02000004040000000020000200f8ffff0300020000ceb4000051e5746407000000"], 0x78) close(r0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 2.893865941s ago: executing program 1 (id=236): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000101050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000000c00078008000640"], 0x5c}}, 0x0) 2.88325149s ago: executing program 2 (id=237): recvmsg$inet_nvme(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f0000000000)=@xdp, 0x80, 0x0}, 0x2000) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f00000015c0)={0x30, 0x14, 0xb11189a7c6c17303, 0x70bd2d, 0x25dfdbfc, "", [@typed={0x4, 0xe7}, @typed={0xc, 0x11c, 0x0, 0x0, @u64=0x2}, @typed={0xc, 0x92, 0x0, 0x0, @u64=0x3}, @nested={0x4, 0x15b}]}, 0x30}, {&(0x7f0000001680)={0x10, 0x1f, 0x400, 0x70bd29, 0x25dfdbfc}, 0x10}], 0x2, 0x0, 0x0, 0x4000}, 0x40000) 2.772806633s ago: executing program 1 (id=238): prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) capset(&(0x7f0000000080)={0x20080522, 0xffffffffffffffff}, 0x0) fanotify_mark(0xffffffffffffffff, 0x105, 0x4800003a, r0, 0x0) truncate(0x0, 0x7f0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x120, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.swap.current\x00', 0x275a, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000180)) 2.672096426s ago: executing program 0 (id=239): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x1, 0xfe00, &(0x7f0000001000)="01"}) 2.573751778s ago: executing program 2 (id=240): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x38, r1, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xddb}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) 2.161221268s ago: executing program 0 (id=241): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="740000001000ffff25bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="17200000212000004c0012800c0001006d6163766c616e003c00028008000300030000000800010010000000280005800a00040096aaaaaaaaaa00000a"], 0x74}, 0x1, 0x0, 0x0, 0x1}, 0xc000) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2.131331019s ago: executing program 4 (id=242): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x6) r3 = openat(0xffffffffffffff9c, 0x0, 0x24000, 0x0) mkdirat$cgroup(r3, 0x0, 0x1ff) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f00000003c0)={@llc={0x1a, 0x230, 0x6, 0xee, 0x6, 0xd2, @broadcast}, {0x0}, 0x0, 0x10}, 0xa0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(0x0, &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r4, &(0x7f0000000240)=""/112, 0x349b7f55) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000040)=""/64, &(0x7f0000000080)=0x40) 2.021803931s ago: executing program 2 (id=243): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000680)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$AUDIT_TTY_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x3f9, 0x100, 0x70bd28, 0x25dfdbfe, {0x1}}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x4000881) 1.505811794s ago: executing program 1 (id=244): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000100)=0x9, 0x4) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x1, 0x1, 0x1, 0x6, 0x4, 0x10000, "5debca001a5fbf0900000000000000ff", 0x2, 0x3, 0x1c, 0x0, 0x0, 0x7f}) sendmsg$inet(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000001c0)="1fd93fd76d4934184bbec63c656291062a3d29cd3034d4ceaba77debecd9573575cd14ce0838f22abc3c4abd5ed67a90ed87b702e18760b6d86669edc113fc3d0fb3", 0x42}, {&(0x7f0000000380)="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", 0x52e}], 0x2}, 0x8841) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.311623579s ago: executing program 0 (id=245): ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000)=0x12) munmap(&(0x7f0000000000/0x4000)=nil, 0x4000) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) rt_sigsuspend(&(0x7f0000000180)={[0x7ff]}, 0x8) 1.25775653s ago: executing program 2 (id=246): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000640)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x1}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000040)="f8", 0x1}], 0x1}}], 0x1, 0x20008050) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4080) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x964, 0x89f8}, 0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f00000002c0), 0x4) 672.776864ms ago: executing program 4 (id=247): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000600)=""/102, 0x66}, {&(0x7f0000000200)=""/68, 0x44}], 0x2}, 0x40010140) 666.177694ms ago: executing program 0 (id=248): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r0, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9}) close(0x3) writev(0xffffffffffffffff, 0x0, 0x0) 597.817996ms ago: executing program 1 (id=249): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/vhci_hcd/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='vhci_hcd.0', 0xa) 306.186983ms ago: executing program 4 (id=250): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a, 0x10000}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x300, 0x1, 0x54, 0x0, 0x1}, 0x9c) 297.590243ms ago: executing program 0 (id=260): socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) sendmsg$inet6(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000280)="535a3f06", 0x4}, {0x0}, {0x0}], 0x3, 0xfffffffffffffffd}, 0x20000040) 113.733998ms ago: executing program 0 (id=251): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000840)={'bond0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x1d, r1}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=@can={{0x1, 0x0, 0x1, 0x1}, 0x5, 0x2, 0x0, 0x0, "a4b0fe576d4e37e6"}, 0x10}, 0x2, 0x0, 0x0, 0x20000004}, 0x1004c009) 0s ago: executing program 4 (id=252): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, 0x0, 0x0) r1 = getpid() r2 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000500)={0x5, 0x0, [{0x100000, 0x0, 0x0}, {0x40000, 0xa1, &(0x7f0000000240)=""/161}, {0x60000, 0x0, 0x0}, {0x3b000, 0x0, 0x0}, {0x100000, 0x81, &(0x7f0000000440)=""/129}]}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r2) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b0000000000000000000000c4ffffff00", @ANYBLOB, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="01000000000000000500"/28], 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendto$inet(r0, 0x0, 0x0, 0x8000, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) r5 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(r5, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') r7 = openat(r6, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0) write(r7, &(0x7f0000000d00)='nf 127.0.0.1 2000000000 l\\calhost\n', 0x24) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.14' (ED25519) to the list of known hosts. [ 64.546751][ T4173] cgroup: Unknown subsys name 'net' [ 64.689691][ T4173] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.228811][ T4173] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 67.642987][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 67.709253][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 67.811972][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.822777][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.831547][ T4188] device bridge_slave_0 entered promiscuous mode [ 67.841191][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 67.859380][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.867150][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.876586][ T4188] device bridge_slave_1 entered promiscuous mode [ 67.929551][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 67.946392][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 67.958970][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.975900][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.983128][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.992561][ T4187] device bridge_slave_0 entered promiscuous mode [ 68.001799][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.008968][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.017183][ T4187] device bridge_slave_1 entered promiscuous mode [ 68.030479][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.105782][ T4188] team0: Port device team_slave_0 added [ 68.113630][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.140446][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.154126][ T4188] team0: Port device team_slave_1 added [ 68.172772][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.180615][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.189456][ T4186] device bridge_slave_0 entered promiscuous mode [ 68.202999][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.210239][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.218383][ T4186] device bridge_slave_1 entered promiscuous mode [ 68.260560][ T4187] team0: Port device team_slave_0 added [ 68.273976][ T4187] team0: Port device team_slave_1 added [ 68.286855][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.294078][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.320511][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.340195][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.348708][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.376514][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.388562][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.396398][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.404707][ T4189] device bridge_slave_0 entered promiscuous mode [ 68.426353][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.441080][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.448397][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.457311][ T4189] device bridge_slave_1 entered promiscuous mode [ 68.477805][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.486104][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.494315][ T4191] device bridge_slave_0 entered promiscuous mode [ 68.504858][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.528316][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.535659][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.562109][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.574672][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.582905][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.593858][ T4191] device bridge_slave_1 entered promiscuous mode [ 68.616985][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.628427][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.635660][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.662445][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.701747][ T4188] device hsr_slave_0 entered promiscuous mode [ 68.710096][ T4188] device hsr_slave_1 entered promiscuous mode [ 68.718651][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.734122][ T4186] team0: Port device team_slave_0 added [ 68.741960][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.753516][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.784990][ T4186] team0: Port device team_slave_1 added [ 68.797514][ T4189] team0: Port device team_slave_0 added [ 68.837388][ T4191] team0: Port device team_slave_0 added [ 68.845173][ T4189] team0: Port device team_slave_1 added [ 68.856213][ T4187] device hsr_slave_0 entered promiscuous mode [ 68.863141][ T4187] device hsr_slave_1 entered promiscuous mode [ 68.870216][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.878110][ T4187] Cannot create hsr debugfs directory [ 68.901703][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.909191][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.936592][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.950980][ T4191] team0: Port device team_slave_1 added [ 68.976170][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.983507][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.010540][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.042543][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.049841][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.078924][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.117101][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.126131][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.154230][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.175204][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.182549][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.209807][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.227330][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.234654][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.261439][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.295608][ T4186] device hsr_slave_0 entered promiscuous mode [ 69.302329][ T4186] device hsr_slave_1 entered promiscuous mode [ 69.309416][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.317319][ T4186] Cannot create hsr debugfs directory [ 69.374906][ T1345] Bluetooth: hci2: command 0x0409 tx timeout [ 69.381613][ T1345] Bluetooth: hci4: command 0x0409 tx timeout [ 69.383975][ T23] Bluetooth: hci3: command 0x0409 tx timeout [ 69.388211][ T1345] Bluetooth: hci1: command 0x0409 tx timeout [ 69.396147][ T23] Bluetooth: hci0: command 0x0409 tx timeout [ 69.428157][ T4189] device hsr_slave_0 entered promiscuous mode [ 69.435806][ T4189] device hsr_slave_1 entered promiscuous mode [ 69.442683][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.450394][ T4189] Cannot create hsr debugfs directory [ 69.510297][ T4191] device hsr_slave_0 entered promiscuous mode [ 69.517341][ T4191] device hsr_slave_1 entered promiscuous mode [ 69.524025][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.531604][ T4191] Cannot create hsr debugfs directory [ 69.723420][ T4187] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.737131][ T4187] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.755831][ T4187] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.764977][ T4187] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.832912][ T4186] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.843173][ T4186] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.865456][ T4186] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.875580][ T4186] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.920334][ T4188] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 69.930138][ T4188] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 69.942378][ T4188] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 69.964063][ T4188] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 70.000904][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.043420][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.053433][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.062544][ T4189] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.077322][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.097045][ T4189] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.107801][ T4189] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.119731][ T4189] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.153249][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.162464][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.172250][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.179580][ T1159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.189448][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.198809][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.208052][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.215186][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.223300][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.248309][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.277260][ T4191] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.287662][ T4191] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.300568][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.315014][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.323699][ T4191] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.336171][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.347496][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.378679][ T4191] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.387025][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.409553][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.425246][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.433259][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.442254][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.452483][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.462362][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.497495][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.507566][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.516856][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.529443][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.537921][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.549698][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.558343][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.565463][ T1159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.573294][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.582794][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.591617][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.598702][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.608249][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.617951][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.641406][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.649542][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.658806][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.672548][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.744134][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.762555][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.771691][ T4230] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.778833][ T4230] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.787578][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.796958][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.806079][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.815170][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.823699][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.832352][ T4230] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.839444][ T4230] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.848387][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.857283][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.867066][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.876147][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.885613][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.896681][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.906513][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.928334][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.938087][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.963377][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.000160][ T4186] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.011665][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.031211][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.040618][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.057798][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.067488][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.077215][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.085931][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.095917][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.104631][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.113069][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.122975][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.140192][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.149066][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.158112][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.176692][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.190251][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.199981][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.255711][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.263967][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.273647][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.291271][ T4230] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.298442][ T4230] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.314918][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.323473][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.331717][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.347420][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.358732][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.368162][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.397744][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.407592][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.436554][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.443916][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.452674][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.457270][ T4235] Bluetooth: hci0: command 0x041b tx timeout [ 71.461713][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.473715][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.481240][ T4235] Bluetooth: hci1: command 0x041b tx timeout [ 71.486547][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.495360][ T4235] Bluetooth: hci3: command 0x041b tx timeout [ 71.496322][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.501644][ T4235] Bluetooth: hci4: command 0x041b tx timeout [ 71.508842][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.524335][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.548333][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.562091][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.564085][ T4235] Bluetooth: hci2: command 0x041b tx timeout [ 71.620555][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.630261][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.639414][ T4242] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.646828][ T4242] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.656475][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.665337][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.674415][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.683617][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.694045][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.702734][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.712515][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.722378][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.731928][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.740836][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.749775][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.757394][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.765225][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.772629][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.781013][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.792385][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.801413][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.817688][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.831150][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.846227][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.855984][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.871350][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.881945][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.896385][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.908637][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.916594][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.925026][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.935801][ T4187] device veth0_vlan entered promiscuous mode [ 71.985379][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.004614][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.021897][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.051354][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.063909][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.073610][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.094583][ T4187] device veth1_vlan entered promiscuous mode [ 72.106419][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.123566][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.149198][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.187101][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.216648][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.227468][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.236754][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.259070][ T4187] device veth0_macvtap entered promiscuous mode [ 72.281058][ T4186] device veth0_vlan entered promiscuous mode [ 72.298080][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.310020][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.318488][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.326400][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.335415][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.359492][ T4187] device veth1_macvtap entered promiscuous mode [ 72.377578][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.394913][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.413298][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.421864][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.430781][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.440328][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.462265][ T4186] device veth1_vlan entered promiscuous mode [ 72.497223][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.505895][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.516716][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.524643][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.532069][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.541063][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.556789][ T4186] device veth0_macvtap entered promiscuous mode [ 72.569914][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.584393][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.595267][ T4186] device veth1_macvtap entered promiscuous mode [ 72.604592][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.615636][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.627212][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.635800][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.645591][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.654552][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.663092][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.673117][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.682619][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.709425][ T4187] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.718952][ T4187] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.728096][ T4187] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.741750][ T4187] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.769678][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.780891][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.805287][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.821599][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.830779][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.840074][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.849931][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.861532][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.870308][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.879184][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.887633][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.898951][ T4188] device veth0_vlan entered promiscuous mode [ 72.911381][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.921779][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.940240][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.951215][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.962753][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.973729][ T4186] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.983659][ T4186] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.994309][ T4186] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.003475][ T4186] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.013600][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.021837][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.030397][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.039628][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.074035][ T4191] device veth0_vlan entered promiscuous mode [ 73.098527][ T4188] device veth1_vlan entered promiscuous mode [ 73.157401][ T4191] device veth1_vlan entered promiscuous mode [ 73.178554][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.192426][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.201034][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.210203][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.219790][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.261673][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.272469][ T4189] device veth0_vlan entered promiscuous mode [ 73.275486][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.288650][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.298763][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.338915][ T4189] device veth1_vlan entered promiscuous mode [ 73.358517][ T4188] device veth0_macvtap entered promiscuous mode [ 73.373036][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.381527][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.391701][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.400948][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.409939][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.432661][ T4191] device veth0_macvtap entered promiscuous mode [ 73.440609][ T4242] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.452286][ T4188] device veth1_macvtap entered promiscuous mode [ 73.453667][ T4242] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.470537][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.481485][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.492391][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.505172][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.517161][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.534661][ T4267] Bluetooth: hci3: command 0x040f tx timeout [ 73.537922][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.545135][ T4267] Bluetooth: hci1: command 0x040f tx timeout [ 73.557022][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.561070][ T4267] Bluetooth: hci0: command 0x040f tx timeout [ 73.566735][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.579976][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.588807][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.597429][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.606348][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.614965][ T4267] Bluetooth: hci2: command 0x040f tx timeout [ 73.621174][ T4267] Bluetooth: hci4: command 0x040f tx timeout [ 73.623300][ T4191] device veth1_macvtap entered promiscuous mode [ 73.638859][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.652956][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.667912][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.679519][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.689787][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.701516][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.712566][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.724889][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.734958][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.749532][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.760779][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.781791][ T4188] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.790672][ T4188] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.801347][ T4188] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.812285][ T4188] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.835738][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.838261][ T4189] device veth0_macvtap entered promiscuous mode [ 73.860108][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.866387][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.881723][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.898158][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.908187][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.920364][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.931010][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.943189][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.954619][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.965214][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.977047][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.988169][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.007280][ T4189] device veth1_macvtap entered promiscuous mode [ 74.019101][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.030911][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.046208][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.059848][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.073449][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.099322][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.112395][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.126844][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.139736][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.167266][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.189913][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.227762][ T4191] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.280292][ T4191] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.291715][ T4191] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.301925][ T4191] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.342824][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.375214][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.387426][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.398635][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.461869][ T4278] hub 8-0:1.0: USB hub found [ 74.470352][ T4278] hub 8-0:1.0: 1 port detected [ 74.825748][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.879127][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.930472][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.981614][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.259739][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.330517][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.346250][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.360642][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.372595][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.384551][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.396111][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.416987][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.428250][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.438666][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.452657][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.475721][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.505086][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.548451][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.569821][ T4189] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.583056][ T4189] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.593113][ T4189] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.603616][ T4189] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.615129][ T4267] Bluetooth: hci0: command 0x0419 tx timeout [ 75.622394][ T4267] Bluetooth: hci1: command 0x0419 tx timeout [ 75.653874][ T4234] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 75.661461][ T4267] Bluetooth: hci3: command 0x0419 tx timeout [ 75.695465][ T1345] Bluetooth: hci4: command 0x0419 tx timeout [ 75.702590][ T1345] Bluetooth: hci2: command 0x0419 tx timeout [ 75.718949][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.721401][ T4279] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.740996][ T4279] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.742612][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.772208][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.781120][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.017373][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.020132][ T4279] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.039966][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.046891][ T4279] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.070281][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.158862][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.240597][ T4242] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.461994][ T4242] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.588202][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.735338][ T4234] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 76.765226][ T4234] usb 3-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 76.794333][ T4234] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.874625][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.909782][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.947880][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.192765][ T4234] qmi_wwan: probe of 3-1:1.0 failed with error -71 [ 77.226557][ T4234] usb 3-1: USB disconnect, device number 2 [ 77.233056][ T4302] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4'. [ 77.314031][ T1110] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 77.503991][ T4267] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 77.563889][ T1110] usb 5-1: Using ep0 maxpacket: 16 [ 78.454354][ T4318] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16'. [ 78.883439][ T4326] netlink: 32 bytes leftover after parsing attributes in process `syz.2.16'. [ 79.273776][ C0] sched: RT throttling activated [ 79.401945][ T1110] usb 5-1: unable to get BOS descriptor or descriptor too short [ 79.467189][ T4334] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 79.487859][ T1110] usb 5-1: config 42 has an invalid interface number: 178 but max is 0 [ 79.506116][ T1110] usb 5-1: config 42 has an invalid descriptor of length 0, skipping remainder of the config [ 79.524100][ T1110] usb 5-1: config 42 has no interface number 0 [ 79.530475][ T1110] usb 5-1: config 42 interface 178 has no altsetting 0 [ 79.544570][ T4267] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 79.644192][ T4267] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 79.686014][ T4267] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 79.695332][ T1110] usb 5-1: New USB device found, idVendor=045e, idProduct=00f8, bcdDevice=e0.e5 [ 79.715246][ T1110] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.723384][ T1110] usb 5-1: Product: syz [ 79.735279][ T4267] usb 1-1: SerialNumber: syz [ 79.744600][ T4337] loop2: detected capacity change from 0 to 2048 [ 79.760221][ T1110] usb 5-1: Manufacturer: syz [ 79.765534][ T1110] usb 5-1: SerialNumber: syz [ 79.859594][ T4339] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 79.940031][ T4340] loop3: detected capacity change from 0 to 512 [ 80.018086][ T4340] capability: warning: `syz.3.20' uses deprecated v2 capabilities in a way that may be insecure [ 80.108071][ T4337] netlink: 'syz.2.19': attribute type 1 has an invalid length. [ 80.139476][ T4337] netlink: 'syz.2.19': attribute type 3 has an invalid length. [ 80.161371][ T4337] netlink: 224 bytes leftover after parsing attributes in process `syz.2.19'. [ 80.238289][ T4337] NCSI netlink: No device for ifindex 2986344450 [ 80.307420][ T1110] usb 5-1: USB disconnect, device number 2 [ 80.757733][ T4308] loop0: detected capacity change from 0 to 1024 [ 81.206172][ T4308] ======================================================= [ 81.206172][ T4308] WARNING: The mand mount option has been deprecated and [ 81.206172][ T4308] and is ignored by this kernel. Remove the mand [ 81.206172][ T4308] option from the mount to silence this warning. [ 81.206172][ T4308] ======================================================= [ 81.624003][ T4268] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 82.310526][ T4268] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 82.341175][ T4268] usb 2-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 82.390885][ T4268] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.792585][ T4268] qmi_wwan: probe of 2-1:1.0 failed with error -71 [ 82.830205][ T4268] usb 2-1: USB disconnect, device number 2 [ 82.984638][ T4267] cdc_ether: probe of 1-1:1.0 failed with error -71 [ 83.001386][ T4267] usb 1-1: USB disconnect, device number 2 [ 83.384027][ T4267] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 83.615441][ T1110] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 83.775394][ T4267] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 83.840734][ T4267] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.867138][ T4267] usb 1-1: config 0 descriptor?? [ 83.877849][ T1110] usb 4-1: Using ep0 maxpacket: 16 [ 83.995922][ T4267] cp210x 1-1:0.0: cp210x converter detected [ 84.054632][ T1110] usb 4-1: unable to get BOS descriptor or descriptor too short [ 84.207784][ T1110] usb 4-1: config 42 has an invalid interface number: 178 but max is 0 [ 84.337563][ T1110] usb 4-1: config 42 has an invalid descriptor of length 0, skipping remainder of the config [ 84.509166][ T1110] usb 4-1: config 42 has no interface number 0 [ 84.542806][ T4395] smc: net device lo applied user defined pnetid SYZ0 [ 84.553951][ T1110] usb 4-1: config 42 interface 178 has no altsetting 0 [ 84.669132][ T4400] kAFS: No cell specified [ 84.674620][ T4267] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -71 [ 84.697832][ T4267] cp210x 1-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 84.728037][ T4267] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 84.774107][ T1110] usb 4-1: New USB device found, idVendor=045e, idProduct=00f8, bcdDevice=e0.e5 [ 84.783204][ T1110] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.801769][ T4267] usb 1-1: cp210x converter now attached to ttyUSB0 [ 84.865129][ T1110] usb 4-1: Product: syz [ 84.869352][ T1110] usb 4-1: Manufacturer: syz [ 84.879398][ T4267] usb 1-1: USB disconnect, device number 3 [ 84.908830][ T1110] usb 4-1: SerialNumber: syz [ 84.923047][ T4267] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 84.966630][ T4267] cp210x 1-1:0.0: device disconnected [ 85.298908][ T4411] process 'syz.1.43' launched './file0' with NULL argv: empty string added [ 86.178852][ T1110] usb 4-1: USB disconnect, device number 2 [ 86.254067][ T4234] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 86.670502][ T4234] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 86.708783][ T4234] usb 5-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 86.732174][ T4234] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.818427][ T21] cfg80211: failed to load regulatory.db [ 87.003790][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 87.013818][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 87.023786][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 87.033786][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 87.043780][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 87.053781][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 87.114090][ T4234] qmi_wwan: probe of 5-1:1.0 failed with error -71 [ 87.130774][ T4234] usb 5-1: USB disconnect, device number 3 [ 90.393925][ T4464] netlink: 56 bytes leftover after parsing attributes in process `syz.0.61'. [ 90.423179][ T4464] netlink: 20 bytes leftover after parsing attributes in process `syz.0.61'. [ 90.469402][ T4464] netlink: 8 bytes leftover after parsing attributes in process `syz.0.61'. [ 91.492945][ T4495] ubi31: attaching mtd0 [ 91.504649][ T4495] ubi31: scanning is finished [ 91.509561][ T4495] ubi31: empty MTD device detected [ 92.082691][ T4495] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 92.091293][ T4495] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 92.099464][ T4495] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 92.106868][ T4495] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 92.114448][ T4495] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 92.121337][ T4495] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 92.129495][ T4495] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1371141470 [ 92.139667][ T4495] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 92.150943][ T4497] ubi31: background thread "ubi_bgt31d" started, PID 4497 [ 92.385219][ T4508] netlink: 24 bytes leftover after parsing attributes in process `syz.4.71'. [ 92.584558][ T7] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 93.154028][ T7] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 93.294364][ T7] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.360975][ T7] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 93.411912][ T7] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 93.465050][ T7] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 93.481898][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.556139][ T7] cxacru 1-1:1.0: submit of read urb for cm 0x90 failed (-90) [ 93.574548][ T7] cxacru 1-1:1.0: usbatm_usb_probe: invalid endpoint 02! [ 93.603551][ T7] cxacru: probe of 1-1:1.0 failed with error -22 [ 93.767730][ T4268] usb 1-1: USB disconnect, device number 4 [ 93.852088][ T4552] capability: warning: `syz.2.87' uses 32-bit capabilities (legacy support in use) [ 94.064013][ T21] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 94.233512][ T4558] ubi: mtd0 is already attached to ubi31 [ 94.863859][ T4267] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 95.056082][ T21] usb 2-1: config 127 has an invalid interface number: 57 but max is 0 [ 95.090506][ T21] usb 2-1: config 127 has no interface number 0 [ 95.103892][ T21] usb 2-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 95.264368][ T4267] usb 3-1: Using ep0 maxpacket: 32 [ 95.317230][ T4234] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 95.378531][ T21] usb 2-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 95.471627][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.589968][ T21] usb 2-1: Product: syz [ 95.595025][ T4234] usb 5-1: Using ep0 maxpacket: 16 [ 95.692764][ T21] usb 2-1: Manufacturer: syz [ 95.734576][ T4234] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 95.771587][ T21] usb 2-1: SerialNumber: syz [ 95.801357][ T4234] usb 5-1: config 0 interface 0 has no altsetting 0 [ 95.990916][ T4546] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 96.167366][ T4234] usb 5-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 96.186760][ T4234] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.249531][ T4234] usb 5-1: Product: syz [ 96.262380][ T4234] usb 5-1: Manufacturer: syz [ 96.269722][ T4267] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 96.281600][ T4267] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 96.309913][ T21] asix: probe of 2-1:127.57 failed with error -71 [ 96.325863][ T4234] usb 5-1: SerialNumber: syz [ 96.346000][ T21] usb 2-1: USB disconnect, device number 3 [ 96.377182][ T4234] usb 5-1: config 0 descriptor?? [ 96.415567][ T4603] ubi: mtd0 is already attached to ubi31 [ 97.139137][ T4234] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input5 [ 97.183939][ T4267] usb 3-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 97.214529][ T4267] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.222594][ T4267] usb 3-1: Product: syz [ 97.319543][ T4267] usb 3-1: config 0 descriptor?? [ 97.384161][ T4267] usb 3-1: can't set config #0, error -71 [ 97.668111][ T4267] usb 3-1: USB disconnect, device number 3 [ 97.684548][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 98.150436][ T4234] imon:send_packet: packet tx failed (-71) [ 98.183202][ T4234] imon 5-1:0.0: panel buttons/knobs setup failed [ 98.273906][ T4234] rc_core: IR keymap rc-imon-pad not found [ 98.279789][ T4234] Registered IR keymap rc-empty [ 98.320538][ T4234] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 98.512058][ T4234] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 98.543870][ T4234] imon:send_packet: packet tx failed (-71) [ 98.574078][ T4234] imon 5-1:0.0: remote input dev register failed [ 98.586381][ T4234] imon 5-1:0.0: imon_init_intf0: rc device setup failed [ 99.366992][ T4268] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 99.647752][ T4234] imon 5-1:0.0: unable to initialize intf0, err 0 [ 99.660760][ T4234] imon:imon_probe: failed to initialize context! [ 99.670013][ T4234] imon 5-1:0.0: unable to register, err -19 [ 99.741497][ T4657] ubi: mtd0 is already attached to ubi31 [ 100.456311][ T4234] usb 5-1: USB disconnect, device number 4 [ 100.674491][ T4268] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.723780][ T4268] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.793916][ T4268] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 100.832821][ T4268] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.887002][ T4268] usb 4-1: config 0 descriptor?? [ 101.640064][ T4234] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 102.053931][ T4268] usbhid 4-1:0.0: can't add hid device: -71 [ 102.060129][ T4268] usbhid: probe of 4-1:0.0 failed with error -71 [ 102.098694][ T4268] usb 4-1: USB disconnect, device number 3 [ 102.208651][ T4234] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 102.221248][ T4234] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.232591][ T4234] usb 5-1: config 0 descriptor?? [ 102.275163][ T4234] cp210x 5-1:0.0: cp210x converter detected [ 102.284040][ T4193] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 102.460837][ T4697] netlink: 12 bytes leftover after parsing attributes in process `syz.1.132'. [ 102.670051][ T4699] netlink: 8 bytes leftover after parsing attributes in process `syz.3.137'. [ 103.140582][ T4701] netlink: 28 bytes leftover after parsing attributes in process `syz.0.136'. [ 103.150268][ T4701] syz.0.136 uses obsolete (PF_INET,SOCK_PACKET) [ 103.314326][ T4193] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 103.335735][ T4193] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.346871][ T4234] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -71 [ 103.361487][ T4193] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 103.371877][ T4193] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 103.385574][ T4234] cp210x 5-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 103.393380][ T4234] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 103.407271][ T4193] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 103.421446][ T4193] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.436499][ T4234] usb 5-1: cp210x converter now attached to ttyUSB0 [ 103.475285][ T4234] usb 5-1: USB disconnect, device number 5 [ 103.505971][ T4193] cxacru 3-1:1.0: submit of read urb for cm 0x90 failed (-90) [ 103.523233][ T4193] cxacru 3-1:1.0: usbatm_usb_probe: invalid endpoint 02! [ 103.532861][ T4234] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 103.549407][ T4234] cp210x 5-1:0.0: device disconnected [ 103.555759][ T4193] cxacru: probe of 3-1:1.0 failed with error -22 [ 103.737602][ T4193] usb 3-1: USB disconnect, device number 4 [ 104.055503][ T150] block nbd3: Attempted send on invalid socket [ 104.062988][ T150] blk_update_request: I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 104.083801][ T4721] EXT4-fs (nbd3): unable to read superblock [ 104.956125][ T4726] netlink: 'syz.0.157': attribute type 2 has an invalid length. [ 105.490469][ T4763] netlink: 24 bytes leftover after parsing attributes in process `syz.3.161'. [ 105.593788][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 105.603799][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 105.613780][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 105.623774][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 107.128777][ T4203] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 107.138649][ T4203] CPU: 1 PID: 4203 Comm: kworker/u5:7 Not tainted syzkaller #0 [ 107.146258][ T4203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 107.156337][ T4203] Workqueue: hci0 hci_rx_work [ 107.161048][ T4203] Call Trace: [ 107.164340][ T4203] [ 107.167290][ T4203] dump_stack_lvl+0x188/0x250 [ 107.171994][ T4203] ? show_regs_print_info+0x20/0x20 [ 107.177316][ T4203] ? load_image+0x410/0x410 [ 107.181863][ T4203] sysfs_create_dir_ns+0x26a/0x290 [ 107.186998][ T4203] ? sysfs_warn_dup+0xa0/0xa0 [ 107.191800][ T4203] ? kthread+0x42e/0x520 [ 107.196090][ T4203] ? do_raw_spin_unlock+0x11d/0x230 [ 107.201317][ T4203] kobject_add_internal+0x5ba/0xcd0 [ 107.206552][ T4203] kobject_add+0x160/0x230 [ 107.211000][ T4203] ? kobject_init+0x1c0/0x1c0 [ 107.215706][ T4203] ? __raw_spin_lock_init+0x41/0x100 [ 107.221013][ T4203] ? klist_children_get+0x50/0x50 [ 107.226060][ T4203] ? get_device_parent+0x121/0x3e0 [ 107.231193][ T4203] device_add+0x470/0x1050 [ 107.235627][ T4203] ? device_initialize+0x2a5/0x4d0 [ 107.240758][ T4203] hci_conn_add_sysfs+0xd1/0x1e0 [ 107.245724][ T4203] le_conn_complete_evt+0xc2e/0x14d0 [ 107.251045][ T4203] ? cs_le_create_conn+0x5e0/0x5e0 [ 107.256185][ T4203] ? __mutex_trylock_common+0x15c/0x260 [ 107.261775][ T4203] hci_le_meta_evt+0xd36/0x3ca0 [ 107.266678][ T4203] ? hci_event_packet+0x363/0x1310 [ 107.271830][ T4203] ? __lock_acquire+0x7b50/0x7b50 [ 107.276892][ T4203] ? hci_remote_host_features_evt+0x240/0x240 [ 107.282989][ T4203] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 107.288643][ T4203] ? mark_lock+0x94/0x320 [ 107.292997][ T4203] ? mutex_unlock+0x10/0x10 [ 107.297522][ T4203] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 107.303530][ T4203] ? lock_chain_count+0x20/0x20 [ 107.308406][ T4203] ? __rwlock_init+0x140/0x140 [ 107.313196][ T4203] hci_event_packet+0xe0b/0x1310 [ 107.318173][ T4203] ? _raw_spin_unlock+0x40/0x40 [ 107.323055][ T4203] ? rcu_lock_release+0x20/0x20 [ 107.327944][ T4203] ? hci_send_to_monitor+0x9c/0x4a0 [ 107.333177][ T4203] hci_rx_work+0x255/0xa10 [ 107.337660][ T4203] process_one_work+0x867/0xff0 [ 107.342554][ T4203] ? worker_detach_from_pool+0x240/0x240 [ 107.348205][ T4203] ? lockdep_hardirqs_off+0x70/0x100 [ 107.353521][ T4203] ? _raw_spin_lock_irq+0xb7/0xf0 [ 107.358566][ T4203] ? _raw_spin_lock_irqsave+0x100/0x100 [ 107.364446][ T4203] ? wq_worker_running+0x97/0x170 [ 107.369495][ T4203] worker_thread+0xad7/0x12a0 [ 107.374231][ T4203] kthread+0x42e/0x520 [ 107.378321][ T4203] ? rcu_lock_release+0x20/0x20 [ 107.383197][ T4203] ? kthread_blkcg+0xd0/0xd0 [ 107.387812][ T4203] ret_from_fork+0x1f/0x30 [ 107.392275][ T4203] [ 107.414647][ T4203] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 107.429281][ T4203] Bluetooth: hci0: failed to register connection device [ 107.863901][ T7] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 108.679695][ T4801] trusted_key: encrypted_key: key user:syz not found [ 108.804222][ T7] usb 1-1: unable to get BOS descriptor or descriptor too short [ 108.826884][ T4807] overlayfs: unrecognized mount option "\" or missing value [ 108.884280][ T7] usb 1-1: not running at top speed; connect to a high speed hub [ 108.974246][ T7] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 109.214047][ T7] usb 1-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 109.232371][ T4828] program syz.4.182 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 109.242108][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.257769][ T7] usb 1-1: Product: syz [ 109.261982][ T7] usb 1-1: Manufacturer: syz [ 109.306182][ T7] usb 1-1: SerialNumber: syz [ 109.932691][ T4823] ima: policy update failed [ 109.939603][ T26] audit: type=1802 audit(1786349212.924:2): pid=4823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.181" res=0 errno=0 [ 110.425690][ T4840] netlink: 24 bytes leftover after parsing attributes in process `syz.2.186'. [ 110.453662][ T4840] netlink: 24 bytes leftover after parsing attributes in process `syz.2.186'. [ 110.532602][ T4842] netlink: 28 bytes leftover after parsing attributes in process `syz.1.187'. [ 110.785798][ T7] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 110.810832][ T7] usb 1-1: 2:1 : no UAC_FORMAT_TYPE desc [ 111.434011][ T4858] netlink: 'syz.4.193': attribute type 1 has an invalid length. [ 111.443373][ T4858] netlink: 'syz.4.193': attribute type 2 has an invalid length. [ 111.534331][ T7] usb 1-1: USB disconnect, device number 5 [ 111.603144][ T26] audit: type=1326 audit(1786349214.584:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4860 comm="syz.2.195" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3703e050d9 code=0x7ffc0000 [ 111.653051][ T150] block nbd4: Attempted send on invalid socket [ 111.660998][ T150] blk_update_request: I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 111.691401][ T26] audit: type=1326 audit(1786349214.624:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4860 comm="syz.2.195" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3703e050d9 code=0x7ffc0000 [ 111.718722][ T26] audit: type=1326 audit(1786349214.624:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4860 comm="syz.2.195" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3703e050d9 code=0x7ffc0000 [ 111.743670][ T26] audit: type=1326 audit(1786349214.624:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4860 comm="syz.2.195" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3703e050d9 code=0x7ffc0000 [ 111.768271][ T26] audit: type=1326 audit(1786349214.634:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4860 comm="syz.2.195" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f3703e050d9 code=0x7ffc0000 [ 111.823503][ T26] audit: type=1326 audit(1786349214.634:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4860 comm="syz.2.195" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3703e050d9 code=0x7ffc0000 [ 111.856028][ T4870] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.199'. [ 111.920374][ T26] audit: type=1326 audit(1786349214.634:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4860 comm="syz.2.195" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3703e050d9 code=0x7ffc0000 [ 111.997598][ T4875] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.115653][ T4877] ima: policy update completed [ 112.145273][ T26] audit: type=1326 audit(1786349214.634:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4860 comm="syz.2.195" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3703e050d9 code=0x7ffc0000 [ 112.173835][ T26] audit: type=1326 audit(1786349214.634:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4860 comm="syz.2.195" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3703e050d9 code=0x7ffc0000 [ 113.565293][ T4886] netlink: 'syz.4.206': attribute type 1 has an invalid length. [ 113.597070][ T4203] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 113.606839][ T4203] CPU: 1 PID: 4203 Comm: kworker/u5:7 Not tainted syzkaller #0 [ 113.616059][ T4203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 113.626507][ T4203] Workqueue: hci2 hci_rx_work [ 113.631410][ T4203] Call Trace: [ 113.634741][ T4203] [ 113.637716][ T4203] dump_stack_lvl+0x188/0x250 [ 113.643072][ T4203] ? show_regs_print_info+0x20/0x20 [ 113.648462][ T4203] ? load_image+0x410/0x410 [ 113.653435][ T4203] sysfs_create_dir_ns+0x26a/0x290 [ 113.658772][ T4203] ? sysfs_warn_dup+0xa0/0xa0 [ 113.663486][ T4203] ? kthread+0x42e/0x520 [ 113.667761][ T4203] ? do_raw_spin_unlock+0x11d/0x230 [ 113.673073][ T4203] kobject_add_internal+0x5ba/0xcd0 [ 113.678386][ T4203] kobject_add+0x160/0x230 [ 113.683859][ T4203] ? kobject_init+0x1c0/0x1c0 [ 113.689914][ T4203] ? __raw_spin_lock_init+0x41/0x100 [ 113.695441][ T4203] ? klist_children_get+0x50/0x50 [ 113.700493][ T4203] ? get_device_parent+0x121/0x3e0 [ 113.705633][ T4203] device_add+0x470/0x1050 [ 113.710273][ T4203] ? device_initialize+0x2a5/0x4d0 [ 113.715420][ T4203] hci_conn_add_sysfs+0xd1/0x1e0 [ 113.721005][ T4203] le_conn_complete_evt+0xc2e/0x14d0 [ 113.726387][ T4203] ? cs_le_create_conn+0x5e0/0x5e0 [ 113.731618][ T4203] ? __mutex_trylock_common+0x15c/0x260 [ 113.737193][ T4203] hci_le_meta_evt+0xd36/0x3ca0 [ 113.742073][ T4203] ? hci_event_packet+0x363/0x1310 [ 113.747207][ T4203] ? __lock_acquire+0x7b50/0x7b50 [ 113.752262][ T4203] ? hci_remote_host_features_evt+0x240/0x240 [ 113.758353][ T4203] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 113.764015][ T4203] ? mark_lock+0x94/0x320 [ 113.768387][ T4203] ? mutex_unlock+0x10/0x10 [ 113.772911][ T4203] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 113.778915][ T4203] ? lock_chain_count+0x20/0x20 [ 113.783791][ T4203] ? __rwlock_init+0x140/0x140 [ 113.788586][ T4203] hci_event_packet+0xe0b/0x1310 [ 113.793564][ T4203] ? _raw_spin_unlock+0x40/0x40 [ 113.798435][ T4203] ? rcu_lock_release+0x20/0x20 [ 113.803317][ T4203] ? hci_send_to_monitor+0x9c/0x4a0 [ 113.808568][ T4203] hci_rx_work+0x255/0xa10 [ 113.813146][ T4203] process_one_work+0x867/0xff0 [ 113.818056][ T4203] ? worker_detach_from_pool+0x240/0x240 [ 113.823727][ T4203] ? lockdep_hardirqs_off+0x70/0x100 [ 113.829057][ T4203] ? _raw_spin_lock_irq+0xb7/0xf0 [ 113.834235][ T4203] ? _raw_spin_lock_irqsave+0x100/0x100 [ 113.841210][ T4203] ? wq_worker_running+0x97/0x170 [ 113.846294][ T4203] worker_thread+0xad7/0x12a0 [ 113.851044][ T4203] kthread+0x42e/0x520 [ 113.855145][ T4203] ? rcu_lock_release+0x20/0x20 [ 113.860031][ T4203] ? kthread_blkcg+0xd0/0xd0 [ 113.863841][ T4886] netlink: 'syz.4.206': attribute type 4 has an invalid length. [ 113.864767][ T4203] ret_from_fork+0x1f/0x30 [ 113.872465][ T4886] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.206'. [ 113.876893][ T4203] [ 113.884306][ T4203] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 113.905772][ T4203] Bluetooth: hci2: failed to register connection device [ 114.356267][ T4913] Zero length message leads to an empty skb [ 114.733917][ T4267] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 116.245436][ T7] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 116.255047][ T4193] Bluetooth: hci2: command 0x2016 tx timeout [ 116.255295][ T4203] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 116.273533][ T4203] CPU: 0 PID: 4203 Comm: kworker/u5:7 Not tainted syzkaller #0 [ 116.281114][ T4203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 116.291402][ T4203] Workqueue: hci4 hci_rx_work [ 116.296119][ T4203] Call Trace: [ 116.299416][ T4203] [ 116.302387][ T4203] dump_stack_lvl+0x188/0x250 [ 116.307361][ T4203] ? show_regs_print_info+0x20/0x20 [ 116.312594][ T4203] ? load_image+0x410/0x410 [ 116.317143][ T4203] sysfs_create_dir_ns+0x26a/0x290 [ 116.322385][ T4203] ? sysfs_warn_dup+0xa0/0xa0 [ 116.327080][ T4203] ? kthread+0x42e/0x520 [ 116.331355][ T4203] ? do_raw_spin_unlock+0x11d/0x230 [ 116.336582][ T4203] kobject_add_internal+0x5ba/0xcd0 [ 116.341823][ T4203] kobject_add+0x160/0x230 [ 116.346283][ T4203] ? kobject_init+0x1c0/0x1c0 [ 116.350990][ T4203] ? __raw_spin_lock_init+0x41/0x100 [ 116.356351][ T4203] ? klist_children_get+0x50/0x50 [ 116.361398][ T4203] ? get_device_parent+0x121/0x3e0 [ 116.366537][ T4203] device_add+0x470/0x1050 [ 116.370972][ T4203] ? device_initialize+0x2a5/0x4d0 [ 116.376105][ T4203] hci_conn_add_sysfs+0xd1/0x1e0 [ 116.381068][ T4203] le_conn_complete_evt+0xc2e/0x14d0 [ 116.386390][ T4203] ? cs_le_create_conn+0x5e0/0x5e0 [ 116.391534][ T4203] ? __mutex_trylock_common+0x15c/0x260 [ 116.397108][ T4203] hci_le_meta_evt+0xd36/0x3ca0 [ 116.401992][ T4203] ? hci_event_packet+0x363/0x1310 [ 116.407128][ T4203] ? __lock_acquire+0x7b50/0x7b50 [ 116.412185][ T4203] ? hci_remote_host_features_evt+0x240/0x240 [ 116.418341][ T4203] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 116.424002][ T4203] ? mark_lock+0x94/0x320 [ 116.428363][ T4203] ? mutex_unlock+0x10/0x10 [ 116.433025][ T4203] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 116.439754][ T4203] ? lock_chain_count+0x20/0x20 [ 116.444655][ T4203] ? __rwlock_init+0x140/0x140 [ 116.449540][ T4203] hci_event_packet+0xe0b/0x1310 [ 116.454515][ T4203] ? _raw_spin_unlock+0x40/0x40 [ 116.459386][ T4203] ? rcu_lock_release+0x20/0x20 [ 116.464267][ T4203] ? hci_send_to_monitor+0x9c/0x4a0 [ 116.469491][ T4203] hci_rx_work+0x255/0xa10 [ 116.473939][ T4203] process_one_work+0x867/0xff0 [ 116.478834][ T4203] ? worker_detach_from_pool+0x240/0x240 [ 116.484488][ T4203] ? lockdep_hardirqs_off+0x70/0x100 [ 116.489815][ T4203] ? _raw_spin_lock_irq+0xb7/0xf0 [ 116.494858][ T4203] ? _raw_spin_lock_irqsave+0x100/0x100 [ 116.500426][ T4203] ? wq_worker_running+0x97/0x170 [ 116.505477][ T4203] worker_thread+0xad7/0x12a0 [ 116.510227][ T4203] kthread+0x42e/0x520 [ 116.514325][ T4203] ? rcu_lock_release+0x20/0x20 [ 116.519202][ T4203] ? kthread_blkcg+0xd0/0xd0 [ 116.523824][ T4203] ret_from_fork+0x1f/0x30 [ 116.528332][ T4203] [ 117.173907][ T4203] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 117.187597][ T4203] Bluetooth: hci4: failed to register connection device [ 117.283856][ T4267] usb 1-1: Using ep0 maxpacket: 16 [ 117.333957][ T7] usb 5-1: Using ep0 maxpacket: 16 [ 117.452893][ T26] kauditd_printk_skb: 37 callbacks suppressed [ 117.452911][ T26] audit: type=1800 audit(1786349220.404:49): pid=3558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35196 res=0 errno=0 [ 117.472944][ T4267] usb 1-1: device descriptor read/all, error -71 [ 117.544367][ T26] audit: type=1800 audit(1786349220.414:50): pid=3558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35514 res=0 errno=0 [ 117.591590][ T26] audit: type=1800 audit(1786349220.494:51): pid=3558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35302 res=0 errno=0 [ 117.634775][ T7] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 117.642402][ T7] usb 5-1: can't read configurations, error -71 [ 117.690603][ T26] audit: type=1800 audit(1786349220.574:52): pid=3558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35196 res=0 errno=0 [ 117.788744][ T26] audit: type=1800 audit(1786349220.654:53): pid=3558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35620 res=0 errno=0 [ 117.857495][ T26] audit: type=1800 audit(1786349220.714:54): pid=3558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35408 res=0 errno=0 [ 117.950480][ T26] audit: type=1800 audit(1786349220.774:55): pid=3558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35302 res=0 errno=0 [ 118.119031][ T26] audit: type=1800 audit(1786349220.814:56): pid=3558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35620 res=0 errno=0 [ 118.193000][ T26] audit: type=1800 audit(1786349220.864:57): pid=3558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35408 res=0 errno=0 [ 118.259701][ T4963] Invalid argument reading file caps for ./file0 [ 118.512617][ T26] audit: type=1800 audit(1786349220.934:58): pid=3558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35302 res=0 errno=0 [ 119.532615][ T4982] netlink: 8 bytes leftover after parsing attributes in process `syz.0.241'. [ 119.657828][ T4267] Bluetooth: hci4: command 0x2016 tx timeout [ 119.833513][ T4986] trusted_key: encrypted_key: key user:syz not found [ 120.719455][ T5001] vhci_hcd vhci_hcd.0: remove, state 4 [ 120.781090][ T5001] usb usb34: USB disconnect, device number 1 [ 120.875021][ T4522] vhci_hcd: stop threads [ 120.879867][ T4522] vhci_hcd: release socket [ 120.913573][ T4522] vhci_hcd: disconnect device [ 120.927555][ T4522] vhci_hcd: stop threads [ 120.931896][ T4522] vhci_hcd: release socket [ 121.034755][ T4522] vhci_hcd: disconnect device [ 121.123651][ T4522] vhci_hcd: stop threads [ 121.131650][ T4522] vhci_hcd: release socket [ 121.162174][ T4522] vhci_hcd: disconnect device [ 121.172374][ T4522] vhci_hcd: stop threads [ 121.187558][ T4522] vhci_hcd: release socket [ 121.192047][ T4522] vhci_hcd: disconnect device [ 121.220841][ T4522] vhci_hcd: stop threads [ 121.227030][ T4992] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.240208][ T4522] vhci_hcd: release socket [ 121.250370][ T4522] vhci_hcd: disconnect device [ 121.285218][ T4522] vhci_hcd: stop threads [ 121.289667][ T4522] vhci_hcd: release socket [ 121.314967][ T4522] vhci_hcd: disconnect device [ 121.328391][ T4522] vhci_hcd: stop threads [ 121.332686][ T4522] vhci_hcd: release socket [ 121.373540][ T4522] vhci_hcd: disconnect device [ 121.403973][ T4522] vhci_hcd: stop threads [ 121.426719][ T4522] vhci_hcd: release socket [ 121.447328][ T4522] vhci_hcd: disconnect device [ 121.466848][ T5001] vhci_hcd vhci_hcd.0: USB bus 34 deregistered [ 121.488115][ T5001] vhci_hcd vhci_hcd.0: remove, state 4 [ 121.500881][ T5001] usb usb33: USB disconnect, device number 1 [ 121.624570][ T4643] vhci_hcd: stop threads [ 121.630150][ T5001] vhci_hcd vhci_hcd.0: USB bus 33 deregistered [ 121.638099][ T4643] vhci_hcd: release socket [ 121.651150][ T4643] vhci_hcd: disconnect device [ 121.681187][ T4643] ================================================================== [ 121.689298][ T4643] BUG: KASAN: use-after-free in __lock_acquire+0x107/0x7b50 [ 121.696635][ T4643] Read of size 8 at addr ffff888147cb4440 by task kworker/u4:13/4643 [ 121.704714][ T4643] [ 121.707064][ T4643] CPU: 1 PID: 4643 Comm: kworker/u4:13 Not tainted syzkaller #0 [ 121.714713][ T4643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 121.724785][ T4643] Workqueue: usbip_event event_handler [ 121.730266][ T4643] Call Trace: [ 121.733552][ T4643] [ 121.736496][ T4643] dump_stack_lvl+0x188/0x250 [ 121.741195][ T4643] ? show_regs_print_info+0x20/0x20 [ 121.746415][ T4643] ? load_image+0x410/0x410 [ 121.750948][ T4643] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 121.756427][ T4643] print_address_description+0x60/0x2d0 [ 121.762014][ T4643] ? __lock_acquire+0x107/0x7b50 [ 121.767316][ T4643] kasan_report+0xdf/0x130 [ 121.771750][ T4643] ? __lock_acquire+0x107/0x7b50 [ 121.776718][ T4643] __lock_acquire+0x107/0x7b50 [ 121.781511][ T4643] ? vprintk_emit+0xc0/0x150 [ 121.786115][ T4643] ? read_lock_is_recursive+0x10/0x10 [ 121.791518][ T4643] ? __down_trylock_console_sem+0xf2/0x1f0 [ 121.797339][ T4643] ? verify_lock_unused+0x140/0x140 [ 121.802683][ T4643] ? vprintk_emit+0xa7/0x150 [ 121.807283][ T4643] ? release_firmware_map_entry+0x190/0x190 [ 121.813190][ T4643] ? vprintk_emit+0xa7/0x150 [ 121.817797][ T4643] ? console_trylock+0x70/0x70 [ 121.822575][ T4643] ? preempt_schedule+0xbc/0xd0 [ 121.827443][ T4643] ? preempt_schedule_common+0xa5/0xd0 [ 121.832926][ T4643] ? preempt_schedule+0xbc/0xd0 [ 121.837795][ T4643] lock_acquire+0x19e/0x400 [ 121.842317][ T4643] ? event_handler+0x2a5/0x460 [ 121.847098][ T4643] ? __irq_work_queue_local+0x12c/0x190 [ 121.853489][ T4643] ? read_lock_is_recursive+0x10/0x10 [ 121.858879][ T4643] ? vprintk_emit+0xf9/0x150 [ 121.863480][ T4643] ? _raw_spin_lock_irqsave+0x8b/0x100 [ 121.868952][ T4643] ? lockdep_hardirqs_off+0x70/0x100 [ 121.874254][ T4643] _raw_spin_lock_irqsave+0xb0/0x100 [ 121.880247][ T4643] ? event_handler+0x2a5/0x460 [ 121.885027][ T4643] ? _raw_spin_lock+0x40/0x40 [ 121.889728][ T4643] ? event_handler+0x181/0x460 [ 121.894533][ T4643] ? vhci_shutdown_connection+0x3d5/0x580 [ 121.900912][ T4643] event_handler+0x2a5/0x460 [ 121.906098][ T4643] process_one_work+0x867/0xff0 [ 121.911162][ T4643] ? worker_detach_from_pool+0x240/0x240 [ 121.916833][ T4643] ? lockdep_hardirqs_off+0x70/0x100 [ 121.922318][ T4643] ? _raw_spin_lock_irq+0xb7/0xf0 [ 121.927383][ T4643] ? _raw_spin_lock_irqsave+0x100/0x100 [ 121.932951][ T4643] ? wq_worker_running+0x97/0x170 [ 121.938430][ T4643] worker_thread+0xad7/0x12a0 [ 121.943151][ T4643] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 121.949068][ T4643] kthread+0x42e/0x520 [ 121.953188][ T4643] ? rcu_lock_release+0x20/0x20 [ 121.958056][ T4643] ? kthread_blkcg+0xd0/0xd0 [ 121.962667][ T4643] ret_from_fork+0x1f/0x30 [ 121.967105][ T4643] [ 121.970138][ T4643] [ 121.972474][ T4643] Allocated by task 1: [ 121.976550][ T4643] __kasan_kmalloc+0xaf/0xe0 [ 121.981204][ T4643] __usb_create_hcd+0x5f/0x830 [ 121.985982][ T4643] vhci_hcd_probe+0xff/0x370 [ 121.990591][ T4643] platform_probe+0x137/0x1c0 [ 121.995281][ T4643] really_probe+0x276/0xc70 [ 121.999802][ T4643] __driver_probe_device+0x1f5/0x390 [ 122.005106][ T4643] driver_probe_device+0x4f/0x420 [ 122.010144][ T4643] __device_attach_driver+0x2b0/0x500 [ 122.015533][ T4643] bus_for_each_drv+0x184/0x210 [ 122.020509][ T4643] __device_attach+0x2a7/0x480 [ 122.025290][ T4643] bus_probe_device+0xba/0x1d0 [ 122.030074][ T4643] device_add+0xbcf/0x1050 [ 122.034514][ T4643] platform_device_add+0x4bf/0x830 [ 122.039643][ T4643] vhci_hcd_init+0x3c7/0x500 [ 122.044251][ T4643] do_one_initcall+0x272/0x730 [ 122.049031][ T4643] do_initcall_level+0x13d/0x1f0 [ 122.053989][ T4643] do_initcalls+0x4b/0x90 [ 122.058333][ T4643] kernel_init_freeable+0x3d5/0x560 [ 122.063547][ T4643] kernel_init+0x19/0x1b0 [ 122.067896][ T4643] ret_from_fork+0x1f/0x30 [ 122.072330][ T4643] [ 122.074673][ T4643] Freed by task 5001: [ 122.078663][ T4643] kasan_set_track+0x4b/0x70 [ 122.083449][ T4643] kasan_set_free_info+0x1f/0x40 [ 122.088419][ T4643] ____kasan_slab_free+0xd5/0x110 [ 122.093570][ T4643] slab_free_freelist_hook+0xec/0x170 [ 122.098974][ T4643] kfree+0xef/0x2a0 [ 122.102816][ T4643] vhci_hcd_remove+0xe0/0x100 [ 122.107525][ T4643] platform_remove+0x92/0xe0 [ 122.112136][ T4643] device_release_driver_internal+0x44c/0x710 [ 122.118224][ T4643] unbind_store+0x2e2/0x300 [ 122.122752][ T4643] kernfs_fop_write_iter+0x3a8/0x500 [ 122.128064][ T4643] vfs_write+0x748/0xd70 [ 122.132326][ T4643] ksys_write+0x153/0x260 [ 122.136672][ T4643] do_syscall_64+0x4c/0xa0 [ 122.141106][ T4643] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 122.147018][ T4643] [ 122.149398][ T4643] The buggy address belongs to the object at ffff888147cb4000 [ 122.149398][ T4643] which belongs to the cache kmalloc-8k of size 8192 [ 122.163767][ T4643] The buggy address is located 1088 bytes inside of [ 122.163767][ T4643] 8192-byte region [ffff888147cb4000, ffff888147cb6000) [ 122.177247][ T4643] The buggy address belongs to the page: [ 122.182894][ T4643] page:ffffea00051f2c00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x147cb0 [ 122.193155][ T4643] head:ffffea00051f2c00 order:3 compound_mapcount:0 compound_pincount:0 [ 122.201605][ T4643] flags: 0x57ff00000010200(slab|head|node=1|zone=2|lastcpupid=0x7ff) [ 122.209799][ T4643] raw: 057ff00000010200 0000000000000000 dead000000000122 ffff888016c42280 [ 122.218519][ T4643] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000 [ 122.227114][ T4643] page dumped because: kasan: bad access detected [ 122.233536][ T4643] page_owner tracks the page as allocated [ 122.239360][ T4643] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, ts 11046047542, free_ts 0 [ 122.257701][ T4643] get_page_from_freelist+0x24f6/0x2670 [ 122.263345][ T4643] __alloc_pages+0x1ee/0x480 [ 122.267958][ T4643] alloc_page_interleave+0x24/0x1e0 [ 122.273173][ T4643] new_slab+0xc0/0x4b0 [ 122.277257][ T4643] ___slab_alloc+0x807/0xdd0 [ 122.281864][ T4643] kmem_cache_alloc_trace+0xf9/0x290 [ 122.287163][ T4643] init+0x68e/0x1170 [ 122.291075][ T4643] do_one_initcall+0x272/0x730 [ 122.295853][ T4643] do_initcall_level+0x13d/0x1f0 [ 122.300897][ T4643] do_initcalls+0x4b/0x90 [ 122.305317][ T4643] kernel_init_freeable+0x3d5/0x560 [ 122.310554][ T4643] kernel_init+0x19/0x1b0 [ 122.314920][ T4643] ret_from_fork+0x1f/0x30 [ 122.319533][ T4643] page_owner free stack trace missing [ 122.325000][ T4643] [ 122.327339][ T4643] Memory state around the buggy address: [ 122.332979][ T4643] ffff888147cb4300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 122.341068][ T4643] ffff888147cb4380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 122.349372][ T4643] >ffff888147cb4400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 122.357715][ T4643] ^ [ 122.366950][ T4643] ffff888147cb4480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 122.375126][ T4643] ffff888147cb4500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 122.383205][ T4643] ================================================================== [ 122.391285][ T4643] Disabling lock debugging due to kernel taint [ 122.397457][ T4643] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 122.404666][ T4643] CPU: 1 PID: 4643 Comm: kworker/u4:13 Tainted: G B syzkaller #0 [ 122.413718][ T4643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 122.423929][ T4643] Workqueue: usbip_event event_handler [ 122.429433][ T4643] Call Trace: [ 122.432822][ T4643] [ 122.435769][ T4643] dump_stack_lvl+0x188/0x250 [ 122.440479][ T4643] ? show_regs_print_info+0x20/0x20 [ 122.445698][ T4643] ? load_image+0x410/0x410 [ 122.450316][ T4643] panic+0x2f8/0x850 [ 122.454247][ T4643] ? bpf_jit_dump+0xd0/0xd0 [ 122.458764][ T4643] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 122.464750][ T4643] ? _raw_spin_unlock+0x40/0x40 [ 122.469624][ T4643] ? __lock_acquire+0x107/0x7b50 [ 122.474581][ T4643] check_panic_on_warn+0x80/0xa0 [ 122.479551][ T4643] ? __lock_acquire+0x107/0x7b50 [ 122.484607][ T4643] end_report+0x6d/0xf0 [ 122.488795][ T4643] kasan_report+0x102/0x130 [ 122.493324][ T4643] ? __lock_acquire+0x107/0x7b50 [ 122.498324][ T4643] __lock_acquire+0x107/0x7b50 [ 122.503115][ T4643] ? vprintk_emit+0xc0/0x150 [ 122.507720][ T4643] ? read_lock_is_recursive+0x10/0x10 [ 122.513122][ T4643] ? __down_trylock_console_sem+0xf2/0x1f0 [ 122.519046][ T4643] ? verify_lock_unused+0x140/0x140 [ 122.524356][ T4643] ? vprintk_emit+0xa7/0x150 [ 122.528967][ T4643] ? release_firmware_map_entry+0x190/0x190 [ 122.535028][ T4643] ? vprintk_emit+0xa7/0x150 [ 122.539654][ T4643] ? console_trylock+0x70/0x70 [ 122.544446][ T4643] ? preempt_schedule+0xbc/0xd0 [ 122.549606][ T4643] ? preempt_schedule_common+0xa5/0xd0 [ 122.555093][ T4643] ? preempt_schedule+0xbc/0xd0 [ 122.559969][ T4643] lock_acquire+0x19e/0x400 [ 122.564496][ T4643] ? event_handler+0x2a5/0x460 [ 122.569369][ T4643] ? __irq_work_queue_local+0x12c/0x190 [ 122.574936][ T4643] ? read_lock_is_recursive+0x10/0x10 [ 122.580332][ T4643] ? vprintk_emit+0xf9/0x150 [ 122.584942][ T4643] ? _raw_spin_lock_irqsave+0x8b/0x100 [ 122.590426][ T4643] ? lockdep_hardirqs_off+0x70/0x100 [ 122.595834][ T4643] _raw_spin_lock_irqsave+0xb0/0x100 [ 122.601139][ T4643] ? event_handler+0x2a5/0x460 [ 122.605933][ T4643] ? _raw_spin_lock+0x40/0x40 [ 122.610635][ T4643] ? event_handler+0x181/0x460 [ 122.615424][ T4643] ? vhci_shutdown_connection+0x3d5/0x580 [ 122.621166][ T4643] event_handler+0x2a5/0x460 [ 122.625787][ T4643] process_one_work+0x867/0xff0 [ 122.630667][ T4643] ? worker_detach_from_pool+0x240/0x240 [ 122.636332][ T4643] ? lockdep_hardirqs_off+0x70/0x100 [ 122.641814][ T4643] ? _raw_spin_lock_irq+0xb7/0xf0 [ 122.646859][ T4643] ? _raw_spin_lock_irqsave+0x100/0x100 [ 122.652516][ T4643] ? wq_worker_running+0x97/0x170 [ 122.657683][ T4643] worker_thread+0xad7/0x12a0 [ 122.662512][ T4643] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 122.668433][ T4643] kthread+0x42e/0x520 [ 122.672526][ T4643] ? rcu_lock_release+0x20/0x20 [ 122.677404][ T4643] ? kthread_blkcg+0xd0/0xd0 [ 122.682011][ T4643] ret_from_fork+0x1f/0x30 [ 122.686457][ T4643] [ 122.689578][ T4643] Kernel Offset: disabled [ 122.693933][ T4643] Rebooting in 86400 seconds..