last executing test programs: 12.75303416s ago: executing program 0 (id=520): syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793f10d1050120000200000001090212"], 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r0 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x3) close(0x3) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') pread64(r1, &(0x7f0000000200)=""/9, 0x9, 0x6) 9.793033992s ago: executing program 4 (id=524): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000a80)={'mangle\x00', 0x4, "8a17e1e4"}, &(0x7f0000000ac0)=0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x25) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x1ff, 0xdc, &(0x7f0000000340)=""/220, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x4, 0xa, 0x7, 0x8001}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0x1, 0x1, 0x1, 0x1], 0x0, 0x10, 0x22}, 0x94) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) fchmod(r0, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 8.963221102s ago: executing program 0 (id=529): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) rmdir(&(0x7f0000000200)='./config/usb_gadget/g1/strings/0x409\x00') 8.547073952s ago: executing program 0 (id=531): socket$kcm(0xa, 0x922000000003, 0x11) socket$nl_route(0x10, 0x3, 0x0) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) tkill(r1, 0x1f) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 6.904475912s ago: executing program 0 (id=534): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) read$snapshot(r0, 0x0, 0x0) 6.564362131s ago: executing program 3 (id=537): r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0) pipe2(0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, &(0x7f0000000980)=""/103, &(0x7f00000025c0), &(0x7f0000000600), 0x80, r1, 0x0, 0x7}, 0x38) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000040)={0x0, 'veth0_vlan\x00', {0x3}, 0x2}) shmctl$SHM_LOCK(0x0, 0xb) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) 5.808499959s ago: executing program 0 (id=538): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000000c0)={0x2, @pix_mp={0x3, 0x100, 0x10e5263d, 0x9, 0x0, [{0x7fff, 0xa00}, {0x4817, 0x8cf}, {0xfffffffd, 0x8}, {0xfffffffe, 0xffffffff}, {0x3, 0x5d17}, {0xa, 0x8}, {0x7, 0x5}, {0xd}], 0x3f, 0xff, 0x4, 0x0, 0x1}}) 5.808378019s ago: executing program 3 (id=539): syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793f10d1050120000200000001090212"], 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r0 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x3) close(0x3) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') pread64(r1, &(0x7f0000000200)=""/9, 0x9, 0x6) 5.664957582s ago: executing program 0 (id=541): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="10"], 0x10}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1, 0x0, 0x0, 0x8000000}, 0x48043) 4.96004529s ago: executing program 4 (id=542): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) rmdir(&(0x7f0000000200)='./config/usb_gadget/g1/strings/0x409\x00') 4.852085162s ago: executing program 1 (id=543): r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1000, 0x89}, 0x50) unshare(0xe040400) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000040)={0x0, 'veth0_vlan\x00', {0x3}, 0x2}) shmctl$SHM_LOCK(0x0, 0xb) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000000c0)={0xf0f02a, 0x17}) 4.814631023s ago: executing program 4 (id=544): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 4.578595478s ago: executing program 1 (id=545): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000f90000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) r2 = socket$kcm(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000021000aac141419e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 4.469305271s ago: executing program 4 (id=547): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x11e) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0x4, 0x0, &(0x7f0000000300)="01010000", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x2003}, 0xfffffffffffffd14) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fspick(r5, &(0x7f00000000c0)='.\x00', 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r1, &(0x7f0000000280)={r5, r0, 0x1}) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000100)=0x7f, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000640)={0x0, @in6={{0xa, 0x2010, 0x0, @empty}}, 0x0, 0x800, 0xfffffffd, 0x0, 0x8a, 0x200}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @remote}}, 0x100, 0x0, 0x0, 0x0, 0x54, 0x1, 0x73}, 0x9c) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ipv6_route\x00') pread64(r6, &(0x7f0000003b00)=""/195, 0xc3, 0x591f) rmdir(&(0x7f00000000c0)='./cgroup/../file0\x00') syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) 3.035058906s ago: executing program 2 (id=548): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) read$snapshot(r0, 0x0, 0x0) 2.264870335s ago: executing program 4 (id=549): openat$ppp(0xffffffffffffff9c, 0x0, 0x82000, 0x0) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="040e0c0b1c20"], 0xf) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) 2.264674455s ago: executing program 3 (id=550): r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0) pipe2(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1000, 0x89}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000040)={0x0, 'veth0_vlan\x00', {0x3}, 0x2}) shmctl$SHM_LOCK(0x0, 0xb) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) 2.227748065s ago: executing program 1 (id=551): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0a"], 0xd) 2.191479166s ago: executing program 3 (id=552): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000a80)={'mangle\x00', 0x4, "8a17e1e4"}, &(0x7f0000000ac0)=0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x25) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x1ff, 0xdc, &(0x7f0000000340)=""/220, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x4, 0xa, 0x7, 0x8001}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0x1, 0x1, 0x1, 0x1], 0x0, 0x10, 0x22}, 0x94) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) fchmod(r0, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 1.339589167s ago: executing program 4 (id=553): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x22803) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x48, &(0x7f00000000c0)=ANY=[@ANYBLOB=',('], 0x28) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0xf3, 0x1b1c07, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x80d02, 0x0) socket(0x400000000010, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$userio(0xffffffffffffff9c, 0x0, 0x22242, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000080)={0x6b19, 0x8, 0xffff, 0x400e0a, 0x7f, ' <\x00', 0x8, 0x5}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0xff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_procfs(0x0, &(0x7f0000000540)='net/netlink\x00') pread64(r4, &(0x7f000001a240)=""/102399, 0x18fff, 0x100008) 1.339014967s ago: executing program 2 (id=554): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) rmdir(&(0x7f0000000200)='./config/usb_gadget/g1/strings/0x409\x00') 1.269405179s ago: executing program 1 (id=555): r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1000, 0x89}, 0x50) unshare(0xe040400) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000040)={0x0, 'veth0_vlan\x00', {0x3}, 0x2}) shmctl$SHM_LOCK(0x0, 0xb) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000000c0)={0xf0f02a, 0x17}) 1.129906302s ago: executing program 3 (id=556): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xe0, 0xf, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x3f00000000000000) 1.092409553s ago: executing program 2 (id=557): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 971.768866ms ago: executing program 3 (id=558): socket$netlink(0x10, 0x3, 0xa) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000006740)=[{{&(0x7f00000016c0)=@nl=@kern={0x10, 0x0, 0x0, 0x800}, 0x80, 0x0}}], 0x1, 0x4000) r1 = semget$private(0x0, 0x1, 0x400) semop(r1, &(0x7f00000001c0)=[{0x1, 0x7, 0x1000}], 0x1) semtimedop(0x0, &(0x7f0000000340), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) get_robust_list(0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./my_dbroot\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/target/dbroot\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='./my_dbroot', 0xb) close(r3) mkdir(&(0x7f0000000500)='./my_dbroot/alua\x00', 0x1ff) mkdir(&(0x7f0000000600)='./my_dbroot/alua/usb_gadget\x00', 0x1ff) mkdir(&(0x7f0000000900)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdir(&(0x7f0000000a00)='./my_configfs/target/usb_gadget\x00', 0x1ff) mkdir(&(0x7f0000000b00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff) mkdir(&(0x7f0000000c00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1\x00', 0x1ff) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) mknod$loop(0x0, 0xfff, 0x1) socket$alg(0x26, 0x5, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/wireless\x00') preadv(r4, &(0x7f0000000100)=[{&(0x7f0000000380)=""/71, 0x47}], 0x1, 0x15c, 0x0) 894.345728ms ago: executing program 2 (id=559): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000d80)=@newtaction={0x98, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x84, 0x1, [@m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_sample={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x7, 0x5f, 0x0, 0x101, 0x8cb8}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x3}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x98}}, 0x0) 867.165218ms ago: executing program 1 (id=560): r0 = socket$netlink(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'veth1_to_hsr\x00', &(0x7f0000000080)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x4, 0x7, 0x0, 0x3, 0x0, 0x20, 0x5, [0x2, 0x2, 0xfffffffe, 0x102, 0x5, 0x3, 0x0, 0x8]}}) 766.222391ms ago: executing program 2 (id=561): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000f90000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) r2 = socket$kcm(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000021000aac141419e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 636.553414ms ago: executing program 1 (id=562): r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0) pipe2(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1000, 0x89}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000040)={0x0, 'veth0_vlan\x00', {0x3}, 0x2}) shmctl$SHM_LOCK(0x0, 0xb) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) 0s ago: executing program 2 (id=563): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) close(0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0xfc5f, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0xfc5f}, 0x20) socket$netlink(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r1, &(0x7f0000000100)='md0', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='7:0', 0x3) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.190' (ED25519) to the list of known hosts. [ 72.559874][ T4260] cgroup: Unknown subsys name 'net' [ 72.689146][ T4260] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.285122][ T4260] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 76.295618][ T4290] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.298071][ T4291] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.304216][ T4290] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.310978][ T4291] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.318030][ T4290] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 76.325709][ T4291] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.332370][ T4290] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.339364][ T4291] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.353331][ T4291] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.353963][ T4290] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 76.360674][ T4291] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.367962][ T4290] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.375039][ T4291] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.382170][ T4290] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 76.389257][ T4291] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.397785][ T4290] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.409715][ T4292] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 76.411016][ T4290] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.434864][ T4290] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.442326][ T4290] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 76.447647][ T4291] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.456653][ T4291] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.457327][ T4290] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 76.463959][ T4291] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 76.471629][ T4290] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.485452][ T4277] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 76.492786][ T4277] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.500978][ T4292] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 76.516570][ T4292] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 76.524966][ T4293] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.893534][ T4280] chnl_net:caif_netlink_parms(): no params data found [ 76.934548][ T4273] chnl_net:caif_netlink_parms(): no params data found [ 77.100718][ T4275] chnl_net:caif_netlink_parms(): no params data found [ 77.129580][ T4280] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.136851][ T4280] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.145334][ T4280] device bridge_slave_0 entered promiscuous mode [ 77.153528][ T4273] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.160871][ T4273] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.168815][ T4273] device bridge_slave_0 entered promiscuous mode [ 77.185426][ T4283] chnl_net:caif_netlink_parms(): no params data found [ 77.199396][ T4280] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.207754][ T4280] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.216163][ T4280] device bridge_slave_1 entered promiscuous mode [ 77.223613][ T4273] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.230837][ T4273] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.239365][ T4273] device bridge_slave_1 entered promiscuous mode [ 77.258594][ T4272] chnl_net:caif_netlink_parms(): no params data found [ 77.331352][ T4280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.342432][ T4273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.369140][ T4280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.391099][ T4273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.420366][ T4280] team0: Port device team_slave_0 added [ 77.448784][ T4280] team0: Port device team_slave_1 added [ 77.472360][ T4275] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.479598][ T4275] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.489535][ T4275] device bridge_slave_0 entered promiscuous mode [ 77.508533][ T4275] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.515797][ T4275] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.523913][ T4275] device bridge_slave_1 entered promiscuous mode [ 77.533170][ T4273] team0: Port device team_slave_0 added [ 77.542719][ T4273] team0: Port device team_slave_1 added [ 77.574600][ T4280] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.581605][ T4280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.607706][ T4280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.641350][ T4283] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.649332][ T4283] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.659533][ T4283] device bridge_slave_0 entered promiscuous mode [ 77.667664][ T4272] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.675015][ T4272] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.682773][ T4272] device bridge_slave_0 entered promiscuous mode [ 77.691301][ T4280] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.698441][ T4280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.724551][ T4280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.736838][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.743988][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.769929][ T4273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.782664][ T4275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.792624][ T4283] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.800348][ T4283] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.808904][ T4283] device bridge_slave_1 entered promiscuous mode [ 77.816193][ T4272] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.823300][ T4272] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.832203][ T4272] device bridge_slave_1 entered promiscuous mode [ 77.844369][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.851354][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.880185][ T4273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.897458][ T4275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.935742][ T4272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.973235][ T4272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.000165][ T4283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.021270][ T4275] team0: Port device team_slave_0 added [ 78.042467][ T4283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.063989][ T4273] device hsr_slave_0 entered promiscuous mode [ 78.070685][ T4273] device hsr_slave_1 entered promiscuous mode [ 78.078770][ T4275] team0: Port device team_slave_1 added [ 78.097126][ T4280] device hsr_slave_0 entered promiscuous mode [ 78.105113][ T4280] device hsr_slave_1 entered promiscuous mode [ 78.111983][ T4280] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.119921][ T4280] Cannot create hsr debugfs directory [ 78.153526][ T4272] team0: Port device team_slave_0 added [ 78.170616][ T4283] team0: Port device team_slave_0 added [ 78.191176][ T4283] team0: Port device team_slave_1 added [ 78.198699][ T4272] team0: Port device team_slave_1 added [ 78.228127][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.238342][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.265361][ T4275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.280687][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.287762][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.313853][ T4275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.354397][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.361428][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.387509][ T4272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.403545][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.410603][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.436575][ T4272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.448383][ T4283] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.455432][ T4283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.481830][ T4283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.497653][ T4283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.504687][ T4283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.524480][ T4293] Bluetooth: hci1: command 0x0409 tx timeout [ 78.530758][ T4291] Bluetooth: hci2: command 0x0409 tx timeout [ 78.543381][ T4283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.575733][ T4275] device hsr_slave_0 entered promiscuous mode [ 78.582470][ T4275] device hsr_slave_1 entered promiscuous mode [ 78.589250][ T4275] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.597521][ T4275] Cannot create hsr debugfs directory [ 78.604077][ T4291] Bluetooth: hci4: command 0x0409 tx timeout [ 78.610595][ T4291] Bluetooth: hci0: command 0x0409 tx timeout [ 78.617080][ T4294] Bluetooth: hci3: command 0x0409 tx timeout [ 78.697697][ T4272] device hsr_slave_0 entered promiscuous mode [ 78.704579][ T4272] device hsr_slave_1 entered promiscuous mode [ 78.711168][ T4272] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.719267][ T4272] Cannot create hsr debugfs directory [ 78.777746][ T4283] device hsr_slave_0 entered promiscuous mode [ 78.784874][ T4283] device hsr_slave_1 entered promiscuous mode [ 78.791871][ T4283] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.799617][ T4283] Cannot create hsr debugfs directory [ 78.990904][ T4280] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.015671][ T4280] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.042550][ T4280] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.072749][ T4280] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.127453][ T4273] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.138230][ T4273] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.148568][ T4273] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.162465][ T4273] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.227558][ T4275] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 79.247694][ T4275] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 79.273470][ T4275] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 79.310007][ T4275] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 79.364150][ T4272] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.375116][ T4272] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.400407][ T4272] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.419667][ T4280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.439531][ T4272] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.466635][ T1012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.479306][ T1012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.513105][ T4280] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.547846][ T4273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.557257][ T1012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.569514][ T1012] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.578973][ T1012] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.586292][ T1012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.595880][ T1012] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.607064][ T4283] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.630004][ T4273] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.639791][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.648919][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.659136][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.666308][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.676714][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.684972][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.702649][ T4283] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.712335][ T4283] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.726881][ T4283] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.747932][ T1012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.760403][ T1012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.769275][ T1012] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.778026][ T1012] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.785165][ T1012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.801030][ T1012] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.831132][ T1012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.840336][ T1012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.851232][ T1012] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.860724][ T1012] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.867883][ T1012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.877624][ T1012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.887445][ T1012] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.896543][ T1012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.906412][ T1012] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 79.918450][ T1012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.944250][ T4275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.957264][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.968911][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.012659][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.021685][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.031022][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.041878][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.050898][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.060584][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.069884][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.084642][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.092507][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.102974][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.112240][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.126455][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.138080][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.147778][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.161964][ T4275] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.206080][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.217201][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.226613][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.233856][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.249981][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.259423][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.268649][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.280732][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.290701][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.301403][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.308645][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.324994][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.346501][ T4272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.390162][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.411528][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.455042][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.464913][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.480543][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.489753][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.557326][ T4283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.571955][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.582165][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.597177][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.605148][ T4291] Bluetooth: hci1: command 0x041b tx timeout [ 80.611191][ T4291] Bluetooth: hci2: command 0x041b tx timeout [ 80.621096][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.629770][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.638403][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.648536][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.660830][ T4272] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.681113][ T4283] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.688026][ T4291] Bluetooth: hci4: command 0x041b tx timeout [ 80.689787][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.694282][ T4294] Bluetooth: hci0: command 0x041b tx timeout [ 80.702023][ T4293] Bluetooth: hci3: command 0x041b tx timeout [ 80.731013][ T1012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.745239][ T1012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.756753][ T1012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.774586][ T1012] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.791128][ T1012] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.798312][ T1012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.808209][ T1012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.825885][ T1012] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.840234][ T1012] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.847460][ T1012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.856523][ T1012] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 80.864220][ T1012] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 80.872769][ T1012] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.899161][ T4280] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.938423][ T1012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.955424][ T1012] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.970899][ T1012] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.978102][ T1012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.987358][ T1012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.996942][ T1012] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.006502][ T1012] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.013629][ T1012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.022013][ T1012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.032330][ T1012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.041767][ T1012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.058352][ T1012] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.074094][ T1012] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.082137][ T1012] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.092828][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.128220][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.146353][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.162089][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.187667][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.210001][ T4272] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.227584][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.250557][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.271226][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.281198][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.290555][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.300004][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.309778][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.318918][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.328640][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.337623][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.345584][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.353113][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.391811][ T4275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.408399][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.432058][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.456451][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.470412][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.481588][ T4280] device veth0_vlan entered promiscuous mode [ 81.511668][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.521890][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.530367][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.546701][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.580393][ T4280] device veth1_vlan entered promiscuous mode [ 81.597204][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 81.612375][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.622205][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.634256][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.643198][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.657822][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.667217][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.678936][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.729518][ T4273] device veth0_vlan entered promiscuous mode [ 81.774636][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 81.782777][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.819066][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.856140][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.887751][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.928755][ T4280] device veth0_macvtap entered promiscuous mode [ 81.974422][ T4280] device veth1_macvtap entered promiscuous mode [ 82.010463][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.019971][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.038090][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 82.048420][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 82.071162][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.088152][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.106519][ T4273] device veth1_vlan entered promiscuous mode [ 82.131835][ T4272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.151057][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.184145][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.224157][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.292034][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.319124][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 82.328690][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 82.338568][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.347894][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.358106][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.372731][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.391037][ T4273] device veth0_macvtap entered promiscuous mode [ 82.400343][ T4280] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.411118][ T4280] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.420891][ T4280] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.429747][ T4280] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.482458][ T4273] device veth1_macvtap entered promiscuous mode [ 82.494904][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 82.507251][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 82.516535][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.528032][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.590692][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.600805][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.611187][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.620128][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.631623][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.640307][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.651736][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.660578][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.668702][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.676920][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.688089][ T4283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.695054][ T4293] Bluetooth: hci2: command 0x040f tx timeout [ 82.695094][ T4293] Bluetooth: hci1: command 0x040f tx timeout [ 82.711716][ T4272] device veth0_vlan entered promiscuous mode [ 82.728621][ T4275] device veth0_vlan entered promiscuous mode [ 82.764449][ T4291] Bluetooth: hci4: command 0x040f tx timeout [ 82.770511][ T4291] Bluetooth: hci3: command 0x040f tx timeout [ 82.776797][ T4293] Bluetooth: hci0: command 0x040f tx timeout [ 82.785947][ T4275] device veth1_vlan entered promiscuous mode [ 82.796432][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.815176][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.836922][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.850097][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.861555][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.875345][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 82.887293][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 82.895637][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 82.903466][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.912807][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.921641][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.930633][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.945207][ T4272] device veth1_vlan entered promiscuous mode [ 82.965477][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.979884][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.991834][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.007422][ T1012] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.020295][ T1012] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.034785][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.046449][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 83.055100][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.063643][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.073151][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 83.081503][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.091321][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.102938][ T4273] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.113123][ T4273] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.121906][ T4273] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.130639][ T4273] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.142195][ T4275] device veth0_macvtap entered promiscuous mode [ 83.163047][ T4283] device veth0_vlan entered promiscuous mode [ 83.189020][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.202739][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.231502][ T4275] device veth1_macvtap entered promiscuous mode [ 83.265820][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.277881][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.292953][ T4272] device veth0_macvtap entered promiscuous mode [ 83.309127][ T4283] device veth1_vlan entered promiscuous mode [ 83.330004][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.338583][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.357121][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.376263][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.393460][ T4272] device veth1_macvtap entered promiscuous mode [ 83.429864][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.441794][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.451978][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.463178][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.485363][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.505842][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 83.522110][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.538256][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.620296][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.677882][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.719055][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.772919][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.816463][ T4368] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 83.921599][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.002763][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 84.038614][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.091364][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.196982][ T4332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.266231][ T4275] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.285069][ T4332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.323653][ T4275] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.379909][ T4275] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.450901][ T4275] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.528980][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.567714][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.621869][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.679334][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.763838][ T4293] Bluetooth: hci1: command 0x0419 tx timeout [ 84.764494][ T4291] Bluetooth: hci2: command 0x0419 tx timeout [ 84.808174][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.844135][ T4291] Bluetooth: hci0: command 0x0419 tx timeout [ 84.850742][ T4294] Bluetooth: hci3: command 0x0419 tx timeout [ 84.857866][ T4291] Bluetooth: hci4: command 0x0419 tx timeout [ 84.891927][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.947480][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.978174][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.017668][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.039838][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.112714][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.156168][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.172407][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.185512][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.195586][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.206182][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.217788][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.227503][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.244285][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.317804][ T4272] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.328240][ T4272] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.338017][ T4272] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.349802][ T4272] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.373178][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.382856][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.405306][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.413153][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.425912][ T4283] device veth0_macvtap entered promiscuous mode [ 85.539293][ T4378] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7'. [ 86.178603][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 86.218114][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.256032][ T4283] device veth1_macvtap entered promiscuous mode [ 86.350497][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.411231][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.429632][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.440302][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.451132][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.462893][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.484455][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.503660][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.525493][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.550000][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.591168][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.624367][ T4376] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.636011][ T4376] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.659293][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.693912][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.704264][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.718277][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.728368][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.754444][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.765839][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.776422][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.895261][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.933043][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.983391][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 87.013944][ T955] cfg80211: failed to load regulatory.db [ 87.065037][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 87.145540][ T4283] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.189212][ T4283] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.236414][ T4283] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.298286][ T4283] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.426829][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.093344][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.382281][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 88.554968][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.562884][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.684495][ T1012] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.692378][ T1012] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.778224][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.794716][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.856264][ T4350] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.893068][ T4350] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.959551][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 90.109963][ T4406] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15'. [ 90.177527][ T4350] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.302510][ T4350] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.485853][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 91.283727][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 92.040836][ T4428] syz.0.19 uses obsolete (PF_INET,SOCK_PACKET) [ 92.983731][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 93.413739][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 93.433724][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10a!!! [ 93.438726][ T22] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 93.473734][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 93.483720][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 93.493730][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 93.503717][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 93.513728][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 93.523724][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 93.772517][ T4464] netlink: 24 bytes leftover after parsing attributes in process `syz.3.27'. [ 94.216567][ T22] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 94.241272][ T22] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 94.282549][ T22] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 94.473165][ T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.572941][ T4474] netlink: 'syz.3.31': attribute type 1 has an invalid length. [ 94.583326][ T4474] netlink: 'syz.3.31': attribute type 2 has an invalid length. [ 94.640538][ T4448] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 99.680268][ T2188] usb 3-1: USB disconnect, device number 2 [ 100.792870][ T53] block nbd2: Attempted send on invalid socket [ 100.801353][ T53] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 100.814022][ T4520] FAT-fs (nbd2): unable to read boot sector [ 100.910640][ T4521] netlink: 20 bytes leftover after parsing attributes in process `syz.2.41'. [ 105.104145][ T4492] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 105.865992][ T4492] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 105.885207][ T4492] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 105.914551][ T4492] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 105.936522][ T4492] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.958275][ T4553] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 106.086459][ T4572] netlink: 24 bytes leftover after parsing attributes in process `syz.1.54'. [ 109.554456][ T4492] usb 5-1: USB disconnect, device number 2 [ 109.687732][ T4580] netlink: 'syz.2.58': attribute type 8 has an invalid length. [ 116.188663][ T4655] binder: BINDER_SET_CONTEXT_MGR already set [ 116.216419][ T4655] binder: 4654:4655 ioctl 4018620d 200000004a80 returned -16 [ 117.493686][ C1] sched: RT throttling activated [ 120.779078][ T4702] Bluetooth: MGMT ver 1.22 [ 124.063807][ T4492] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 124.813938][ T4492] usb 3-1: Using ep0 maxpacket: 32 [ 124.822478][ T4492] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 124.856144][ T4492] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.877174][ T4492] usb 3-1: config 0 has no interface number 0 [ 124.887334][ T4492] usb 3-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 124.918627][ T4492] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 124.960987][ T4492] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.990053][ T4492] usb 3-1: Product: syz [ 124.996211][ T4492] usb 3-1: Manufacturer: syz [ 125.001138][ T4492] usb 3-1: SerialNumber: syz [ 125.029411][ T4492] usb 3-1: config 0 descriptor?? [ 125.038517][ T4748] binder: BINDER_SET_CONTEXT_MGR already set [ 125.044999][ T4748] binder: 4747:4748 ioctl 4018620d 200000004a80 returned -16 [ 125.084153][ T4492] radio-si470x 3-1:0.35: could not find interrupt in endpoint [ 125.187995][ T14] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 125.190476][ T4492] radio-si470x: probe of 3-1:0.35 failed with error -5 [ 125.342442][ T4492] radio-raremono 3-1:0.35: this is not Thanko's Raremono. [ 125.352711][ T4492] usbhid 3-1:0.35: couldn't find an input interrupt endpoint [ 125.396795][ T14] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 64 [ 125.606707][ T4492] usb 3-1: USB disconnect, device number 3 [ 126.204238][ T14] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 64 [ 126.831796][ T14] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 126.841729][ T14] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 126.851917][ T14] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 64 [ 126.861886][ T14] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 64 [ 126.874427][ T14] usb 1-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 126.904248][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 126.912571][ T14] usb 1-1: Product: syz [ 126.951678][ T14] usb 1-1: Manufacturer: syz [ 127.146995][ T4746] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 127.161246][ T4746] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 127.171852][ T4746] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 127.183817][ T4746] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 127.197132][ T4746] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 127.210387][ T4746] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 127.375627][ T14] usb 1-1: USB2VGA dongle found at address 2 [ 127.614851][ T14] usb 1-1: Allocated 8 output buffers [ 127.696049][ T14] usb 1-1: Failed to early initialize device [ 127.756903][ T14] usb 1-1: USB disconnect, device number 2 [ 128.007314][ T4770] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 128.924408][ T14] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 129.123798][ T14] usb 5-1: Using ep0 maxpacket: 32 [ 129.273214][ T4785] binder: 4784:4785 unknown command 1074553619 [ 129.659539][ T4785] binder: 4784:4785 ioctl c0306201 200000000440 returned -22 [ 129.837750][ T14] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 129.880055][ T14] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 129.983889][ T14] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 130.063513][ T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.256872][ T14] usb 5-1: config 0 descriptor?? [ 130.278434][ T14] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 132.264072][ T4324] usb 5-1: USB disconnect, device number 3 [ 132.479873][ T4831] tipc: Enabling of bearer rejected, failed to enable media [ 133.089670][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.099526][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.939769][ T26] audit: type=1326 audit(1785667079.333:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4842 comm="syz.0.134" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2806d9e019 code=0x0 [ 133.963123][ C1] vkms_vblank_simulate: vblank timer overrun [ 134.153995][ T4323] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 134.345623][ T4323] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 64 [ 134.380575][ T4323] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 64 [ 134.450912][ T4323] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 134.492875][ T4323] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 134.525007][ T4323] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 64 [ 134.557156][ T4323] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 64 [ 134.590422][ T4323] usb 3-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 134.629134][ T4323] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 134.684880][ T4323] usb 3-1: Product: syz [ 134.689775][ T4323] usb 3-1: Manufacturer: syz [ 134.745599][ T4841] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 134.821364][ T4841] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 135.223842][ T4841] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 135.294202][ T4841] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 135.302753][ T4841] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 135.543973][ T14] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 135.853471][ T4841] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 135.915916][ T4323] usb 3-1: USB2VGA dongle found at address 4 [ 135.936745][ T4323] usb 3-1: Allocated 8 output buffers [ 135.958178][ T4323] usb 3-1: Failed to early initialize device [ 136.054047][ T14] usb 5-1: Using ep0 maxpacket: 32 [ 136.061621][ T14] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.292179][ T14] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 136.366447][ T14] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 136.459097][ T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.519018][ T4841] usb 3-1: Failed to initialize device [ 136.537525][ T4876] tipc: Enabling of bearer rejected, failed to enable media [ 136.552728][ T14] usb 5-1: config 0 descriptor?? [ 136.812981][ T14] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 137.265221][ T14] usb 3-1: USB disconnect, device number 4 [ 137.381571][ T4886] binder: 4885:4886 unknown command 1074553619 [ 137.399570][ T4886] binder: 4885:4886 ioctl c0306201 200000000440 returned -22 [ 138.667925][ T41] usb 5-1: USB disconnect, device number 4 [ 140.291110][ T4915] tipc: Enabling of bearer rejected, failed to enable media [ 140.913958][ T14] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 141.275732][ T14] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 141.300850][ T14] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 141.356846][ T14] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 141.445366][ T14] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.532370][ T14] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 141.644973][ T14] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 141.673830][ T14] usb 2-1: Product: syz [ 141.685323][ T14] usb 2-1: Manufacturer: syz [ 141.733356][ T14] cdc_wdm 2-1:1.0: skipping garbage [ 141.763905][ T14] cdc_wdm 2-1:1.0: skipping garbage [ 141.802189][ T14] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 141.900947][ T14] cdc_wdm 2-1:1.0: Unknown control protocol [ 141.955828][ T14] usb 2-1: USB disconnect, device number 2 [ 141.965290][ T4932] using random self ethernet address [ 141.970923][ T4932] using random host ethernet address [ 142.115366][ T4934] binder: 4933:4934 unknown command 1074553619 [ 142.133845][ T4934] binder: 4933:4934 ioctl c0306201 200000000440 returned -22 [ 142.173546][ T4932] using random self ethernet address [ 142.228930][ T4935] Zero length message leads to an empty skb [ 142.270414][ T4932] using random host ethernet address [ 142.514085][ T14] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 142.630281][ T4945] binder: BINDER_SET_CONTEXT_MGR already set [ 142.650143][ T4945] binder: 4944:4945 ioctl 4018620d 200000000100 returned -16 [ 142.715516][ T4945] binder: BINDER_SET_CONTEXT_MGR already set [ 142.724031][ T4945] binder: 4944:4945 ioctl 4018620d 200000004a80 returned -16 [ 142.725722][ T14] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 142.740658][ T2188] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 142.954969][ T2188] usb 5-1: Using ep0 maxpacket: 32 [ 142.973034][ T14] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 142.973076][ T2188] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 143.011036][ T2188] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 143.141368][ T2188] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 143.370074][ T14] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 143.483807][ T2188] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.522724][ T14] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.542127][ T2188] usb 5-1: config 0 descriptor?? [ 143.557139][ T2188] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 143.581375][ T14] usb 2-1: string descriptor 0 read error: -71 [ 143.605103][ T14] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 143.642233][ T14] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 143.834347][ T14] usb 2-1: can't set config #1, error -71 [ 143.934990][ T14] usb 2-1: USB disconnect, device number 3 [ 144.317995][ T4964] tipc: Enabling of bearer rejected, failed to enable media [ 144.483940][ T4492] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 144.696588][ T4492] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.727642][ T4492] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.745673][ T4492] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 144.758935][ T4492] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.804068][ T4492] usb 1-1: config 0 descriptor?? [ 145.459465][ T4492] hid-led: probe of 0003:27B8:01ED.0001 failed with error -71 [ 145.491807][ T4492] usb 1-1: USB disconnect, device number 3 [ 146.226726][ T4322] usb 5-1: USB disconnect, device number 5 [ 146.303162][ T4985] binder: BINDER_SET_CONTEXT_MGR already set [ 146.312560][ T4985] binder: 4984:4985 ioctl 4018620d 200000000480 returned -16 [ 146.322999][ T4985] binder: 4984:4985 unknown command 1074553619 [ 146.338728][ T4985] binder: 4984:4985 ioctl c0306201 200000000440 returned -22 [ 147.897672][ T5008] tipc: Enabling of bearer rejected, failed to enable media [ 148.051307][ T5013] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 148.863997][ T2188] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 149.363756][ T2188] usb 1-1: Using ep0 maxpacket: 32 [ 149.438585][ T2188] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 150.650769][ T2188] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 150.837444][ T2188] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 150.962016][ T2188] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.282220][ T2188] usb 1-1: config 0 descriptor?? [ 151.439066][ T2188] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 151.793099][ T4287] usb 1-1: USB disconnect, device number 4 [ 153.568107][ T5056] tipc: Started in network mode [ 153.598639][ T5056] tipc: Node identity c6dd161a9125, cluster identity 4711 [ 153.631663][ T5056] tipc: Enabled bearer , priority 1 [ 153.672022][ T5055] tipc: Disabling bearer [ 154.012559][ T4408] Bluetooth: hci5: Frame reassembly failed (-84) [ 154.036180][ T5065] Bluetooth: hci5: Frame reassembly failed (-84) [ 155.488742][ T5083] binder_alloc: 5078: binder_alloc_buf, no vma [ 156.043828][ T4293] Bluetooth: hci5: command 0x1003 tx timeout [ 156.051550][ T4291] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 157.724438][ T5103] tipc: Started in network mode [ 157.731008][ T5103] tipc: Node identity e2ca8e17252c, cluster identity 4711 [ 157.774193][ T5103] tipc: Enabled bearer , priority 1 [ 157.815390][ T5102] tipc: Disabling bearer [ 162.642513][ T5152] tipc: Started in network mode [ 162.677928][ T5152] tipc: Node identity da4427803427, cluster identity 4711 [ 162.728821][ T5152] tipc: Enabled bearer , priority 1 [ 162.826592][ T5151] tipc: Disabling bearer [ 163.013804][ T4293] Bluetooth: hci5: command 0x1003 tx timeout [ 163.014099][ T4291] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 165.097100][ T5170] binder: BINDER_SET_CONTEXT_MGR already set [ 166.024539][ T5170] binder: 5168:5170 ioctl 4018620d 200000004a80 returned -16 [ 170.015313][ T4376] Bluetooth: hci5: Frame reassembly failed (-84) [ 170.105932][ T5218] netlink: 19 bytes leftover after parsing attributes in process `syz.3.244'. [ 170.126230][ T4293] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 170.149038][ T5218] netlink: 19 bytes leftover after parsing attributes in process `syz.3.244'. [ 171.033101][ T26] audit: type=1326 audit(1785667116.423:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5251 comm="syz.4.256" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe89ed9e019 code=0x0 [ 171.320595][ T26] audit: type=1326 audit(1785667116.573:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5251 comm="syz.4.256" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe89ed9e019 code=0x0 [ 172.044571][ T4293] Bluetooth: hci5: command 0x1003 tx timeout [ 172.052022][ T4291] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 172.595885][ T5261] netlink: 19 bytes leftover after parsing attributes in process `syz.1.267'. [ 172.618158][ T5261] netlink: 19 bytes leftover after parsing attributes in process `syz.1.267'. [ 174.119474][ T5257] xt_recent: hitcount (16777216) is larger than allowed maximum (255) [ 179.806327][ T5325] binder: 5324:5325 ioctl c018620c 2000000004c0 returned -1 [ 180.507078][ T5325] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 180.507134][ T5325] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 180.507146][ T5325] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 180.508540][ T26] audit: type=1800 audit(1785667125.903:5): pid=5325 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.274" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 180.525947][ T5325] syz.1.274 (5325) used greatest stack depth: 18176 bytes left [ 184.244491][ T5366] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 186.010888][ T26] audit: type=1326 audit(1785667131.403:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5383 comm="syz.2.293" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8b6ab9e019 code=0x0 [ 186.124026][ T26] audit: type=1326 audit(1785667131.513:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5383 comm="syz.2.293" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8b6ab9e019 code=0x0 [ 188.298825][ T5388] xt_recent: hitcount (16777216) is larger than allowed maximum (255) [ 189.637011][ T5422] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 194.577321][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.583824][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.956917][ T26] audit: type=1326 audit(1785667141.353:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5461 comm="syz.3.317" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc26979e019 code=0x0 [ 196.622728][ T26] audit: type=1326 audit(1785667142.003:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5461 comm="syz.3.317" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc26979e019 code=0x0 [ 198.508159][ T5487] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 198.703952][ T955] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 198.903940][ T955] usb 5-1: Using ep0 maxpacket: 32 [ 198.926247][ T955] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 199.136577][ T955] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 199.190363][ T955] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 199.212043][ T955] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.251725][ T955] usb 5-1: config 0 descriptor?? [ 199.276328][ T955] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 200.795223][ T126] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 201.004765][ T126] usb 2-1: Using ep0 maxpacket: 16 [ 201.017508][ T126] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 201.057169][ T126] usb 2-1: config 0 has no interfaces? [ 201.065085][ T126] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 201.077508][ T126] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.095985][ T126] usb 2-1: config 0 descriptor?? [ 201.301820][ T126] usb 5-1: USB disconnect, device number 6 [ 201.360916][ T4324] usb 2-1: USB disconnect, device number 4 [ 202.772569][ T4286] Bluetooth: hci2: command 0x0406 tx timeout [ 202.772590][ T4293] Bluetooth: hci3: command 0x0406 tx timeout [ 202.772621][ T4293] Bluetooth: hci0: command 0x0406 tx timeout [ 202.778839][ T4286] Bluetooth: hci1: command 0x0406 tx timeout [ 202.785954][ T4291] Bluetooth: hci4: command 0x0406 tx timeout [ 204.244429][ T955] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 204.443745][ T955] usb 3-1: Using ep0 maxpacket: 32 [ 204.457224][ T955] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 204.503371][ T955] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 204.710663][ T955] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 204.723925][ T955] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 204.738569][ T955] usb 3-1: config 0 interface 0 has no altsetting 0 [ 205.476740][ T955] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 205.496209][ T955] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 205.510584][ T955] usb 3-1: Product: syz [ 205.515359][ T955] usb 3-1: Manufacturer: syz [ 205.523550][ T955] usb 3-1: SerialNumber: syz [ 205.540774][ T955] usb 3-1: config 0 descriptor?? [ 205.629537][ T955] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 205.658185][ T955] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 207.351145][ T5545] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 211.225684][ T5523] ldusb 3-1:0.0: Couldn't submit HID_REQ_SET_REPORT -110 [ 211.385243][ T955] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 211.593737][ T955] usb 5-1: Using ep0 maxpacket: 16 [ 211.601001][ T955] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 211.641771][ T955] usb 5-1: config 0 has no interfaces? [ 211.674566][ T955] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 211.724138][ T955] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.779834][ T2188] usb 3-1: USB disconnect, device number 5 [ 211.797184][ T955] usb 5-1: config 0 descriptor?? [ 211.832598][ T2188] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 212.053607][ T7] usb 5-1: USB disconnect, device number 7 [ 220.194480][ T5670] IPv6: Can't replace route, no match found [ 220.605218][ T4291] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 220.614743][ T4291] Bluetooth: hci3: Injecting HCI hardware error event [ 220.623079][ T4293] Bluetooth: hci3: hardware error 0x00 [ 223.127180][ T4293] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 223.453884][ T22] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 223.733828][ T22] usb 4-1: Using ep0 maxpacket: 32 [ 223.830895][ T22] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 224.213726][ T22] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 224.231415][ T5703] IPv6: Can't replace route, no match found [ 224.248278][ T22] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 224.271528][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.301988][ T22] usb 4-1: config 0 descriptor?? [ 224.333275][ T22] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 224.437363][ T5708] sctp: [Deprecated]: syz.2.388 (pid 5708) Use of int in maxseg socket option. [ 224.437363][ T5708] Use struct sctp_assoc_value instead [ 225.718363][ T4492] usb 4-1: USB disconnect, device number 2 [ 228.608485][ T5752] IPv6: Can't replace route, no match found [ 229.884458][ T22] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 230.097298][ T22] usb 3-1: Using ep0 maxpacket: 32 [ 230.136613][ T22] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 230.230094][ T22] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 230.290420][ T22] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 230.309951][ T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.367828][ T22] usb 3-1: config 0 descriptor?? [ 230.463144][ T22] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 232.060438][ T4322] usb 3-1: USB disconnect, device number 6 [ 233.993970][ T5818] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 234.446914][ T5817] IPv6: Can't replace route, no match found [ 236.093865][ T22] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 236.323882][ T22] usb 4-1: Using ep0 maxpacket: 32 [ 236.341882][ T22] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 236.398898][ T22] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 236.415577][ T22] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 236.449501][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.551962][ T22] usb 4-1: config 0 descriptor?? [ 237.968978][ T22] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 238.715242][ T5861] overlayfs: missing 'lowerdir' [ 239.699484][ T126] usb 4-1: USB disconnect, device number 3 [ 240.857778][ T41] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 241.143819][ T41] usb 1-1: Using ep0 maxpacket: 16 [ 241.939611][ T41] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 241.949865][ T41] usb 1-1: config 0 has no interfaces? [ 241.955699][ T41] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 241.964950][ T41] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.975117][ T41] usb 1-1: config 0 descriptor?? [ 242.191939][ T14] usb 1-1: USB disconnect, device number 5 [ 244.923907][ T5903] device syz_tun entered promiscuous mode [ 245.283825][ T14] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 245.506704][ T14] usb 1-1: config 127 has an invalid interface number: 138 but max is 0 [ 245.537620][ T14] usb 1-1: config 127 has no interface number 0 [ 245.588289][ T14] usb 1-1: config 127 interface 138 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 245.679002][ T14] usb 1-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=4e.40 [ 245.702169][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.720546][ T14] usb 1-1: Product: syz [ 245.735033][ T14] usb 1-1: Manufacturer: syz [ 245.752369][ T14] usb 1-1: SerialNumber: syz [ 245.765707][ T126] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 245.787747][ T5903] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 245.964358][ T126] usb 4-1: Using ep0 maxpacket: 32 [ 245.987669][ T126] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 246.016339][ T14] usb 1-1: probing VID:PID(0424:012C) [ 246.022466][ T5902] device syz_tun left promiscuous mode [ 246.053014][ T14] usb 1-1: vub300 testing BULK OUT EndPoint(0) 0C [ 246.067132][ T14] usb 1-1: Could not find two sets of bulk-in/out endpoint pairs [ 246.076419][ T126] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 246.094011][ T14] vub300: probe of 1-1:127.138 failed with error -22 [ 246.132693][ T14] usb 1-1: USB disconnect, device number 6 [ 246.170790][ T126] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 246.236331][ T126] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.285675][ T126] usb 4-1: config 0 descriptor?? [ 246.318592][ T126] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 247.428899][ T4276] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 249.452234][ T5933] usb 4-1: USB disconnect, device number 4 [ 249.738626][ T4359] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 251.044200][ T4293] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 251.052951][ T4293] Bluetooth: hci2: Injecting HCI hardware error event [ 251.061981][ T4291] Bluetooth: hci2: hardware error 0x00 [ 251.223831][ T4359] usb 5-1: Using ep0 maxpacket: 16 [ 251.242521][ T4359] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 251.285174][ T4359] usb 5-1: config 0 has no interfaces? [ 251.304575][ T4359] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 251.329642][ T4359] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.368212][ T4359] usb 5-1: config 0 descriptor?? [ 251.491600][ T5958] sctp: [Deprecated]: syz.3.459 (pid 5958) Use of int in maxseg socket option. [ 251.491600][ T5958] Use struct sctp_assoc_value instead [ 251.589391][ T4359] usb 5-1: USB disconnect, device number 8 [ 253.174273][ T4291] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 253.652890][ T4359] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 254.384481][ T4359] usb 2-1: Using ep0 maxpacket: 32 [ 254.393539][ T4359] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 254.432008][ T4359] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 254.478173][ T4359] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 254.539322][ T4359] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.603088][ T4359] usb 2-1: config 0 descriptor?? [ 254.644519][ T4359] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 255.965451][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.971849][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.023775][ T4326] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 257.333992][ T2188] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 257.592576][ T4409] usb 2-1: USB disconnect, device number 6 [ 258.414830][ T2188] usb 1-1: Using ep0 maxpacket: 16 [ 258.451618][ T2188] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 258.604091][ T2188] usb 1-1: config 0 has no interfaces? [ 258.686617][ T2188] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 258.813053][ T2188] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.979856][ T2188] usb 1-1: config 0 descriptor?? [ 259.574574][ T5933] usb 1-1: USB disconnect, device number 7 [ 262.237226][ T6044] sctp: [Deprecated]: syz.4.488 (pid 6044) Use of int in maxseg socket option. [ 262.237226][ T6044] Use struct sctp_assoc_value instead [ 262.283952][ T4409] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 266.306267][ T4291] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 266.315727][ T4291] Bluetooth: hci1: Injecting HCI hardware error event [ 266.323443][ T4291] Bluetooth: hci1: hardware error 0x00 [ 266.943947][ T4409] usb 1-1: device descriptor read/64, error -71 [ 267.223958][ T4409] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 267.413802][ T4409] usb 1-1: Using ep0 maxpacket: 16 [ 267.420843][ T4409] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 267.451668][ T4409] usb 1-1: config 0 has no interfaces? [ 267.471984][ T4409] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 267.523817][ T4409] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.746103][ T4409] usb 1-1: config 0 descriptor?? [ 268.385124][ T4276] usb 1-1: USB disconnect, device number 9 [ 268.449064][ T4291] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 271.963773][ T4291] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 271.972436][ T4291] Bluetooth: hci0: Injecting HCI hardware error event [ 271.982487][ T4291] Bluetooth: hci0: hardware error 0x00 [ 272.475117][ T4293] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 272.634525][ T4276] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 272.863748][ T4276] usb 1-1: Using ep0 maxpacket: 16 [ 273.510990][ T4276] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 273.553076][ T4276] usb 1-1: config 0 has no interfaces? [ 273.583762][ T4276] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 273.592949][ T4276] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.735112][ T4276] usb 1-1: config 0 descriptor?? [ 273.867484][ T6147] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 273.950656][ T4276] usb 1-1: USB disconnect, device number 10 [ 275.156355][ T4291] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 275.335304][ T6152] md: loop0 has zero or unknown size, marking faulty! [ 275.372558][ T26] audit: type=1326 audit(1785667220.763:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6151 comm="syz.3.523" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc26979e019 code=0x7ffc0000 [ 275.413306][ T26] audit: type=1326 audit(1785667220.763:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6151 comm="syz.3.523" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc26979e019 code=0x7ffc0000 [ 275.469087][ T26] audit: type=1326 audit(1785667220.763:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6151 comm="syz.3.523" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc26979e019 code=0x7ffc0000 [ 275.544423][ T26] audit: type=1326 audit(1785667220.763:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6151 comm="syz.3.523" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc26979e019 code=0x7ffc0000 [ 275.637755][ T26] audit: type=1326 audit(1785667220.793:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6151 comm="syz.3.523" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fc26979e019 code=0x7ffc0000 [ 276.086306][ T26] audit: type=1326 audit(1785667220.793:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6151 comm="syz.3.523" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc26979e019 code=0x7ffc0000 [ 276.294021][ T26] audit: type=1326 audit(1785667220.793:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6151 comm="syz.3.523" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc26979e019 code=0x7ffc0000 [ 276.430324][ T26] audit: type=1326 audit(1785667220.793:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6151 comm="syz.3.523" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc26979e019 code=0x7ffc0000 [ 276.531122][ T26] audit: type=1326 audit(1785667220.793:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6151 comm="syz.3.523" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc26979e019 code=0x7ffc0000 [ 276.622097][ T26] audit: type=1326 audit(1785667220.793:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6151 comm="syz.3.523" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc26979e019 code=0x7ffc0000 [ 279.119217][ T4291] Bluetooth: hci4: unexpected event for opcode 0x0000 [ 279.140827][ T6182] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 279.147279][ T6182] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 279.161982][ T6182] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 280.083714][ T4276] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 280.154246][ T6201] md: loop0 has zero or unknown size, marking faulty! [ 280.285621][ T4276] usb 4-1: Using ep0 maxpacket: 16 [ 280.301868][ T4276] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 280.331904][ T4276] usb 4-1: config 0 has no interfaces? [ 280.339913][ T4276] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 280.352975][ T4276] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.399156][ T4276] usb 4-1: config 0 descriptor?? [ 280.617113][ T4276] usb 4-1: USB disconnect, device number 5 [ 283.520932][ T6222] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 284.083179][ T6244] netlink: 12 bytes leftover after parsing attributes in process `syz.2.557'. [ 284.804556][ T4291] Bluetooth: hci4: command 0x0406 tx timeout [ 285.140596][ T6251] [ 285.142966][ T6251] ====================================================== [ 285.150064][ T6251] WARNING: possible circular locking dependency detected [ 285.157367][ T6251] syzkaller #0 Not tainted [ 285.161808][ T6251] ------------------------------------------------------ [ 285.168943][ T6251] syz.3.558/6251 is trying to acquire lock: [ 285.174830][ T6251] ffff888148cc4150 (&sb->s_type->i_mutex_key#21){+.+.}-{3:3}, at: configfs_depend_item_unlocked+0x14f/0x430 [ 285.186349][ T6251] [ 285.186349][ T6251] but task is already holding lock: [ 285.193733][ T6251] ffff8880578b5920 (&opts->dep_lock){+.+.}-{3:3}, at: usbg_make_tpg+0x144/0x580 [ 285.202831][ T6251] [ 285.202831][ T6251] which lock already depends on the new lock. [ 285.202831][ T6251] [ 285.213239][ T6251] [ 285.213239][ T6251] the existing dependency chain (in reverse order) is: [ 285.222264][ T6251] [ 285.222264][ T6251] -> #2 (&opts->dep_lock){+.+.}-{3:3}: [ 285.230088][ T6251] __mutex_lock+0x12d/0xae0 [ 285.235116][ T6251] tcm_set_name+0x26/0x90 [ 285.239975][ T6251] function_make+0x195/0x350 [ 285.245092][ T6251] configfs_mkdir+0x511/0x9e0 [ 285.250308][ T6251] vfs_mkdir+0x386/0x570 [ 285.255076][ T6251] do_mkdirat+0x1d8/0x440 [ 285.259939][ T6251] __x64_sys_mkdir+0x6a/0x80 [ 285.265065][ T6251] do_syscall_64+0x4c/0xa0 [ 285.270035][ T6251] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 285.276484][ T6251] [ 285.276484][ T6251] -> #1 (gadget_subsys.su_mutex){+.+.}-{3:3}: [ 285.284814][ T6251] __mutex_lock+0x12d/0xae0 [ 285.289835][ T6251] configfs_rmdir+0x638/0x980 [ 285.295031][ T6251] vfs_rmdir+0x34e/0x4a0 [ 285.299811][ T6251] do_rmdir+0x29a/0x5c0 [ 285.304560][ T6251] __x64_sys_rmdir+0x45/0x50 [ 285.309708][ T6251] do_syscall_64+0x4c/0xa0 [ 285.314686][ T6251] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 285.321182][ T6251] [ 285.321182][ T6251] -> #0 (&sb->s_type->i_mutex_key#21){+.+.}-{3:3}: [ 285.329865][ T6251] __lock_acquire+0x2d18/0x7c40 [ 285.335234][ T6251] lock_acquire+0x1bb/0x4a0 [ 285.340250][ T6251] down_write+0x36/0x60 [ 285.344914][ T6251] configfs_depend_item_unlocked+0x14f/0x430 [ 285.351419][ T6251] usbg_make_tpg+0x1f3/0x580 [ 285.356522][ T6251] target_fabric_make_tpg+0xa0/0x6d0 [ 285.362319][ T6251] configfs_mkdir+0x511/0x9e0 [ 285.367516][ T6251] vfs_mkdir+0x386/0x570 [ 285.372355][ T6251] do_mkdirat+0x1d8/0x440 [ 285.377198][ T6251] __x64_sys_mkdir+0x6a/0x80 [ 285.382312][ T6251] do_syscall_64+0x4c/0xa0 [ 285.387246][ T6251] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 285.393654][ T6251] [ 285.393654][ T6251] other info that might help us debug this: [ 285.393654][ T6251] [ 285.403872][ T6251] Chain exists of: [ 285.403872][ T6251] &sb->s_type->i_mutex_key#21 --> gadget_subsys.su_mutex --> &opts->dep_lock [ 285.403872][ T6251] [ 285.418550][ T6251] Possible unsafe locking scenario: [ 285.418550][ T6251] [ 285.425987][ T6251] CPU0 CPU1 [ 285.431342][ T6251] ---- ---- [ 285.436697][ T6251] lock(&opts->dep_lock); [ 285.441102][ T6251] lock(gadget_subsys.su_mutex); [ 285.448647][ T6251] lock(&opts->dep_lock); [ 285.455573][ T6251] lock(&sb->s_type->i_mutex_key#21); [ 285.461045][ T6251] [ 285.461045][ T6251] *** DEADLOCK *** [ 285.461045][ T6251] [ 285.469198][ T6251] 5 locks held by syz.3.558/6251: [ 285.474221][ T6251] #0: ffff888147ae2460 (sb_writers#13){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 285.483497][ T6251] #1: ffff88805586f3f0 (&sb->s_type->i_mutex_key#7/1){+.+.}-{3:3}, at: filename_create+0x20b/0x450 [ 285.494398][ T6251] #2: ffffffff8d4e96b0 (&subsys->su_mutex){+.+.}-{3:3}, at: configfs_mkdir+0x4b5/0x9e0 [ 285.504152][ T6251] #3: ffffffff8d8089e8 (tpg_instances_lock){+.+.}-{3:3}, at: usbg_make_tpg+0xf4/0x580 [ 285.513807][ T6251] #4: ffff8880578b5920 (&opts->dep_lock){+.+.}-{3:3}, at: usbg_make_tpg+0x144/0x580 [ 285.523303][ T6251] [ 285.523303][ T6251] stack backtrace: [ 285.529195][ T6251] CPU: 1 PID: 6251 Comm: syz.3.558 Not tainted syzkaller #0 [ 285.536493][ T6251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 285.546648][ T6251] Call Trace: [ 285.549923][ T6251] [ 285.552848][ T6251] dump_stack_lvl+0x188/0x24e [ 285.557529][ T6251] ? load_image+0x410/0x410 [ 285.562026][ T6251] ? show_regs_print_info+0x12/0x12 [ 285.567223][ T6251] ? print_circular_bug+0x12b/0x1a0 [ 285.572428][ T6251] check_noncircular+0x296/0x330 [ 285.577451][ T6251] ? add_chain_block+0x9b0/0x9b0 [ 285.582380][ T6251] ? lockdep_lock+0xf1/0x1f0 [ 285.586965][ T6251] ? _find_first_zero_bit+0xd2/0x100 [ 285.592279][ T6251] __lock_acquire+0x2d18/0x7c40 [ 285.597126][ T6251] ? __kernel_text_address+0x9/0x30 [ 285.602316][ T6251] ? verify_lock_unused+0x140/0x140 [ 285.607523][ T6251] ? __mutex_trylock_common+0x15c/0x260 [ 285.613060][ T6251] lock_acquire+0x1bb/0x4a0 [ 285.617817][ T6251] ? configfs_depend_item_unlocked+0x14f/0x430 [ 285.623981][ T6251] ? __might_sleep+0xd0/0xd0 [ 285.628561][ T6251] ? read_lock_is_recursive+0x10/0x10 [ 285.633946][ T6251] ? __mutex_trylock_common+0x15c/0x260 [ 285.639585][ T6251] ? usbg_make_tpg+0x144/0x580 [ 285.644466][ T6251] ? mutex_lock_nested+0x10/0x10 [ 285.649417][ T6251] down_write+0x36/0x60 [ 285.653565][ T6251] ? configfs_depend_item_unlocked+0x14f/0x430 [ 285.659741][ T6251] configfs_depend_item_unlocked+0x14f/0x430 [ 285.665736][ T6251] usbg_make_tpg+0x1f3/0x580 [ 285.670339][ T6251] ? configfs_mkdir+0x4b5/0x9e0 [ 285.675186][ T6251] ? usbg_drop_tport+0x20/0x20 [ 285.679942][ T6251] ? vscnprintf+0x80/0x80 [ 285.684260][ T6251] ? __kmem_cache_alloc_node+0x19d/0x270 [ 285.689883][ T6251] target_fabric_make_tpg+0xa0/0x6d0 [ 285.695162][ T6251] ? target_fabric_release_wwn+0xa0/0xa0 [ 285.700782][ T6251] configfs_mkdir+0x511/0x9e0 [ 285.705461][ T6251] vfs_mkdir+0x386/0x570 [ 285.709695][ T6251] do_mkdirat+0x1d8/0x440 [ 285.714018][ T6251] ? vfs_mkdir+0x570/0x570 [ 285.718426][ T6251] ? getname_flags+0x206/0x500 [ 285.723179][ T6251] __x64_sys_mkdir+0x6a/0x80 [ 285.727759][ T6251] do_syscall_64+0x4c/0xa0 [ 285.732167][ T6251] ? clear_bhb_loop+0x60/0xb0 [ 285.736835][ T6251] ? clear_bhb_loop+0x60/0xb0 [ 285.741504][ T6251] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 285.747402][ T6251] RIP: 0033:0x7fc26979e019 [ 285.751809][ T6251] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 285.771408][ T6251] RSP: 002b:00007fc26a729028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 285.779815][ T6251] RAX: ffffffffffffffda RBX: 00007fc269a25fa0 RCX: 00007fc26979e019 [ 285.787792][ T6251] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000200000000c00 [ 285.795754][ T6251] RBP: 00007fc26983500c R08: 0000000000000000 R09: 0000000000000000 [ 285.803730][ T6251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 285.811694][ T6251] R13: 00007fc269a26038 R14: 00007fc269a25fa0 R15: 00007fffad7be058 [ 285.819658][ T6251] [ 285.900878][ T6257] md: loop0 has zero or unknown size, marking faulty! [ 286.923757][ T4291] Bluetooth: hci4: command 0x0c1a tx timeout