last executing test programs: 6.612525748s ago: executing program 2 (id=21): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000005c0)={&(0x7f0000000000), 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000006c0)={&(0x7f0000000100), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) 4.497846408s ago: executing program 2 (id=33): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000020)) r1 = syz_open_pts(r0, 0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl(r1, 0x400455c8, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0x0, 0x1}, 0x6) close(r2) 3.501967205s ago: executing program 1 (id=41): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt(r0, 0x29, 0x40, &(0x7f0000000000), 0x1) 3.336595523s ago: executing program 1 (id=43): syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9170, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) 2.924935002s ago: executing program 0 (id=48): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/netdevsim/new_device\x00', 0x801, 0x0) write(r0, &(0x7f0000000140)='1 1 1\n', 0x6) 2.818818287s ago: executing program 0 (id=49): r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='source\x00', &(0x7f0000000200)='127.0.0.1:6789:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000300)='mount_timeout\x00', &(0x7f0000000400)='-1\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 2.368389838s ago: executing program 4 (id=52): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040), &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='0\x00', 0x1) nanosleep(&(0x7f0000000200)={0x0, 0x5f5e100}, 0x0) write(r0, &(0x7f0000000140)='1\x00', 0x1) 2.208501246s ago: executing program 2 (id=53): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/portlist\x00', 0x0, 0x0) write(r0, &(0x7f0000000100)='2049\n\x00', 0x5) close(r0) 2.09847892s ago: executing program 2 (id=54): r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='foobar_invalid_option\x00', &(0x7f0000000200)='1\x00', 0x0) 2.036419994s ago: executing program 4 (id=55): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/target/core/rd_mcp_0/ramdisk0\x00', 0x1ed) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/target/core/rd_mcp_0/ramdisk0/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='rd_pages=1024\n', 0xe) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/target/core/rd_mcp_0/ramdisk0/enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1ed) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r2, &(0x7f0000000280)='0x0525\n', 0x7) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r3, &(0x7f0000000280)='0xa4a5\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ed) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0) write(r4, &(0x7f0000000280)='0000001\n', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/target/usb_gadget/naa.5001405000000001\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/target/usb_gadget/naa.5001405000000001/tpgt_1\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/target/usb_gadget/naa.5001405000000001/tpgt_1/lun/lun_0\x00', 0x1ed) symlinkat(&(0x7f00000003c0)='./config/target/core/rd_mcp_0/ramdisk0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/target/usb_gadget/naa.5001405000000001/tpgt_1/lun/lun_0/rd_mcp_0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/target/usb_gadget/naa.5001405000000001/tpgt_1/nexus\x00', 0x1, 0x0) write(r5, &(0x7f0000000480)='naa.5001405000000001\n', 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/target/usb_gadget/naa.5001405000000001/tpgt_1/acls/naa.5001405000000002\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./config/target/usb_gadget/naa.5001405000000001/tpgt_1/acls/naa.5001405000000002/lun_0\x00', 0x1ed) symlinkat(&(0x7f0000000580)='./config/target/usb_gadget/naa.5001405000000001/tpgt_1/lun/lun_0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/target/usb_gadget/naa.5001405000000001/tpgt_1/acls/naa.5001405000000002/lun_0/lun_0\x00') symlinkat(&(0x7f0000000600)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/configs/c.1/tcm.usb0\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/target/usb_gadget/naa.5001405000000001/tpgt_1/enable\x00', 0x1, 0x0) write(r6, &(0x7f00000006c0)='1\n', 0x2) r7 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r7, &(0x7f0000000740)='dummy_udc.0\n', 0xc) nanosleep(&(0x7f0000000780)={0x1}, 0x0) r8 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x2) r9 = syz_open_dev$sg(&(0x7f0000000000), 0x1, 0x2) r10 = syz_open_dev$sg(&(0x7f0000000000), 0x2, 0x2) ioctl$SG_IO(r8, 0x2285, &(0x7f0000000500)={0x53, 0xfffffffffffffffe, 0xa, 0x20, @buffer={0x0, 0x34, &(0x7f0000000200)=""/52}, &(0x7f0000000100)='_\x00\x00\x00\x00\x00\x00\x004\x00', &(0x7f0000000300)=""/32, 0x3e8, 0x0, 0x0, 0x0}) ioctl$SG_IO(r9, 0x2285, &(0x7f0000000500)={0x53, 0xfffffffffffffffe, 0xa, 0x20, @buffer={0x0, 0x34, &(0x7f0000000200)=""/52}, &(0x7f0000000100)='_\x00\x00\x00\x00\x00\x00\x004\x00', &(0x7f0000000300)=""/32, 0x3e8, 0x0, 0x0, 0x0}) ioctl$SG_IO(r10, 0x2285, &(0x7f0000000500)={0x53, 0xfffffffffffffffe, 0xa, 0x20, @buffer={0x0, 0x34, &(0x7f0000000200)=""/52}, &(0x7f0000000100)='_\x00\x00\x00\x00\x00\x00\x004\x00', &(0x7f0000000300)=""/32, 0x3e8, 0x0, 0x0, 0x0}) 1.884227801s ago: executing program 0 (id=56): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/testnqn/attr_allow_any_host\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='1', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='tcp', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/ports/1/addr_traddr\x00', 0x2, 0x0) write(r2, &(0x7f0000000300)='127.0.0.1', 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x2, 0x0) write(r3, &(0x7f0000000380)='4420', 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/ports/1/addr_adrfam\x00', 0x2, 0x0) write(r4, &(0x7f0000000400)='ipv4', 0x4) symlinkat(&(0x7f0000000440)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/nvmet/ports/1/subsystems/testnqn\x00') r5 = syz_socket_connect_nvme_tcp() sendto$inet_nvme_icreq_pdu(r5, &(0x7f0000000500)={{0x0, 0x0, 0x0}}, 0x80, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000600)={0x0, 0x5f5e100}, 0x0) 1.326738397s ago: executing program 3 (id=57): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) 1.192335643s ago: executing program 2 (id=58): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, [{0xdd, 0x6, "506f9a090000"}]}, 0x3e) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, [{0xdd, 0x6, "506f9a090000"}]}, 0x30) nanosleep(&(0x7f0000000540)={0x0, 0x2faf080}, &(0x7f0000000580)) syz_80211_inject_frame(&(0x7f00000005c0)=@device_b, &(0x7f0000000600)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, [{0xdd, 0x6, "506f9a090000"}]}, 0x3e) 1.192117593s ago: executing program 0 (id=59): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x2, 0x3, 0x1, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}]}, 0x1c}}, 0x0) 1.124670017s ago: executing program 4 (id=60): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/sunrpc/parameters/auth_hashtable_size\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='1024\x00', 0x5) 1.041330201s ago: executing program 3 (id=61): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dlm\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dlm\x00', &(0x7f0000000040)='ocfs2_dlmfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dlm/domain1\x00', 0x1ff) 928.539226ms ago: executing program 1 (id=62): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x24, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x8}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x120}]}], {0x14}}, 0xb0}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x0}) bind$packet(r1, &(0x7f0000000200)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$packet(r1, &(0x7f0000000300)="aaaaaaaaaa1caaaaaaaaaa1b86dd6000000000182c40fe80000000000000000000000000001bfe80000000000000000000000000001c1100000111223344123412340020de0d0000000000000000", 0x4e, 0x0, 0x0, 0x0) sendto$packet(r1, &(0x7f0000000400)="aaaaaaaaaa1caaaaaaaaaa1b86dd6000000000182c40fe80000000000000000000000000001bfe80000000000000000000000000001c110000101122334400"/78, 0x4e, 0x0, 0x0, 0x0) 898.216857ms ago: executing program 0 (id=63): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='tcp 2049\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f0000000500)='1\n\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000700)='127.0.0.1:/\x00', &(0x7f0000000600)='./mnt\x00', &(0x7f0000000800), 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB='addr=127.0.0.1,port=2049,proto=tcp,vers=4.1,clientaddr=127.0.0.1']) openat(0xffffffffffffff9c, &(0x7f0000000a00)='./mnt/file\x00', 0x2, 0x0) 836.36266ms ago: executing program 4 (id=64): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgrp\x00', 0x1ff) mount$cgroup2(0x0, &(0x7f0000000000)='./cgrp\x00', &(0x7f0000000040), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgrp/cgroup.subtree_control\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='+io\x00', 0x3) close(r0) 587.621122ms ago: executing program 1 (id=65): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv4/tcp_ecn\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='3\n', 0x2) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10) listen(r1, 0x5) 587.510952ms ago: executing program 3 (id=66): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) 566.129253ms ago: executing program 4 (id=67): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='tcp 2049\n', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='1\n', 0x2) close(r1) 431.111189ms ago: executing program 1 (id=68): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="540100001000050401000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000007f000001000000000000000000000000000004d23200000064010101000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c000400020012344e2000"/331], 0x154}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r2, &(0x7f0000000200)="000004d2000000010000000000000004", 0x10, 0x0, &(0x7f0000000280)={0x2, 0x4e20, @loopback}, 0x10) 368.571532ms ago: executing program 3 (id=69): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000040)) 368.353512ms ago: executing program 0 (id=70): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1ed43001000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000840)=ANY=[@ANYBLOB="20fc83"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x2c, &(0x7f0000000200)={0x20, 0x1, 0x2, "0701"}, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 262.256838ms ago: executing program 1 (id=71): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x6f00, @loopback}, 0x10) listen(r0, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f00000000c0)='udp 2049\n', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000180)='4\n', 0x2) close(r2) 235.002159ms ago: executing program 3 (id=72): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./dbg\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./dbg\x00', &(0x7f00000002c0)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./dbg/ieee80211/phy0/netdev:wlan0/mesh_stats\x00', 0x0, 0x0) 116.556094ms ago: executing program 4 (id=73): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='-2 -3 +4\n', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='tcp 2049\n', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000200)='2\n', 0x2) 11.707479ms ago: executing program 3 (id=74): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/cfg80211/parameters/bss_entries_limit\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='1\n', 0x2) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_IBSS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) syz_80211_join_ibss(&(0x7f0000000300)='wlan0\x00', &(0x7f0000000340)=@default_ibss_ssid, 0x6, 0x0) syz_80211_inject_frame(&(0x7f0000000400), &(0x7f0000000440)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000800)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f0000000500), &(0x7f0000000540)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_b, @from_mac=@device_b}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000900)={0x0, 0x2faf080}, 0x0) 0s ago: executing program 2 (id=75): r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='source\x00', &(0x7f0000000200)='127.0.0.1:6789:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000300)='mount_timeout\x00', &(0x7f0000000400)='1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000500)='mon_addr\x00', &(0x7f0000000600)='127.0.0.1:6789\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.25' (ED25519) to the list of known hosts. [ 60.461024][ T4261] cgroup: Unknown subsys name 'net' [ 60.590940][ T4261] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 61.834939][ T4261] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 63.697298][ T4278] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 63.705363][ T4278] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 63.724654][ T4280] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 63.732771][ T4280] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 63.741495][ T4280] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 63.748941][ T4280] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 63.757352][ T4280] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 63.764682][ T4283] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 63.765678][ T4280] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 63.772895][ T4283] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 63.779514][ T4280] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 63.787770][ T4283] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 63.800426][ T4280] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 63.801928][ T4283] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 63.808064][ T4280] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 63.815781][ T4283] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 63.821981][ T4280] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 63.835625][ T4285] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 63.908955][ T4280] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 63.917404][ T4280] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 63.926439][ T4283] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 63.936096][ T4283] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 63.944464][ T4283] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 63.952136][ T49] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 63.960772][ T49] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 63.969817][ T49] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 63.977271][ T49] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 63.984945][ T49] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 64.015132][ T4280] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 64.022762][ T4280] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 64.233328][ T4274] chnl_net:caif_netlink_parms(): no params data found [ 64.319831][ T4275] chnl_net:caif_netlink_parms(): no params data found [ 64.388208][ T4274] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.405259][ T4274] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.413305][ T4274] device bridge_slave_0 entered promiscuous mode [ 64.422440][ T4281] chnl_net:caif_netlink_parms(): no params data found [ 64.446157][ T4274] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.453299][ T4274] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.461646][ T4274] device bridge_slave_1 entered promiscuous mode [ 64.479876][ T4286] chnl_net:caif_netlink_parms(): no params data found [ 64.538847][ T4275] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.546266][ T4275] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.553933][ T4275] device bridge_slave_0 entered promiscuous mode [ 64.588203][ T4275] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.595402][ T4275] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.603051][ T4275] device bridge_slave_1 entered promiscuous mode [ 64.610498][ T4284] chnl_net:caif_netlink_parms(): no params data found [ 64.621479][ T4274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.649253][ T4274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.692311][ T4275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.723054][ T4281] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.730300][ T4281] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.738306][ T4281] device bridge_slave_0 entered promiscuous mode [ 64.747908][ T4275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.769878][ T4274] team0: Port device team_slave_0 added [ 64.776283][ T4281] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.783440][ T4281] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.793358][ T4281] device bridge_slave_1 entered promiscuous mode [ 64.801129][ T4286] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.808434][ T4286] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.816934][ T4286] device bridge_slave_0 entered promiscuous mode [ 64.830188][ T4274] team0: Port device team_slave_1 added [ 64.852160][ T4286] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.862080][ T4286] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.870056][ T4286] device bridge_slave_1 entered promiscuous mode [ 64.916610][ T4281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.931091][ T4275] team0: Port device team_slave_0 added [ 64.937699][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.944661][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.973255][ T4274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.986591][ T4286] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.996272][ T4284] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.003412][ T4284] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.012063][ T4284] device bridge_slave_0 entered promiscuous mode [ 65.021453][ T4281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.045746][ T4281] team0: Port device team_slave_0 added [ 65.053056][ T4275] team0: Port device team_slave_1 added [ 65.061963][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.069041][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.095541][ T4274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.108377][ T4286] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.120457][ T4284] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.127758][ T4284] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.135899][ T4284] device bridge_slave_1 entered promiscuous mode [ 65.144505][ T4281] team0: Port device team_slave_1 added [ 65.200609][ T4281] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.207694][ T4281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.233893][ T4281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.246434][ T4281] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.253419][ T4281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.279554][ T4281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.295738][ T4286] team0: Port device team_slave_0 added [ 65.307877][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.314980][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.341210][ T4275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.353327][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.360626][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.386696][ T4275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.403307][ T4286] team0: Port device team_slave_1 added [ 65.411485][ T4284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.446311][ T4284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.488778][ T4274] device hsr_slave_0 entered promiscuous mode [ 65.496553][ T4274] device hsr_slave_1 entered promiscuous mode [ 65.512440][ T4281] device hsr_slave_0 entered promiscuous mode [ 65.519979][ T4281] device hsr_slave_1 entered promiscuous mode [ 65.527111][ T4281] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.535214][ T4281] Cannot create hsr debugfs directory [ 65.541246][ T4286] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.550454][ T4286] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.576842][ T4286] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.595765][ T4284] team0: Port device team_slave_0 added [ 65.605446][ T4275] device hsr_slave_0 entered promiscuous mode [ 65.612257][ T4275] device hsr_slave_1 entered promiscuous mode [ 65.619292][ T4275] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.627330][ T4275] Cannot create hsr debugfs directory [ 65.645685][ T4286] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.652658][ T4286] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.678948][ T4286] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.695487][ T4284] team0: Port device team_slave_1 added [ 65.790320][ T4286] device hsr_slave_0 entered promiscuous mode [ 65.797608][ T4286] device hsr_slave_1 entered promiscuous mode [ 65.804336][ T4286] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.812199][ T4286] Cannot create hsr debugfs directory [ 65.821990][ T4284] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.829374][ T4284] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.855741][ T4284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.880714][ T4284] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.888734][ T4280] Bluetooth: hci0: command 0x0409 tx timeout [ 65.888745][ T4285] Bluetooth: hci1: command 0x0409 tx timeout [ 65.898350][ T4284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.928381][ T4284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.965170][ T49] Bluetooth: hci2: command 0x0409 tx timeout [ 66.022105][ T4284] device hsr_slave_0 entered promiscuous mode [ 66.029083][ T4284] device hsr_slave_1 entered promiscuous mode [ 66.035960][ T4284] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.043535][ T4284] Cannot create hsr debugfs directory [ 66.049118][ T49] Bluetooth: hci3: command 0x0409 tx timeout [ 66.055793][ T49] Bluetooth: hci4: command 0x0409 tx timeout [ 66.254235][ T4281] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 66.274748][ T4281] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 66.294452][ T4281] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 66.310582][ T4281] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 66.332038][ T4274] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 66.352574][ T4274] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 66.379439][ T4274] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 66.392379][ T4274] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 66.432133][ T4275] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 66.451412][ T4275] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 66.463007][ T4275] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 66.480338][ T4286] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 66.495415][ T4275] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 66.506045][ T4286] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 66.519458][ T4286] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 66.530166][ T4286] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 66.670385][ T4284] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 66.699773][ T4275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.710763][ T4284] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 66.722818][ T4281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.741441][ T4284] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 66.755871][ T4275] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.767864][ T4274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.779790][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.790959][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.802798][ T4284] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.817605][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.828401][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.839158][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.846514][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.867009][ T4281] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.890324][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.899115][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.907979][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.918203][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.927683][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.936319][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.945095][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.953540][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.960663][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.970510][ T4274] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.982995][ T4286] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.993637][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.015840][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.026183][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.034555][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.041712][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.050351][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.059331][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.068498][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.075646][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.083307][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.092850][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.101600][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.108756][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.117793][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.125991][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.143541][ T4286] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.168513][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.180043][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.191692][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.200620][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.209670][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.219859][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.229050][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.236202][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.244251][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.253446][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.262083][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.269210][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.284219][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.292529][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.303272][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.314138][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.323569][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.333596][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.342729][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.375171][ T4281] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.389567][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.399100][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.414556][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.423400][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.432622][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.439778][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.447629][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.456766][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.465521][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.474151][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.482927][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.491805][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.502475][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.536779][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.544693][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.556594][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.565692][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.574384][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.583875][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.593618][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.602253][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.611048][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.620240][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.628965][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.638104][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.670127][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.679640][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.690761][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.700695][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.710124][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.746064][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.754026][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.777180][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.787251][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.796857][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.809117][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.818763][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.832677][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.842037][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.860280][ T4284] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.881560][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.896823][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.915774][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.927561][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.943976][ T4284] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.953111][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.965065][ T49] Bluetooth: hci1: command 0x041b tx timeout [ 67.965936][ T4285] Bluetooth: hci0: command 0x041b tx timeout [ 67.998435][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.026400][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.045448][ T4285] Bluetooth: hci2: command 0x041b tx timeout [ 68.052438][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.090732][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.097930][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.125665][ T4285] Bluetooth: hci4: command 0x041b tx timeout [ 68.131823][ T4285] Bluetooth: hci3: command 0x041b tx timeout [ 68.155694][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.191375][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.226303][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.233473][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.281130][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.315071][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.328013][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.337860][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.347352][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.358381][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.367988][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.384839][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.413528][ T4281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.428364][ T4284] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 68.440858][ T4284] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.470676][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.481249][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.497046][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.509863][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.520407][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.534685][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.553167][ T4275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.588526][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.597791][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.606208][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.632787][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.642275][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.651701][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.661206][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.691681][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.700720][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.711116][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.721128][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.733071][ T4281] device veth0_vlan entered promiscuous mode [ 68.758696][ T4275] device veth0_vlan entered promiscuous mode [ 68.768889][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.778688][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.792810][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.802069][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.811193][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.819083][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.827782][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.835744][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.848110][ T4281] device veth1_vlan entered promiscuous mode [ 68.859883][ T4286] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.873448][ T4275] device veth1_vlan entered promiscuous mode [ 68.917987][ T4274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.956116][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.976534][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.989054][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.997878][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.016189][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.035393][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.057935][ T4281] device veth0_macvtap entered promiscuous mode [ 69.077959][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.109345][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.119317][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.143093][ T4275] device veth0_macvtap entered promiscuous mode [ 69.158370][ T4281] device veth1_macvtap entered promiscuous mode [ 69.177845][ T4284] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.189555][ T4274] device veth0_vlan entered promiscuous mode [ 69.202279][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.212334][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.226930][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.239951][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.250273][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.263042][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.272934][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.288620][ T4275] device veth1_macvtap entered promiscuous mode [ 69.308680][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.318494][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.335968][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.344577][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.376095][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.385743][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.398534][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.428319][ T4274] device veth1_vlan entered promiscuous mode [ 69.442169][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.452232][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.466014][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.480107][ T4275] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.497849][ T4275] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.506990][ T4275] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.516164][ T4275] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.528463][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.540273][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.552655][ T4281] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.570937][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.581489][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.590531][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.599939][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.608997][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.617455][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.626427][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.634317][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.647319][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.680354][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.697221][ T4281] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.707027][ T4284] device veth0_vlan entered promiscuous mode [ 69.731069][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.740339][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.761649][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.771028][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.802322][ T4281] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.821559][ T4281] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.833882][ T4281] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.842768][ T4281] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.863159][ T4274] device veth0_macvtap entered promiscuous mode [ 69.873745][ T4274] device veth1_macvtap entered promiscuous mode [ 69.890975][ T4286] device veth0_vlan entered promiscuous mode [ 69.900091][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.912253][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.920991][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.930282][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.938656][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.947684][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.956212][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.963914][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.974392][ T4284] device veth1_vlan entered promiscuous mode [ 70.024012][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.035726][ T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.043674][ T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.046253][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.061098][ T4285] Bluetooth: hci1: command 0x040f tx timeout [ 70.067246][ T4280] Bluetooth: hci0: command 0x040f tx timeout [ 70.073516][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.084161][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.095834][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.105993][ T4286] device veth1_vlan entered promiscuous mode [ 70.126690][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.135050][ T4285] Bluetooth: hci2: command 0x040f tx timeout [ 70.141198][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.150168][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.159510][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.167711][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.176401][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.188312][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.200571][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.211191][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.215557][ T4285] Bluetooth: hci3: command 0x040f tx timeout [ 70.225062][ T49] Bluetooth: hci4: command 0x040f tx timeout [ 70.228584][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.245378][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.268283][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.276689][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.287501][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.307089][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.316190][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.347716][ T4284] device veth0_macvtap entered promiscuous mode [ 70.355226][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.363939][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.391915][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.399984][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.403914][ T4286] device veth0_macvtap entered promiscuous mode [ 70.418562][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.428265][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.437290][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.452887][ T4274] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.463289][ T4274] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.472270][ T4274] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.482766][ T4274] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.511185][ T4286] device veth1_macvtap entered promiscuous mode [ 70.515319][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.534712][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.538670][ T4284] device veth1_macvtap entered promiscuous mode [ 70.565283][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.573349][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.642013][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.652009][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.662831][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.669222][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.680589][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.694561][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.704630][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.715586][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.727218][ T4284] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.741246][ T4286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.752675][ T4286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.762542][ T4286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.773202][ T4286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.783317][ T4286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.794992][ T4286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.804817][ T4286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.815700][ T4286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.846539][ T4286] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.885414][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.898324][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.908193][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.918609][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.928161][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.941332][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.966724][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.977456][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.988472][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.998908][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.011559][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.023375][ T4284] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.034534][ T4286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.047444][ T4286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.062636][ T4286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.073435][ T4286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.093071][ T4286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.104612][ T4286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.120912][ T4286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.131564][ T4286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.144736][ T4286] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.165251][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.176492][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.186999][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.196911][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.225769][ T4286] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.227338][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.234628][ T4286] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.258734][ T4286] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.265144][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.269836][ T4286] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.298075][ T4284] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.315287][ T4284] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.339286][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.346268][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.380775][ T4284] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.391884][ T4284] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.403665][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.479206][ T4323] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.507572][ T4323] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.535575][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.664410][ T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.674931][ T4323] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.682792][ T4323] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.690460][ T4318] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 71.705459][ T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.719093][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.727298][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.778485][ T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.794947][ T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.820867][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.828766][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.852691][ T4364] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 71.856576][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.890744][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.908173][ T4318] usb 3-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice= 1.00 [ 71.930068][ T4318] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.939880][ T4364] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 71.999732][ T4366] i2c i2c-0: new_device: Instantiated device hid at 0x20 [ 72.021880][ T4364] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 72.074424][ T4368] lo speed is unknown, defaulting to 1000 [ 72.090726][ T4368] lo speed is unknown, defaulting to 1000 [ 72.109386][ T4368] lo speed is unknown, defaulting to 1000 [ 72.136024][ T4285] Bluetooth: hci1: command 0x0419 tx timeout [ 72.142126][ T4285] Bluetooth: hci0: command 0x0419 tx timeout [ 72.215027][ T4285] Bluetooth: hci2: command 0x0419 tx timeout [ 72.244527][ T4368] infiniband syz0: set active [ 72.251208][ T4316] lo speed is unknown, defaulting to 1000 [ 72.255174][ T4368] infiniband syz0: added lo [ 72.292449][ T4285] Bluetooth: hci3: command 0x0419 tx timeout [ 72.298671][ T4285] Bluetooth: hci4: command 0x0419 tx timeout [ 72.320028][ T4368] RDS/IB: syz0: added [ 72.324743][ T4368] smc: adding ib device syz0 with port count 1 [ 72.331583][ T4368] smc: ib device syz0 port 1 has pnetid [ 72.339367][ T4319] lo speed is unknown, defaulting to 1000 [ 72.349759][ T4368] lo speed is unknown, defaulting to 1000 [ 72.452663][ T4368] lo speed is unknown, defaulting to 1000 [ 72.551707][ T4368] lo speed is unknown, defaulting to 1000 [ 72.648432][ T4368] lo speed is unknown, defaulting to 1000 [ 72.703090][ T4318] rtsx_usb: probe of 3-1:1.0 failed with error -110 [ 72.792607][ T4368] lo speed is unknown, defaulting to 1000 [ 72.895614][ T4361] NFSD: attempt to initialize umh client tracking in a container ignored. [ 72.908519][ T4361] NFSD: attempt to initialize legacy client tracking in a container ignored. [ 72.918203][ T4361] NFSD: Unable to initialize client recovery tracking! (-22) [ 72.935921][ T4361] NFSD: starting 90-second grace period (net f0000409) [ 73.099050][ T4381] svc: failed to register nfsdv3 RPC service (errno 111). [ 73.119177][ T4381] svc: failed to register nfsaclv3 RPC service (errno 111). [ 73.192876][ T4318] usb 3-1: USB disconnect, device number 2 [ 73.243542][ T4387] svc: failed to register lockdv1 RPC service (errno 111). [ 73.260400][ T4387] lockd_up: makesock failed, error=-111 [ 73.500388][ T4401] svc: failed to register lockdv1 RPC service (errno 111). [ 73.828246][ T4410] FAULT_INJECTION: forcing a failure. [ 73.828246][ T4410] name failslab, interval 1, probability 0, space 0, times 1 [ 73.886495][ T4410] CPU: 0 PID: 4410 Comm: syz.1.15 Not tainted syzkaller #0 [ 73.893840][ T4410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 73.904026][ T4410] Call Trace: [ 73.907329][ T4410] [ 73.910283][ T4410] dump_stack_lvl+0x188/0x24e [ 73.915015][ T4410] ? show_regs_print_info+0x12/0x12 [ 73.920244][ T4410] ? load_image+0x410/0x410 [ 73.924771][ T4410] ? __might_sleep+0xd0/0xd0 [ 73.929405][ T4410] ? __lock_acquire+0x7c40/0x7c40 [ 73.934462][ T4410] should_fail_ex+0x390/0x4c0 [ 73.939185][ T4410] should_failslab+0x5/0x20 [ 73.943710][ T4410] slab_pre_alloc_hook+0x59/0x300 [ 73.948779][ T4410] ? skbmod_init_net+0x61/0x190 [ 73.953667][ T4410] __kmem_cache_alloc_node+0x4f/0x270 [ 73.959068][ T4410] ? skbmod_init_net+0x61/0x190 [ 73.963923][ T4410] kmalloc_trace+0x26/0xe0 [ 73.968343][ T4410] skbmod_init_net+0x61/0x190 [ 73.973022][ T4410] ops_init+0x360/0x5e0 [ 73.977203][ T4410] setup_net+0x4f2/0xbd0 [ 73.981459][ T4410] ? copy_net_ns+0x5b0/0x5b0 [ 73.986051][ T4410] ? copy_net_ns+0x324/0x5b0 [ 73.990648][ T4410] ? down_read_killable+0x1cc/0x340 [ 73.995853][ T4410] copy_net_ns+0x33e/0x5b0 [ 74.000275][ T4410] create_new_namespaces+0x3ce/0x700 [ 74.005567][ T4410] unshare_nsproxy_namespaces+0x116/0x160 [ 74.011286][ T4410] ksys_unshare+0x4f6/0x8e0 [ 74.015799][ T4410] ? sighand_ctor+0x40/0x40 [ 74.020295][ T4410] ? lock_chain_count+0x20/0x20 [ 74.025148][ T4410] ? syscall_enter_from_user_mode+0x21/0x80 [ 74.031038][ T4410] __x64_sys_unshare+0x34/0x40 [ 74.035813][ T4410] do_syscall_64+0x4c/0xa0 [ 74.040314][ T4410] ? clear_bhb_loop+0x60/0xb0 [ 74.044981][ T4410] ? clear_bhb_loop+0x60/0xb0 [ 74.049673][ T4410] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 74.055569][ T4410] RIP: 0033:0x7f231a99e159 [ 74.059998][ T4410] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.079611][ T4410] RSP: 002b:00007f231b935028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 74.088034][ T4410] RAX: ffffffffffffffda RBX: 00007f231ac25fa0 RCX: 00007f231a99e159 [ 74.096005][ T4410] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 74.103974][ T4410] RBP: 00007f231aa3506b R08: 0000000000000000 R09: 0000000000000000 [ 74.112027][ T4410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.119990][ T4410] R13: 00007f231ac26038 R14: 00007f231ac25fa0 R15: 00007ffd0297cfd8 [ 74.127972][ T4410] [ 74.151978][ T4414] device bridge_slave_1 left promiscuous mode [ 74.166454][ T4417] loop0: detected capacity change from 0 to 32768 [ 74.177570][ T4414] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.231552][ T4414] device bridge_slave_0 left promiscuous mode [ 74.259779][ T4414] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.474835][ T4433] rdma_rxe: rxe_register_device failed with error -23 [ 74.482253][ T4433] rdma_rxe: failed to add lo [ 74.503044][ T4425] device-mapper: core: 248:0: mapping table unavailable, erroring io [ 74.749265][ T4437] netlink: 116 bytes leftover after parsing attributes in process `syz.4.23'. [ 74.789356][ T4433] lo speed is unknown, defaulting to 1000 [ 74.802695][ T4433] lo speed is unknown, defaulting to 1000 [ 74.833503][ T4439] bond0: (slave bond_slave_0): Releasing backup interface [ 74.858003][ T4433] lo speed is unknown, defaulting to 1000 [ 74.893098][ T4439] bond0: (slave bond_slave_1): Releasing backup interface [ 75.045098][ T4439] bond0: (slave dummy0): making interface the new active one [ 75.055467][ T4439] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 75.096474][ T4439] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.099909][ T4433] infiniband syz1: set active [ 75.108324][ T4318] lo speed is unknown, defaulting to 1000 [ 75.115147][ T4433] infiniband syz1: added lo [ 75.184447][ T4433] RDS/IB: syz1: added [ 75.195482][ T4433] smc: adding ib device syz1 with port count 1 [ 75.213130][ T4433] smc: ib device syz1 port 1 has pnetid [ 75.220916][ T2167] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 75.235749][ T4433] lo speed is unknown, defaulting to 1000 [ 75.243094][ T22] lo speed is unknown, defaulting to 1000 [ 75.329487][ T4451] svc: failed to register nfsdv3 RPC service (errno 111). [ 75.351724][ T4451] svc: failed to register nfsaclv3 RPC service (errno 111). [ 75.406407][ T4433] lo speed is unknown, defaulting to 1000 [ 75.435294][ T2167] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 75.451889][ T2167] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 75.466405][ T4453] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 75.480910][ T2167] usb 2-1: New USB device found, idVendor=2040, idProduct=c600, bcdDevice= 1.00 [ 75.494418][ T2167] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.502905][ T2167] usb 2-1: Product: syz [ 75.507410][ T2167] usb 2-1: Manufacturer: syz [ 75.512108][ T2167] usb 2-1: SerialNumber: syz [ 75.529122][ T4442] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 75.529173][ T4318] wlan1: authenticate with 08:02:11:00:00:00 [ 75.551851][ T4453] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 75.567806][ T4442] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 75.568091][ T4318] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 75.586045][ T2167] usb 2-1: dvb_usb_v2: found a 'Hauppauge 126xxx ATSC+' in warm state [ 75.611039][ T2167] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 75.632647][ T2167] dvbdev: DVB: registering new adapter (Hauppauge 126xxx ATSC+) [ 75.641410][ T2167] usb 2-1: media controller created [ 75.654736][ T4454] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 75.662915][ T4433] lo speed is unknown, defaulting to 1000 [ 75.689000][ T2167] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 75.742725][ T2167] usb 2-1: selecting invalid altsetting 1 [ 75.770707][ T2167] set interface failed [ 75.773953][ T2167] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-71 [ 75.791424][ T2167] error writing reg: 0xff, val: 0x00 [ 75.809880][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 75.838273][ T26] audit: type=1800 audit(1790080439.688:2): pid=4456 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.30" name="attr_allow_any_host" dev="configfs" ino=34596 res=0 errno=0 [ 75.840548][ T4456] nvmet: adding nsid 1 to subsystem testsubsys [ 75.864363][ T4459] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-71 [ 75.903932][ T4459] error writing reg: 0x1a, val: 0x1e [ 75.917181][ T4459] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-71 [ 75.939671][ T26] audit: type=1800 audit(1790080439.768:3): pid=4460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.30" name="device_path" dev="configfs" ino=34598 res=0 errno=0 [ 75.971834][ T4459] error writing reg: 0x1a, val: 0x1e [ 75.977269][ T26] audit: type=1800 audit(1790080439.808:4): pid=4456 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.30" name="buffered_io" dev="configfs" ino=34599 res=0 errno=0 [ 75.978849][ T4459] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-71 [ 76.003019][ T26] audit: type=1800 audit(1790080439.808:5): pid=4456 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.30" name="enable" dev="configfs" ino=34600 res=0 errno=0 [ 76.012872][ T4433] lo speed is unknown, defaulting to 1000 [ 76.049567][ T26] audit: type=1800 audit(1790080439.898:6): pid=4456 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.30" name="addr_trtype" dev="configfs" ino=33579 res=0 errno=0 [ 76.084489][ T4459] error writing reg: 0x1a, val: 0x1e [ 76.191118][ T4433] lo speed is unknown, defaulting to 1000 [ 76.193077][ T4319] nvmet: creating nvm controller 1 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:86807419-655a-4b8c-ac67-58b34ce9cd06. [ 76.229928][ T4456] nvme nvme0: creating 2 I/O queues. [ 76.239116][ T4456] nvme nvme0: new ctrl: "testsubsys" [ 76.296872][ T2167] dvb_usb_mxl111sf: probe of 2-1:1.0 failed with error -71 [ 76.355157][ T2167] usb 2-1: USB disconnect, device number 2 [ 76.644974][ T4472] rdma_rxe: rxe_register_device failed with error -23 [ 76.651891][ T4472] rdma_rxe: failed to add dummy0 [ 76.684369][ T4472] rdma_rxe: rxe_register_device failed with error -23 [ 76.693711][ T4472] rdma_rxe: failed to add lo [ 76.845987][ T9] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 76.864682][ T4476] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.948510][ T4476] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.965801][ T9] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 77.051630][ T4476] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.075407][ T9] wlan1: authentication with 08:02:11:00:00:00 timed out [ 77.168354][ T4476] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.169960][ T4483] netlink: 4 bytes leftover after parsing attributes in process `syz.0.39'. [ 77.284843][ T4478] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.305302][ T4462] NFSD: attempt to initialize umh client tracking in a container ignored. [ 77.315086][ T4462] NFSD: attempt to initialize legacy client tracking in a container ignored. [ 77.327447][ T4462] NFSD: Unable to initialize client recovery tracking! (-22) [ 77.337556][ T4481] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.355170][ T4462] NFSD: starting 90-second grace period (net f0000409) [ 77.562113][ T4498] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 77.617443][ T4501] IPVS: stopping backup sync thread 4498 ... [ 77.855054][ T4314] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 78.048982][ T4314] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9170, bcdDevice= 1.08 [ 78.064705][ T4314] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.073070][ T4314] usb 2-1: Product: syz [ 78.082548][ T4314] usb 2-1: Manufacturer: syz [ 78.089426][ T4314] usb 2-1: SerialNumber: syz [ 78.133496][ T2167] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 78.265052][ T4314] usb 2-1: reset high-speed USB device number 3 using dummy_hcd [ 78.397245][ T2167] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 78.572014][ T4314] usb 2-1: driver API: 1.9.9 2016-02-15 [1-1] [ 78.579032][ T2167] smpboot: CPU 1 is now offline [ 78.591708][ T4314] usb 2-1: firmware API: 1.9.6 2012-07-07 [ 78.627541][ T4285] Bluetooth: hci5: command 0x1003 tx timeout [ 78.634571][ T49] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 78.687908][ T4523] x86: Booting SMP configuration: [ 78.738552][ T4523] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 78.892369][ T4528] udc dummy_udc.0: failed to start g1: -19 [ 78.901506][ T4528] UDC core: g1: couldn't find an available UDC or it's busy [ 78.917794][ T14] libceph: mon0 (1)127.0.0.1:6789 socket closed (con state V1_BANNER) [ 78.934583][ T4515] ceph: No mds server is up or the cluster is laggy [ 79.115040][ T4509] NFSD: attempt to initialize umh client tracking in a container ignored. [ 79.133155][ T4509] NFSD: attempt to initialize legacy client tracking in a container ignored. [ 79.150037][ T26] audit: type=1800 audit(1790080442.998:7): pid=4531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.56" name="attr_allow_any_host" dev="configfs" ino=34814 res=0 errno=0 [ 79.174633][ T4531] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 79.185107][ T26] audit: type=1800 audit(1790080443.018:8): pid=4531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.56" name="addr_trtype" dev="configfs" ino=34815 res=0 errno=0 [ 79.191814][ T4509] NFSD: Unable to initialize client recovery tracking! (-22) [ 79.220419][ T26] audit: type=1800 audit(1790080443.068:9): pid=4531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.56" name="addr_traddr" dev="configfs" ino=34816 res=0 errno=0 [ 79.220673][ T4531] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 79.260398][ T4509] NFSD: starting 90-second grace period (net f0000409) [ 79.301995][ T26] audit: type=1800 audit(1790080443.148:10): pid=4533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.56" name="addr_trsvcid" dev="configfs" ino=35841 res=0 errno=0 [ 79.303494][ T4533] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 79.400139][ T4350] usb 2-1: USB disconnect, device number 3 [ 79.407391][ C0] device 2-1 is not registered [ 79.459711][ T26] audit: type=1800 audit(1790080443.308:11): pid=4534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.56" name="addr_adrfam" dev="configfs" ino=35842 res=0 errno=0 [ 79.493174][ T4531] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 79.647610][ T4314] usb 2-1: firmware upload failed (-110). [ 79.932604][ T4546] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 80.021350][ T4549] o2cb: This node has not been configured. [ 80.061128][ T4544] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 80.085218][ T4549] o2cb: Cluster check failed. Fix errors before retrying. [ 80.139467][ T4549] (syz.3.61,4549,0):user_dlm_register:674 ERROR: status = -22 [ 80.185595][ T4549] (syz.3.61,4549,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "domain1" [ 80.208660][ T4540] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 80.242860][ T4553] svc: failed to register lockdv1 RPC service (errno 111). [ 80.310737][ T4540] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 80.559673][ T4566] svc: failed to register lockdv1 RPC service (errno 111). [ 80.585186][ T4570] netlink: 100 bytes leftover after parsing attributes in process `syz.1.68'. [ 80.834351][ T4576] svc: failed to register lockdv1 RPC service (errno 111). [ 81.006863][ T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.014735][ T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.027324][ T4587] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 81.041423][ T2167] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 81.048813][ T4350] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 81.074648][ T32] ------------[ cut here ]------------ [ 81.077546][ T11] ------------[ cut here ]------------ [ 81.080649][ T32] WARNING: CPU: 1 PID: 32 at net/wireless/scan.c:518 cfg80211_bss_update+0x2196/0x21a0 [ 81.086141][ T11] WARNING: CPU: 0 PID: 11 at net/wireless/scan.c:518 cfg80211_bss_update+0x2196/0x21a0 [ 81.095795][ T32] Modules linked in: [ 81.105429][ T11] Modules linked in: [ 81.109318][ T32] CPU: 1 PID: 32 Comm: kworker/u4:2 Not tainted syzkaller #0 [ 81.113263][ T11] CPU: 0 PID: 11 Comm: kworker/u4:1 Not tainted syzkaller #0 [ 81.120728][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 81.120740][ T32] Workqueue: events_unbound cfg80211_wiphy_work [ 81.120766][ T32] RIP: 0010:cfg80211_bss_update+0x2196/0x21a0 [ 81.128133][ T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 81.128145][ T11] Workqueue: events_unbound cfg80211_wiphy_work [ 81.138210][ T32] Code: c7 c1 24 e9 20 8e 80 e1 07 80 c1 03 38 c1 0f 8c 5c fc ff ff 48 c7 c7 24 e9 20 8e e8 04 13 45 f8 e9 4b fc ff ff e8 4a ce f3 f7 <0f> 0b e9 a0 fc ff ff 0f 1f 00 55 41 57 41 56 41 55 41 54 53 48 83 [ 81.144457][ T11] [ 81.144465][ T11] RIP: 0010:cfg80211_bss_update+0x2196/0x21a0 [ 81.150557][ T32] RSP: 0018:ffffc90000a8f310 EFLAGS: 00010293 [ 81.160654][ T11] Code: c7 c1 24 e9 20 8e 80 e1 07 80 c1 03 38 c1 0f 8c 5c fc ff ff 48 c7 c7 24 e9 20 8e e8 04 13 45 f8 e9 4b fc ff ff e8 4a ce f3 f7 <0f> 0b e9 a0 fc ff ff 0f 1f 00 55 41 57 41 56 41 55 41 54 53 48 83 [ 81.166905][ T32] [ 81.166913][ T32] RAX: ffffffff898e6496 RBX: ffff888055bb8190 RCX: ffff888019690000 [ 81.186712][ T11] RSP: 0018:ffffc90000107310 EFLAGS: 00010293 [ 81.189127][ T32] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 81.195211][ T11] [ 81.195219][ T11] RAX: ffffffff898e6496 RBX: ffff888073f00190 RCX: ffff88813fe73c00 [ 81.201254][ T32] RBP: dffffc0000000000 R08: ffff888055647c53 R09: 1ffff1100aac8f8a [ 81.220964][ T11] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 81.223279][ T32] R10: dffffc0000000000 R11: ffffed100aac8f8b R12: 0000000000000001 [ 81.231286][ T11] RBP: dffffc0000000000 R08: ffff888057456c53 R09: 1ffff1100ae8ad8a [ 81.237356][ T32] R13: ffff888055bb8190 R14: ffff888057142000 R15: 0000000000000000 [ 81.245470][ T11] R10: dffffc0000000000 R11: ffffed100ae8ad8b R12: 0000000000000001 [ 81.247683][ T32] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 81.255686][ T11] R13: ffff888073f00190 R14: ffff88805714e800 R15: 0000000000000000 [ 81.263640][ T32] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 81.271644][ T11] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 81.279634][ T32] CR2: 00007f6ccf6ab000 CR3: 000000001835a000 CR4: 00000000003506e0 [ 81.287967][ T11] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 81.295940][ T32] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 81.303895][ T11] CR2: 000000110c3dde51 CR3: 00000000740d5000 CR4: 00000000003506f0 [ 81.312844][ T32] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 81.320861][ T11] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 81.327462][ T32] Call Trace: [ 81.327475][ T32] [ 81.336401][ T11] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 81.344401][ T32] ? __kmem_cache_alloc_node+0x19d/0x270 [ 81.350995][ T11] Call Trace: [ 81.351006][ T11] [ 81.358995][ T32] ? rcu_is_watching+0x11/0xa0 [ 81.366974][ T11] ? __kmem_cache_alloc_node+0x19d/0x270 [ 81.375107][ T32] cfg80211_inform_bss_frame_data+0xa77/0x1390 [ 81.383081][ T11] ? rcu_is_watching+0x11/0xa0 [ 81.386404][ T32] ? cfg80211_parse_mbssid_data+0x23a0/0x23a0 [ 81.389313][ T11] cfg80211_inform_bss_frame_data+0xa77/0x1390 [ 81.397285][ T32] ? __lock_acquire+0x138a/0x7c40 [ 81.402915][ T11] ? cfg80211_parse_mbssid_data+0x23a0/0x23a0 [ 81.406211][ T32] ? __lock_acquire+0x7c40/0x7c40 [ 81.409117][ T11] ? __local_bh_enable_ip+0x136/0x1c0 [ 81.413882][ T32] ? ieee80211_bss_info_update+0x33b/0xbf0 [ 81.419523][ T11] ? __lock_acquire+0x7c40/0x7c40 [ 81.425659][ T32] ieee80211_bss_info_update+0x6ef/0xbf0 [ 81.430402][ T11] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 81.436525][ T32] ? ieee80211_rx_bss_put+0x60/0x60 [ 81.442678][ T11] ? ieee80211_bss_info_update+0x33b/0xbf0 [ 81.447763][ T32] ? ieee80211_ibss_rx_queued_mgmt+0xeaa/0x2eb0 [ 81.453919][ T11] ieee80211_bss_info_update+0x6ef/0xbf0 [ 81.459411][ T32] ? ieee80211_vif_get_shift+0x22b/0x290 [ 81.464823][ T11] ? ieee80211_rx_bss_put+0x60/0x60 [ 81.470925][ T32] ? ieee80211_mandatory_rates+0x1c8/0x230 [ 81.475917][ T11] ? ieee80211_check_fast_xmit+0x545/0x1420 [ 81.481622][ T32] ieee80211_ibss_rx_queued_mgmt+0x1931/0x2eb0 [ 81.487733][ T11] ? ieee80211_ibss_rx_queued_mgmt+0xeaa/0x2eb0 [ 81.492934][ T32] ? verify_lock_unused+0x140/0x140 [ 81.498883][ T11] ieee80211_ibss_rx_queued_mgmt+0x1931/0x2eb0 [ 81.505216][ T32] ? ieee80211_ibss_rx_queued_mgmt+0xeaa/0x2eb0 [ 81.510860][ T11] ? verify_lock_unused+0x140/0x140 [ 81.516529][ T32] ? ieee80211_ibss_rx_no_sta+0x780/0x780 [ 81.521726][ T11] ? ieee80211_ibss_rx_queued_mgmt+0xeaa/0x2eb0 [ 81.527545][ T32] ? mark_lock+0x94/0x320 [ 81.533431][ T11] ? ieee80211_ibss_rx_no_sta+0x780/0x780 [ 81.539603][ T32] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 81.545859][ T11] ? mark_lock+0x94/0x320 [ 81.551125][ T32] ? __lock_acquire+0x7c40/0x7c40 [ 81.557331][ T11] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 81.563563][ T32] ? lock_chain_count+0x20/0x20 [ 81.568782][ T11] ? __lock_acquire+0x7c40/0x7c40 [ 81.574580][ T32] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 81.580866][ T11] ? lock_chain_count+0x20/0x20 [ 81.585219][ T32] ? kcov_remote_start+0x87/0x810 [ 81.590959][ T11] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 81.596995][ T32] ? skb_dequeue+0x120/0x150 [ 81.601315][ T11] ? kcov_remote_start+0x87/0x810 [ 81.606359][ T32] ieee80211_iface_work+0x72c/0xc70 [ 81.612312][ T11] ? skb_dequeue+0x120/0x150 [ 81.617184][ T32] cfg80211_wiphy_work+0x224/0x260 [ 81.622188][ T11] ieee80211_iface_work+0x72c/0xc70 [ 81.628267][ T32] ? process_one_work+0x7b4/0x1160 [ 81.633101][ T11] cfg80211_wiphy_work+0x224/0x260 [ 81.638125][ T32] process_one_work+0x8ab/0x1160 [ 81.644195][ T11] ? process_one_work+0x7b4/0x1160 [ 81.648980][ T32] ? worker_detach_from_pool+0x240/0x240 [ 81.653993][ T11] process_one_work+0x8ab/0x1160 [ 81.659318][ T32] ? _raw_spin_lock_irq+0xb7/0xf0 [ 81.663946][ T11] ? worker_detach_from_pool+0x240/0x240 [ 81.669076][ T32] ? _raw_spin_lock_irqsave+0x100/0x100 [ 81.674256][ T11] ? _raw_spin_lock_irq+0xb7/0xf0 [ 81.679373][ T32] ? wq_worker_running+0x97/0x190 [ 81.684550][ T11] ? _raw_spin_lock_irqsave+0x100/0x100 [ 81.689503][ T32] worker_thread+0xaf5/0x12a0 [ 81.694599][ T11] ? wq_worker_running+0x97/0x190 [ 81.700275][ T32] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 81.705229][ T11] worker_thread+0xaf5/0x12a0 [ 81.710239][ T32] kthread+0x29d/0x330 [ 81.715912][ T11] kthread+0x29d/0x330 [ 81.721416][ T32] ? worker_clr_flags+0x1a0/0x1a0 [ 81.726534][ T11] ? worker_clr_flags+0x1a0/0x1a0 [ 81.731625][ T32] ? kthread_blkcg+0xd0/0xd0 [ 81.737182][ T11] ? kthread_blkcg+0xd0/0xd0 [ 81.741835][ T32] ret_from_fork+0x1f/0x30 [ 81.746867][ T11] ret_from_fork+0x1f/0x30 [ 81.752762][ T32] [ 81.757487][ T11] [ 81.761518][ T32] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 81.761528][ T32] CPU: 1 PID: 32 Comm: kworker/u4:2 Not tainted syzkaller #0 [ 81.761544][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 81.761554][ T32] Workqueue: events_unbound cfg80211_wiphy_work [ 81.761576][ T32] Call Trace: [ 81.761584][ T32] [ 81.761591][ T32] dump_stack_lvl+0x188/0x24e [ 81.761610][ T32] ? memcpy+0x3c/0x60 [ 81.761627][ T32] ? show_regs_print_info+0x12/0x12 [ 81.761644][ T32] ? load_image+0x410/0x410 [ 81.761675][ T32] panic+0x2d3/0x710 [ 81.761698][ T32] ? bpf_jit_dump+0xd0/0xd0 [ 81.761726][ T32] ? ret_from_fork+0x1f/0x30 [ 81.761752][ T32] __warn+0x2f8/0x4f0 [ 81.761769][ T32] ? cfg80211_bss_update+0x2196/0x21a0 [ 81.761793][ T32] ? cfg80211_bss_update+0x2196/0x21a0 [ 81.761813][ T32] report_bug+0x2ba/0x4f0 [ 81.761829][ T32] ? cfg80211_bss_update+0x2196/0x21a0 [ 81.761855][ T32] handle_bug+0x3a/0x70 [ 81.761872][ T32] exc_invalid_op+0x16/0x40 [ 81.761889][ T32] asm_exc_invalid_op+0x16/0x20 [ 81.761904][ T32] RIP: 0010:cfg80211_bss_update+0x2196/0x21a0 [ 81.761927][ T32] Code: c7 c1 24 e9 20 8e 80 e1 07 80 c1 03 38 c1 0f 8c 5c fc ff ff 48 c7 c7 24 e9 20 8e e8 04 13 45 f8 e9 4b fc ff ff e8 4a ce f3 f7 <0f> 0b e9 a0 fc ff ff 0f 1f 00 55 41 57 41 56 41 55 41 54 53 48 83 [ 81.761939][ T32] RSP: 0018:ffffc90000a8f310 EFLAGS: 00010293 [ 81.761953][ T32] RAX: ffffffff898e6496 RBX: ffff888055bb8190 RCX: ffff888019690000 [ 81.761965][ T32] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 81.761974][ T32] RBP: dffffc0000000000 R08: ffff888055647c53 R09: 1ffff1100aac8f8a [ 81.761986][ T32] R10: dffffc0000000000 R11: ffffed100aac8f8b R12: 0000000000000001 [ 81.761997][ T32] R13: ffff888055bb8190 R14: ffff888057142000 R15: 0000000000000000 [ 81.762015][ T32] ? cfg80211_bss_update+0x2196/0x21a0 [ 81.762051][ T32] ? __kmem_cache_alloc_node+0x19d/0x270 [ 81.762073][ T32] ? rcu_is_watching+0x11/0xa0 [ 81.762101][ T32] cfg80211_inform_bss_frame_data+0xa77/0x1390 [ 81.762140][ T32] ? cfg80211_parse_mbssid_data+0x23a0/0x23a0 [ 81.762161][ T32] ? __lock_acquire+0x138a/0x7c40 [ 81.762199][ T32] ? __lock_acquire+0x7c40/0x7c40 [ 81.762228][ T32] ? ieee80211_bss_info_update+0x33b/0xbf0 [ 81.762251][ T32] ieee80211_bss_info_update+0x6ef/0xbf0 [ 81.762281][ T32] ? ieee80211_rx_bss_put+0x60/0x60 [ 81.762312][ T32] ? ieee80211_ibss_rx_queued_mgmt+0xeaa/0x2eb0 [ 81.762335][ T32] ? ieee80211_vif_get_shift+0x22b/0x290 [ 81.762366][ T32] ? ieee80211_mandatory_rates+0x1c8/0x230 [ 81.762389][ T32] ieee80211_ibss_rx_queued_mgmt+0x1931/0x2eb0 [ 81.762407][ T32] ? verify_lock_unused+0x140/0x140 [ 81.762441][ T32] ? ieee80211_ibss_rx_queued_mgmt+0xeaa/0x2eb0 [ 81.762462][ T32] ? ieee80211_ibss_rx_no_sta+0x780/0x780 [ 81.762488][ T32] ? mark_lock+0x94/0x320 [ 81.762511][ T32] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 81.762532][ T32] ? __lock_acquire+0x7c40/0x7c40 [ 81.762552][ T32] ? lock_chain_count+0x20/0x20 [ 81.762571][ T32] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 81.762601][ T32] ? kcov_remote_start+0x87/0x810 [ 81.762620][ T32] ? skb_dequeue+0x120/0x150 [ 81.762641][ T32] ieee80211_iface_work+0x72c/0xc70 [ 81.762668][ T32] cfg80211_wiphy_work+0x224/0x260 [ 81.762686][ T32] ? process_one_work+0x7b4/0x1160 [ 81.762705][ T32] process_one_work+0x8ab/0x1160 [ 81.762737][ T32] ? worker_detach_from_pool+0x240/0x240 [ 81.762759][ T32] ? _raw_spin_lock_irq+0xb7/0xf0 [ 81.762779][ T32] ? _raw_spin_lock_irqsave+0x100/0x100 [ 81.762803][ T32] ? wq_worker_running+0x97/0x190 [ 81.762820][ T32] worker_thread+0xaf5/0x12a0 [ 81.762851][ T32] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 81.762882][ T32] kthread+0x29d/0x330 [ 81.762895][ T32] ? worker_clr_flags+0x1a0/0x1a0 [ 81.762912][ T32] ? kthread_blkcg+0xd0/0xd0 [ 81.762929][ T32] ret_from_fork+0x1f/0x30 [ 81.762960][ T32] [ 81.765777][ T32] Kernel Offset: disabled [ 82.186686][ T32] Rebooting in 86400 seconds..