last executing test programs: 16.866262531s ago: executing program 4 (id=278): syz_open_dev$video4linux(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000300)={@local, 0x3ff, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x20) 15.068407282s ago: executing program 4 (id=281): socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000180)=[{0x6, 0x80, 0x4, 0x7fff0000}]}) r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x11, &(0x7f0000000040)=0x3, 0x4) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r0, 0x0, 0x82) fchdir(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) unlinkat(r2, &(0x7f0000000140)='./file0\x00', 0x200) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x28) r4 = fsmount(r3, 0x0, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000040), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)={[{0x2d, 'pids'}]}, 0x6) 14.784469086s ago: executing program 4 (id=284): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xb7}}, 0x0}, 0x94) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x16}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, 0x0) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000000)=0x3) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001400030500008000ffdbdf2502075bff", @ANYRES32=r4, @ANYBLOB="080002007f00000108000400ac1e0001140003"], 0x3c}, 0x1, 0x0, 0x0, 0xc090}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) 14.497825831s ago: executing program 4 (id=286): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x2a, 0x8001, 0x2, 0x6, 0x6, 0x5, 0x3, 0x200, 0xfffffffb}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001280)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x80000, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffe0, 0xb}, {0xc, 0xb}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x6, 0x1, 0xbbaa, 0x3c, 0x1, 0x10000}, {0x21, 0x2, 0x2, 0xc, 0x9, 0xa}, 0xf99d, 0x5, 0x1d5a}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xb8bb192d0b77562d}, @TCA_TBF_BURST={0x8, 0x6, 0x2}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000030}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 11.788803777s ago: executing program 2 (id=292): setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000, 0x1}) 11.763692468s ago: executing program 4 (id=293): socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$key(0xf, 0x3, 0x2) shutdown(0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='cubic', 0x5) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2401}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) sendto$inet(r0, &(0x7f0000000180)="89", 0x1, 0x4c041, 0x0, 0x0) 10.035972765s ago: executing program 2 (id=297): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000340)=[{&(0x7f00000002c0)='/', 0x1}], 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000001e00)={'ip_vti0\x00', 0x0, 0x8, 0x40, 0x7, 0x0, {{0x38, 0x4, 0x0, 0x33, 0xe0, 0x65, 0x0, 0x5, 0x2f, 0x0, @multicast2, @multicast1, {[@lsrr={0x83, 0x3, 0xa8}, @ssrr={0x89, 0x1f, 0xef, [@local, @local, @private=0xa010100, @rand_addr=0x64010100, @multicast1, @dev={0xac, 0x14, 0x14, 0x1c}, @private=0xa010100]}, @end, @timestamp={0x44, 0x20, 0x85, 0x0, 0x7, [0x257, 0x8, 0x6, 0x10001, 0xcaf, 0x7, 0x1]}, @timestamp_addr={0x44, 0x1c, 0x54, 0x1, 0x5, [{@multicast1, 0xffff}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x8}, {@private=0xa010101, 0x7}]}, @end, @cipso={0x86, 0x48, 0xffffffffffffffff, [{0x7, 0x6, "7ef5c7db"}, {0x0, 0x4, "8c90"}, {0x7, 0xb, "57e4249e84f46519a9"}, {0x5, 0xc, "985ef460bbd2a012b819"}, {0x2, 0x10, "2994bc74d09274135b2dfd857e3d"}, {0x7, 0x11, "64ff375b12635f65ce48666b9b7f1b"}]}, @generic={0x7, 0x12, "5dff74cadec530aa15a7415e1ef6a059"}, @cipso={0x86, 0x11, 0x2, [{0x0, 0xb, "4eedbb3abe490b216e"}]}]}}}}}) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10000, &(0x7f0000000080)={[{@quota}, {@delalloc}, {@acl}, {@journal_dev={'journal_dev', 0x3d, 0x11}}, {@usrjquota}, {@bsdgroups}]}, 0x1, 0x50a, &(0x7f0000001f40)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) fdatasync(r3) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x10, 0x4, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x4014, &(0x7f00000000c0), 0x1, 0x3f9, &(0x7f0000000900)="$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") madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 10.033435905s ago: executing program 3 (id=298): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r3, &(0x7f0000000180), 0x400008a, 0x0) sendmsg$key(r3, &(0x7f0000000140)={0x9, 0x0, 0x0}, 0x0) 9.996290127s ago: executing program 0 (id=299): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r4, &(0x7f0000000540)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x40) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 9.14173188s ago: executing program 0 (id=300): socket$igmp(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0100000003000000ec0b000007"], 0x48) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003f80000850000008600000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 8.956095819s ago: executing program 3 (id=301): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="8d283272e64fc9c6aec802ac0eee09c8f85a2b5ce4a1576a9c514556fed48c38c19797078855a3e6bcf03026960e72c6b9e43a75d157b3f2b82986c1cdc128ea94985a8e036a5b61b5eede6581a9ab8b1d1fc825d8b6467f7f0c8aa5e6eb7d332cdea3ced93d1365e1b47d89a75477b69ea8aa34a8503ac55a676cd4c3412af764aacbc5", 0x84}], 0x1, 0x0, 0x48}}], 0x1, 0x4000001) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8810}, 0x8000) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x58, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x9, 0x4}, {}, {0x7, 0x6}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xceb, 0x7, 0x4}, {{0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x1}}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x5dc}], 0x1}, 0x4) 8.74453374s ago: executing program 0 (id=303): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sndmidi(0x0, 0x2, 0x4a102) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r0, 0x0, r1, 0x0, 0x38f9, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004000000000009000200f3797a3000000000240007800c0002800800014000008e020c0001800800014000000000080008400000001005000500020000000500010006"], 0x70}}, 0x0) ptrace$PTRACE_SETSIGMASK(0x420b, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x70}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000406010100000000000000000000000005000100070000008be14b81c0cc913070dfb47835cb850e6f60adc2505da1ccae3d1abb743ffdad19c0a9953c72e7d84fea192708710900000000000000036f90bc444852fb48d57f6e83e15642171c941c33eabe58f8f367c5a0deaa024b205b8cfc"], 0x1c}, 0x1, 0xfff0}, 0x0) 7.406786148s ago: executing program 1 (id=304): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{}]}, 0x82, 0x499, &(0x7f0000000840)="$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") r1 = open(&(0x7f0000000280)='./file1\x00', 0x14d042, 0x0) sendfile(r1, r1, 0x0, 0x800000009) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r4, &(0x7f0000000400)=""/4096, 0xc00) 7.135984281s ago: executing program 1 (id=305): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000040000000400000022"], 0x48) r5 = socket(0x2c, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r6, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r5}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r4, &(0x7f0000000140), &(0x7f0000000080)=@udp=r5}, 0x20) close_range(r3, 0xffffffffffffffff, 0x0) 5.670802865s ago: executing program 1 (id=306): syz_init_net_socket$ax25(0x3, 0x2, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x49f0, 0x20, 0x8001, 0x48024e}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x4) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x38, 0x1403, 0xc23, 0x70bd2a, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'virt_wifi0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) 5.641433076s ago: executing program 4 (id=307): openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xc, &(0x7f0000000300)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x1000000000000f, &(0x7f0000000180)=0x57bb, 0x3c) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x44, &(0x7f0000000040)={0x0, 0x0}, 0x10) 5.575328989s ago: executing program 2 (id=308): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0xfffffffffffffff8}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, @dev, @dev={0xfe, 0x80, '\x00', 0x37}, 0x0, 0x0, 0x0, 0x1}}) getsockopt$ax25_int(r3, 0x101, 0x8, &(0x7f0000000080), 0x0) 5.525175532s ago: executing program 0 (id=309): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x3fff, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x4}, {0xffff, 0xffff}, {0xfff1, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0xdc}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffff3ddc, {0x0, 0x0, 0x0, r3, {0xfff3}, {0x5}, {0xfff1, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x40054) 5.391612978s ago: executing program 3 (id=310): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x14, 0x4, 0x4, 0x15}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r4, 0x0, &(0x7f0000000180)=""/122}, 0x20) r5 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r5, &(0x7f0000005240), 0x4000095, 0xfe) 4.331909382s ago: executing program 1 (id=311): mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x4000, &(0x7f0000000040)=ANY=[], 0xff, 0x60c0, &(0x7f000000d800)="$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") r2 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) 4.329947572s ago: executing program 2 (id=321): landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, &(0x7f00000003c0)={0x3, 0x6}, 0x0) socket$netlink(0x10, 0x3, 0xf) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000080)={0x34, r1, 0xf03, 0x0, 0x0, {0x34}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, &(0x7f00000000c0)={0x3, 0x39f}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000", 0x15) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) socketpair(0x1d, 0xe, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000640)="8b1da897c59c7a2a37480c657d14be1217d4b8c84543b95a91bfdd04087780188d86d7b628d9d217f242ca81b4d906d3e9eeb509f689b1a9fddf2cf862c91d421f6dbfd6a6989d2011acbf60dea00df74e202147e1f58edf7370dad49b27517dbb77086a7d03a7b0894470fd4618e017c39b452c4ebf6585456c67f5e8004ae87a", 0x81, 0x4000000, &(0x7f0000000300)={0xa, 0x4e21, 0x5, @local, 0x4}, 0x1c) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82187202, &(0x7f0000000340)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) setreuid(0xee01, 0xee01) openat$cgroup_pressure(r3, &(0x7f00000000c0)='cpu.pressure\x00', 0x2, 0x0) 3.873619015s ago: executing program 3 (id=312): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) keyctl$unlink(0x9, 0x0, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0x208e24b) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f0000000180)=0xdc39) recvfrom$inet_nvme(r1, &(0x7f00000001c0)=""/251, 0xfb, 0x40000000, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) lseek(r1, 0x7, 0x4) 2.548835122s ago: executing program 2 (id=313): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x10, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x80003, 0x6) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="980100004200000128bd7000fbdbdf2501000000960065800400e1801400c900fc000000000000000000000000000000040011809a5fb10907db0c8045ea74072f349b310a008f48464cbe28b1ad10c38eb2972bcc8ac251204f4aa244a6702f707d4773c08f470164c54f61a13334052ed5f1172c789054395ac9dd833ad6a1b99ff3d545bce38100be797ad7134ce4437b4d23d1e8bdf33e535773c8486de5e9e708006c00000000000000c392b6f56f9758f50f6c5d4288c9372d7523bbe083a2a770fe421c3818964694aec5a1c92794a482ef5c04bc1a68be032da2f64b2790304d8b8e04552307072e5edeb3f40ea1ac4c830f033b43ea75a6f331f7617cd5835a9dd925dd514cbfbe74904a5bb24839acf54a1f404ea7ec845a20b908107e77a6a3448a1e64a5984b889e197009dac1866efb2b0d5b7b48c865a8559fbe86580c0d8c01d89941064d9441ecaad9689b211bc586038271858b13412fdbb79d9668fccb8c158f598bb8e09b944063155bb857fbb0beae7bb345287234a8d1f1249493174d775897bfe8627e9bdc9b0662ba5e000000"], 0x198}, 0x1, 0x0, 0x0, 0x40000}, 0x20040011) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) r3 = open$dir(&(0x7f0000000440)='./file0\x00', 0x42000, 0x4) fchmodat(r3, &(0x7f0000000480)='./file0\x00', 0x81) r4 = socket$key(0xf, 0x3, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$key(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x2, 0x6, 0x2, 0x0, 0x2, 0x0, 0x2}, 0x10}}, 0x0) 2.518941234s ago: executing program 0 (id=314): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x2}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0x1ff01018ce30c2a5}, @TCA_TBF_RATE64={0xc, 0x4, 0xdcd9be68b5bd509}, @TCA_TBF_PARMS={0x28, 0x1, {{0x81, 0x0, 0xee8, 0x1c, 0x800, 0x8}, {0x7, 0x2, 0x7, 0x1003, 0x5, 0x20000007}, 0x6db6312a, 0x7, 0x1257}}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004}, 0x4890) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 2.131937073s ago: executing program 3 (id=315): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r4 = accept$alg(r3, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000600), 0xfec8) recvmmsg(r4, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0x6}, {&(0x7f0000000140)=""/9, 0xa}, {&(0x7f0000000300)=""/225, 0x2}, {&(0x7f0000000400)=""/41, 0xfeb2}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0xffffffffffffffe0}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) 1.757316771s ago: executing program 1 (id=316): syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000140)='./file1\x00', 0x3808004, &(0x7f0000000600)=ANY=[], 0x5, 0x14fe, &(0x7f00000020c0)="$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") socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) link(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) 968.014061ms ago: executing program 0 (id=317): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0xfff3, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x183f}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x27f}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) 815.938729ms ago: executing program 3 (id=318): syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x56a7}, @NFTA_NG_TYPE={0x8}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}, 0x1, 0x0, 0x0, 0x40050}, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r4, 0xc0044dff, &(0x7f0000000200)=0xb) 782.487311ms ago: executing program 2 (id=319): syz_open_dev$mouse(&(0x7f0000001680), 0x0, 0x80041) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) socket$netlink(0x10, 0x3, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) ioctl$sock_rose_SIOCRSCLRRT(0xffffffffffffffff, 0x89e4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24058041) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e1f}]}]}, 0x8}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB='\\\x00\x00\x00\n'], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 0s ago: executing program 1 (id=320): socket$nl_generic(0x10, 0x3, 0x10) userfaultfd(0x80001) socket(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$inet(0x2, 0x3, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r3, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES16=r1, @ANYBLOB="ac"], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.24' (ED25519) to the list of known hosts. [ 62.327803][ T4254] cgroup: Unknown subsys name 'net' [ 62.430756][ T4254] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 63.931549][ T4254] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 65.274106][ T4276] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 65.285028][ T4276] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 65.297657][ T4281] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 65.306779][ T4281] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 65.315177][ T4281] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 65.323967][ T4281] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 65.332171][ T4282] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 65.332939][ T4281] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 65.340802][ T4282] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 65.348463][ T4281] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 65.354798][ T4282] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 65.362199][ T4281] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 65.376421][ T4281] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 65.378286][ T4282] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 65.384245][ T4281] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 65.391462][ T4282] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 65.399482][ T4281] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 65.406211][ T4282] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 65.413321][ T4281] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 65.419947][ T4282] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 65.427738][ T4281] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 65.434560][ T4282] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 65.442015][ T4281] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 65.448769][ T4282] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 65.465451][ T4281] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 65.465497][ T4270] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 65.480556][ T4270] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 65.488551][ T4284] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 65.504882][ T4283] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 65.513388][ T4283] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 65.859479][ T4266] chnl_net:caif_netlink_parms(): no params data found [ 65.924475][ T4271] chnl_net:caif_netlink_parms(): no params data found [ 66.031713][ T4277] chnl_net:caif_netlink_parms(): no params data found [ 66.076641][ T4279] chnl_net:caif_netlink_parms(): no params data found [ 66.096393][ T4268] chnl_net:caif_netlink_parms(): no params data found [ 66.107691][ T4266] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.115853][ T4266] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.124669][ T4266] device bridge_slave_0 entered promiscuous mode [ 66.140243][ T4266] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.147499][ T4266] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.156160][ T4266] device bridge_slave_1 entered promiscuous mode [ 66.216559][ T4271] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.224115][ T4271] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.232120][ T4271] device bridge_slave_0 entered promiscuous mode [ 66.263903][ T4271] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.271187][ T4271] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.282146][ T4271] device bridge_slave_1 entered promiscuous mode [ 66.291808][ T4266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.318600][ T4277] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.325938][ T4277] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.334229][ T4277] device bridge_slave_0 entered promiscuous mode [ 66.349979][ T4266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.367411][ T4277] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.375777][ T4277] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.383419][ T4277] device bridge_slave_1 entered promiscuous mode [ 66.423326][ T4266] team0: Port device team_slave_0 added [ 66.437843][ T4271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.461287][ T4277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.480376][ T4266] team0: Port device team_slave_1 added [ 66.487830][ T4271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.499297][ T4277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.508748][ T4268] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.518530][ T4268] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.527212][ T4268] device bridge_slave_0 entered promiscuous mode [ 66.534694][ T4279] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.541890][ T4279] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.552876][ T4279] device bridge_slave_0 entered promiscuous mode [ 66.587783][ T4268] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.595194][ T4268] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.603409][ T4268] device bridge_slave_1 entered promiscuous mode [ 66.611320][ T4279] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.620806][ T4279] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.628726][ T4279] device bridge_slave_1 entered promiscuous mode [ 66.659734][ T4277] team0: Port device team_slave_0 added [ 66.671747][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.679287][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.706247][ T4266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.728060][ T4271] team0: Port device team_slave_0 added [ 66.737011][ T4279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.750692][ T4277] team0: Port device team_slave_1 added [ 66.761766][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.769110][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.795385][ T4266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.813414][ T4271] team0: Port device team_slave_1 added [ 66.821505][ T4279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.838173][ T4268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.891574][ T4268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.925872][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.932940][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.960365][ T4277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.972540][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.981849][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.008876][ T4271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.023454][ T4266] device hsr_slave_0 entered promiscuous mode [ 67.031171][ T4266] device hsr_slave_1 entered promiscuous mode [ 67.045337][ T4268] team0: Port device team_slave_0 added [ 67.054169][ T4279] team0: Port device team_slave_0 added [ 67.060721][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.068762][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.096967][ T4277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.109058][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.116572][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.143529][ T4271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.156836][ T4268] team0: Port device team_slave_1 added [ 67.166784][ T4279] team0: Port device team_slave_1 added [ 67.202611][ T4279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.210039][ T4279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.237308][ T4279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.272337][ T4279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.279732][ T4279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.307038][ T4279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.334317][ T4268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.341689][ T4268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.368715][ T4268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.397996][ T4271] device hsr_slave_0 entered promiscuous mode [ 67.406472][ T4271] device hsr_slave_1 entered promiscuous mode [ 67.413337][ T4271] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.421421][ T4271] Cannot create hsr debugfs directory [ 67.434095][ T4268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.441081][ T4268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.468030][ T4268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.499440][ T4277] device hsr_slave_0 entered promiscuous mode [ 67.506338][ T4277] device hsr_slave_1 entered promiscuous mode [ 67.512962][ T4277] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.521274][ T4277] Cannot create hsr debugfs directory [ 67.524628][ T4267] Bluetooth: hci1: command 0x0409 tx timeout [ 67.580931][ T4279] device hsr_slave_0 entered promiscuous mode [ 67.588168][ T4279] device hsr_slave_1 entered promiscuous mode [ 67.595003][ T4270] Bluetooth: hci2: command 0x0409 tx timeout [ 67.595131][ T4270] Bluetooth: hci0: command 0x0409 tx timeout [ 67.604061][ T4267] Bluetooth: hci4: command 0x0409 tx timeout [ 67.608645][ T4270] Bluetooth: hci3: command 0x0409 tx timeout [ 67.614753][ T4279] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.630596][ T4279] Cannot create hsr debugfs directory [ 67.681775][ T4268] device hsr_slave_0 entered promiscuous mode [ 67.690308][ T4268] device hsr_slave_1 entered promiscuous mode [ 67.697219][ T4268] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.705060][ T4268] Cannot create hsr debugfs directory [ 67.925532][ T4266] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 67.960603][ T4266] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 67.982638][ T4266] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 68.010976][ T4266] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 68.057132][ T4271] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 68.068829][ T4271] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 68.095163][ T4271] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 68.105398][ T4271] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 68.168960][ T4277] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.186408][ T4277] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.209302][ T4277] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.219373][ T4277] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.243984][ T4268] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 68.265026][ T4268] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 68.278604][ T4268] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 68.310895][ T4268] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 68.352845][ T4266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.370040][ T4271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.388630][ T4279] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 68.412869][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.425902][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.438120][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.446657][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.458996][ T4279] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 68.468450][ T4279] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 68.484484][ T4266] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.491397][ T4279] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 68.524857][ T4271] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.535590][ T4277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.557841][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.572151][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.582975][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.593898][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.625617][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.636472][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.648427][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.659000][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.668172][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.679234][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.689027][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.698557][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.706403][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.715778][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.754106][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.763000][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.772524][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.787839][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.799213][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.807098][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.816355][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.828295][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.838760][ T4277] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.868323][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.880876][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.890697][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.905519][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.914491][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.931957][ T4268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.942262][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.953915][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.991612][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.999954][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.011377][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.022126][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.029528][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.039046][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.048919][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.058004][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.067060][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.076723][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.084257][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.092748][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.102204][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.111700][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.121322][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.137957][ T4271] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 69.149344][ T4271] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.181433][ T4279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.189388][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.199837][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.209693][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.219113][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.228839][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.238185][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.247542][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.256873][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.266540][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.277546][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.286284][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.298805][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.308345][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.319890][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.331560][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.350741][ T4268] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.376085][ T4279] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.384964][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.392927][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.409630][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.419751][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.433437][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.454601][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.463215][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.486383][ T4277] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.501135][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.511251][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.521526][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.531553][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.539312][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.549961][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.566139][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.579799][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.587101][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.601847][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.603941][ T4267] Bluetooth: hci1: command 0x041b tx timeout [ 69.612155][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.661004][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.674193][ T4267] Bluetooth: hci3: command 0x041b tx timeout [ 69.680832][ T4267] Bluetooth: hci4: command 0x041b tx timeout [ 69.688255][ T4270] Bluetooth: hci2: command 0x041b tx timeout [ 69.688276][ T4273] Bluetooth: hci0: command 0x041b tx timeout [ 69.724189][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.761950][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.786821][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.801567][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.811640][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.823093][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.832571][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.840106][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.848965][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.857960][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.884730][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.900678][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.910549][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.917738][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.933469][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.949545][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.960920][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.975535][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.990588][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.001531][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.015837][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.072053][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.095509][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.107422][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.119366][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.128163][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.150143][ T4271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.162572][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.180953][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.197203][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.209069][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.221613][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.256254][ T4266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.270931][ T4268] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.284017][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.292141][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.302466][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.311190][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.319547][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.327967][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.338653][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.349343][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.360137][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.372429][ T4277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.434182][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.445287][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.464808][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.494433][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.538453][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.554777][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.574349][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.595504][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.605978][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.615598][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.628980][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.637496][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.652723][ T4271] device veth0_vlan entered promiscuous mode [ 70.673776][ T4271] device veth1_vlan entered promiscuous mode [ 70.693977][ T4277] device veth0_vlan entered promiscuous mode [ 70.718417][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.735792][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.745794][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.768090][ T4266] device veth0_vlan entered promiscuous mode [ 70.779644][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.795067][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.803175][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.818285][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.828892][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.849872][ T4277] device veth1_vlan entered promiscuous mode [ 70.862072][ T4279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.888254][ T4266] device veth1_vlan entered promiscuous mode [ 70.911698][ T4271] device veth0_macvtap entered promiscuous mode [ 70.919902][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.929508][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.939273][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.947406][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.960355][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.969423][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.977631][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.985199][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.994160][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.002920][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.016595][ T4268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.038191][ T4271] device veth1_macvtap entered promiscuous mode [ 71.051907][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.070460][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.080862][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.095982][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.111378][ T4277] device veth0_macvtap entered promiscuous mode [ 71.148506][ T4277] device veth1_macvtap entered promiscuous mode [ 71.162917][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.173121][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.189819][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.200499][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.209674][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.219355][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.228366][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.240196][ T4279] device veth0_vlan entered promiscuous mode [ 71.255916][ T4266] device veth0_macvtap entered promiscuous mode [ 71.297374][ T4266] device veth1_macvtap entered promiscuous mode [ 71.313896][ T4279] device veth1_vlan entered promiscuous mode [ 71.323170][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.335412][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.349495][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.394486][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.402039][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.414721][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.434191][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.438092][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.454140][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.455011][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.474132][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.491542][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.501879][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.527196][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.542860][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.557342][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.568486][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.577965][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.587483][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.598738][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.611168][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.623287][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.643318][ T4279] device veth0_macvtap entered promiscuous mode [ 71.670664][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.679721][ T4270] Bluetooth: hci1: command 0x040f tx timeout [ 71.695061][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.708423][ T4271] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.719230][ T4271] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.729150][ T4271] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.740716][ T4271] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.754635][ T4270] Bluetooth: hci2: command 0x040f tx timeout [ 71.754661][ T4267] Bluetooth: hci4: command 0x040f tx timeout [ 71.761114][ T4270] Bluetooth: hci0: command 0x040f tx timeout [ 71.773305][ T4283] Bluetooth: hci3: command 0x040f tx timeout [ 71.787092][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.804347][ T4277] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.814701][ T4277] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.824190][ T4277] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.833004][ T4277] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.861996][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.874157][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.884054][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.894767][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.907272][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.917563][ T4279] device veth1_macvtap entered promiscuous mode [ 71.943116][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.953442][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.963077][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.974277][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.985259][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.996366][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.007550][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.019798][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.040526][ T4266] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.052123][ T4266] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.061450][ T4266] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.071605][ T4266] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.086075][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.097757][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.107622][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.118552][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.147849][ T4268] device veth0_vlan entered promiscuous mode [ 72.163121][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.176237][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.187297][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.198533][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.208943][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.220206][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.232050][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.249052][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.258211][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.266983][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.276658][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.312728][ T4268] device veth1_vlan entered promiscuous mode [ 72.327261][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.339751][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.348478][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.363125][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.377483][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.388718][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.400659][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.411196][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.422266][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.433369][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.475455][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.485550][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.495466][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.508332][ T4279] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.519012][ T4279] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.528081][ T4279] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.537210][ T4279] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.585690][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.602707][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.618536][ T4268] device veth0_macvtap entered promiscuous mode [ 72.645087][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.655631][ T1081] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.666843][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.675586][ T1081] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.686697][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.699252][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.708039][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.732807][ T4268] device veth1_macvtap entered promiscuous mode [ 72.747460][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.747496][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.758860][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.780885][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.814664][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.819965][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.822847][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.836003][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.857602][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.868846][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.879553][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.891806][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.902125][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.914332][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.927880][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.944656][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.953169][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.966383][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.979079][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.992721][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.003274][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.014787][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.027057][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.038426][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.048860][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.059795][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.071663][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.093418][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.106098][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.134473][ T4327] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.140867][ T4268] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.142401][ T4327] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.153046][ T4268] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.170753][ T4268] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.180319][ T4268] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.205493][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.218831][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.230791][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.246834][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.298735][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.324240][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.343526][ T4327] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.386889][ T4327] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.434057][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.470968][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.880537][ T4273] Bluetooth: hci2: command 0x0419 tx timeout [ 73.887706][ T4283] Bluetooth: hci0: command 0x0419 tx timeout [ 73.888249][ T4267] Bluetooth: hci1: command 0x0419 tx timeout [ 73.901074][ T4283] Bluetooth: hci4: command 0x0419 tx timeout [ 73.909894][ T4283] Bluetooth: hci3: command 0x0419 tx timeout [ 74.332344][ T4359] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.380727][ T4359] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.974194][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.090862][ T1081] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.117072][ T1081] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.335647][ T4373] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 76.475681][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.549021][ T4378] netlink: 'syz.2.3': attribute type 3 has an invalid length. [ 80.019155][ T4411] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 80.102877][ T4413] capability: warning: `syz.2.15' uses 32-bit capabilities (legacy support in use) [ 81.363520][ T4427] loop0: detected capacity change from 0 to 40427 [ 81.391626][ T4427] F2FS-fs (loop0): invalid crc value [ 81.400911][ T4427] F2FS-fs (loop0): Found nat_bits in checkpoint [ 81.446727][ T4427] F2FS-fs (loop0): Start checkpoint disabled! [ 81.476230][ T4427] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 81.558800][ T26] audit: type=1800 audit(1774482340.274:2): pid=4427 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.17" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 81.700468][ T950] cfg80211: failed to load regulatory.db [ 81.718438][ T4430] syz.0.17: attempt to access beyond end of device [ 81.718438][ T4430] loop0: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 82.199565][ T26] audit: type=1800 audit(1774482340.374:3): pid=4430 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.17" name="bus" dev="loop0" ino=10 res=0 errno=0 [ 82.413299][ T9] kworker/u4:0: attempt to access beyond end of device [ 82.413299][ T9] loop0: rw=1, sector=45104, nr_sectors = 56 limit=40427 [ 82.454467][ T9] kworker/u4:0: attempt to access beyond end of device [ 82.454467][ T9] loop0: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 82.499834][ T46] kworker/u4:3: attempt to access beyond end of device [ 82.499834][ T46] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 82.686962][ T4434] netlink: 28 bytes leftover after parsing attributes in process `syz.4.20'. [ 83.934426][ T4443] loop4: detected capacity change from 0 to 128 [ 83.942329][ T4443] FAT-fs (loop4): Unrecognized mount option "18446744073709551615ÿÿÿ" or missing value [ 84.007551][ T4370] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 84.283594][ T0] NOHZ tick-stop error: local softirq work is pending, handler #28a!!! [ 84.493610][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 84.553593][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 84.763594][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 84.783594][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 85.072612][ T4458] ieee802154 phy0 wpan0: encryption failed: -22 [ 87.723241][ T4484] Malformed UNC in devname [ 87.723241][ T4484] [ 87.730819][ T4484] CIFS: VFS: Malformed UNC in devname [ 90.730410][ T4503] device syzkaller0 entered promiscuous mode [ 91.873606][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 92.703640][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 92.961156][ T4523] netlink: 'syz.0.36': attribute type 10 has an invalid length. [ 92.979828][ T4523] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 93.091458][ T4525] netlink: 12 bytes leftover after parsing attributes in process `syz.2.39'. [ 93.107968][ T4524] netlink: 'syz.3.40': attribute type 1 has an invalid length. [ 94.316079][ T4548] loop3: detected capacity change from 0 to 4096 [ 94.828465][ T4550] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 97.642996][ T4577] netlink: 'syz.1.51': attribute type 7 has an invalid length. [ 97.651268][ T4577] netlink: 'syz.1.51': attribute type 8 has an invalid length. [ 98.860706][ T4585] loop1: detected capacity change from 0 to 1024 [ 98.950612][ T4586] netlink: 'syz.2.56': attribute type 1 has an invalid length. [ 99.060921][ T4586] device veth3 entered promiscuous mode [ 99.112147][ T4591] netlink: 28 bytes leftover after parsing attributes in process `syz.2.56'. [ 100.035100][ T4585] EXT4-fs: Ignoring removed i_version option [ 100.041420][ T4585] EXT4-fs: inline encryption not supported [ 100.061895][ T4585] EXT4-fs (loop1): Test dummy encryption mode enabled [ 100.092496][ T4585] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 101.259915][ T4618] block device autoloading is deprecated and will be removed. [ 103.443633][ T0] NOHZ tick-stop error: local softirq work is pending, handler #108!!! [ 103.463647][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 103.473899][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 103.670331][ T4632] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 106.398255][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 108.413394][ T4661] sctp: failed to load transform for md5: -2 [ 108.572871][ T4669] sctp: failed to load transform for md5: -4 [ 108.633800][ T4659] sctp: failed to load transform for md5: -4 [ 108.640777][ T4664] sctp: failed to load transform for md5: -4 [ 108.653081][ T4676] sctp: failed to load transform for md5: -4 [ 108.661667][ T4671] sctp: failed to load transform for md5: -4 [ 108.957953][ T41] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 109.197522][ T41] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 109.209059][ T41] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.219663][ T41] usb 3-1: Product: syz [ 109.233804][ T41] usb 3-1: Manufacturer: syz [ 109.238821][ T41] usb 3-1: SerialNumber: syz [ 109.277684][ T41] usb 3-1: config 0 descriptor?? [ 109.619349][ T41] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 109.996107][ T4710] netlink: 12 bytes leftover after parsing attributes in process `syz.1.79'. [ 112.204416][ T4722] netlink: 4 bytes leftover after parsing attributes in process `syz.3.83'. [ 112.348204][ T4725] ======================================================= [ 112.348204][ T4725] WARNING: The mand mount option has been deprecated and [ 112.348204][ T4725] and is ignored by this kernel. Remove the mand [ 112.348204][ T4725] option from the mount to silence this warning. [ 112.348204][ T4725] ======================================================= [ 112.386159][ T4725] 9pnet_virtio: no channels available for device 127.0.0.1 [ 113.207698][ T41] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 113.228217][ T41] usb 3-1: USB disconnect, device number 2 [ 114.126533][ T4722] device hsr_slave_1 left promiscuous mode [ 114.507956][ T4730] netlink: 12 bytes leftover after parsing attributes in process `syz.1.86'. [ 114.517820][ T4730] netlink: 60 bytes leftover after parsing attributes in process `syz.1.86'. [ 114.947043][ T4730] netlink: 12 bytes leftover after parsing attributes in process `syz.1.86'. [ 115.113363][ T4730] netlink: 60 bytes leftover after parsing attributes in process `syz.1.86'. [ 115.122640][ T4730] netlink: 104 bytes leftover after parsing attributes in process `syz.1.86'. [ 115.397241][ T4748] loop4: detected capacity change from 0 to 128 [ 115.416143][ T4748] ext4: Unknown parameter 'noacl' [ 115.506029][ T4754] device syzkaller0 entered promiscuous mode [ 115.698556][ T4352] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 115.860782][ T4757] netlink: 8 bytes leftover after parsing attributes in process `syz.1.93'. [ 115.870843][ T4757] bond0: option resend_igmp: invalid value (52140) [ 115.878051][ T4757] bond0: option resend_igmp: allowed values 0 - 255 [ 120.473819][ T4798] netlink: 'syz.2.103': attribute type 1 has an invalid length. [ 121.389245][ T4780] Zero length message leads to an empty skb [ 121.423245][ T4798] 8021q: adding VLAN 0 to HW filter on device bond1 [ 122.731402][ T4802] bond1: (slave veth3): Enslaving as an active interface with a down link [ 123.035583][ T4829] ptrace attach of "./syz-executor exec"[4266] was attempted by "./syz-executor exec"[4829] [ 123.612807][ T4811] bond1: (slave gretap1): making interface the new active one [ 123.787729][ T4811] device gretap1 entered promiscuous mode [ 123.819388][ T4811] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 124.235236][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 124.274636][ T4798] device macvlan2 entered promiscuous mode [ 124.368002][ T4798] device bond1 entered promiscuous mode [ 124.403463][ T4798] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 124.449052][ T4798] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 124.505769][ T4798] device bond1 left promiscuous mode [ 125.980781][ T4872] device syzkaller0 entered promiscuous mode [ 126.409557][ T4879] loop1: detected capacity change from 0 to 40427 [ 126.457232][ T4879] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 126.464428][ T4879] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 126.492091][ T4879] F2FS-fs (loop1): invalid crc value [ 126.737906][ T4879] F2FS-fs (loop1): Found nat_bits in checkpoint [ 126.786998][ T4879] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 126.794347][ T4879] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 128.774378][ T4907] loop0: detected capacity change from 0 to 4096 [ 130.189684][ T4908] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 130.779726][ T4910] 8021q: adding VLAN 0 to HW filter on device bond1 [ 131.811107][ T4913] bond1: (slave ip6gretap1): making interface the new active one [ 132.155305][ T4913] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 132.174094][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 132.493083][ T4918] device bond1 entered promiscuous mode [ 132.702251][ T4918] device ip6gretap1 entered promiscuous mode [ 132.754060][ T4921] device bond1 left promiscuous mode [ 132.788869][ T14] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 132.801304][ T4921] device ip6gretap1 left promiscuous mode [ 132.848910][ T4921] 8021q: adding VLAN 0 to HW filter on device bond1 [ 132.883901][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.890275][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.999238][ T14] usb 4-1: Using ep0 maxpacket: 8 [ 133.008229][ T14] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 133.048142][ T14] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 133.069716][ T14] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 133.312802][ T4944] syz.4.135 uses obsolete (PF_INET,SOCK_PACKET) [ 133.330921][ T14] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 133.355026][ T14] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 133.374402][ T14] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 133.539868][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.138130][ T14] usb 4-1: usb_control_msg returned -32 [ 134.147297][ T14] usbtmc 4-1:16.0: can't read capabilities [ 134.184443][ T4313] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 135.014796][ T4313] usb 2-1: not running at top speed; connect to a high speed hub [ 135.024697][ T4313] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 135.035548][ T4313] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 135.048688][ T4926] usbtmc 4-1:16.0: usb_control_msg returned -71 [ 135.070627][ T4931] usbtmc 4-1:16.0: send_request_dev_dep_msg_in returned -90 [ 135.072727][ T4313] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 135.307463][ T4313] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 135.330424][ T4274] usb 4-1: USB disconnect, device number 2 [ 135.337945][ T4313] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 135.984367][ T4313] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.992756][ T4313] usb 2-1: Product: syz [ 137.410845][ T4313] usb 2-1: Manufacturer: syz [ 137.443737][ T4313] usb 2-1: SerialNumber: syz [ 137.474524][ T4313] usb 2-1: can't set config #1, error -71 [ 137.498880][ T4313] usb 2-1: USB disconnect, device number 2 [ 137.614149][ T4970] netlink: 'syz.0.142': attribute type 5 has an invalid length. [ 137.678981][ T4970] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.142'. [ 142.539752][ T4401] device gretap1 left promiscuous mode [ 144.461071][ T5032] netlink: 8 bytes leftover after parsing attributes in process `syz.1.159'. [ 149.277460][ T5055] netlink: 4 bytes leftover after parsing attributes in process `syz.4.157'. [ 149.359464][ T5055] device syz_tun entered promiscuous mode [ 149.398957][ T5055] device macvtap1 entered promiscuous mode [ 150.635703][ T5071] tipc: Started in network mode [ 150.640843][ T5071] tipc: Node identity 5e30e6874982, cluster identity 4711 [ 150.684060][ T5071] tipc: Enabled bearer , priority 0 [ 150.707322][ T5075] device syzkaller0 entered promiscuous mode [ 151.169625][ T5071] tipc: Resetting bearer [ 151.282082][ T5070] tipc: Resetting bearer [ 151.557985][ T5070] tipc: Disabling bearer [ 151.785046][ T5082] netlink: 8 bytes leftover after parsing attributes in process `syz.4.172'. [ 151.817158][ T5082] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 154.110291][ T5110] atomic_op ffff88805484e998 conn xmit_atomic 0000000000000000 [ 156.213417][ T5113] loop2: detected capacity change from 0 to 512 [ 156.256517][ T5113] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 156.333297][ T5113] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 156.567367][ T5113] EXT4-fs (loop2): 1 truncate cleaned up [ 156.666235][ T5113] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 158.135692][ T4279] EXT4-fs (loop2): unmounting filesystem. [ 158.202312][ T5119] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.211118][ T5119] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.205431][ T5152] loop1: detected capacity change from 0 to 128 [ 159.273029][ T5152] EXT4-fs warning (device loop1): ext4_init_metadata_csum:4556: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 159.286189][ T4352] udevd[4352]: incorrect jbd checksum on /dev/loop1 [ 159.316289][ T5152] EXT4-fs (loop1): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 159.397661][ T4352] udevd[4352]: incorrect jbd checksum on /dev/loop1 [ 160.346529][ T5119] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.392753][ T5119] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.604048][ T14] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 160.793839][ T14] usb 3-1: Using ep0 maxpacket: 32 [ 160.852896][ T14] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 160.925402][ T14] usb 3-1: config 0 has no interface number 0 [ 161.000809][ T14] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 161.050029][ T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.093218][ T14] usb 3-1: Product: syz [ 161.118234][ T14] usb 3-1: Manufacturer: syz [ 161.149902][ T14] usb 3-1: SerialNumber: syz [ 161.187978][ T14] usb 3-1: config 0 descriptor?? [ 161.210665][ T14] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 161.491047][ T5119] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.501432][ T5119] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.516539][ T5119] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.533145][ T5119] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.553359][ T14] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 161.568608][ T14] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 162.365060][ T5153] netlink: 12 bytes leftover after parsing attributes in process `syz.3.182'. [ 162.538297][ T5154] bridge1: port 1(veth3) entered blocking state [ 162.555369][ T5154] bridge1: port 1(veth3) entered disabled state [ 162.577124][ T5154] device veth3 entered promiscuous mode [ 162.630601][ T5155] bridge1: port 2(veth0_to_bond) entered blocking state [ 162.697385][ T5155] bridge1: port 2(veth0_to_bond) entered disabled state [ 162.717180][ T5155] device veth0_to_bond entered promiscuous mode [ 163.329093][ T5156] bridge1: port 3(veth5) entered blocking state [ 163.342000][ T5156] bridge1: port 3(veth5) entered disabled state [ 163.351854][ T5156] device veth5 entered promiscuous mode [ 163.377049][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 163.415180][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 163.454284][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 163.522992][ T5160] device bridge_slave_0 left promiscuous mode [ 163.529923][ T5160] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.544953][ T5160] device bridge_slave_1 left promiscuous mode [ 163.551881][ T5160] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.567929][ T5160] bond0: (slave bond_slave_0): Releasing backup interface [ 163.608731][ T5160] bond0: (slave bond_slave_1): Releasing backup interface [ 163.971722][ T5160] team0: Port device team_slave_0 removed [ 163.995377][ T5160] team0: Port device team_slave_1 removed [ 164.012639][ T5160] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.021075][ T5160] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.031341][ T5160] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.056827][ T5160] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.091836][ T5160] bond1: (slave veth3): Releasing active interface [ 164.131826][ T5160] bond1: (slave veth3): the permanent HWaddr of slave - a6:ed:54:13:aa:cc - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 164.158996][ T5160] device gretap1 entered promiscuous mode [ 164.187322][ T5160] bond1: (slave gretap1): Releasing active interface [ 164.200243][ T5160] device gretap1 left promiscuous mode [ 164.244777][ T5161] team0: Mode changed to "loadbalance" [ 164.260147][ T5177] netlink: 4 bytes leftover after parsing attributes in process `syz.2.189'. [ 164.844630][ T5186] netlink: 4 bytes leftover after parsing attributes in process `syz.4.194'. [ 164.986207][ T5186] device veth0_macvtap left promiscuous mode [ 165.255044][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 165.265326][ T4314] usb 3-1: USB disconnect, device number 3 [ 165.303937][ T4549] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 165.319012][ T4314] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 165.342650][ T4314] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 165.360791][ T4314] quatech2 3-1:0.51: device disconnected [ 165.775545][ T4549] usb 2-1: config 0 has no interfaces? [ 165.832291][ T4549] usb 2-1: New USB device found, idVendor=06cd, idProduct=0109, bcdDevice=25.04 [ 165.991353][ T4549] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.094131][ T4549] usb 2-1: Product: syz [ 166.098607][ T4549] usb 2-1: Manufacturer: syz [ 166.103376][ T4549] usb 2-1: SerialNumber: syz [ 166.308756][ T4549] usb 2-1: config 0 descriptor?? [ 166.631194][ T5168] usb 2-1: USB disconnect, device number 3 [ 168.678780][ T5242] netlink: 'syz.1.209': attribute type 1 has an invalid length. [ 170.579352][ T5242] 8021q: adding VLAN 0 to HW filter on device bond1 [ 170.697600][ T5247] bond1: (slave veth3): Enslaving as an active interface with a down link [ 170.757166][ T5254] loop3: detected capacity change from 0 to 128 [ 170.865301][ T5251] bond1: (slave dummy0): making interface the new active one [ 171.520504][ T5254] FAT-fs (loop3): Unrecognized mount option "s" or missing value [ 171.571997][ T5251] device dummy0 entered promiscuous mode [ 171.753082][ T5251] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 171.770064][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 171.995418][ T5242] netlink: 14 bytes leftover after parsing attributes in process `syz.1.209'. [ 172.975927][ T5242] bond1: (slave dummy0): Releasing active interface [ 172.982902][ T5242] device dummy0 left promiscuous mode [ 173.149946][ T5270] tipc: Started in network mode [ 173.176110][ T5270] tipc: Node identity 080211000001, cluster identity 4711 [ 173.188164][ T5270] tipc: Enabled bearer , priority 0 [ 173.247761][ T5270] device syzkaller0 entered promiscuous mode [ 173.607159][ T5274] tipc: Resetting bearer [ 175.272436][ T4313] tipc: Node number set to 134418688 [ 176.664003][ T26] audit: type=1326 audit(1774482435.374:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5301 comm="syz.1.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9886d9c799 code=0x7ffc0000 [ 176.747012][ T26] audit: type=1326 audit(1774482435.404:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5301 comm="syz.1.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9886d9c799 code=0x7ffc0000 [ 177.489305][ T26] audit: type=1326 audit(1774482435.424:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5301 comm="syz.1.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9886d9c799 code=0x7ffc0000 [ 177.891786][ T5311] loop2: detected capacity change from 0 to 256 [ 178.679949][ T26] audit: type=1326 audit(1774482435.424:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5301 comm="syz.1.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9886d9c799 code=0x7ffc0000 [ 178.696862][ T4352] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 178.760785][ T26] audit: type=1326 audit(1774482435.424:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5301 comm="syz.1.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f9886d9c799 code=0x7ffc0000 [ 178.804588][ T5315] netlink: 12 bytes leftover after parsing attributes in process `syz.4.226'. [ 178.930120][ T5318] loop3: detected capacity change from 0 to 64 [ 179.893796][ T5315] 8021q: adding VLAN 0 to HW filter on device bond2 [ 180.699069][ T5320] device bond2 entered promiscuous mode [ 180.716811][ T5320] 8021q: adding VLAN 0 to HW filter on device bond2 [ 180.806163][ T5332] loop0: detected capacity change from 0 to 128 [ 181.136121][ T5320] team0: Port device bond2 added [ 181.146134][ T26] audit: type=1326 audit(1774482435.424:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5301 comm="syz.1.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9886d9c799 code=0x7ffc0000 [ 181.387863][ T26] audit: type=1326 audit(1774482435.424:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5301 comm="syz.1.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9886d9c799 code=0x7ffc0000 [ 181.432250][ T26] audit: type=1326 audit(1774482435.434:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5301 comm="syz.1.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9886d9c799 code=0x7ffc0000 [ 181.449706][ T5336] device syzkaller1 entered promiscuous mode [ 181.502563][ T26] audit: type=1326 audit(1774482435.434:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5301 comm="syz.1.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9886d9c799 code=0x7ffc0000 [ 181.540504][ T26] audit: type=1326 audit(1774482435.434:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5301 comm="syz.1.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7f9886d9c799 code=0x7ffc0000 [ 181.563047][ C0] vkms_vblank_simulate: vblank timer overrun [ 185.045073][ T5367] loop3: detected capacity change from 0 to 8 [ 185.326823][ T5367] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 188.180825][ T4370] udevd[4370]: incorrect cramfs checksum on /dev/loop3 [ 188.338564][ T5380] capability: warning: `syz.2.241' uses deprecated v2 capabilities in a way that may be insecure [ 189.345175][ T5390] loop2: detected capacity change from 0 to 8 [ 191.130447][ T5401] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 191.281494][ T4270] Bluetooth: hci4: command 0x0406 tx timeout [ 191.283695][ T4283] Bluetooth: hci0: command 0x0406 tx timeout [ 191.353753][ T4270] Bluetooth: hci1: command 0x0406 tx timeout [ 191.360049][ T4270] Bluetooth: hci3: command 0x0406 tx timeout [ 191.361140][ T4283] Bluetooth: hci2: command 0x0406 tx timeout [ 191.869869][ T5390] SQUASHFS error: Failed to read block 0xdfa: -5 [ 191.877036][ T5390] SQUASHFS error: Unable to read metadata cache entry [dfa] [ 191.889001][ T26] kauditd_printk_skb: 58 callbacks suppressed [ 191.889015][ T26] audit: type=1800 audit(1774482450.604:72): pid=5390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.241" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 191.915007][ C1] vkms_vblank_simulate: vblank timer overrun [ 194.328856][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.335846][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.613868][ T5420] tipc: Enabling of bearer rejected, already enabled [ 196.187645][ T5432] loop1: detected capacity change from 0 to 32768 [ 196.239575][ T5432] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.255 (5432) [ 196.392362][ T5432] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 196.403955][ T5432] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 196.413179][ T5432] BTRFS info (device loop1): enabling disk space caching [ 196.421818][ T5432] BTRFS info (device loop1): force clearing of disk cache [ 196.429880][ T5432] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 196.440478][ T5432] BTRFS info (device loop1): use zstd compression, level 3 [ 196.448432][ T5432] BTRFS info (device loop1): disk space caching is enabled [ 197.176381][ T5443] overlayfs: missing 'lowerdir' [ 198.702227][ T5432] BTRFS error (device loop1): open_ctree failed: -22 [ 198.786004][ T4352] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by udevd (4352) [ 200.061821][ T5470] loop2: detected capacity change from 0 to 4096 [ 201.052752][ T5490] device syzkaller0 entered promiscuous mode [ 201.298086][ T5495] ipt_CLUSTERIP: ipt_CLUSTERIP is deprecated and it will removed soon, use xt_cluster instead [ 201.785514][ T5495] xt_CT: You must specify a L4 protocol and not use inversions on it [ 203.395010][ T5510] netlink: 16 bytes leftover after parsing attributes in process `syz.1.271'. [ 203.416375][ T5511] netlink: 'syz.1.271': attribute type 10 has an invalid length. [ 203.550371][ T5511] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 204.291037][ T5527] netlink: 8 bytes leftover after parsing attributes in process `syz.0.274'. [ 207.155631][ T5568] loop3: detected capacity change from 0 to 512 [ 207.202242][ T5568] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 207.290190][ T5570] device syzkaller0 entered promiscuous mode [ 207.445523][ T5570] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 208.102459][ T5572] tipc: Started in network mode [ 208.111591][ T5572] tipc: Node identity 0a4d5530b344, cluster identity 4711 [ 208.111603][ T4456] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 208.165082][ T5572] tipc: Enabled bearer , priority 0 [ 208.217929][ T5569] tipc: Resetting bearer [ 208.296359][ T5569] tipc: Disabling bearer [ 212.489079][ T5614] loop2: detected capacity change from 0 to 512 [ 212.546300][ T5614] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 212.602876][ T5614] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.297: iget: bad i_size value: 38620345925642 [ 212.793323][ T5614] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.297: couldn't read orphan inode 15 (err -117) [ 212.821553][ T5614] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 212.982249][ T5628] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.297: bg 0: block 5: invalid block bitmap [ 212.998208][ T5592] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.006864][ T5592] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.320175][ T5628] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 624 with error 28 [ 214.004854][ T5628] EXT4-fs (loop2): This should not happen!! Data will be lost [ 214.004854][ T5628] [ 214.016188][ T5628] EXT4-fs (loop2): Total free blocks count 0 [ 214.022653][ T5628] EXT4-fs (loop2): Free/Dirty block details [ 214.028884][ T5628] EXT4-fs (loop2): free_blocks=0 [ 214.034348][ T5628] EXT4-fs (loop2): dirty_blocks=628 [ 214.040721][ T5628] EXT4-fs (loop2): Block reservation details [ 214.046983][ T5628] EXT4-fs (loop2): i_reserved_data_blocks=628 [ 214.426806][ T5648] loop1: detected capacity change from 0 to 512 [ 214.458850][ T5648] EXT4-fs (loop1): 1 truncate cleaned up [ 214.465539][ T5648] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 214.490847][ T26] audit: type=1800 audit(1774482473.204:73): pid=5648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.304" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 214.560258][ T4266] EXT4-fs error (device loop1): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 214.647008][ T4266] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz-executor: bg 0: block 465: padding at end of block bitmap is not set [ 214.681372][ T4266] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 214.695840][ T4266] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 234881024 (level 0) [ 214.715340][ T5592] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.726924][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 214.777875][ T5592] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.614947][ T5592] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.625019][ T5592] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.799391][ T5592] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.808593][ T5592] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.235168][ T4279] EXT4-fs (loop2): unmounting filesystem. [ 217.166393][ T5667] virt_wifi0 speed is unknown, defaulting to 1000 [ 217.173703][ T5667] virt_wifi0 speed is unknown, defaulting to 1000 [ 217.182036][ T5667] virt_wifi0 speed is unknown, defaulting to 1000 [ 217.193366][ T5667] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 217.205215][ T5667] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 217.230023][ T5667] virt_wifi0 speed is unknown, defaulting to 1000 [ 217.237349][ T5667] virt_wifi0 speed is unknown, defaulting to 1000 [ 217.246245][ T5667] virt_wifi0 speed is unknown, defaulting to 1000 [ 217.254175][ T5667] virt_wifi0 speed is unknown, defaulting to 1000 [ 217.262028][ T5667] virt_wifi0 speed is unknown, defaulting to 1000 [ 218.931581][ T5679] loop1: detected capacity change from 0 to 32768 [ 219.700955][ T5691] device syzkaller0 entered promiscuous mode [ 221.790736][ T5702] device syzkaller0 entered promiscuous mode [ 222.324265][ C0] ------------[ cut here ]------------ [ 222.330044][ C0] WARNING: CPU: 0 PID: 0 at net/mac80211/tx.c:4944 __ieee80211_beacon_get+0x1233/0x1600 [ 222.340226][ C0] Modules linked in: [ 222.344258][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 [ 222.351304][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 222.361531][ C0] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 222.367985][ C0] Code: 24 4c 89 e7 e8 8e 2e 0a f8 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 a9 8f d1 f7 0f 0b e9 f6 f7 ff ff e8 9d 8f d1 f7 <0f> 0b e9 48 fb ff ff e8 91 8f d1 f7 48 c7 c7 90 dc fa 8d 4c 89 e6 [ 222.387833][ C0] RSP: 0018:ffffc90000007a30 EFLAGS: 00010246 [ 222.394025][ C0] RAX: ffffffff89b0e4f3 RBX: ffffffff89b0d2f6 RCX: ffffffff8c8bc740 [ 222.402005][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 222.410139][ C0] RBP: 0000000000000000 R08: ffffffff8c8bc740 R09: 0000000000000003 [ 222.418866][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff888028462228 [ 222.427067][ C0] R13: dffffc0000000000 R14: ffff888028462760 R15: ffff8880568bf824 [ 222.435401][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 222.444994][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 222.451784][ C0] CR2: 0000001b2f81cff8 CR3: 0000000055d4d000 CR4: 00000000003506f0 [ 222.460103][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 222.468358][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 222.476560][ C0] Call Trace: [ 222.479854][ C0] [ 222.482827][ C0] ? __ieee80211_beacon_get+0x36/0x1600 [ 222.488442][ C0] ieee80211_beacon_get_tim+0x63/0x4e0 [ 222.494390][ C0] mac80211_hwsim_beacon_tx+0x21c/0xae0 [ 222.499951][ C0] ? read_lock_is_recursive+0x10/0x10 [ 222.505544][ C0] __iterate_interfaces+0x243/0x500 [ 222.510846][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 222.517323][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170 [ 222.524973][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 222.531411][ C0] ieee80211_iterate_active_interfaces_atomic+0xd7/0x170 [ 222.539324][ C0] mac80211_hwsim_beacon+0xb7/0x1b0 [ 222.544854][ C0] __hrtimer_run_queues+0x54a/0xd50 [ 222.550280][ C0] ? hw_scan_work+0xf50/0xf50 [ 222.555085][ C0] ? hrtimer_interrupt+0x9c0/0x9c0 [ 222.560222][ C0] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 222.566355][ C0] hrtimer_run_softirq+0x183/0x2a0 [ 222.571486][ C0] handle_softirqs+0x2a1/0x930 [ 222.576670][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 222.581839][ C0] ? do_softirq+0x210/0x210 [ 222.586483][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 222.592487][ C0] __irq_exit_rcu+0x13b/0x230 [ 222.597355][ C0] ? irq_exit_rcu+0x20/0x20 [ 222.601888][ C0] irq_exit_rcu+0x5/0x20 [ 222.606253][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 222.612425][ C0] [ 222.615647][ C0] [ 222.619148][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 222.625965][ C0] RIP: 0010:finish_task_switch+0x26a/0x8f0 [ 222.632241][ C0] Code: 0f 84 3b 01 00 00 48 85 db 0f 85 5a 01 00 00 e9 e8 04 00 00 4c 8b 75 d0 4c 89 e7 e8 00 2c de 08 e8 8b 2c 2f 00 fb 4c 8b 65 c0 <49> 8d bc 24 f8 15 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 [ 222.655819][ C0] RSP: 0018:ffffffff8c807b78 EFLAGS: 00000286 [ 222.663102][ C0] RAX: 884df6b21b22ab00 RBX: 0000000000000000 RCX: 884df6b21b22ab00 [ 222.672881][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8c10a0 RDI: ffffffff8adf0d20 [ 222.681627][ C0] RBP: ffffffff8c807bd0 R08: ffff8880b8e3ab03 R09: 1ffff110171c7560 [ 222.690722][ C0] R10: dffffc0000000000 R11: ffffed10171c7561 R12: ffffffff8c8bc740 [ 222.699119][ C0] R13: dffffc0000000000 R14: ffff88807d088000 R15: ffff8880b8e3b5d0 [ 222.708637][ C0] ? finish_task_switch+0x265/0x8f0 [ 222.714260][ C0] __schedule+0x11d9/0x40e0 [ 222.718902][ C0] ? __sched_text_start+0x8/0x8 [ 222.724623][ C0] ? flush_smp_call_function_queue+0x127/0x350 [ 222.730993][ C0] ? generic_smp_call_function_single_interrupt+0x120/0x120 [ 222.738629][ C0] ? tick_nohz_restart_sched_tick+0x1f0/0x1f0 [ 222.744994][ C0] schedule_idle+0x4a/0x90 [ 222.749662][ C0] do_idle+0x635/0x680 [ 222.753806][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 222.759522][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 222.765074][ C0] ? asm_sysvec_error_interrupt+0x10/0x20 [ 222.770885][ C0] ? schedule_idle+0x57/0x90 [ 222.775897][ C0] cpu_startup_entry+0x3f/0x60 [ 222.781032][ C0] rest_init+0x2dc/0x300 [ 222.785790][ C0] ? time_init+0x33/0x33 [ 222.790477][ C0] arch_call_rest_init+0xa/0xa [ 222.795274][ C0] start_kernel+0x493/0x53c [ 222.800411][ C0] secondary_startup_64_no_verify+0xcf/0xdb [ 222.807046][ C0] [ 222.810242][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 222.818034][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 [ 222.825255][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 222.835923][ C0] Call Trace: [ 222.839514][ C0] [ 222.842464][ C0] dump_stack_lvl+0x188/0x24e [ 222.847253][ C0] ? memcpy+0x3c/0x60 [ 222.851593][ C0] ? show_regs_print_info+0x12/0x12 [ 222.856878][ C0] ? load_image+0x400/0x400 [ 222.861483][ C0] panic+0x2e5/0x730 [ 222.865472][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 222.870080][ C0] ? secondary_startup_64_no_verify+0xcf/0xdb [ 222.876162][ C0] __warn+0x2f8/0x4f0 [ 222.880157][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 222.886930][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 222.893009][ C0] report_bug+0x2ba/0x4f0 [ 222.897758][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 222.903920][ C0] handle_bug+0x3a/0x70 [ 222.908099][ C0] exc_invalid_op+0x16/0x40 [ 222.912706][ C0] asm_exc_invalid_op+0x16/0x20 [ 222.917553][ C0] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 222.924140][ C0] Code: 24 4c 89 e7 e8 8e 2e 0a f8 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 a9 8f d1 f7 0f 0b e9 f6 f7 ff ff e8 9d 8f d1 f7 <0f> 0b e9 48 fb ff ff e8 91 8f d1 f7 48 c7 c7 90 dc fa 8d 4c 89 e6 [ 222.945139][ C0] RSP: 0018:ffffc90000007a30 EFLAGS: 00010246 [ 222.951822][ C0] RAX: ffffffff89b0e4f3 RBX: ffffffff89b0d2f6 RCX: ffffffff8c8bc740 [ 222.960155][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 222.968212][ C0] RBP: 0000000000000000 R08: ffffffff8c8bc740 R09: 0000000000000003 [ 222.976298][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff888028462228 [ 222.984748][ C0] R13: dffffc0000000000 R14: ffff888028462760 R15: ffff8880568bf824 [ 222.993271][ C0] ? __ieee80211_beacon_get+0x36/0x1600 [ 222.998915][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 223.005481][ C0] ? __ieee80211_beacon_get+0x36/0x1600 [ 223.011314][ C0] ieee80211_beacon_get_tim+0x63/0x4e0 [ 223.017309][ C0] mac80211_hwsim_beacon_tx+0x21c/0xae0 [ 223.022958][ C0] ? read_lock_is_recursive+0x10/0x10 [ 223.028338][ C0] __iterate_interfaces+0x243/0x500 [ 223.033808][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 223.040141][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170 [ 223.047486][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 223.054435][ C0] ieee80211_iterate_active_interfaces_atomic+0xd7/0x170 [ 223.061823][ C0] mac80211_hwsim_beacon+0xb7/0x1b0 [ 223.067391][ C0] __hrtimer_run_queues+0x54a/0xd50 [ 223.073122][ C0] ? hw_scan_work+0xf50/0xf50 [ 223.078381][ C0] ? hrtimer_interrupt+0x9c0/0x9c0 [ 223.083918][ C0] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 223.090234][ C0] hrtimer_run_softirq+0x183/0x2a0 [ 223.095490][ C0] handle_softirqs+0x2a1/0x930 [ 223.101229][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 223.106090][ C0] ? do_softirq+0x210/0x210 [ 223.110762][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 223.116170][ C0] __irq_exit_rcu+0x13b/0x230 [ 223.121212][ C0] ? irq_exit_rcu+0x20/0x20 [ 223.126071][ C0] irq_exit_rcu+0x5/0x20 [ 223.130305][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 223.136542][ C0] [ 223.139752][ C0] [ 223.142786][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 223.148866][ C0] RIP: 0010:finish_task_switch+0x26a/0x8f0 [ 223.154759][ C0] Code: 0f 84 3b 01 00 00 48 85 db 0f 85 5a 01 00 00 e9 e8 04 00 00 4c 8b 75 d0 4c 89 e7 e8 00 2c de 08 e8 8b 2c 2f 00 fb 4c 8b 65 c0 <49> 8d bc 24 f8 15 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 [ 223.176964][ C0] RSP: 0018:ffffffff8c807b78 EFLAGS: 00000286 [ 223.183484][ C0] RAX: 884df6b21b22ab00 RBX: 0000000000000000 RCX: 884df6b21b22ab00 [ 223.191819][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8c10a0 RDI: ffffffff8adf0d20 [ 223.199973][ C0] RBP: ffffffff8c807bd0 R08: ffff8880b8e3ab03 R09: 1ffff110171c7560 [ 223.210755][ C0] R10: dffffc0000000000 R11: ffffed10171c7561 R12: ffffffff8c8bc740 [ 223.220989][ C0] R13: dffffc0000000000 R14: ffff88807d088000 R15: ffff8880b8e3b5d0 [ 223.229246][ C0] ? finish_task_switch+0x265/0x8f0 [ 223.234554][ C0] __schedule+0x11d9/0x40e0 [ 223.239194][ C0] ? __sched_text_start+0x8/0x8 [ 223.244868][ C0] ? flush_smp_call_function_queue+0x127/0x350 [ 223.251117][ C0] ? generic_smp_call_function_single_interrupt+0x120/0x120 [ 223.258757][ C0] ? tick_nohz_restart_sched_tick+0x1f0/0x1f0 [ 223.265205][ C0] schedule_idle+0x4a/0x90 [ 223.270225][ C0] do_idle+0x635/0x680 [ 223.274488][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 223.279765][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 223.285947][ C0] ? asm_sysvec_error_interrupt+0x10/0x20 [ 223.291838][ C0] ? schedule_idle+0x57/0x90 [ 223.296955][ C0] cpu_startup_entry+0x3f/0x60 [ 223.302168][ C0] rest_init+0x2dc/0x300 [ 223.306536][ C0] ? time_init+0x33/0x33 [ 223.310766][ C0] arch_call_rest_init+0xa/0xa [ 223.315723][ C0] start_kernel+0x493/0x53c [ 223.320365][ C0] secondary_startup_64_no_verify+0xcf/0xdb [ 223.326433][ C0] [ 223.330632][ C0] Kernel Offset: disabled [ 223.335364][ C0] Rebooting in 86400 seconds..