last executing test programs: 10.890723378s ago: executing program 3 (id=175): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e27}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendto(r3, &(0x7f0000000380)="e532", 0x2, 0xc0, 0x0, 0x0) 8.682605058s ago: executing program 3 (id=178): syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x28, 0x0, 0x1000a080, 0x0, 0x10, 0x3, 0xffffffff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCOUTQNSD(r3, 0x894b, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}, 0x1, 0x0, 0x0, 0x4048044}, 0x0) 7.908289257s ago: executing program 2 (id=181): socket$kcm(0x2, 0x200000000000001, 0x106) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x0, 0x0) fsopen(&(0x7f0000000100)='configfs\x00', 0x0) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f00000ee000/0x2000)=nil, 0x2000, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0xfffff000) read(r1, &(0x7f00000002c0)=""/153, 0x99) r2 = memfd_create(&(0x7f0000000500)='\x14\xa3\xbb\a\x002RgZ*\xc5\x9e[,\xe5uR\x94\xaa\xdc0\xe6n\xb8\xea\xe8\x99Lh(\xc7\xbb_\x81\x15f\xe7\x100\r\x1fE\x82\xf5\xfd\x83\xff{\xa0\x15\xffK\xe4\x98\x93\xf9\xc4!_\x96\xe8&,\xdf\x12\xc0\xa7Y1\x8bUs\x91)\x89\xd0\xa1OF4\xa4fI\a\x84_r\xc6\xdaq%\xd3\x98\n\x7fmF\xa9\xbb\x16\x8bxb\xc8\xfc\xad?\x01\xf40\xf5\xc3\xf3+\xa7\x94=\x96\xe6*~\x18\x9c\xfe\xfe\xdcNWGn\xfa\xf8,\xa9\x84\xf7\xe1RA9\xfeD@\x18b\x1dgz\xdfc\x05>O\xa0\x8b\xce\xe0\x8cS\xfanA\xecx\xc4\xdd\x82aT\xb5b\xc5\xaa\x8fj\xb2\xc3\x96\x96\"&)!Z\x1e\tBq\x96L\x97\xc9G\xaa\x85\xc3C \xa1\x98o\f\xf2\x02\x05oV\a\x82\x9e\")\xfb\xa09b\xb6\v\xb3\xe1p\x97\xe9\x13\xb5-\xc1x<\xc9]\x85\xbb\xb6h\xee\x91Q\xd0V\x80\xbc\x88?\x9cr\x13<\xa5g=CA\xd8d\x86\fr\xee=0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000003fc0), 0x121100, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r3, 0xc0044dff, &(0x7f0000004000)) 5.580652773s ago: executing program 0 (id=188): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, 0x1, 0x1, 0x101, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x8000000000000001, 0x5, 0x6, 0x4002, 0x5, 0x37, 0xefffffffffffffff, 0x0, 0x0, 0x2000005, 0xfffffffface6e3cd, 0x40000000001c, 0x1, 0xffffffffffffffff, 0xfd]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5.334667895s ago: executing program 3 (id=189): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) socket$inet(0x2, 0x3, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) socket$inet(0x2, 0x1, 0x0) socket$unix(0x1, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x101002, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0x210}], 0x1, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 5.302984386s ago: executing program 0 (id=190): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000100)={0x79, 0x0, 0xe85}) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000240)={0x81, 0x0, 0x6}) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000001000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000000)={0x0, 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5.216024381s ago: executing program 2 (id=191): syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000080)='wg2\x00', 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x2, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 4.474087868s ago: executing program 3 (id=192): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/rcu_expedited', 0x169282, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)={0x70, 0x0, 0x9, 0x401, 0x0, 0x0, {0xa}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x16}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}]}, 0x70}}, 0x4008000) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000880)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000480)=ANY=[@ANYBLOB='-', @ANYRESDEC=r4], 0x27) ioctl$KDSETMODE(r1, 0x4b3a, 0x1) connect$can_j1939(r1, 0x0, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000003c0)={0x57, 0x0, 0x4, {0xffff, 0x1}, {0x45, 0x5}, @cond=[{0x2, 0x5388, 0x6, 0x800, 0x80cb, 0x7}, {0x0, 0x5, 0x1, 0x3, 0x6, 0x1}]}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000200)=""/88) 4.437570919s ago: executing program 4 (id=193): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000100)='./file0\x00', 0x624a9, &(0x7f0000001540)=ANY=[@ANYRESOCT, @ANYRES16, @ANYRES64, @ANYRES16, @ANYRESOCT, @ANYRES64, @ANYRES8, @ANYRES32], 0x1, 0x38d, &(0x7f0000001600)="$eJzs3c9rI2UYwPEn6TSddGmTgygK0ge96GVoq2clyC6IBZe6EXcFYXY71ZAxKTOhkkW29eRVvPkPCC57XPCwoN682Iu39eLFk70Igi4ijsyPN5tkp02aZkl39/uBNs/M+z6Zd5JJeN7QvD1874uPm9uhs+12pGirFERE7olUpSgZq5DeliTHvrx87s+7z5cuX3mrtrFxflP1Qu3SK+uqurzy3Seflq20250FOah+cCj2bwdPHzx7+N+ljxqhNkJttTvq6tX2rx33qu/pViNsOqoXfc8NPW20Qi9I29tp+7bf3tnpqtvaWlrcCbwwVLfV1abX1U5bO0FX3Q/dRksdx9GlxbzhPsbs/o3l8XLqNzc33dqEB7w2YR6m7Z8oio5pDoKaOyfilB9oqd98qOMCAABn0lD9/5WpEapS7BWUhWwuUEriwWlAXP+buNdyv/6/9cIPnXPv3l7O6v87paz+n5OGVE39/+ovadpA/R8ffer1/zdD2w9WRI+8vZN0PlX9j7NhZfAV+XvyKu0X1//xq6E3o//s/VurSUD9DwAAAAAAAAAAAAAAAAAAAADAo+BeFFWiKKqYW/Nz/ysE2bbZyr5ovDCb4WLKjnj+e9/96l0PeCy9c/mK2MnCHdayiP/5bn23nt5m7abjqlTk3+R6yKQLTuwnjRqryvf+3m59PkuYS37XRFR88WRNKlIdyE/iC29unF/TVJqfHH9vt16wFuP8bWkk+etSkafy89dz80vy0ot9+Y5U5Odr0hZftrL3MZN/Y031jbc3hvLLSb88rz/cpwQAAAAAgKlzVO1s+lwdnP+m83fHUc1rl5+yOzDz6/TzgR8lZ36+qsWc+blVec6a6akDAAAAAPDECEvXm67ve0HYPTIoy6g+5q+BhposGXHPcWCN0WcguJsE88f1mes7w8E9R2eVsv+gMe4wgrArY4/ZBH8tSO6DaZZwjfeYRYl9e+SYjwvM+Y/R2T7pUxCExZOfuxeEK/F4dKLT6QuSj40KlvQ33VjKrufu9aZcjPeYh/R0x0oDs3LuqM7PfPn135MdopCt2tvf9NptcwUcm14Y2rM/4qL9I4pGjmc+/93iW/tUbzYAAAAAZsoU/eVw1iMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODJNY3V0UYFsz5HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Kz4PwAA//933OWl") r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001500), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001c40)={0x2, 0x0, [{0x0, 0x66, &(0x7f0000001b00)=""/102}, {0xdddd0000, 0x23, &(0x7f0000001ac0)=""/35}]}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x0, &(0x7f00000000c0)}, 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4092}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 4.436050349s ago: executing program 1 (id=194): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket(0x10, 0x803, 0x0) socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000cc0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0x6, 0x101, 0x100}}) 4.170690062s ago: executing program 1 (id=195): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x7, 0x9, 0xff, 0xc, 0x200, 0x8}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05033600d3fc220000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 4.089673787s ago: executing program 0 (id=196): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r5, &(0x7f0000000f80)={'syz0\x00', {0x5, 0xfff7, 0x3, 0x7}, 0x50, [0x800006, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xd, 0x1, 0x63, 0x0, 0x7f, 0xc, 0x2, 0x9, 0x1, 0x4, 0x8001000, 0x80000002, 0x1, 0x200008, 0x800, 0xa4d, 0x3ff, 0x5, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0xc, 0x9, 0x4, 0x2, 0x1, 0x2, 0x4, 0x1, 0x0, 0xa, 0x6, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x8, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x401, 0x9, 0x9, 0x8, 0x12, 0x7fc, 0xc, 0x0, 0x2729, 0xfd8, 0x5, 0x7, 0x5, 0x0, 0x24a, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0x4009, 0x401, 0xb, 0x8001, 0x40, 0xa1, 0x10000, 0xffffffff, 0x5, 0x10004, 0x9e, 0x8, 0x7ff, 0x6, 0x7, 0x0, 0x6, 0xffff3f16, 0xa, 0x2, 0x9, 0xa, 0x5, 0xfffffeff, 0x7, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x200007, 0x8], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x9, 0x3, 0x6, 0x7aae, 0x80000000, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x400, 0x80000002, 0x2b0, 0xfffffff4, 0x97f82544, 0x8, 0x7f, 0x0, 0x9, 0x5, 0x4, 0x9, 0xc90, 0xffffff3c, 0xd, 0x13, 0x4, 0xff, 0x140, 0xb639, 0x2, 0x1000000c, 0x0, 0x6, 0x3, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x1fff80, 0x3, 0x0, 0x8, 0xdd, 0x1, 0x9, 0xc3, 0x20ffff, 0x79c], [0x9, 0x3a8d, 0xffff9a7f, 0x200, 0x6, 0x2001, 0x6, 0xfffffff5, 0xd077, 0x2, 0xffffffff, 0x21, 0x1ff, 0xa, 0x6, 0x2, 0x1ff, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x0, 0x4, 0x5, 0x80000001, 0xffff, 0xd, 0x40, 0xfffffffd, 0x3, 0x10001, 0x61, 0x10, 0x1000, 0xc, 0x80000001, 0x8, 0x20000000, 0x8, 0x15, 0xb32a, 0xec000000, 0x8001, 0x1900, 0x4, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xffffffff, 0x7, 0x6e79, 0x0, 0xc, 0x9371, 0x20004f89, 0x7, 0x580, 0x2d1, 0x83, 0x8]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 'syz0\x00', 0x0}) 3.964652773s ago: executing program 3 (id=197): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r3, 0x0, 0x0}, 0x10) 3.944155504s ago: executing program 1 (id=198): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="fc0000001900e1f6ddedabc4ac5c000000000000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000100000006000000000000000000000000000000010000000000000044000500ac1414aa000000000000000000000000000000003c000000020000000a01010200000000000000000000000006000000040300"], 0xfc}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) 3.23073135s ago: executing program 4 (id=199): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x2000) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x4040040) bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB, @ANYBLOB], 0x50) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x2) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0xfffffffffffffe2a}]}}}}}}}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x23}}]}, 0x1c}}, 0x0) 3.040155139s ago: executing program 1 (id=200): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r4, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) 3.032903879s ago: executing program 4 (id=201): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000001d40)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x20c820, 0x0) socket$unix(0x1, 0x1, 0x0) 2.720965115s ago: executing program 0 (id=202): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240), 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c0", 0x18, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f0000000dc0)=""/87, &(0x7f0000000e40)=""/94}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8880}, 0x4001) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x8000000000000001, 0x5, 0x6, 0x4002, 0x5, 0x37, 0xefffffffffffffff, 0x0, 0x0, 0x2000005, 0xfffffffface6e3cd, 0x40000000001c, 0x1, 0xffffffffffffffff, 0xfd]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.230669609s ago: executing program 2 (id=203): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1003d1, 0x3, 0x20000000, 0x6, 0x6}, 0x2b}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r1) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000740)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f0000000cc0)=[{&(0x7f00000002c0)="27030200dc0f14000e00003c0ff000000000ff840000000200000003125ce882cbf490d908f1523f000000002d9c", 0x2e}], 0x1}, 0x8bb3a321efc09a) 2.168034162s ago: executing program 1 (id=204): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1e, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x6}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x6}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x4}}, [@snprintf={{0x7, 0x0, 0x8, 0x6}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x6}, {}, {}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x4}, {0x85, 0x0, 0x0, 0xa0}}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.093168006s ago: executing program 0 (id=205): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100)={[{@i_version}, {@usrjquota}]}, 0x3, 0x553, &(0x7f0000000440)="$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") open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x1) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f00000000c0)='./bus\x00', 0x0, 0x1c10, 0x0) r0 = open(&(0x7f0000000400)='./bus\x00', 0xc40, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000080)=0x3f) r1 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x6000) fallocate(r1, 0x0, 0x0, 0x8800000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000944000/0x4000)=nil, 0x4000, 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) 2.088500096s ago: executing program 4 (id=206): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) fstat(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r4) ioprio_get$uid(0x3, r4) 1.882588386s ago: executing program 2 (id=207): syz_mount_image$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x8402, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x1, 0x70bd2a, 0x21dfdbfc, {0xa, 0x20, 0x10, 0x0, 0xfd, 0x0, 0xc8, 0x1, 0x2200}, [@RTA_EXPIRES={0x8, 0x17, 0xa9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4044091}, 0x4040) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x0, 0x0, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x2, 0x184, 0x2, 0x10, 0xf1, 0x100000001, 0x1, 0x5, 0x0, 0x29, 0x0, 0x2, 0x0, 0xbd9], 0xffff1001, 0x53101}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x1000000000, 0x0, 0x200000000000043, 0x2000004, 0x0, 0x2004cb, 0x0, 0xa7c, 0x68ff, 0x7, 0x8000000009, 0x803, 0x0, 0x9], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0x1, 0x8, 0x8, 0xb, 0xe6, 0x40, 0x0, 0x0, 0x81, 0x80}, {0x200000, 0x3000, 0x3, 0x0, 0x1, 0x5, 0x75, 0x6, 0x36, 0x0, 0x2, 0x87}, {0x0, 0xdddd0000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x1, 0xeeee0000, 0x4, 0x6, 0x5, 0x7f, 0xb, 0xff, 0x8, 0x7, 0xe}, {0xf000, 0xd000, 0xf, 0x3, 0x16, 0x87, 0xab, 0x8, 0x9, 0x9, 0xf7, 0x97}, {0xeeefa000, 0x0, 0xe, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0x2f, 0x1, 0x7}, {0x3000, 0x18227000, 0xf, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x42, 0x70}, {0xdddd0000, 0xa000, 0xa, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0xc, 0xb0, 0x91}, {0xeeee0000, 0x30}, {0x8000000, 0x7}, 0x80000031, 0x0, 0x3000, 0x2024, 0x2, 0x0, 0x100000, [0x6800000000000000, 0x4, 0x3, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.491239646s ago: executing program 2 (id=208): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50) 105.074415ms ago: executing program 1 (id=209): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$cramfs(&(0x7f0000000040), &(0x7f000001f900)='./file1\x00', 0x2200400, &(0x7f0000000080)=ANY=[@ANYRES8=0x0], 0xfe, 0x15b, &(0x7f0000000200)="$eJzs0D1rWmEYxvH/c87jC1SxpRak0Cp0sZWCL7RbKZ5SqYM90NKlk2BPX0CxVGjdqpRuGYSsDnlZJZBPoNFASNAl+RJZ3AIZDecckxDMR7h/4/Xc93XD8/bVLK249qbZ+PnLabWcL6kPdqX08XQ4LLp5ENq7N979+VERvqMZaZh3YR+YROHrj7pj1Jp1d2xehBBg3VnmNGKX96y4pqshh7+ffgLjB96cwWrmFAh4ew81WDE/ywKLzbDfd8/P3L4zwASlgstjj0z+lzPJ+wra/czO4Oj99LD8/NlrZy1f6j2NJMzMX9jCUuGDybcTc7k1mw6wK/askM+/LGRzBi+OvcJOD/0u8hs+K9Bun4HXFyTxWH+CfwrWvVvzPRUFxhvndiN09dedP2YKVLJfqyYC29X4XQMzrd2XBbfQ/i8KIYQQQgghhBBCCCGEEEIIIYQQqy4CAAD//4/VU1E=") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) lseek(r0, 0xfffffffffffffffc, 0x2) getdents(r0, 0x0, 0x54) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f000009e140), 0x408, &(0x7f000009e180)={[{@workdir={'workdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000140)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@noauto_da_alloc}, {@grpid}, {@test_dummy_encryption_v1}, {@nodiscard}, {@data_err_ignore}, {@acl}, {@journal_ioprio}, {@resuid}]}, 0x1, 0xbb4, &(0x7f00000017c0)="$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") mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff2, 0x4012011, 0xffffffffffffffff, 0x0) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f00000000c0)={{}, 0x0, 0x0, 0x100000}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x40441, 0x106) fallocate(r2, 0x8, 0x4000, 0x10000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 88.779245ms ago: executing program 3 (id=210): socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="8ee8c9b8ee088ed8660f3801b2d6352ed9ff660f3882040f01cf0fc72d2626652e0f01ca0fc7386635002000000f22e0", 0xffffffffffffff8b}], 0x1, 0x50, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) pipe(&(0x7f0000000240)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 87.975296ms ago: executing program 4 (id=211): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x2, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r3, {}, {0x5, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x1, 0x406, 0x1, 0xffffffff, 0x9}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x5) 0s ago: executing program 2 (id=212): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x2, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) ioctl$BTRFS_IOC_DEFRAG(0xffffffffffffffff, 0x50009402, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) connect$inet(r1, &(0x7f0000000280)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.77' (ED25519) to the list of known hosts. syzkaller login: [ 64.917904][ T4172] cgroup: Unknown subsys name 'net' [ 65.051498][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.655975][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 68.157553][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 68.179601][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 68.206919][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 68.243751][ T4195] chnl_net:caif_netlink_parms(): no params data found [ 68.322525][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 68.421964][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.429360][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.438397][ T4191] device bridge_slave_0 entered promiscuous mode [ 68.455190][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.462308][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.470815][ T4188] device bridge_slave_0 entered promiscuous mode [ 68.490508][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.498015][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.506445][ T4184] device bridge_slave_0 entered promiscuous mode [ 68.514861][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.521981][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.530856][ T4191] device bridge_slave_1 entered promiscuous mode [ 68.539057][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.546728][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.554973][ T4195] device bridge_slave_0 entered promiscuous mode [ 68.562500][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.570008][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.578570][ T4188] device bridge_slave_1 entered promiscuous mode [ 68.589548][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.596899][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.605118][ T4184] device bridge_slave_1 entered promiscuous mode [ 68.626729][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.633872][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.641978][ T4195] device bridge_slave_1 entered promiscuous mode [ 68.693633][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.705491][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.716680][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.735968][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.756644][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.767896][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.786137][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.795656][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.802758][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.811881][ T4192] device bridge_slave_0 entered promiscuous mode [ 68.826435][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.833551][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.841750][ T4192] device bridge_slave_1 entered promiscuous mode [ 68.864524][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.876529][ T4184] team0: Port device team_slave_0 added [ 68.891601][ T4184] team0: Port device team_slave_1 added [ 68.920565][ T4191] team0: Port device team_slave_0 added [ 68.936472][ T4188] team0: Port device team_slave_0 added [ 68.956606][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.963621][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.989975][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.003965][ T4191] team0: Port device team_slave_1 added [ 69.018490][ T4188] team0: Port device team_slave_1 added [ 69.026465][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.036205][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.043380][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.070003][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.090378][ T4195] team0: Port device team_slave_0 added [ 69.105841][ T4195] team0: Port device team_slave_1 added [ 69.113439][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.169647][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.177058][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.203362][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.232445][ T4192] team0: Port device team_slave_0 added [ 69.241061][ T4192] team0: Port device team_slave_1 added [ 69.247890][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.255403][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.281698][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.299331][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.306434][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.333460][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.354002][ T4184] device hsr_slave_0 entered promiscuous mode [ 69.361395][ T4184] device hsr_slave_1 entered promiscuous mode [ 69.376461][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.383460][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.409710][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.421735][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.428850][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.455535][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.487415][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.494416][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.520809][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.537131][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.544127][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.570371][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.599304][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.606558][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.632763][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.654896][ T4188] device hsr_slave_0 entered promiscuous mode [ 69.662336][ T4188] device hsr_slave_1 entered promiscuous mode [ 69.669528][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.677541][ T4188] Cannot create hsr debugfs directory [ 69.725806][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 69.738339][ T4191] device hsr_slave_0 entered promiscuous mode [ 69.745482][ T4191] device hsr_slave_1 entered promiscuous mode [ 69.752404][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.760101][ T4191] Cannot create hsr debugfs directory [ 69.784071][ T4195] device hsr_slave_0 entered promiscuous mode [ 69.791362][ T4195] device hsr_slave_1 entered promiscuous mode [ 69.798625][ T4195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.806965][ T4189] Bluetooth: hci2: command 0x0409 tx timeout [ 69.806989][ T4195] Cannot create hsr debugfs directory [ 69.813316][ T4189] Bluetooth: hci1: command 0x0409 tx timeout [ 69.841978][ T4192] device hsr_slave_0 entered promiscuous mode [ 69.849141][ T4192] device hsr_slave_1 entered promiscuous mode [ 69.856389][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.863986][ T4192] Cannot create hsr debugfs directory [ 69.884833][ T4189] Bluetooth: hci3: command 0x0409 tx timeout [ 69.894845][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 70.224804][ T4184] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.238984][ T4184] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.250839][ T4184] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.262451][ T4184] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.330551][ T4191] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.349741][ T4191] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.360026][ T4191] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.385320][ T4191] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.459701][ T4192] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.472173][ T4192] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.488488][ T4192] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.498246][ T4192] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.513613][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.549241][ T1257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.560049][ T1257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.581337][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.604339][ T4188] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.622642][ T4188] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.645559][ T4188] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.657018][ T1257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.667677][ T1257] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.677730][ T1257] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.685110][ T1257] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.694602][ T1257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.703554][ T1257] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.713555][ T1257] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.720704][ T1257] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.732208][ T1257] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.747974][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.756564][ T4188] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.781945][ T1257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.793931][ T1257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.827423][ T1257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.835790][ T1257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.843717][ T1257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.853534][ T1257] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.864859][ T1257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.873586][ T1257] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.882571][ T1257] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.917834][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.950955][ T4195] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 70.966624][ T1257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.977027][ T1257] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.986487][ T1257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.995279][ T1257] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.004000][ T1257] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.011203][ T1257] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.020078][ T1257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.030364][ T1257] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.039332][ T1257] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.046488][ T1257] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.061981][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.076031][ T4195] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.094450][ T4195] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.104347][ T1257] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.113393][ T1257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.122863][ T1257] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.133193][ T1257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.143199][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.157617][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.177185][ T4195] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 71.195920][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.213619][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.226471][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.237461][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.246917][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.259822][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.269324][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.279528][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.289863][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.330496][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.343948][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.353927][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.365743][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.374507][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.383751][ T460] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.390890][ T460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.400251][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.409852][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.418919][ T460] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.426325][ T460] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.434509][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.449601][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.460553][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.479301][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.514002][ T1257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.533406][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.573900][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.580895][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.590646][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.605349][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.651047][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.669475][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.680926][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.690696][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.700051][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.710015][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.722592][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.742119][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.751427][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.759928][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.771428][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.795045][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.802677][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.811159][ T4225] Bluetooth: hci0: command 0x041b tx timeout [ 71.838956][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.855418][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.872179][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.881293][ T460] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.885612][ T4223] Bluetooth: hci1: command 0x041b tx timeout [ 71.888579][ T460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.904691][ T4223] Bluetooth: hci2: command 0x041b tx timeout [ 71.922704][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.950770][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.960084][ T460] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.967256][ T460] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.975259][ T4223] Bluetooth: hci4: command 0x041b tx timeout [ 71.981468][ T4223] Bluetooth: hci3: command 0x041b tx timeout [ 71.988420][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.998876][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.009362][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.040442][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.057273][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.073919][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.084726][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.134065][ T4188] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.148668][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.167045][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.175739][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.184380][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.201807][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.212812][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.227765][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.239982][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.258982][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.280398][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.300083][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.333482][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.345095][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.356649][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.364971][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.373985][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.425565][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.435804][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.444489][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.451683][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.461738][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.469449][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.477992][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.487478][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.496333][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.503441][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.512162][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.538917][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.555801][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.564362][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.573512][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.582500][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.593581][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.620999][ T4184] device veth0_vlan entered promiscuous mode [ 72.640089][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.651188][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.660579][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.672276][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.681778][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.694302][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.715669][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.734923][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.742493][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.753891][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.764325][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.774424][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.783384][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.792395][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.800688][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.814147][ T4184] device veth1_vlan entered promiscuous mode [ 72.824083][ T4191] device veth0_vlan entered promiscuous mode [ 72.842731][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.851720][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.863267][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.873838][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.883637][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.898454][ T4191] device veth1_vlan entered promiscuous mode [ 72.917023][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.927019][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.936412][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.970189][ T4195] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.983157][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.996049][ T4192] device veth0_vlan entered promiscuous mode [ 73.016297][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.025594][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.035397][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.043777][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.054200][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.063059][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.072801][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.081994][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.108710][ T4191] device veth0_macvtap entered promiscuous mode [ 73.120076][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.130466][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.140252][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.150440][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.159764][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.180825][ T4188] device veth0_vlan entered promiscuous mode [ 73.189516][ T4192] device veth1_vlan entered promiscuous mode [ 73.202262][ T4184] device veth0_macvtap entered promiscuous mode [ 73.213431][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.228804][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.240518][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.255685][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.264507][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.273011][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.289408][ T4188] device veth1_vlan entered promiscuous mode [ 73.306154][ T4191] device veth1_macvtap entered promiscuous mode [ 73.317554][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.336652][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.351301][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.381019][ T4184] device veth1_macvtap entered promiscuous mode [ 73.414068][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.424288][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.441991][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.453158][ T4188] device veth0_macvtap entered promiscuous mode [ 73.463914][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.475144][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.484129][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.499911][ T4192] device veth0_macvtap entered promiscuous mode [ 73.518359][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.535973][ T4191] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.545089][ T4191] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.553802][ T4191] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.563669][ T4191] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.578882][ T4188] device veth1_macvtap entered promiscuous mode [ 73.587459][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.595904][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.605654][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.614457][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.623629][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.633457][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.641927][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.650165][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.661730][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.673195][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.686037][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.699204][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.732861][ T4192] device veth1_macvtap entered promiscuous mode [ 73.741327][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.757124][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.770825][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.783978][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.801012][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.817805][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.838086][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.849718][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.859772][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.870585][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.881842][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.889813][ T4223] Bluetooth: hci0: command 0x040f tx timeout [ 73.905489][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.914310][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.926084][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.942894][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.962336][ T4184] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.972773][ T4225] Bluetooth: hci2: command 0x040f tx timeout [ 73.985342][ T4225] Bluetooth: hci1: command 0x040f tx timeout [ 73.992219][ T4184] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.006600][ T4184] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.015952][ T4184] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.042477][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.054077][ T4189] Bluetooth: hci3: command 0x040f tx timeout [ 74.060964][ T4189] Bluetooth: hci4: command 0x040f tx timeout [ 74.069463][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.079811][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.090623][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.100778][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.112008][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.124373][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.135966][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.146653][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.157029][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.168130][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.179663][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.197048][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.206732][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.217063][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.226996][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.239424][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.251985][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.267904][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.282810][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.297592][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.311890][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.326220][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.345023][ T4188] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.353820][ T4188] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.362784][ T4188] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.372763][ T4188] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.386550][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.397180][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.412154][ T4192] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.430836][ T4192] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.439996][ T4192] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.453797][ T4192] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.532913][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.542980][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.638132][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.664277][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.687643][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.710157][ T1264] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.725084][ T1264] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.742774][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.750964][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.760322][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.770640][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.779691][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.805663][ T4195] device veth0_vlan entered promiscuous mode [ 74.815973][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.823866][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.840615][ T1264] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.853343][ T1264] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.880934][ T4195] device veth1_vlan entered promiscuous mode [ 74.892933][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.901596][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.910609][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.945813][ T460] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.961343][ T460] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.981267][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.995133][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.054808][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.073504][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.109645][ T4195] device veth0_macvtap entered promiscuous mode [ 75.119522][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.135397][ T4195] device veth1_macvtap entered promiscuous mode [ 75.136565][ T1264] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.151761][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.159743][ T1264] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.179484][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.190618][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.199657][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.209217][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.325857][ T4236] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.354964][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #242!!! [ 75.467284][ T4236] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.485092][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 75.494679][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 75.503765][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 75.620899][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.725035][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 75.744385][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.755304][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.766882][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 75.815429][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.850532][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.897579][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.940229][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.965134][ T4189] Bluetooth: hci0: command 0x0419 tx timeout [ 75.994121][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.045786][ T7] Bluetooth: hci1: command 0x0419 tx timeout [ 76.085793][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.093797][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.113903][ T7] Bluetooth: hci2: command 0x0419 tx timeout [ 76.121405][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.133021][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.143810][ T7] Bluetooth: hci4: command 0x0419 tx timeout [ 76.167232][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.181079][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.191170][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.203030][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.213896][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.230882][ T7] Bluetooth: hci3: command 0x0419 tx timeout [ 76.234710][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.271808][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.283234][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.297754][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.317056][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.340081][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.386116][ T4195] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.400821][ T4195] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.410020][ T4195] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.419280][ T4195] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.431502][ T4273] MPTCP: addr_signal error, rm_addr=1 [ 76.616924][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.643326][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.735026][ T4224] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 76.779981][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.803941][ T4269] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.831610][ T4269] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.892878][ T4291] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.977276][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.514989][ T4224] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 77.561858][ T4224] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.645263][ T4224] usb 1-1: Product: syz [ 77.741693][ T4224] usb 1-1: Manufacturer: syz [ 77.804084][ T4224] usb 1-1: SerialNumber: syz [ 78.133326][ T4224] usb 1-1: config 0 descriptor?? [ 78.476332][ T4300] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 78.530218][ T4224] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 78.702487][ T1108] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 79.148469][ T1108] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 79.356734][ T1108] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.535735][ T4224] gspca_stk1135: reg_w 0x3 err -110 [ 79.542409][ T4224] gspca_stk1135: serial bus timeout: status=0x00 [ 79.594728][ T1108] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 79.753810][ T4224] gspca_stk1135: Sensor write failed [ 79.774726][ T4224] gspca_stk1135: serial bus timeout: status=0x00 [ 79.791515][ T1108] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 79.811253][ T4224] gspca_stk1135: Sensor write failed [ 79.819119][ T1108] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.827628][ T4224] gspca_stk1135: serial bus timeout: status=0x00 [ 79.834189][ T4224] gspca_stk1135: Sensor read failed [ 79.846999][ T4315] tipc: Started in network mode [ 79.851958][ T4315] tipc: Node identity a679e9987cdc, cluster identity 4711 [ 79.868922][ T4224] gspca_stk1135: serial bus timeout: status=0x00 [ 79.886490][ T1108] usb 4-1: config 0 descriptor?? [ 79.891749][ T4224] gspca_stk1135: Sensor read failed [ 79.897349][ T4315] tipc: Enabled bearer , priority 0 [ 79.897640][ T4224] gspca_stk1135: Detected sensor type unknown (0x0) [ 79.924653][ T4224] gspca_stk1135: serial bus timeout: status=0x00 [ 79.931088][ T4224] gspca_stk1135: Sensor read failed [ 79.947037][ T4224] gspca_stk1135: serial bus timeout: status=0x00 [ 79.953446][ T4224] gspca_stk1135: Sensor read failed [ 79.975740][ T4224] gspca_stk1135: serial bus timeout: status=0x00 [ 79.984899][ T4224] gspca_stk1135: Sensor write failed [ 79.996020][ T4224] gspca_stk1135: serial bus timeout: status=0x00 [ 80.009297][ T4224] gspca_stk1135: Sensor write failed [ 80.021613][ T4224] stk1135: probe of 1-1:0.0 failed with error -110 [ 80.042282][ T4320] device syzkaller0 entered promiscuous mode [ 80.235775][ T4313] tipc: Resetting bearer [ 80.241872][ T4324] loop4: detected capacity change from 0 to 128 [ 80.301081][ T4324] FAT-fs (loop4): Unrecognized mount option "18446744073709551615ÿÿÿ" or missing value [ 80.408864][ T1108] plantronics 0003:047F:FFFF.0001: unbalanced collection at end of report description [ 80.424055][ T4313] tipc: Disabling bearer [ 80.451126][ T1108] plantronics 0003:047F:FFFF.0001: parse failed [ 80.468386][ T1108] plantronics: probe of 0003:047F:FFFF.0001 failed with error -22 [ 80.517650][ T4189] usb 1-1: USB disconnect, device number 2 [ 80.845605][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #48!!! [ 80.967174][ T4332] ======================================================= [ 80.967174][ T4332] WARNING: The mand mount option has been deprecated and [ 80.967174][ T4332] and is ignored by this kernel. Remove the mand [ 80.967174][ T4332] option from the mount to silence this warning. [ 80.967174][ T4332] ======================================================= [ 81.085375][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #48!!! [ 81.415008][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 81.656470][ T4223] usb 4-1: USB disconnect, device number 2 [ 81.703913][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 83.283565][ T4348] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 83.525628][ T4359] Bluetooth: hci0: unsupported parameter 28787 [ 83.532210][ T4359] Bluetooth: hci0: invalid len left 4, exp >= 117 [ 83.586210][ T4362] Zero length message leads to an empty skb [ 83.857017][ T4373] syz.1.27 uses obsolete (PF_INET,SOCK_PACKET) [ 83.899223][ T4362] team0 (unregistering): Port device team_slave_0 removed [ 84.049941][ T4362] team0 (unregistering): Port device team_slave_1 removed [ 86.929290][ T13] cfg80211: failed to load regulatory.db [ 89.200377][ T4407] device syzkaller0 entered promiscuous mode [ 89.507321][ T4423] binder: BINDER_SET_CONTEXT_MGR already set [ 89.584426][ T4423] binder: 4421:4423 ioctl 4018620d 200000000040 returned -16 [ 92.560776][ T4448] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 94.890119][ T4469] loop3: detected capacity change from 0 to 128 [ 97.035652][ T4455] gretap0: refused to change device tx_queue_len [ 97.042342][ T4455] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 97.075120][ T4461] netlink: 'syz.0.53': attribute type 1 has an invalid length. [ 97.299952][ T4484] device bridge1 entered promiscuous mode [ 97.408030][ T4489] netlink: 8 bytes leftover after parsing attributes in process `syz.1.58'. [ 98.241160][ T4491] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.260662][ T4494] loop3: detected capacity change from 0 to 1764 [ 98.324971][ T4491] bond0: (slave rose0): Enslaving as an active interface with an up link [ 98.347652][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 98.364096][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 98.375609][ T4501] sctp: [Deprecated]: syz.1.63 (pid 4501) Use of int in max_burst socket option deprecated. [ 98.375609][ T4501] Use struct sctp_assoc_value instead [ 98.413456][ T4491] bond0: (slave rose0): Releasing backup interface [ 99.835798][ T4519] loop4: detected capacity change from 0 to 512 [ 100.575871][ T4192] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 100.633160][ T4192] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 101.715667][ T4545] loop3: detected capacity change from 0 to 131072 [ 102.331708][ T4545] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(0) [ 102.340177][ T4545] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 102.364435][ T4545] F2FS-fs (loop3): invalid crc value [ 102.434902][ T4545] F2FS-fs (loop3): Found nat_bits in checkpoint [ 102.521563][ T4545] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 102.529209][ T4545] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 103.434475][ T4586] netlink: 76 bytes leftover after parsing attributes in process `syz.1.78'. [ 106.806218][ T4620] device syzkaller0 entered promiscuous mode [ 106.984461][ T4623] netlink: 64 bytes leftover after parsing attributes in process `syz.1.84'. [ 109.166347][ T4626] loop0: detected capacity change from 0 to 8 [ 109.944759][ T4626] SQUASHFS error: xz decompression failed, data probably corrupt [ 109.953998][ T4626] SQUASHFS error: Failed to read block 0x108: -5 [ 109.960751][ T4626] SQUASHFS error: Unable to read metadata cache entry [106] [ 109.969152][ T4626] SQUASHFS error: Unable to read inode 0x11f [ 112.526663][ T4670] netlink: 32 bytes leftover after parsing attributes in process `syz.4.96'. [ 115.150866][ T4689] netlink: 44 bytes leftover after parsing attributes in process `syz.4.102'. [ 118.543097][ T4729] device syzkaller0 entered promiscuous mode [ 120.518601][ T4769] Illegal XDP return value 4294967294, expect packet loss! [ 120.582913][ T4776] device syzkaller0 entered promiscuous mode [ 122.551524][ T4795] netlink: 10 bytes leftover after parsing attributes in process `syz.1.126'. [ 122.571633][ T4798] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 124.074799][ T4808] netlink: 4 bytes leftover after parsing attributes in process `syz.3.129'. [ 124.284896][ T4814] device syzkaller0 entered promiscuous mode [ 124.331569][ T26] audit: type=1804 audit(1774037465.207:2): pid=4813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.131" name="/newroot/24/file1" dev="fuse" ino=1 res=1 errno=0 [ 125.203150][ T4819] netlink: 'syz.3.134': attribute type 9 has an invalid length. [ 126.775522][ T4832] netlink: 4 bytes leftover after parsing attributes in process `syz.2.138'. [ 126.822540][ T4835] device syzkaller0 entered promiscuous mode [ 126.833515][ T4839] device syzkaller0 entered promiscuous mode [ 126.856265][ T4835] tipc: Started in network mode [ 126.871504][ T4835] tipc: Node identity 0e850b026c57, cluster identity 4711 [ 126.885622][ T4835] tipc: Enabled bearer , priority 0 [ 126.921329][ T4834] tipc: Resetting bearer [ 127.699283][ T4834] tipc: Disabling bearer [ 133.009435][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.017226][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.593846][ T4878] syz.2.153 (4878) used greatest stack depth: 17848 bytes left [ 137.025396][ T4910] device syzkaller0 entered promiscuous mode [ 138.481633][ T4908] ODEBUG: Out of memory. ODEBUG disabled [ 141.659544][ T4964] netlink: 8 bytes leftover after parsing attributes in process `syz.1.177'. [ 142.632471][ T4964] 8021q: adding VLAN 0 to HW filter on device bond1 [ 142.742516][ T4969] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 142.835841][ T4270] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 142.962026][ T4970] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 142.989650][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 143.005456][ T4236] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 143.405309][ T4992] netlink: 'syz.1.183': attribute type 29 has an invalid length. [ 144.056931][ T4992] netlink: 'syz.1.183': attribute type 29 has an invalid length. [ 146.512722][ T5022] loop4: detected capacity change from 0 to 128 [ 146.552286][ T5018] netlink: 'syz.3.192': attribute type 2 has an invalid length. [ 146.581773][ T5018] netlink: 'syz.3.192': attribute type 1 has an invalid length. [ 146.929811][ T5033] loop3: detected capacity change from 0 to 512 [ 147.474824][ T5033] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 147.563429][ T5033] ext4 filesystem being mounted at /37/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.624077][ T5053] device syzkaller0 entered promiscuous mode [ 148.637288][ T5053] 0: reclassify loop, rule prio 0, protocol 800 [ 148.816741][ T5059] loop0: detected capacity change from 0 to 1024 [ 149.059180][ T5059] EXT4-fs (loop0): mounted filesystem without journal. Opts: i_version,usrjquota=,,errors=continue. Quota mode: none. [ 149.099600][ T26] audit: type=1800 audit(1774037489.977:3): pid=5059 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.205" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 149.135375][ T5059] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3885: comm syz.0.205: Allocating blocks 385-513 which overlap fs metadata [ 149.179614][ T5059] EXT4-fs (loop0): pa ffff8880746c19a0: logic 16, phys. 129, len 24 [ 149.188802][ T5059] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4902: group 0, free 0, pa_free 8 [ 150.939753][ T5084] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 151.125112][ T5082] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 151.135084][ T5082] overlayfs: missing 'lowerdir' [ 151.336474][ C0] ------------[ cut here ]------------ [ 151.342695][ C0] WARNING: CPU: 0 PID: 14 at net/mac80211/tx.c:4859 __ieee80211_beacon_get+0x179f/0x2000 [ 151.352793][ C0] Modules linked in: [ 151.356915][ C0] CPU: 0 PID: 14 Comm: ksoftirqd/0 Not tainted syzkaller #0 [ 151.364287][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 151.374560][ C0] RIP: 0010:__ieee80211_beacon_get+0x179f/0x2000 [ 151.381064][ C0] Code: 2a f8 0f 0b 4f 89 64 2f 04 4f 89 64 2f 0c 43 c6 44 2f 14 f8 e9 19 fe ff ff e8 0d 4b 2a f8 0f 0b e9 03 ef ff ff e8 01 4b 2a f8 <0f> 0b e9 76 f2 ff ff e8 a5 92 6d 00 89 d9 80 e1 07 80 c1 03 38 c1 [ 151.400926][ C0] RSP: 0018:ffffc90000d37780 EFLAGS: 00010246 [ 151.407195][ C0] RAX: ffffffff894ed60f RBX: ffff88805f6ea268 RCX: ffff88813fe21dc0 [ 151.408696][ T5080] device syzkaller0 entered promiscuous mode [ 151.415295][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 151.415327][ C0] RBP: ffffc90000d379a8 R08: ffff88813fe21dc0 R09: 0000000000000003 [ 151.415343][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff8880286dbc00 [ 151.415357][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff920001a6f00 [ 151.415373][ C0] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 151.415394][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 151.415417][ C0] CR2: 00007f443d0c2158 CR3: 00000000515f9000 CR4: 00000000003506f0 [ 151.477859][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 151.486025][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 151.494206][ C0] Call Trace: [ 151.497712][ C0] [ 151.500795][ C0] ? ieee80211_beacon_get_template+0x30/0x30 [ 151.506993][ C0] ? verify_lock_unused+0x140/0x140 [ 151.512317][ C0] ? verify_lock_unused+0x140/0x140 [ 151.517812][ C0] ieee80211_beacon_get_tim+0x48/0x840 [ 151.523418][ C0] mac80211_hwsim_beacon_tx+0xf4/0x920 [ 151.529129][ C0] __iterate_interfaces+0x243/0x500 [ 151.534453][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 151.540951][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 151.547360][ C0] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 151.554573][ C0] mac80211_hwsim_beacon+0x9b/0x180 [ 151.559969][ C0] ? hw_scan_work+0xed0/0xed0 [ 151.564834][ C0] __hrtimer_run_queues+0x4f2/0xb70 [ 151.570251][ C0] ? hrtimer_interrupt+0x8d0/0x8d0 [ 151.575724][ C0] hrtimer_run_softirq+0x176/0x240 [ 151.580988][ C0] handle_softirqs+0x339/0x830 [ 151.585974][ C0] ? run_ksoftirqd+0xa4/0x100 [ 151.590795][ C0] ? do_softirq+0x210/0x210 [ 151.595590][ C0] ? run_ksoftirqd+0x81/0x100 [ 151.600408][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 151.605951][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 151.611441][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 151.616858][ C0] run_ksoftirqd+0xa4/0x100 [ 151.621490][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 151.626893][ C0] smpboot_thread_fn+0x4f6/0x970 [ 151.631974][ C0] kthread+0x436/0x520 [ 151.636184][ C0] ? cpu_report_death+0x180/0x180 [ 151.641331][ C0] ? kthread_blkcg+0xd0/0xd0 [ 151.646079][ C0] ret_from_fork+0x1f/0x30 [ 151.650619][ C0] [ 151.653752][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 151.661048][ C0] CPU: 0 PID: 14 Comm: ksoftirqd/0 Not tainted syzkaller #0 [ 151.668343][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 151.678408][ C0] Call Trace: [ 151.681698][ C0] [ 151.684645][ C0] dump_stack_lvl+0x188/0x250 [ 151.689336][ C0] ? show_regs_print_info+0x20/0x20 [ 151.694560][ C0] ? load_image+0x400/0x400 [ 151.699100][ C0] panic+0x2e5/0x810 [ 151.703016][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 151.707539][ C0] ? ret_from_fork+0x1f/0x30 [ 151.712182][ C0] ? __ieee80211_beacon_get+0x179f/0x2000 [ 151.717920][ C0] __warn+0x248/0x2b0 [ 151.721921][ C0] ? __ieee80211_beacon_get+0x179f/0x2000 [ 151.727648][ C0] report_bug+0x1b7/0x2e0 [ 151.731988][ C0] handle_bug+0x3a/0x70 [ 151.736154][ C0] exc_invalid_op+0x16/0x40 [ 151.740897][ C0] asm_exc_invalid_op+0x16/0x20 [ 151.745768][ C0] RIP: 0010:__ieee80211_beacon_get+0x179f/0x2000 [ 151.752113][ C0] Code: 2a f8 0f 0b 4f 89 64 2f 04 4f 89 64 2f 0c 43 c6 44 2f 14 f8 e9 19 fe ff ff e8 0d 4b 2a f8 0f 0b e9 03 ef ff ff e8 01 4b 2a f8 <0f> 0b e9 76 f2 ff ff e8 a5 92 6d 00 89 d9 80 e1 07 80 c1 03 38 c1 [ 151.771738][ C0] RSP: 0018:ffffc90000d37780 EFLAGS: 00010246 [ 151.777860][ C0] RAX: ffffffff894ed60f RBX: ffff88805f6ea268 RCX: ffff88813fe21dc0 [ 151.785891][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 151.793899][ C0] RBP: ffffc90000d379a8 R08: ffff88813fe21dc0 R09: 0000000000000003 [ 151.801903][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff8880286dbc00 [ 151.810084][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff920001a6f00 [ 151.818094][ C0] ? __ieee80211_beacon_get+0x179f/0x2000 [ 151.823873][ C0] ? ieee80211_beacon_get_template+0x30/0x30 [ 151.829874][ C0] ? verify_lock_unused+0x140/0x140 [ 151.835096][ C0] ? verify_lock_unused+0x140/0x140 [ 151.840340][ C0] ieee80211_beacon_get_tim+0x48/0x840 [ 151.845834][ C0] mac80211_hwsim_beacon_tx+0xf4/0x920 [ 151.851381][ C0] __iterate_interfaces+0x243/0x500 [ 151.856604][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 151.862977][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 151.869317][ C0] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 151.876444][ C0] mac80211_hwsim_beacon+0x9b/0x180 [ 151.881673][ C0] ? hw_scan_work+0xed0/0xed0 [ 151.886377][ C0] __hrtimer_run_queues+0x4f2/0xb70 [ 151.891600][ C0] ? hrtimer_interrupt+0x8d0/0x8d0 [ 151.896727][ C0] hrtimer_run_softirq+0x176/0x240 [ 151.901855][ C0] handle_softirqs+0x339/0x830 [ 151.906633][ C0] ? run_ksoftirqd+0xa4/0x100 [ 151.911322][ C0] ? do_softirq+0x210/0x210 [ 151.915833][ C0] ? run_ksoftirqd+0x81/0x100 [ 151.920514][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 151.925719][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 151.931021][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 151.936231][ C0] run_ksoftirqd+0xa4/0x100 [ 151.940766][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 151.946062][ C0] smpboot_thread_fn+0x4f6/0x970 [ 151.951014][ C0] kthread+0x436/0x520 [ 151.955084][ C0] ? cpu_report_death+0x180/0x180 [ 151.960200][ C0] ? kthread_blkcg+0xd0/0xd0 [ 151.964799][ C0] ret_from_fork+0x1f/0x30 [ 151.969236][ C0] [ 151.972828][ C0] Kernel Offset: disabled [ 151.977398][ C0] Rebooting in 86400 seconds..