last executing test programs: 9.663147972s ago: executing program 3 (id=88): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000d000000000001"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x4004) 9.498199606s ago: executing program 3 (id=90): r0 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r0, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0x6, 0x3, @mcast2}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000300)="6797f04cdb6f2b8ff1c922acb0da67dc3bf442976fc916d4a50f5d1ae7453eddc232ca4c6ae6c56d2c24", 0x5dc}], 0x1}, 0x30008b08) 9.291977451s ago: executing program 3 (id=92): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000d40)=ANY=[@ANYBLOB], 0x0}, 0x94) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0x0, 0xee01}}, './file0\x00'}) ioctl$KVM_SET_IRQCHIP(r5, 0x400caed0, &(0x7f0000000980)={0x1, 0x0, @ioapic={0xffffffff, 0x296d, 0x4, 0x6, 0x0, [{0x98, 0x5d, 0x7f, '\x00', 0x7f}, {0x41, 0x8, 0x81, '\x00', 0x3}, {0xf, 0x5, 0x2, '\x00', 0x13}, {0x3, 0x3e, 0x8, '\x00', 0x8f}, {0x3, 0x7f, 0x91, '\x00', 0xa}, {0xf, 0xe3, 0x0, '\x00', 0xac}, {0x3, 0x8, 0x6, '\x00', 0x8}, {0x1, 0xfa, 0x6, '\x00', 0x67}, {0x2, 0x7, 0x2, '\x00', 0x8}, {0x8, 0x4, 0x43, '\x00', 0x9f}, {0xf, 0x8, 0x6, '\x00', 0x3}, {0x2, 0x4c, 0x3, '\x00', 0xa}, {0x7, 0x6, 0x2, '\x00', 0xa6}, {0x8, 0x0, 0x8, '\x00', 0x9}, {0x2, 0x4c, 0xa2, '\x00', 0x1}, {0x8, 0x5e, 0x4, '\x00', 0x3}, {0x5, 0xa0, 0x47, '\x00', 0x6}, {0x7, 0x3, 0x2, '\x00', 0xa7}, {0x4, 0x0, 0x7, '\x00', 0x7}, {0x5e, 0xa, 0xb, '\x00', 0x3}, {0x7f, 0x6, 0xca, '\x00', 0x4}, {0x93, 0x44, 0x9, '\x00', 0x10}, {0x2, 0x8, 0x0, '\x00', 0xfc}, {0x6, 0xc, 0xc6, '\x00', 0x8}]}}) socket$nl_route(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000), 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) 7.258450851s ago: executing program 1 (id=96): socket(0x1d, 0x2, 0x6) r0 = syz_ublk_setup_io_uring(0xd, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x200015a, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x0, 0x1, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xba}}], 0x1, &(0x7f0000000340)={0x2e, 0x14, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x5c0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) 6.826451242s ago: executing program 1 (id=100): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001540)=""/74, 0x0, 0x5000}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000016c0)) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000001500)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) close(0x3) socket$inet_smc(0x2b, 0x1, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close(0x3) syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[], 0x0) syz_io_uring_setup(0xf00, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) socket$kcm(0x2, 0x1000000000000002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x48814) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0xd231c4f959ad4808) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 6.782731203s ago: executing program 2 (id=101): epoll_create1(0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$usbmon(&(0x7f0000000000), 0x202, 0x40) ioctl$MON_IOCG_STATS(r1, 0x80089203, 0x0) socket$tipc(0x1e, 0x5, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x100000000000000) 5.880235785s ago: executing program 2 (id=102): r0 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r0, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0x6, 0x3, @mcast2}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000300)="6797f04cdb6f2b8ff1c922acb0da67dc3bf442976fc916d4a50f5d1ae7453eddc232ca4c6ae6c56d2c24", 0x5dc}], 0x1}, 0x30008b08) 5.780050558s ago: executing program 2 (id=103): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x24, r2, 0xcfd0038b177d3ec1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x8000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680), 0x0, 0x6c, r5}, 0x38) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000640)='./file1\x00', 0x1008000, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYRES64=0x0, @ANYRESDEC, @ANYRESHEX, @ANYRES16=0x0, @ANYRES8=0x0, @ANYRES64, @ANYRES32], 0x11, 0x5e7, &(0x7f0000000680)="$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") r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) ioctl$KDENABIO(r6, 0x4b36) ioctl$PIO_UNIMAPCLR(r7, 0x4b68, 0x0) ioctl$PIO_UNIMAPCLR(r7, 0x4b68, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r8, 0x0, 0x8010) ioctl$BLKRASET(r7, 0x1262, 0x0) io_setup(0xea, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) listxattr(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 5.070462285s ago: executing program 0 (id=104): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) openat$kvm(0xffffffffffffff9c, 0x0, 0x682, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r3, 0xfff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbda}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.625201416s ago: executing program 2 (id=105): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) close(0xffffffffffffffff) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x25dfdb7c, {0x60, 0x0, 0x0, r3, {}, {0x1, 0x2}, {0x1}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x40000) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000540)=0x2) sched_setscheduler(r4, 0x1, &(0x7f0000000240)=0x7) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f00000009c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10048000}, 0xc, &(0x7f0000000980)={&(0x7f00000007c0)=ANY=[@ANYBLOB="ff018000", @ANYRES16=0x0, @ANYBLOB="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"], 0x194}, 0x1, 0x0, 0x0, 0x4008810}, 0x20008014) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000000)="00b6", 0x2, 0x5) unlink(0x0) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f00000005c0)={[{@barrier}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x4}}, {@noauto_da_alloc}]}, 0x6, 0x61f, &(0x7f0000000b00)="$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") 4.07939316s ago: executing program 0 (id=106): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) semop(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmmsg$inet(r3, &(0x7f0000005d00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x18}}], 0x1, 0x40008000) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, 0x0, &(0x7f0000cab000)) 3.980819462s ago: executing program 3 (id=107): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='hybla', 0x5) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000140)="6d527cd53870164a3a0d4b64fb0d7bebad2dce076e7768215970e33adf15173c9e665cff10727f6273ef2aace367c13b8e834788d7da2d60077ebc24a796b221a2f39fd294dc01861206b499138d02ebf3cfc3b11f0e18858568476bac483df9c4d0a61da2d2f9b7c4cb601c0141f209fc9e06d9457920a9a749a23ccd52eb91db50189627774719cf91bd6e63a2b8a3b657c0e438ffc3e275b03ef0f384a0c1f20143b7b87f2e34729b000000805e0ad338423d4200f349c545516c46bb9f104a3816b12950faa20fab5827bc62a8d4cc12c4c8954308a933d63aa66cdb3646a37626de7361b5338c197dd3e6844dafcb4338dce0b79ee41da150eca12fbd36b4873ce8", 0x104) vmsplice(r3, 0x0, 0x0, 0x0) close(r2) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x6b5, 0x80, 0x0, 0x1, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x24000000) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x40000005) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) 2.968185757s ago: executing program 0 (id=108): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd}}}}}}, 0x0) readv(r0, &(0x7f0000004000)=[{0x0}, {&(0x7f0000002f80)=""/4096, 0x1000}], 0x2) 2.696492104s ago: executing program 0 (id=110): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000240), 0xa000, 0x0) mmap$dsp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000009, 0x11, r0, 0x0) pipe(&(0x7f00000001c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0xf603594}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0) 2.670072144s ago: executing program 4 (id=111): socket(0x1d, 0x2, 0x6) r0 = syz_ublk_setup_io_uring(0xd, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x200015a, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x0, 0x1, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xba}}], 0x1, &(0x7f0000000340)={0x2e, 0x14, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x5c0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) 2.478530409s ago: executing program 1 (id=112): epoll_create1(0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$usbmon(&(0x7f0000000000), 0x202, 0x40) ioctl$MON_IOCG_STATS(r1, 0x80089203, 0x0) socket$tipc(0x1e, 0x5, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x100000000000000) 2.478156029s ago: executing program 4 (id=113): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40003}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000709726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x404c800}, 0x4000050) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a380000000c0a010100000000000000000a0000060900010073797a31000000a033000900020073797a31000000000c00038008000080040001801400000011"], 0x60}, 0x1, 0x0, 0x0, 0x4000850}, 0x40080c0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0x6, 0x3, @mcast2}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000300)="6797f04cdb6f2b8ff1c922acb0da67dc3bf442976fc916d4a50f5d1ae7453eddc232ca4c6ae6c56d2c24", 0x5dc}], 0x1}, 0x30008b08) 2.44495508s ago: executing program 2 (id=114): socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000900), 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) close(0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0x4f62b68f6fa20884}, {0xc, 0xb}, {0xa, 0xffe0}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x80000000}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c080) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 2.352837142s ago: executing program 4 (id=115): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x24, r2, 0xcfd0038b177d3ec1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x8000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680), 0x0, 0x6c, r5}, 0x38) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000640)='./file1\x00', 0x1008000, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYRES64=0x0, @ANYRESDEC, @ANYRESHEX, @ANYRES16=0x0, @ANYRES8=0x0, @ANYRES64, @ANYRES32], 0x11, 0x5e7, &(0x7f0000000680)="$eJzs3cFvHFcdB/DvbBxnHaTUcZM2oEpYRaoQFsl6LZGUC1AKslCFKnHgbBEnsbJJK3uL3B4gIA4Vp/4JRcj/AOJYpBxoDxzg1LNRj0jcfdtqZmfX62TrJrab3TSfjzT73ps38/b3fjM7mVkr2gDPrNWlzNxPkdWlN7bL9u7OSmd3Z+XOoJ7kTJJG0kxSlKv/nuSz5F76S7456BgpH/LpR82bn3zw8fv9VjlWs5jpb18ctt+jGcYy34+1Kk9qvPbxxzsww4Uki8ceD05Ab+C/Y7uP+bkEAKZZkZwat34+OVvfsJfPAf274v499lPt3qQDAAAAgCfgub3sZTvnJh0HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPE3q3/8v6qUxqC+mGPz+/2y9LnX9qXZ/0gEAAAAAAAAAwAn49l72sp1zg3avqP7m/3LVuFC9fiPvZCvr2czlbGct3XSzmeUk8yMDzW6vdbuby4+wZ3vsnu0nM18AAAAAAAAA+Jr6Y1b3//4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADToEhO9YtquTCoz6cxk6SZZLbc7l7yn0H9aXZ/0gEAAADAE/DcXvaynXODdq+onvlfqJ77m3knd9PNRrrpZD3Xq+8C+k/9jd2dlc7uzsqdcnl43J/8/7HCqEZM/7uH8e98qdpiLjeyUa25nN/krXRyPY1qz9KlQTzj4/pDGVPxo9ojRna9LsuZ/6Iup8N8lZHTw4y06tjKbJw/PBOPeXQefKflNIbf/Fz4CnJ+ti7L+bw+1Tlvj5x9LxyeiWTh13++eqtz9/atG1tL0zOlI3owEysjmXjxmcpEq8rExWF7NT/Pr7KUxbyZzWzkt1lLN+tZzOtVba0+n8vX+cMz9eMDrTe/LJLZ+rj0r6KPF9PL1b7nspFf5q1cr45oK1dzNe38IK+mdeAIXxwb9+97dfder9dL4/E+9d/5bl05neRndTkdyryeH8nr6DV3vuobXbOfpYWTvzbOfKuulGfPa1N3bTz/wL8Sg0w8f3gm/lKdOFudu7c3b629/Yjv90pdlhn46TATM/Xa3qkTmdSRlOfLwjCWg2dH2ff82L7lqu/CsK/xUN/FYd+XfVJn63u4h0dqV30vju3r73dppG/c/RYAU+/s987Ozv1v7t9zH879ae7W3BvN185cO/PSbE7/8/QPZ1qnXmm8VPwtH+Z3+8//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA0W29+97ttU5nffPIlcEvER13HBUVlempTPrKBHzVrnTvvH1l6933vr9xZ+3m+s31u6+2rl1bXl6+2rpyY6OzXr9OOkoA4CTt3/RPOhIAAAAAAAAAAAAAAOCLPIn/TjzpOQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF9vq0uZuZ8iy63LrbK9u7PSKZdBfX/LZpKirPwjyWfJvfSXzI8MV3zR+3z6UfPmJx98/P7+WM1q+3+1T2IWB2JpPBDTccdrj4z31yMNVwwzs5hkoS5h4j4PAAD//6e3Br8=") r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) ioctl$KDENABIO(r6, 0x4b36) ioctl$PIO_UNIMAPCLR(r7, 0x4b68, 0x0) ioctl$PIO_UNIMAPCLR(r7, 0x4b68, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r8, 0x0, 0x8010) ioctl$BLKRASET(r7, 0x1262, 0x0) io_setup(0xea, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) listxattr(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 1.366471187s ago: executing program 1 (id=116): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, 0x0) 1.335262147s ago: executing program 0 (id=117): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x41045508, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0) 1.249053499s ago: executing program 3 (id=118): syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x800000, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./bus\x00', 0x202a488, 0x0, 0x1, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r1 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setresgid(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 655.021824ms ago: executing program 4 (id=119): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {0xffff, 0xffff}, {0x4, 0x2}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x3}}}]}, 0x3c}}, 0x4000010) sendmsg$nl_route(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001c0001fc28bd7000fcdbdf2507000000", @ANYRES32=r1, @ANYBLOB="8000260b0a0002000180c200000c00000c000e80050001"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20040010) 550.604876ms ago: executing program 1 (id=120): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000bc0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 449.691609ms ago: executing program 4 (id=121): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) 351.352201ms ago: executing program 4 (id=122): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00'}) syz_usb_connect$uac3(0x3, 0x99, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x200c, 0x100b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x87, 0x3, 0x1, 0x81, 0x0, 0x17, {0x8, 0xb, 0x2, 0x2, 0x1, 0x25, 0x30, 0x7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xe, 0x23, 0x5e}, [@selector_unit={0x5, 0x24, 0xc, 0x7}, @input_terminal={0x14, 0x24, 0x2, 0x1, 0x405, 0x5, 0x3, 0x401, 0x0, 0x7, 0x4, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x1, 0x6, 0x0, {0xa, 0x25, 0x25, 0xff, 0x9, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x8, 0x0, 0x2, {0xa, 0x25, 0x25, 0x5, 0x97, 0x6}}}}}}}}]}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@delqdisc={0x24, 0x25, 0x2, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xf}, {0x6}, {0xfff2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x24048004) r2 = socket$netlink(0x10, 0x3, 0xa) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_buf(r4, 0x1, 0x4a, 0x0, &(0x7f0000000080)) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602ffa100000e000a000f000000028000001294", 0x2e}], 0x1}, 0x40) 281.711303ms ago: executing program 0 (id=123): r0 = socket(0x10, 0x803, 0x0) timer_create(0xfffffffffffffffc, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001280)={&(0x7f0000014000/0x1000)=nil, &(0x7f0000000000/0xf000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000014000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000003000/0x1000)=nil, &(0x7f0000016000/0x4000)=nil, &(0x7f000000c000/0x7000)=nil, &(0x7f0000019000/0x1000)=nil, &(0x7f0000014000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, &(0x7f0000001180)="df176e9c35c2453e897a9bc2fff69ae6124c4f6d03e2e976d2014daa0c608097c1571a7f4a87becee36f6317bdbd01eb08f6ba338f41245326769981c0c2d6ce2c223355f958e478dc7637d4e4d0c7f3374a744d2fd54a3bb0a349eb4a17b54af95d85fbbbb778124a2cefddf2e9cacec26386e4faf26ab1093a1497bc73a4195036577ea7a89857fa2778224f0f65bf457c4f9b808c4ff2a16835d4b4187c07391584e79e23c4e5a88de43eedb682ade2ec3a7831d5fb6d3d200d544a67237541bd920baafd7abeb87f843db647b57fbacbcbc33e23b88797609953", 0xdc, r0}, 0x68) syz_usb_connect(0x5, 0x24, &(0x7f0000000f80)={{0x12, 0x1, 0x201, 0xc8, 0x33, 0x89, 0x8, 0x4c8, 0x720, 0xb651, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x6, 0x6, 0x50, 0x7f, "", [{{0x9, 0x4, 0xd4, 0x7, 0x0, 0x60, 0x3e, 0x70, 0x92}}]}}]}}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000001000)={0x0, 0x0, 0x80000001, 0xfffffffffffffff7, 0xffffffffffffffff}) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000000)=""/4090, &(0x7f00000010c0)=0xffa) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000005c0)={[0x5836, 0x1000000000000008, 0x2, 0x4000000000000e52, 0x1, 0xf, 0x1043, 0x200000000006, 0x10, 0x1, 0xfffffffffffffffe, 0x100000000, 0x9ca6, 0x1, 0x8000000000005, 0x5c], 0x8080000, 0x42590}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 205.433565ms ago: executing program 1 (id=124): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) close(0xffffffffffffffff) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x25dfdb7c, {0x60, 0x0, 0x0, r3, {}, {0x1, 0x2}, {0x1}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x40000) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000540)=0x2) sched_setscheduler(r4, 0x1, &(0x7f0000000240)=0x7) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f00000009c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10048000}, 0xc, &(0x7f0000000980)={&(0x7f00000007c0)=ANY=[@ANYBLOB="ff018000", @ANYRES16=0x0, @ANYBLOB="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"], 0x194}, 0x1, 0x0, 0x0, 0x4008810}, 0x20008014) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000000)="00b6", 0x2, 0x5) unlink(0x0) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f00000005c0)={[{@barrier}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x4}}, {@noauto_da_alloc}]}, 0x6, 0x61f, &(0x7f0000000b00)="$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") 132.775927ms ago: executing program 3 (id=125): mkdirat(0xffffffffffffffff, 0x0, 0x17d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r3, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', 0x0, 0x80c019, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, 0x0, 0x0, 0x2, 0x0) 0s ago: executing program 2 (id=126): epoll_create1(0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$usbmon(&(0x7f0000000000), 0x202, 0x40) ioctl$MON_IOCG_STATS(r1, 0x80089203, 0x0) socket$tipc(0x1e, 0x5, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x100000000000000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.25' (ED25519) to the list of known hosts. [ 66.168706][ T4255] cgroup: Unknown subsys name 'net' [ 66.296937][ T4255] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.841091][ T4255] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 69.696615][ T4279] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.705199][ T4279] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.713353][ T4279] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.721664][ T4280] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.729124][ T4279] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.737444][ T4281] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.745398][ T4279] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.745430][ T4281] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 69.753861][ T4279] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.766640][ T4281] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.767512][ T4279] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 69.781996][ T4279] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.831495][ T4276] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.843877][ T4281] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.851985][ T4281] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.859873][ T4281] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.868873][ T4281] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 69.868970][ T4280] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 69.884269][ T4280] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.892355][ T4280] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 69.900508][ T4280] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 69.908682][ T4280] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 69.916786][ T4280] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 69.918466][ T4279] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.931447][ T4288] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 69.950721][ T4279] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.958488][ T4279] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.969746][ T4279] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.978647][ T4279] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 69.986790][ T4279] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.219979][ T4271] chnl_net:caif_netlink_parms(): no params data found [ 70.398294][ T4286] chnl_net:caif_netlink_parms(): no params data found [ 70.444638][ T4271] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.452528][ T4271] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.460767][ T4271] device bridge_slave_0 entered promiscuous mode [ 70.470916][ T4271] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.478532][ T4271] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.487073][ T4271] device bridge_slave_1 entered promiscuous mode [ 70.521968][ T4272] chnl_net:caif_netlink_parms(): no params data found [ 70.534421][ T4283] chnl_net:caif_netlink_parms(): no params data found [ 70.574082][ T4282] chnl_net:caif_netlink_parms(): no params data found [ 70.589036][ T4271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.628373][ T4271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.683771][ T4286] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.691387][ T4286] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.699137][ T4286] device bridge_slave_0 entered promiscuous mode [ 70.727621][ T4286] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.737692][ T4286] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.745739][ T4286] device bridge_slave_1 entered promiscuous mode [ 70.755655][ T4271] team0: Port device team_slave_0 added [ 70.788187][ T4271] team0: Port device team_slave_1 added [ 70.814142][ T4283] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.821476][ T4283] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.829506][ T4283] device bridge_slave_0 entered promiscuous mode [ 70.852997][ T4272] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.860219][ T4272] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.868617][ T4272] device bridge_slave_0 entered promiscuous mode [ 70.884073][ T4283] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.891424][ T4283] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.899310][ T4283] device bridge_slave_1 entered promiscuous mode [ 70.908145][ T4286] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.918909][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.926576][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.952843][ T4271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.964685][ T4272] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.972086][ T4272] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.980109][ T4272] device bridge_slave_1 entered promiscuous mode [ 71.010127][ T4286] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.023157][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.030128][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.056382][ T4271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.067674][ T4282] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.076861][ T4282] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.085255][ T4282] device bridge_slave_0 entered promiscuous mode [ 71.118387][ T4282] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.125715][ T4282] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.136949][ T4282] device bridge_slave_1 entered promiscuous mode [ 71.145888][ T4272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.157543][ T4283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.175840][ T4286] team0: Port device team_slave_0 added [ 71.195847][ T4272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.207341][ T4283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.237748][ T4286] team0: Port device team_slave_1 added [ 71.250557][ T4282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.269420][ T4282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.326533][ T4271] device hsr_slave_0 entered promiscuous mode [ 71.333987][ T4271] device hsr_slave_1 entered promiscuous mode [ 71.348838][ T4272] team0: Port device team_slave_0 added [ 71.359725][ T4283] team0: Port device team_slave_0 added [ 71.372441][ T4286] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.379475][ T4286] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.406761][ T4286] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.414815][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.424118][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.436679][ T4272] team0: Port device team_slave_1 added [ 71.449723][ T4283] team0: Port device team_slave_1 added [ 71.465857][ T4282] team0: Port device team_slave_0 added [ 71.476559][ T4286] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.483905][ T4286] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.510382][ T4286] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.545944][ T4282] team0: Port device team_slave_1 added [ 71.564752][ T4283] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.572370][ T4283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.599416][ T4283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.646363][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.653529][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.679771][ T4272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.691995][ T4283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.698978][ T4283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.726808][ T4283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.764774][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.772286][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.799929][ T4279] Bluetooth: hci1: command 0x0409 tx timeout [ 71.801033][ T4272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.818363][ T4282] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.825492][ T4282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.851531][ T4282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.864504][ T4282] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.871728][ T49] Bluetooth: hci0: command 0x0409 tx timeout [ 71.878444][ T4282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.904616][ T4282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.920214][ T4286] device hsr_slave_0 entered promiscuous mode [ 71.927219][ T4286] device hsr_slave_1 entered promiscuous mode [ 71.934216][ T4286] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.942154][ T4286] Cannot create hsr debugfs directory [ 71.951097][ T49] Bluetooth: hci2: command 0x0409 tx timeout [ 71.951592][ T4279] Bluetooth: hci4: command 0x0409 tx timeout [ 72.031249][ T49] Bluetooth: hci3: command 0x0409 tx timeout [ 72.036187][ T4283] device hsr_slave_0 entered promiscuous mode [ 72.045394][ T4283] device hsr_slave_1 entered promiscuous mode [ 72.052488][ T4283] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.060155][ T4283] Cannot create hsr debugfs directory [ 72.090797][ T4282] device hsr_slave_0 entered promiscuous mode [ 72.098039][ T4282] device hsr_slave_1 entered promiscuous mode [ 72.105254][ T4282] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.113234][ T4282] Cannot create hsr debugfs directory [ 72.141756][ T4272] device hsr_slave_0 entered promiscuous mode [ 72.148671][ T4272] device hsr_slave_1 entered promiscuous mode [ 72.155838][ T4272] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.163519][ T4272] Cannot create hsr debugfs directory [ 72.408355][ T4271] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.448288][ T4271] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.470201][ T4271] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.498883][ T4271] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.545926][ T4286] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.556803][ T4286] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.565808][ T4286] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.576006][ T4286] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.682715][ T4282] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.702306][ T4282] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.719754][ T4282] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.742535][ T4282] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.783749][ T4283] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 72.827306][ T4283] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 72.836891][ T4283] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 72.859587][ T4283] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 72.895762][ T4286] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.920152][ T4271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.932807][ T4272] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.950193][ T1083] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.960433][ T1083] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.969769][ T4272] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.982127][ T4272] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.000262][ T4272] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.018640][ T4286] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.044263][ T1083] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.053883][ T1083] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.063581][ T1083] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.072848][ T1083] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.083229][ T1083] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.090548][ T1083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.099564][ T1083] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.124341][ T4271] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.141549][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.150795][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.160534][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.167801][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.175842][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.210784][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.225985][ T4282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.257247][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.267509][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.276295][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.285482][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.294797][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.302020][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.310129][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.318897][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.327528][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.334649][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.343810][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.356033][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.364820][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.379801][ T4282] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.414365][ T4283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.429002][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.437307][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.448161][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.458701][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.469521][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.476749][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.484943][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.494102][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.503483][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.512665][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.524768][ T1083] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.534074][ T1083] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.543225][ T1083] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.550359][ T1083] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.568374][ T1083] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.580088][ T1083] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.607745][ T4286] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.619879][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.632342][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.642083][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.649900][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.659223][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.668084][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.679912][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.695440][ T4283] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.725918][ T1083] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.743572][ T1083] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.761230][ T1083] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.770222][ T1083] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.785924][ T1083] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.797353][ T1083] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.806568][ T1083] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.818269][ T1083] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.827826][ T1083] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.839081][ T1083] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.848076][ T1083] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.862558][ T1083] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.873992][ T1083] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.883136][ T1083] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.887170][ T4279] Bluetooth: hci1: command 0x041b tx timeout [ 73.892752][ T1083] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.904504][ T1083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.927297][ T4282] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.939925][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.950480][ T1083] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.958349][ T49] Bluetooth: hci0: command 0x041b tx timeout [ 73.965445][ T1083] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.974627][ T1083] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.983402][ T1083] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.993704][ T1083] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.022230][ T1083] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.031408][ T49] Bluetooth: hci4: command 0x041b tx timeout [ 74.031473][ T4279] Bluetooth: hci2: command 0x041b tx timeout [ 74.038507][ T1083] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.057350][ T1083] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.064563][ T1083] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.073805][ T1083] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.087256][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.103673][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.111638][ T49] Bluetooth: hci3: command 0x041b tx timeout [ 74.154917][ T4272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.189234][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.213770][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.224078][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.239499][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.249008][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.262971][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.297290][ T4286] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.317349][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.331752][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.340875][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.352200][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.360907][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.371794][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.379800][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.392607][ T4272] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.427643][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.442548][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.478684][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.498158][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.516490][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.545206][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.553054][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.576351][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.585415][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.644117][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.661235][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.670249][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.685944][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.693165][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.703728][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.728707][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.739475][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.758387][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.774709][ T4286] device veth0_vlan entered promiscuous mode [ 74.830410][ T4286] device veth1_vlan entered promiscuous mode [ 74.842703][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.854574][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.863875][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.875402][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.884217][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.892688][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.900267][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.918060][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.927223][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.942696][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.951628][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.959970][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.969689][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.977847][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.990889][ T4282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.011227][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.019478][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.029725][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.038391][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.061218][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.069993][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.098801][ T4283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.128391][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.138819][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.189674][ T4286] device veth0_macvtap entered promiscuous mode [ 75.208213][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.225428][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.245347][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.261739][ T4271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.284906][ T4286] device veth1_macvtap entered promiscuous mode [ 75.328769][ T4282] device veth0_vlan entered promiscuous mode [ 75.353794][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.372572][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.386739][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.395621][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.404452][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.418425][ T4286] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.436951][ T4286] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.474121][ T4282] device veth1_vlan entered promiscuous mode [ 75.508390][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.520038][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.531156][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.540089][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.586994][ T4286] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.599081][ T4286] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.609042][ T4286] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.631284][ T4286] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.653812][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.663715][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.721304][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.740565][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.758763][ T4271] device veth0_vlan entered promiscuous mode [ 75.793826][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.818954][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.840239][ T4282] device veth0_macvtap entered promiscuous mode [ 75.898386][ T4272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.909874][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.919772][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.928781][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.936485][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.947216][ T4282] device veth1_macvtap entered promiscuous mode [ 75.953725][ T4279] Bluetooth: hci1: command 0x040f tx timeout [ 75.997286][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.005728][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.031777][ T4279] Bluetooth: hci0: command 0x040f tx timeout [ 76.048442][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.051617][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.057919][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.075136][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.081858][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.084478][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.099951][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.110076][ T4271] device veth1_vlan entered promiscuous mode [ 76.116638][ T49] Bluetooth: hci4: command 0x040f tx timeout [ 76.122933][ T4279] Bluetooth: hci2: command 0x040f tx timeout [ 76.169072][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.180560][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.192053][ T4288] Bluetooth: hci3: command 0x040f tx timeout [ 76.193738][ T4282] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.209829][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.221162][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.232481][ T4282] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.246416][ T4272] device veth0_vlan entered promiscuous mode [ 76.254121][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.265507][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.274532][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.283900][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.293484][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.304924][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.314845][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.323608][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.333095][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.340911][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.355873][ T4282] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.368463][ T4282] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.377972][ T4282] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.387132][ T4282] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.407551][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.417162][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.426702][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.435386][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.447268][ T4283] device veth0_vlan entered promiscuous mode [ 76.473643][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.479249][ T4272] device veth1_vlan entered promiscuous mode [ 76.488863][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.527955][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.549667][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.558613][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.582309][ T4283] device veth1_vlan entered promiscuous mode [ 76.593950][ T4271] device veth0_macvtap entered promiscuous mode [ 76.635019][ T4271] device veth1_macvtap entered promiscuous mode [ 76.671167][ T4332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.679155][ T4332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.738392][ T4283] device veth0_macvtap entered promiscuous mode [ 76.753611][ T4272] device veth0_macvtap entered promiscuous mode [ 76.773107][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.782284][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.814186][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.826799][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.838267][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.847867][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.857632][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.873352][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.880805][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.898169][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.899315][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.916923][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.928694][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.943870][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.968244][ T4283] device veth1_macvtap entered promiscuous mode [ 76.979169][ T4272] device veth1_macvtap entered promiscuous mode [ 76.994391][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.004482][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.030032][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.039297][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.051580][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.077967][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.087728][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.099786][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.116451][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.128258][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.312656][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.332503][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.371786][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.396376][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.427402][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.438158][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.448359][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.459844][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.470045][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.481685][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.504985][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.518523][ T4271] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.528789][ T4271] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.540983][ T0] NOHZ tick-stop error: local softirq work is pending, handler #20a!!! [ 77.552358][ T4271] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.569475][ T4271] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.587348][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.616016][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.661745][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.706440][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.717687][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.732680][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.742999][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.754901][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.773854][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.791859][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.806331][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.836633][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.869408][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.920551][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.970111][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.007704][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.018717][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.028976][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.040141][ T49] Bluetooth: hci1: command 0x0419 tx timeout [ 78.040472][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.111477][ T4288] Bluetooth: hci0: command 0x0419 tx timeout [ 78.131171][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.148750][ T4283] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.187821][ T4283] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.191346][ T4288] Bluetooth: hci2: command 0x0419 tx timeout [ 78.197245][ T49] Bluetooth: hci4: command 0x0419 tx timeout [ 78.222694][ T4283] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.251161][ T4283] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.272081][ T4288] Bluetooth: hci3: command 0x0419 tx timeout [ 78.288205][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.305283][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.336247][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.347279][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.358305][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.368958][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.379176][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.390240][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.400250][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.410869][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.423102][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.447873][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.458911][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.471611][ T4272] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.480731][ T4272] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.490080][ T4272] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.499085][ T4272] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.674071][ T4332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.751458][ T4332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.757650][ T1083] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.782252][ T1083] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.802414][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.822114][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.034510][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.047718][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.084248][ T4328] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.084336][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.103222][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.111796][ T4328] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.125580][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.144449][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.251705][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 80.042681][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.050612][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.105489][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 80.251194][ T22] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 80.316163][ T49] Bluetooth: hci1: Invalid handle: 0x70bc > 0x0eff [ 80.338288][ T4403] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 80.461027][ T22] usb 1-1: Using ep0 maxpacket: 32 [ 80.485138][ T22] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 80.516777][ T22] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 80.558464][ T22] usb 1-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 80.567969][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.587441][ T22] usb 1-1: Product: syz [ 80.595998][ T22] usb 1-1: Manufacturer: syz [ 80.600644][ T22] usb 1-1: SerialNumber: syz [ 80.618015][ T22] snd-ua101 1-1:1.1: sample format descriptor not found [ 80.625301][ T22] snd-ua101 1-1:1.0: invalid num_altsetting [ 80.681273][ T2124] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 80.862846][ T2124] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 80.872571][ T2124] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.885128][ T2124] usb 5-1: config 0 descriptor?? [ 81.106034][ T2124] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 81.115156][ T2124] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 81.123542][ T2124] [drm:udl_init] *ERROR* Selecting channel failed [ 81.147902][ T4407] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 81.152508][ T2124] [drm] Initialized udl 0.0.1 20120220 for 5-1:0.0 on minor 2 [ 81.162659][ T2124] [drm] Initialized udl on minor 2 [ 81.163774][ T4407] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 81.169429][ T2124] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 81.184048][ T2124] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 81.196273][ T4407] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 81.204923][ T4407] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 81.211637][ T4407] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 81.214585][ T2124] usb 5-1: USB disconnect, device number 2 [ 81.226750][ T4407] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 81.232912][ T7] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 81.236026][ T4407] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 81.250528][ T4407] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 81.252372][ T7] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 81.267900][ T4407] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 81.271982][ T7] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 81.275765][ T4407] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 81.289013][ T4407] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 81.299206][ T4407] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 81.311239][ T4407] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 81.318005][ T4407] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 81.327259][ T4407] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 81.351663][ T4388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.360555][ T4388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.571764][ T4388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.580464][ T4388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.511174][ T49] Bluetooth: hci1: command 0x0c1a tx timeout [ 82.943446][ T4285] usb 1-1: USB disconnect, device number 2 [ 83.217458][ T4461] netlink: 'syz.1.25': attribute type 1 has an invalid length. [ 83.231328][ T49] Bluetooth: hci0: command 0x0c1a tx timeout [ 83.311263][ T49] Bluetooth: hci3: command 0x0c1a tx timeout [ 83.317477][ T4288] Bluetooth: hci2: command 0x0c1a tx timeout [ 83.391661][ T4288] Bluetooth: hci4: command 0x0c1a tx timeout [ 83.849188][ T4480] Zero length message leads to an empty skb [ 83.862099][ T4480] device gre1 entered promiscuous mode [ 83.963895][ T4480] Disabled LAPIC found during irq injection [ 84.277831][ T4285] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 84.920971][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 84.940992][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 84.950970][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 84.960969][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 84.970986][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 84.980966][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 84.990977][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 85.000970][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 85.010962][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 85.029085][ T4288] Bluetooth: hci1: command 0x0406 tx timeout [ 85.151023][ T4285] usb 3-1: Using ep0 maxpacket: 32 [ 85.158420][ T4285] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 85.191199][ T4285] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 85.245934][ T4285] usb 3-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 85.280575][ T4285] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.311073][ T49] Bluetooth: hci0: command 0x0406 tx timeout [ 85.317339][ T4285] usb 3-1: Product: syz [ 85.351107][ T4285] usb 3-1: Manufacturer: syz [ 85.366007][ T4285] usb 3-1: SerialNumber: syz [ 85.391176][ T4288] Bluetooth: hci3: command 0x0406 tx timeout [ 85.391186][ T49] Bluetooth: hci2: command 0x0406 tx timeout [ 85.443661][ T4285] snd-ua101 3-1:1.1: sample format descriptor not found [ 85.450793][ T4285] snd-ua101 3-1:1.0: invalid num_altsetting [ 85.473450][ T4279] Bluetooth: hci4: command 0x0406 tx timeout [ 85.594613][ T4500] ip_tables: iptables: counters copy to user failed while replacing table [ 85.628953][ T4483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.656417][ T4483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.795261][ T4483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.823267][ T4483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.452625][ T4502] loop4: detected capacity change from 0 to 32768 [ 87.229301][ T14] cfg80211: failed to load regulatory.db [ 87.250369][ T4502] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.39 (4502) [ 87.352091][ T14] usb 3-1: USB disconnect, device number 2 [ 87.407912][ T4502] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 87.449047][ T4523] netlink: 'syz.2.48': attribute type 2 has an invalid length. [ 87.496021][ T4502] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 87.626791][ T4502] BTRFS info (device loop4): using free space tree [ 87.919038][ T4502] BTRFS info (device loop4): enabling ssd optimizations [ 88.085256][ T26] audit: type=1800 audit(1787866128.662:2): pid=4502 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.39" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 88.487331][ T4558] loop3: detected capacity change from 0 to 1024 [ 88.532124][ T4558] EXT4-fs: Ignoring removed nomblk_io_submit option [ 88.586238][ T4558] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6002c028, mo2=0102] [ 88.587775][ T4283] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 88.604283][ T4558] System zones: 0-1, 3-12 [ 88.645840][ T4558] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 89.803624][ T4286] EXT4-fs (loop3): unmounting filesystem. [ 91.450286][ T4586] loop1: detected capacity change from 0 to 40427 [ 91.489183][ T4586] F2FS-fs (loop1): invalid crc_offset: 4177530876 [ 91.541064][ T4586] F2FS-fs (loop1): Wrong journal entry on segno 65538 [ 91.541183][ T7] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 91.548399][ T4586] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-117) [ 91.761189][ T7] usb 3-1: Using ep0 maxpacket: 32 [ 91.779552][ T7] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 91.789556][ T14] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 91.810513][ T7] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 91.841069][ T7] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 91.861307][ T7] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 91.890793][ T7] usb 3-1: config 0 interface 0 has no altsetting 0 [ 91.934772][ T7] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 91.964427][ T7] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 91.993370][ T7] usb 3-1: Product: syz [ 92.001698][ T14] usb 4-1: Using ep0 maxpacket: 8 [ 92.117949][ T7] usb 3-1: Manufacturer: syz [ 92.122969][ T7] usb 3-1: SerialNumber: syz [ 92.127841][ T14] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 92.187844][ T7] usb 3-1: config 0 descriptor?? [ 92.195224][ T14] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 92.342741][ T14] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 92.355775][ T7] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 92.372109][ T14] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 92.395566][ T14] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 92.412489][ T7] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 92.671840][ T14] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 92.671871][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.853148][ T32] usb 3-1: USB disconnect, device number 3 [ 92.859175][ C1] ldusb 3-1:0.0: usb_submit_urb failed (-19) [ 92.865868][ T4598] ldusb 3-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 92.874579][ T4623] ldusb 3-1:0.0: Couldn't submit HID_REQ_SET_REPORT -19 [ 92.887660][ T14] usb 4-1: usb_control_msg returned -32 [ 92.900454][ T14] usbtmc 4-1:16.0: can't read capabilities [ 92.979681][ T32] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 95.271449][ T4319] usb 4-1: USB disconnect, device number 2 [ 96.449482][ T26] audit: type=1326 audit(1787866137.022:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4674 comm="syz.2.89" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0ad5b97e57 code=0x7ffc0000 [ 96.518391][ T26] audit: type=1326 audit(1787866137.062:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4674 comm="syz.2.89" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0ad5b3f459 code=0x7ffc0000 [ 96.784481][ T4664] overlayfs: statfs failed on './file0' [ 96.954481][ T26] audit: type=1326 audit(1787866137.062:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4674 comm="syz.2.89" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0ad5b97e57 code=0x7ffc0000 [ 97.413650][ T26] audit: type=1326 audit(1787866137.062:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4674 comm="syz.2.89" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0ad5b3f459 code=0x7ffc0000 [ 97.439947][ T26] audit: type=1326 audit(1787866137.062:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4674 comm="syz.2.89" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0ad5b97e57 code=0x7ffc0000 [ 97.464088][ C0] vkms_vblank_simulate: vblank timer overrun [ 97.480545][ T26] audit: type=1326 audit(1787866137.062:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4674 comm="syz.2.89" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0ad5b3f459 code=0x7ffc0000 [ 97.600372][ T26] audit: type=1326 audit(1787866137.062:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4674 comm="syz.2.89" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0ad5b97e57 code=0x7ffc0000 [ 97.849361][ T26] audit: type=1326 audit(1787866137.062:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4674 comm="syz.2.89" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0ad5b3f459 code=0x7ffc0000 [ 97.874202][ T4319] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 98.071542][ T4319] usb 1-1: Using ep0 maxpacket: 8 [ 98.085376][ T4319] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 98.114495][ T26] audit: type=1326 audit(1787866137.062:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4674 comm="syz.2.89" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0ad5b97e57 code=0x7ffc0000 [ 98.174538][ T26] audit: type=1326 audit(1787866137.062:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4674 comm="syz.2.89" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0ad5b3f459 code=0x7ffc0000 [ 98.194871][ T4319] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 98.588613][ T4319] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 98.684943][ T4319] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 98.744167][ T4319] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 98.795100][ T4319] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 98.805297][ T4319] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.014629][ T22] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 99.044950][ T4319] usb 1-1: usb_control_msg returned -32 [ 99.050597][ T4319] usbtmc 1-1:16.0: can't read capabilities [ 99.321031][ T4285] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 99.935846][ T22] usb 5-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 99.947447][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.290377][ T22] usbhid 5-1:1.0: can't add hid device: -71 [ 100.300561][ T22] usbhid: probe of 5-1:1.0 failed with error -71 [ 100.308703][ T22] usb 5-1: USB disconnect, device number 3 [ 100.318038][ T4285] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 100.340004][ T4285] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 100.366202][ T4715] loop2: detected capacity change from 0 to 1024 [ 100.409408][ T4285] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 100.425357][ T4285] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 100.435009][ T4285] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.443776][ T4285] usb 2-1: Product: syz [ 100.448223][ T4285] usb 2-1: Manufacturer: syz [ 100.453241][ T4285] usb 2-1: SerialNumber: syz [ 100.484021][ T4285] hub 2-1:1.0: bad descriptor, ignoring hub [ 100.503828][ T4285] hub: probe of 2-1:1.0 failed with error -5 [ 100.668148][ T14] usb 1-1: USB disconnect, device number 3 [ 100.689896][ T4285] usblp 2-1:1.0: usblp1: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 101.485189][ T4316] usb 2-1: reset high-speed USB device number 2 using dummy_hcd [ 102.457218][ T4725] loop2: detected capacity change from 0 to 1024 [ 102.464681][ T4725] ======================================================= [ 102.464681][ T4725] WARNING: The mand mount option has been deprecated and [ 102.464681][ T4725] and is ignored by this kernel. Remove the mand [ 102.464681][ T4725] option from the mount to silence this warning. [ 102.464681][ T4725] ======================================================= [ 102.778726][ T4725] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #3: block 2: comm syz.2.105: lblock 2 mapped to illegal pblock 2 (length 1) [ 102.799938][ T4725] __quota_error: 58 callbacks suppressed [ 102.799958][ T4725] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 102.814056][ T4725] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #3: block 48: comm syz.2.105: lblock 0 mapped to illegal pblock 48 (length 1) [ 102.853105][ T4725] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 102.863297][ T4725] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.105: Failed to acquire dquot type 0 [ 102.878829][ T4725] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 102.905981][ T4725] EXT4-fs error (device loop2): ext4_evict_inode:281: inode #11: comm syz.2.105: mark_inode_dirty error [ 102.926740][ T4725] EXT4-fs warning (device loop2): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 102.938185][ T4725] EXT4-fs (loop2): 1 orphan inode deleted [ 102.944144][ T4725] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 102.991483][ T4447] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:10: lblock 1 mapped to illegal pblock 1 (length 1) [ 103.051878][ T4447] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 103.078411][ T4447] EXT4-fs error (device loop2): ext4_release_dquot:6877: comm kworker/u4:10: Failed to release dquot type 0 [ 103.378177][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 103.384565][ T4316] usb 2-1: USB disconnect, device number 2 [ 103.402537][ T4316] usblp1: removed [ 103.419215][ T4272] EXT4-fs error (device loop2): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 103.445817][ T4272] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 103.467439][ T4272] EXT4-fs error (device loop2): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error [ 104.447386][ T4750] loop4: detected capacity change from 0 to 1024 [ 105.176737][ T4752] tipc: Started in network mode [ 105.195506][ T4752] tipc: Node identity 227d2fc8a29a, cluster identity 4711 [ 105.256318][ T4752] tipc: Enabled bearer , priority 0 [ 105.287593][ T4751] tipc: Disabling bearer [ 105.603180][ T4759] overlayfs: statfs failed on './file0' [ 105.915134][ T4781] loop1: detected capacity change from 0 to 1024 [ 106.533480][ C0] ------------[ cut here ]------------ [ 106.539248][ C0] WARNING: CPU: 0 PID: 0 at net/mac80211/tx.c:4961 __ieee80211_beacon_get+0x1141/0x1520 [ 106.549079][ C0] Modules linked in: [ 106.553033][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 [ 106.560086][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 106.570197][ C0] RIP: 0010:__ieee80211_beacon_get+0x1141/0x1520 [ 106.576592][ C0] Code: f7 4c 89 ef e8 70 a6 06 f8 45 31 ed 4c 8b bc 24 a0 00 00 00 e9 7f fe ff ff e8 9b f9 cd f7 0f 0b e9 61 f8 ff ff e8 8f f9 cd f7 <0f> 0b e9 85 fb ff ff e8 83 f9 cd f7 48 c7 c7 00 06 fc 8d 4c 89 e6 [ 106.596360][ C0] RSP: 0018:ffffc90000007a48 EFLAGS: 00010246 [ 106.602502][ C0] RAX: ffffffff89b43801 RBX: dffffc0000000000 RCX: ffffffff8c8bc740 [ 106.610500][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 106.618532][ C0] RBP: 0000000000000000 R08: ffffffff8c8bc740 R09: 0000000000000003 [ 106.626562][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88807be62228 [ 106.634595][ C0] R13: ffff88805596f024 R14: ffff88807be62760 R15: ffff88805596f000 [ 106.642621][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 106.651608][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 106.658219][ C0] CR2: 00007fcb9629b000 CR3: 000000005cd17000 CR4: 00000000003526f0 [ 106.666268][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 106.674311][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 106.682335][ C0] Call Trace: [ 106.685643][ C0] [ 106.688552][ C0] ? __ieee80211_beacon_get+0x36/0x1520 [ 106.694204][ C0] ieee80211_beacon_get_tim+0x63/0x4e0 [ 106.699706][ C0] mac80211_hwsim_beacon_tx+0x21c/0xae0 [ 106.705327][ C0] __iterate_interfaces+0x225/0x4c0 [ 106.710562][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 106.716869][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170 [ 106.724132][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 106.730401][ C0] ieee80211_iterate_active_interfaces_atomic+0xd7/0x170 [ 106.737495][ C0] mac80211_hwsim_beacon+0xb7/0x1b0 [ 106.742772][ C0] __hrtimer_run_queues+0x522/0xc90 [ 106.748013][ C0] ? hw_scan_work+0xf00/0xf00 [ 106.752767][ C0] ? hrtimer_interrupt+0x980/0x980 [ 106.757921][ C0] hrtimer_run_softirq+0x173/0x290 [ 106.763099][ C0] handle_softirqs+0x291/0x910 [ 106.767901][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 106.772816][ C0] ? do_softirq+0x210/0x210 [ 106.777350][ C0] ? hrtimer_interrupt+0x775/0x980 [ 106.782524][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 106.787775][ C0] __irq_exit_rcu+0x13b/0x230 [ 106.792514][ C0] ? irq_exit_rcu+0x20/0x20 [ 106.797057][ C0] irq_exit_rcu+0x5/0x20 [ 106.801373][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 106.807040][ C0] [ 106.809993][ C0] [ 106.813001][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 106.819017][ C0] RIP: 0010:default_idle+0xb/0x10 [ 106.824109][ C0] Code: 48 89 df e8 97 77 98 f7 e9 44 ff ff ff e8 ed 03 f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 66 90 0f 00 2d 87 b3 4b 00 fb f4 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48 [ 106.843792][ C0] RSP: 0018:ffffffff8c807d88 EFLAGS: 000002c6 [ 106.845869][ T4775] sched: RT throttling activated [ 106.845917][ T32] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 106.849879][ C0] RAX: ae253783f50f7000 RBX: ffffffff8a3af887 RCX: ae253783f50f7000 [ 106.870380][ C0] RDX: 0000000000000001 RSI: ffffffff8a8c1820 RDI: ffffffff8adf6220 [ 106.878417][ C0] RBP: ffffffff8c807ec0 R08: ffff8880b8e357cb R09: 1ffff110171c6af9 [ 106.886463][ C0] R10: dffffc0000000000 R11: ffffed10171c6afa R12: 0000000000000000 [ 106.894584][ C0] R13: dffffc0000000000 R14: ffffffff8c8bc740 R15: 1ffffffff1900fbc [ 106.902650][ C0] ? default_idle_call+0x77/0xc0 [ 106.907646][ C0] default_idle_call+0x84/0xc0 [ 106.912485][ C0] do_idle+0x250/0x680 [ 106.916609][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 106.921871][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 106.927101][ C0] ? asm_sysvec_error_interrupt+0x11/0x20 [ 106.932906][ C0] ? schedule_idle+0x57/0x90 [ 106.937540][ C0] cpu_startup_entry+0x3f/0x60 [ 106.942367][ C0] rest_init+0x2dc/0x300 [ 106.946651][ C0] ? time_init+0x33/0x33 [ 106.950969][ C0] arch_call_rest_init+0xa/0xa [ 106.955770][ C0] start_kernel+0x493/0x53c [ 106.960312][ C0] secondary_startup_64_no_verify+0xcf/0xdb [ 106.966302][ C0] [ 106.969347][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 106.976646][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 [ 106.983689][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 106.993786][ C0] Call Trace: [ 106.997085][ C0] [ 106.999952][ C0] dump_stack_lvl+0x188/0x24e [ 107.004662][ C0] ? memcpy+0x3c/0x60 [ 107.008669][ C0] ? show_regs_print_info+0x12/0x12 [ 107.013898][ C0] ? load_image+0x410/0x410 [ 107.018465][ C0] panic+0x2d3/0x710 [ 107.022416][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 107.026973][ C0] ? secondary_startup_64_no_verify+0xcf/0xdb [ 107.033079][ C0] __warn+0x2f8/0x4f0 [ 107.037092][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 107.042843][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 107.048590][ C0] report_bug+0x2ba/0x4f0 [ 107.052955][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 107.058703][ C0] handle_bug+0x3a/0x70 [ 107.062894][ C0] exc_invalid_op+0x16/0x40 [ 107.067429][ C0] asm_exc_invalid_op+0x16/0x20 [ 107.072314][ C0] RIP: 0010:__ieee80211_beacon_get+0x1141/0x1520 [ 107.079116][ C0] Code: f7 4c 89 ef e8 70 a6 06 f8 45 31 ed 4c 8b bc 24 a0 00 00 00 e9 7f fe ff ff e8 9b f9 cd f7 0f 0b e9 61 f8 ff ff e8 8f f9 cd f7 <0f> 0b e9 85 fb ff ff e8 83 f9 cd f7 48 c7 c7 00 06 fc 8d 4c 89 e6 [ 107.098760][ C0] RSP: 0018:ffffc90000007a48 EFLAGS: 00010246 [ 107.105514][ C0] RAX: ffffffff89b43801 RBX: dffffc0000000000 RCX: ffffffff8c8bc740 [ 107.113523][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 107.121530][ C0] RBP: 0000000000000000 R08: ffffffff8c8bc740 R09: 0000000000000003 [ 107.129527][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88807be62228 [ 107.137520][ C0] R13: ffff88805596f024 R14: ffff88807be62760 R15: ffff88805596f000 [ 107.145537][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 107.151305][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 107.157081][ C0] ? __ieee80211_beacon_get+0x36/0x1520 [ 107.162665][ C0] ieee80211_beacon_get_tim+0x63/0x4e0 [ 107.168158][ C0] mac80211_hwsim_beacon_tx+0x21c/0xae0 [ 107.173743][ C0] __iterate_interfaces+0x225/0x4c0 [ 107.178974][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 107.185244][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170 [ 107.192478][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 107.198746][ C0] ieee80211_iterate_active_interfaces_atomic+0xd7/0x170 [ 107.205807][ C0] mac80211_hwsim_beacon+0xb7/0x1b0 [ 107.211043][ C0] __hrtimer_run_queues+0x522/0xc90 [ 107.216281][ C0] ? hw_scan_work+0xf00/0xf00 [ 107.221017][ C0] ? hrtimer_interrupt+0x980/0x980 [ 107.226193][ C0] hrtimer_run_softirq+0x173/0x290 [ 107.231357][ C0] handle_softirqs+0x291/0x910 [ 107.236153][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 107.241039][ C0] ? do_softirq+0x210/0x210 [ 107.245565][ C0] ? hrtimer_interrupt+0x775/0x980 [ 107.250728][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 107.255953][ C0] __irq_exit_rcu+0x13b/0x230 [ 107.260653][ C0] ? irq_exit_rcu+0x20/0x20 [ 107.265191][ C0] irq_exit_rcu+0x5/0x20 [ 107.270080][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 107.275767][ C0] [ 107.278727][ C0] [ 107.281684][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 107.287723][ C0] RIP: 0010:default_idle+0xb/0x10 [ 107.292791][ C0] Code: 48 89 df e8 97 77 98 f7 e9 44 ff ff ff e8 ed 03 f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 66 90 0f 00 2d 87 b3 4b 00 fb f4 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48 [ 107.312433][ C0] RSP: 0018:ffffffff8c807d88 EFLAGS: 000002c6 [ 107.318533][ C0] RAX: ae253783f50f7000 RBX: ffffffff8a3af887 RCX: ae253783f50f7000 [ 107.326530][ C0] RDX: 0000000000000001 RSI: ffffffff8a8c1820 RDI: ffffffff8adf6220 [ 107.334521][ C0] RBP: ffffffff8c807ec0 R08: ffff8880b8e357cb R09: 1ffff110171c6af9 [ 107.342511][ C0] R10: dffffc0000000000 R11: ffffed10171c6afa R12: 0000000000000000 [ 107.350505][ C0] R13: dffffc0000000000 R14: ffffffff8c8bc740 R15: 1ffffffff1900fbc [ 107.358506][ C0] ? default_idle_call+0x77/0xc0 [ 107.363493][ C0] default_idle_call+0x84/0xc0 [ 107.368283][ C0] do_idle+0x250/0x680 [ 107.372394][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 107.377621][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 107.382852][ C0] ? asm_sysvec_error_interrupt+0x11/0x20 [ 107.388608][ C0] ? schedule_idle+0x57/0x90 [ 107.393231][ C0] cpu_startup_entry+0x3f/0x60 [ 107.398030][ C0] rest_init+0x2dc/0x300 [ 107.402300][ C0] ? time_init+0x33/0x33 [ 107.406571][ C0] arch_call_rest_init+0xa/0xa [ 107.411368][ C0] start_kernel+0x493/0x53c [ 107.415921][ C0] secondary_startup_64_no_verify+0xcf/0xdb [ 107.421867][ C0] [ 107.425049][ C0] Kernel Offset: disabled [ 107.429401][ C0] Rebooting in 86400 seconds..