last executing test programs: 13.058368514s ago: executing program 5 (id=53): syz_usb_connect(0x0, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000402e0c20070001000000010902190001010080320904000001ff0000000705810340000a"], 0x0) nanosleep(&(0x7f0000000100)={0x0, 0x5f5e100}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys_mnt\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys_mnt/bus/usb-serial/drivers/metro-usb\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys_mnt/bus/usb-serial/devices/ttyUSB0\x00', 0x0, 0x0) 11.65662346s ago: executing program 5 (id=64): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newtfilter={0x38, 0x2c, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x1, 0x1}}]}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)=@deltfilter={0x38, 0x2c, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x1, 0x1}}]}}]}, 0x38}}, 0x0) 11.490640898s ago: executing program 5 (id=68): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP={0x0, 0x0, 0x2, 0x0, 0x3, {0x0, 0x10}}, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) 11.0012006s ago: executing program 1 (id=71): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000020)) r1 = syz_open_pts(r0, 0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl(r1, 0x400455c8, 0x0) nanosleep(&(0x7f0000000200)={0x0, 0x2faf080}, 0x0) write(r0, &(0x7f0000000100)="040e0401030c01040e0401031001", 0xe) nanosleep(&(0x7f0000000200)={0x0, 0xbebc200}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448c9, 0x0) 10.171687093s ago: executing program 3 (id=81): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_batadv\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r1}, 0x14) sendto$packet(r0, &(0x7f0000000200)="ffffffffffff0200000000014305000f32000000000102000000000102000000000100ff00100201000c000200010000000000000000", 0x36, 0x0, &(0x7f0000000100)={0x11, 0x0, r1}, 0x14) sendto$packet(r0, &(0x7f0000000200)="ffffffffffff0200000000014305000f32000000000102000000000102000000000100ff00100201000c000200010000000000000000", 0x36, 0x0, &(0x7f0000000100)={0x11, 0x0, r1}, 0x14) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) 9.872537005s ago: executing program 3 (id=83): unshare(0x40000000) nanosleep(&(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) unshare(0x40000000) nanosleep(&(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) unshare(0x40000000) nanosleep(&(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) 9.820264189s ago: executing program 1 (id=84): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000020)) r1 = syz_open_pts(r0, 0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl(r1, 0x400455c8, 0x0) write(r0, &(0x7f0000000100)="040e0401030c01040e0401031001", 0xe) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448c9, 0x0) ioctl$sock_bt_hci(r2, 0x400448ca, 0x0) 8.718602712s ago: executing program 1 (id=91): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/kernel/mm/lru_gen/enabled\x00', 0x2, 0x0) write(r0, &(0x7f0000000140), 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/kernel/mm/transparent_hugepage/enabled\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='al', 0x2) mmap(&(0x7f0000800000/0x400000)=nil, 0x400000, 0x3, 0x32, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000800000/0x400000)=nil, 0x400000, 0xe) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/lru_gen\x00', 0x2, 0x0) write(r2, &(0x7f00000002c0)='+ 1 0 3', 0x7) write(r2, 0x0, 0x0) write(r2, &(0x7f00000003c0)='+ 1 0 ', 0x6) write(r2, &(0x7f0000000440)='+ 0 0 1 1 0\n', 0xc) write(r2, &(0x7f0000000500)='+ 0 0 4 1 0\n', 0xc) write(r2, &(0x7f0000000640)='+ 1 0 4 60 0\n', 0xd) write(r2, &(0x7f0000000680)='+ 1 0 5 60 0\n', 0xd) 8.117584404s ago: executing program 5 (id=94): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='20000\n\x00', 0x6) close(r0) 7.71577342s ago: executing program 0 (id=97): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000100), 0x0}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) sendmsg$nl_route(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/class/net/syz_tun/brport/multicast_fast_leave\x00', 0x1, 0x0) write(r2, &(0x7f00000005c0)='1', 0x1) 7.518469346s ago: executing program 5 (id=99): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='-2\n', 0x3) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/versions\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='-3\n', 0x3) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/portlist\x00', 0x2, 0x0) write(r2, &(0x7f0000000200)='tcp 2049\n', 0x9) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./nfsd/threads\x00', 0x2, 0x0) write(r3, &(0x7f0000000280)='1\n', 0x2) close(r3) 7.458211932s ago: executing program 0 (id=100): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)='hello world\n', 0xc) close(r0) 7.290096556s ago: executing program 1 (id=101): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='none\x00', &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/threads\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='1\n', 0x2) 6.500376715s ago: executing program 4 (id=103): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x0, 0x0, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x70}}, 0x0) 6.370887731s ago: executing program 4 (id=104): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x80, @any, 0x0, 0x1}, 0x10) setsockopt(r0, 0x112, 0xf, &(0x7f0000000020)="03", 0x1) listen(r0, 0x5) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_ecred_conn_req={{0x17, 0x42, 0xa}, {0x80, 0x200, 0x200, 0xa, [0x40]}}}}, 0x17) 5.930301315s ago: executing program 3 (id=105): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000001, 0x13, r0, 0x8cee000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x7, 0x11, 0x0, @empty=0x18, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) sendmmsg$inet(r1, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000004c0)="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", 0xfe0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="8b", 0x1}], 0x1}}], 0x2, 0x4001) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000c54000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x40) 5.79442871s ago: executing program 3 (id=106): mkdir(&(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) mkdir(&(0x7f0000000080)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000120)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000130)='-2 -3 +4\n\x00', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='tcp 2049\n\x00', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='nfsd 127.0.0.1 2147483647 localhost\n\x00', 0x24) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r3, &(0x7f0000000300)='localhost / 2147483647 8193 0 0 0\n\x00', 0x22) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/threads\x00', 0x2, 0x0) write(r4, &(0x7f0000000200)='1\n\x00', 0x2) close(r4) 5.774759946s ago: executing program 0 (id=108): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='tcp 2049\n', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='4\n', 0x2) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)='nfsd 127.0.0.1 2147483647 localhost\n', 0x24) write(r2, &(0x7f0000000280)='nfsd 127.0.0.2 2147483647 localhost\n', 0x24) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r3, &(0x7f0000000300)='localhost / 2147483647 8192 65534 65534 0\n', 0x2a) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt1\x00', 0x1ff) mount$nfs4(&(0x7f0000000440)='127.0.0.1:/\x00', &(0x7f0000000400)='./mnt1\x00', &(0x7f0000000480), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='addr=127.0.0.1,port=2049,proto=tcp,vers=4.1,clientaddr=127.0.0.1,nconnect=2\x00']) statx(0xffffffffffffff9c, &(0x7f0000000500)='./mnt1\x00', 0x0, 0x7ff, &(0x7f0000000540)) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt2\x00', 0x1ff) mount$nfs4(&(0x7f0000000640)='127.0.0.2:/\x00', &(0x7f0000000600)='./mnt2\x00', &(0x7f0000000680), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='addr=127.0.0.2,port=2049,proto=tcp,vers=4.1,clientaddr=127.0.0.1\x00']) 5.681800536s ago: executing program 4 (id=109): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='-2 -3 +4\n', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='tcp 2049\n', 0x9) close(r1) 5.346708814s ago: executing program 1 (id=110): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='-2 -3 +4\n', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/threads\x00', 0x1, 0x0) write(r1, &(0x7f0000000500)='1\n', 0x2) 3.963893466s ago: executing program 5 (id=111): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./debug\x00', &(0x7f0000000400)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='100 1 1\x00', 0x7) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./debug/netdevsim/netdevsim100/take_snapshot\x00', 0x1, 0x0) write(r1, &(0x7f0000000800)='1\x00', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/bus/netdevsim/del_device\x00', 0x1, 0x0) write(r2, &(0x7f0000000a00)='100\x00', 0x4) close(r2) 3.90437258s ago: executing program 2 (id=112): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000100), 0x0}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) sendmsg$nl_route(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/class/net/syz_tun/brport/multicast_fast_leave\x00', 0x1, 0x0) write(r2, &(0x7f00000005c0)='1', 0x1) 3.876483077s ago: executing program 4 (id=113): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/kernel/mm/lru_gen/enabled\x00', 0x2, 0x0) write(r0, &(0x7f0000000140), 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/kernel/mm/transparent_hugepage/enabled\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='al', 0x2) mmap(&(0x7f0000800000/0x400000)=nil, 0x400000, 0x3, 0x32, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000800000/0x400000)=nil, 0x400000, 0xe) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/lru_gen\x00', 0x2, 0x0) write(r2, &(0x7f00000002c0)='+ 1 0 3', 0x7) write(r2, 0x0, 0x0) write(r2, &(0x7f00000003c0)='+ 1 0 ', 0x6) write(r2, &(0x7f0000000440)='+ 0 0 1 1 0\n', 0xc) write(r2, &(0x7f0000000500)='+ 0 0 4 1 0\n', 0xc) write(r2, &(0x7f0000000640)='+ 1 0 4 60 0\n', 0xd) write(r2, &(0x7f0000000680)='+ 1 0 5 60 0\n', 0xd) 3.783097974s ago: executing program 2 (id=114): syz_usb_connect(0x0, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000402e0c20070001000000010902190001010080320904000001ff0000000705810340000a"], 0x0) nanosleep(&(0x7f0000000100)={0x0, 0x5f5e100}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys_mnt\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys_mnt/bus/usb-serial/devices/ttyUSB0/dev\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/64, 0x40) 2.557097014s ago: executing program 2 (id=115): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x188, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0xa8, 0xf0, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x7fffffff}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) syz_emit_ethernet(0x2a, &(0x7f0000000e80)={@link_local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x2, 0x0, 0xfe, 0x11, 0x0, @local, @multicast1}, {0x0, 0x4e22, 0x8}}}}}, 0x0) sendto$inet(r0, &(0x7f0000000100)='BB', 0x2, 0x0, &(0x7f0000000200)={0x2, 0x1234, @local}, 0x10) 2.473888598s ago: executing program 2 (id=116): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/devices/0000:00:00.0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:01.0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/pci/devices/0000:00:1f.0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:1f.3\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x1, 0x0) 2.440581445s ago: executing program 3 (id=117): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newtfilter={0x50, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff3, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x10, 0x4, 0x0, 0x1, [@TCF_EM_META]}]}]}}]}, 0x50}}, 0x0) 2.274442266s ago: executing program 2 (id=118): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@setlink={0x28, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r1}]}, 0x28}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'syz_tun\x00', 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/net/bridge0/bridge/multicast_igmp_version\x00', 0x2, 0x0) write(r3, &(0x7f0000000300)='3', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/net/bridge0/brif/syz_tun/multicast_fast_leave\x00', 0x2, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000600)=ANY=[@ANYBLOB="01005e000016020000000001080046000030000040000102fa4d0a000064e0000016940400002200d6f40000000102000002ef0102030a0000020a000001"], 0x0) 2.234134244s ago: executing program 2 (id=119): unshare(0x40000000) nanosleep(&(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) unshare(0x40000000) nanosleep(&(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) unshare(0x40000000) nanosleep(&(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) 2.090368467s ago: executing program 0 (id=120): nanosleep(&(0x7f0000000100)={0x0, 0x1dcd6500}, 0x0) nanosleep(&(0x7f0000000100)={0x0, 0x1dcd6500}, 0x0) nanosleep(&(0x7f0000000100)={0x0, 0x1dcd6500}, 0x0) nanosleep(&(0x7f0000000100)={0x0, 0x1dcd6500}, 0x0) nanosleep(&(0x7f0000000100)={0x0, 0x1dcd6500}, 0x0) nanosleep(&(0x7f0000000100)={0x0, 0x1dcd6500}, 0x0) 1.768044573s ago: executing program 3 (id=121): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffbfff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040080) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x8c, 0x2c, 0xd27, 0x170bd2c, 0x2002, {0x0, 0x0, 0x0, r6, {0xb, 0x8}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x5c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0xfb55}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x5, 0xfffffffffffffff7, 0x81, 0x7ff}, 0x46}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x814}, 0x20000080) close(r4) socket(0x40000000015, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000006c0)={&(0x7f0000000440)=@xdp={0x2c, 0x0, r6, 0x10042}, 0x80, &(0x7f0000004600)=[{&(0x7f00000003c0)="27030200dc0f14000e0003000024c1020000ff", 0x13}, {&(0x7f0000000580)="88db0b9ef1cafdab", 0xa888}, {&(0x7f0000000000)="f8dbb89bfc5f187cca4335143b54aedd2c3332", 0x13}], 0x3}, 0x24004015) 1.358003194s ago: executing program 1 (id=122): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/cfg80211/parameters/bss_entries_limit\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='1\n', 0x2) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000003540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000080)={0x54, r2, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x35, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, {0xe}, @broadcast, @device_a, @random="2668e8a3b755", {0x8, 0x6}}, 0x1, @random=0x5, 0x7683, @void, @void, @void, @val={0x4, 0x6, {0x2, 0x7, 0x2, 0x8337}}, @void, @val={0x5, 0x3, {0xf1, 0xff, 0x1}}, @void, @void, @void, @void, @void, @void, @void}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040040}, 0x8800) nanosleep(&(0x7f0000000800)={0x0, 0x2faf080}, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000003800)={&(0x7f0000000880)={0x54, r2, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x35, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, {0xe}, @broadcast, @device_b, @random="2668e8a3b756", {0x8, 0x6}}, 0x1, @random=0x5, 0x7683, @void, @void, @void, @val={0x4, 0x6, {0x2, 0x7, 0x2, 0x8337}}, @void, @val={0x5, 0x3, {0xf1, 0xff, 0x1}}, @void, @void, @void, @void, @void, @void, @void}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040040}, 0x8800) nanosleep(&(0x7f0000000800)={0x0, 0x2faf080}, 0x0) 1.218548762s ago: executing program 4 (id=123): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='md0\x00', 0x4) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./img\x00', 0x42, 0x1b6) ftruncate(r1, 0x2000000) pwrite64(r1, &(0x7f0000000280)="6269746d04000000001000000500000000000000", 0x14, 0x1000) r2 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x2) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) ioctl(r3, 0x40480923, &(0x7f0000000400)="000000000000000000000000000000000100000000040000010000000100000000000000010000000000000000000000010000000100"/72) ioctl(r3, 0x40140921, &(0x7f0000000500)="0000000007000000000000000000000006000000") ioctl(r3, 0x400c0930, &(0x7f0000000700)='\x00'/12) r4 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/block/md0/md/dev-loop0/offset\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./offset_val\x00', 0x42, 0x1ff) sendfile(r5, r4, 0x0, 0x20) r6 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./offset_val\x00', 0x2, 0x0) pwrite64(r6, &(0x7f0000000900)='\x00', 0x1, 0x1) 861.646235ms ago: executing program 4 (id=124): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='250', 0x3) unshare(0x40000000) 432.472303ms ago: executing program 0 (id=125): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='md0\x00', 0x4) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./img\x00', 0x42, 0x1b6) ftruncate(r1, 0x2000000) pwrite64(r1, &(0x7f0000000280)="6269746d04000000001000000500000000000000", 0x14, 0x1000) r2 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x2) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) ioctl(r3, 0x40480923, &(0x7f0000000400)="000000000000000000000000000000000100000000040000010000000100000000000000010000000000000000000000010000000100"/72) ioctl(r3, 0x40140921, &(0x7f0000000500)="0000000007000000000000000000000006000000") r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/block/md0/md/dev-loop0/offset\x00', 0x2, 0x0) write(r4, &(0x7f0000000700)='16\x00', 0x3) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/block/md0/md/dev-loop0/size\x00', 0x2, 0x0) write(r5, &(0x7f0000000840)='65500\x00', 0x6) close(r5) ioctl(r3, 0x400c0930, &(0x7f0000000700)='\x00'/12) r6 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/block/md0/md/bitmap/location\x00', 0x2, 0x0) write(r6, &(0x7f0000000940)='8\x00', 0x2) close(r6) 0s ago: executing program 0 (id=126): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@dellink={0x34, 0x11, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}]}, 0x34}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.24' (ED25519) to the list of known hosts. [ 90.332286][ T5595] cgroup: Unknown subsys name 'net' [ 90.444069][ T5595] cgroup: Unknown subsys name 'cpuset' [ 90.450860][ T5595] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 91.631881][ T10] cfg80211: failed to load regulatory.db [ 92.138858][ T5595] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 94.848017][ T5615] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 94.856590][ T5615] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 94.866285][ T5615] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 94.879571][ T5615] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 94.883225][ T5615] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 94.956115][ T5622] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 94.957851][ T5622] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 94.970876][ T5624] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 94.976811][ T5624] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 94.984662][ T5626] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 94.992351][ T5626] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 95.008220][ T5624] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 95.008470][ T5626] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 95.012526][ T5626] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 95.013311][ T5626] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 95.015157][ T5624] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 95.016568][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 95.017548][ T5624] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 95.019971][ T5624] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 95.021583][ T5615] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 95.105986][ T5624] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 95.118936][ T5624] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 95.119596][ T5624] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 95.126036][ T5624] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 95.152399][ T5624] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 95.199759][ T5624] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 95.204135][ T5624] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 95.205049][ T5624] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 95.207673][ T5624] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 95.224950][ T5624] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 96.989636][ T4924] Bluetooth: hci0: command tx timeout [ 97.068690][ T4924] Bluetooth: hci1: command tx timeout [ 97.148967][ T5624] Bluetooth: hci2: command tx timeout [ 97.149195][ T4924] Bluetooth: hci3: command tx timeout [ 97.228612][ T4924] Bluetooth: hci4: command tx timeout [ 97.308499][ T4924] Bluetooth: hci5: command tx timeout [ 97.539741][ T5621] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.541200][ T5621] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.541402][ T5621] bridge_slave_0: entered allmulticast mode [ 97.544237][ T5621] bridge_slave_0: entered promiscuous mode [ 97.642330][ T5621] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.642561][ T5621] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.642744][ T5621] bridge_slave_1: entered allmulticast mode [ 97.645374][ T5621] bridge_slave_1: entered promiscuous mode [ 97.819824][ T5621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.876309][ T5621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.959682][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.959925][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.960053][ T5614] bridge_slave_0: entered allmulticast mode [ 97.961803][ T5614] bridge_slave_0: entered promiscuous mode [ 97.983637][ T5619] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.983768][ T5619] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.983914][ T5619] bridge_slave_0: entered allmulticast mode [ 97.986409][ T5619] bridge_slave_0: entered promiscuous mode [ 98.062846][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.063002][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.063506][ T5614] bridge_slave_1: entered allmulticast mode [ 98.067259][ T5614] bridge_slave_1: entered promiscuous mode [ 98.095366][ T5619] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.095484][ T5619] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.095937][ T5619] bridge_slave_1: entered allmulticast mode [ 98.097749][ T5619] bridge_slave_1: entered promiscuous mode [ 98.121301][ T5620] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.121414][ T5620] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.121549][ T5620] bridge_slave_0: entered allmulticast mode [ 98.123618][ T5620] bridge_slave_0: entered promiscuous mode [ 98.159130][ T5621] team0: Port device team_slave_0 added [ 98.160160][ T5633] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.160361][ T5633] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.160521][ T5633] bridge_slave_0: entered allmulticast mode [ 98.162375][ T5633] bridge_slave_0: entered promiscuous mode [ 98.208253][ T5620] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.215968][ T5620] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.216146][ T5620] bridge_slave_1: entered allmulticast mode [ 98.217793][ T5620] bridge_slave_1: entered promiscuous mode [ 98.247419][ T5621] team0: Port device team_slave_1 added [ 98.247646][ T5633] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.247736][ T5633] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.247853][ T5633] bridge_slave_1: entered allmulticast mode [ 98.251383][ T5633] bridge_slave_1: entered promiscuous mode [ 98.355314][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.375004][ T5619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.389474][ T5620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.422453][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.450535][ T5619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.453304][ T5620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.454513][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.454530][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.454558][ T5621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.461355][ T5633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.481593][ T5630] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.481725][ T5630] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.481875][ T5630] bridge_slave_0: entered allmulticast mode [ 98.484313][ T5630] bridge_slave_0: entered promiscuous mode [ 98.523451][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.523476][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.523508][ T5621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.530010][ T5633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.548571][ T5630] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.548702][ T5630] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.549224][ T5630] bridge_slave_1: entered allmulticast mode [ 98.556508][ T5630] bridge_slave_1: entered promiscuous mode [ 98.653348][ T5614] team0: Port device team_slave_0 added [ 98.672647][ T5619] team0: Port device team_slave_0 added [ 98.674981][ T5620] team0: Port device team_slave_0 added [ 98.696452][ T5614] team0: Port device team_slave_1 added [ 98.714739][ T5619] team0: Port device team_slave_1 added [ 98.717009][ T5620] team0: Port device team_slave_1 added [ 98.737497][ T5633] team0: Port device team_slave_0 added [ 98.756296][ T5630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.802032][ T5633] team0: Port device team_slave_1 added [ 98.823531][ T5630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.854855][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.854881][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.854913][ T5620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.872735][ T5621] hsr_slave_0: entered promiscuous mode [ 98.874529][ T5621] hsr_slave_1: entered promiscuous mode [ 98.895252][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.895274][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.895304][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.899738][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.899755][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.899785][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.956907][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.956931][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.956962][ T5619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.963741][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.963759][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.963790][ T5620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.002614][ T5630] team0: Port device team_slave_0 added [ 99.004552][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.004570][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.004601][ T5619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.035778][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.035802][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.035833][ T5633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.047231][ T5630] team0: Port device team_slave_1 added [ 99.088507][ T4924] Bluetooth: hci0: command tx timeout [ 99.096927][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.096946][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.096978][ T5633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.153446][ T4924] Bluetooth: hci1: command tx timeout [ 99.235016][ T4924] Bluetooth: hci3: command tx timeout [ 99.235082][ T4924] Bluetooth: hci2: command tx timeout [ 99.308450][ T4924] Bluetooth: hci4: command tx timeout [ 99.316134][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.316152][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.316181][ T5630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.388556][ T4924] Bluetooth: hci5: command tx timeout [ 99.390912][ T5614] hsr_slave_0: entered promiscuous mode [ 99.391835][ T5614] hsr_slave_1: entered promiscuous mode [ 99.392506][ T5614] debugfs: 'hsr0' already exists in 'hsr' [ 99.392598][ T5614] Cannot create hsr debugfs directory [ 99.393617][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.393634][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.393665][ T5630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.413235][ T5619] hsr_slave_0: entered promiscuous mode [ 99.414922][ T5619] hsr_slave_1: entered promiscuous mode [ 99.415896][ T5619] debugfs: 'hsr0' already exists in 'hsr' [ 99.415920][ T5619] Cannot create hsr debugfs directory [ 99.426812][ T5620] hsr_slave_0: entered promiscuous mode [ 99.428054][ T5620] hsr_slave_1: entered promiscuous mode [ 99.429894][ T5620] debugfs: 'hsr0' already exists in 'hsr' [ 99.429917][ T5620] Cannot create hsr debugfs directory [ 99.515003][ T5633] hsr_slave_0: entered promiscuous mode [ 99.516201][ T5633] hsr_slave_1: entered promiscuous mode [ 99.517011][ T5633] debugfs: 'hsr0' already exists in 'hsr' [ 99.517033][ T5633] Cannot create hsr debugfs directory [ 99.804986][ T5630] hsr_slave_0: entered promiscuous mode [ 99.805926][ T5630] hsr_slave_1: entered promiscuous mode [ 99.806583][ T5630] debugfs: 'hsr0' already exists in 'hsr' [ 99.806613][ T5630] Cannot create hsr debugfs directory [ 100.341984][ T5621] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 100.350258][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 100.351487][ T5621] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 100.363622][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 100.366914][ T5621] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 100.383658][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 100.387751][ T5621] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 100.400490][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 100.484721][ T5633] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 100.497026][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 100.510240][ T5633] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 100.516475][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 100.517483][ T5633] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 100.536858][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 100.558554][ T5633] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 100.564096][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 100.688188][ T5619] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 100.694571][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 100.695555][ T5619] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 100.703006][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 100.722757][ T5619] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 100.728148][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 100.742052][ T5619] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 100.748204][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 100.845658][ T5621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.889409][ T5614] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 100.893548][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 100.896025][ T5614] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 100.910296][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 100.916512][ T5621] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.945233][ T5614] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 100.956744][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 100.967763][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.967902][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.987842][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.987940][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.016393][ T5614] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 101.025675][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 101.159876][ T4924] Bluetooth: hci0: command tx timeout [ 101.163325][ T5620] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 101.168285][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 101.171051][ T5620] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 101.181016][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 101.183846][ T5620] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 101.201706][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 101.204581][ T5620] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 101.218208][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 101.240638][ T4924] Bluetooth: hci1: command tx timeout [ 101.309123][ T4924] Bluetooth: hci3: command tx timeout [ 101.309168][ T4924] Bluetooth: hci2: command tx timeout [ 101.324205][ T5633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.388538][ T5624] Bluetooth: hci4: command tx timeout [ 101.468736][ T5624] Bluetooth: hci5: command tx timeout [ 101.476301][ T5633] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.501160][ T5619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.532771][ T5630] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 101.542077][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 101.543118][ T5630] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 101.552081][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 101.554725][ T5630] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 101.561743][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 101.604921][ T5630] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 101.612845][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 101.623230][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.623352][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.626776][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.626909][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.695886][ T5619] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.757333][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.757425][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.807438][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.807600][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.947908][ T5620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.009312][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.094686][ T5620] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.147670][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.172724][ T1094] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.172870][ T1094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.218190][ T1094] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.218313][ T1094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.227274][ T1094] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.227491][ T1094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.247688][ T5621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.303687][ T1094] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.303819][ T1094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.417200][ T5630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.595743][ T5614] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 102.626215][ T5630] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.724043][ T975] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.724181][ T975] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.771857][ T5621] veth0_vlan: entered promiscuous mode [ 102.797681][ T975] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.797801][ T975] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.869678][ T5621] veth1_vlan: entered promiscuous mode [ 103.184641][ T5621] veth0_macvtap: entered promiscuous mode [ 103.223771][ T5621] veth1_macvtap: entered promiscuous mode [ 103.231694][ T5624] Bluetooth: hci0: command tx timeout [ 103.310156][ T5624] Bluetooth: hci1: command tx timeout [ 103.371585][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.389121][ T5624] Bluetooth: hci2: command tx timeout [ 103.389159][ T5624] Bluetooth: hci3: command tx timeout [ 103.462604][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.480565][ T4924] Bluetooth: hci4: command tx timeout [ 103.532428][ T5633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.549823][ T4924] Bluetooth: hci5: command tx timeout [ 103.590552][ T5806] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.593096][ T37] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.593306][ T37] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.594338][ T37] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.837117][ T5619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.048025][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.048051][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.133709][ T5633] veth0_vlan: entered promiscuous mode [ 104.183861][ T1094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.183890][ T1094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.203178][ T5620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.227782][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.261703][ T5633] veth1_vlan: entered promiscuous mode [ 104.326147][ T5621] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 104.372168][ T5619] veth0_vlan: entered promiscuous mode [ 104.475273][ T5619] veth1_vlan: entered promiscuous mode [ 104.533581][ T5633] veth0_macvtap: entered promiscuous mode [ 104.606699][ T5630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.660363][ T5633] veth1_macvtap: entered promiscuous mode [ 104.683457][ T5614] veth0_vlan: entered promiscuous mode [ 104.699446][ T5621] svc: failed to register nfsdv3 RPC service (errno 111). [ 104.716771][ T5621] svc: failed to register nfsaclv3 RPC service (errno 111). [ 104.716795][ T5621] failed to unregister tcp with rpcbind [ 104.717382][ T5621] svc: failed to register nfsdv3 RPC service (errno 97). [ 104.717407][ T5621] svc: failed to register nfsaclv3 RPC service (errno 97). [ 104.717424][ T5621] failed to unregister tcp with rpcbind [ 104.832607][ T5614] veth1_vlan: entered promiscuous mode [ 104.882547][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.946217][ T5619] veth0_macvtap: entered promiscuous mode [ 104.963058][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.010951][ T5619] veth1_macvtap: entered promiscuous mode [ 105.108578][ T1094] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.108642][ T1094] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.108689][ T1094] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.108734][ T1094] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.193658][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.230463][ T5614] veth0_macvtap: entered promiscuous mode [ 105.277941][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.286052][ T5614] veth1_macvtap: entered promiscuous mode [ 105.467673][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.477933][ T1094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.477956][ T1094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.532702][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.599695][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.606719][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.606741][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.608051][ T5620] veth0_vlan: entered promiscuous mode [ 105.635366][ T5746] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 105.685059][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.685087][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.776489][ T5620] veth1_vlan: entered promiscuous mode [ 105.785372][ T5630] veth0_vlan: entered promiscuous mode [ 105.793045][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.793075][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.818705][ T5746] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9170, bcdDevice= 1.08 [ 105.855357][ T5746] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.855404][ T5746] usb 1-1: Product: syz [ 105.855421][ T5746] usb 1-1: Manufacturer: syz [ 105.855438][ T5746] usb 1-1: SerialNumber: syz [ 105.879260][ T1094] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.879354][ T1094] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.879399][ T1094] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.879443][ T1094] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.879488][ T1094] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.879532][ T1094] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.879576][ T1094] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.880550][ T5630] veth1_vlan: entered promiscuous mode [ 106.058182][ T5620] veth0_macvtap: entered promiscuous mode [ 106.093585][ T5620] veth1_macvtap: entered promiscuous mode [ 106.094395][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.094417][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.138740][ T5746] usb 1-1: reset high-speed USB device number 2 using dummy_hcd [ 106.332590][ T5630] veth0_macvtap: entered promiscuous mode [ 106.356053][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.356079][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.356228][ T5630] veth1_macvtap: entered promiscuous mode [ 106.372382][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.389996][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.440567][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.479545][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.600253][ T1094] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.600385][ T1094] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.600436][ T1094] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.600484][ T1094] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.600531][ T1094] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.600578][ T1094] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.600621][ T1094] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.600658][ T1094] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.754170][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.754199][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.867709][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.867737][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.060895][ T187] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 107.066432][ T187] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 107.119241][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.119300][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.324500][ T5596] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 107.370026][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.370923][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.448511][ T5858] NFSD: Unable to initialize client recovery tracking! (-110) [ 107.448537][ T5858] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 107.448549][ T5858] NFSD: starting 90-second grace period (net f000047c) [ 107.809610][ T5863] ceph: No mds server is up or the cluster is laggy [ 107.829913][ T5596] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 108.202675][ T5746] usb 1-1: USB disconnect, device number 2 [ 108.550800][ T5746] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 108.712240][ T5908] ip_tables: iptables: counters copy to user failed while replacing table [ 109.006528][ T5913] can0: slcan on pts0. [ 109.059693][ T5748] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 109.090193][ T5912] can0 (unregistered): slcan off pts0. [ 109.208918][ T5748] usb 5-1: Using ep0 maxpacket: 32 [ 109.209742][ T5748] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 109.217370][ T5748] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 109.217402][ T5748] usb 5-1: config 0 has no interface number 0 [ 109.249193][ T5748] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.249229][ T5748] usb 5-1: Product: syz [ 109.249248][ T5748] usb 5-1: Manufacturer: syz [ 109.249265][ T5748] usb 5-1: SerialNumber: syz [ 109.302871][ T5748] usb 5-1: config 0 descriptor?? [ 109.337695][ T5748] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 109.337731][ T5748] usb 5-1: selecting invalid altsetting 1 [ 109.354893][ T5748] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 109.394247][ T5748] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 109.396757][ T5748] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 109.396844][ T5748] usb 5-1: media controller created [ 109.449310][ T5748] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 109.716863][ T5725] syz0: Port: 1 Link DOWN [ 109.717490][ T5903] infiniband syz0: set down [ 109.717510][ T5903] infiniband syz0: added veth0 [ 109.738159][ T5903] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 109.745425][ T5903] infiniband syz0: Couldn't open port 1 [ 109.745826][ T5903] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 109.745868][ T5903] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 109.745957][ T5903] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 109.895632][ T5903] RDS/IB: syz0: added [ 109.897777][ T5903] smc: adding ib device syz0 with port count 1 [ 109.897934][ T5903] smc: ib device syz0 port 1 has no pnetid [ 110.000019][ T5746] usb 1-1: unable to get BOS descriptor or descriptor too short [ 110.002230][ T5746] usb 1-1: New USB device found, idVendor=1410, idProduct=9011, bcdDevice=a2.7c [ 110.005195][ T5746] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 110.005235][ T5746] usb 1-1: can't read configurations, error -71 [ 110.589876][ T5748] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 110.590260][ T5748] zl10353_read_register: readreg error (reg=127, ret==-110) [ 110.776941][ T5748] usb 5-1: USB disconnect, device number 2 [ 111.127042][ T5941] netlink: 8 bytes leftover after parsing attributes in process `syz.0.35'. [ 111.403724][ T5945] debugfs: Bad value for 'source' [ 111.495299][ T5732] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 111.658148][ T5732] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 111.663196][ T5732] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.663339][ T5732] usb 1-1: Product: syz [ 111.663358][ T5732] usb 1-1: Manufacturer: syz [ 111.663375][ T5732] usb 1-1: SerialNumber: syz [ 111.794801][ T5725] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 111.795839][ T4924] Bluetooth: hci2: Unable to find connection for dst 66:55:44:33:22:11 sid 0x01 [ 111.904639][ T4924] Bluetooth: hci2: Unable to find connection for big 0x00 [ 112.395727][ T5934] rdma_rxe: rxe_newlink: failed to add veth0 [ 112.467998][ T5955] Bluetooth: MGMT ver 1.23 [ 112.833946][ T5725] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 112.834487][ T5725] ath9k_htc: Failed to initialize the device [ 112.890969][ T5968] nvmet_tcp: enabling port 1 (127.0.0.1:4420) [ 112.904028][ T5725] usb 1-1: ath9k_htc: USB layer deinitialized [ 113.024051][ T44] usb 1-1: USB disconnect, device number 5 [ 113.026945][ T1863] nvmet: Created nvm controller 1 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:1b1408e9-c8a0-4ce1-a8f9-aa840751b243. [ 113.054816][ T1094] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.126240][ T5968] nvme nvme0: creating 2 I/O queues. [ 113.171290][ T5968] nvme nvme0: mapped 2/0/0 default/read/poll queues. [ 113.202691][ T5968] nvme nvme0: new ctrl: NQN "testnqn", addr 127.0.0.1:4420, hostnqn: nqn.2014-08.org.nvmexpress:uuid:1b1408e9-c8a0-4ce1-a8f9-aa840751b243 [ 113.539402][ T44] libceph: mon0 (1)127.0.0.1:20000 socket error on write [ 113.821050][ T44] libceph: mon0 (1)127.0.0.1:20000 socket error on write [ 114.340534][ T5725] libceph: mon0 (1)127.0.0.1:20000 socket error on write [ 114.356015][ T5980] ceph: No mds server is up or the cluster is laggy [ 115.017949][ T5992] loop0: detected capacity change from 0 to 2048 [ 115.368559][ T44] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 115.519958][ T44] usb 6-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice= 1.00 [ 115.521698][ T44] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.542783][ T44] metro_usb 6-1:1.0: Metrologic USB to Serial converter detected [ 115.552858][ T5957] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 115.608260][ T44] usb 6-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 115.658472][ T5991] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 115.895643][ T44] usb 6-1: USB disconnect, device number 2 [ 115.937368][ T44] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 115.968820][ T44] metro_usb 6-1:1.0: device disconnected [ 116.083803][ T4924] Bluetooth: hci5: Unable to find connection for dst 66:55:44:33:22:11 sid 0x01 [ 116.196041][ T4924] Bluetooth: hci5: Unable to find connection for big 0x00 [ 116.255155][ T6016] Bluetooth: MGMT ver 1.23 [ 116.255662][ T6016] Bluetooth: MGMT ver 1.23 [ 116.256086][ T6016] Bluetooth: MGMT ver 1.23 [ 116.673008][ T5746] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 116.794842][ T6036] bonding: bond1 is being created... [ 116.821971][ T5746] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.01 [ 116.825696][ T5746] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.148797][ T6006] NFSD: Unable to initialize client recovery tracking! (-110) [ 117.148823][ T6006] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 117.148838][ T6006] NFSD: starting 90-second grace period (net f000047c) [ 117.486574][ T52] Bluetooth: hci6: status 0x01 [ 117.487183][ T52] Bluetooth: hci6: unexpected event for opcode 0x0c03 [ 117.487372][ T52] Bluetooth: hci6: unexpected cc 0x1003 length: 1 < 9 [ 117.489339][ T4924] Bluetooth: hci6: Opcode 0x1003 failed: -38 [ 117.589604][ T6058] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 117.591020][ T6058] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 117.592100][ T6058] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 117.593297][ T6058] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 117.732714][ T6061] loop0: detected capacity change from 0 to 131072 [ 118.090281][ T5746] usbhid 5-1:1.0: can't add hid device: -71 [ 118.090416][ T5746] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 118.124363][ T5746] usb 5-1: USB disconnect, device number 3 [ 118.270868][ T6055] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 118.425523][ T52] Bluetooth: hci6: status 0x01 [ 118.426463][ T52] Bluetooth: hci6: unexpected event for opcode 0x0c03 [ 118.447914][ T52] Bluetooth: hci6: unexpected cc 0x1003 length: 1 < 9 [ 118.450921][ T4924] Bluetooth: hci6: Opcode 0x1003 failed: -38 [ 118.873531][ T6096] o2cb: Local heartbeat has not been started. [ 118.873552][ T6096] o2cb: Cluster check failed. Fix errors before retrying. [ 118.873594][ T6096] (syz.0.87,6096,1):user_dlm_register:674 ERROR: status = -22 [ 118.873623][ T6096] (syz.0.87,6096,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "syz" [ 119.299249][ T6078] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 119.648266][ T44] libceph: mon0 (1)127.0.0.1:6789 socket closed (con state V1_BANNER) [ 119.657180][ T6093] ceph: No mds server is up or the cluster is laggy [ 119.759976][ T6032] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 120.541207][ T6125] tipc: Started in network mode [ 120.541237][ T6125] tipc: Node identity 1, cluster identity 4711 [ 120.541252][ T6125] tipc: Node number set to 1 [ 121.698865][ T6146] netlink: 12 bytes leftover after parsing attributes in process `syz.4.103'. [ 121.899387][ T6131] NFSD: Unable to initialize client recovery tracking! (-110) [ 121.899411][ T6131] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 121.899425][ T6131] NFSD: starting 90-second grace period (net f000047c) [ 122.496720][ T6139] NFSD: Failed to start, no listeners configured. [ 123.878623][ T6140] NFSD: Unable to initialize client recovery tracking! (-110) [ 123.878652][ T6140] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 123.878667][ T6140] NFSD: starting 90-second grace period (net f00005b2) [ 124.187982][ T6171] r8a66597_udc pcspkr: error -EINVAL: invalid resource (null) [ 124.188020][ T6171] r8a66597_udc pcspkr: probe with driver r8a66597_udc failed with error -22 [ 124.588914][ T5739] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 124.739377][ T5739] usb 3-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice= 1.00 [ 124.741210][ T5739] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.755446][ T5739] metro_usb 3-1:1.0: Metrologic USB to Serial converter detected [ 124.783503][ T5739] usb 3-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 125.057362][ T5739] usb 3-1: USB disconnect, device number 2 [ 125.066713][ T5739] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 125.069960][ T5739] metro_usb 3-1:1.0: device disconnected [ 125.338781][ T6158] NFSD: Unable to initialize client recovery tracking! (-110) [ 125.338816][ T6158] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 125.338838][ T6158] NFSD: starting 90-second grace period (net f0000457) [ 125.625909][ T6183] xt_CT: You must specify a L4 protocol and not use inversions on it [ 125.785522][ T6169] svc: failed to register lockdv1 RPC service (errno 512). [ 125.791319][ T6169] lockd_up: makesock failed, error=-512 [ 125.981739][ T6169] svc: failed to register nfsdv3 RPC service (errno 512). [ 125.982715][ T6169] svc: failed to register nfsaclv3 RPC service (errno 512). [ 125.982738][ T6169] failed to unregister tcp with rpcbind [ 125.982941][ T6169] svc: failed to register nfsdv3 RPC service (errno 97). [ 125.982960][ T6169] svc: failed to register nfsaclv3 RPC service (errno 97). [ 125.982976][ T6169] failed to unregister tcp with rpcbind [ 126.288292][ T6189] NFSD: Failed to start, no listeners configured. [ 126.609943][ T12] netdevsim netdevsim100 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.843551][ T6210] syzkaller0: entered promiscuous mode [ 126.843583][ T6210] syzkaller0: entered allmulticast mode [ 127.053952][ T6223] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 127.057179][ T6226] loop0: detected capacity change from 0 to 65536 [ 127.791257][ T6232] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 127.850424][ T6232] md: array md0 already has disks! [ 127.870640][ T6232] md: could not open device unknown-block(7,0). [ 127.871255][ T6232] md: error, md_import_device() returned -16 [ 128.004725][ T6232] md/raid1:md0: active with 1 out of 1 mirrors [ 128.028736][ T6232] md0: detected capacity change from 0 to 2048 [ 128.715570][ T6206] netdevsim netdevsim100 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.734103][ C0] ------------[ cut here ]------------ [ 128.734121][ C0] !oldest [ 128.734131][ C0] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x12b0/0x2060, CPU#0: syz.1.122/6219 [ 128.753733][ C0] Modules linked in: [ 128.758182][ C0] CPU: 0 UID: 0 PID: 6219 Comm: syz.1.122 Not tainted syzkaller #0 PREEMPT(full) [ 128.767436][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 128.777569][ C0] RIP: 0010:__cfg80211_bss_update+0x12b0/0x2060 [ 128.783902][ C0] Code: c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 88 e3 07 f7 49 ff 06 e9 ae 01 00 00 e8 5b da 97 f6 e9 a4 01 00 00 e8 51 da 97 f6 90 <0f> 0b 90 4c 8b 2c 24 48 c7 c0 80 82 7a 90 48 c1 e8 03 0f b6 04 28 [ 128.803666][ C0] RSP: 0018:ffffc900000071e8 EFLAGS: 00010287 [ 128.809823][ C0] RAX: ffffffff8b300f2f RBX: ffff88807a7d5800 RCX: 0000000000040000 [ 128.817954][ C0] RDX: ffffc900022d2000 RSI: 0000000000000055 RDI: 0000000000000056 [ 128.825984][ C0] RBP: dffffc0000000000 R08: 0000000000000100 R09: 1ffff1100a293a09 [ 128.834018][ C0] R10: dffffc0000000000 R11: ffffed100a293a0a R12: ffff888051b60190 [ 128.842146][ C0] R13: ffff888051b60190 R14: ffff88807a7d5800 R15: 0000000000000001 [ 128.850268][ C0] FS: 00007fe2bfa086c0(0000) GS:ffff888124ccb000(0000) knlGS:0000000000000000 [ 128.859263][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 128.865872][ C0] CR2: 00007f073217f561 CR3: 000000007543c000 CR4: 0000000000350ef0 [ 128.873909][ C0] Call Trace: [ 128.877290][ C0] [ 128.880209][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.885907][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.891747][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 128.897166][ C0] ? cfg80211_inform_single_bss_data+0x990/0x1be0 [ 128.903672][ C0] ? cfg80211_inform_single_bss_data+0xc31/0x1be0 [ 128.910220][ C0] cfg80211_inform_single_bss_data+0xc4a/0x1be0 [ 128.916643][ C0] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 128.923403][ C0] ? __lock_acquire+0x747/0x2de0 [ 128.928436][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.934093][ C0] ? __lock_acquire+0x747/0x2de0 [ 128.939082][ C0] ? cfg80211_inform_bss_data+0x24b/0x3cc0 [ 128.944933][ C0] cfg80211_inform_bss_data+0x263/0x3cc0 [ 128.950660][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.956328][ C0] ? lock_acquire+0x115/0x350 [ 128.961068][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.966778][ C0] ? lock_acquire+0x115/0x350 [ 128.971519][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.977180][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.982910][ C0] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 128.989040][ C0] ? ktime_get+0x45/0x220 [ 128.993410][ C0] ? ktime_get+0x45/0x220 [ 128.997804][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.003512][ C0] ? seqcount_lockdep_reader_access+0xd4/0x100 [ 129.009827][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.015500][ C0] ? ktime_get+0x1f5/0x220 [ 129.020008][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.026202][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.031945][ C0] ? clockevents_program_event+0x491/0x630 [ 129.037803][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.043704][ C0] ? __lock_acquire+0x747/0x2de0 [ 129.048726][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.054472][ C0] ? __lock_acquire+0x747/0x2de0 [ 129.059494][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.065175][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.070893][ C0] cfg80211_inform_bss_frame_data+0x3c7/0x840 [ 129.077021][ C0] ? ieee80211_bss_info_update+0x30f/0xa50 [ 129.083083][ C0] ieee80211_bss_info_update+0x791/0xa50 [ 129.088797][ C0] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 129.094995][ C0] ? kcov_remote_start+0x9c/0x7e0 [ 129.100177][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.105834][ C0] ? ieee80211_get_channel_khz+0x15b/0x8a0 [ 129.111720][ C0] ieee80211_scan_rx+0x552/0xa40 [ 129.116708][ C0] ieee80211_rx_list+0x2d0e/0x3b00 [ 129.122147][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.127828][ C0] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 129.133378][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.139070][ C0] ? lock_acquire+0x115/0x350 [ 129.143807][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.149512][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.155180][ C0] ? ieee80211_rx_napi+0xd1/0x3d0 [ 129.160273][ C0] ieee80211_rx_napi+0x1ad/0x3d0 [ 129.165253][ C0] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 129.170794][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.176462][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.182147][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 129.188083][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.193867][ C0] ? skb_dequeue+0x124/0x160 [ 129.198518][ C0] ieee80211_handle_queued_frames+0xe4/0x1d0 [ 129.204629][ C0] tasklet_action_common+0x2d7/0x490 [ 129.209997][ C0] handle_softirqs+0x226/0x860 [ 129.214797][ C0] ? do_softirq+0x77/0xd0 [ 129.219247][ C0] ? __ieee80211_tx_skb_tid_band+0x4cb/0x680 [ 129.225345][ C0] do_softirq+0x77/0xd0 [ 129.229664][ C0] [ 129.232687][ C0] [ 129.235621][ C0] __local_bh_enable_ip+0x100/0x140 [ 129.240875][ C0] ? ieee80211_tx_skb_tid+0x2f/0x480 [ 129.246179][ C0] ieee80211_tx_skb_tid+0x29e/0x480 [ 129.251438][ C0] ieee80211_mgmt_tx+0x1d8a/0x23e0 [ 129.256620][ C0] ? ieee80211_mgmt_tx+0x917/0x23e0 [ 129.261917][ C0] ? __pfx_ieee80211_mgmt_tx+0x10/0x10 [ 129.267836][ C0] ? trace_kmalloc+0x2a/0xf0 [ 129.272494][ C0] cfg80211_mlme_mgmt_tx+0x6fd/0x1480 [ 129.277902][ C0] nl80211_tx_mgmt+0xb4f/0xf10 [ 129.283603][ C0] ? netdev_run_todo+0xfda/0x1060 [ 129.288720][ C0] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 129.294033][ C0] ? __cfg80211_wdev_from_attrs+0x766/0x810 [ 129.300323][ C0] ? __pfx_netdev_run_todo+0x10/0x10 [ 129.305831][ C0] ? __pfx___cfg80211_wdev_from_attrs+0x10/0x10 [ 129.312164][ C0] ? nl80211_pre_doit+0x53d/0x890 [ 129.317270][ C0] genl_family_rcv_msg_doit+0x233/0x340 [ 129.322908][ C0] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 129.329070][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.337603][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.343342][ C0] ? security_capable+0x7e/0x2c0 [ 129.348395][ C0] genl_rcv_msg+0x614/0x7a0 [ 129.352940][ C0] ? __pfx_genl_rcv_msg+0x10/0x10 [ 129.358044][ C0] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 129.363544][ C0] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 129.368901][ C0] ? __pfx_nl80211_post_doit+0x10/0x10 [ 129.374685][ C0] netlink_rcv_skb+0x226/0x4a0 [ 129.379580][ C0] ? __pfx_genl_rcv_msg+0x10/0x10 [ 129.384807][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 129.390285][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.396036][ C0] ? down_read+0x2be/0x330 [ 129.400534][ C0] genl_rcv+0x28/0x40 [ 129.404547][ C0] netlink_unicast+0x7bd/0x940 [ 129.409399][ C0] netlink_sendmsg+0x813/0xb40 [ 129.414191][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 129.419577][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.425244][ C0] ? apparmor_socket_sendmsg+0x98/0x360 [ 129.430846][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.436504][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 129.441836][ C0] sock_sendmsg_nosec+0x13a/0x180 [ 129.446881][ C0] ____sys_sendmsg+0x54e/0x850 [ 129.451714][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 129.457033][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.462730][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.468418][ C0] ? import_iovec+0x73/0xa0 [ 129.472955][ C0] ___sys_sendmsg+0x2a5/0x360 [ 129.477660][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.483380][ C0] ? __lock_acquire+0x747/0x2de0 [ 129.488376][ C0] ? __pfx____sys_sendmsg+0x10/0x10 [ 129.493653][ C0] ? futex_wait+0x2a2/0x390 [ 129.498287][ C0] ? __fget_files+0x2a/0x420 [ 129.502941][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.508674][ C0] ? __fget_files+0x3a2/0x420 [ 129.513401][ C0] __x64_sys_sendmsg+0x1b1/0x290 [ 129.518417][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.524083][ C0] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 129.529667][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.535420][ C0] do_syscall_64+0x166/0x520 [ 129.540116][ C0] ? trace_irq_disable+0x3b/0x140 [ 129.545168][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.551310][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.557225][ C0] RIP: 0033:0x7fe2beb9e159 [ 129.561689][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.581353][ C0] RSP: 002b:00007fe2bfa08028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 129.589872][ C0] RAX: ffffffffffffffda RBX: 00007fe2bee25fa0 RCX: 00007fe2beb9e159 [ 129.597860][ C0] RDX: 0000000000008800 RSI: 0000200000003740 RDI: 0000000000000003 [ 129.605877][ C0] RBP: 00007fe2bec3506b R08: 0000000000000000 R09: 0000000000000000 [ 129.613980][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 129.622094][ C0] R13: 00007fe2bee26038 R14: 00007fe2bee25fa0 R15: 00007fff24ec9378 [ 129.630168][ C0] [ 129.633200][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 129.640520][ C0] CPU: 0 UID: 0 PID: 6219 Comm: syz.1.122 Not tainted syzkaller #0 PREEMPT(full) [ 129.649813][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 129.659880][ C0] Call Trace: [ 129.663169][ C0] [ 129.666023][ C0] vpanic+0x56d/0xa60 [ 129.670044][ C0] ? __pfx__printk+0x10/0x10 [ 129.675005][ C0] ? __pfx_vpanic+0x10/0x10 [ 129.679536][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 129.684934][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 129.690211][ C0] panic+0xc5/0xd0 [ 129.693961][ C0] ? __pfx_panic+0x10/0x10 [ 129.698425][ C0] __warn+0x315/0x4c0 [ 129.702436][ C0] ? __cfg80211_bss_update+0x12b0/0x2060 [ 129.708098][ C0] ? __cfg80211_bss_update+0x12b0/0x2060 [ 129.713929][ C0] __report_bug+0x276/0x570 [ 129.718490][ C0] ? tasklet_action_common+0x2d7/0x490 [ 129.724100][ C0] ? handle_softirqs+0x226/0x860 [ 129.729143][ C0] ? do_softirq+0x77/0xd0 [ 129.733493][ C0] ? __cfg80211_bss_update+0x12b0/0x2060 [ 129.739239][ C0] ? __pfx___report_bug+0x10/0x10 [ 129.744291][ C0] ? ____sys_sendmsg+0x54e/0x850 [ 129.749339][ C0] ? ___sys_sendmsg+0x2a5/0x360 [ 129.754294][ C0] ? __x64_sys_sendmsg+0x1b1/0x290 [ 129.759512][ C0] ? do_syscall_64+0x166/0x520 [ 129.764294][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.770686][ C0] ? __cfg80211_bss_update+0x12b0/0x2060 [ 129.776365][ C0] report_bug+0x16b/0x220 [ 129.780807][ C0] ? __cfg80211_bss_update+0x12b0/0x2060 [ 129.786503][ C0] ? __cfg80211_bss_update+0x12b2/0x2060 [ 129.792253][ C0] handle_bug+0x9c/0x200 [ 129.796523][ C0] exc_invalid_op+0x1a/0x50 [ 129.801141][ C0] asm_exc_invalid_op+0x1a/0x20 [ 129.806099][ C0] RIP: 0010:__cfg80211_bss_update+0x12b0/0x2060 [ 129.812369][ C0] Code: c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 88 e3 07 f7 49 ff 06 e9 ae 01 00 00 e8 5b da 97 f6 e9 a4 01 00 00 e8 51 da 97 f6 90 <0f> 0b 90 4c 8b 2c 24 48 c7 c0 80 82 7a 90 48 c1 e8 03 0f b6 04 28 [ 129.831994][ C0] RSP: 0018:ffffc900000071e8 EFLAGS: 00010287 [ 129.838086][ C0] RAX: ffffffff8b300f2f RBX: ffff88807a7d5800 RCX: 0000000000040000 [ 129.846074][ C0] RDX: ffffc900022d2000 RSI: 0000000000000055 RDI: 0000000000000056 [ 129.854230][ C0] RBP: dffffc0000000000 R08: 0000000000000100 R09: 1ffff1100a293a09 [ 129.862219][ C0] R10: dffffc0000000000 R11: ffffed100a293a0a R12: ffff888051b60190 [ 129.870207][ C0] R13: ffff888051b60190 R14: ffff88807a7d5800 R15: 0000000000000001 [ 129.878197][ C0] ? __cfg80211_bss_update+0x202f/0x2060 [ 129.883881][ C0] ? __cfg80211_bss_update+0x202f/0x2060 [ 129.889551][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.895234][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.900979][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 129.906384][ C0] ? cfg80211_inform_single_bss_data+0x990/0x1be0 [ 129.912836][ C0] ? cfg80211_inform_single_bss_data+0xc31/0x1be0 [ 129.919325][ C0] cfg80211_inform_single_bss_data+0xc4a/0x1be0 [ 129.925624][ C0] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 129.932343][ C0] ? __lock_acquire+0x747/0x2de0 [ 129.937341][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.943096][ C0] ? __lock_acquire+0x747/0x2de0 [ 129.948057][ C0] ? cfg80211_inform_bss_data+0x24b/0x3cc0 [ 129.953906][ C0] cfg80211_inform_bss_data+0x263/0x3cc0 [ 129.959594][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.965254][ C0] ? lock_acquire+0x115/0x350 [ 129.969962][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.975615][ C0] ? lock_acquire+0x115/0x350 [ 129.980304][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.985949][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 129.991599][ C0] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 129.997681][ C0] ? ktime_get+0x45/0x220 [ 130.002193][ C0] ? ktime_get+0x45/0x220 [ 130.006612][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 130.012274][ C0] ? seqcount_lockdep_reader_access+0xd4/0x100 [ 130.018610][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 130.024250][ C0] ? ktime_get+0x1f5/0x220 [ 130.028674][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 130.034452][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 130.040168][ C0] ? clockevents_program_event+0x491/0x630 [ 130.046004][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 130.051650][ C0] ? __lock_acquire+0x747/0x2de0 [ 130.056623][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 130.062278][ C0] ? __lock_acquire+0x747/0x2de0 [ 130.067254][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 130.072908][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 130.078619][ C0] cfg80211_inform_bss_frame_data+0x3c7/0x840 [ 130.084756][ C0] ? ieee80211_bss_info_update+0x30f/0xa50 [ 130.090761][ C0] ieee80211_bss_info_update+0x791/0xa50 [ 130.096723][ C0] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 130.102934][ C0] ? kcov_remote_start+0x9c/0x7e0 [ 130.108254][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 130.114022][ C0] ? ieee80211_get_channel_khz+0x15b/0x8a0 [ 130.119972][ C0] ieee80211_scan_rx+0x552/0xa40 [ 130.124964][ C0] ieee80211_rx_list+0x2d0e/0x3b00 [ 130.130104][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 130.135793][ C0] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 130.141287][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 130.147060][ C0] ? lock_acquire+0x115/0x350 [ 130.151754][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 130.157412][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 130.163076][ C0] ? ieee80211_rx_napi+0xd1/0x3d0 [ 130.169647][ C0] ieee80211_rx_napi+0x1ad/0x3d0 [ 130.174831][ C0] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 130.180323][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 130.186057][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 130.191824][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 130.197647][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 130.203463][ C0] ? skb_dequeue+0x124/0x160 [ 130.208278][ C0] ieee80211_handle_queued_frames+0xe4/0x1d0 [ 130.214374][ C0] tasklet_action_common+0x2d7/0x490 [ 130.219777][ C0] handle_softirqs+0x226/0x860 [ 130.224592][ C0] ? do_softirq+0x77/0xd0 [ 130.229029][ C0] ? __ieee80211_tx_skb_tid_band+0x4cb/0x680 [ 130.235307][ C0] do_softirq+0x77/0xd0 [ 130.239663][ C0] [ 130.242591][ C0] [ 130.245606][ C0] __local_bh_enable_ip+0x100/0x140 [ 130.251260][ C0] ? ieee80211_tx_skb_tid+0x2f/0x480 [ 130.256588][ C0] ieee80211_tx_skb_tid+0x29e/0x480 [ 130.263349][ C0] ieee80211_mgmt_tx+0x1d8a/0x23e0 [ 130.268498][ C0] ? ieee80211_mgmt_tx+0x917/0x23e0 [ 130.273870][ C0] ? __pfx_ieee80211_mgmt_tx+0x10/0x10 [ 130.279650][ C0] ? trace_kmalloc+0x2a/0xf0 [ 130.284261][ C0] cfg80211_mlme_mgmt_tx+0x6fd/0x1480 [ 130.289925][ C0] nl80211_tx_mgmt+0xb4f/0xf10 [ 130.294921][ C0] ? netdev_run_todo+0xfda/0x1060 [ 130.300583][ C0] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 130.306582][ C0] ? __cfg80211_wdev_from_attrs+0x766/0x810 [ 130.312521][ C0] ? __pfx_netdev_run_todo+0x10/0x10 [ 130.317863][ C0] ? __pfx___cfg80211_wdev_from_attrs+0x10/0x10 [ 130.324223][ C0] ? nl80211_pre_doit+0x53d/0x890 [ 130.329358][ C0] genl_family_rcv_msg_doit+0x233/0x340 [ 130.334954][ C0] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 130.341140][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 130.346781][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 130.352508][ C0] ? security_capable+0x7e/0x2c0 [ 130.357489][ C0] genl_rcv_msg+0x614/0x7a0 [ 130.362033][ C0] ? __pfx_genl_rcv_msg+0x10/0x10 [ 130.367153][ C0] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 130.372536][ C0] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 130.377841][ C0] ? __pfx_nl80211_post_doit+0x10/0x10 [ 130.383714][ C0] netlink_rcv_skb+0x226/0x4a0 [ 130.388504][ C0] ? __pfx_genl_rcv_msg+0x10/0x10 [ 130.393545][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 130.398890][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 130.404542][ C0] ? down_read+0x2be/0x330 [ 130.408982][ C0] genl_rcv+0x28/0x40 [ 130.412972][ C0] netlink_unicast+0x7bd/0x940 [ 130.417762][ C0] netlink_sendmsg+0x813/0xb40 [ 130.422648][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 130.427946][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 130.433587][ C0] ? apparmor_socket_sendmsg+0x98/0x360 [ 130.439139][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 130.444783][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 130.450070][ C0] sock_sendmsg_nosec+0x13a/0x180 [ 130.455106][ C0] ____sys_sendmsg+0x54e/0x850 [ 130.459940][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 130.465243][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 130.470923][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 130.476767][ C0] ? import_iovec+0x73/0xa0 [ 130.481378][ C0] ___sys_sendmsg+0x2a5/0x360 [ 130.486075][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 130.495388][ C0] ? __lock_acquire+0x747/0x2de0 [ 130.500545][ C0] ? __pfx____sys_sendmsg+0x10/0x10 [ 130.505819][ C0] ? futex_wait+0x2a2/0x390 [ 130.510377][ C0] ? __fget_files+0x2a/0x420 [ 130.514986][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 130.520626][ C0] ? __fget_files+0x3a2/0x420 [ 130.525331][ C0] __x64_sys_sendmsg+0x1b1/0x290 [ 130.530293][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 130.535939][ C0] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 130.541549][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 130.547286][ C0] do_syscall_64+0x166/0x520 [ 130.551975][ C0] ? trace_irq_disable+0x3b/0x140 [ 130.557007][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.563615][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.569523][ C0] RIP: 0033:0x7fe2beb9e159 [ 130.574062][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.593686][ C0] RSP: 002b:00007fe2bfa08028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 130.602110][ C0] RAX: ffffffffffffffda RBX: 00007fe2bee25fa0 RCX: 00007fe2beb9e159 [ 130.610199][ C0] RDX: 0000000000008800 RSI: 0000200000003740 RDI: 0000000000000003 [ 130.618171][ C0] RBP: 00007fe2bec3506b R08: 0000000000000000 R09: 0000000000000000 [ 130.626139][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.634106][ C0] R13: 00007fe2bee26038 R14: 00007fe2bee25fa0 R15: 00007fff24ec9378 [ 130.642105][ C0] [ 130.645373][ C0] Kernel Offset: disabled [ 130.649683][ C0] Rebooting in 86400 seconds..