last executing test programs: 11.211339952s ago: executing program 4 (id=181): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000005c0)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000013a40)={0x0, 0x0, &(0x7f0000013a00)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xe}, {0x0, 0x4}}}, 0x24}}, 0x20000000) recvmmsg(r1, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}, 0x1c000}], 0x1, 0x2, 0x0) 11.150473717s ago: executing program 4 (id=182): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00'], 0x48) r0 = socket$packet(0x11, 0x3, 0x300) sendmmsg(r0, &(0x7f0000000e00)=[{{&(0x7f0000000080)=@qipcrtr={0x2a, 0x3, 0x4000}, 0x80, 0x0}}], 0x1, 0x45) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48c00, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141102) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) writev(r2, &(0x7f0000000d00)=[{&(0x7f0000000c00)="89e7ee2c7cdad9b4b47380c988ca", 0xe}], 0x12) setrlimit(0x6, &(0x7f0000000080)={0x4, 0x9}) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x80380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, 0x0, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe4) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c) exit(0x7) 10.511431558s ago: executing program 4 (id=187): syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) 7.851969391s ago: executing program 1 (id=195): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9c, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$nfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={[{'\x01\x00\x00\x00&'}], [{@audit}, {@audit}, {@func={'func', 0x3d, 'MMAP_CHECK'}}, {@obj_role}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet(0x2, 0x2, 0x1) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 7.36802446s ago: executing program 4 (id=198): syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x85) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r3, 0x1, &(0x7f0000000340)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000140)='-3', 0x2}]) r4 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f0000000040), 0x0, 0x12002, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r7 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000a00)=@generic={0xa, "8ab77fa26849ff26650042e2dacd30000a000000000162e2adacd2737d00ad6f9fa9f3d7145e15dd9d6d2e19c211220940ad5def53b911ba5b9da13641f9826d7012a749f54b901ee80ea6132ca6e88c776553e1833052ca376304313c4b37780136a4b838570400"}, 0x80, 0x0}, 0x0) pread64(r0, 0x0, 0x0, 0xce2) syz_usb_connect(0x0, 0x24, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) 7.1114495s ago: executing program 3 (id=200): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500000000000000000021"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) 6.98786503s ago: executing program 3 (id=201): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000040)={0x274e, 0x1, 0x7, 0xf, 0x3, "0982aa2494a49e680d061bb20776a4e7af8bc6", 0x1, 0x6}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000240)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000200)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0xc000) write$bt_hci(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="5300030002"], 0x8) inotify_init1(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) io_setup(0x6, &(0x7f00000003c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000040)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x101121) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) r7 = syz_io_uring_setup(0x1254, &(0x7f0000000300)={0x0, 0x40ac, 0x10000, 0x42, 0x3f, 0x0, r6}, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}) io_uring_enter(r7, 0x2def, 0x4000, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x400000, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 5.958958203s ago: executing program 1 (id=205): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004a40)=ANY=[@ANYBLOB="c0260000410007010000000007000000037c"], 0x26c0}}, 0x4010) 5.893808108s ago: executing program 1 (id=206): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x1, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000100)=0x7fffffff, 0x28) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r9, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 5.818721584s ago: executing program 3 (id=208): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 5.653951677s ago: executing program 1 (id=209): socket(0x10, 0x3, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r3) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x46014}, 0x2404c880) recvmmsg(r3, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) ioctl$TIOCMGET(0xffffffffffffffff, 0x541e, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x40000014}) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) r5 = gettid() ioctl$BLKTRACESETUP(r4, 0xc0401273, &(0x7f00000002c0)={'\x00', 0x5, 0x1, 0xe, 0x439f, 0x101, r5}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 5.12042475s ago: executing program 2 (id=212): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = socket$inet6(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 5.065450514s ago: executing program 2 (id=213): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x13) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r2, 0x5412, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000040)={0xfffffff8, 0x401, 0xfffffffd, 0x407ff, 0x7, "0441900887e8c2b791f19dd026d7677fcb3678", 0x4, 0x200}) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)) 4.11498225s ago: executing program 4 (id=214): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r3, &(0x7f0000000000)={0x1f, @none}, 0x8) connect$bt_sco(r3, &(0x7f0000000040), 0x8) 3.951819214s ago: executing program 2 (id=215): socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x804, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0xef92, 0x0, 0x0, 0x0) r6 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) readv(r6, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r7, &(0x7f0000000000)="fa", 0xfffffdef) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r9, 0x0, 0x2, 0x0) fcntl$setstatus(r9, 0x4, 0x2000) vmsplice(r8, &(0x7f0000000180)=[{&(0x7f0000000080)="a1", 0x1}], 0x1, 0x8) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x18c6) sysinfo(0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x3d8, 0x218, 0x218, 0x10c, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@arp={@local, @rand_addr=0x64010102, 0xffffffff, 0xff000000, 0x5, 0x0, {@mac, {[0x0, 0xff, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0x0, 0xff]}}, 0x3, 0x7, 0x7fff, 0x0, 0x9, 0x1, 'ip6erspan0\x00', 'syz_tun\x00', {}, {}, 0x0, 0x2}, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @empty, @private=0xa010101, @multicast2, 0x7}}}, {{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local, @remote, @multicast2, 0x8, 0x1}}}, {{@uncond, 0xbc, 0xe0}, @unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x1}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x424) ioctl$TFD_IOC_SET_TICKS(r1, 0x40085400, 0x0) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x70, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x60, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x45, 0x3, "cd4b6abe42031763d02899c77f963d140d7a9d3ac869f3a860917523679abf4579f9cd6564e64066681fb945bfe585ab6933a6f6514a0eebad4e3537b11b37357f"}, @NFTA_TARGET_NAME={0xa, 0x1, 'HMARK\x00'}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xc8}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendto$inet6(r10, &(0x7f0000000080)="b3019c28", 0x4, 0x200080c4, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$inet6_int(r10, 0x29, 0x33, &(0x7f0000000140)=0x10001, 0x4) 3.762130549s ago: executing program 1 (id=216): futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r1}, 0x18) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x2, 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000495000/0x2000)=nil, 0x2000, 0x0) get_mempolicy(0x0, 0x0, 0x203, &(0x7f0000394000/0x3000)=nil, 0x3) 2.935333765s ago: executing program 4 (id=217): socket$inet_sctp(0x2, 0x5, 0x84) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x101100, 0x99) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f00000001c0)) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=@newtaction={0x1d4, 0x30, 0x1, 0x0, 0x0, {}, [{0x1c0, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x178, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x800000}}}]}, {0x132, 0x6, "e9d80a3bc7674903feae1a5d43f7ce8d5851ea4c3d38ac81767d5c167c3dadc641548e4a1f3a45e69e3dc232aca121a8e8224bc79cca623c2502899276ed4b1515632b05a43f177df9eb294485f46bc090ea14bee347c805a51f16a8b100bb702e38e20ba4db181e009a993cadfe7a33ca889eaf0e8f723e5dc7420243bbc25930bc2bca86129ebaf844d545796424f87473b569c6498833d5cf637defb5bffded3f62a9e88b369b1914a3230c6d90eae07eb54e39f1dea2225f6d471482e0c57eb561966a560533b3ba5c75c3521b758c196bd7836e41ea5b0ed28ff3e72330c02932b46b9cb947499df62832ad18b8b03cae4348c81b52307b3c094aa34576c1c000807599f001c3a6a15e88466e3abf99bd15c055eeb54da8e9a60ab9cf26d43e6d602ff0df0cdf250f7cc3bd"}, {0xc}, {0xc}}}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x910ec27568a00e35, 0x40000002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) syz_usbip_server_init(0x3) add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000580)='X', 0x1, 0xfffffffffffffffe) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300), 0x0, 0x0, 0x2) r4 = landlock_create_ruleset(&(0x7f0000000140)={0x2000}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, 0x0, 0x0) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)={0x5c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 2.672071876s ago: executing program 3 (id=218): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x0, 0x0) r0 = openat$dir(0xffffff9c, &(0x7f00000003c0)='./file0\x00', 0x2000, 0x129) getdents(r0, &(0x7f00000001c0)=""/152, 0x98) 2.560147025s ago: executing program 3 (id=219): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8e, 0x88, 0x5, 0x20, 0x8086, 0x9500, 0xb6d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0x15, 0xcc, 0x1c}}]}}]}}, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x80000004, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000280)={&(0x7f0000000140)=[{0x1e, 0x8211, 0x0, 0x0}], 0x1}) 2.229468021s ago: executing program 2 (id=220): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@delchain={0x2c, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {}, {0xb, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x50, 0x20, 0x0, 0x6}, {0x6, 0x0, 0x0, 0x7}]}, 0x10) sendmsg$IPSET_CMD_GET_BYINDEX(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000000a34c5ddd40566a30e8a6f0613c0f297009eeddba44b1da65a59c8bd514be492b127699177255e054c2f9289516cdc23efa670c6111858b4e9de91337f0497b4ad4ffbe5babad078df57856205ce09dd810360e1b866"], 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x40000) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000100)=@ethtool_coalesce={0xe, 0x0, 0x1000, 0x6, 0x400000, 0x7ff, 0x4, 0xc0000000, 0x402, 0x9, 0x5, 0x5, 0x3, 0x4006, 0x80, 0xfffffffc, 0x0, 0x37e9, 0x80000004, 0x1, 0x6, 0xfffffff9, 0x3}}) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r7}, 0x10) ppoll(0x0, 0x0, &(0x7f00000002c0)={0x0, 0x3938700}, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)={0x34, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x9}, @val={0x8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options]}, 0x34}, 0x1, 0x0, 0x0, 0x40440c0}, 0x4040000) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000800) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r10, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40080b1}, 0x8000) 2.12789059s ago: executing program 1 (id=221): socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000180)) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d00000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, 0x2}, 0x94) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) lsetxattr$security_ima(&(0x7f0000000480)='./file0\x00', &(0x7f0000000100), &(0x7f0000000380)=ANY=[@ANYBLOB="0302fe0300000002450000"], 0xb, 0x1) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0xc80, 0x320, 0x7, 0x80, 0x1, 0x0, {}, {0x2, 0x4}, {}, {0x0, 0x8, 0x4}, 0x0, 0x0, 0x0, 0x9, 0x1, 0x4, 0x8, 0x3, 0x3, 0x3d, 0x5, 0x3, 0x0, 0x0, 0x0, 0xc}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000080)={'batadv0\x00', &(0x7f0000000100)=@ethtool_gstrings={0x1b, 0x1}}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc01cf509, &(0x7f0000000300)={0xffffffffffffffff, 0xe, 0x7, 0x1}) 1.954810993s ago: executing program 0 (id=222): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/7, 0x7, 0x720, 0x0, 0x0) 1.313316695s ago: executing program 2 (id=223): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket(0x10, 0x803, 0x0) write(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0x2, 0x7, 0x0, 0x5, 0x1, 0x4, 0x2, 0x7}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r2, &(0x7f00000024c0)=[{{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000800)=""/245, 0xf5}], 0x1}, 0x9}], 0x1, 0x10000, 0x0) close(0xffffffffffffffff) 771.736618ms ago: executing program 0 (id=224): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) r1 = openat$comedi(0xffffff9c, &(0x7f0000000340)='/dev/comedi3\x00', 0x88000, 0x0) ioctl$COMEDI_INSN(r1, 0x8020640c, &(0x7f0000000380)={0xa000005, 0xf00, 0x0, 0x200, 0x78}) 677.517825ms ago: executing program 0 (id=225): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xf, 0x6}, [@TCA_NETEM_RATE={0x14, 0x6, {0x2, 0x300, 0x3, 0x9}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 456.792453ms ago: executing program 2 (id=226): bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000080), 0x10) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x100000000001, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000480)=""/102384, 0x18ff0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="06000000040000000300000005"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r1, 0x0, 0xa0028000}, 0x38) 300.218146ms ago: executing program 0 (id=227): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe40, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 268.742079ms ago: executing program 0 (id=228): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r2}, 0x1e) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)}) 159.193597ms ago: executing program 0 (id=229): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, 0x0, 0x4001) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x88, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4c, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x300, 0x1, 0x4, 0x0, {0x5, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x300, 0x3, 0x1}}, @void, @void, @val={0x76, 0x6, {0x4, 0x80, 0x7, 0x6}}}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x88}, 0x1, 0x0, 0x0, 0x40005}, 0x0) 0s ago: executing program 3 (id=230): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x24004050}, 0x20000044) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={0x34, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}, 0x34}}, 0x8000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.61' (ED25519) to the list of known hosts. [ 48.984705][ T4172] cgroup: Unknown subsys name 'net' [ 49.090280][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 50.277883][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 52.112335][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 52.229734][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.253295][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.261597][ T4185] device bridge_slave_0 entered promiscuous mode [ 52.275739][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 52.296943][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.304200][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.311826][ T4185] device bridge_slave_1 entered promiscuous mode [ 52.319667][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 52.363247][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 52.391383][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.413895][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.473420][ T4185] team0: Port device team_slave_0 added [ 52.481825][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.488991][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.496633][ T4184] device bridge_slave_0 entered promiscuous mode [ 52.504303][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 52.516383][ T4185] team0: Port device team_slave_1 added [ 52.532463][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.539516][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.548381][ T4184] device bridge_slave_1 entered promiscuous mode [ 52.588804][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.596032][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.603752][ T4189] device bridge_slave_0 entered promiscuous mode [ 52.640404][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.647481][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.656158][ T4189] device bridge_slave_1 entered promiscuous mode [ 52.664585][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.674248][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.681298][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.689062][ T4192] device bridge_slave_0 entered promiscuous mode [ 52.697576][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.704717][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.730703][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.752734][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.769343][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.776472][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.785180][ T4192] device bridge_slave_1 entered promiscuous mode [ 52.792532][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.799465][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.825848][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.840805][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.879527][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.890894][ T4184] team0: Port device team_slave_0 added [ 52.906297][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.930372][ T4184] team0: Port device team_slave_1 added [ 52.937343][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.955232][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.962747][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.970328][ T4183] device bridge_slave_0 entered promiscuous mode [ 52.978701][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.985825][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.993600][ T4183] device bridge_slave_1 entered promiscuous mode [ 53.039480][ T4189] team0: Port device team_slave_0 added [ 53.045851][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.053188][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.079555][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.098391][ T4185] device hsr_slave_0 entered promiscuous mode [ 53.105465][ T4185] device hsr_slave_1 entered promiscuous mode [ 53.121533][ T4189] team0: Port device team_slave_1 added [ 53.127910][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.134931][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.160826][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.174676][ T4192] team0: Port device team_slave_0 added [ 53.197415][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.215012][ T4192] team0: Port device team_slave_1 added [ 53.236788][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.258204][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.265454][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.291503][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.303754][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.310692][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.336625][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.388860][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.396004][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.422339][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.435964][ T4184] device hsr_slave_0 entered promiscuous mode [ 53.443114][ T4184] device hsr_slave_1 entered promiscuous mode [ 53.449675][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.457439][ T4184] Cannot create hsr debugfs directory [ 53.476818][ T4183] team0: Port device team_slave_0 added [ 53.483753][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.490700][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.517322][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.543017][ T4183] team0: Port device team_slave_1 added [ 53.551414][ T4189] device hsr_slave_0 entered promiscuous mode [ 53.558264][ T4189] device hsr_slave_1 entered promiscuous mode [ 53.567367][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.574950][ T4189] Cannot create hsr debugfs directory [ 53.644996][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.652133][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.678198][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.691247][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.698357][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.724265][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.747879][ T4192] device hsr_slave_0 entered promiscuous mode [ 53.754825][ T4192] device hsr_slave_1 entered promiscuous mode [ 53.761226][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.768873][ T4192] Cannot create hsr debugfs directory [ 53.878798][ T4183] device hsr_slave_0 entered promiscuous mode [ 53.885443][ T4183] device hsr_slave_1 entered promiscuous mode [ 53.892541][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.900093][ T4183] Cannot create hsr debugfs directory [ 53.906282][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 53.912516][ T23] Bluetooth: hci3: command 0x0409 tx timeout [ 53.912844][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 53.918662][ T23] Bluetooth: hci4: command 0x0409 tx timeout [ 53.930978][ T23] Bluetooth: hci1: command 0x0409 tx timeout [ 54.059317][ T4185] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 54.070579][ T4185] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 54.095377][ T4185] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 54.104721][ T4185] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 54.150757][ T4184] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.164602][ T4184] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.183609][ T4184] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.196546][ T4184] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.237530][ T4189] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.264055][ T4189] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 54.278348][ T4189] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 54.295974][ T4189] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 54.344542][ T4192] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 54.357036][ T4192] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 54.384477][ T4192] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 54.399955][ T4183] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 54.409322][ T4192] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 54.429245][ T4183] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 54.438760][ T4183] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 54.447732][ T4183] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 54.472934][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.481787][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.507752][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.532401][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.541450][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.551104][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.561292][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.572758][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.605088][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.615040][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.625066][ T413] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.632397][ T413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.641138][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.650073][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.658489][ T413] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.665569][ T413] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.673982][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.682939][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.696031][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.704378][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.716280][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.725134][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.734795][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.745269][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.764794][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.779026][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.787014][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.798546][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.807915][ T413] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.815036][ T413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.823735][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.831394][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.839664][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.848075][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.856451][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.865459][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.874168][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.900122][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.917227][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.926760][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.935484][ T502] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.942586][ T502] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.951842][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.960700][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.969250][ T502] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.976327][ T502] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.984282][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.992927][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.001165][ T502] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.008247][ T502] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.016295][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.053479][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.066914][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.082615][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.091332][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.106361][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.119172][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.128773][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.149777][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.156962][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.165012][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.175540][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.185021][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.193181][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.200805][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.209681][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.218143][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.237777][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.246791][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.256353][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.275573][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.284259][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.293649][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.302756][ T413] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.309809][ T413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.317886][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.326559][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.335194][ T413] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.342294][ T413] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.350189][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.366886][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.378350][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.397915][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.406862][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.415778][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.426474][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.435040][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.444552][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.452012][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.468842][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.483429][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.493526][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.508582][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.529719][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.540898][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.553935][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.560800][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.571082][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.580159][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.593518][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.607864][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.615871][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.624672][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.642738][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.651287][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.686246][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.693372][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.714893][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.741338][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.762647][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.771324][ T413] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.778454][ T413] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.794108][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.806028][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.819810][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.830567][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.846097][ T4192] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.857992][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.877087][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.886320][ T1439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.899874][ T1439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.910833][ T1439] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.919667][ T1439] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.929021][ T1439] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.945515][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.966719][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.983318][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.992618][ T4248] Bluetooth: hci2: command 0x041b tx timeout [ 56.004342][ T4248] Bluetooth: hci1: command 0x041b tx timeout [ 56.010416][ T4248] Bluetooth: hci4: command 0x041b tx timeout [ 56.010926][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.017147][ T4248] Bluetooth: hci3: command 0x041b tx timeout [ 56.029014][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.030810][ T4248] Bluetooth: hci0: command 0x041b tx timeout [ 56.045937][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.055992][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.078667][ T4183] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 56.089885][ T4183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.109237][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.119043][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.128369][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.138016][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.148296][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.158769][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.167798][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.186780][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.197684][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.236771][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.246079][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.260815][ T4189] device veth0_vlan entered promiscuous mode [ 56.277389][ T4185] device veth0_vlan entered promiscuous mode [ 56.288185][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.296767][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.314885][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.323562][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.331658][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.340162][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.348523][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.356633][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.364485][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.373117][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.380713][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.388671][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.397971][ T4184] device veth0_vlan entered promiscuous mode [ 56.410124][ T4185] device veth1_vlan entered promiscuous mode [ 56.432138][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.441087][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.453432][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.465248][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.477387][ T4184] device veth1_vlan entered promiscuous mode [ 56.489043][ T4189] device veth1_vlan entered promiscuous mode [ 56.530792][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.539197][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.549884][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.558628][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.567296][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.575518][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.584476][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.593824][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.601370][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.620422][ T4184] device veth0_macvtap entered promiscuous mode [ 56.634381][ T4189] device veth0_macvtap entered promiscuous mode [ 56.643168][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.652250][ T4185] device veth0_macvtap entered promiscuous mode [ 56.659177][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.669336][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.678197][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.687365][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.695937][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.713656][ T4184] device veth1_macvtap entered promiscuous mode [ 56.720608][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.729102][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.737604][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.745847][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.755267][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.765958][ T4189] device veth1_macvtap entered promiscuous mode [ 56.784712][ T4185] device veth1_macvtap entered promiscuous mode [ 56.801133][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.812410][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.836060][ T4189] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.846156][ T4189] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.855135][ T4189] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.865012][ T4189] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.877892][ T1439] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.886529][ T1439] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.894861][ T1439] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.904262][ T1439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.912980][ T1439] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.921411][ T1439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.930415][ T1439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.940021][ T1439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.948610][ T1439] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.956705][ T1439] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.976077][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.987432][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.999809][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.010698][ T4192] device veth0_vlan entered promiscuous mode [ 57.027983][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.037442][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.054067][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.065551][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.076699][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.104867][ T4192] device veth1_vlan entered promiscuous mode [ 57.113674][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.127376][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.137516][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.149781][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.161092][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.168660][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.177930][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.186600][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.195613][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.204376][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.213172][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.221256][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.229863][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.241450][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.250181][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.258027][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.268364][ T4184] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.277833][ T4184] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.286805][ T4184] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.295654][ T4184] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.309426][ T4183] device veth0_vlan entered promiscuous mode [ 57.321486][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.332555][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.348524][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.359239][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.371038][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.393101][ T1439] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.407957][ T1439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.434193][ T4185] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.448538][ T4185] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.457667][ T4185] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.468547][ T4185] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.484637][ T4183] device veth1_vlan entered promiscuous mode [ 57.529730][ T4192] device veth0_macvtap entered promiscuous mode [ 57.560784][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.569459][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.593976][ T1439] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.594819][ T4192] device veth1_macvtap entered promiscuous mode [ 57.602283][ T1439] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.637832][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.648476][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.664063][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.708940][ T4183] device veth0_macvtap entered promiscuous mode [ 57.718055][ T1439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.727154][ T1439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.736128][ T1439] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.749478][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.760250][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.770436][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.781111][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.790953][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.801501][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.813411][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.821916][ T413] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.834791][ T413] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.837763][ T4183] device veth1_macvtap entered promiscuous mode [ 57.865884][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.874340][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.883237][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.891752][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.901000][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.913854][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.923928][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.934639][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.944715][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.955940][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.967041][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.988659][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.992709][ T1439] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.001939][ T413] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.006059][ T1439] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.014256][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.027377][ T413] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.029902][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.046027][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.069367][ T4174] Bluetooth: hci0: command 0x040f tx timeout [ 58.073715][ T4192] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.084883][ T4192] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.089214][ T4174] Bluetooth: hci3: command 0x040f tx timeout [ 58.093726][ T4192] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.099893][ T4174] Bluetooth: hci4: command 0x040f tx timeout [ 58.109595][ T4192] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.124693][ T4174] Bluetooth: hci1: command 0x040f tx timeout [ 58.130844][ T4174] Bluetooth: hci2: command 0x040f tx timeout [ 58.142004][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.155440][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.165669][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.176138][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.186102][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.196558][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.206388][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.217255][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.229206][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.241323][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.252808][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.262876][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.273945][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.283985][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.294713][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.304908][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.315556][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.326876][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.345215][ T4183] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.359968][ T4183] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.369399][ T4183] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.380327][ T4183] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.400569][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.400595][ T1439] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.416552][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.426564][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.435099][ T1439] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.435791][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.451060][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.516146][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.541854][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.587530][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.691802][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.699795][ T4275] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.699835][ T4275] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.701010][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.770965][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.821831][ T4303] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 58.822925][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.830231][ T1439] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.835496][ T502] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.859417][ T1439] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.875076][ T502] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.893123][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.914789][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.931710][ T4303] loop1: detected capacity change from 0 to 4096 [ 58.966434][ T4303] ntfs3: Bad value for 'uid' [ 59.074541][ T4305] loop4: detected capacity change from 0 to 4096 [ 59.224661][ T4308] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 59.283842][ T4305] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 59.340515][ T4316] tmpfs: Unknown parameter 'quota' [ 59.374637][ T4318] tipc: Started in network mode [ 59.392615][ T4318] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 59.412474][ T4318] tipc: Enabled bearer , priority 10 [ 59.455944][ T4318] tipc: Resetting bearer [ 59.477550][ T4301] loop0: detected capacity change from 0 to 32768 [ 59.504090][ T4314] loop1: detected capacity change from 0 to 4096 [ 59.552939][ T4314] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 59.626374][ T4318] tipc: Disabling bearer [ 59.640850][ T4301] ocfs2: File system on device (7,0) was not unmounted cleanly, recovering it. [ 59.680842][ T4314] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 59.753477][ T4174] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 59.819992][ T4301] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 59.953948][ T4324] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8'. [ 59.980570][ T4314] capability: warning: `syz.1.8' uses deprecated v2 capabilities in a way that may be insecure [ 60.153632][ T4248] Bluetooth: hci2: command 0x0419 tx timeout [ 60.162142][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 60.190823][ T4248] Bluetooth: hci1: command 0x0419 tx timeout [ 60.199115][ T4248] Bluetooth: hci4: command 0x0419 tx timeout [ 60.205888][ T4248] Bluetooth: hci3: command 0x0419 tx timeout [ 60.285731][ T4248] Bluetooth: hci0: command 0x0419 tx timeout [ 60.322601][ T4174] usb 5-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 60.422654][ T4174] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.430825][ T4174] usb 5-1: Product: syz [ 60.438694][ T4174] usb 5-1: Manufacturer: syz [ 60.539738][ T4174] usb 5-1: SerialNumber: syz [ 60.577434][ T4174] usb 5-1: config 0 descriptor?? [ 60.592570][ T4330] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 60.624746][ T4328] loop1: detected capacity change from 0 to 1024 [ 60.680481][ T4333] loop2: detected capacity change from 0 to 1024 [ 60.692818][ T4328] ======================================================= [ 60.692818][ T4328] WARNING: The mand mount option has been deprecated and [ 60.692818][ T4328] and is ignored by this kernel. Remove the mand [ 60.692818][ T4328] option from the mount to silence this warning. [ 60.692818][ T4328] ======================================================= [ 60.730377][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 60.758870][ T4328] EXT4-fs (loop1): Ignoring removed oldalloc option [ 60.762147][ T4333] EXT4-fs (loop2): Ignoring removed oldalloc option [ 60.767645][ T4328] EXT4-fs (loop1): Ignoring removed bh option [ 60.789606][ T4328] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 60.795617][ T4333] EXT4-fs (loop2): Ignoring removed bh option [ 60.810681][ T4333] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 60.877544][ T4328] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,usrquota,data_err=ignore,mb_optimize_scan=0x0000000000000001,oldalloc,grpquota,noload,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 60.919543][ T4333] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,usrquota,data_err=ignore,mb_optimize_scan=0x0000000000000001,oldalloc,grpquota,noload,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 60.930629][ T4184] ocfs2: Unmounting device (7,0) on (node local) [ 61.016599][ T4328] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3876: comm syz.1.10: Allocating blocks 385-513 which overlap fs metadata [ 61.035791][ T4333] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3876: comm syz.2.12: Allocating blocks 385-513 which overlap fs metadata [ 61.106822][ T4327] EXT4-fs (loop1): pa ffff88802136ac40: logic 16, phys. 129, len 24 [ 61.115258][ T4327] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4893: group 0, free 0, pa_free 8 [ 61.131806][ T4332] EXT4-fs (loop2): pa ffff888075f2e380: logic 16, phys. 129, len 24 [ 61.140081][ T4332] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4893: group 0, free 0, pa_free 8 [ 61.593128][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 61.602102][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 61.610972][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 61.619858][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 61.628735][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 61.637608][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 61.646579][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 61.655491][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 61.750020][ T4348] loop2: detected capacity change from 0 to 2048 [ 61.941586][ T4355] loop3: detected capacity change from 0 to 2048 [ 62.652707][ T4174] cx82310_eth: probe of 5-1:0.0 failed with error -22 [ 62.713120][ T4275] ntfs3: loop4: ntfs3_write_inode r=9 failed, -22. [ 62.724409][ T4185] ntfs3: loop4: ntfs_sync_fs r=9 failed, -22. [ 62.731569][ T4185] ntfs3: loop4: ntfs_evict_inode r=9 failed, -22. [ 62.747321][ T4356] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 62.782877][ T4174] cxacru 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 62.811656][ T4174] usb 5-1: USB disconnect, device number 2 [ 65.498888][ T4369] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 65.717915][ T4373] tipc: Enabling of bearer rejected, failed to enable media [ 66.639342][ T4377] loop1: detected capacity change from 0 to 40427 [ 66.695565][ T4377] F2FS-fs (loop1): build fault injection attr: rate: 16, type: 0x1ffff [ 66.705817][ T4377] F2FS-fs (loop1): Unrecognized mount option "grpquota=Þ'-+'" or missing value [ 66.726416][ T4382] loop2: detected capacity change from 0 to 512 [ 66.788583][ T4382] EXT4-fs (loop2): Test dummy encryption mode enabled [ 66.856644][ T4382] EXT4-fs (loop2): Mount option "nouser_xattr" will be removed by 3.5 [ 66.856644][ T4382] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 66.856644][ T4382] [ 66.982107][ T4382] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 67.023220][ T4382] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 67.171734][ T4382] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 67.923261][ T4380] loop4: detected capacity change from 0 to 32768 [ 68.036486][ T4380] XFS (loop4): Mounting V5 Filesystem [ 68.172146][ T4380] XFS (loop4): Ending clean mount [ 68.192084][ T7] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 68.420038][ T4185] XFS (loop4): Unmounting Filesystem [ 68.442160][ T7] usb 1-1: Using ep0 maxpacket: 16 [ 68.562676][ T7] usb 1-1: unable to get BOS descriptor or descriptor too short [ 68.642354][ T7] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 68.671699][ T7] usb 1-1: can't read configurations, error -71 [ 71.196331][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.202970][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.351001][ T4471] MPI: mpi too large (126824 bits) [ 71.373815][ T154] Bluetooth: hci5: Frame reassembly failed (-84) [ 72.060785][ T4487] tipc: Started in network mode [ 72.082689][ T4487] tipc: Node identity 4aa88dcabab5, cluster identity 4711 [ 72.109301][ T4487] tipc: Enabled bearer , priority 0 [ 72.196938][ T4490] device syzkaller0 entered promiscuous mode [ 72.320661][ T4487] tipc: Resetting bearer [ 72.438690][ T4486] tipc: Resetting bearer [ 72.512008][ T4226] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 72.530146][ T4486] tipc: Disabling bearer [ 72.569737][ T4493] netlink: 28 bytes leftover after parsing attributes in process `syz.4.53'. [ 72.761958][ T4226] usb 4-1: Using ep0 maxpacket: 8 [ 72.882295][ T4226] usb 4-1: config 0 interface 0 has no altsetting 0 [ 72.898685][ T4226] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 73.006607][ T4226] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.096103][ T4226] usb 4-1: config 0 descriptor?? [ 73.421977][ T4174] Bluetooth: hci5: command 0x1003 tx timeout [ 73.523377][ T4193] Bluetooth: hci5: sending frame failed (-49) [ 73.534611][ T4517] netlink: 28 bytes leftover after parsing attributes in process `syz.2.63'. [ 73.556057][ T4517] device ip_vti0 entered promiscuous mode [ 73.579560][ T4226] mcp2221 0003:04D8:00DD.0001: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 74.779116][ T4518] 9pnet_virtio: no channels available for device syz [ 74.844363][ T4523] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 74.933782][ T4524] IPv6: sit1: Disabled Multicast RS [ 75.582394][ T13] Bluetooth: hci5: command 0x1001 tx timeout [ 75.658343][ T4193] Bluetooth: hci5: sending frame failed (-49) [ 75.814488][ T4532] Zero length message leads to an empty skb [ 76.120082][ T13] usb 4-1: USB disconnect, device number 2 [ 76.312219][ T1111] cfg80211: failed to load regulatory.db [ 76.313587][ T4540] netlink: 12 bytes leftover after parsing attributes in process `syz.3.70'. [ 76.746543][ T4545] process 'syz.2.72' launched '/dev/fd/4' with NULL argv: empty string added [ 76.983775][ T4548] netlink: 'syz.4.68': attribute type 4 has an invalid length. [ 77.741982][ T7] Bluetooth: hci5: command 0x1009 tx timeout [ 77.891989][ T4174] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 78.211946][ T4174] usb 1-1: Using ep0 maxpacket: 16 [ 78.298148][ T4571] netlink: 'syz.2.78': attribute type 10 has an invalid length. [ 78.307337][ T4571] device syz_tun entered promiscuous mode [ 78.392156][ T4174] usb 1-1: unable to get BOS descriptor or descriptor too short [ 78.430776][ T4571] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 78.502062][ T4174] usb 1-1: config 15 has an invalid interface number: 174 but max is 2 [ 78.512953][ T4174] usb 1-1: config 15 has an invalid interface number: 99 but max is 2 [ 78.532333][ T4174] usb 1-1: config 15 has an invalid interface number: 5 but max is 2 [ 78.545479][ T4571] syz.2.78 (4571) used greatest stack depth: 21152 bytes left [ 78.553379][ T4174] usb 1-1: config 15 has an invalid interface descriptor of length 2, skipping [ 78.562842][ T4174] usb 1-1: config 15 has no interface number 0 [ 78.569720][ T4174] usb 1-1: config 15 has no interface number 1 [ 78.576194][ T4174] usb 1-1: config 15 has no interface number 2 [ 78.590754][ T4174] usb 1-1: config 15 interface 174 altsetting 1 endpoint 0x5 has invalid wMaxPacketSize 0 [ 78.611166][ T4174] usb 1-1: config 15 interface 174 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 78.633335][ T4174] usb 1-1: config 15 interface 174 altsetting 1 bulk endpoint 0x8 has invalid maxpacket 32 [ 78.653639][ T4174] usb 1-1: config 15 interface 174 altsetting 1 has a duplicate endpoint with address 0x2, skipping [ 78.686093][ T4174] usb 1-1: config 15 interface 174 altsetting 1 has a duplicate endpoint with address 0xC, skipping [ 78.741342][ T4174] usb 1-1: config 15 interface 174 altsetting 1 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 78.834078][ T4174] usb 1-1: config 15 interface 174 altsetting 1 has an invalid endpoint with address 0xB7, skipping [ 78.876474][ T7] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 78.899232][ T7] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 78.910093][ T7] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 78.927723][ T4174] usb 1-1: config 15 interface 5 altsetting 128 has a duplicate endpoint with address 0x8, skipping [ 78.961622][ T7] hid-generic 0003:0004:0000.0002: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 78.970847][ T4174] usb 1-1: config 15 interface 5 altsetting 128 has a duplicate endpoint with address 0x8, skipping [ 79.050962][ T4581] fido_id[4581]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 79.091929][ T4174] usb 1-1: config 15 interface 5 altsetting 128 has an invalid endpoint with address 0x0, skipping [ 79.152331][ T4174] usb 1-1: config 15 interface 5 altsetting 128 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 79.199700][ T4584] comedi comedi3: das16m1: I/O port conflict (0x6,16) [ 79.224385][ T4174] usb 1-1: config 15 interface 174 has no altsetting 0 [ 79.250557][ T4174] usb 1-1: config 15 interface 99 has no altsetting 0 [ 79.264330][ T4174] usb 1-1: config 15 interface 5 has no altsetting 0 [ 79.354735][ T4174] usb 1-1: language id specifier not provided by device, defaulting to English [ 79.533129][ T4174] usb 1-1: New USB device found, idVendor=1199, idProduct=6859, bcdDevice=fd.7d [ 79.565974][ T4174] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.600854][ T4595] netlink: 'syz.1.85': attribute type 1 has an invalid length. [ 79.627752][ T4174] usb 1-1: Product: syz [ 79.638624][ T4174] usb 1-1: Manufacturer: syz [ 79.646811][ T4595] netlink: 4 bytes leftover after parsing attributes in process `syz.1.85'. [ 79.675225][ T4174] usb 1-1: SerialNumber: syz [ 79.812332][ T4560] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 79.876638][ T4601] 9pnet_virtio: no channels available for device syz [ 80.093320][ T4174] sierra 1-1:15.174: Sierra USB modem converter detected [ 80.125166][ T4174] usb 1-1: Sierra USB modem converter now attached to ttyUSB0 [ 80.170157][ T4174] usb 1-1: Sierra USB modem converter now attached to ttyUSB1 [ 80.244067][ T4174] sierra 1-1:15.99: Sierra USB modem converter detected [ 80.294148][ T4174] usb 1-1: Sierra USB modem converter now attached to ttyUSB2 [ 80.362985][ T4174] sierra 1-1:15.5: Sierra USB modem converter detected [ 80.396914][ T4174] usb 1-1: Sierra USB modem converter now attached to ttyUSB3 [ 80.437867][ T4174] usb 1-1: USB disconnect, device number 4 [ 80.507564][ T4174] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 80.528580][ T4174] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 80.541373][ T4174] sierra 1-1:15.174: device disconnected [ 80.552196][ T4174] sierra ttyUSB2: Sierra USB modem converter now disconnected from ttyUSB2 [ 80.562125][ T4174] sierra 1-1:15.99: device disconnected [ 80.584404][ T4174] sierra ttyUSB3: Sierra USB modem converter now disconnected from ttyUSB3 [ 80.600950][ T4174] sierra 1-1:15.5: device disconnected [ 82.031442][ T4614] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 82.031442][ T4614] program syz.0.90 not setting count and/or reply_len properly [ 82.069173][ T4611] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 83.160284][ T4624] overlayfs: failed to resolve './file0': -2 [ 83.751985][ T4226] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 84.901963][ T4226] usb 1-1: Using ep0 maxpacket: 16 [ 85.062111][ T4226] usb 1-1: unable to get BOS descriptor or descriptor too short [ 85.142269][ T4226] usb 1-1: config 15 has an invalid interface number: 174 but max is 1 [ 85.170899][ T4226] usb 1-1: config 15 has an invalid interface number: 5 but max is 1 [ 85.234896][ T4226] usb 1-1: config 15 has an invalid interface descriptor of length 2, skipping [ 85.297504][ T4226] usb 1-1: config 15 has no interface number 0 [ 85.324067][ T4226] usb 1-1: config 15 has no interface number 1 [ 85.360764][ T4226] usb 1-1: config 15 interface 174 altsetting 1 bulk endpoint 0x8 has invalid maxpacket 32 [ 85.485369][ T4226] usb 1-1: config 15 interface 174 altsetting 1 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 85.503011][ T4226] usb 1-1: config 15 interface 174 altsetting 1 has a duplicate endpoint with address 0xC, skipping [ 85.517344][ T4226] usb 1-1: config 15 interface 174 altsetting 1 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 85.530818][ T4226] usb 1-1: config 15 interface 174 altsetting 1 has an invalid endpoint with address 0xB7, skipping [ 85.550819][ T4226] usb 1-1: config 15 interface 5 altsetting 128 has a duplicate endpoint with address 0x8, skipping [ 85.567383][ T4226] usb 1-1: config 15 interface 5 altsetting 128 has a duplicate endpoint with address 0x8, skipping [ 85.587350][ T4226] usb 1-1: config 15 interface 5 altsetting 128 has an invalid endpoint with address 0x0, skipping [ 85.598519][ T4226] usb 1-1: config 15 interface 5 altsetting 128 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 85.616962][ T4226] usb 1-1: config 15 interface 174 has no altsetting 0 [ 85.698774][ T4226] usb 1-1: config 15 interface 5 has no altsetting 0 [ 85.772115][ T4226] usb 1-1: language id specifier not provided by device, defaulting to English [ 86.073046][ T4226] usb 1-1: New USB device found, idVendor=1199, idProduct=6859, bcdDevice=fd.7d [ 86.094959][ T4226] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.130278][ T4226] usb 1-1: Product: syz [ 86.147756][ T4226] usb 1-1: Manufacturer: syz [ 86.167035][ T4226] usb 1-1: SerialNumber: syz [ 86.232194][ T4634] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 86.513295][ T4226] sierra 1-1:15.174: Sierra USB modem converter detected [ 86.579290][ T4226] usb 1-1: Sierra USB modem converter now attached to ttyUSB0 [ 86.755198][ T4226] sierra 1-1:15.5: Sierra USB modem converter detected [ 86.824698][ T4226] usb 1-1: Sierra USB modem converter now attached to ttyUSB1 [ 86.878726][ T4226] usb 1-1: USB disconnect, device number 5 [ 86.949671][ T4226] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 87.002382][ T4226] sierra 1-1:15.174: device disconnected [ 87.038318][ T4226] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 87.070529][ T4226] sierra 1-1:15.5: device disconnected [ 88.532264][ T4736] tmpfs: Unknown parameter 'quota' [ 88.606547][ T4739] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 88.613399][ T4739] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 88.862128][ T4226] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 89.618506][ T4748] Can't find ip_set type hash:net, [ 89.669033][ T4739] vhci_hcd vhci_hcd.0: Device attached [ 89.782203][ T4226] usb 5-1: config index 0 descriptor too short (expected 11561, got 41) [ 89.831458][ T4226] usb 5-1: config 30 has too many interfaces: 167, using maximum allowed: 32 [ 89.868933][ T4740] vhci_hcd: connection closed [ 89.888456][ T4226] usb 5-1: config 30 has an invalid descriptor of length 185, skipping remainder of the config [ 89.942274][ T502] vhci_hcd: stop threads [ 89.948415][ T4226] usb 5-1: config 30 has 0 interfaces, different from the descriptor's value: 167 [ 89.951947][ T4174] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 90.015007][ T502] vhci_hcd: release socket [ 90.100155][ T502] vhci_hcd: disconnect device [ 90.202068][ T4226] usb 5-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice= 0.9c [ 90.213519][ T4226] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.223151][ T4765] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 90.231631][ T4226] usb 5-1: Product: syz [ 90.235972][ T4226] usb 5-1: Manufacturer: syz [ 90.240913][ T4226] usb 5-1: SerialNumber: syz [ 90.275581][ T4762] kvm: pic: non byte read [ 90.299412][ T4762] kvm: pic: non byte read [ 90.320444][ T4762] kvm: pic: non byte read [ 90.340756][ T4762] kvm: pic: level sensitive irq not supported [ 90.343117][ T4762] kvm: pic: non byte read [ 90.373641][ T4762] kvm: pic: non byte read [ 90.391789][ T4762] kvm: pic: non byte read [ 90.424159][ T4762] kvm: pic: level sensitive irq not supported [ 90.424242][ T4762] kvm: pic: non byte read [ 90.455997][ T4762] kvm: pic: non byte read [ 90.461176][ T4762] kvm: pic: level sensitive irq not supported [ 90.461362][ T4762] kvm: pic: non byte read [ 90.476028][ T4762] kvm: pic: non byte read [ 90.481569][ T4762] kvm: pic: single mode not supported [ 90.481584][ T4762] kvm: pic: level sensitive irq not supported [ 90.546595][ T4762] kvm: pic: single mode not supported [ 90.553104][ T4762] kvm: pic: level sensitive irq not supported [ 90.582993][ T4762] kvm: pic: single mode not supported [ 90.589289][ T4762] kvm: pic: level sensitive irq not supported [ 90.735831][ T4762] kvm: pic: single mode not supported [ 90.742131][ T4762] kvm: pic: level sensitive irq not supported [ 90.846847][ T4762] kvm: pic: single mode not supported [ 90.853189][ T4762] kvm: pic: level sensitive irq not supported [ 90.887956][ T4762] kvm: pic: single mode not supported [ 90.894626][ T4762] kvm: pic: level sensitive irq not supported [ 90.953052][ T4762] kvm: pic: single mode not supported [ 90.959248][ T4762] kvm: pic: level sensitive irq not supported [ 90.969274][ T4762] kvm: pic: single mode not supported [ 90.979591][ T4762] kvm: pic: single mode not supported [ 91.203698][ T4772] block nbd3: shutting down sockets [ 92.006042][ T4780] netlink: 4 bytes leftover after parsing attributes in process `syz.2.117'. [ 92.021140][ T4226] usb 5-1: USB disconnect, device number 3 [ 92.409806][ T4793] syz.2.121 uses obsolete (PF_INET,SOCK_PACKET) [ 92.751331][ T4799] tmpfs: Unknown parameter 'quota' [ 93.114665][ T4805] netlink: 4 bytes leftover after parsing attributes in process `syz.1.124'. [ 93.138370][ T4805] device bridge_slave_1 left promiscuous mode [ 93.174768][ T4805] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.360468][ T4805] device bridge_slave_0 left promiscuous mode [ 93.387119][ T4805] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.629802][ T4810] 9pnet_virtio: no channels available for device syz [ 94.346322][ T4814] Disabled LAPIC found during irq injection [ 94.414215][ T4819] netlink: 8 bytes leftover after parsing attributes in process `syz.2.127'. [ 94.480871][ T4814] dlm: plock device version mismatch: kernel (1.2.0), user (4207673345.1574799195.3139252685) [ 95.089821][ T4841] 9pnet_virtio: no channels available for device syz [ 95.182045][ T4174] vhci_hcd: vhci_device speed not set [ 95.872607][ T4866] IPv6: addrconf: prefix option has invalid lifetime [ 97.272028][ T4174] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 97.743083][ T4174] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 97.782123][ T4174] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 97.802013][ T4174] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 97.811461][ T4174] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 97.837165][ T4174] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 98.042047][ T4174] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 98.062299][ T4174] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 98.076664][ T4174] usb 4-1: Product: syz [ 98.080994][ T4174] usb 4-1: Manufacturer: syz [ 98.152830][ T4174] cdc_wdm 4-1:1.0: skipping garbage [ 98.159319][ T4174] cdc_wdm 4-1:1.0: skipping garbage [ 98.221509][ T4174] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 98.255773][ T4174] cdc_wdm 4-1:1.0: Unknown control protocol [ 98.572016][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -EPIPE [ 98.589583][ T4174] usb 4-1: USB disconnect, device number 3 [ 99.897092][ T4898] tipc: Enabling of bearer rejected, failed to enable media [ 100.006927][ T4907] netlink: 'syz.0.158': attribute type 1 has an invalid length. [ 100.048562][ T4907] 8021q: adding VLAN 0 to HW filter on device bond1 [ 100.343372][ T4912] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 100.372910][ T4912] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 100.381424][ T4912] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 100.459028][ T4915] bond1: (slave geneve2): making interface the new active one [ 100.529495][ T4915] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 100.557073][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 100.579281][ T4925] device vlan2 entered promiscuous mode [ 100.585082][ T4915] syz.0.158 (4915) used greatest stack depth: 20096 bytes left [ 100.596647][ T4925] device macvtap0 entered promiscuous mode [ 101.838578][ T4945] comedi comedi3: aio_aio12_8: I/O port conflict (0x5,32) [ 101.889517][ T4948] 9pnet_virtio: no channels available for device syz [ 102.076183][ T4956] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 102.439584][ T26] audit: type=1326 audit(1755363478.926:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4958 comm="syz.4.172" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5398ffcbe9 code=0x0 [ 102.622045][ T4226] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 102.767082][ T7] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 102.932310][ T4226] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 103.033740][ T4226] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 103.042960][ T4226] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 103.072081][ T4226] usb 3-1: config 0 interface 0 has no altsetting 0 [ 103.162315][ T4226] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 103.171213][ T4226] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 103.202138][ T7] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.214259][ T4226] usb 3-1: config 0 interface 0 has no altsetting 0 [ 103.220947][ T7] usb 4-1: config 0 has no interfaces? [ 103.312402][ T4226] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 103.321309][ T4226] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 103.346454][ T4226] usb 3-1: config 0 interface 0 has no altsetting 0 [ 103.415225][ T7] usb 4-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice= 0.9c [ 103.433691][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.452684][ T7] usb 4-1: Product: syz [ 103.456891][ T7] usb 4-1: Manufacturer: syz [ 103.461786][ T7] usb 4-1: SerialNumber: syz [ 103.467709][ T4226] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 103.480356][ T4226] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 103.493639][ T7] usb 4-1: config 0 descriptor?? [ 103.498711][ T4226] usb 3-1: config 0 interface 0 has no altsetting 0 [ 103.548781][ T4982] netlink: 'syz.4.178': attribute type 10 has an invalid length. [ 103.592230][ T4226] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 103.607298][ T4226] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 103.626811][ T4226] usb 3-1: config 0 interface 0 has no altsetting 0 [ 103.711723][ T4982] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 103.732416][ T4226] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 103.754815][ T4226] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 103.785012][ T4226] usb 3-1: config 0 interface 0 has no altsetting 0 [ 103.792906][ T4296] usb 4-1: USB disconnect, device number 4 [ 103.884953][ T4226] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 103.901701][ T4226] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 103.924989][ T4226] usb 3-1: config 0 interface 0 has no altsetting 0 [ 103.983108][ T4992] sd 0:0:1:0: PR command failed: 2 [ 103.990743][ T4992] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 103.998591][ T4992] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 104.022192][ T4226] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 104.035221][ T4226] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 104.046479][ T4226] usb 3-1: config 0 interface 0 has no altsetting 0 [ 104.222193][ T4226] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 104.593861][ T4226] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 104.666832][ T4226] usb 3-1: Product: syz [ 104.685426][ T4226] usb 3-1: Manufacturer: syz [ 104.704814][ T4226] usb 3-1: SerialNumber: syz [ 104.741035][ T4226] usb 3-1: config 0 descriptor?? [ 104.853342][ T4226] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 105.102429][ T4174] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 105.133748][ T5018] udc-core: couldn't find an available UDC or it's busy [ 105.150891][ T5018] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 105.357239][ T4200] Bluetooth: Frame is too long (len 26, expected len 4) [ 105.362031][ T4174] usb 5-1: Using ep0 maxpacket: 8 [ 105.401926][ C0] usb 3-1: yurex_control_callback - control failed: -2 [ 105.427666][ T4226] usb 3-1: USB disconnect, device number 2 [ 105.434187][ T4226] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 105.482242][ T4174] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 105.482284][ T4174] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 105.482308][ T4174] usb 5-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 105.572110][ T4174] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 105.579526][ T4174] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 105.686123][ T5026] vivid-008: ================= START STATUS ================= [ 105.694392][ T5026] vivid-008: Enable Output Cropping: true [ 105.701333][ T5026] vivid-008: Enable Output Composing: true [ 105.707314][ T5026] vivid-008: Enable Output Scaler: true [ 105.713013][ T5026] vivid-008: Tx RGB Quantization Range: Automatic [ 105.720416][ T5026] vivid-008: Transmit Mode: HDMI [ 105.725596][ T5026] vivid-008: Display Present: true inactive [ 105.731691][ T5026] vivid-008: Hotplug Present: 0x00000001 [ 105.737511][ T5026] vivid-008: RxSense Present: 0x00000001 [ 105.743564][ T5026] vivid-008: EDID Present: 0x00000001 [ 105.749068][ T5026] vivid-008: ================== END STATUS ================== [ 106.486295][ T4174] usb 5-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 106.652099][ T4174] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 106.698983][ T4174] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 106.760507][ T4174] usb 5-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 107.042127][ T4174] usb 5-1: string descriptor 0 read error: -22 [ 107.054921][ T4174] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 107.077466][ T4174] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.155557][ T4174] adutux 5-1:168.0: interrupt endpoints not found [ 107.359222][ T4174] usb 5-1: USB disconnect, device number 4 [ 107.431965][ T5041] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 108.235089][ T5059] netlink: 4 bytes leftover after parsing attributes in process `syz.3.200'. [ 108.503342][ T5064] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 108.531264][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 108.925906][ T5070] ptrace attach of "./syz-executor exec"[4192] was attempted by "./syz-executor exec"[5070] [ 110.145338][ T5092] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340 [ 110.198728][ T5094] netlink: 96 bytes leftover after parsing attributes in process `syz.2.212'. [ 112.656158][ T5117] 9pnet_virtio: no channels available for device syz [ 112.812239][ T5118] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 112.818773][ T5118] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 112.934550][ T5118] vhci_hcd vhci_hcd.0: Device attached [ 113.202013][ T4261] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 113.211968][ T21] usb 41-1: new high-speed USB device number 2 using vhci_hcd [ 113.522151][ T4261] usb 4-1: Using ep0 maxpacket: 32 [ 113.633702][ T5128] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 113.642299][ T4261] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 113.665590][ T4261] usb 4-1: config 0 has no interface number 0 [ 113.682497][ T5128] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 113.882852][ T4261] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 113.948693][ T4261] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.960855][ T4261] usb 4-1: Product: syz [ 113.969661][ T4261] usb 4-1: Manufacturer: syz [ 113.975692][ T4261] usb 4-1: SerialNumber: syz [ 113.986491][ T4261] usb 4-1: config 0 descriptor?? [ 114.513652][ T4261] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 114.555636][ T4261] usb 4-1: selecting invalid altsetting 1 [ 114.575290][ T4261] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 114.636104][ T4261] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 114.678835][ T5141] tipc: Started in network mode [ 114.687228][ T4261] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 114.696167][ T5141] tipc: Node identity 16034f7fd378, cluster identity 4711 [ 114.709113][ T4261] usb 4-1: media controller created [ 114.717101][ T5141] tipc: Enabled bearer , priority 0 [ 114.748365][ T5142] device syzkaller0 entered promiscuous mode [ 114.760047][ T4261] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 114.796193][ T5141] tipc: Resetting bearer [ 114.820685][ T5140] tipc: Resetting bearer [ 114.855544][ T5140] tipc: Disabling bearer [ 114.893168][ T4261] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 114.910631][ T4261] zl10353_read_register: readreg error (reg=127, ret==-71) [ 114.997246][ T4261] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 115.160466][ T4261] usb 4-1: USB disconnect, device number 5 [ 115.344113][ C1] ------------[ cut here ]------------ [ 115.349617][ C1] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0xfff with flags 0x40 [ 115.360040][ C1] WARNING: CPU: 1 PID: 20 at net/mac80211/rate.c:376 __rate_control_send_low+0x630/0x880 [ 115.369883][ C1] Modules linked in: [ 115.373800][ C1] CPU: 1 PID: 20 Comm: ksoftirqd/1 Not tainted 5.15.189-syzkaller #0 [ 115.381846][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 115.391986][ C1] RIP: 0010:__rate_control_send_low+0x630/0x880 [ 115.398226][ C1] Code: 0f b6 04 28 84 c0 0f 85 e9 01 00 00 48 8b 44 24 08 8b 08 48 c7 c7 60 b9 18 8b 4c 89 f6 44 8b 44 24 14 45 89 f9 e8 e0 2e 68 00 <0f> 0b e9 72 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 08 fa ff [ 115.417888][ C1] RSP: 0018:ffffc90000da7608 EFLAGS: 00010246 [ 115.423982][ C1] RAX: c4d3029a15827300 RBX: 000000000000000c RCX: ffff88813fe68000 [ 115.431979][ C1] RDX: 0000000000000100 RSI: 0000000000000100 RDI: 0000000000000000 [ 115.439984][ C1] RBP: 0000000000000084 R08: dffffc0000000000 R09: fffff520001b4e25 [ 115.447975][ C1] R10: fffff520001b4e25 R11: 1ffff920001b4e24 R12: ffff88801b9d83e8 [ 115.455997][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000040 [ 115.463997][ C1] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 115.472956][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 115.479525][ C1] CR2: 000000110c2e1f49 CR3: 00000000626b9000 CR4: 00000000003506e0 [ 115.487645][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 115.495627][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 115.503616][ C1] Call Trace: [ 115.506902][ C1] [ 115.509826][ C1] rate_control_send_low+0x194/0x790 [ 115.515167][ C1] rate_control_get_rate+0x207/0x5c0 [ 115.520481][ C1] __ieee80211_beacon_get+0x1512/0x1f80 [ 115.526078][ C1] ? ieee80211_beacon_get_template+0x30/0x30 [ 115.532116][ C1] ieee80211_beacon_get_tim+0x48/0x840 [ 115.537599][ C1] mac80211_hwsim_beacon_tx+0xf4/0x920 [ 115.543090][ C1] __iterate_interfaces+0x243/0x500 [ 115.548294][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 115.554583][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 115.560824][ C1] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 115.567879][ C1] mac80211_hwsim_beacon+0x9b/0x180 [ 115.573142][ C1] __hrtimer_run_queues+0x53d/0xc40 [ 115.578362][ C1] ? ktime_get_update_offsets_now+0x95/0x3e0 [ 115.584367][ C1] ? ktime_get_update_offsets_now+0x95/0x3e0 [ 115.590376][ C1] ? hw_scan_work+0xeb0/0xeb0 [ 115.595068][ C1] ? hrtimer_interrupt+0x8d0/0x8d0 [ 115.600170][ C1] hrtimer_run_softirq+0x176/0x240 [ 115.605301][ C1] handle_softirqs+0x328/0x820 [ 115.610047][ C1] ? run_ksoftirqd+0x98/0xf0 [ 115.614637][ C1] ? do_softirq+0x200/0x200 [ 115.619117][ C1] ? run_ksoftirqd+0x75/0xf0 [ 115.623711][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 115.628890][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 115.634175][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 115.639516][ C1] run_ksoftirqd+0x98/0xf0 [ 115.643953][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 115.649149][ C1] smpboot_thread_fn+0x4f6/0x970 [ 115.654133][ C1] kthread+0x436/0x520 [ 115.658195][ C1] ? cpu_report_death+0x180/0x180 [ 115.663261][ C1] ? kthread_blkcg+0xd0/0xd0 [ 115.667838][ C1] ret_from_fork+0x1f/0x30 [ 115.672301][ C1] [ 115.675315][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 115.682580][ C1] CPU: 1 PID: 20 Comm: ksoftirqd/1 Not tainted 5.15.189-syzkaller #0 [ 115.690626][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 115.700673][ C1] Call Trace: [ 115.703939][ C1] [ 115.706851][ C1] dump_stack_lvl+0x168/0x230 [ 115.711530][ C1] ? show_regs_print_info+0x20/0x20 [ 115.716710][ C1] ? load_image+0x3b0/0x3b0 [ 115.721204][ C1] panic+0x2c9/0x7f0 [ 115.725079][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 115.729563][ C1] ? ret_from_fork+0x1f/0x30 [ 115.734133][ C1] ? __rate_control_send_low+0x630/0x880 [ 115.739744][ C1] __warn+0x248/0x2b0 [ 115.743716][ C1] ? __rate_control_send_low+0x630/0x880 [ 115.749336][ C1] report_bug+0x1b7/0x2e0 [ 115.753650][ C1] handle_bug+0x3a/0x70 [ 115.757788][ C1] exc_invalid_op+0x16/0x40 [ 115.762286][ C1] asm_exc_invalid_op+0x16/0x20 [ 115.767130][ C1] RIP: 0010:__rate_control_send_low+0x630/0x880 [ 115.773362][ C1] Code: 0f b6 04 28 84 c0 0f 85 e9 01 00 00 48 8b 44 24 08 8b 08 48 c7 c7 60 b9 18 8b 4c 89 f6 44 8b 44 24 14 45 89 f9 e8 e0 2e 68 00 <0f> 0b e9 72 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 08 fa ff [ 115.792964][ C1] RSP: 0018:ffffc90000da7608 EFLAGS: 00010246 [ 115.799022][ C1] RAX: c4d3029a15827300 RBX: 000000000000000c RCX: ffff88813fe68000 [ 115.806978][ C1] RDX: 0000000000000100 RSI: 0000000000000100 RDI: 0000000000000000 [ 115.814962][ C1] RBP: 0000000000000084 R08: dffffc0000000000 R09: fffff520001b4e25 [ 115.822915][ C1] R10: fffff520001b4e25 R11: 1ffff920001b4e24 R12: ffff88801b9d83e8 [ 115.830884][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000040 [ 115.838854][ C1] ? __rate_control_send_low+0x630/0x880 [ 115.844482][ C1] rate_control_send_low+0x194/0x790 [ 115.849751][ C1] rate_control_get_rate+0x207/0x5c0 [ 115.855053][ C1] __ieee80211_beacon_get+0x1512/0x1f80 [ 115.860593][ C1] ? ieee80211_beacon_get_template+0x30/0x30 [ 115.866573][ C1] ieee80211_beacon_get_tim+0x48/0x840 [ 115.872017][ C1] mac80211_hwsim_beacon_tx+0xf4/0x920 [ 115.877476][ C1] __iterate_interfaces+0x243/0x500 [ 115.882681][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 115.888928][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 115.895172][ C1] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 115.902182][ C1] mac80211_hwsim_beacon+0x9b/0x180 [ 115.907359][ C1] __hrtimer_run_queues+0x53d/0xc40 [ 115.912555][ C1] ? ktime_get_update_offsets_now+0x95/0x3e0 [ 115.918512][ C1] ? ktime_get_update_offsets_now+0x95/0x3e0 [ 115.924486][ C1] ? hw_scan_work+0xeb0/0xeb0 [ 115.929149][ C1] ? hrtimer_interrupt+0x8d0/0x8d0 [ 115.934244][ C1] hrtimer_run_softirq+0x176/0x240 [ 115.939339][ C1] handle_softirqs+0x328/0x820 [ 115.944081][ C1] ? run_ksoftirqd+0x98/0xf0 [ 115.948658][ C1] ? do_softirq+0x200/0x200 [ 115.953147][ C1] ? run_ksoftirqd+0x75/0xf0 [ 115.957739][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 115.962940][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 115.968206][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 115.973381][ C1] run_ksoftirqd+0x98/0xf0 [ 115.977797][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 115.982997][ C1] smpboot_thread_fn+0x4f6/0x970 [ 115.987938][ C1] kthread+0x436/0x520 [ 115.991987][ C1] ? cpu_report_death+0x180/0x180 [ 115.996990][ C1] ? kthread_blkcg+0xd0/0xd0 [ 116.001558][ C1] ret_from_fork+0x1f/0x30 [ 116.005971][ C1] [ 116.009196][ C1] Kernel Offset: disabled [ 116.013538][ C1] Rebooting in 86400 seconds..