last executing test programs: 7.305699488s ago: executing program 3 (id=4): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000200)=@assoc_value, 0x8) r1 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0xff, 0x4) r2 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xe) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0x9c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x6c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x5}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}]}}]}, 0x9c}}, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x6) 6.993758236s ago: executing program 2 (id=3): r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x3, @fixed}, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000540)=@mgmt_frame=@beacon={{{}, {}, @device_b}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x2, [{0xb}, {0x16, 0x1}]}, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0x0, 0xffffffffffffffff}}, @void}, 0x41) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)={0x28, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000bc0)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) syz_80211_inject_frame(&(0x7f00000005c0)=@device_b, &(0x7f0000000c00)=@data_frame={@msdu=@type01={{0x0, 0x2, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1}, {}, @device_b, @random="e3b017c45a9a", @device_b, {0x1, 0x8}, "", @value={0x0, 0x0, 0x2}}, @a_msdu=[{@broadcast, @device_a, 0x9a, "a55f95cc9a6d5ae9081bc017a3fba6a4e994428088adb796a48cf730ea6fdd2392855b8c001632f5c66c4ad717f56ab3d6b98928c8894c658122f5a8e942758ab5aad8eb3ed01d468633a039e2ae413de7a193bef9c3b6e4e09aa4e8ebdd363cc719cf93f094a2bc9b8202278fb6d7dd56609db2cf7b0c323fcac2bb09b574f40e660f5671d973e68eb65a5b27830041cbd1cf9b3f22cc599ac4"}, {@device_a, @device_a, 0x1c, "7e14cbde8e69c700baff4c919e41030a5029c384de41abdcffc9a2a7"}, {@broadcast, @device_a, 0xa8, "39344b0496b3793a14a89aace4b7de2fed1fbff8315f1ec19f2e99e243cd892309bad109b12bac6f348960a73f9afdfe1ee9969dc95457c448ebfa3b4759e223f474c0603872db6674b097faa07570fc9a77e5d684215079955923db14fd6b6051048d38997160793d264f488d82d63acdad783983c401e6bba00c976663cd66a55ce1e74e10b0c0f295286c3daa62ed21b84df6daaf48e3c604e0402e3d77ba50575b44c7a89754"}, {@device_b, @device_b, 0xa9, "2db3f0f0062d81c9c1ec1f77a34ac2032f336dea3c4069c58bc173fe26d4e2c63b0a45de1a980854c7024ab707c693829d9a44bfd3ff7222f1bc1385b74f5f34bf656b338078ffb411c5dd599f50a406040ef4300d21ecd966b7517728915cd264fd174df648bfddcaa9e6594026a8537b8f19cd02131c463048fae82fc1b0d3b2d999997033db237a40600e139fc9bc6b9f86ae19cdc674fb854fe4105e078b2bc1c6fbee6b3582a8"}, {@device_b, @device_b, 0x70, "12938a95ef195efffdb43846373a56a5ebcef0ed64d01f9c6817d39bd9a45ed26e4910a1d6a1bdc9bc11b1c65e386df68429fb1a2e26f6223388e455538e810118ff3070a9dfa2d166346cd2dd9d0440646b4d72e9151ff1de5b9df204ce52efe312e22c84b186dd85a833ebdf68ab5e"}]}, 0x2de) sendmsg$NL80211_CMD_TRIGGER_SCAN(r8, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x1c}}, 0x0) 6.386542173s ago: executing program 3 (id=6): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xcc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x8f}, [@ldst={0x6, 0x0, 0x0, 0x0, 0x0, 0x2}], {0x95, 0x25}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) ioctl$SIOCAX25NOUID(r0, 0x89e3, &(0x7f0000000280)) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000000440), 0x6f5, 0x2, &(0x7f0000000480)={0x77359400}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000004c0), 0x4) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000002c0)={0x24, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000001780)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) socket$packet(0x11, 0x0, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x1de) write$binfmt_script(r4, &(0x7f00000038c0)={'#! ', './file0', [{}]}, 0xc) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 5.435443522s ago: executing program 1 (id=2): r0 = openat$cuse(0xffffff9c, &(0x7f00000020c0), 0x2, 0x0) read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_STATFS(r0, &(0x7f0000000000)={0x60, 0x0, r1, {{0x7, 0x3}}}, 0x60) 5.111299204s ago: executing program 4 (id=5): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_on}]}) 4.857899143s ago: executing program 1 (id=7): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000400)="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", 0x118}, {&(0x7f0000000dc0)="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", 0x10f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000001080)="63c3b174ab06077f6ee67ac1310d86586b13d2c9e203a9da866b81e20e9fe5c43219396d489c1459ce9cd14fa3b43a0b9b6004118a35444790d70af5c873561aad55af7f9f8551103f694e2a22346ca675898ce02a665ecc07e153e3949b954c1d74b105c14411925a8ae24778d4111d2d9743", 0x73}, {&(0x7f00000003c0)="03d54d843173f8be883a57d9e39cc6c79c415ac50f3e1e9c9373002a5b1918", 0x1f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000700)="acc841985992b79554acfc02163bb0fb2bb293e68702bb40b6b870bde5700d368744361ae9fce3a4ff6bb3bf", 0x2c}, {&(0x7f0000000740)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc487553859348d48e6fc49d81c71590cd542e796cc2669e2c691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b95e269169f5f7b51dd5319b8016623d1863d7d77ceefde94faf2e36c3920581691a79a6678db1e5e7fa1ca703ee7aa87272e9c4a1bde5fbc390c7ccb9d3c1020e80bd0659e82d861dc6fe4c62639134c54e708601eae992", 0xd2}, {0x0}, {&(0x7f0000000a40)="bd2f6aa36cea0e62ac00a4539dd80281164750339fcc3cd1f7bb1b74e98dbbe81e997d4847ee5d06a72e6f1c6b8a873c7ea7760f102483b578526af9775e51b84818d03da71c7a9a2b18fac6dde3bbf18625abe82bdc6e47e081c06eb1d6ab55a68e53e8fbb1e88e1f41a71002eb8121bf965623ce7f464c363d86743c9279b5eedf88704b6a459766bee3d50ae9f16e5653783d08bfba153d27baa1b721743cda3a1bb920780f9c522e35a37b5e0c28809f09c176c7b850753edf3b43d4e4a48ab2f932f7efea94eec44f6ce9f05082011cd49783f2a87d65315ad4fb87384295d2a51c143227c385faa381", 0xec}], 0x4}}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6941c667f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c35225ff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb6fc40b5d175e86ac0b7a9fd7f1748af98902340ebc4abe90885da6b6eab7acec5bf30434402005f75852b361f9695e218780324771cd3e10fdcc2a88b5654fd70d9a874", 0xd3}, {&(0x7f00000014c0)="23004e4ee760d48ddc6b7a1ebfc6e0276028840fb20d5233e81c802684e8ac1dc195296ffaaeace75a07a652ee918f67beb970cd36769470f7acb5cd5becfa3839cec05a81f9488931e0a9ba9a246f45fee8b5240bd1e078", 0x58}, {&(0x7f0000001540)="b3da23cbcecb0b0107a496fbe0bad3f402cb8be3b5ffdb88f6bbf4b6230ab98c8eb277df97b97bc85816f9158545dc085e3fe407d9e477a973f32fd54ea716ff085e02770b8da5e08bcb146b05b7444f78c1dbad4764b2fbcf0aaf19679bcfcb23f81d5013cd52f3e3d80e00509774f88d418051be48f680db94dfe349119c", 0x7f}], 0x3}}], 0x4, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 4.590926967s ago: executing program 0 (id=8): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5", 0x4f}, {&(0x7f0000003340)="fd074d169e5a99b396b35d21ba", 0xd}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}, {&(0x7f0000000a00)=""/242, 0xf2}, {&(0x7f0000001140)=""/4055, 0xfd7}, {&(0x7f00000006c0)=""/235, 0xeb}, {&(0x7f00000007c0)=""/191, 0xbf}, {&(0x7f0000003240)=""/218, 0xda}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f0000000c00)=""/110, 0x6e}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000004680)=""/4094, 0xffe}, {&(0x7f0000003440)=""/88, 0x58}], 0xb}, 0x0) 4.385002919s ago: executing program 4 (id=9): sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fddbdf251400000018000180140002006e657464657673696d3000000000000008001400adf4b75c080010000000000008000f000000010008000e"], 0x4c}}, 0x0) 3.739539757s ago: executing program 0 (id=10): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000002200000c0000000000feff00760000000f00000045000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) r1 = io_uring_setup(0x14b8, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x3}) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x1b, 0x20000038, r2) 3.659398006s ago: executing program 1 (id=11): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYRES8=r0], &(0x7f00000002c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x90) r1 = socket$inet6(0xa, 0x1, 0x0) shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x4000) openat$sndseq(0xffffffffffffff9c, 0x0, 0x62181) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000006a006bb21b000000000000000000000000000000080009"], 0x20}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000003c0)=0x7) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x0, 0x77, 0x80, 0x0, @tick, {}, {}, @control={0x8, 0x2, 0x81}}], 0x1c) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x800, 0x0) r5 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x0) shmctl$IPC_INFO(r5, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xc, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="850000002e000000350000000000000085000000230000009500000000000000f4670880271e3503000ffa95a2c8c037c5fcadf78683149e17e24e96a142dfa8ba6287066c5197fabd5f7010e81ae0b737126ea6f7dc39cd34d5aeed8d38665c01002ff5dde54704d25c79949c23e2eb15d755a2350ea7c09c6db5640c11664baf8adb2142a9c28de194f44800000000b0d3712c7e93363af3c075ff1e23160104d95433bb755af3d57609d700ab56e77201bc692c5a2ad40709d031f40f3012e9576e51a7f550afc852003b2ff3462664c744ae6af3c037102124e25cec074c6949e1d76d067a97000247fe5f17fdab800f4104dbaba46aac3abe6c4d7f47ef6d02ba536cdacecf7eb6baaa4a9779f8555eaea76899f2c221c110ef050000000ee282ab76f593d928cf95846be6277cd8a4f8dc8dcba00b1b2d2547c45b0c52087b5efabf8496b9a9812ed03cee579251667dd58ea032eda2296efb19a34268335648e1f844ce328c10752a42dca52fb98c1452b651ebf942f7297f7b2744419a2f238f173d0cd46dafc6e9d929e03e5309ec91d83cf4fbd775e629b3000000000000000000000000000000000000000000000000004e410700ff9cfa139a35a8a669689144ff0173b15aa0f3794dbe2b0e6523155f5c4631f4cd2947de92f74fe3889ea5786118a4a8010e0de54a7d37885343e2545cffe14c8206da26a9ebf6cda6f5c081a320020bb82f56c0ab09797161997af2ad43ab7347a8c2ba7726a60459f43f8482482cc85096f11f14eecff54dca4a32ee9cfa02b397ef622284c5286e186cb7d73119c6a356722c890c9b06c42853c4043e9d44c306e7b1a03fb70317a75a013f617a834283a978fc460bdab3ba34e8336608eb0f"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x99, &(0x7f0000000180)=""/153, 0x41100}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xfec0ffff00000000}, 0x0, 0x0, 0x1, 0x2, 0x0, 0x21}, 0x20) r6 = syz_open_dev$rtc(&(0x7f0000000100), 0x0, 0x0) ioctl$RTC_SET_TIME(r6, 0x7002, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) 3.440245947s ago: executing program 4 (id=12): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x0, 0xb181, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x3, 0xd}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x10, r1}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) pipe2$9p(0x0, 0x80) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ptrace$pokeuser(0x6, r4, 0x358, 0x0) 2.926225299s ago: executing program 0 (id=13): ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000000)={0xf0f027, 0x2}) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000}, 0x48) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e04000f08"], 0x7) syz_emit_vhci(0x0, 0x50) 2.596335233s ago: executing program 2 (id=14): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="380000e5", @ANYRES16=0x0, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e0000000000000000000c00038004000500040001"], 0x38}}, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x1000000000010001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x20) gettid() syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000008060001080006040001aaaaaaaaaa9bac1414aa000000000000ac"], 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) 2.405569665s ago: executing program 0 (id=15): socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000800)=""/102385, 0x18ff1}], 0x1, 0x0, 0x0) r4 = syz_io_uring_setup(0x117, &(0x7f0000000100), &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0xc}) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) 2.045173862s ago: executing program 4 (id=16): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x10, &(0x7f0000000100)={[{@iocharset={'iocharset', 0x3d, 'cp737'}}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@utf8no}, {@numtail}, {@fat=@discard}, {@fat=@flush}, {@shortname_mixed}, {@fat=@errors_continue}, {@fat=@check_strict}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}, {@numtail}], [{@uid_eq}]}, 0xfd, 0x289, &(0x7f0000000c40)="$eJzs3cFLNGUcB/Dfums7CrF7CMQInOhQp0WN6LoSBtFCUeyhTkmuFK4JCkId1Jv0P9S/UMegU9AhuvYPRBAWdMlOHoKNdVbdWXc39X3X5eX9fC7+/M3zZZ6ZZ3DxsM989MLO9ubu/tbZ2WkkSSFK9ajHeSGqMRPF6CrHcQwq3egAAE+O804n/u5kpj0XAOBh+PwHgKfPuM//wvFV792HnxkAMCmP9P//zESmBABM2PsffPj2WqOx/l6aJhE7JwfNg2b2Mzu+thWfRjtasRyV+DeicyWr33yrsb6cdv1RjWTnqJc/OmgW8/mVqES1P/99pftbN7+SZqLZn5+N+V7+1/loxWpU4rnh518dmn8mXnmp7/y1qMQvH8dutGMzutksX46Iw5U0feOdxkC+fDEOAAAAAAAAAAAAAAAAAAAAAAAmoZZeqeb3v8n276nVRh3P8v37A82N3R9ocH+eUjzvNYIAAAAAAAAAAAAAAAAAAABwYf/zL7Y32u3W3rjis5+/+fG0nAX+d/D4otA7791SJ7nO6y/npzF3u6sYKJ598fevhh0qR/lu96cY97sbsxHR30l7p/xh6f6398GKn04/WXx1f+G1UWOi1N/5snupuTHZCi4Oxkv3WspbFH9VIr9MS3H9PCd3fiD7i28vi/o/N8ZcPkqtvblpL9zC1/WN7w5/+/O6k1xMbOQKjtYpPu4/QwAAAAAAAAAAAAAAAAAAQO777dOeCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMz/X7/y+LJCLyneFFOXKdZOTg42lfIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/BcAAP//S4aJvQ==") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) 1.26053878s ago: executing program 4 (id=17): openat$sndseq(0xffffffffffffff9c, 0x0, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000b80), 0x6, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000bc0)={0x10000}) socket(0xa, 0x80000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020}, 0x2020) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582020002"], 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) mount(&(0x7f00000000c0)=@md0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='virtiofs\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r3, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x4, &(0x7f000001fa40)=ANY=[]) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x12) ioctl$TCFLSH(0xffffffffffffffff, 0x8924, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r5, 0x11e, 0x1, &(0x7f0000000100)=@ccm_128={{0x303}, "ee6a8e64a9f4d496", "2742cd9e1a7dee0a5709069c6e67af34", "2a715cd7", "bc0876e56d217c57"}, 0x28) listen(r5, 0x1002) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 886.970032ms ago: executing program 0 (id=18): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5523) syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x0, 0x0, 0x0) 0s ago: executing program 0 (id=19): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000200)=0x40) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x81) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0x3f) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x70) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x40) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x7e) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.99' (ED25519) to the list of known hosts. [ 154.998287][ T5169] cgroup: Unknown subsys name 'net' [ 155.124744][ T5169] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 157.592876][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 157.599557][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.908740][ T5169] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 204.741986][ T5193] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 204.751117][ T5193] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 204.762844][ T5196] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 204.771648][ T5196] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 204.780078][ T5198] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 204.789495][ T5196] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 204.801257][ T5196] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 204.812667][ T5198] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 204.814530][ T5200] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 204.824235][ T5196] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 204.835376][ T5200] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 204.836580][ T5198] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 204.846644][ T5200] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 204.853391][ T5196] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 204.860414][ T5200] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 204.867410][ T5198] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 204.878670][ T5200] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 204.886316][ T5198] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 204.896489][ T5198] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 204.905406][ T4561] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 204.914627][ T4561] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 204.931777][ T5198] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 204.944289][ T5198] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 204.954490][ T5198] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 204.971704][ T5198] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 204.983791][ T5198] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 204.997847][ T5198] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 205.054112][ T4561] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 205.078700][ T4561] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 205.088131][ T4561] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 206.237414][ T5189] chnl_net:caif_netlink_parms(): no params data found [ 206.307621][ T5202] chnl_net:caif_netlink_parms(): no params data found [ 206.863773][ T5195] chnl_net:caif_netlink_parms(): no params data found [ 206.941197][ T4561] Bluetooth: hci2: command tx timeout [ 206.986767][ T5187] chnl_net:caif_netlink_parms(): no params data found [ 207.021712][ T4561] Bluetooth: hci1: command tx timeout [ 207.027378][ T4561] Bluetooth: hci0: command tx timeout [ 207.036580][ T5200] Bluetooth: hci3: command tx timeout [ 207.212364][ T5198] Bluetooth: hci4: command tx timeout [ 207.254422][ T5188] chnl_net:caif_netlink_parms(): no params data found [ 207.653703][ T5189] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.666241][ T5189] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.674134][ T5189] bridge_slave_0: entered allmulticast mode [ 207.683263][ T5189] bridge_slave_0: entered promiscuous mode [ 207.747877][ T5189] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.755943][ T5189] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.763893][ T5189] bridge_slave_1: entered allmulticast mode [ 207.773150][ T5189] bridge_slave_1: entered promiscuous mode [ 207.787857][ T5202] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.798604][ T5202] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.806537][ T5202] bridge_slave_0: entered allmulticast mode [ 207.815636][ T5202] bridge_slave_0: entered promiscuous mode [ 207.934763][ T5202] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.944381][ T5202] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.952295][ T5202] bridge_slave_1: entered allmulticast mode [ 207.961431][ T5202] bridge_slave_1: entered promiscuous mode [ 208.055332][ T5189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.074417][ T5202] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.153331][ T5189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.214138][ T5202] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.278491][ T5195] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.288644][ T5195] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.296549][ T5195] bridge_slave_0: entered allmulticast mode [ 208.305581][ T5195] bridge_slave_0: entered promiscuous mode [ 208.384951][ T5189] team0: Port device team_slave_0 added [ 208.563530][ T5195] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.572672][ T5195] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.580411][ T5195] bridge_slave_1: entered allmulticast mode [ 208.589300][ T5195] bridge_slave_1: entered promiscuous mode [ 208.599316][ T5187] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.607245][ T5187] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.626013][ T5187] bridge_slave_0: entered allmulticast mode [ 208.635826][ T5187] bridge_slave_0: entered promiscuous mode [ 208.651918][ T5189] team0: Port device team_slave_1 added [ 208.659879][ T5187] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.668719][ T5187] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.676714][ T5187] bridge_slave_1: entered allmulticast mode [ 208.686022][ T5187] bridge_slave_1: entered promiscuous mode [ 208.729708][ T5202] team0: Port device team_slave_0 added [ 208.896157][ T5202] team0: Port device team_slave_1 added [ 208.913270][ T5187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.923412][ T5188] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.931511][ T5188] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.939269][ T5188] bridge_slave_0: entered allmulticast mode [ 208.947712][ T5188] bridge_slave_0: entered promiscuous mode [ 209.021688][ T5198] Bluetooth: hci2: command tx timeout [ 209.057606][ T5187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.099842][ T5188] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.109895][ T5188] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.111579][ T5198] Bluetooth: hci0: command tx timeout [ 209.117743][ T5188] bridge_slave_1: entered allmulticast mode [ 209.122791][ T4561] Bluetooth: hci3: command tx timeout [ 209.131741][ T5188] bridge_slave_1: entered promiscuous mode [ 209.134248][ T5200] Bluetooth: hci1: command tx timeout [ 209.155055][ T5195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.202174][ T5189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.209331][ T5189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.236058][ T5189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.276552][ T5198] Bluetooth: hci4: command tx timeout [ 209.316593][ T5202] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.325154][ T5202] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.352739][ T5202] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.406109][ T5195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.422814][ T5187] team0: Port device team_slave_0 added [ 209.468329][ T5189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.475720][ T5189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.503482][ T5189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.526766][ T5188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.556906][ T5202] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.564227][ T5202] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.590774][ T5202] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.610388][ T5187] team0: Port device team_slave_1 added [ 209.672542][ T5195] team0: Port device team_slave_0 added [ 209.688674][ T5188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.705338][ T5195] team0: Port device team_slave_1 added [ 209.957039][ T5187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.964493][ T5187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.991092][ T5187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.105472][ T5188] team0: Port device team_slave_0 added [ 210.122458][ T5188] team0: Port device team_slave_1 added [ 210.145208][ T5189] hsr_slave_0: entered promiscuous mode [ 210.154333][ T5189] hsr_slave_1: entered promiscuous mode [ 210.168429][ T5187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.175804][ T5187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.202229][ T5187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.227686][ T5195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.235072][ T5195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.261556][ T5195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.285869][ T5202] hsr_slave_0: entered promiscuous mode [ 210.297229][ T5202] hsr_slave_1: entered promiscuous mode [ 210.305290][ T5202] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 210.313097][ T5202] Cannot create hsr debugfs directory [ 210.388377][ T5188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.395713][ T5188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.422060][ T5188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.438786][ T5195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.446060][ T5195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.472539][ T5195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.542539][ T5188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.549741][ T5188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.576279][ T5188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.822050][ T5187] hsr_slave_0: entered promiscuous mode [ 210.830722][ T5187] hsr_slave_1: entered promiscuous mode [ 210.839389][ T5187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 210.847301][ T5187] Cannot create hsr debugfs directory [ 211.005954][ T5195] hsr_slave_0: entered promiscuous mode [ 211.014839][ T5195] hsr_slave_1: entered promiscuous mode [ 211.025603][ T5195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 211.034233][ T5195] Cannot create hsr debugfs directory [ 211.111705][ T5198] Bluetooth: hci2: command tx timeout [ 211.136658][ T5188] hsr_slave_0: entered promiscuous mode [ 211.146541][ T5188] hsr_slave_1: entered promiscuous mode [ 211.155831][ T5188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 211.163795][ T5188] Cannot create hsr debugfs directory [ 211.181077][ T5198] Bluetooth: hci0: command tx timeout [ 211.186727][ T5198] Bluetooth: hci1: command tx timeout [ 211.192973][ T5198] Bluetooth: hci3: command tx timeout [ 211.350294][ T5200] Bluetooth: hci4: command tx timeout [ 212.085915][ T5189] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 212.202906][ T5189] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 212.240483][ T5189] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 212.302085][ T5189] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 212.514693][ T5202] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 212.564690][ T5202] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 212.597199][ T5202] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 212.621222][ T5187] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 212.647421][ T5202] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 212.751490][ T5187] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 212.858712][ T5187] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 212.891286][ T5187] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 212.917670][ T5188] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 212.949297][ T5188] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 213.058313][ T5188] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 213.100087][ T5188] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 213.122492][ T5195] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 213.181982][ T5200] Bluetooth: hci2: command tx timeout [ 213.209044][ T5195] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 213.255117][ T5195] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 213.261325][ T5200] Bluetooth: hci1: command tx timeout [ 213.267696][ T5200] Bluetooth: hci3: command tx timeout [ 213.268419][ T5198] Bluetooth: hci0: command tx timeout [ 213.418171][ T5195] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 213.425639][ T5198] Bluetooth: hci4: command tx timeout [ 214.034894][ T5202] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.190338][ T5189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.240712][ T5202] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.271620][ T5187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.483819][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.491573][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.513299][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.521080][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.547100][ T5189] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.579337][ T5188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.594242][ T5187] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.656877][ T3630] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.664882][ T3630] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.783916][ T3630] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.791814][ T3630] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.807169][ T3630] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.814953][ T3630] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.832980][ T3630] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.840513][ T3630] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.996152][ T5188] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.192567][ T3630] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.200262][ T3630] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.303733][ T5189] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 215.314554][ T5189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 215.363591][ T5187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 215.385732][ T5202] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 215.467969][ T3630] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.475948][ T3630] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.633591][ T5195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.864159][ T5195] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.967579][ T5188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 216.009801][ T3502] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.017562][ T3502] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.034090][ T3502] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.041894][ T3502] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.452377][ T5189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.475952][ T5202] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.611960][ T5187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.988375][ T5189] veth0_vlan: entered promiscuous mode [ 218.047761][ T5188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.124555][ T5202] veth0_vlan: entered promiscuous mode [ 218.156354][ T5189] veth1_vlan: entered promiscuous mode [ 218.293590][ T5202] veth1_vlan: entered promiscuous mode [ 218.502778][ T5195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.659652][ T5189] veth0_macvtap: entered promiscuous mode [ 218.753846][ T5189] veth1_macvtap: entered promiscuous mode [ 218.803230][ T5202] veth0_macvtap: entered promiscuous mode [ 218.844531][ T5188] veth0_vlan: entered promiscuous mode [ 218.945788][ T5202] veth1_macvtap: entered promiscuous mode [ 219.048181][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 219.054366][ T5188] veth1_vlan: entered promiscuous mode [ 219.054951][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 219.117777][ T5189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.200232][ T5189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.310102][ T5202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.322132][ T5202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.337330][ T5202] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.399111][ T5195] veth0_vlan: entered promiscuous mode [ 219.412417][ T5189] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.423605][ T5189] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.432805][ T5189] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.441937][ T5189] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.474270][ T5202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.485154][ T5202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.500349][ T5202] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.622616][ T5195] veth1_vlan: entered promiscuous mode [ 219.645370][ T5202] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.654582][ T5202] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.663835][ T5202] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.672970][ T5202] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.732171][ T5188] veth0_macvtap: entered promiscuous mode [ 219.834874][ T5188] veth1_macvtap: entered promiscuous mode [ 220.039239][ T5195] veth0_macvtap: entered promiscuous mode [ 220.062323][ T5188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.073168][ T5188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.083456][ T5188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.094245][ T5188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.109559][ T5188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.167426][ T5195] veth1_macvtap: entered promiscuous mode [ 220.351295][ T5188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.362760][ T5188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.372985][ T5188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.384957][ T5188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.401886][ T5188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.452973][ T5195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.465700][ T5195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.475950][ T5195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.486808][ T5195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.496975][ T5195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.507811][ T5195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.523246][ T5195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.635395][ T5188] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.644781][ T5188] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.654042][ T5188] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.664097][ T5188] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.803696][ T5195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.814505][ T5195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.824679][ T5195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.835555][ T5195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.845845][ T5195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.856597][ T5195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.873149][ T5195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.913511][ T5187] veth0_vlan: entered promiscuous mode [ 221.031509][ T5195] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.040595][ T5195] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.049926][ T5195] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.059081][ T5195] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.145882][ T5187] veth1_vlan: entered promiscuous mode [ 221.475782][ T5187] veth0_macvtap: entered promiscuous mode [ 221.594159][ T5187] veth1_macvtap: entered promiscuous mode [ 221.837752][ T5187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.848960][ T5187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.860747][ T5187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.871901][ T5187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.882241][ T5187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.893064][ T5187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.904802][ T5187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.916704][ T5187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.931902][ T5187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.184193][ T5187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.195263][ T5187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.205662][ T5187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.216500][ T5187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.227852][ T5187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.238763][ T5187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.248912][ T5187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.259744][ T5187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.275132][ T5187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.441330][ T5187] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.450493][ T5187] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.459826][ T5187] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.472518][ T5187] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.954454][ T4121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.964706][ T4121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.193128][ T3630] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.202116][ T3630] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.327869][ T3630] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.336320][ T3630] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.544497][ T3415] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.553263][ T3415] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.747364][ T3388] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.755685][ T3388] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.781436][ T3630] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.789498][ T3630] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.947834][ T3630] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.956471][ T3630] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.096189][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.104895][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.195441][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.203800][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.341775][ T3388] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.353197][ T3388] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.540059][ T5377] process 'syz.3.6' launched './file0' with NULL argv: empty string added [ 229.314314][ T5383] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 229.372472][ T0] NOHZ tick-stop error: local softirq work is pending, handler #4a!!! [ 229.685435][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 229.788511][ T5387] netlink: 'syz.0.8': attribute type 29 has an invalid length. [ 229.875734][ T5387] netlink: 'syz.0.8': attribute type 29 has an invalid length. [ 229.947979][ T0] NOHZ tick-stop error: local softirq work is pending, handler #28a!!! [ 229.948751][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 231.956701][ T5403] binder: 5402:5403 ioctl 4018620d 0 returned -22 [ 232.037394][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 232.331158][ T5409] loop4: detected capacity change from 0 to 256 [ 232.852016][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 233.861715][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 233.879614][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 234.023148][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 234.146428][ T10] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 234.156065][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.249643][ T10] usb 5-1: config 0 descriptor?? [ 234.604952][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 235.405069][ C0] ===================================================== [ 235.412356][ C0] BUG: KMSAN: uninit-value in skb_release_head_state+0xe3/0x3b0 [ 235.420206][ C0] skb_release_head_state+0xe3/0x3b0 [ 235.425705][ C0] __kfree_skb+0x29/0x250 [ 235.430230][ C0] consume_skb+0xa8/0x2d0 [ 235.434745][ C0] ath6kl_usb_cleanup_recv_urb+0x47/0x450 [ 235.440634][ C0] ath6kl_usb_recv_complete+0xd4/0x420 [ 235.446269][ C0] __usb_hcd_giveback_urb+0x572/0x840 [ 235.451839][ C0] usb_hcd_giveback_urb+0x157/0x720 [ 235.457214][ C0] dummy_timer+0xd3f/0x6aa0 [ 235.461966][ C0] __hrtimer_run_queues+0x564/0xe40 [ 235.467364][ C0] hrtimer_interrupt+0x3ab/0x1490 [ 235.472575][ C0] __sysvec_apic_timer_interrupt+0xa6/0x3a0 [ 235.478759][ C0] sysvec_apic_timer_interrupt+0x7e/0x90 [ 235.484666][ C0] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 235.490849][ C0] acpi_safe_halt+0x25/0x30 [ 235.495539][ C0] acpi_idle_do_entry+0x22/0x40 [ 235.500597][ C0] acpi_idle_enter+0xa1/0xc0 [ 235.505382][ C0] cpuidle_enter_state+0xcb/0x250 [ 235.510597][ C0] cpuidle_enter+0x7f/0xf0 [ 235.515182][ C0] do_idle+0x551/0x750 [ 235.519438][ C0] cpu_startup_entry+0x65/0x80 [ 235.524394][ C0] rest_init+0x1e8/0x260 [ 235.528825][ C0] start_kernel+0x92c/0xa70 [ 235.533513][ C0] x86_64_start_reservations+0x2e/0x30 [ 235.539184][ C0] x86_64_start_kernel+0x9e/0xa0 [ 235.544406][ C0] common_startup_64+0x12c/0x137 [ 235.549523][ C0] [ 235.551927][ C0] Uninit was created at: [ 235.556476][ C0] __alloc_pages_noprof+0x9d6/0xe70 [ 235.561838][ C0] allocate_slab+0x203/0x1220 [ 235.566718][ C0] ___slab_alloc+0x12ef/0x35e0 [ 235.571676][ C0] kmem_cache_alloc_node_noprof+0x5fd/0xb80 [ 235.577759][ C0] __alloc_skb+0x1e9/0x7b0 [ 235.582347][ C0] __netdev_alloc_skb+0x11a/0x710 [ 235.587565][ C0] ath6kl_usb_post_recv_transfers+0x319/0xa50 [ 235.593835][ C0] ath6kl_usb_power_on+0x7f/0x2d0 [ 235.599065][ C0] ath6kl_core_init+0x231/0x1720 [ 235.604211][ C0] ath6kl_usb_probe+0x1d73/0x1f90 [ 235.609447][ C0] usb_probe_interface+0xd6f/0x1350 [ 235.614919][ C0] really_probe+0x4db/0xd90 [ 235.619622][ C0] __driver_probe_device+0x2ab/0x5d0 [ 235.625115][ C0] driver_probe_device+0x72/0x890 [ 235.630353][ C0] __device_attach_driver+0x568/0x9e0 [ 235.635941][ C0] bus_for_each_drv+0x403/0x620 [ 235.640968][ C0] __device_attach+0x3c1/0x650 [ 235.645934][ C0] device_initial_probe+0x32/0x40 [ 235.651169][ C0] bus_probe_device+0x3dc/0x5c0 [ 235.656191][ C0] device_add+0x13aa/0x1ba0 [ 235.660878][ C0] usb_set_configuration+0x31c9/0x38d0 [ 235.666503][ C0] usb_generic_driver_probe+0x109/0x2a0 [ 235.672252][ C0] usb_probe_device+0x3a7/0x690 [ 235.677260][ C0] really_probe+0x4db/0xd90 [ 235.681949][ C0] __driver_probe_device+0x2ab/0x5d0 [ 235.687448][ C0] driver_probe_device+0x72/0x890 [ 235.692664][ C0] __device_attach_driver+0x568/0x9e0 [ 235.698224][ C0] bus_for_each_drv+0x403/0x620 [ 235.703315][ C0] __device_attach+0x3c1/0x650 [ 235.708249][ C0] device_initial_probe+0x32/0x40 [ 235.713443][ C0] bus_probe_device+0x3dc/0x5c0 [ 235.718446][ C0] device_add+0x13aa/0x1ba0 [ 235.723131][ C0] usb_new_device+0x15f4/0x2470 [ 235.728193][ C0] hub_event+0x4ffb/0x72d0 [ 235.732748][ C0] process_scheduled_works+0xae0/0x1c40 [ 235.738467][ C0] worker_thread+0xea5/0x1520 [ 235.743304][ C0] kthread+0x3dd/0x540 [ 235.747540][ C0] ret_from_fork+0x6d/0x90 [ 235.752097][ C0] ret_from_fork_asm+0x1a/0x30 [ 235.757035][ C0] [ 235.759479][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.11.0-rc3-syzkaller-00306-gdf6cbc62cc9b #0 [ 235.769995][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 235.780188][ C0] ===================================================== [ 235.787206][ C0] Disabling lock debugging due to kernel taint [ 235.793466][ C0] Kernel panic - not syncing: kmsan.panic set ... [ 235.799989][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G B 6.11.0-rc3-syzkaller-00306-gdf6cbc62cc9b #0 [ 235.811983][ C0] Tainted: [B]=BAD_PAGE [ 235.816240][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 235.826619][ C0] Call Trace: [ 235.829996][ C0] [ 235.832935][ C0] dump_stack_lvl+0x216/0x2d0 [ 235.837887][ C0] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 235.844011][ C0] dump_stack+0x1e/0x30 [ 235.848359][ C0] panic+0x4e2/0xcd0 [ 235.852422][ C0] ? kmsan_get_metadata+0x41/0x1c0 [ 235.857739][ C0] kmsan_report+0x2c7/0x2d0 [ 235.862418][ C0] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 235.868412][ C0] ? kmsan_get_metadata+0x13e/0x1c0 [ 235.873786][ C0] ? __msan_warning+0x95/0x120 [ 235.878709][ C0] ? skb_release_head_state+0xe3/0x3b0 [ 235.884356][ C0] ? __kfree_skb+0x29/0x250 [ 235.889024][ C0] ? consume_skb+0xa8/0x2d0 [ 235.893865][ C0] ? ath6kl_usb_cleanup_recv_urb+0x47/0x450 [ 235.900265][ C0] ? ath6kl_usb_recv_complete+0xd4/0x420 [ 235.906049][ C0] ? __usb_hcd_giveback_urb+0x572/0x840 [ 235.911782][ C0] ? usb_hcd_giveback_urb+0x157/0x720 [ 235.917325][ C0] ? dummy_timer+0xd3f/0x6aa0 [ 235.922333][ C0] ? __hrtimer_run_queues+0x564/0xe40 [ 235.927896][ C0] ? hrtimer_interrupt+0x3ab/0x1490 [ 235.933276][ C0] ? __sysvec_apic_timer_interrupt+0xa6/0x3a0 [ 235.939535][ C0] ? sysvec_apic_timer_interrupt+0x7e/0x90 [ 235.945508][ C0] ? asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 235.951859][ C0] ? acpi_safe_halt+0x25/0x30 [ 235.956730][ C0] ? acpi_idle_do_entry+0x22/0x40 [ 235.961925][ C0] ? acpi_idle_enter+0xa1/0xc0 [ 235.966856][ C0] ? cpuidle_enter_state+0xcb/0x250 [ 235.972224][ C0] ? cpuidle_enter+0x7f/0xf0 [ 235.977064][ C0] ? do_idle+0x551/0x750 [ 235.981487][ C0] ? cpu_startup_entry+0x65/0x80 [ 235.986607][ C0] ? rest_init+0x1e8/0x260 [ 235.991196][ C0] ? start_kernel+0x92c/0xa70 [ 235.996118][ C0] ? x86_64_start_reservations+0x2e/0x30 [ 236.001943][ C0] ? x86_64_start_kernel+0x9e/0xa0 [ 236.007233][ C0] ? common_startup_64+0x12c/0x137 [ 236.012518][ C0] ? kmsan_get_metadata+0x13e/0x1c0 [ 236.017901][ C0] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 236.023894][ C0] ? sysvec_apic_timer_interrupt+0x7e/0x90 [ 236.029878][ C0] ? filter_irq_stacks+0x60/0x1a0 [ 236.035069][ C0] ? kmsan_get_metadata+0x13e/0x1c0 [ 236.040456][ C0] ? kmsan_get_metadata+0x13e/0x1c0 [ 236.045839][ C0] ? kmsan_get_metadata+0x13e/0x1c0 [ 236.052259][ C0] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 236.058376][ C0] __msan_warning+0x95/0x120 [ 236.063157][ C0] skb_release_head_state+0xe3/0x3b0 [ 236.068650][ C0] ? kmsan_get_metadata+0x13e/0x1c0 [ 236.074074][ C0] __kfree_skb+0x29/0x250 [ 236.078592][ C0] ? ath6kl_usb_cleanup_recv_urb+0x47/0x450 [ 236.084654][ C0] consume_skb+0xa8/0x2d0 [ 236.089164][ C0] ath6kl_usb_cleanup_recv_urb+0x47/0x450 [ 236.095042][ C0] ? kmsan_get_metadata+0x13e/0x1c0 [ 236.100465][ C0] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 236.106468][ C0] ath6kl_usb_recv_complete+0xd4/0x420 [ 236.112093][ C0] ? __pfx_ath6kl_usb_recv_complete+0x10/0x10 [ 236.118318][ C0] __usb_hcd_giveback_urb+0x572/0x840 [ 236.123862][ C0] ? kmsan_get_metadata+0x13e/0x1c0 [ 236.129258][ C0] usb_hcd_giveback_urb+0x157/0x720 [ 236.134654][ C0] dummy_timer+0xd3f/0x6aa0 [ 236.139340][ C0] ? kmsan_get_metadata+0x13e/0x1c0 [ 236.144726][ C0] ? kmsan_get_metadata+0x13e/0x1c0 [ 236.150110][ C0] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 236.156113][ C0] ? rb_erase+0x20e/0x23b0 [ 236.160684][ C0] ? kmsan_get_metadata+0x13e/0x1c0 [ 236.166097][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 236.171203][ C0] __hrtimer_run_queues+0x564/0xe40 [ 236.176621][ C0] hrtimer_interrupt+0x3ab/0x1490 [ 236.181935][ C0] ? __pfx_hrtimer_interrupt+0x10/0x10 [ 236.187580][ C0] ? __pfx_hrtimer_interrupt+0x10/0x10 [ 236.193219][ C0] __sysvec_apic_timer_interrupt+0xa6/0x3a0 [ 236.199434][ C0] sysvec_apic_timer_interrupt+0x7e/0x90 [ 236.205258][ C0] [ 236.208294][ C0] [ 236.211318][ C0] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 236.217511][ C0] RIP: 0010:acpi_safe_halt+0x25/0x30 [ 236.222987][ C0] Code: 90 90 90 90 90 55 48 89 e5 65 48 8b 04 25 00 60 0a 00 48 f7 00 08 00 00 00 75 10 66 90 0f 00 2d 2b ab 4f 00 f3 0f 1e fa fb f4 5d c3 cc cc cc cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 [ 236.242873][ C0] RSP: 0018:ffffffff91403ce8 EFLAGS: 00000246 [ 236.249100][ C0] RAX: ffffffff9142bdc0 RBX: ffffffff918902d0 RCX: 0000000000000001 [ 236.257210][ C0] RDX: ffff8881038e3064 RSI: ffffffff918902d0 RDI: ffff8881038e3064 [ 236.265407][ C0] RBP: ffffffff91403ce8 R08: ffffea000000000f R09: 00000000000000ff [ 236.273521][ C0] R10: ffff88823f12fdc2 R11: ffffffff8fcdd3b0 R12: ffff8881046ab400 [ 236.281631][ C0] R13: ffffffff91890350 R14: 0000000000000001 R15: 0000000000000001 [ 236.289742][ C0] ? __pfx_acpi_idle_enter+0x10/0x10 [ 236.295231][ C0] acpi_idle_do_entry+0x22/0x40 [ 236.300258][ C0] acpi_idle_enter+0xa1/0xc0 [ 236.305031][ C0] cpuidle_enter_state+0xcb/0x250 [ 236.310262][ C0] cpuidle_enter+0x7f/0xf0 [ 236.314844][ C0] do_idle+0x551/0x750 [ 236.319139][ C0] cpu_startup_entry+0x65/0x80 [ 236.324093][ C0] rest_init+0x1e8/0x260 [ 236.328528][ C0] start_kernel+0x92c/0xa70 [ 236.333201][ C0] x86_64_start_reservations+0x2e/0x30 [ 236.338880][ C0] x86_64_start_kernel+0x9e/0xa0 [ 236.344028][ C0] common_startup_64+0x12c/0x137 [ 236.349183][ C0] [ 236.352558][ C0] Kernel Offset: disabled [ 236.356953][ C0] Rebooting in 86400 seconds..