last executing test programs: 16.041629983s ago: executing program 4 (id=754): r0 = fsopen(&(0x7f0000000380)='iso9660\x00', 0x0) fcntl$dupfd(r0, 0x0, r0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) io_setup(0x6, &(0x7f0000001380)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x109301) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x88, 0x67, 0x0, &(0x7f0000001000)) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r3) sendmsg$NLBL_CIPSOV4_C_REMOVE(r2, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f00000008c0)={0x28, r4, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4000010) 15.795035437s ago: executing program 4 (id=758): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) io_setup(0x5, &(0x7f0000000000)=0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000800)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) r3 = socket$kcm(0x10, 0x2, 0x10) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000280)={0x11, @empty, 0x4c23, 0x1000, 'wrr\x00', 0x7, 0x8, 0x4002b}, 0x2c) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc540900", 0x2c}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff0f0000}, 0x0) r4 = io_uring_setup(0x1148, &(0x7f0000000300)={0x0, 0xc95e, 0x10000, 0x2, 0x30d}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) socket$inet_udp(0x2, 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8000, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) 5.819382774s ago: executing program 4 (id=791): socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x80, 0x4, 0x306}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @xdp}, 0x94) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x8, 0x1, 0xffffffffffffffff, 0x0}) io_uring_enter(r2, 0x3516, 0xc2de, 0x8, 0x0, 0x0) 5.397721738s ago: executing program 1 (id=794): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x2}) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x2000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000040)={0x191, 0x78, 0xa0, 0x78, 0x32, 0x1c0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0xaa, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, 0x8, 0xa, 0x0, 0x2, 0xa}) ioctl$KVM_CREATE_GUEST_MEMFD(r4, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) r7 = socket$netlink(0x10, 0x3, 0xb) r8 = memfd_secret(0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r8, 0x40045532, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000100)=[0x0]}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r8, 0xc01864b1, &(0x7f0000000340)={r9, 0x2, 0x3, 0x2, &(0x7f0000000300)=[{0x5, 0x4, 0x3, 0x2}, {0xfffa, 0x8, 0x0, 0x2823}]}) preadv(r0, &(0x7f00000008c0)=[{&(0x7f0000000740)=""/153, 0x99}], 0x1, 0x5, 0x32a) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r10 = getpid() sched_setscheduler(r10, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 4.619474441s ago: executing program 1 (id=798): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000300)={0xaa, 0x34d}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) syz_open_dev$sg(0x0, 0xe6, 0x2602) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps_rollup\x00') read$FUSE(r1, &(0x7f0000003100)={0x2020}, 0x2020) 3.271267556s ago: executing program 2 (id=801): syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000"], 0x140}}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) gettid() socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, 0x0) r5 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x8, 0x7ffc0000}]}) 3.173839282s ago: executing program 3 (id=802): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x40040) syz_open_procfs$pagemap(0x0, &(0x7f0000000180)) socket$xdp(0x2c, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0xa02, 0x0, 0x100000000, 0xfffffffffffffffd, 0x4, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000005, 0x9}, 0x0, 0x0) 2.976416063s ago: executing program 0 (id=803): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xf0) r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', 0x0, &(0x7f0000000180)=ANY=[], 0x24, 0x0) io_setup(0x8, &(0x7f0000000600)) ioctl$SIOCAX25ADDFWD(r0, 0x89ea, 0x0) 2.835538011s ago: executing program 3 (id=804): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000001a00)=""/4096, 0x1000}], 0x1}, 0x6037}], 0x1, 0x40010001, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x2409c8c1, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000001440)="0d0ad7c36d6617110e434332d6ac582208222cfb7c37ce1148f448455bc37f5f70c92774dcb201629979039d7c8943b207e5bdf9abaeed9ace110469c51f4f211dd9fad815eb5b273ac04e1edc679bcdf0a0d24482de5454be9003cb80714a95e136bb704ee58e707d1e69b3c3a1c2c37f9c0402e14abdeb32086a49aff25e5c0f0131d59b4783316b9fa2c71c51ce76942d5f519145c9e3bf0d4182b4a62970b2ce81d35a7afc8384b387b8e21f2051d90d92323a710cabe5275d335b64453e759251a140de480541d8dd7662a14296a59eba99b95bfdf5b22992c323865b471d13ad79867e2692fd4eec", 0xeb, 0x6d91fb6102d8910c, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 2.692452209s ago: executing program 1 (id=805): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x4000080) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@deltaction={0x48, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x34, 0x1, [{0xc, 0x8f, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x2, 0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB="120100008020f010402038b1ff0104000001090238000100000000090400000544fb2f0009054beb82c500000102000905d9"], 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="64000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400010000000900020073797a3000000000050005000000000005000100060000001c0007800600044000000000060005400000000008000640", @ANYRES16], 0x64}}, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f0000008d80)) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002440)=ANY=[@ANYBLOB="34000000090605000a00000000000000000000000900020073797a300000000005000100060000000c00078006000440"], 0x34}}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000040)) 2.336809489s ago: executing program 4 (id=806): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.275341852s ago: executing program 2 (id=807): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)=@arm64={0x6, 0x4, 0x9, '\x00', 0x1}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.238178865s ago: executing program 4 (id=808): bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x12, 0x8, 0x4, 0x7cb4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setrlimit(0x0, &(0x7f0000000140)={0x2}) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ptrace$setopts(0x4206, r0, 0x3, 0x42) shmctl$IPC_RMID(0x0, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) ptrace$ARCH_GET_GS(0x1e, r2, &(0x7f0000000080), 0x1004) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) syz_open_dev$evdev(&(0x7f0000000180), 0x80, 0x4400) r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x70, 0x103301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) syz_emit_ethernet(0x7a, &(0x7f0000000280)={@local, @random='?\x00', @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x23, 0x6c, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x16, 0x10, 0x7, 0x0, 0x67, {[@mptcp=@remove_addr={0x1e, 0x41, 0x2, 0x0, "88391a84ed441d2486917d411bdd85e00f2f8a9bf72fb7e5d517db70538b3945905ec288f0eb7b104049c25387cdf6564600b902e2e7d74b3c7698494b8b"}]}}}}}}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x40, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40, 0x1}) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 2.228901305s ago: executing program 2 (id=809): socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r3, 0x6, 0x1f, 0x0, &(0x7f0000000000)) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r5, &(0x7f0000000100)='maps\x00') syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x0, 0x96, 0xd1, 0xca}}]}}]}}, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) 1.804263868s ago: executing program 0 (id=810): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdir(&(0x7f0000000440)='./file1\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 1.802776489s ago: executing program 1 (id=811): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x10}, 0xc) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback, 0x8}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1.659358797s ago: executing program 0 (id=812): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x2}) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x2000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000040)={0x191, 0x78, 0xa0, 0x78, 0x32, 0x1c0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0xaa, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, 0x8, 0xa, 0x0, 0x2, 0xa}) ioctl$KVM_CREATE_GUEST_MEMFD(r4, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) socket$netlink(0x10, 0x3, 0xb) r7 = memfd_secret(0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r7, 0x40045532, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000100)=[0x0]}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r7, 0xc01864b1, &(0x7f0000000340)={r8, 0x2, 0x3, 0x2, &(0x7f0000000300)=[{0x5, 0x4, 0x3, 0x2}, {0xfffa, 0x8, 0x0, 0x2823}]}) preadv(r0, &(0x7f00000008c0)=[{&(0x7f0000000740)=""/153, 0x99}], 0x1, 0x5, 0x32a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 1.564610982s ago: executing program 4 (id=813): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x67f4, 0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 1.563696042s ago: executing program 1 (id=814): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x40040) syz_open_procfs$pagemap(0x0, &(0x7f0000000180)) socket$xdp(0x2c, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0xa02, 0x0, 0x100000000, 0xfffffffffffffffd, 0x4, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000005, 0x9}, 0x0, 0x0) 1.479309207s ago: executing program 3 (id=815): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)={0x44, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x28, 0x33, @data_frame={@a_msdu=@type11={{0x0, 0x2, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x7}, @broadcast, @broadcast, @initial, {0x0, 0x39}, @device_a, @value={0x4, 0x0, 0x3, 0x1, 0x8f}, @value=@ver_80211n={0x0, 0x53, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}, @a_msdu}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.478916027s ago: executing program 0 (id=816): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xb, 0x0, 0x0, 0x8003}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000005c7581b1974e8b7bcb78ec52afc930a6fe17f022362c29f95835dfc6fb051d411fa6b3aceec4e98803f8f59e33142c7f7c4478e59bcaa3dc35ff0320a375d318bd05352558af8c9da3e890d674ce774f4edf3c09d63b787c7f4b5428007d0283b8b0e6d4099647d5f0d3c133a5e568cff8374b4e8b3632f2461bc8c37324ecea8878ca38bcf6be538ee0b519c205e4505165b7a65ab5ff1386f390dfe05f51d9d6a735996a984700"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r4) r5 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r5, 0x400, 0x1) r6 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r6, &(0x7f0000000340)={'#! ', './file0'}, 0xb) execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 1.415317061s ago: executing program 1 (id=817): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x64048080) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) listen(r0, 0x8) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x20048054}}], 0x1, 0x8800) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x1}, 0x8) sendmmsg$alg(r3, &(0x7f0000005ac0)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000380)="eb", 0x1}], 0x1, 0x0, 0x0, 0x40045}], 0x1, 0x4081) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r6 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x2, 0x0, 0x0, r5}, &(0x7f0000000180), &(0x7f00000001c0)) io_uring_enter(r6, 0x2ded, 0x14fa, 0x0, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 1.397656411s ago: executing program 3 (id=818): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)=@arm64={0x6, 0x4, 0x9, '\x00', 0x1}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.019363482s ago: executing program 2 (id=819): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)=@arm64={0x6, 0x4, 0x9, '\x00', 0x1}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 451.791434ms ago: executing program 0 (id=820): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unshare(0x26020400) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x8, 0x1, 0x8, 0xffffffffffffffff, 0x4}) 213.077627ms ago: executing program 2 (id=821): r0 = fsopen(&(0x7f0000000380)='iso9660\x00', 0x0) fcntl$dupfd(r0, 0x0, r0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) io_submit(0x0, 0x2, &(0x7f0000001140)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x10, 0xffffffffffffffff, 0x0}]) syz_open_dev$usbfs(0x0, 0x76, 0x109301) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x88, 0x67, 0x0, &(0x7f0000001000)) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r3) sendmsg$NLBL_CIPSOV4_C_REMOVE(r2, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f00000008c0)={0x28, r4, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4000010) 139.454352ms ago: executing program 3 (id=822): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdir(&(0x7f0000000440)='./file1\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 97.918794ms ago: executing program 0 (id=823): bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x12, 0x8, 0x4, 0x7cb4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setrlimit(0x0, &(0x7f0000000140)={0x2}) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ptrace$setopts(0x4206, r0, 0x3, 0x42) shmctl$IPC_RMID(0x0, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) ptrace$ARCH_GET_GS(0x1e, r2, &(0x7f0000000080), 0x1004) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000340)=""/243) r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x70, 0x103301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) syz_emit_ethernet(0x7a, &(0x7f0000000280)={@local, @random='?\x00', @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x23, 0x6c, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x16, 0x10, 0x7, 0x0, 0x67, {[@mptcp=@remove_addr={0x1e, 0x41, 0x2, 0x0, "88391a84ed441d2486917d411bdd85e00f2f8a9bf72fb7e5d517db70538b3945905ec288f0eb7b104049c25387cdf6564600b902e2e7d74b3c7698494b8b"}]}}}}}}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x40, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40, 0x1}) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 11.331199ms ago: executing program 2 (id=824): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000a80)={'ip6gretap0\x00', &(0x7f00000009c0)=@ethtool_flash={0x26, 0x8000000, './file0\x00'}}) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000280)=0x1e) getsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000040)={r6, 0xc, 0x8, 0xa, 0x9, 0x10001}, &(0x7f0000000440)=0x14) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000140)={r6, 0x3, 0xf, 0x4, 0x0, 0x200}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000100)={r6, @in6={{0xa, 0x4e20, 0x5, @local, 0x3d}}, 0x7ff, 0x1}, &(0x7f0000000000)=0x90) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x10000802, 0x80, 0x0, 0x40000}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x80400, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000200)={@my=0x1}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(0xffffffffffffffff, 0x7af, &(0x7f0000000000)={@any, 0x5}) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(0xffffffffffffffff, 0x7b0, 0x0) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r8, &(0x7f0000000000)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) socket$nl_crypto(0x10, 0x3, 0x15) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r9 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000080)={'nr0\x00', 0x2000}) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}]}]}, 0x40}, 0x1, 0x1000000, 0x0, 0x24004800}, 0x4) 0s ago: executing program 3 (id=825): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000001a00)=""/4096, 0x1000}], 0x1}, 0x6037}], 0x1, 0x40010001, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x2409c8c1, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000001440)="0d0ad7c36d6617110e434332d6ac582208222cfb7c37ce1148f448455bc37f5f70c92774dcb201629979039d7c8943b207e5bdf9abaeed9ace110469c51f4f211dd9fad815eb5b273ac04e1edc679bcdf0a0d24482de5454be9003cb80714a95e136bb704ee58e707d1e69b3c3a1c2c37f9c0402e14abdeb32086a49aff25e5c0f0131d59b4783316b9fa2c71c51ce76942d5f519145c9e3bf0d4182b4a62970b2ce81d35a7afc8384b387b8e21f2051d90d92323a710cabe5275d335b64453e759251a140de480541d8dd7662a14296a59eba99b95bfdf5b22992c323865b471d13ad79867e2692fd4eec", 0xeb, 0x6d91fb6102d8910c, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.154' (ED25519) to the list of known hosts. [ 68.440120][ T4254] cgroup: Unknown subsys name 'net' [ 68.604476][ T4254] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 70.178292][ T4254] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 71.431216][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.437633][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.200608][ T4279] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 72.209742][ T4279] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 72.218287][ T4285] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 72.226647][ T4285] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 72.234519][ T4285] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 72.242461][ T4285] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 72.249162][ T4282] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 72.251133][ T4285] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 72.257270][ T4282] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 72.264180][ T4285] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 72.271411][ T4282] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 72.278783][ T4285] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 72.285409][ T4282] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 72.300055][ T4285] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 72.300380][ T4282] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 72.307636][ T4285] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 72.315539][ T4282] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 72.321681][ T4285] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 72.329998][ T4282] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 72.335617][ T4285] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 72.342571][ T4282] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 72.356195][ T4286] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 72.357170][ T4282] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 72.363876][ T4286] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 72.371576][ T4282] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 72.377824][ T4286] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 72.391809][ T4286] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 72.399222][ T4286] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 72.407344][ T4286] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 72.415877][ T4286] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 72.782602][ T4270] chnl_net:caif_netlink_parms(): no params data found [ 72.954829][ T4270] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.979765][ T4270] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.988518][ T4270] device bridge_slave_0 entered promiscuous mode [ 73.003727][ T4274] chnl_net:caif_netlink_parms(): no params data found [ 73.014454][ T4281] chnl_net:caif_netlink_parms(): no params data found [ 73.042998][ T4270] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.050193][ T4270] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.058073][ T4270] device bridge_slave_1 entered promiscuous mode [ 73.069319][ T4267] chnl_net:caif_netlink_parms(): no params data found [ 73.092241][ T4268] chnl_net:caif_netlink_parms(): no params data found [ 73.143676][ T4270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.176638][ T4270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.234047][ T4281] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.244354][ T4281] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.252486][ T4281] device bridge_slave_0 entered promiscuous mode [ 73.267476][ T4281] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.275061][ T4281] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.285915][ T4281] device bridge_slave_1 entered promiscuous mode [ 73.311013][ T4270] team0: Port device team_slave_0 added [ 73.348827][ T4270] team0: Port device team_slave_1 added [ 73.366840][ T4267] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.374098][ T4267] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.382513][ T4267] device bridge_slave_0 entered promiscuous mode [ 73.390119][ T4274] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.397230][ T4274] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.405730][ T4274] device bridge_slave_0 entered promiscuous mode [ 73.418263][ T4268] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.426659][ T4268] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.434797][ T4268] device bridge_slave_0 entered promiscuous mode [ 73.444362][ T4281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.457426][ T4267] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.464750][ T4267] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.474719][ T4267] device bridge_slave_1 entered promiscuous mode [ 73.488435][ T4274] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.496272][ T4274] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.504295][ T4274] device bridge_slave_1 entered promiscuous mode [ 73.512433][ T4268] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.519746][ T4268] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.527773][ T4268] device bridge_slave_1 entered promiscuous mode [ 73.536612][ T4281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.562950][ T4270] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.570037][ T4270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.596288][ T4270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.609690][ T4270] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.616664][ T4270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.642649][ T4270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.706346][ T4268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.719426][ T4267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.732306][ T4267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.749218][ T4281] team0: Port device team_slave_0 added [ 73.771937][ T4274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.783819][ T4268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.800987][ T4281] team0: Port device team_slave_1 added [ 73.808686][ T4267] team0: Port device team_slave_0 added [ 73.818323][ T4270] device hsr_slave_0 entered promiscuous mode [ 73.825203][ T4270] device hsr_slave_1 entered promiscuous mode [ 73.835879][ T4274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.860112][ T4267] team0: Port device team_slave_1 added [ 73.903643][ T4281] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.917720][ T4281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.947242][ T4281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.965975][ T4281] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.973029][ T4281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.001012][ T4281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.020404][ T4268] team0: Port device team_slave_0 added [ 74.031831][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.038986][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.065156][ T4267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.079319][ T4274] team0: Port device team_slave_0 added [ 74.090954][ T4268] team0: Port device team_slave_1 added [ 74.106236][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.113356][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.140455][ T4267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.153360][ T4274] team0: Port device team_slave_1 added [ 74.221330][ T4281] device hsr_slave_0 entered promiscuous mode [ 74.228284][ T4281] device hsr_slave_1 entered promiscuous mode [ 74.235387][ T4281] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.243392][ T4281] Cannot create hsr debugfs directory [ 74.251026][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.258034][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.284606][ T4274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.305789][ T4268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.313746][ T4268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.339786][ T4268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.357407][ T4268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.364620][ T4268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.391643][ T4268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.404340][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.414418][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.443726][ T4274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.469849][ T4282] Bluetooth: hci0: command 0x0409 tx timeout [ 74.469863][ T4279] Bluetooth: hci3: command 0x0409 tx timeout [ 74.478876][ T4279] Bluetooth: hci2: command 0x0409 tx timeout [ 74.549318][ T4279] Bluetooth: hci1: command 0x0409 tx timeout [ 74.549417][ T4282] Bluetooth: hci4: command 0x0409 tx timeout [ 74.577957][ T4267] device hsr_slave_0 entered promiscuous mode [ 74.584711][ T4267] device hsr_slave_1 entered promiscuous mode [ 74.591449][ T4267] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.599242][ T4267] Cannot create hsr debugfs directory [ 74.622175][ T4274] device hsr_slave_0 entered promiscuous mode [ 74.630627][ T4274] device hsr_slave_1 entered promiscuous mode [ 74.637156][ T4274] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.644948][ T4274] Cannot create hsr debugfs directory [ 74.687694][ T4268] device hsr_slave_0 entered promiscuous mode [ 74.695623][ T4268] device hsr_slave_1 entered promiscuous mode [ 74.702631][ T4268] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.710356][ T4268] Cannot create hsr debugfs directory [ 74.937983][ T4270] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.986483][ T4270] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 75.010015][ T4270] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 75.020110][ T4270] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 75.066160][ T4281] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 75.076645][ T4281] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 75.086823][ T4281] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 75.096918][ T4281] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 75.175915][ T4267] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.187058][ T4267] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.214269][ T4267] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.231927][ T4267] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.290576][ T4274] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 75.323877][ T4274] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 75.333032][ T4274] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 75.343757][ T4274] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 75.389239][ T4281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.406698][ T4268] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 75.416413][ T4268] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 75.426362][ T4268] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 75.441232][ T4268] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 75.461735][ T4270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.505456][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.516930][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.544317][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.552382][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.575454][ T4270] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.607290][ T4281] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.622533][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.633736][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.645460][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.652910][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.662675][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.695282][ T4274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.718270][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.731697][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.741314][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.748440][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.758336][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.767388][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.776059][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.783266][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.792277][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.801160][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.810551][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.817639][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.825516][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.834854][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.857966][ T4274] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.882319][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.894101][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.904142][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.913973][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.922949][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.933019][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.941739][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.956813][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.966534][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.975719][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.987310][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.004501][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.013475][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.020607][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.046786][ T4270] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 76.057647][ T4270] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.076795][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 76.087082][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.098158][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.107637][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 76.116616][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.125695][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.134622][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.143434][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.153013][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.176480][ T4268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.186000][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.202796][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.216271][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.230857][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.239652][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.246858][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.259626][ T4267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.288843][ T4268] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.323027][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 76.334731][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.345984][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.362184][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 76.374509][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.386245][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.403444][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.414647][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.423900][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.433139][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.445494][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.479475][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.488493][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.497257][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.515629][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.527762][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.534958][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.550118][ T4282] Bluetooth: hci2: command 0x041b tx timeout [ 76.552079][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 76.556596][ T4282] Bluetooth: hci3: command 0x041b tx timeout [ 76.568464][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.570733][ T4271] Bluetooth: hci0: command 0x041b tx timeout [ 76.581236][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.593575][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.605710][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.628249][ T4267] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.635337][ T4279] Bluetooth: hci4: command 0x041b tx timeout [ 76.635591][ T4282] Bluetooth: hci1: command 0x041b tx timeout [ 76.661089][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 76.677101][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 76.686900][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.712178][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.747552][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.756849][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.766087][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.773392][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.782398][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.792301][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.801850][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.809034][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.817207][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.825897][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.838222][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.881607][ T4270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.894634][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 76.905271][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.916264][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.932916][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.940132][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.955783][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.965677][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.980277][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.990208][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 77.027657][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 77.048701][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 77.061188][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 77.071479][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 77.080839][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 77.090985][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 77.101206][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 77.116236][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 77.139782][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 77.150519][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 77.162799][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 77.212112][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 77.228162][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 77.249172][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 77.269906][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 77.289139][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 77.310143][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 77.319160][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 77.344397][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 77.363920][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.380872][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.440717][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.448282][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.487614][ T4281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.511250][ T4270] device veth0_vlan entered promiscuous mode [ 77.549183][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.557878][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.583420][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.600285][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.616188][ T4270] device veth1_vlan entered promiscuous mode [ 77.647718][ T4274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.669636][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.677514][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.692526][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 77.795882][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 77.820969][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.839720][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.864059][ T4270] device veth0_macvtap entered promiscuous mode [ 77.880718][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.894483][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.906988][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.954116][ T4270] device veth1_macvtap entered promiscuous mode [ 77.987134][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 78.014308][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 78.031864][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 78.044404][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 78.056291][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 78.090294][ T4270] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.126025][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.142034][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.170197][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 78.177679][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 78.194101][ T4274] device veth0_vlan entered promiscuous mode [ 78.214021][ T4268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.229583][ T4270] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.246231][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.256897][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.284157][ T4270] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.301121][ T4270] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.310479][ T4270] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.319582][ T4270] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.331186][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 78.342739][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 78.356294][ T4274] device veth1_vlan entered promiscuous mode [ 78.402557][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 78.412760][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 78.423382][ T4267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.477697][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 78.490581][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 78.499652][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 78.508132][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 78.517224][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 78.526461][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 78.549360][ T4274] device veth0_macvtap entered promiscuous mode [ 78.560866][ T4268] device veth0_vlan entered promiscuous mode [ 78.588394][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 78.605487][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 78.617248][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 78.627494][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 78.628864][ T4271] Bluetooth: hci3: command 0x040f tx timeout [ 78.638791][ T4282] Bluetooth: hci0: command 0x040f tx timeout [ 78.641404][ T4271] Bluetooth: hci2: command 0x040f tx timeout [ 78.653655][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 78.662628][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 78.670539][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 78.681481][ T4274] device veth1_macvtap entered promiscuous mode [ 78.698466][ T4268] device veth1_vlan entered promiscuous mode [ 78.708293][ T4281] device veth0_vlan entered promiscuous mode [ 78.714518][ T4279] Bluetooth: hci1: command 0x040f tx timeout [ 78.720907][ T4271] Bluetooth: hci4: command 0x040f tx timeout [ 78.736354][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 78.747820][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 78.756732][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 78.766022][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 78.819860][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 78.829999][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 78.838543][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 78.847916][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 78.856370][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 78.868005][ T4267] device veth0_vlan entered promiscuous mode [ 78.884133][ T4268] device veth0_macvtap entered promiscuous mode [ 78.902087][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.917623][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.932587][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.943406][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 78.953142][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 78.962014][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.972155][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.981841][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 78.999532][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.007555][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.017639][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.032561][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.044517][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.055618][ T4267] device veth1_vlan entered promiscuous mode [ 79.065555][ T4281] device veth1_vlan entered promiscuous mode [ 79.077531][ T4268] device veth1_macvtap entered promiscuous mode [ 79.091353][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 79.100194][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 79.108351][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 79.119314][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.127351][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 79.136480][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 79.150889][ T4274] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.164513][ T4274] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.173745][ T4274] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.184406][ T4274] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.244291][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.255640][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.266825][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.280899][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.293039][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.312675][ T4369] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.323275][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 79.332244][ T4369] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.341296][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 79.352468][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.377377][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.398445][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.409294][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.419935][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.432747][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.456640][ T4281] device veth0_macvtap entered promiscuous mode [ 79.472282][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 79.482394][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 79.492097][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 79.502270][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 79.512206][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 79.521711][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 79.530877][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 79.543733][ T4268] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.553188][ T4268] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.562055][ T4268] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.571316][ T4268] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.588291][ T4267] device veth0_macvtap entered promiscuous mode [ 79.623894][ T4281] device veth1_macvtap entered promiscuous mode [ 79.674799][ T4267] device veth1_macvtap entered promiscuous mode [ 79.696663][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.699512][ T4369] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.717429][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.728287][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.747219][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.751558][ T4369] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.773665][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.785880][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.804523][ T4281] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.835369][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 79.857222][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 79.870782][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 79.880267][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.906009][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 79.917446][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 79.950759][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.964204][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.977271][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.995252][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.005651][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.022601][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.037621][ T4281] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.062795][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 80.076430][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 80.101436][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.122848][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.140940][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.166934][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.177170][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.196680][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.207374][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.218366][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.240780][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.250378][ T4281] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.264520][ T4281] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.274181][ T4281] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.283616][ T4281] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.293113][ T4395] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 80.333046][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 80.343614][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 80.356320][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.373895][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.377398][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.383400][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.420628][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.431392][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.442105][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.453404][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.463554][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.474476][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.486711][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.498310][ T4267] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.511018][ T4267] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.520115][ T4267] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.529036][ T4267] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.553611][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 80.570611][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 80.585140][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 80.630205][ T4353] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.638090][ T4353] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.680212][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.693688][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.709205][ T4271] Bluetooth: hci2: command 0x0419 tx timeout [ 80.709581][ T4279] Bluetooth: hci0: command 0x0419 tx timeout [ 80.715371][ T4271] Bluetooth: hci3: command 0x0419 tx timeout [ 80.739737][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 80.771604][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 80.789370][ T4271] Bluetooth: hci4: command 0x0419 tx timeout [ 80.795305][ T4279] Bluetooth: hci1: command 0x0419 tx timeout [ 80.924427][ T4405] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4'. [ 81.000674][ T4406] Zero length message leads to an empty skb [ 81.018369][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.047018][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.092941][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 81.131940][ T4362] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.150661][ T4362] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.168511][ T4353] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.168951][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 81.187220][ T4353] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.211285][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 81.273523][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.297785][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.307111][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 81.418527][ T4415] loop3: detected capacity change from 0 to 512 [ 81.671200][ T128] cfg80211: failed to load regulatory.db [ 82.172606][ T4424] loop2: detected capacity change from 0 to 128 [ 84.184523][ T4453] loop0: detected capacity change from 0 to 256 [ 84.280202][ T4453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.23'. [ 84.337707][ T4453] netlink: 24 bytes leftover after parsing attributes in process `syz.0.23'. [ 85.078205][ T4481] netlink: 12 bytes leftover after parsing attributes in process `syz.2.35'. [ 87.901216][ T4558] loop2: detected capacity change from 0 to 164 [ 87.996581][ T4558] rock: corrupted directory entry. extent=32, offset=131072, size=237 [ 88.058838][ T4558] isofs_fill_super: root inode is not a directory. Corrupted media? [ 88.716504][ T4568] xt_hashlimit: size too large, truncated to 1048576 [ 91.258196][ T4596] netlink: 'syz.0.77': attribute type 30 has an invalid length. [ 93.114009][ T4618] loop3: detected capacity change from 0 to 2048 [ 93.213364][ T4618] capability: warning: `syz.3.86' uses deprecated v2 capabilities in a way that may be insecure [ 93.560116][ T4626] loop3: detected capacity change from 0 to 128 [ 93.574108][ T4626] ======================================================= [ 93.574108][ T4626] WARNING: The mand mount option has been deprecated and [ 93.574108][ T4626] and is ignored by this kernel. Remove the mand [ 93.574108][ T4626] option from the mount to silence this warning. [ 93.574108][ T4626] ======================================================= [ 97.068742][ C0] sched: RT throttling activated [ 98.672914][ T4353] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.917516][ T4353] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.077199][ T4353] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.309469][ T4353] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.172199][ T4282] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 100.181885][ T4282] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 100.190032][ T4282] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 100.208559][ T4282] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 100.216477][ T4282] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 100.223912][ T4282] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 101.297331][ T4734] chnl_net:caif_netlink_parms(): no params data found [ 102.090730][ T4734] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.161998][ T4734] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.253515][ T4734] device bridge_slave_0 entered promiscuous mode [ 102.308842][ T4279] Bluetooth: hci0: command 0x0409 tx timeout [ 102.569284][ T4734] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.576500][ T4734] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.608936][ T4734] device bridge_slave_1 entered promiscuous mode [ 102.699583][ T4353] device hsr_slave_0 left promiscuous mode [ 102.769012][ T4353] device hsr_slave_1 left promiscuous mode [ 102.793453][ T4353] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.808978][ T4353] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.833953][ T4353] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.864000][ T4353] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.906724][ T4353] device bridge_slave_1 left promiscuous mode [ 102.947909][ T4353] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.050760][ T4353] device bridge_slave_0 left promiscuous mode [ 103.057152][ T4353] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.190128][ T4353] device veth1_macvtap left promiscuous mode [ 103.217179][ T4353] device veth0_macvtap left promiscuous mode [ 103.236235][ T4353] device veth1_vlan left promiscuous mode [ 103.258205][ T4353] device veth0_vlan left promiscuous mode [ 103.890608][ T4353] bond1 (unregistering): Released all slaves [ 104.389193][ T4279] Bluetooth: hci0: command 0x041b tx timeout [ 104.725933][ T4876] syz.4.175 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 105.632429][ T4353] team0 (unregistering): Port device team_slave_1 removed [ 105.825836][ T4353] team0 (unregistering): Port device team_slave_0 removed [ 106.010171][ T4353] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.026217][ T4910] Cannot find add_set index 0 as target [ 106.129825][ T4353] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.478840][ T4279] Bluetooth: hci0: command 0x040f tx timeout [ 107.517165][ T4353] bond0 (unregistering): Released all slaves [ 107.838310][ T4734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.926058][ T41] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 108.033203][ T4734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.250415][ T4734] team0: Port device team_slave_0 added [ 108.278969][ T41] usb 2-1: Using ep0 maxpacket: 16 [ 108.289631][ T4734] team0: Port device team_slave_1 added [ 108.300640][ T41] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.395772][ T41] usb 2-1: config 0 interface 0 has no altsetting 0 [ 108.441654][ T4734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.452679][ T41] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 108.480185][ T4734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.517332][ T41] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.551250][ T4279] Bluetooth: hci0: command 0x0419 tx timeout [ 108.572075][ T41] usb 2-1: config 0 descriptor?? [ 108.665278][ T4734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.819117][ T4734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.845825][ T4734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.948839][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 108.958871][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 108.967928][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 108.976265][ T0] NOHZ tick-stop error: local softirq work is pending, handler #302!!! [ 108.984811][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 108.993246][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 109.039550][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 109.906904][ T4734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.938563][ T41] nzxt-smart2 0003:1E71:2009.0001: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 110.136279][ T41] usb 2-1: USB disconnect, device number 2 [ 110.279255][ T4734] device hsr_slave_0 entered promiscuous mode [ 110.296617][ T4734] device hsr_slave_1 entered promiscuous mode [ 110.306458][ T4734] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 110.326112][ T4734] Cannot create hsr debugfs directory [ 110.374494][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 110.382926][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 110.391288][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 111.135551][ T4958] Falling back ldisc for ttyprintk. [ 111.788761][ T4951] fido_id[4951]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 112.899626][ T4979] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 113.624500][ T4734] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 113.683787][ T4734] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 113.884955][ T4734] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 113.996590][ T4734] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 114.478431][ T4734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.594341][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 114.614327][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 114.685995][ T4734] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.733692][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 114.754639][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 114.794320][ T4369] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.801625][ T4369] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.859394][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 114.874813][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 114.892244][ T5043] netlink: 16 bytes leftover after parsing attributes in process `syz.1.217'. [ 114.916203][ T4369] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.923413][ T4369] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.970885][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 115.020071][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 115.060093][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 115.123791][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 115.199938][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 115.231445][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 115.287670][ T5053] process 'syz.2.220' launched '/dev/fd/7' with NULL argv: empty string added [ 116.239922][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 116.261485][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 116.278151][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 116.339130][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 116.387543][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 116.465032][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 116.534149][ T4734] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 116.789691][ T4279] Bluetooth: hci1: unexpected cc 0x203e length: 2 > 1 [ 118.131299][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 118.151643][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 118.217098][ T4734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.350646][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 118.379521][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 118.513583][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 118.536187][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 118.647432][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 118.713989][ T5079] netlink: 8 bytes leftover after parsing attributes in process `syz.4.223'. [ 118.723395][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 118.743764][ T4734] device veth0_vlan entered promiscuous mode [ 118.803293][ T4734] device veth1_vlan entered promiscuous mode [ 118.831501][ T5083] loop5: detected capacity change from 0 to 7 [ 118.840938][ T4386] Dev loop5: unable to read RDB block 7 [ 118.846857][ T4386] loop5: unable to read partition table [ 118.874730][ T4386] loop5: partition table beyond EOD, truncated [ 118.911256][ T5083] Dev loop5: unable to read RDB block 7 [ 118.946769][ T5083] loop5: unable to read partition table [ 118.954205][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 118.982466][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 119.002117][ T5083] loop5: partition table beyond EOD, truncated [ 119.019510][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 119.020095][ T5083] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 119.074022][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 119.133110][ T4734] device veth0_macvtap entered promiscuous mode [ 119.175310][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 119.204956][ T4734] device veth1_macvtap entered promiscuous mode [ 119.219336][ T22] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 119.341924][ T4734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.384068][ T4734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.410259][ T4734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.435920][ T4734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.439262][ T22] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 119.457848][ T4734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.466657][ T22] usb 3-1: config 1 has no interface number 0 [ 119.476547][ T22] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.487989][ T4734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.488343][ T22] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 119.508130][ T22] usb 3-1: config 1 interface 1 altsetting 1 has an invalid endpoint with address 0xFF, skipping [ 119.513358][ T4734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.544511][ T22] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 119.554192][ T4734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.559029][ T22] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.572722][ T22] usb 3-1: Product: syz [ 119.577138][ T22] usb 3-1: Manufacturer: syz [ 119.582243][ T4734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.584529][ T22] usb 3-1: SerialNumber: syz [ 119.628360][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 119.645444][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 119.712787][ T4734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.766041][ T4734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.802264][ T4734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.849518][ T5086] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 119.864529][ T4734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.916300][ T4734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.029001][ T4279] Bluetooth: hci2: unexpected cc 0x203e length: 2 > 1 [ 120.259093][ T22] cdc_ncm 3-1:1.1: bind() failure [ 120.367509][ T22] usb 3-1: USB disconnect, device number 2 [ 120.620341][ T4734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.630632][ T4734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.641729][ T4734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.689141][ T4734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.714764][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 120.729662][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 120.795230][ T4734] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.824228][ T4734] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.863756][ T4734] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.870072][ T4279] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 120.881245][ T4279] Bluetooth: hci1: Injecting HCI hardware error event [ 120.889407][ T4734] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.890067][ T4279] Bluetooth: hci1: hardware error 0x00 [ 121.147543][ T4362] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.158765][ T4362] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.229813][ T4788] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 121.278639][ T4369] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.293179][ T4369] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.827553][ T5119] ptrace attach of "./syz-executor exec"[5120] was attempted by "./syz-executor exec"[5119] [ 122.741106][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 122.949039][ T4279] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 124.079505][ T4279] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 124.088176][ T4279] Bluetooth: hci2: Injecting HCI hardware error event [ 124.096435][ T4279] Bluetooth: hci2: hardware error 0x00 [ 126.148842][ T4279] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 127.304169][ T5157] kvm: pic: non byte read [ 127.321353][ T5157] kvm: pic: non byte read [ 127.367605][ T5157] kvm: pic: non byte read [ 127.407885][ T5157] kvm: pic: non byte read [ 127.416114][ T5157] kvm: pic: non byte read [ 127.421999][ T5157] kvm: pic: non byte read [ 127.430247][ T5157] kvm: pic: non byte read [ 127.436507][ T5157] kvm: pic: non byte read [ 127.444891][ T5157] kvm: pic: non byte read [ 127.449967][ T5157] kvm: pic: non byte read [ 129.352770][ T5168] hub 2-0:1.0: USB hub found [ 129.361979][ T5168] hub 2-0:1.0: 1 port detected [ 132.877118][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.883857][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.436930][ T5199] syz.1.250 uses obsolete (PF_INET,SOCK_PACKET) [ 133.496833][ T128] kernel write not supported for file /sequencer (pid: 128 comm: kworker/0:2) [ 134.764878][ T5211] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 135.755601][ T5222] random: crng reseeded on system resumption [ 137.278800][ T128] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 137.478893][ T128] usb 5-1: Using ep0 maxpacket: 32 [ 137.486586][ T128] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 137.502476][ T128] usb 5-1: config 0 has no interface number 0 [ 137.515127][ T128] usb 5-1: config 0 interface 184 has no altsetting 0 [ 137.537001][ T128] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 137.555509][ T128] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.564183][ T128] usb 5-1: Product: syz [ 137.569496][ T128] usb 5-1: Manufacturer: syz [ 137.574562][ T128] usb 5-1: SerialNumber: syz [ 137.582044][ T128] usb 5-1: config 0 descriptor?? [ 137.598536][ T128] smsc75xx v1.0.0 [ 137.603001][ T128] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 137.619782][ T128] smsc75xx: probe of 5-1:0.184 failed with error -22 [ 138.972358][ T4385] usb 5-1: USB disconnect, device number 2 [ 140.343078][ T5268] netlink: 40 bytes leftover after parsing attributes in process `syz.2.270'. [ 144.563558][ T4315] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 144.637559][ T4315] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 145.828929][ T5320] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 145.870279][ T5315] fido_id[5315]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 149.320767][ T5346] netlink: 8 bytes leftover after parsing attributes in process `syz.2.293'. [ 150.383287][ T5358] capability: warning: `syz.1.296' uses 32-bit capabilities (legacy support in use) [ 150.419568][ T5356] netlink: 'syz.2.293': attribute type 10 has an invalid length. [ 150.903528][ T5356] device veth0_vlan left promiscuous mode [ 150.935977][ T5356] device veth0_vlan entered promiscuous mode [ 151.038890][ T4336] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 151.910523][ T4336] usb 5-1: config 0 interface 0 altsetting 251 has an invalid endpoint with address 0x36, skipping [ 151.942774][ T5356] team0: Device veth0_vlan failed to register rx_handler [ 152.034970][ T4336] usb 5-1: config 0 interface 0 has no altsetting 0 [ 152.111020][ T4336] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 152.148320][ T4336] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 152.184883][ T4336] usb 5-1: Product: syz [ 152.686554][ T4336] usb 5-1: Manufacturer: syz [ 152.732929][ T4336] usb 5-1: SerialNumber: syz [ 152.746593][ T4336] usb 5-1: config 0 descriptor?? [ 152.870179][ T4336] snd-usb-audio: probe of 5-1:0.0 failed with error -22 [ 153.377812][ T5356] syz.2.293 (5356) used greatest stack depth: 19664 bytes left [ 153.452085][ T4386] udevd[4386]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 154.908389][ T5099] usb 5-1: USB disconnect, device number 3 [ 157.088882][ T5419] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 159.251620][ T5441] netlink: 8 bytes leftover after parsing attributes in process `syz.0.320'. [ 159.649989][ T5446] netlink: 'syz.0.320': attribute type 10 has an invalid length. [ 159.659057][ T41] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 159.850326][ T41] usb 3-1: config 0 interface 0 altsetting 251 has an invalid endpoint with address 0x36, skipping [ 159.900050][ T41] usb 3-1: config 0 interface 0 has no altsetting 0 [ 159.940301][ T41] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 159.980291][ T41] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 160.020631][ T41] usb 3-1: Product: syz [ 160.032960][ T41] usb 3-1: Manufacturer: syz [ 160.038226][ T41] usb 3-1: SerialNumber: syz [ 160.058409][ T41] usb 3-1: config 0 descriptor?? [ 160.120679][ T41] snd-usb-audio: probe of 3-1:0.0 failed with error -22 [ 160.141011][ T4386] udevd[4386]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 160.243536][ T5446] device veth0_vlan left promiscuous mode [ 160.349093][ T5446] device veth0_vlan entered promiscuous mode [ 161.857960][ T41] usb 3-1: USB disconnect, device number 3 [ 161.885939][ T5446] team0: Device veth0_vlan failed to register rx_handler [ 162.329034][ T5462] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 163.468827][ T4349] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 163.661397][ T4349] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 163.683602][ T4349] usb 2-1: config 1 has no interface number 0 [ 163.713608][ T4349] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.726454][ T4349] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 163.813005][ T4349] usb 2-1: config 1 interface 1 altsetting 1 has an invalid endpoint with address 0xFF, skipping [ 163.888045][ T4349] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 163.907279][ T4349] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.915921][ T4349] usb 2-1: Product: syz [ 163.931290][ T4349] usb 2-1: Manufacturer: syz [ 163.958229][ T4349] usb 2-1: SerialNumber: syz [ 164.233745][ T5477] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 164.471779][ T4349] cdc_ncm 2-1:1.1: bind() failure [ 164.811739][ T5491] loop2: detected capacity change from 0 to 128 [ 165.263219][ T52] block nbd4: Attempted send on invalid socket [ 165.269926][ T52] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 165.280585][ T5490] F2FS-fs (nbd4): Unable to read 1th superblock [ 165.288915][ T52] block nbd4: Attempted send on invalid socket [ 165.295240][ T52] I/O error, dev nbd4, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 165.305680][ T5490] F2FS-fs (nbd4): Unable to read 2th superblock [ 165.510967][ T4349] usb 2-1: USB disconnect, device number 3 [ 166.273035][ T5504] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 168.384164][ T4315] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 170.812816][ T5557] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 171.032135][ T5562] netlink: 'syz.2.354': attribute type 4 has an invalid length. [ 171.040165][ T5562] netlink: 152 bytes leftover after parsing attributes in process `syz.2.354'. [ 171.052945][ T5562] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 172.318027][ T5600] hub 2-0:1.0: USB hub found [ 172.348912][ T22] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 172.379744][ T5600] hub 2-0:1.0: 1 port detected [ 172.565545][ T22] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 172.652013][ T22] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.891832][ T22] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 173.086013][ T22] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 173.154236][ T22] usb 4-1: Manufacturer: syz [ 173.186362][ T22] usb 4-1: config 0 descriptor?? [ 173.558918][ T22] rc_core: IR keymap rc-hauppauge not found [ 173.565662][ T22] Registered IR keymap rc-empty [ 173.720743][ T22] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 173.735616][ T22] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input5 [ 173.815802][ T5632] loop1: detected capacity change from 0 to 128 [ 174.926297][ T22] usb 4-1: USB disconnect, device number 3 [ 177.812148][ T5666] hub 2-0:1.0: USB hub found [ 177.856583][ T5666] hub 2-0:1.0: 1 port detected [ 178.339020][ T4315] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 178.529442][ T4315] usb 4-1: Using ep0 maxpacket: 32 [ 178.540997][ T4315] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 178.563040][ T4315] usb 4-1: config 0 has no interface number 0 [ 178.600708][ T4315] usb 4-1: config 0 interface 184 has no altsetting 0 [ 178.628287][ T4315] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 178.669042][ T4315] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.692862][ T4315] usb 4-1: Product: syz [ 178.697203][ T4315] usb 4-1: Manufacturer: syz [ 178.761737][ T4315] usb 4-1: SerialNumber: syz [ 178.803103][ T4315] usb 4-1: config 0 descriptor?? [ 178.836452][ T4315] smsc75xx v1.0.0 [ 178.840485][ T4315] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 178.888874][ T4315] smsc75xx: probe of 4-1:0.184 failed with error -22 [ 179.020299][ T4349] usb 4-1: USB disconnect, device number 4 [ 182.508883][ T4349] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 182.708910][ T4349] usb 4-1: Using ep0 maxpacket: 32 [ 182.718386][ T4349] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 182.794638][ T4349] usb 4-1: config 0 has no interface number 0 [ 182.818538][ T4349] usb 4-1: config 0 interface 184 has no altsetting 0 [ 183.660851][ T4349] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 183.672347][ T4349] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.682673][ T4349] usb 4-1: Product: syz [ 183.686893][ T4349] usb 4-1: Manufacturer: syz [ 183.692021][ T4349] usb 4-1: SerialNumber: syz [ 183.705684][ T4349] usb 4-1: config 0 descriptor?? [ 183.777858][ T4349] smsc75xx v1.0.0 [ 183.781645][ T4349] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 183.819021][ T4349] smsc75xx: probe of 4-1:0.184 failed with error -22 [ 183.960349][ T4349] usb 4-1: USB disconnect, device number 5 [ 188.275578][ T5860] loop3: detected capacity change from 0 to 128 [ 190.228107][ T5877] hub 2-0:1.0: USB hub found [ 190.234526][ T5877] hub 2-0:1.0: 1 port detected [ 195.421277][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.427750][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.898819][ T4329] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 197.429396][ T4282] Bluetooth: hci3: command 0x0406 tx timeout [ 197.435635][ T4282] Bluetooth: hci4: command 0x0406 tx timeout [ 199.629906][ T5957] loop0: detected capacity change from 0 to 164 [ 199.896764][ T5957] rock: corrupted directory entry. extent=32, offset=131072, size=237 [ 199.952986][ T5957] isofs_fill_super: root inode is not a directory. Corrupted media? [ 205.131694][ T6023] hub 2-0:1.0: USB hub found [ 205.139825][ T6023] hub 2-0:1.0: 1 port detected [ 213.714165][ T6120] loop0: detected capacity change from 0 to 128 [ 235.961027][ T4276] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 241.338970][ T6418] xt_connbytes: Forcing CT accounting to be enabled [ 241.346777][ T6418] Cannot find set identified by id 0 to match [ 243.818862][ T4336] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 246.299752][ T6487] netlink: 12 bytes leftover after parsing attributes in process `syz.1.616'. [ 246.709363][ T4336] usb 5-1: device descriptor read/64, error -71 [ 247.788805][ T4336] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 248.153730][ T6515] dccp_invalid_packet: pskb_may_pull failed [ 249.475172][ T6527] loop5: detected capacity change from 0 to 7 [ 249.498177][ T6527] Dev loop5: unable to read RDB block 7 [ 249.504314][ T6527] loop5: unable to read partition table [ 249.519089][ T6527] loop5: partition table beyond EOD, truncated [ 249.530692][ T6527] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?%`ր{֐ȵ4FLQk݊5) failed (rc=-5) [ 250.103942][ T3637] Dev loop5: unable to read RDB block 7 [ 250.118780][ T3637] loop5: unable to read partition table [ 250.145242][ T3637] loop5: partition table beyond EOD, truncated [ 251.265842][ T6548] netlink: 52 bytes leftover after parsing attributes in process `syz.3.635'. [ 251.299306][ T6548] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.308731][ T6548] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.788362][ T6568] loop4: detected capacity change from 0 to 128 [ 252.924552][ T4279] Bluetooth: hci0: command 0x0406 tx timeout [ 254.798934][ T6584] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 256.354715][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.368761][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.777570][ T6705] overlayfs: failed to clone upperpath [ 267.807262][ T6789] tipc: Enabling of bearer rejected, failed to enable media [ 267.926599][ T6796] netlink: 'syz.0.712': attribute type 12 has an invalid length. [ 269.821254][ T6846] netlink: 8 bytes leftover after parsing attributes in process `syz.2.731'. [ 269.830728][ T6846] netlink: 36 bytes leftover after parsing attributes in process `syz.2.731'. [ 269.847543][ T6846] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 286.363347][ T26] audit: type=1326 audit(1770716153.880:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7062 comm="syz.2.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b3799af79 code=0x7ffc0000 [ 286.421312][ T26] audit: type=1326 audit(1770716153.880:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7062 comm="syz.2.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b3799af79 code=0x7ffc0000 [ 286.548332][ T26] audit: type=1326 audit(1770716153.910:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7062 comm="syz.2.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6b3795b84e code=0x7ffc0000 [ 286.581543][ T26] audit: type=1326 audit(1770716153.910:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7062 comm="syz.2.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6b3795b84e code=0x7ffc0000 [ 286.777429][ T26] audit: type=1326 audit(1770716153.910:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7062 comm="syz.2.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6b3795b84e code=0x7ffc0000 [ 286.828966][ T26] audit: type=1326 audit(1770716153.910:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7062 comm="syz.2.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6b3795b84e code=0x7ffc0000 [ 286.883994][ T7073] IPv6: NLM_F_CREATE should be specified when creating new route [ 286.892106][ T26] audit: type=1326 audit(1770716153.910:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7062 comm="syz.2.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6b3795b84e code=0x7ffc0000 [ 286.955443][ T26] audit: type=1326 audit(1770716153.910:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7062 comm="syz.2.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6b3795b84e code=0x7ffc0000 [ 286.984894][ T26] audit: type=1326 audit(1770716153.910:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7062 comm="syz.2.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6b3795b84e code=0x7ffc0000 [ 287.014773][ T26] audit: type=1326 audit(1770716153.920:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7062 comm="syz.2.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6b3795b84e code=0x7ffc0000 [ 289.712774][ C1] ------------[ cut here ]------------ [ 289.718885][ C1] WARNING: CPU: 1 PID: 0 at net/mac80211/tx.c:4944 __ieee80211_beacon_get+0x1233/0x1600 [ 289.728911][ C1] Modules linked in: [ 289.732933][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 289.740122][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 289.750441][ C1] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 289.756823][ C1] Code: 24 4c 89 e7 e8 fe 3c 0b f8 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 19 a6 d2 f7 0f 0b e9 f6 f7 ff ff e8 0d a6 d2 f7 <0f> 0b e9 48 fb ff ff e8 01 a6 d2 f7 48 c7 c7 f0 ca fa 8d 4c 89 e6 [ 289.776533][ C1] RSP: 0018:ffffc900001e0a10 EFLAGS: 00010246 [ 289.782689][ C1] RAX: ffffffff89afcda3 RBX: ffffffff89afbba6 RCX: ffff888017739dc0 [ 289.791001][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 289.799331][ C1] RBP: 0000000000000000 R08: ffff888017739dc0 R09: 0000000000000003 [ 289.807345][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff888073626228 [ 289.815922][ C1] R13: dffffc0000000000 R14: ffff888073626760 R15: ffff8880670ccc24 [ 289.823976][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 289.833171][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 289.839913][ C1] CR2: 0000001b33123ffc CR3: 000000000c88e000 CR4: 00000000003506e0 [ 289.847936][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 289.856089][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 289.864139][ C1] Call Trace: [ 289.867542][ C1] [ 289.870546][ C1] ? __ieee80211_beacon_get+0x36/0x1600 [ 289.876144][ C1] ieee80211_beacon_get_tim+0x63/0x4e0 [ 289.881685][ C1] mac80211_hwsim_beacon_tx+0x21c/0xae0 [ 289.887359][ C1] ? read_lock_is_recursive+0x10/0x10 [ 289.892918][ C1] __iterate_interfaces+0x243/0x500 [ 289.898166][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 289.904581][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170 [ 289.911895][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 289.918194][ C1] ieee80211_iterate_active_interfaces_atomic+0xd7/0x170 [ 289.925774][ C1] mac80211_hwsim_beacon+0xb7/0x1b0 [ 289.931078][ C1] __hrtimer_run_queues+0x560/0xd70 [ 289.936333][ C1] ? hw_scan_work+0xf50/0xf50 [ 289.941120][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 289.946272][ C1] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 289.952456][ C1] hrtimer_run_softirq+0x183/0x2a0 [ 289.957791][ C1] handle_softirqs+0x2a1/0x930 [ 289.962674][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 289.967764][ C1] ? do_softirq+0x210/0x210 [ 289.972367][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 289.977632][ C1] __irq_exit_rcu+0x13b/0x230 [ 289.982412][ C1] ? irq_exit_rcu+0x20/0x20 [ 289.987155][ C1] irq_exit_rcu+0x5/0x20 [ 289.991599][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 289.997371][ C1] [ 290.000375][ C1] [ 290.003336][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 290.009402][ C1] RIP: 0010:default_idle+0xb/0x10 [ 290.014740][ C1] Code: 48 89 df e8 97 d1 9c f7 e9 44 ff ff ff e8 3d 07 f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 66 90 0f 00 2d 77 1c 50 00 fb f4 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48 [ 290.034455][ C1] RSP: 0018:ffffc90000177de8 EFLAGS: 000002c6 [ 290.040618][ C1] RAX: 03c372e3673f3400 RBX: ffffffff8a3692b7 RCX: 03c372e3673f3400 [ 290.048686][ C1] RDX: 0000000000000001 RSI: ffffffff8a8c1220 RDI: ffffffff8adf0d20 [ 290.056785][ C1] RBP: ffffc90000177f20 R08: ffff8880b8f3580b R09: 1ffff110171e6b01 [ 290.064856][ C1] R10: dffffc0000000000 R11: ffffed10171e6b02 R12: 1ffff9200002efc8 [ 290.073184][ C1] R13: dffffc0000000000 R14: ffff888017739dc0 R15: 0000000000000001 [ 290.081250][ C1] ? default_idle_call+0x77/0xc0 [ 290.086259][ C1] default_idle_call+0x84/0xc0 [ 290.091110][ C1] do_idle+0x20d/0x5a0 [ 290.095235][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 290.100546][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 290.105806][ C1] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 290.111541][ C1] ? schedule_idle+0x57/0x90 [ 290.116196][ C1] cpu_startup_entry+0x3f/0x60 [ 290.121153][ C1] start_secondary+0xe4/0xf0 [ 290.125794][ C1] secondary_startup_64_no_verify+0xcf/0xdb [ 290.131809][ C1] [ 290.134865][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 290.142173][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 290.149317][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 290.159462][ C1] Call Trace: [ 290.162784][ C1] [ 290.165675][ C1] dump_stack_lvl+0x188/0x24e [ 290.170589][ C1] ? memcpy+0x3c/0x60 [ 290.174627][ C1] ? show_regs_print_info+0x12/0x12 [ 290.179873][ C1] ? load_image+0x400/0x400 [ 290.184520][ C1] panic+0x2e5/0x730 [ 290.188463][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 290.193120][ C1] ? secondary_startup_64_no_verify+0xcf/0xdb [ 290.199291][ C1] __warn+0x2f8/0x4f0 [ 290.203375][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 290.209321][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 290.215256][ C1] report_bug+0x2ba/0x4f0 [ 290.219631][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 290.225919][ C1] handle_bug+0x3a/0x70 [ 290.230122][ C1] exc_invalid_op+0x16/0x40 [ 290.234753][ C1] asm_exc_invalid_op+0x16/0x20 [ 290.239824][ C1] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 290.246191][ C1] Code: 24 4c 89 e7 e8 fe 3c 0b f8 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 19 a6 d2 f7 0f 0b e9 f6 f7 ff ff e8 0d a6 d2 f7 <0f> 0b e9 48 fb ff ff e8 01 a6 d2 f7 48 c7 c7 f0 ca fa 8d 4c 89 e6 [ 290.266186][ C1] RSP: 0018:ffffc900001e0a10 EFLAGS: 00010246 [ 290.272362][ C1] RAX: ffffffff89afcda3 RBX: ffffffff89afbba6 RCX: ffff888017739dc0 [ 290.280374][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 290.288491][ C1] RBP: 0000000000000000 R08: ffff888017739dc0 R09: 0000000000000003 [ 290.296513][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff888073626228 [ 290.304532][ C1] R13: dffffc0000000000 R14: ffff888073626760 R15: ffff8880670ccc24 [ 290.312665][ C1] ? __ieee80211_beacon_get+0x36/0x1600 [ 290.318351][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 290.324465][ C1] ? __ieee80211_beacon_get+0x36/0x1600 [ 290.330104][ C1] ieee80211_beacon_get_tim+0x63/0x4e0 [ 290.335616][ C1] mac80211_hwsim_beacon_tx+0x21c/0xae0 [ 290.341207][ C1] ? read_lock_is_recursive+0x10/0x10 [ 290.346810][ C1] __iterate_interfaces+0x243/0x500 [ 290.352054][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 290.358358][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170 [ 290.365615][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 290.371898][ C1] ieee80211_iterate_active_interfaces_atomic+0xd7/0x170 [ 290.378971][ C1] mac80211_hwsim_beacon+0xb7/0x1b0 [ 290.384226][ C1] __hrtimer_run_queues+0x560/0xd70 [ 290.389493][ C1] ? hw_scan_work+0xf50/0xf50 [ 290.394229][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 290.399473][ C1] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 290.405592][ C1] hrtimer_run_softirq+0x183/0x2a0 [ 290.410747][ C1] handle_softirqs+0x2a1/0x930 [ 290.415556][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 290.420463][ C1] ? do_softirq+0x210/0x210 [ 290.425021][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 290.430261][ C1] __irq_exit_rcu+0x13b/0x230 [ 290.435250][ C1] ? irq_exit_rcu+0x20/0x20 [ 290.439812][ C1] irq_exit_rcu+0x5/0x20 [ 290.444097][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 290.449872][ C1] [ 290.452831][ C1] [ 290.455787][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 290.461831][ C1] RIP: 0010:default_idle+0xb/0x10 [ 290.466991][ C1] Code: 48 89 df e8 97 d1 9c f7 e9 44 ff ff ff e8 3d 07 f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 66 90 0f 00 2d 77 1c 50 00 fb f4 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48 [ 290.486643][ C1] RSP: 0018:ffffc90000177de8 EFLAGS: 000002c6 [ 290.492757][ C1] RAX: 03c372e3673f3400 RBX: ffffffff8a3692b7 RCX: 03c372e3673f3400 [ 290.500944][ C1] RDX: 0000000000000001 RSI: ffffffff8a8c1220 RDI: ffffffff8adf0d20 [ 290.509043][ C1] RBP: ffffc90000177f20 R08: ffff8880b8f3580b R09: 1ffff110171e6b01 [ 290.517312][ C1] R10: dffffc0000000000 R11: ffffed10171e6b02 R12: 1ffff9200002efc8 [ 290.525347][ C1] R13: dffffc0000000000 R14: ffff888017739dc0 R15: 0000000000000001 [ 290.533466][ C1] ? default_idle_call+0x77/0xc0 [ 290.538478][ C1] default_idle_call+0x84/0xc0 [ 290.543295][ C1] do_idle+0x20d/0x5a0 [ 290.547507][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 290.552838][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 290.558255][ C1] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 290.563952][ C1] ? schedule_idle+0x57/0x90 [ 290.568582][ C1] cpu_startup_entry+0x3f/0x60 [ 290.573395][ C1] start_secondary+0xe4/0xf0 [ 290.578023][ C1] secondary_startup_64_no_verify+0xcf/0xdb [ 290.584200][ C1] [ 290.587470][ C1] Kernel Offset: disabled [ 290.591799][ C1] Rebooting in 86400 seconds..