last executing test programs: 2.374402646s ago: executing program 2 (id=391): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) timerfd_gettime(r0, 0x0) 2.262183686s ago: executing program 3 (id=394): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000001e000104000000000000001d02000000", @ANYRES32, @ANYBLOB="000014"], 0x30}, 0x1, 0x0, 0x0, 0x20000}, 0x0) 2.215974935s ago: executing program 2 (id=396): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/time\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) 2.117256388s ago: executing program 3 (id=398): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x8c, 0x10, 0x44b, 0x70bd2c, 0x25dfdbfc, {0x7a, 0x0, 0x0, 0x0, 0x1000, 0x9020}, [@IFLA_LINKINFO={0x6c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x5c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x8000000000000001}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_HASH_MAX={0x8, 0x1b, 0xf4b}, @IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0x1}, @IFLA_BR_NF_CALL_IPTABLES={0x5}, @IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x6}, @IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc, 0x1e, 0xe4e}, @IFLA_BR_VLAN_STATS_ENABLED={0x5}, @IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x6}, @IFLA_BR_VLAN_STATS_PER_PORT={0x5}]}}}]}, 0x8c}}, 0x0) 2.037943388s ago: executing program 2 (id=400): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x8, 0x3, 0x370, 0x238, 0x11, 0x148, 0x238, 0x0, 0x2d8, 0x2a8, 0x2a8, 0x2d8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1f0, 0x90, 0x0, {}, [@common=@inet=@socket2={{0x28}}, @common=@inet=@hashlimit3={{0x158}, {'bridge0\x00', {0x6, 0x6, 0x40, 0x6, 0x0, 0x3, 0x5, 0x8, 0x0, 0x20}, {0x5}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0xfffffffe}}}, {{@ip={@multicast2, @remote, 0x0, 0x0, 'vlan0\x00', 'macvlan1\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) 1.781063984s ago: executing program 2 (id=405): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x203, 0x807c2, 0x41414770, 0x32315659, 0xffffffff, 0x10004, 0x1, 0x0, 0xfeedcafe, 0x3, 0x0, 0x1}}) 1.766904832s ago: executing program 4 (id=406): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, 0x0, 0x0) 1.634175457s ago: executing program 3 (id=408): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2d, &(0x7f0000000140)=0x7, 0x4) 1.564964273s ago: executing program 4 (id=410): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x6, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc04c565d, &(0x7f0000000100)=@userptr={0x401, 0x2, 0x4, 0x10, 0x3, {}, {0x0, 0x0, 0x8, 0x6, 0x1, 0x60, "53bac45a"}, 0x6, 0x2, {0x0}, 0x8}) 1.450176781s ago: executing program 2 (id=412): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x2, 0x18, 0x0, 0x0, 0x19, 0x0, 0x0, 0xfffffffd, [@sadb_address={0x5, 0x6, 0x6c, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@empty}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x0, @private1}}, @sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x0, @multicast1}}]}, 0xc8}}, 0x0) 1.433744877s ago: executing program 4 (id=414): r0 = socket$inet6(0x10, 0x3, 0x6) sendto$inet6(r0, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) 1.423621488s ago: executing program 3 (id=415): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f00000000c0)={0x0, 0x0, 0x6, 0x3ff}) 1.27491422s ago: executing program 2 (id=417): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB="bc"]) 1.218444777s ago: executing program 4 (id=418): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000180)=[{0x20, 0x0, 0x0, 0xfffff030}, {0x6}]}, 0x8) 1.202329542s ago: executing program 3 (id=419): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000700)={r0, 0xffffffffffffffff, 0x10, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0xfff, 0x0, 0x1}}, 0x40) 1.181188836s ago: executing program 1 (id=420): r0 = socket$isdn(0x22, 0x2, 0x21) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000240)=@ethtool_channels={0x3c, 0x3, 0x8e, 0x84, 0x1, 0x7fffffff, 0x9, 0x8, 0x5}}) 1.084412896s ago: executing program 3 (id=422): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x4, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) 1.01782568s ago: executing program 4 (id=423): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0205710, &(0x7f0000000080)={0x1, 0x3, 0xfffffff3, 0x1, 0xff}) 946.203385ms ago: executing program 1 (id=424): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x6, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0cc5605, &(0x7f00000005c0)={0x1, @pix={0x3, 0x0, 0x38415262, 0x0, 0x1, 0x0, 0x3, 0x13}}) 944.347082ms ago: executing program 0 (id=425): r0 = fsopen(&(0x7f0000000040)='cramfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x3, &(0x7f00000000c0)='source', &(0x7f00000001c0)='source', 0x0) 870.677308ms ago: executing program 4 (id=426): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYBLOB='\b\x00\r'], 0x4c}}, 0x0) 806.867862ms ago: executing program 0 (id=427): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 749.116966ms ago: executing program 1 (id=428): r0 = openat$vim2m(0xffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000380)={0x7, 0x2, 0x0, "9c2db27a43793b7e7419005d340f233baee86557d9d8a53e02b4b10ad94a59e7"}) 615.442025ms ago: executing program 1 (id=429): r0 = io_uring_setup(0x18d0, &(0x7f0000000bc0)={0x0, 0x54f0, 0x0, 0x3}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x19, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 597.158053ms ago: executing program 0 (id=430): r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, 0x0, 0x0) 416.419749ms ago: executing program 0 (id=431): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c01000016008502000000000000000000000000000000000000000000000001e000000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000810000000000000000000000000000000000000100000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000457800000c00080008001a000000000014"], 0x11c}}, 0x0) 367.06794ms ago: executing program 1 (id=432): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c00028005000100000000004700028005000100010000000600064000000000060005"], 0xe4}}, 0x0) 284.035341ms ago: executing program 0 (id=433): prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) inotify_init1(0x0) 92.865488ms ago: executing program 0 (id=434): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000180)=@ethtool_regs={0x4, 0x1}}) 0s ago: executing program 1 (id=435): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x78}, 0x1, 0x0, 0x0, 0x20008005}, 0x80) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.33' (ED25519) to the list of known hosts. [ 81.349067][ T5815] cgroup: Unknown subsys name 'net' [ 81.466348][ T5815] cgroup: Unknown subsys name 'cpuset' [ 81.475797][ T5815] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.139751][ T5815] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.691598][ T5828] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.722797][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.730835][ T5831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.739319][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.747188][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.754680][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.764185][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.771397][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.780089][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.787357][ T5834] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.788703][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.803572][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.814484][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.815339][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.823899][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.836336][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 85.844699][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 85.852333][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.860345][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 85.893680][ T5140] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.904231][ T5834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.913159][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 85.931926][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 85.932131][ T5140] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.947453][ T5834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.550308][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 86.636616][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 86.764208][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 86.828520][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 87.047261][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 87.193593][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.200760][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.209246][ T5841] bridge_slave_0: entered allmulticast mode [ 87.216820][ T5841] bridge_slave_0: entered promiscuous mode [ 87.225197][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.232790][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.240153][ T5844] bridge_slave_0: entered allmulticast mode [ 87.247629][ T5844] bridge_slave_0: entered promiscuous mode [ 87.336137][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.343641][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.350819][ T5841] bridge_slave_1: entered allmulticast mode [ 87.359542][ T5841] bridge_slave_1: entered promiscuous mode [ 87.367556][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.374739][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.381881][ T5844] bridge_slave_1: entered allmulticast mode [ 87.389912][ T5844] bridge_slave_1: entered promiscuous mode [ 87.396679][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.404102][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.411508][ T5845] bridge_slave_0: entered allmulticast mode [ 87.418859][ T5845] bridge_slave_0: entered promiscuous mode [ 87.426107][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.433852][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.441172][ T5843] bridge_slave_0: entered allmulticast mode [ 87.448555][ T5843] bridge_slave_0: entered promiscuous mode [ 87.518735][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.526593][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.534615][ T5845] bridge_slave_1: entered allmulticast mode [ 87.541835][ T5845] bridge_slave_1: entered promiscuous mode [ 87.548841][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.556165][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.564354][ T5843] bridge_slave_1: entered allmulticast mode [ 87.571540][ T5843] bridge_slave_1: entered promiscuous mode [ 87.589095][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.602664][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.670719][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.696902][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.731425][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.739105][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.746931][ T5842] bridge_slave_0: entered allmulticast mode [ 87.754744][ T5842] bridge_slave_0: entered promiscuous mode [ 87.763918][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.771052][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.778332][ T5842] bridge_slave_1: entered allmulticast mode [ 87.786529][ T5842] bridge_slave_1: entered promiscuous mode [ 87.821797][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.834550][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.847171][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.859545][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.885200][ T5841] team0: Port device team_slave_0 added [ 87.902845][ T5834] Bluetooth: hci0: command tx timeout [ 87.955523][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.967978][ T5841] team0: Port device team_slave_1 added [ 87.976877][ T5844] team0: Port device team_slave_0 added [ 87.983002][ T5831] Bluetooth: hci1: command tx timeout [ 87.988708][ T5835] Bluetooth: hci3: command tx timeout [ 87.990430][ T5844] team0: Port device team_slave_1 added [ 87.994464][ T5838] Bluetooth: hci4: command tx timeout [ 88.005695][ T5834] Bluetooth: hci2: command tx timeout [ 88.025928][ T5845] team0: Port device team_slave_0 added [ 88.048630][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.085310][ T5845] team0: Port device team_slave_1 added [ 88.106612][ T5843] team0: Port device team_slave_0 added [ 88.116329][ T5843] team0: Port device team_slave_1 added [ 88.175895][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.184065][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.210602][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.256610][ T5842] team0: Port device team_slave_0 added [ 88.264188][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.271162][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.298347][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.310238][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.317861][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.343848][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.356795][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.363832][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.389839][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.401596][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.408929][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.435029][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.461621][ T5842] team0: Port device team_slave_1 added [ 88.468271][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.475322][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.502209][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.536742][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.543867][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.570054][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.640346][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.647528][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.673530][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.692692][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.699664][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.726580][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.738978][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.746090][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.772369][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.805082][ T5841] hsr_slave_0: entered promiscuous mode [ 88.811604][ T5841] hsr_slave_1: entered promiscuous mode [ 88.940339][ T5844] hsr_slave_0: entered promiscuous mode [ 88.947246][ T5844] hsr_slave_1: entered promiscuous mode [ 88.954026][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.961802][ T5844] Cannot create hsr debugfs directory [ 88.983086][ T5845] hsr_slave_0: entered promiscuous mode [ 88.989651][ T5845] hsr_slave_1: entered promiscuous mode [ 88.996451][ T5845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.004295][ T5845] Cannot create hsr debugfs directory [ 89.030597][ T5843] hsr_slave_0: entered promiscuous mode [ 89.037533][ T5843] hsr_slave_1: entered promiscuous mode [ 89.043951][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.051520][ T5843] Cannot create hsr debugfs directory [ 89.207465][ T5842] hsr_slave_0: entered promiscuous mode [ 89.214320][ T5842] hsr_slave_1: entered promiscuous mode [ 89.220408][ T5842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.228052][ T5842] Cannot create hsr debugfs directory [ 89.696864][ T5841] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.723359][ T5841] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.736753][ T5841] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.759115][ T5841] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.813569][ T5843] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.832296][ T5843] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.850586][ T5843] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.874496][ T5843] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.955028][ T5845] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.973420][ T5845] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.982982][ T5834] Bluetooth: hci0: command tx timeout [ 89.990200][ T5845] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.014750][ T5845] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.066078][ T5838] Bluetooth: hci3: command tx timeout [ 90.066110][ T5835] Bluetooth: hci4: command tx timeout [ 90.071520][ T5838] Bluetooth: hci1: command tx timeout [ 90.083057][ T5834] Bluetooth: hci2: command tx timeout [ 90.116136][ T5842] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.153888][ T5842] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.189539][ T5842] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.201713][ T5842] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.276521][ T5844] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 90.293650][ T5844] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 90.307839][ T5844] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 90.319348][ T5844] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 90.398386][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.455096][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.467985][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.512044][ T1328] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.519356][ T1328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.551066][ T1328] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.558257][ T1328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.624325][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.647806][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.654996][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.676694][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.707123][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.737676][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.749121][ T1328] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.756316][ T1328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.784496][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.808203][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.815394][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.825409][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.832560][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.860352][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.867508][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.893978][ T2998] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.901154][ T2998] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.957110][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.025738][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.047552][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.090107][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.097326][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.116766][ T1328] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.123960][ T1328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.155216][ T5842] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.283828][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.291048][ T5843] veth0_vlan: entered promiscuous mode [ 91.315006][ T5843] veth1_vlan: entered promiscuous mode [ 91.329503][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.350986][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.418548][ T5843] veth0_macvtap: entered promiscuous mode [ 91.431492][ T5843] veth1_macvtap: entered promiscuous mode [ 91.529874][ T5842] veth0_vlan: entered promiscuous mode [ 91.548544][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.569468][ T5842] veth1_vlan: entered promiscuous mode [ 91.590779][ T5841] veth0_vlan: entered promiscuous mode [ 91.606359][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.629507][ T5841] veth1_vlan: entered promiscuous mode [ 91.645863][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.669203][ T5845] veth0_vlan: entered promiscuous mode [ 91.689679][ T5845] veth1_vlan: entered promiscuous mode [ 91.703782][ T5843] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.712861][ T5843] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.721579][ T5843] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.731196][ T5843] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.790463][ T5844] veth0_vlan: entered promiscuous mode [ 91.801405][ T5842] veth0_macvtap: entered promiscuous mode [ 91.827352][ T5842] veth1_macvtap: entered promiscuous mode [ 91.828089][ T2151] cfg80211: failed to load regulatory.db [ 91.856167][ T5844] veth1_vlan: entered promiscuous mode [ 91.875843][ T5841] veth0_macvtap: entered promiscuous mode [ 91.930720][ T5841] veth1_macvtap: entered promiscuous mode [ 91.970228][ T5845] veth0_macvtap: entered promiscuous mode [ 91.998887][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.010187][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.022286][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.039847][ T5845] veth1_macvtap: entered promiscuous mode [ 92.057278][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.068258][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.073182][ T5838] Bluetooth: hci0: command tx timeout [ 92.081562][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.104876][ T2998] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.109035][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.126812][ T2998] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.138549][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.148747][ T5838] Bluetooth: hci4: command tx timeout [ 92.148789][ T5838] Bluetooth: hci3: command tx timeout [ 92.155431][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.160508][ T5834] Bluetooth: hci1: command tx timeout [ 92.170473][ T5835] Bluetooth: hci2: command tx timeout [ 92.182192][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.194154][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.214539][ T5842] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.225330][ T5842] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.235192][ T5842] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.244027][ T5842] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.260990][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.272224][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.282551][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.294672][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.305909][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.316551][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.327652][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.357261][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.368109][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.378437][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.390165][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.401361][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.410979][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.422606][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.432616][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.443257][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.453316][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.464791][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.475861][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.488518][ T5845] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.497570][ T5845] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.506475][ T5845] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.515308][ T5845] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.530591][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.538709][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.547804][ T5841] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.557075][ T5841] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.566470][ T5841] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.575226][ T5841] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.589432][ T5844] veth0_macvtap: entered promiscuous mode [ 92.620695][ T5844] veth1_macvtap: entered promiscuous mode [ 92.687094][ T5843] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 92.723350][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.738511][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.749730][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.760366][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.770220][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.781064][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.791622][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.802192][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.814385][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.880976][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.897568][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.909055][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.919910][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.933818][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.946726][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.957218][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.968150][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.983958][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.085380][ T1328] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.086751][ T5844] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.106809][ T5844] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.117138][ T1328] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.118377][ T5844] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.133502][ T5844] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.146763][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.157729][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.245865][ T1328] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.257057][ T1328] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.369943][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.393470][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.537233][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.548397][ T2998] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.554575][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.568573][ T2998] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.664332][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.688882][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.781892][ T5896] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3'. [ 93.858447][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.887631][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.907568][ T5898] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10'. [ 94.136153][ T5904] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4'. [ 94.156773][ T5838] Bluetooth: hci0: command tx timeout [ 94.222509][ T5838] Bluetooth: hci1: command tx timeout [ 94.227994][ T5838] Bluetooth: hci4: command tx timeout [ 94.233635][ T5835] Bluetooth: hci3: command tx timeout [ 94.237877][ T5834] Bluetooth: hci2: command tx timeout [ 94.611298][ T5919] kAFS: unparsable volume name [ 95.123582][ T5935] trusted_key: encrypted_key: keylen parameter is missing [ 95.195462][ T5940] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 95.453701][ T5949] netlink: 'syz.3.31': attribute type 10 has an invalid length. [ 95.486328][ T5949] netlink: 40 bytes leftover after parsing attributes in process `syz.3.31'. [ 95.541400][ T5949] batman_adv: batadv0: Adding interface: vlan1 [ 95.605188][ T5949] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.685652][ T5949] batman_adv: batadv0: Interface activated: vlan1 [ 96.079914][ T5974] netlink: 4 bytes leftover after parsing attributes in process `syz.0.40'. [ 96.504630][ T5992] nftables ruleset with unbound chain [ 96.533294][ T5993] netlink: 28 bytes leftover after parsing attributes in process `syz.4.47'. [ 96.956112][ T6007] x_tables: ip_tables: MASQUERADE target: used from hooks INPUT, but only usable from POSTROUTING [ 97.151443][ T6015] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 98.375109][ T30] audit: type=1326 audit(1746089902.718:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6069 comm="syz.4.85" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 98.410914][ T30] audit: type=1326 audit(1746089902.718:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6069 comm="syz.4.85" exe="/root/syz-executor" sig=0 arch=40000003 syscall=330 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 98.452443][ T5884] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 98.465059][ T30] audit: type=1326 audit(1746089902.718:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6069 comm="syz.4.85" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 98.531374][ T30] audit: type=1326 audit(1746089902.718:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6069 comm="syz.4.85" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 98.555524][ T5825] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 98.649125][ T5884] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 98.687694][ T5884] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 98.709628][ T5884] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 98.721666][ T5884] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 98.734096][ T5884] usb 1-1: SerialNumber: syz [ 98.754313][ T5825] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 98.763212][ T5825] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 98.774033][ T5884] usb 1-1: 0:2 : does not exist [ 98.807635][ T5825] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 98.824975][ T5825] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.845955][ T5825] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.887570][ T5825] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 98.897834][ T5825] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 98.917973][ T5825] usb 2-1: Product: syz [ 98.928093][ T5825] usb 2-1: Manufacturer: syz [ 98.945114][ T5825] cdc_wdm 2-1:1.0: skipping garbage [ 98.958440][ T5825] cdc_wdm 2-1:1.0: skipping garbage [ 98.995690][ T5825] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 99.005467][ T5825] cdc_wdm 2-1:1.0: Unknown control protocol [ 99.042056][ T975] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 99.194248][ T6064] cdc_wdm 2-1:1.0: Error submitting int urb - -90 [ 99.210070][ T5825] usb 2-1: USB disconnect, device number 2 [ 99.212974][ T975] usb 3-1: Using ep0 maxpacket: 8 [ 99.237792][ T5884] usb 1-1: USB disconnect, device number 2 [ 99.247038][ T975] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 99.277182][ T975] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 99.305175][ T975] usb 3-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 99.324688][ T975] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.358609][ T975] usb 3-1: Product: syz [ 99.368720][ T975] usb 3-1: Manufacturer: syz [ 99.378835][ T975] usb 3-1: SerialNumber: syz [ 99.404246][ T975] usb 3-1: config 0 descriptor?? [ 99.895268][ T5884] usb 3-1: USB disconnect, device number 2 [ 100.084536][ T6112] netlink: 20 bytes leftover after parsing attributes in process `syz.3.106'. [ 100.330689][ T6123] netlink: 44 bytes leftover after parsing attributes in process `syz.0.111'. [ 100.359415][ T6123] netlink: 24 bytes leftover after parsing attributes in process `syz.0.111'. [ 100.485544][ T5825] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 100.564919][ T6132] netlink: 16 bytes leftover after parsing attributes in process `syz.2.117'. [ 100.662292][ T5825] usb 5-1: Using ep0 maxpacket: 8 [ 100.719068][ T5825] usb 5-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 100.748911][ T5825] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.767087][ T5825] usb 5-1: Product: syz [ 100.786425][ T6140] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 100.807932][ T5825] usb 5-1: Manufacturer: syz [ 100.813086][ T5825] usb 5-1: SerialNumber: syz [ 100.851703][ T6140] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 100.891478][ T6144] program syz.0.122 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.991089][ T6146] netlink: 4 bytes leftover after parsing attributes in process `syz.3.123'. [ 101.318203][ T5825] mxuport 5-1:254.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71) [ 101.342305][ T5825] mxuport 5-1:254.0: probe with driver mxuport failed with error -5 [ 101.415115][ T5825] usb 5-1: USB disconnect, device number 2 [ 102.084798][ T6184] mmap: syz.4.142 (6184) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 102.660675][ T6210] netlink: 'syz.0.155': attribute type 39 has an invalid length. [ 102.753798][ T6210] veth0_macvtap: left promiscuous mode [ 103.431839][ T975] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 103.520133][ T6244] x_tables: duplicate underflow at hook 3 [ 103.566815][ T6246] netlink: 4 bytes leftover after parsing attributes in process `syz.0.173'. [ 103.612204][ T975] usb 5-1: Using ep0 maxpacket: 32 [ 103.636752][ T975] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 103.656195][ T975] usb 5-1: config 0 has no interface number 0 [ 103.685186][ T975] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 103.704756][ T975] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.745389][ T975] usb 5-1: Product: syz [ 103.749634][ T975] usb 5-1: Manufacturer: syz [ 103.784623][ T975] usb 5-1: SerialNumber: syz [ 103.821314][ T975] usb 5-1: config 0 descriptor?? [ 103.878523][ T975] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 103.918042][ T975] usb 5-1: selecting invalid altsetting 1 [ 103.936913][ T975] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 103.996982][ T975] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 104.052583][ T975] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 104.089757][ T975] usb 5-1: media controller created [ 104.156286][ T975] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 104.263017][ T975] usb 5-1: DVB: registering adapter 1 frontend 0 (Zarlink ZL10353 DVB-T)... [ 104.293411][ T975] dvbdev: dvb_create_media_entity: media entity 'Zarlink ZL10353 DVB-T' registered. [ 104.451545][ T975] DVB: Unable to find symbol mxl5005s_attach() [ 104.521659][ T975] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 104.712311][ T975] usb 5-1: USB disconnect, device number 3 [ 105.000636][ T6297] ip6gre1: entered allmulticast mode [ 105.254816][ T6305] netlink: 8 bytes leftover after parsing attributes in process `syz.2.200'. [ 105.344289][ T6307] netlink: 68 bytes leftover after parsing attributes in process `syz.0.201'. [ 105.850263][ T6332] netlink: 'syz.3.214': attribute type 21 has an invalid length. [ 106.406216][ T6356] autofs4:pid:6356:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(43008.1), cmd(0xc018937e) [ 106.431392][ T6357] ALSA: mixer_oss: invalid OSS volume 'A1é4' [ 106.451947][ T6356] autofs4:pid:6356:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 106.860646][ T6379] sctp: [Deprecated]: syz.3.234 (pid 6379) Use of struct sctp_assoc_value in delayed_ack socket option. [ 106.860646][ T6379] Use struct sctp_sack_info instead [ 106.995948][ T6385] netlink: 8 bytes leftover after parsing attributes in process `syz.2.238'. [ 107.028693][ T6385] netlink: 4 bytes leftover after parsing attributes in process `syz.2.238'. [ 107.127556][ T6390] IPv6: Can't replace route, no match found [ 107.163835][ T6392] netlink: 'syz.0.241': attribute type 2 has an invalid length. [ 107.410863][ T6401] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 107.417587][ T6401] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 107.431660][ T6401] vhci_hcd vhci_hcd.0: Device attached [ 107.602168][ T5880] vhci_hcd: vhci_device speed not set [ 107.672778][ T5880] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 107.690847][ T5825] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 107.912936][ T5825] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 107.937061][ T5825] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 107.971654][ T5825] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 108.012038][ T5825] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 108.047045][ T5825] usb 2-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 108.072582][ T5825] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.095867][ T5825] usb 2-1: Product: syz [ 108.100102][ T5825] usb 2-1: Manufacturer: syz [ 108.121568][ T5825] usb 2-1: SerialNumber: syz [ 108.136431][ T5825] usb 2-1: config 0 descriptor?? [ 108.147351][ T6401] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 108.388512][ T5825] powermate: Expected payload of 3--6 bytes, found 64 bytes! [ 108.403162][ T6402] vhci_hcd: connection reset by peer [ 108.426208][ T1145] vhci_hcd: stop threads [ 108.432269][ T5825] input: Griffin SoundKnob as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input5 [ 108.435546][ T6441] x_tables: ip_tables: esp match: only valid for protocol 50 [ 108.452694][ T1145] vhci_hcd: release socket [ 108.460193][ T1145] vhci_hcd: disconnect device [ 108.484807][ C1] powermate: config urb returned -71 [ 108.490896][ C1] powermate: config urb returned -71 [ 108.496496][ C1] powermate: config urb returned -71 [ 108.503397][ C1] powermate: config urb returned -71 [ 108.531932][ T5825] usb 2-1: USB disconnect, device number 3 [ 108.532396][ C1] powermate 2-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 109.007445][ T6457] xt_CT: You must specify a L4 protocol and not use inversions on it [ 110.154994][ T47] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 110.202092][ T5825] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 110.332296][ T47] usb 4-1: Using ep0 maxpacket: 16 [ 110.347547][ T47] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 110.358067][ T5825] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 110.375212][ T47] usb 4-1: config 0 has no interface number 0 [ 110.382383][ T5825] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.394598][ T47] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 110.412466][ T5825] usb 2-1: config 0 descriptor?? [ 110.445365][ T47] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 110.456644][ T5825] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 110.464829][ T47] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 110.483446][ T47] usb 4-1: Product: syz [ 110.487722][ T47] usb 4-1: SerialNumber: syz [ 110.536075][ T47] usb 4-1: config 0 descriptor?? [ 110.560287][ T47] cm109 4-1:0.8: invalid payload size 208, expected 4 [ 110.595969][ T47] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input6 [ 110.851017][ T5825] gspca_stv06xx: I2C: Read error writing address: -71 [ 110.871086][ T5825] usb 2-1: USB disconnect, device number 4 [ 110.904078][ T6541] netlink: 64 bytes leftover after parsing attributes in process `syz.2.312'. [ 111.079038][ C1] cm109 4-1:0.8: cm109_urb_irq_callback: urb status -71 [ 111.086470][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 111.093785][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 111.101033][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 111.108335][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 111.115618][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 111.122913][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 111.130019][ T5825] usb 4-1: USB disconnect, device number 2 [ 111.130086][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 111.130104][ C1] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 111.173483][ T5825] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 111.447238][ T6559] netlink: 'syz.2.321': attribute type 11 has an invalid length. [ 111.720363][ T6569] netlink: 'syz.4.328': attribute type 13 has an invalid length. [ 112.014172][ T6569] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.022601][ T6569] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.033495][ T6581] netlink: 4 bytes leftover after parsing attributes in process `syz.3.332'. [ 112.178280][ T6569] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.194577][ T6569] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.387292][ T6569] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.396544][ T6569] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.406755][ T6569] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.406790][ T6569] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.518270][ T47] IPVS: starting estimator thread 0... [ 112.632281][ T6596] IPVS: using max 27 ests per chain, 64800 per kthread [ 112.792097][ T10] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 112.852148][ T5880] vhci_hcd: vhci_device speed not set [ 112.925297][ T6610] vim2m vim2m.0: Fourcc format (0x42474752) invalid. [ 112.957941][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 113.001653][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 113.043377][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 113.072767][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 113.080834][ T10] usb 1-1: SerialNumber: syz [ 113.139320][ T10] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 113.156390][ T10] usb-storage 1-1:1.0: USB Mass Storage device detected [ 113.187508][ T10] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 113.217170][ T10] scsi host1: usb-storage 1-1:1.0 [ 114.547010][ T6680] bond1: entered promiscuous mode [ 114.565407][ T6680] bond1: entered allmulticast mode [ 114.599616][ T6688] netlink: 8 bytes leftover after parsing attributes in process `syz.1.384'. [ 114.610118][ T6680] 8021q: adding VLAN 0 to HW filter on device bond1 [ 115.016665][ T6708] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 115.285884][ T10] usb 1-1: USB disconnect, device number 3 [ 115.970608][ T6749] netlink: 40743 bytes leftover after parsing attributes in process `syz.4.414'. [ 115.998856][ T6752] x_tables: ip_tables: DNAT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 116.232522][ T6761] delete_channel: no stack [ 116.292382][ T6767] netlink: 'syz.3.422': attribute type 13 has an invalid length. [ 116.383451][ T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 116.456032][ T6767] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.463838][ T6767] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.556489][ T6776] netlink: 8 bytes leftover after parsing attributes in process `syz.4.426'. [ 116.571332][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 116.595694][ T10] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 116.610781][ T10] usb 3-1: config 179 has no interface number 0 [ 116.639535][ T10] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 116.659497][ T10] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 116.683978][ T10] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 116.717407][ T10] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 116.750936][ T6767] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.751226][ T10] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 116.777942][ T10] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 116.788635][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.812700][ T6757] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 116.845344][ T6767] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.951849][ T6786] netlink: 8 bytes leftover after parsing attributes in process `syz.0.431'. [ 117.034602][ T6767] batman_adv: batadv0: Interface deactivated: vlan1 [ 117.097971][ T6788] netlink: 44 bytes leftover after parsing attributes in process `syz.1.432'. [ 117.135707][ T6788] netlink: 43 bytes leftover after parsing attributes in process `syz.1.432'. [ 117.167696][ T6767] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.183384][ T6788] netlink: 'syz.1.432': attribute type 6 has an invalid length. [ 117.191595][ T6767] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.201066][ T6788] netlink: 'syz.1.432': attribute type 5 has an invalid length. [ 117.209976][ T6788] netlink: 43 bytes leftover after parsing attributes in process `syz.1.432'. [ 117.219462][ T6767] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.228970][ T6767] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.379231][ T5882] usb 3-1: USB disconnect, device number 3 [ 117.379261][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 117.379415][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 117.402277][ C0] ================================================================== [ 117.410374][ C0] BUG: KASAN: slab-use-after-free in do_raw_spin_lock+0x23d/0x290 [ 117.418231][ C0] Read of size 4 at addr ffff88801104b05c by task syz.3.422/6767 [ 117.425983][ C0] [ 117.428351][ C0] CPU: 0 UID: 0 PID: 6767 Comm: syz.3.422 Not tainted 6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac #0 PREEMPT(full) [ 117.428378][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 117.428403][ C0] Call Trace: [ 117.428415][ C0] [ 117.428423][ C0] dump_stack_lvl+0x189/0x250 [ 117.428456][ C0] ? __virt_addr_valid+0x18c/0x540 [ 117.428482][ C0] ? rcu_is_watching+0x15/0xb0 [ 117.428511][ C0] ? __kasan_check_byte+0x12/0x40 [ 117.428537][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 117.428565][ C0] ? rcu_is_watching+0x15/0xb0 [ 117.428596][ C0] ? lock_release+0x4b/0x3e0 [ 117.428626][ C0] ? __virt_addr_valid+0x18c/0x540 [ 117.428651][ C0] ? __virt_addr_valid+0x469/0x540 [ 117.428678][ C0] print_report+0xb4/0x290 [ 117.428709][ C0] ? do_raw_spin_lock+0x23d/0x290 [ 117.428731][ C0] kasan_report+0x118/0x150 [ 117.428757][ C0] ? do_raw_spin_lock+0x23d/0x290 [ 117.428784][ C0] do_raw_spin_lock+0x23d/0x290 [ 117.428806][ C0] ? __wake_up_common_lock+0x2f/0x1f0 [ 117.428832][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 117.428859][ C0] _raw_spin_lock_irqsave+0xb3/0xf0 [ 117.428880][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 117.428901][ C0] ? kcov_remote_stop+0x78/0x6d0 [ 117.428928][ C0] __wake_up_common_lock+0x2f/0x1f0 [ 117.428956][ C0] __usb_hcd_giveback_urb+0x4d7/0x690 [ 117.428989][ C0] ? usb_hcd_unlink_urb_from_ep+0x2c/0x110 [ 117.429022][ C0] ? __pfx___usb_hcd_giveback_urb+0x10/0x10 [ 117.429057][ C0] ? usb_hcd_giveback_urb+0x10e/0x420 [ 117.429090][ C0] dummy_timer+0x862/0x4550 [ 117.429133][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 117.429170][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 117.429200][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 117.429227][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 117.429255][ C0] __hrtimer_run_queues+0x529/0xc60 [ 117.429296][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 117.429325][ C0] ? read_tsc+0x9/0x20 [ 117.429343][ C0] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 117.429379][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 117.429412][ C0] handle_softirqs+0x283/0x870 [ 117.429445][ C0] ? do_softirq+0xec/0x180 [ 117.429478][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 117.429512][ C0] ? sctp_inet6addr_event+0x68d/0x740 [ 117.429543][ C0] do_softirq+0xec/0x180 [ 117.429572][ C0] [ 117.429579][ C0] [ 117.429587][ C0] ? __pfx_do_softirq+0x10/0x10 [ 117.429619][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 117.429644][ C0] ? lockdep_softirqs_on+0x13b/0x1c0 [ 117.429673][ C0] __local_bh_enable_ip+0x17d/0x1c0 [ 117.429711][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 117.429743][ C0] ? sctp_inet6addr_event+0x68d/0x740 [ 117.429773][ C0] sctp_inet6addr_event+0x68d/0x740 [ 117.429807][ C0] notifier_call_chain+0x1b3/0x3e0 [ 117.429828][ C0] ? atomic_notifier_call_chain+0x26/0x180 [ 117.429849][ C0] atomic_notifier_call_chain+0xda/0x180 [ 117.429871][ C0] addrconf_ifdown+0xe76/0x1880 [ 117.429907][ C0] ? tls_dev_event+0x717/0xec0 [ 117.429934][ C0] ? __pfx_addrconf_ifdown+0x10/0x10 [ 117.429970][ C0] addrconf_notify+0x1bc/0x1010 [ 117.429996][ C0] notifier_call_chain+0x1b3/0x3e0 [ 117.430018][ C0] __dev_notify_flags+0x18d/0x2e0 [ 117.430045][ C0] ? __pfx___dev_notify_flags+0x10/0x10 [ 117.430067][ C0] ? __dev_change_flags+0x4cc/0x6d0 [ 117.430091][ C0] ? __pfx___dev_change_flags+0x10/0x10 [ 117.430114][ C0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 117.430139][ C0] ? __pfx_netif_state_change+0x10/0x10 [ 117.430159][ C0] ? __pfx_netif_change_tx_queue_len+0x10/0x10 [ 117.430185][ C0] netif_change_flags+0xe8/0x1a0 [ 117.430211][ C0] do_setlink+0xcb9/0x40d0 [ 117.430242][ C0] ? __pfx_do_setlink+0x10/0x10 [ 117.430266][ C0] ? __lock_acquire+0xaac/0xd20 [ 117.430295][ C0] ? __mutex_trylock_common+0x153/0x260 [ 117.430316][ C0] ? __pfx___mutex_trylock_common+0x10/0x10 [ 117.430338][ C0] ? rcu_is_watching+0x15/0xb0 [ 117.430367][ C0] ? trace_contention_end+0x39/0x120 [ 117.430384][ C0] ? __mutex_lock+0x330/0xe80 [ 117.430402][ C0] ? __pfx_aa_get_newest_label+0x10/0x10 [ 117.430419][ C0] ? rtnl_newlink+0x8db/0x1c70 [ 117.430434][ C0] ? rcu_is_watching+0x15/0xb0 [ 117.430456][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 117.430477][ C0] ? ns_capable+0x8a/0xf0 [ 117.430491][ C0] ? rtnl_link_get_net_capable+0x16a/0x350 [ 117.430509][ C0] rtnl_newlink+0x149f/0x1c70 [ 117.430523][ C0] ? kasan_save_track+0x3e/0x80 [ 117.430545][ C0] ? __pfx_rtnl_newlink+0x10/0x10 [ 117.430571][ C0] ? kasan_quarantine_put+0xdd/0x220 [ 117.430587][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 117.430605][ C0] ? nlmon_xmit+0xb0/0x100 [ 117.430625][ C0] ? kmem_cache_free+0x192/0x3f0 [ 117.430648][ C0] ? __local_bh_enable_ip+0x12d/0x1c0 [ 117.430675][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 117.430704][ C0] ? __local_bh_enable_ip+0x12d/0x1c0 [ 117.430730][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 117.430758][ C0] ? aa_get_newest_label+0xf7/0x5d0 [ 117.430776][ C0] ? __lock_acquire+0xaac/0xd20 [ 117.430808][ C0] ? __pfx_rtnl_newlink+0x10/0x10 [ 117.430823][ C0] rtnetlink_rcv_msg+0x7cc/0xb70 [ 117.430840][ C0] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 117.430856][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 117.430875][ C0] ? ref_tracker_free+0x63a/0x7d0 [ 117.430895][ C0] ? __copy_skb_header+0xa7/0x550 [ 117.430923][ C0] netlink_rcv_skb+0x219/0x490 [ 117.430942][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 117.430960][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 117.430986][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 117.431005][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 117.431027][ C0] netlink_unicast+0x758/0x8d0 [ 117.431061][ C0] netlink_sendmsg+0x805/0xb30 [ 117.431087][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 117.431108][ C0] ? __import_iovec+0x5d4/0x7f0 [ 117.431133][ C0] ? aa_sock_msg_perm+0x94/0x160 [ 117.431155][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 117.431177][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 117.431198][ C0] __sock_sendmsg+0x219/0x270 [ 117.431230][ C0] ____sys_sendmsg+0x505/0x830 [ 117.431256][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 117.431283][ C0] ? __pfx___futex_wait+0x10/0x10 [ 117.431310][ C0] ___sys_sendmsg+0x21f/0x2a0 [ 117.431335][ C0] ? __pfx____sys_sendmsg+0x10/0x10 [ 117.431376][ C0] ? __fget_files+0x2a/0x420 [ 117.431401][ C0] ? __fget_files+0x3a0/0x420 [ 117.431431][ C0] __sys_sendmsg+0x164/0x220 [ 117.431457][ C0] ? __pfx___sys_sendmsg+0x10/0x10 [ 117.431487][ C0] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 117.431511][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 117.431533][ C0] __do_fast_syscall_32+0xb4/0x110 [ 117.431557][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 117.431580][ C0] do_fast_syscall_32+0x34/0x80 [ 117.431604][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 117.431628][ C0] RIP: 0023:0xf712e539 [ 117.431657][ C0] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 117.431674][ C0] RSP: 002b:00000000f511e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 117.431713][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180 [ 117.431727][ C0] RDX: 0000000004000c00 RSI: 0000000000000000 RDI: 0000000000000000 [ 117.431740][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 117.431752][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 117.431764][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 117.431785][ C0] [ 117.431793][ C0] [ 118.171265][ C0] Allocated by task 10: [ 118.175434][ C0] kasan_save_track+0x3e/0x80 [ 118.180130][ C0] __kasan_kmalloc+0x93/0xb0 [ 118.184734][ C0] __kmalloc_cache_noprof+0x230/0x3d0 [ 118.190115][ C0] xpad_probe+0x41c/0x1ed0 [ 118.194715][ C0] usb_probe_interface+0x641/0xbc0 [ 118.199839][ C0] really_probe+0x26a/0x9a0 [ 118.204365][ C0] __driver_probe_device+0x18c/0x2f0 [ 118.209656][ C0] driver_probe_device+0x4f/0x430 [ 118.214685][ C0] __device_attach_driver+0x2ce/0x530 [ 118.220064][ C0] bus_for_each_drv+0x24e/0x2e0 [ 118.224922][ C0] __device_attach+0x2b8/0x400 [ 118.229701][ C0] bus_probe_device+0x185/0x260 [ 118.234570][ C0] device_add+0x7b6/0xb50 [ 118.238916][ C0] usb_set_configuration+0x1a87/0x20e0 [ 118.244389][ C0] usb_generic_driver_probe+0x8d/0x150 [ 118.249854][ C0] usb_probe_device+0x1c1/0x390 [ 118.254720][ C0] really_probe+0x26a/0x9a0 [ 118.259227][ C0] __driver_probe_device+0x18c/0x2f0 [ 118.264515][ C0] driver_probe_device+0x4f/0x430 [ 118.269544][ C0] __device_attach_driver+0x2ce/0x530 [ 118.274922][ C0] bus_for_each_drv+0x24e/0x2e0 [ 118.279784][ C0] __device_attach+0x2b8/0x400 [ 118.284546][ C0] bus_probe_device+0x185/0x260 [ 118.289411][ C0] device_add+0x7b6/0xb50 [ 118.293744][ C0] usb_new_device+0xa39/0x16c0 [ 118.298508][ C0] hub_event+0x2941/0x4a00 [ 118.302942][ C0] process_scheduled_works+0xadb/0x17a0 [ 118.308511][ C0] worker_thread+0x8a0/0xda0 [ 118.313105][ C0] kthread+0x70e/0x8a0 [ 118.317182][ C0] ret_from_fork+0x4b/0x80 [ 118.321601][ C0] ret_from_fork_asm+0x1a/0x30 [ 118.326367][ C0] [ 118.328691][ C0] Freed by task 5882: [ 118.332690][ C0] kasan_save_track+0x3e/0x80 [ 118.337369][ C0] kasan_save_free_info+0x46/0x50 [ 118.342399][ C0] __kasan_slab_free+0x62/0x70 [ 118.347163][ C0] kfree+0x193/0x440 [ 118.351061][ C0] xpad_disconnect+0x350/0x480 [ 118.355827][ C0] usb_unbind_interface+0x26b/0x8f0 [ 118.361034][ C0] device_release_driver_internal+0x4d6/0x7c0 [ 118.367117][ C0] bus_remove_device+0x34d/0x410 [ 118.372076][ C0] device_del+0x511/0x8e0 [ 118.376422][ C0] usb_disable_device+0x3e9/0x8a0 [ 118.381449][ C0] usb_disconnect+0x330/0x910 [ 118.386126][ C0] hub_event+0x1cdb/0x4a00 [ 118.390548][ C0] process_scheduled_works+0xadb/0x17a0 [ 118.396100][ C0] worker_thread+0x8a0/0xda0 [ 118.400687][ C0] kthread+0x70e/0x8a0 [ 118.404758][ C0] ret_from_fork+0x4b/0x80 [ 118.409176][ C0] ret_from_fork_asm+0x1a/0x30 [ 118.413944][ C0] [ 118.416267][ C0] The buggy address belongs to the object at ffff88801104b000 [ 118.416267][ C0] which belongs to the cache kmalloc-1k of size 1024 [ 118.430318][ C0] The buggy address is located 92 bytes inside of [ 118.430318][ C0] freed 1024-byte region [ffff88801104b000, ffff88801104b400) [ 118.444115][ C0] [ 118.446440][ C0] The buggy address belongs to the physical page: [ 118.452858][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11048 [ 118.461623][ C0] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 118.470139][ C0] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 118.478141][ C0] page_type: f5(slab) [ 118.482123][ C0] raw: 00fff00000000040 ffff88801a041dc0 0000000000000000 dead000000000001 [ 118.490704][ C0] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 118.499290][ C0] head: 00fff00000000040 ffff88801a041dc0 0000000000000000 dead000000000001 [ 118.507958][ C0] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 118.516633][ C0] head: 00fff00000000003 ffffea0000441201 00000000ffffffff 00000000ffffffff [ 118.525304][ C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 118.533967][ C0] page dumped because: kasan: bad access detected [ 118.540381][ C0] page_owner tracks the page as allocated [ 118.546091][ C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5843, tgid 5843 (syz-executor), ts 97210197316, free_ts 97145481846 [ 118.565365][ C0] post_alloc_hook+0x1d8/0x230 [ 118.570226][ C0] get_page_from_freelist+0x21ce/0x22b0 [ 118.575780][ C0] __alloc_frozen_pages_noprof+0x181/0x370 [ 118.581599][ C0] alloc_pages_mpol+0x232/0x4a0 [ 118.586457][ C0] allocate_slab+0x8a/0x3b0 [ 118.590957][ C0] ___slab_alloc+0xbfc/0x1480 [ 118.595640][ C0] __kmalloc_noprof+0x305/0x4f0 [ 118.600492][ C0] ieee802_11_parse_elems_full+0x152/0x2b20 [ 118.606389][ C0] ieee80211_inform_bss+0x10c/0x10a0 [ 118.611673][ C0] cfg80211_inform_single_bss_data+0xd02/0x1ac0 [ 118.617913][ C0] cfg80211_inform_bss_data+0x1f6/0x3ad0 [ 118.623550][ C0] cfg80211_inform_bss_frame_data+0x362/0x700 [ 118.629618][ C0] ieee80211_bss_info_update+0x746/0x9e0 [ 118.635254][ C0] ieee80211_scan_rx+0x527/0x9b0 [ 118.640207][ C0] ieee80211_rx_list+0x22fc/0x2d80 [ 118.645321][ C0] ieee80211_rx_napi+0x1a8/0x3d0 [ 118.650259][ C0] page last free pid 5931 tgid 5931 stack trace: [ 118.656581][ C0] __free_frozen_pages+0xb0e/0xcd0 [ 118.661698][ C0] __put_partials+0x161/0x1c0 [ 118.666382][ C0] put_cpu_partial+0x17c/0x250 [ 118.671157][ C0] __slab_free+0x2f7/0x400 [ 118.675583][ C0] qlist_free_all+0x9a/0x140 [ 118.680172][ C0] kasan_quarantine_reduce+0x148/0x160 [ 118.685629][ C0] __kasan_slab_alloc+0x22/0x80 [ 118.690477][ C0] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 118.695940][ C0] getname_flags+0xb8/0x540 [ 118.700447][ C0] do_sys_openat2+0xbc/0x1c0 [ 118.705041][ C0] __x64_sys_openat+0x138/0x170 [ 118.709890][ C0] do_syscall_64+0xf6/0x210 [ 118.714396][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.720288][ C0] [ 118.722611][ C0] Memory state around the buggy address: [ 118.728240][ C0] ffff88801104af00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 118.736297][ C0] ffff88801104af80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 118.744355][ C0] >ffff88801104b000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 118.752407][ C0] ^ [ 118.759857][ C0] ffff88801104b080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 118.767914][ C0] ffff88801104b100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 118.775992][ C0] ================================================================== [ 118.784146][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 118.791355][ C0] CPU: 0 UID: 0 PID: 6767 Comm: syz.3.422 Not tainted 6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac #0 PREEMPT(full) [ 118.803250][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 118.813305][ C0] Call Trace: [ 118.816589][ C0] [ 118.819434][ C0] dump_stack_lvl+0x99/0x250 [ 118.824037][ C0] ? __asan_memcpy+0x40/0x70 [ 118.828628][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 118.833836][ C0] ? __pfx__printk+0x10/0x10 [ 118.838430][ C0] panic+0x2db/0x790 [ 118.842335][ C0] ? __pfx_panic+0x10/0x10 [ 118.846781][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 118.852695][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 118.859187][ C0] ? print_memory_metadata+0x314/0x400 [ 118.864664][ C0] ? do_raw_spin_lock+0x23d/0x290 [ 118.869703][ C0] check_panic_on_warn+0x89/0xb0 [ 118.874656][ C0] ? do_raw_spin_lock+0x23d/0x290 [ 118.879694][ C0] end_report+0x78/0x160 [ 118.883968][ C0] kasan_report+0x129/0x150 [ 118.888483][ C0] ? do_raw_spin_lock+0x23d/0x290 [ 118.893517][ C0] do_raw_spin_lock+0x23d/0x290 [ 118.898374][ C0] ? __wake_up_common_lock+0x2f/0x1f0 [ 118.903759][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 118.909159][ C0] _raw_spin_lock_irqsave+0xb3/0xf0 [ 118.914387][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 118.920290][ C0] ? kcov_remote_stop+0x78/0x6d0 [ 118.925331][ C0] __wake_up_common_lock+0x2f/0x1f0 [ 118.930572][ C0] __usb_hcd_giveback_urb+0x4d7/0x690 [ 118.935964][ C0] ? usb_hcd_unlink_urb_from_ep+0x2c/0x110 [ 118.941787][ C0] ? __pfx___usb_hcd_giveback_urb+0x10/0x10 [ 118.947698][ C0] ? usb_hcd_giveback_urb+0x10e/0x420 [ 118.953086][ C0] dummy_timer+0x862/0x4550 [ 118.957606][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 118.962988][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 118.967933][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 118.972887][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 118.977827][ C0] __hrtimer_run_queues+0x529/0xc60 [ 118.983044][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 118.988770][ C0] ? read_tsc+0x9/0x20 [ 118.992860][ C0] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 118.998679][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 119.003830][ C0] handle_softirqs+0x283/0x870 [ 119.008608][ C0] ? do_softirq+0xec/0x180 [ 119.013036][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 119.018331][ C0] ? sctp_inet6addr_event+0x68d/0x740 [ 119.023746][ C0] do_softirq+0xec/0x180 [ 119.028010][ C0] [ 119.030943][ C0] [ 119.033875][ C0] ? __pfx_do_softirq+0x10/0x10 [ 119.038755][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 119.044150][ C0] ? lockdep_softirqs_on+0x13b/0x1c0 [ 119.049443][ C0] __local_bh_enable_ip+0x17d/0x1c0 [ 119.054671][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 119.060412][ C0] ? sctp_inet6addr_event+0x68d/0x740 [ 119.065911][ C0] sctp_inet6addr_event+0x68d/0x740 [ 119.071127][ C0] notifier_call_chain+0x1b3/0x3e0 [ 119.076248][ C0] ? atomic_notifier_call_chain+0x26/0x180 [ 119.082059][ C0] atomic_notifier_call_chain+0xda/0x180 [ 119.087692][ C0] addrconf_ifdown+0xe76/0x1880 [ 119.092551][ C0] ? tls_dev_event+0x717/0xec0 [ 119.097317][ C0] ? __pfx_addrconf_ifdown+0x10/0x10 [ 119.102616][ C0] addrconf_notify+0x1bc/0x1010 [ 119.107472][ C0] notifier_call_chain+0x1b3/0x3e0 [ 119.112609][ C0] __dev_notify_flags+0x18d/0x2e0 [ 119.117643][ C0] ? __pfx___dev_notify_flags+0x10/0x10 [ 119.123210][ C0] ? __dev_change_flags+0x4cc/0x6d0 [ 119.128423][ C0] ? __pfx___dev_change_flags+0x10/0x10 [ 119.133970][ C0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 119.139955][ C0] ? __pfx_netif_state_change+0x10/0x10 [ 119.145497][ C0] ? __pfx_netif_change_tx_queue_len+0x10/0x10 [ 119.151664][ C0] netif_change_flags+0xe8/0x1a0 [ 119.156608][ C0] do_setlink+0xcb9/0x40d0 [ 119.161037][ C0] ? __pfx_do_setlink+0x10/0x10 [ 119.165910][ C0] ? __lock_acquire+0xaac/0xd20 [ 119.170773][ C0] ? __mutex_trylock_common+0x153/0x260 [ 119.176320][ C0] ? __pfx___mutex_trylock_common+0x10/0x10 [ 119.182215][ C0] ? rcu_is_watching+0x15/0xb0 [ 119.186989][ C0] ? trace_contention_end+0x39/0x120 [ 119.192277][ C0] ? __mutex_lock+0x330/0xe80 [ 119.196961][ C0] ? __pfx_aa_get_newest_label+0x10/0x10 [ 119.202597][ C0] ? rtnl_newlink+0x8db/0x1c70 [ 119.207356][ C0] ? rcu_is_watching+0x15/0xb0 [ 119.212143][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 119.217196][ C0] ? ns_capable+0x8a/0xf0 [ 119.221544][ C0] ? rtnl_link_get_net_capable+0x16a/0x350 [ 119.227378][ C0] rtnl_newlink+0x149f/0x1c70 [ 119.232074][ C0] ? kasan_save_track+0x3e/0x80 [ 119.236946][ C0] ? __pfx_rtnl_newlink+0x10/0x10 [ 119.241993][ C0] ? kasan_quarantine_put+0xdd/0x220 [ 119.247285][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 119.252493][ C0] ? nlmon_xmit+0xb0/0x100 [ 119.256916][ C0] ? kmem_cache_free+0x192/0x3f0 [ 119.261862][ C0] ? __local_bh_enable_ip+0x12d/0x1c0 [ 119.267242][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 119.272443][ C0] ? __local_bh_enable_ip+0x12d/0x1c0 [ 119.277837][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 119.283576][ C0] ? aa_get_newest_label+0xf7/0x5d0 [ 119.288781][ C0] ? __lock_acquire+0xaac/0xd20 [ 119.293655][ C0] ? __pfx_rtnl_newlink+0x10/0x10 [ 119.298684][ C0] rtnetlink_rcv_msg+0x7cc/0xb70 [ 119.303625][ C0] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 119.308736][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 119.314199][ C0] ? ref_tracker_free+0x63a/0x7d0 [ 119.319228][ C0] ? __copy_skb_header+0xa7/0x550 [ 119.324265][ C0] netlink_rcv_skb+0x219/0x490 [ 119.329031][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 119.334513][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 119.339807][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 119.345014][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 119.350215][ C0] netlink_unicast+0x758/0x8d0 [ 119.354998][ C0] netlink_sendmsg+0x805/0xb30 [ 119.359769][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 119.365061][ C0] ? __import_iovec+0x5d4/0x7f0 [ 119.369935][ C0] ? aa_sock_msg_perm+0x94/0x160 [ 119.374875][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 119.380168][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 119.385456][ C0] __sock_sendmsg+0x219/0x270 [ 119.390143][ C0] ____sys_sendmsg+0x505/0x830 [ 119.394913][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 119.400203][ C0] ? __pfx___futex_wait+0x10/0x10 [ 119.405234][ C0] ___sys_sendmsg+0x21f/0x2a0 [ 119.409921][ C0] ? __pfx____sys_sendmsg+0x10/0x10 [ 119.415140][ C0] ? __fget_files+0x2a/0x420 [ 119.419736][ C0] ? __fget_files+0x3a0/0x420 [ 119.424424][ C0] __sys_sendmsg+0x164/0x220 [ 119.429017][ C0] ? __pfx___sys_sendmsg+0x10/0x10 [ 119.434142][ C0] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 119.440738][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 119.445944][ C0] __do_fast_syscall_32+0xb4/0x110 [ 119.451063][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 119.456265][ C0] do_fast_syscall_32+0x34/0x80 [ 119.461119][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 119.467447][ C0] RIP: 0023:0xf712e539 [ 119.471528][ C0] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 119.491222][ C0] RSP: 002b:00000000f511e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 119.499642][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180 [ 119.507806][ C0] RDX: 0000000004000c00 RSI: 0000000000000000 RDI: 0000000000000000 [ 119.515786][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 119.523772][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 119.531750][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 119.539736][ C0] [ 119.543119][ C0] Kernel Offset: disabled [ 119.547455][ C0] Rebooting in 86400 seconds..