last executing test programs: 22.809576942s ago: executing program 2 (id=222): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) close_range(r3, 0xffffffffffffffff, 0x200000000000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r6 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000900)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0, 0x60000000}, 0x800) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) 20.474275388s ago: executing program 2 (id=227): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffbfffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000400)="e0ffffff7f82762f86dd00000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 19.662163435s ago: executing program 2 (id=230): openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket(0x10, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) sendmsg$nl_route(r0, 0x0, 0x0) recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1020}], 0x1}}], 0x8, 0x34000, 0x0) 18.588448417s ago: executing program 2 (id=233): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xd, 0x3}, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r6, 0x303, 0x70bd28, 0x0, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, 0x0, 0x20048040) fchdir(r3) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r7, 0x0, 0x0, 0x40800) close(r3) open(0x0, 0x80ff, 0x84) truncate(0x0, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, 0x0, 0x10000000}, 0x10) 10.023696906s ago: executing program 0 (id=249): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000040)={r2, 0x4}, 0x8) 8.314568626s ago: executing program 3 (id=251): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x2002) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000001000)=""/4096, 0x18}], 0x1) write$evdev(r1, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) 8.273619368s ago: executing program 2 (id=252): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x48, &(0x7f00000000c0)=0x16d2, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000), 0x0}, 0x20) ioctl$sock_SIOCSPGRP(r1, 0x8902, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01864c2, &(0x7f0000000180)) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000280)={0x0, 0x0}) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x11, &(0x7f00000000c0)=0xfffffffd, 0x4) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0x5523, 0x0) 8.164439215s ago: executing program 0 (id=253): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000200), &(0x7f0000000080)=0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000006000/0x2000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x1, 0x20002f5}) syz_mount_image$cramfs(&(0x7f0000000240), &(0x7f00000006c0)='./file1\x00', 0x8080, &(0x7f0000000c40)=ANY=[], 0xfe, 0x158, &(0x7f0000000040)="$eJzs0E9LKlEYBvDnMHPV+8crF25gQSa0aEhMmbBWURoJQjZQuGlTYBMJipFQrsKIdi2Cti6soJX4FSxrYymEfYk2rl0WR8ciCPwAPb/NMM953+fAWZpravAChy50LWYzu3tmLmdueVeNeHTtpVoNy9wGoPPpvDd/EwZ25FcF2keAjO+cwHYqbU4lsw450w4DGoDIbyzIPCizf8Avmf3HO7mvjQO1od6+/kU2bWUjKhBx9TLZ93oBTMg+O4BU2rRbnfmir1J+WGnUY/7J61EFJzHf2A/rrJ97zFM9Onz1x60gYd5fIiLk3nOg7n8KVMqtZiO+bMwD0PUZARSCoZbx2IiFCmdQN+z7wLoABD7uscHtURMOHAvgvNvVvhVOALVSx8j8nS1Z9zsOFC8g8sXkpiL/fwKKBtF/DhsGEIMGiIiIiIiIiIiIiIiIiIjo23gLAAD//03YXHc=") getdents64(0xffffffffffffffff, 0x0, 0x0) 8.147101755s ago: executing program 4 (id=254): socket(0x400000000010, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000380)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x2}, 0xe) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x18, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x3b}]}, 0x18}}, 0x40) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r3, 0x0, 0x0) writev(r2, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="44000000020601080000000000000000000000000500010006000000050005000a00000005000400000000000900020073797a31000000000c000300686173683a697000f23d87e4412509d9218bf5453df962dcc212809725ddc1c2b4753215d331f00ffb8846364f3964cdc905e4035506653e31402d7c17e637"], 0x44}}, 0x8000000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 7.37814224s ago: executing program 1 (id=255): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x200000000000000) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r6 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000900)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0, 0x60000000}, 0x800) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) 7.205120481s ago: executing program 4 (id=256): r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1c0000, 0x1, &(0x7f0000000040)) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x48c00, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000300), 0x1c7b42, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x2000fb) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newlinkprop={0x20, 0x10, 0x501, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x40253, 0x9c12}}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x2000c044) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, 0x0, 0x20041040) 6.072569877s ago: executing program 0 (id=257): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e24, @broadcast}, 0x10) 5.877807638s ago: executing program 1 (id=258): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) write$FUSE_WRITE(r0, &(0x7f0000000180)={0x18, 0x0, 0x0, {0x7}}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, 0xffffffffffffffff, 0x0) syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000580)='./file2\x00', 0x2000000, &(0x7f0000000100)=ANY=[], 0x1, 0x24a, &(0x7f0000000a40)="$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") mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x48042, 0x8c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000600)=""/102400, 0x19000) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) 5.308825911s ago: executing program 0 (id=259): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0x6b, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="1c3513000000", &(0x7f0000002240)=""/4103, 0x0, 0x30520cf7f25f0c64, 0x0, 0x0}) 5.288773312s ago: executing program 4 (id=260): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(r1, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x80049367, 0x0) ioctl(0xffffffffffffffff, 0x1008b2a, 0x0) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0xf000, 0x3, &(0x7f0000009000/0xf000)=nil) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x114, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@lifetime_val={0x24, 0x9, {0xf, 0x81, 0x9, 0x100}}]}, 0x114}, 0x1, 0x0, 0x0, 0x8801}, 0x0) socket(0x10, 0x803, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b00001900078008000300000000000800020000000000080003000000000008000200000000000800030000000000040004"], 0x7c}}, 0x0) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00'}) 5.222131956s ago: executing program 3 (id=261): r0 = socket(0x18, 0x5, 0x0) close(r0) 4.007956986s ago: executing program 3 (id=262): bpf$MAP_CREATE(0x0, 0x0, 0x48) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) r0 = socket(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setuid(0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) r3 = memfd_create(&(0x7f0000000580)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3) ftruncate(r3, 0xffff) syz_io_uring_setup(0x2b26, &(0x7f0000000040)={0x0, 0xacff, 0x0, 0x0, 0x21}, &(0x7f0000ffd000), 0x0) syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) 4.004865027s ago: executing program 4 (id=263): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000280)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 3.063543832s ago: executing program 1 (id=264): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000000, 0x0, 0x0) socket(0x1d, 0x2, 0x6) syz_open_dev$mouse(&(0x7f00000001c0), 0xe, 0x80800) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$phonet_pipe(0x23, 0x5, 0x2) r1 = syz_io_uring_setup(0x493, &(0x7f0000000300)={0x0, 0x8e82, 0x400, 0x94, 0x2ac}, &(0x7f0000000100)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_STATX={0x15, 0x44, 0x0, r4, &(0x7f00000004c0), &(0x7f0000000380)='./file0\x00', 0x20, 0x100, 0x1}) io_uring_enter(r1, 0x3516, 0x2, 0x0, 0x0, 0x0) openat$btrfs_control(0xffffff9c, 0x0, 0x60802, 0x0) 2.916118121s ago: executing program 3 (id=265): syz_open_dev$usbfs(0x0, 0x75, 0x109301) socketpair(0x2a, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0100000008000000080000000600000012000100714586e08bb122fa0dc30041834500005b0001003e805a178f528905e0516c48e8bfb939c3808eebac89afa5a21a18910e322d3d12215006911dda71c49c597e5b2cdf45b467cf6cfbf8ca0c645dac8605deed47f22578a1159dba4a02a19f6d88a3e7e6fc52bc58674b5b00040001005c000100e7dcc377a2e1135ed656ae13e9bc8340265cce49a06682f8bd9d6a0a8db1c4d27e31ee2da8253de23e9fb45a6123992a257a3e7d2f82e6521991a50435534f996b9dc474"], 0x1e0}, 0x1, 0x0, 0x0, 0x80}, 0x2000005c) connect$phonet_pipe(r3, &(0x7f0000000040)={0x23, 0x1, 0x9, 0xfe}, 0x10) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00'}) r5 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r5, 0x110, 0x3) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000050000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002500)={{r6}, &(0x7f0000002480), &(0x7f00000024c0)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYRESOCT=0x0], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) 2.369180702s ago: executing program 0 (id=266): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close(r1) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bfe000/0x400000)=nil) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) open(0x0, 0x54b93e, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000000020628000000000000000000000000000c000300686173683a6b700005000400000000000900020073797a4000000000000000f30006000000"], 0x3c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000090601020000000000f3ffffff0900020073797a31000000000500010007018008000140e0000002000000000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x5d}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002240)=""/102400, 0x19000) stat(0x0, 0x0) syz_open_dev$vbi(&(0x7f00000028c0), 0x0, 0x2) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r6, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000006c0)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f00000002800000129487a71fe2c251244961f2a74ac35ff5fc", 0x3e}], 0x1}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001206", 0x2e}], 0x1}, 0x48000) preadv(r5, 0x0, 0x0, 0x2, 0x0) 1.659742604s ago: executing program 3 (id=267): timer_create(0x8, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000140), 0xa, 0x8002) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_AIE_ON(r3, 0x7001) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 1.612372816s ago: executing program 4 (id=268): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x200000000000000) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r6 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000900)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0, 0x60000000}, 0x800) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) 730.666087ms ago: executing program 4 (id=269): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x78f, &(0x7f00000007c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) ftruncate(r0, 0x81ff) 341.92338ms ago: executing program 3 (id=270): eventfd2(0x802, 0x800) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x80000000000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xe) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x101000, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000100)={"6739669f274d13b691eb645b00e4f5b53e0ca34dd02ac6cdc67c5e3126628168"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000240)={0x1b, "8a6035ceeae3ecc42317afad010000000000000400", 0xffffffffffffffff}) close(0x3) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000040)={"130f2672af9ee0452321864922cd3bebd7f9cec5064e58445f1268334b4900"}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r5, 0x0, 0x10, &(0x7f00000000c0)="0100000002000100", 0x8) 287.622263ms ago: executing program 2 (id=271): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000480)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x9404, 0x0, 0x0, 0x100000c01, 0x42, 0x82, 0x0, 0x6e}) 136.412482ms ago: executing program 0 (id=272): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r2, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) syz_genetlink_get_family_id$nl80211(&(0x7f0000003340), r2) 135.977952ms ago: executing program 1 (id=273): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x33, 0x3d, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xfffffffffffffdce) io_uring_enter(r0, 0x8ae, 0x6931, 0x17, 0x0, 0x0) 135.830422ms ago: executing program 1 (id=274): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = dup2(r0, r0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0x4, 0x2, 0x40000000, 0xc}) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) 0s ago: executing program 1 (id=275): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) write$FUSE_WRITE(r0, &(0x7f0000000180)={0x18, 0x0, 0x0, {0x7}}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, 0xffffffffffffffff, 0x0) syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000580)='./file2\x00', 0x2000000, &(0x7f0000000100)=ANY=[], 0x1, 0x24a, &(0x7f0000000a40)="$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") mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x48042, 0x8c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000600)=""/102400, 0x19000) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.219' (ED25519) to the list of known hosts. [ 50.053614][ T4172] cgroup: Unknown subsys name 'net' [ 50.184110][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 51.429900][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 52.808370][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 52.896403][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 52.956334][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 52.974710][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.982079][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.990915][ T4185] device bridge_slave_0 entered promiscuous mode [ 53.003079][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.010367][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.018295][ T4185] device bridge_slave_1 entered promiscuous mode [ 53.033976][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 53.102068][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.119533][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.147982][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.155485][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.163329][ T4184] device bridge_slave_0 entered promiscuous mode [ 53.175262][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.182710][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.191076][ T4184] device bridge_slave_1 entered promiscuous mode [ 53.213344][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 53.239778][ T4185] team0: Port device team_slave_0 added [ 53.266068][ T4185] team0: Port device team_slave_1 added [ 53.280422][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.298097][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.307875][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.315653][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.323981][ T4187] device bridge_slave_0 entered promiscuous mode [ 53.359657][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.367216][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.376643][ T4186] device bridge_slave_0 entered promiscuous mode [ 53.385227][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.394213][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.402096][ T4187] device bridge_slave_1 entered promiscuous mode [ 53.414070][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.421842][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.450688][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.468195][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.475622][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.483623][ T4186] device bridge_slave_1 entered promiscuous mode [ 53.501748][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.509437][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.536721][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.549878][ T4184] team0: Port device team_slave_0 added [ 53.589074][ T4184] team0: Port device team_slave_1 added [ 53.603071][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.614149][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.642509][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.653463][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.662786][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.670407][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.678169][ T4191] device bridge_slave_0 entered promiscuous mode [ 53.693046][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.700301][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.727234][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.752308][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.759724][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.767589][ T4191] device bridge_slave_1 entered promiscuous mode [ 53.778383][ T4185] device hsr_slave_0 entered promiscuous mode [ 53.785694][ T4185] device hsr_slave_1 entered promiscuous mode [ 53.794034][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.801273][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.827521][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.858029][ T4186] team0: Port device team_slave_0 added [ 53.883663][ T4187] team0: Port device team_slave_0 added [ 53.891147][ T4186] team0: Port device team_slave_1 added [ 53.909952][ T4187] team0: Port device team_slave_1 added [ 53.935273][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.947564][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.005590][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.012889][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.039381][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.054200][ T4184] device hsr_slave_0 entered promiscuous mode [ 54.061013][ T4184] device hsr_slave_1 entered promiscuous mode [ 54.067523][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.076557][ T4184] Cannot create hsr debugfs directory [ 54.082922][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.090151][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.116447][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.130221][ T4191] team0: Port device team_slave_0 added [ 54.140830][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.147877][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.174561][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.192255][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.199902][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.228353][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.241896][ T4191] team0: Port device team_slave_1 added [ 54.312164][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.319389][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.346881][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.366071][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.374458][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.404819][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.443063][ T4186] device hsr_slave_0 entered promiscuous mode [ 54.456532][ T4186] device hsr_slave_1 entered promiscuous mode [ 54.463674][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.472008][ T4186] Cannot create hsr debugfs directory [ 54.495796][ T4187] device hsr_slave_0 entered promiscuous mode [ 54.503658][ T4187] device hsr_slave_1 entered promiscuous mode [ 54.510732][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.518781][ T4187] Cannot create hsr debugfs directory [ 54.579833][ T23] Bluetooth: hci3: command 0x0409 tx timeout [ 54.589303][ T13] Bluetooth: hci1: command 0x0409 tx timeout [ 54.589610][ T23] Bluetooth: hci4: command 0x0409 tx timeout [ 54.595964][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 54.615740][ T23] Bluetooth: hci0: command 0x0409 tx timeout [ 54.624033][ T4191] device hsr_slave_0 entered promiscuous mode [ 54.630914][ T4191] device hsr_slave_1 entered promiscuous mode [ 54.637581][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.645700][ T4191] Cannot create hsr debugfs directory [ 54.818554][ T4185] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.844048][ T4185] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 54.855185][ T4185] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 54.866057][ T4185] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 54.911798][ T4187] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 54.929898][ T4187] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 54.944957][ T4187] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 54.956486][ T4187] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 55.034594][ T4184] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.060406][ T4184] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.071358][ T4184] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.084393][ T4184] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.119216][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.144649][ T4186] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 55.167172][ T4186] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 55.203999][ T4186] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 55.214229][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.222284][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.234020][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.244435][ T4191] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 55.258805][ T4191] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 55.268396][ T4186] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 55.287753][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.296971][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.308020][ T151] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.315340][ T151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.326924][ T4191] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 55.340813][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.350491][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.359765][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.369507][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.378846][ T151] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.386689][ T151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.410042][ T4191] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 55.435337][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.444461][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.455311][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.465427][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.475142][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.499252][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.508789][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.517793][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.526980][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.544888][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.554509][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.576248][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.586448][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.598163][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.613057][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.622130][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.652174][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.662460][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.675094][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.682324][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.712281][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.727011][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.737723][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.752557][ T151] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.759754][ T151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.780493][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.801790][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.812088][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.824413][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.832864][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.844653][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.860869][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.875207][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.890322][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.900852][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.908305][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.916229][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.924856][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.935684][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.944879][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.953899][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.961077][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.975387][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.989530][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.009311][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.017470][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.026127][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.036737][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.046618][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.055941][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.064411][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.073032][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.082138][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.090733][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.099802][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.109104][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.116265][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.124273][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.132955][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.142489][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.151832][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.158954][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.167046][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.175438][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.184416][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.206239][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.227655][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.240912][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.255848][ T151] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.263275][ T151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.275639][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.284994][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.294308][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.303079][ T151] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.310507][ T151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.318544][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.327914][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.336766][ T151] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.343880][ T151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.353593][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.362921][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.373749][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.385730][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.413195][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.427995][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.437771][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.450027][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.459233][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.467957][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.476927][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.486531][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.496099][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.506246][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.550241][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.558279][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.566969][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.577554][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.586995][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.596101][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.606119][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.616075][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.625365][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.634456][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.643876][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.652668][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.659662][ T4236] Bluetooth: hci0: command 0x041b tx timeout [ 56.662684][ T1325] Bluetooth: hci1: command 0x041b tx timeout [ 56.674559][ T4236] Bluetooth: hci4: command 0x041b tx timeout [ 56.675817][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.681444][ T4236] Bluetooth: hci2: command 0x041b tx timeout [ 56.689716][ T1325] Bluetooth: hci3: command 0x041b tx timeout [ 56.703756][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.712934][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.722625][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.731990][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.741834][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.749964][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.760737][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.778236][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.801584][ T4191] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 56.816914][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.842393][ T4185] device veth0_vlan entered promiscuous mode [ 56.850148][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.859773][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.868592][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.877328][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.885900][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.894454][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.904855][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.912854][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.921621][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.943095][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.964293][ T4185] device veth1_vlan entered promiscuous mode [ 57.028579][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.050231][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.097728][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.119978][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.151767][ T4185] device veth0_macvtap entered promiscuous mode [ 57.181186][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.196034][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.205648][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.214965][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.223170][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.230751][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.238593][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.247978][ T4185] device veth1_macvtap entered promiscuous mode [ 57.262546][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.274958][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.294991][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.304654][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.319143][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.335899][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.354689][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.362951][ T4187] device veth0_vlan entered promiscuous mode [ 57.380645][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.392538][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.402468][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.410423][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.422247][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.439703][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.450675][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.476905][ T4185] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.487431][ T4185] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.502071][ T4185] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.513055][ T4185] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.534957][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.545326][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.554465][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.564420][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.584470][ T4187] device veth1_vlan entered promiscuous mode [ 57.608156][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.617095][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.628934][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.644409][ T4184] device veth0_vlan entered promiscuous mode [ 57.664522][ T4191] device veth0_vlan entered promiscuous mode [ 57.672730][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.682514][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.691813][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.702750][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.711593][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.720744][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.728733][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.736539][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.762645][ T4184] device veth1_vlan entered promiscuous mode [ 57.805416][ T4191] device veth1_vlan entered promiscuous mode [ 57.830611][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.839714][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.848149][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.858955][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.867192][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.877255][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.891620][ T4187] device veth0_macvtap entered promiscuous mode [ 57.911526][ T4187] device veth1_macvtap entered promiscuous mode [ 57.925576][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.950024][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.952039][ T4186] device veth0_vlan entered promiscuous mode [ 57.966213][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.974630][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.983142][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.991774][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.999988][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.008518][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.017207][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.026660][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.040994][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.049502][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.059273][ T4184] device veth0_macvtap entered promiscuous mode [ 58.071191][ T4184] device veth1_macvtap entered promiscuous mode [ 58.084549][ T4191] device veth0_macvtap entered promiscuous mode [ 58.113484][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.122605][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.134180][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.143386][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.182902][ T4191] device veth1_macvtap entered promiscuous mode [ 58.193389][ T4186] device veth1_vlan entered promiscuous mode [ 58.214571][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.215033][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.234270][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.235456][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.256023][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.271070][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.282329][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.292691][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.303697][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.317286][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.326398][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.336124][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.345125][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.354611][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.363892][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.373318][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.387146][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.398270][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.409733][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.420574][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.431664][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.442785][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.453839][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.464422][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.475188][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.488379][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.501028][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.513251][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.523588][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.534534][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.546046][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.559369][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.569228][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.578290][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.594044][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.606973][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.616943][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.628139][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.640294][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.651051][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.663228][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.674237][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.685200][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.696744][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.707003][ T4187] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.717052][ T4187] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.726478][ T4187] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.735966][ T4187] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.739097][ T4250] Bluetooth: hci3: command 0x040f tx timeout [ 58.751544][ T4184] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.762251][ T4184] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.771768][ T4250] Bluetooth: hci2: command 0x040f tx timeout [ 58.772020][ T4184] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.778119][ T4250] Bluetooth: hci1: command 0x040f tx timeout [ 58.787203][ T4184] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.803197][ T4250] Bluetooth: hci4: command 0x040f tx timeout [ 58.809616][ T4250] Bluetooth: hci0: command 0x040f tx timeout [ 58.823790][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.835102][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.853770][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.869312][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.880957][ T4191] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.892183][ T4191] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.903355][ T4191] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.912509][ T4191] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.060380][ T4279] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.066321][ T4186] device veth0_macvtap entered promiscuous mode [ 59.075071][ T4279] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.084921][ T4186] device veth1_macvtap entered promiscuous mode [ 59.097496][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.109442][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.127837][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.617501][ T4279] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.626064][ T4279] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.650850][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.694539][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.716312][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.726849][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.741009][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.751295][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.762654][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.772731][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.783629][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.806216][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.898949][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.919944][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.933003][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.944565][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.955092][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.966185][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.976653][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.987434][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.003517][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.014577][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.021709][ T4305] loop1: detected capacity change from 0 to 4096 [ 60.033611][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.064620][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.094981][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.117792][ T4186] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.127647][ T4186] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.140870][ T4186] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.150613][ T4186] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.204943][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.235696][ T4279] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.236783][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.262056][ T4279] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.279588][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.293031][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.528105][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.856982][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.945724][ T4236] Bluetooth: hci0: command 0x0419 tx timeout [ 60.966668][ T4236] Bluetooth: hci4: command 0x0419 tx timeout [ 61.100482][ T4236] Bluetooth: hci1: command 0x0419 tx timeout [ 61.161030][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.270402][ T4236] Bluetooth: hci2: command 0x0419 tx timeout [ 61.276514][ T4236] Bluetooth: hci3: command 0x0419 tx timeout [ 61.280378][ T151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.282788][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.311987][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.331277][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.370696][ T151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.394066][ T4329] loop0: detected capacity change from 0 to 1024 [ 61.414600][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.435138][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.461617][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.472888][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.580461][ T4329] hfsplus: invalid extended attribute record [ 61.638091][ T4333] syz.3.4 uses obsolete (PF_INET,SOCK_PACKET) [ 61.674744][ T4333] device syzkaller1 entered promiscuous mode [ 61.689107][ T4320] hfsplus: b-tree write err: -5, ino 4 [ 62.544656][ T4331] loop2: detected capacity change from 0 to 40427 [ 62.786654][ T4331] F2FS-fs (loop2): invalid crc value [ 63.009186][ T4331] F2FS-fs (loop2): Found nat_bits in checkpoint [ 63.026501][ T4357] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 63.863386][ T4331] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 64.010522][ T4369] loop0: detected capacity change from 0 to 64 [ 64.060438][ T26] audit: type=1800 audit(1770049154.323:2): pid=4331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 64.094903][ T4372] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 64.143631][ T4187] attempt to access beyond end of device [ 64.143631][ T4187] loop2: rw=2049, want=45104, limit=40427 [ 64.348722][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 64.357634][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 64.366591][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 64.375496][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 64.384647][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 64.393650][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 64.402680][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 64.411769][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 64.420774][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 64.429501][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 64.429865][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 64.658107][ T4377] Cannot find set identified by id 0 to match [ 65.000084][ T4361] loop3: detected capacity change from 0 to 40427 [ 65.066992][ T4361] F2FS-fs (loop3): invalid crc value [ 65.091251][ T4361] F2FS-fs (loop3): Found nat_bits in checkpoint [ 65.226273][ T4387] loop1: detected capacity change from 0 to 128 [ 65.241562][ T4361] F2FS-fs (loop3): Start checkpoint disabled! [ 65.301128][ T4361] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 65.309295][ T4387] ======================================================= [ 65.309295][ T4387] WARNING: The mand mount option has been deprecated and [ 65.309295][ T4387] and is ignored by this kernel. Remove the mand [ 65.309295][ T4387] option from the mount to silence this warning. [ 65.309295][ T4387] ======================================================= [ 65.518087][ T4394] loop2: detected capacity change from 0 to 128 [ 65.537700][ T4387] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 65.644773][ T4387] hpfs: filesystem error: improperly stopped [ 65.694911][ T4387] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 65.774191][ T4387] hpfs: You really don't want any checks? You are crazy... [ 65.843939][ T4387] hpfs: hpfs_map_sector(): read error [ 65.850075][ T155] attempt to access beyond end of device [ 65.850075][ T155] loop3: rw=2049, want=40976, limit=40427 [ 65.878575][ T4387] hpfs: code page support is disabled [ 65.886577][ T4387] hpfs: hpfs_map_4sectors(): unaligned read [ 65.948986][ T4387] hpfs: hpfs_map_4sectors(): unaligned read [ 65.970613][ T4387] hpfs: filesystem error: unable to find root dir [ 66.401688][ T4406] comedi comedi1: pcmda12: I/O port conflict (0xcf7,16) [ 67.234455][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 68.503479][ T4408] loop0: detected capacity change from 0 to 32768 [ 68.576574][ T4434] netlink: 'syz.4.39': attribute type 10 has an invalid length. [ 69.785828][ T4434] device veth1_macvtap left promiscuous mode [ 70.387119][ T4447] tipc: Started in network mode [ 70.470006][ T4447] tipc: Node identity 3e92ab2f15d1, cluster identity 4711 [ 70.601543][ T4447] tipc: Enabled bearer , priority 10 [ 71.040559][ T4451] device syzkaller0 entered promiscuous mode [ 71.193981][ T4446] tipc: Resetting bearer [ 71.271900][ T4446] tipc: Disabling bearer [ 71.389042][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.395961][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.837454][ T4472] tmpfs: Bad value for 'mpol' [ 73.836170][ T4469] loop3: detected capacity change from 0 to 8192 [ 73.975861][ T4469] process 'syz.3.50' launched 'éq‰Y’3aK' with NULL argv: empty string added [ 74.033033][ T4474] Zero length message leads to an empty skb [ 75.129926][ T4488] loop2: detected capacity change from 0 to 512 [ 75.191337][ T4488] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 75.204530][ T4488] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 75.306049][ T4488] EXT4-fs (loop2): 1 truncate cleaned up [ 75.311872][ T4488] EXT4-fs (loop2): mounted filesystem without journal. Opts: resuid=0x0000000000000000,max_dir_size_kb=0x00000000000001ff,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none. [ 76.692368][ T4510] loop2: detected capacity change from 0 to 256 [ 77.861125][ T1107] cfg80211: failed to load regulatory.db [ 79.018079][ T4523] loop0: detected capacity change from 0 to 8192 [ 80.773011][ T4545] Illegal XDP return value 4292263296, expect packet loss! [ 82.271200][ T4568] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 82.298916][ T4568] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 82.846706][ T4290] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 82.872889][ T4573] comedi comedi1: pcmda12: I/O port conflict (0xcf7,16) [ 85.120647][ T4290] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.142460][ T4290] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.161724][ T4290] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 85.171794][ T4290] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.220842][ T4290] usb 4-1: config 0 descriptor?? [ 85.269195][ T4290] usb 4-1: can't set config #0, error -71 [ 85.314149][ T4290] usb 4-1: USB disconnect, device number 2 [ 87.210750][ T4607] loop4: detected capacity change from 0 to 1024 [ 87.296887][ T4611] comedi comedi1: pcmda12: I/O port conflict (0xcf7,16) [ 87.374151][ T4607] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 87.557764][ T4607] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,nodelalloc,grpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 88.817040][ T4625] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 88.990367][ T26] audit: type=1800 audit(1770049179.253:3): pid=4620 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.91" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 89.244908][ T4629] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 89.598794][ T4251] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 91.282452][ T4251] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.303724][ T4251] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.384290][ T4251] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 91.404886][ T4251] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.476260][ T4251] usb 5-1: config 0 descriptor?? [ 92.099099][ T4251] usbhid 5-1:0.0: can't add hid device: -71 [ 92.106215][ T4251] usbhid: probe of 5-1:0.0 failed with error -71 [ 92.143280][ T4251] usb 5-1: USB disconnect, device number 2 [ 92.299187][ T4659] comedi comedi1: pcmda12: I/O port conflict (0xcf7,16) [ 94.109589][ T4688] netlink: 'syz.3.111': attribute type 10 has an invalid length. [ 94.130620][ T4688] device veth1_macvtap left promiscuous mode [ 96.882310][ T4707] netlink: 4 bytes leftover after parsing attributes in process `syz.1.109'. [ 97.563210][ T4715] loop2: detected capacity change from 0 to 16 [ 104.420918][ T4763] netlink: 4 bytes leftover after parsing attributes in process `syz.1.129'. [ 105.586268][ T4767] loop3: detected capacity change from 0 to 32768 [ 105.749062][ T4767] XFS (loop3): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 105.757688][ T4767] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 105.766187][ T4767] XFS (loop3): DAX and reflink cannot be used together! [ 109.736437][ T4798] loop4: detected capacity change from 0 to 128 [ 109.884360][ T4798] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 109.979264][ T4798] ext4 filesystem being mounted at /15/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 110.120783][ T4236] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 110.678769][ T4814] netlink: 'syz.4.143': attribute type 298 has an invalid length. [ 110.738822][ T4236] usb 4-1: Using ep0 maxpacket: 8 [ 111.368990][ T4236] usb 4-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 111.382379][ T4236] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 111.391657][ T4236] usb 4-1: Product: syz [ 111.395833][ T4236] usb 4-1: Manufacturer: syz [ 111.402413][ T4236] usb 4-1: SerialNumber: syz [ 111.429518][ T4236] usb 4-1: config 0 descriptor?? [ 111.830593][ T4295] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 112.304488][ T4236] gspca_main: sq905-2.14.0 probing 2770:9120 [ 112.368838][ T4829] loop2: detected capacity change from 0 to 8192 [ 113.180061][ T4236] gspca_sq905: sq905_command: usb_control_msg failed (-110) [ 113.187791][ T4236] sq905: probe of 4-1:0.0 failed with error -110 [ 113.238747][ T4295] usb 2-1: Using ep0 maxpacket: 8 [ 113.373130][ T4236] usb 4-1: USB disconnect, device number 3 [ 113.389119][ T4295] usb 2-1: device descriptor read/all, error -71 [ 113.569808][ T4842] RDS: rds_bind could not find a transport for ::ffff:172.30.1.5, load rds_tcp or rds_rdma? [ 114.823163][ T4840] sched: RT throttling activated [ 114.877203][ T4845] loop1: detected capacity change from 0 to 8 [ 115.218734][ T4195] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 115.474977][ T4852] netlink: 4 bytes leftover after parsing attributes in process `syz.0.151'. [ 115.862649][ T4195] usb 5-1: device not accepting address 3, error -71 [ 116.204907][ T4851] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 116.214611][ T4851] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 116.222210][ T4851] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 116.459594][ T4845] SQUASHFS error: Failed to read block 0x636: -5 [ 116.524286][ T4861] comedi comedi1: pcmda12: I/O port conflict (0xcf7,16) [ 116.543274][ T4845] SQUASHFS error: Unable to read metadata cache entry [634] [ 117.418255][ T4872] loop4: detected capacity change from 0 to 2048 [ 120.301477][ T4889] loop3: detected capacity change from 0 to 8192 [ 121.146161][ T4908] loop4: detected capacity change from 0 to 4096 [ 121.399969][ T4916] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 121.619442][ T4918] comedi comedi1: pcmda12: I/O port conflict (0xcf7,16) [ 123.673163][ T4935] loop3: detected capacity change from 0 to 128 [ 125.318935][ T4946] loop3: detected capacity change from 0 to 2048 [ 126.491670][ T4957] loop0: detected capacity change from 0 to 8192 [ 129.539168][ T4974] loop3: detected capacity change from 0 to 1024 [ 129.593521][ T4974] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 129.792983][ T4974] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,nodelalloc,grpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 130.928458][ T26] audit: type=1800 audit(1770049221.183:4): pid=4974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.189" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 130.949537][ T4990] blk_update_request: I/O error, dev loop4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 130.996684][ T4990] blk_update_request: I/O error, dev loop4, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 131.012695][ T4990] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 131.027976][ T4990] blk_update_request: I/O error, dev loop4, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 131.041196][ T4990] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 131.051374][ T4990] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 131.060839][ T4990] UDF-fs: Scanning with blocksize 512 failed [ 131.080194][ T4990] blk_update_request: I/O error, dev loop4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 131.103661][ T4990] blk_update_request: I/O error, dev loop4, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 131.116706][ T4990] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 131.330107][ T4990] blk_update_request: I/O error, dev loop4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 131.342008][ T4990] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 131.352040][ T4990] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 131.359891][ T4990] UDF-fs: Scanning with blocksize 1024 failed [ 131.370198][ T4990] blk_update_request: I/O error, dev loop4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 131.382932][ T4990] blk_update_request: I/O error, dev loop4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 131.394626][ T4990] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 131.406002][ T4990] blk_update_request: I/O error, dev loop4, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 131.417846][ T4990] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 131.427637][ T4990] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 131.435516][ T4990] UDF-fs: Scanning with blocksize 2048 failed [ 131.444639][ T4990] blk_update_request: I/O error, dev loop4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 131.456994][ T4990] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 131.467977][ T4990] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 131.477699][ T4990] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 131.485590][ T4990] UDF-fs: Scanning with blocksize 4096 failed [ 131.491772][ T4990] UDF-fs: warning (device loop4): udf_fill_super: No partition found (1) [ 132.932391][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.939466][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.109602][ T4290] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 133.418854][ T4290] usb 5-1: Using ep0 maxpacket: 16 [ 133.584224][ T4290] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 133.871028][ T4290] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 133.902330][ T4290] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.931126][ T4290] usb 5-1: Product: syz [ 133.951369][ T4290] usb 5-1: Manufacturer: syz [ 133.969780][ T4290] usb 5-1: SerialNumber: syz [ 134.070895][ T4290] usb 5-1: config 0 descriptor?? [ 134.465879][ T5015] loop3: detected capacity change from 0 to 32768 [ 134.515220][ T5021] loop0: detected capacity change from 0 to 764 [ 134.687563][ T5021] rock: directory entry would overflow storage [ 134.854969][ T5021] rock: sig=0x4654, size=5, remaining=4 [ 135.383981][ T5034] virtio-fs: tag not found [ 135.831893][ T1107] usb 5-1: USB disconnect, device number 5 [ 135.938277][ T5037] loop4: detected capacity change from 0 to 764 [ 136.257190][ T5042] netlink: 'syz.4.207': attribute type 2 has an invalid length. [ 138.748788][ T21] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 138.921429][ T5052] loop0: detected capacity change from 0 to 8192 [ 139.263780][ T21] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.275483][ T21] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.285395][ T21] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 139.316851][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.604831][ T21] usb 5-1: config 0 descriptor?? [ 140.575790][ T5070] tipc: Started in network mode [ 140.607849][ T5070] tipc: Node identity 5675c23055f, cluster identity 4711 [ 140.618885][ T21] usbhid 5-1:0.0: can't add hid device: -71 [ 140.622693][ T5070] tipc: Enabled bearer , priority 0 [ 140.626497][ T21] usbhid: probe of 5-1:0.0 failed with error -71 [ 140.636094][ T5073] device syzkaller0 entered promiscuous mode [ 140.638770][ T4243] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 140.684236][ T21] usb 5-1: USB disconnect, device number 6 [ 140.704292][ T5070] tipc: Resetting bearer [ 140.733732][ T5069] tipc: Resetting bearer [ 140.761105][ T5069] tipc: Disabling bearer [ 140.888889][ T7] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 140.908784][ T4243] usb 1-1: Using ep0 maxpacket: 16 [ 141.098944][ T4243] usb 1-1: config 0 has an invalid interface number: 216 but max is 0 [ 141.813513][ T4243] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 141.824273][ T4243] usb 1-1: config 0 has no interface number 0 [ 141.830753][ T4243] usb 1-1: config 0 interface 216 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 143.059905][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.989009][ T4243] usb 1-1: New USB device found, idVendor=c877, idProduct=d477, bcdDevice=ca.74 [ 144.004218][ T4243] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.271285][ T7] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 144.283645][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.337745][ T4243] usb 1-1: Product: syz [ 144.559115][ T4243] usb 1-1: config 0 descriptor?? [ 144.659312][ T4243] usb 1-1: can't set config #0, error -71 [ 144.896839][ T4243] usb 1-1: USB disconnect, device number 2 [ 144.991793][ T7] usb 2-1: config 0 descriptor?? [ 145.008880][ T7] usb 2-1: can't set config #0, error -71 [ 145.029523][ T7] usb 2-1: USB disconnect, device number 4 [ 146.166433][ T5109] netlink: 'syz.0.232': attribute type 4 has an invalid length. [ 146.175092][ T5109] netlink: 152 bytes leftover after parsing attributes in process `syz.0.232'. [ 146.191457][ T5109] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 146.378524][ T5118] loop3: detected capacity change from 0 to 128 [ 146.397847][ T5103] loop1: detected capacity change from 0 to 32768 [ 147.091750][ T5103] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.229 (5103) [ 148.153941][ T5121] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 149.235790][ T5118] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 149.314485][ T5118] ext4 filesystem being mounted at /55/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 149.494922][ T5103] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 149.524350][ T5103] BTRFS info (device loop1): force clearing of disk cache [ 149.871494][ T5103] BTRFS info (device loop1): setting nodatacow, compression disabled [ 149.959084][ T5103] BTRFS info (device loop1): turning off barriers [ 149.985768][ T5103] BTRFS info (device loop1): disabling free space tree [ 149.999045][ T5103] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 151.412795][ T5103] BTRFS info (device loop1): trying to use backup root at mount time [ 151.598829][ T5103] BTRFS info (device loop1): has skinny extents [ 152.249059][ T5103] BTRFS error (device loop1): open_ctree failed: -12 [ 152.464487][ T5163] loop3: detected capacity change from 0 to 1024 [ 152.524829][ T5165] loop4: detected capacity change from 0 to 4096 [ 152.657566][ T5163] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_batch_time=0x00000000000003ff,journal_dev=0x00000000000000ff,nombcache,max_batch_time=0x0000000000000006,init_itable,errors=remount-ro,. Quota mode: none. [ 157.577849][ T5221] loop0: detected capacity change from 0 to 16 [ 159.334480][ T5229] loop1: detected capacity change from 0 to 1024 [ 159.382395][ T5229] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 159.986646][ T5243] netlink: 28 bytes leftover after parsing attributes in process `syz.4.260'. [ 160.666465][ T5229] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,nodelalloc,grpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 161.538897][ T26] audit: type=1800 audit(1770049251.803:5): pid=5229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.258" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 162.322931][ T5262] netlink: 36 bytes leftover after parsing attributes in process `syz.0.266'. [ 162.584300][ T5264] netlink: 'syz.0.266': attribute type 10 has an invalid length. [ 162.985711][ T5264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.020679][ T5264] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 163.075957][ T5262] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.083601][ T5262] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.103915][ T5262] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.111961][ T5262] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.321974][ T5262] bond0: (slave batadv0): Releasing backup interface [ 164.625245][ T5282] [ 164.627601][ T5282] ====================================================== [ 164.634713][ T5282] WARNING: possible circular locking dependency detected [ 164.641739][ T5282] syzkaller #0 Not tainted [ 164.646163][ T5282] ------------------------------------------------------ [ 164.648801][ T5281] loop4: detected capacity change from 0 to 2048 [ 164.653187][ T5282] syz.0.272/5282 is trying to acquire lock: [ 164.653199][ T5282] ffff88801f108120 (sk_lock-AF_AX25){+.+.}-{0:0}, at: ax25_device_event+0x217/0x4f0 [ 164.674932][ T5282] [ 164.674932][ T5282] but task is already holding lock: [ 164.682289][ T5282] ffffffff8d43c548 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x534/0xe30 [ 164.690572][ T5282] [ 164.690572][ T5282] which lock already depends on the new lock. [ 164.690572][ T5282] [ 164.700978][ T5282] [ 164.700978][ T5282] the existing dependency chain (in reverse order) is: [ 164.702974][ T5291] loop1: detected capacity change from 0 to 1024 [ 164.709987][ T5282] [ 164.709987][ T5282] -> #1 (rtnl_mutex){+.+.}-{3:3}: [ 164.710018][ T5282] __mutex_lock_common+0x1e3/0x2400 [ 164.710043][ T5282] mutex_lock_nested+0x17/0x20 [ 164.710056][ T5282] ax25_setsockopt+0x859/0xa60 [ 164.710070][ T5282] __sys_setsockopt+0x2bf/0x3d0 [ 164.710085][ T5282] __x64_sys_setsockopt+0xb1/0xc0 [ 164.710098][ T5282] do_syscall_64+0x4c/0xa0 [ 164.710110][ T5282] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 164.710123][ T5282] [ 164.710123][ T5282] -> #0 (sk_lock-AF_AX25){+.+.}-{0:0}: [ 164.770117][ T5282] __lock_acquire+0x2c42/0x7d10 [ 164.775477][ T5282] lock_acquire+0x19e/0x400 [ 164.780488][ T5282] lock_sock_nested+0x44/0x100 [ 164.785780][ T5282] ax25_device_event+0x217/0x4f0 [ 164.791394][ T5282] raw_notifier_call_chain+0xcb/0x160 [ 164.797377][ T5282] __dev_notify_flags+0x158/0x300 [ 164.803005][ T5282] dev_change_flags+0xe3/0x1a0 [ 164.808388][ T5282] dev_ifsioc+0x130/0xd50 [ 164.813223][ T5282] dev_ioctl+0x545/0xe30 [ 164.818063][ T5282] sock_do_ioctl+0x245/0x320 [ 164.823240][ T5282] sock_ioctl+0x4d2/0x710 [ 164.828076][ T5282] __se_sys_ioctl+0xfa/0x170 [ 164.833170][ T5282] do_syscall_64+0x4c/0xa0 [ 164.838086][ T5282] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 164.844477][ T5282] [ 164.844477][ T5282] other info that might help us debug this: [ 164.844477][ T5282] [ 164.854769][ T5282] Possible unsafe locking scenario: [ 164.854769][ T5282] [ 164.862198][ T5282] CPU0 CPU1 [ 164.867541][ T5282] ---- ---- [ 164.872971][ T5282] lock(rtnl_mutex); [ 164.876980][ T5282] lock(sk_lock-AF_AX25); [ 164.883894][ T5282] lock(rtnl_mutex); [ 164.890431][ T5282] lock(sk_lock-AF_AX25); [ 164.895115][ T5282] [ 164.895115][ T5282] *** DEADLOCK *** [ 164.895115][ T5282] [ 164.903242][ T5282] 1 lock held by syz.0.272/5282: [ 164.908154][ T5282] #0: ffffffff8d43c548 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x534/0xe30 [ 164.916826][ T5282] [ 164.916826][ T5282] stack backtrace: [ 164.922974][ T5282] CPU: 1 PID: 5282 Comm: syz.0.272 Not tainted syzkaller #0 [ 164.930241][ T5282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 164.940284][ T5282] Call Trace: [ 164.943551][ T5282] [ 164.946462][ T5282] dump_stack_lvl+0x188/0x250 [ 164.951127][ T5282] ? load_image+0x400/0x400 [ 164.955649][ T5282] ? show_regs_print_info+0x20/0x20 [ 164.960838][ T5282] ? print_circular_bug+0x12b/0x1a0 [ 164.966021][ T5282] check_noncircular+0x296/0x330 [ 164.970943][ T5282] ? add_chain_block+0x940/0x940 [ 164.975991][ T5282] ? lockdep_lock+0xf1/0x1f0 [ 164.980574][ T5282] ? finish_lock_switch+0x12f/0x280 [ 164.985785][ T5282] ? mark_lock+0x94/0x320 [ 164.990107][ T5282] __lock_acquire+0x2c42/0x7d10 [ 164.994991][ T5282] ? verify_lock_unused+0x140/0x140 [ 165.000171][ T5282] ? release_firmware_map_entry+0x190/0x190 [ 165.006044][ T5282] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 165.011656][ T5282] ? preempt_schedule+0xbc/0xd0 [ 165.016487][ T5282] ? ax25_device_event+0x20d/0x4f0 [ 165.021585][ T5282] lock_acquire+0x19e/0x400 [ 165.026227][ T5282] ? ax25_device_event+0x217/0x4f0 [ 165.031400][ T5282] ? lock_chain_count+0x20/0x20 [ 165.036244][ T5282] ? read_lock_is_recursive+0x10/0x10 [ 165.041687][ T5282] ? __local_bh_enable_ip+0x147/0x1c0 [ 165.047037][ T5282] ? _local_bh_enable+0xa0/0xa0 [ 165.051867][ T5282] lock_sock_nested+0x44/0x100 [ 165.056612][ T5282] ? ax25_device_event+0x217/0x4f0 [ 165.061708][ T5282] ax25_device_event+0x217/0x4f0 [ 165.066623][ T5282] raw_notifier_call_chain+0xcb/0x160 [ 165.072023][ T5282] __dev_notify_flags+0x158/0x300 [ 165.077042][ T5282] ? __dev_change_flags+0x6a0/0x6a0 [ 165.082228][ T5282] ? __dev_change_flags+0x4d0/0x6a0 [ 165.087514][ T5282] ? dev_get_flags+0x1c0/0x1c0 [ 165.092259][ T5282] ? __mutex_lock_common+0x47c/0x2400 [ 165.097614][ T5282] dev_change_flags+0xe3/0x1a0 [ 165.102364][ T5282] dev_ifsioc+0x130/0xd50 [ 165.106677][ T5282] ? dev_ioctl+0xe30/0xe30 [ 165.111073][ T5282] ? full_name_hash+0x8e/0xe0 [ 165.115732][ T5282] dev_ioctl+0x545/0xe30 [ 165.119952][ T5282] ? _copy_from_user+0x111/0x170 [ 165.124878][ T5282] sock_do_ioctl+0x245/0x320 [ 165.129625][ T5282] ? sock_show_fdinfo+0xb0/0xb0 [ 165.134463][ T5282] sock_ioctl+0x4d2/0x710 [ 165.138797][ T5282] ? sock_poll+0x410/0x410 [ 165.143197][ T5282] ? bpf_lsm_file_ioctl+0x5/0x10 [ 165.148115][ T5282] ? security_file_ioctl+0x7c/0xa0 [ 165.153208][ T5282] ? sock_poll+0x410/0x410 [ 165.157606][ T5282] __se_sys_ioctl+0xfa/0x170 [ 165.162180][ T5282] do_syscall_64+0x4c/0xa0 [ 165.166571][ T5282] ? clear_bhb_loop+0x30/0x80 [ 165.171232][ T5282] ? clear_bhb_loop+0x30/0x80 [ 165.176032][ T5282] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 165.182009][ T5282] RIP: 0033:0x7f0aacd09eb9 [ 165.186408][ T5282] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.206109][ T5282] RSP: 002b:00007f0aaaf65028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 165.214510][ T5282] RAX: ffffffffffffffda RBX: 00007f0aacf84fa0 RCX: 00007f0aacd09eb9 [ 165.222469][ T5282] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000004 [ 165.230436][ T5282] RBP: 00007f0aacd77c1f R08: 0000000000000000 R09: 0000000000000000 [ 165.238580][ T5282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 165.246757][ T5282] R13: 00007f0aacf85038 R14: 00007f0aacf84fa0 R15: 00007ffd98b67338 [ 165.254714][ T5282] [ 165.310824][ T5282] ================================================================== [ 165.319015][ T5282] BUG: KASAN: use-after-free in ax25_dev_device_down+0x35e/0x520 [ 165.326741][ T5282] Write of size 4 at addr ffff88801a5f73b8 by task syz.0.272/5282 [ 165.334538][ T5282] [ 165.336943][ T5282] CPU: 1 PID: 5282 Comm: syz.0.272 Not tainted syzkaller #0 [ 165.344296][ T5282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 165.354331][ T5282] Call Trace: [ 165.357594][ T5282] [ 165.360508][ T5282] dump_stack_lvl+0x188/0x250 [ 165.365180][ T5282] ? show_regs_print_info+0x20/0x20 [ 165.370358][ T5282] ? _printk+0xda/0x130 [ 165.374503][ T5282] ? ax25_dev_device_down+0x35e/0x520 [ 165.379864][ T5282] ? load_image+0x400/0x400 [ 165.384370][ T5282] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 165.389815][ T5282] print_address_description+0x60/0x2d0 [ 165.395344][ T5282] ? ax25_dev_device_down+0x35e/0x520 [ 165.400700][ T5282] kasan_report+0xdf/0x130 [ 165.405101][ T5282] ? ax25_dev_device_down+0x35e/0x520 [ 165.410458][ T5282] kasan_check_range+0x235/0x290 [ 165.415381][ T5282] ax25_dev_device_down+0x35e/0x520 [ 165.420581][ T5282] ax25_device_event+0x4b4/0x4f0 [ 165.425498][ T5282] raw_notifier_call_chain+0xcb/0x160 [ 165.430862][ T5282] __dev_notify_flags+0x158/0x300 [ 165.435876][ T5282] ? __dev_change_flags+0x6a0/0x6a0 [ 165.441060][ T5282] ? __dev_change_flags+0x4d0/0x6a0 [ 165.446237][ T5282] ? dev_get_flags+0x1c0/0x1c0 [ 165.450989][ T5282] ? __mutex_lock_common+0x47c/0x2400 [ 165.456362][ T5282] dev_change_flags+0xe3/0x1a0 [ 165.461113][ T5282] dev_ifsioc+0x130/0xd50 [ 165.465440][ T5282] ? dev_ioctl+0xe30/0xe30 [ 165.469854][ T5282] ? full_name_hash+0x8e/0xe0 [ 165.474526][ T5282] dev_ioctl+0x545/0xe30 [ 165.478783][ T5282] ? _copy_from_user+0x111/0x170 [ 165.483700][ T5282] sock_do_ioctl+0x245/0x320 [ 165.488506][ T5282] ? sock_show_fdinfo+0xb0/0xb0 [ 165.493431][ T5282] sock_ioctl+0x4d2/0x710 [ 165.497752][ T5282] ? sock_poll+0x410/0x410 [ 165.502153][ T5282] ? bpf_lsm_file_ioctl+0x5/0x10 [ 165.507088][ T5282] ? security_file_ioctl+0x7c/0xa0 [ 165.512725][ T5282] ? sock_poll+0x410/0x410 [ 165.517127][ T5282] __se_sys_ioctl+0xfa/0x170 [ 165.521814][ T5282] do_syscall_64+0x4c/0xa0 [ 165.526368][ T5282] ? clear_bhb_loop+0x30/0x80 [ 165.531130][ T5282] ? clear_bhb_loop+0x30/0x80 [ 165.535804][ T5282] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 165.541683][ T5282] RIP: 0033:0x7f0aacd09eb9 [ 165.546089][ T5282] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.565767][ T5282] RSP: 002b:00007f0aaaf65028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 165.574241][ T5282] RAX: ffffffffffffffda RBX: 00007f0aacf84fa0 RCX: 00007f0aacd09eb9 [ 165.582206][ T5282] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000004 [ 165.590168][ T5282] RBP: 00007f0aacd77c1f R08: 0000000000000000 R09: 0000000000000000 [ 165.598325][ T5282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 165.606505][ T5282] R13: 00007f0aacf85038 R14: 00007f0aacf84fa0 R15: 00007ffd98b67338 [ 165.614562][ T5282] [ 165.617567][ T5282] [ 165.619869][ T5282] Allocated by task 4416: [ 165.624289][ T5282] __kasan_kmalloc+0xb5/0xf0 [ 165.628879][ T5282] ax25_dev_device_up+0x50/0x580 [ 165.633803][ T5282] ax25_device_event+0x483/0x4f0 [ 165.638723][ T5282] raw_notifier_call_chain+0xcb/0x160 [ 165.644092][ T5282] __dev_notify_flags+0x194/0x300 [ 165.649131][ T5282] dev_change_flags+0xe3/0x1a0 [ 165.653932][ T5282] dev_ifsioc+0x130/0xd50 [ 165.658245][ T5282] dev_ioctl+0x545/0xe30 [ 165.662469][ T5282] sock_do_ioctl+0x245/0x320 [ 165.667047][ T5282] sock_ioctl+0x4d2/0x710 [ 165.671617][ T5282] __se_sys_ioctl+0xfa/0x170 [ 165.676189][ T5282] do_syscall_64+0x4c/0xa0 [ 165.680582][ T5282] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 165.686547][ T5282] [ 165.688862][ T5282] Freed by task 5282: [ 165.693005][ T5282] kasan_set_track+0x4b/0x70 [ 165.697594][ T5282] kasan_set_free_info+0x1f/0x40 [ 165.702606][ T5282] ____kasan_slab_free+0xd5/0x110 [ 165.707614][ T5282] slab_free_freelist_hook+0xea/0x170 [ 165.713059][ T5282] kfree+0xef/0x2a0 [ 165.716932][ T5282] ax25_dev_device_down+0x1c0/0x520 [ 165.722112][ T5282] ax25_device_event+0x4b4/0x4f0 [ 165.727200][ T5282] raw_notifier_call_chain+0xcb/0x160 [ 165.732553][ T5282] __dev_notify_flags+0x158/0x300 [ 165.737593][ T5282] dev_change_flags+0xe3/0x1a0 [ 165.742357][ T5282] dev_ifsioc+0x130/0xd50 [ 165.746671][ T5282] dev_ioctl+0x545/0xe30 [ 165.750894][ T5282] sock_do_ioctl+0x245/0x320 [ 165.755490][ T5282] sock_ioctl+0x4d2/0x710 [ 165.759886][ T5282] __se_sys_ioctl+0xfa/0x170 [ 165.764455][ T5282] do_syscall_64+0x4c/0xa0 [ 165.768857][ T5282] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 165.774730][ T5282] [ 165.777034][ T5282] Last potentially related work creation: [ 165.782723][ T5282] kasan_save_stack+0x35/0x60 [ 165.787406][ T5282] kasan_record_aux_stack+0xb8/0x100 [ 165.792673][ T5282] insert_work+0x54/0x3d0 [ 165.796988][ T5282] __queue_work+0x9c5/0xd50 [ 165.801474][ T5282] queue_work_on+0x124/0x1f0 [ 165.806085][ T5282] netdevice_event+0x803/0x900 [ 165.810917][ T5282] raw_notifier_call_chain+0xcb/0x160 [ 165.816532][ T5282] __dev_notify_flags+0x194/0x300 [ 165.821721][ T5282] dev_change_flags+0xe3/0x1a0 [ 165.826636][ T5282] do_setlink+0xcdb/0x3d60 [ 165.831031][ T5282] rtnl_newlink+0x1658/0x1a50 [ 165.835686][ T5282] rtnetlink_rcv_msg+0x844/0xf30 [ 165.840604][ T5282] netlink_rcv_skb+0x1f5/0x440 [ 165.846340][ T5282] netlink_unicast+0x774/0x920 [ 165.851677][ T5282] netlink_sendmsg+0x8ba/0xbe0 [ 165.856441][ T5282] __sys_sendto+0x46d/0x620 [ 165.861036][ T5282] __x64_sys_sendto+0xda/0xf0 [ 165.865959][ T5282] do_syscall_64+0x4c/0xa0 [ 165.870371][ T5282] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 165.876245][ T5282] [ 165.878571][ T5282] The buggy address belongs to the object at ffff88801a5f7300 [ 165.878571][ T5282] which belongs to the cache kmalloc-192 of size 192 [ 165.892949][ T5282] The buggy address is located 184 bytes inside of [ 165.892949][ T5282] 192-byte region [ffff88801a5f7300, ffff88801a5f73c0) [ 165.906206][ T5282] The buggy address belongs to the page: [ 165.911925][ T5282] page:ffffea0000697dc0 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88801a5f7800 pfn:0x1a5f7 [ 165.923888][ T5282] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 165.931512][ T5282] raw: 00fff00000000200 ffffea0000805ac0 0000000200000002 ffff888016c41a00 [ 165.940081][ T5282] raw: ffff88801a5f7800 000000008010000f 00000001ffffffff 0000000000000000 [ 165.948817][ T5282] page dumped because: kasan: bad access detected [ 165.955211][ T5282] page_owner tracks the page as allocated [ 165.961249][ T5282] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 1, ts 2415680468, free_ts 0 [ 165.976085][ T5282] get_page_from_freelist+0x1bbd/0x1ca0 [ 165.981714][ T5282] __alloc_pages+0x1ee/0x480 [ 165.986805][ T5282] alloc_page_interleave+0x24/0x1e0 [ 165.992027][ T5282] new_slab+0xc0/0x4b0 [ 165.996073][ T5282] ___slab_alloc+0x80a/0xdd0 [ 166.000733][ T5282] __kmalloc_track_caller+0x1cb/0x330 [ 166.006084][ T5282] krealloc+0x5a/0xf0 [ 166.010134][ T5282] add_sysfs_param+0xe8/0x930 [ 166.014788][ T5282] kernel_add_sysfs_param+0xaf/0x120 [ 166.020061][ T5282] param_sysfs_builtin+0x183/0x200 [ 166.025151][ T5282] param_sysfs_init+0x66/0x70 [ 166.029803][ T5282] do_one_initcall+0x272/0x730 [ 166.034549][ T5282] do_initcall_level+0x137/0x1f0 [ 166.039478][ T5282] do_initcalls+0x4b/0x90 [ 166.043799][ T5282] kernel_init_freeable+0x3e9/0x570 [ 166.048984][ T5282] kernel_init+0x19/0x1b0 [ 166.053334][ T5282] page_owner free stack trace missing [ 166.058858][ T5282] [ 166.061169][ T5282] Memory state around the buggy address: [ 166.066772][ T5282] ffff88801a5f7280: 00 fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 166.074808][ T5282] ffff88801a5f7300: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 166.082941][ T5282] >ffff88801a5f7380: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 166.090977][ T5282] ^ [ 166.096844][ T5282] ffff88801a5f7400: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 166.104982][ T5282] ffff88801a5f7480: 00 fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 166.113104][ T5282] ================================================================== [ 166.265966][ T5282] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 166.273300][ T5282] CPU: 1 PID: 5282 Comm: syz.0.272 Tainted: G B syzkaller #0 [ 166.282051][ T5282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 166.292454][ T5282] Call Trace: [ 166.295723][ T5282] [ 166.298632][ T5282] dump_stack_lvl+0x188/0x250 [ 166.303301][ T5282] ? show_regs_print_info+0x20/0x20 [ 166.308479][ T5282] ? load_image+0x400/0x400 [ 166.312972][ T5282] panic+0x2e5/0x810 [ 166.316871][ T5282] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 166.323037][ T5282] ? bpf_jit_dump+0xd0/0xd0 [ 166.327534][ T5282] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 166.333531][ T5282] ? _raw_spin_unlock+0x40/0x40 [ 166.338377][ T5282] ? ax25_dev_device_down+0x35e/0x520 [ 166.344039][ T5282] check_panic_on_warn+0x80/0xa0 [ 166.349065][ T5282] ? ax25_dev_device_down+0x35e/0x520 [ 166.354418][ T5282] end_report+0x6d/0xf0 [ 166.358582][ T5282] kasan_report+0x102/0x130 [ 166.363064][ T5282] ? ax25_dev_device_down+0x35e/0x520 [ 166.368425][ T5282] kasan_check_range+0x235/0x290 [ 166.373342][ T5282] ax25_dev_device_down+0x35e/0x520 [ 166.378533][ T5282] ax25_device_event+0x4b4/0x4f0 [ 166.383454][ T5282] raw_notifier_call_chain+0xcb/0x160 [ 166.388832][ T5282] __dev_notify_flags+0x158/0x300 [ 166.393925][ T5282] ? __dev_change_flags+0x6a0/0x6a0 [ 166.399102][ T5282] ? __dev_change_flags+0x4d0/0x6a0 [ 166.404280][ T5282] ? dev_get_flags+0x1c0/0x1c0 [ 166.409037][ T5282] ? __mutex_lock_common+0x47c/0x2400 [ 166.414402][ T5282] dev_change_flags+0xe3/0x1a0 [ 166.419148][ T5282] dev_ifsioc+0x130/0xd50 [ 166.423634][ T5282] ? dev_ioctl+0xe30/0xe30 [ 166.428033][ T5282] ? full_name_hash+0x8e/0xe0 [ 166.432701][ T5282] dev_ioctl+0x545/0xe30 [ 166.436926][ T5282] ? _copy_from_user+0x111/0x170 [ 166.441929][ T5282] sock_do_ioctl+0x245/0x320 [ 166.446591][ T5282] ? sock_show_fdinfo+0xb0/0xb0 [ 166.451427][ T5282] sock_ioctl+0x4d2/0x710 [ 166.455736][ T5282] ? sock_poll+0x410/0x410 [ 166.460143][ T5282] ? bpf_lsm_file_ioctl+0x5/0x10 [ 166.465155][ T5282] ? security_file_ioctl+0x7c/0xa0 [ 166.470248][ T5282] ? sock_poll+0x410/0x410 [ 166.474738][ T5282] __se_sys_ioctl+0xfa/0x170 [ 166.479316][ T5282] do_syscall_64+0x4c/0xa0 [ 166.483710][ T5282] ? clear_bhb_loop+0x30/0x80 [ 166.488386][ T5282] ? clear_bhb_loop+0x30/0x80 [ 166.493043][ T5282] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 166.499008][ T5282] RIP: 0033:0x7f0aacd09eb9 [ 166.503582][ T5282] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.523267][ T5282] RSP: 002b:00007f0aaaf65028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 166.531664][ T5282] RAX: ffffffffffffffda RBX: 00007f0aacf84fa0 RCX: 00007f0aacd09eb9 [ 166.539619][ T5282] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000004 [ 166.547656][ T5282] RBP: 00007f0aacd77c1f R08: 0000000000000000 R09: 0000000000000000 [ 166.555607][ T5282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 166.563559][ T5282] R13: 00007f0aacf85038 R14: 00007f0aacf84fa0 R15: 00007ffd98b67338 [ 166.571619][ T5282] [ 166.574948][ T5282] Kernel Offset: disabled [ 166.579261][ T5282] Rebooting in 86400 seconds..