last executing test programs: 13.279096792s ago: executing program 1 (id=252): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, 0x0, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000600)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3f, 0x6c, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @parameter_prob={0xc, 0x0, 0x0, 0x5, 0x6, 0x0, {0x14, 0x4, 0x3, 0x3, 0x8, 0x67, 0x4, 0x77, 0x1, 0x8, @multicast1, @broadcast, {[@ssrr={0x89, 0x1f, 0xec, [@empty, @dev={0xac, 0x14, 0x14, 0x3d}, @empty, @empty, @dev={0xac, 0x14, 0x14, 0x18}, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_prespec={0x44, 0x14, 0x35, 0x3, 0x4, [{@loopback}, {@private=0xa010102, 0x4}]}, @ssrr={0x89, 0x7, 0x4b, [@remote]}]}}}}}}}, 0x0) accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x80000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000200)={0xfffffffc, 0x0, 0x6, 0x0, 0xff, "db8f2d2b3b7596160c6981acf8805944823a7f"}) msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000a40)=""/4096) r5 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000080)="09000000010001", 0x7) 12.176972753s ago: executing program 1 (id=257): syz_emit_ethernet(0x82, &(0x7f0000000280)={@link_local, @random="1704b45adbde", @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@lsrr={0x83, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa011100, 0x1000000}, {@private}, {@broadcast}, {@dev}, {@private}, {@empty}, {@private}]}]}}}}}}}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f000000bbc0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001180)="dd", 0x1}], 0x1, &(0x7f00000003c0)=[@rights={{0x10, 0x1, 0x1, [r2]}}], 0x10, 0x20000041}}], 0x1, 0xc004) recvmmsg(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x62}, 0xfffffffc}], 0x1, 0x2020, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000180)={0x1, @vbi={0x0, 0x5, 0x35314152, 0xb5315258, [0x1003a4d], [0x0, 0x7]}}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r4 = fcntl$dupfd(r0, 0x0, r0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="01002bbd7000fbdbdfff7f00000008000300", @ANYRESDEC=r6], 0x1c}, 0x1, 0x0, 0x0, 0x24004084}, 0x44000) ioctl$TCFLSH(r4, 0x400455c8, 0x1) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000003b810000850000007d000000850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000100)='sys_exit\x00', r7}, 0x18) fchmod(r7, 0x20) ioctl$TIOCSETD(r4, 0x5412, &(0x7f0000000140)=0xffffffc0) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r4) 7.141149801s ago: executing program 0 (id=276): add_key(&(0x7f0000000100)='rxrpc\x00', 0x0, &(0x7f0000000140)="00000000976670dfe4cee7cb43a4273a", 0x10, 0xffffffffffffffff) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0xc090) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48081}, 0xe1) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0xfffffffffffffffc, 0x3, 0x8, 0x2, 0xc, 0xfffffffffffffffc, 0x3}, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newtaction={0x10c, 0x30, 0x871a15abc695f30d, 0x5, 0x25dfdbfc, {}, [{0xf8, 0x1, [@m_sample={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0xff}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0xd, 0x6, 0x7f, 0x4}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x66c}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x800}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ife={0x94, 0x7, 0x0, 0x0, {{0x8}, {0x34, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x6, 0x7d8, 0x1, 0x7f}, 0x1}}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}]}, @TCA_IFE_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}]}, {0x3c, 0x6, "1e476c6baf0460eda959c4932bcedb8702daced83843a3ef2ce3d4d105ecdaaff5be06e1f2129573bb1e63ade4737050ecb86917e899baf3"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000140), &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000000340)={0x1, 0x72, "f6063bd857ad93e52f9ec3cb8c7f6fbf64967ef3412b68eb53551cd6752b21628afd5be120f198b7c6cee3530b72cbaa08f92739c942ad474795f3e90596a345e2320d5a2080997b0295be6cc8b6cf6daddaa03f720968a903561a41faee08cb8cf5aa0d18ee4622e19dc9b140566e87fa28"}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x2, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) 7.120245322s ago: executing program 3 (id=277): openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = openat$sndseq(0xffffff9c, &(0x7f0000001240), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000000c0)={{0x80, 0xf7}, 'port1\x00', 0x3ab, 0x2062f, 0x3, 0x7, 0x0, 0xc, 0x3fc, 0x0, 0x7, 0xfd}) readv(r0, &(0x7f0000000700)=[{&(0x7f0000000400)=""/38, 0x26}, {&(0x7f0000000180)=""/245, 0xf5}, {&(0x7f0000000280)=""/62, 0x3e}, {&(0x7f00000002c0)=""/91, 0x5b}, {&(0x7f0000000340)=""/63, 0x3f}, {&(0x7f0000000380)=""/124, 0x7c}, {0x0}, {&(0x7f00000005c0)=""/98, 0x62}, {&(0x7f0000000640)=""/154, 0x9a}], 0x9) openat$sequencer(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_io_uring_setup(0x200010c, &(0x7f0000000380)={0x0, 0x5885, 0x8000, 0x0, 0x2c1}, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x19, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r3, 0x1, 0x28, &(0x7f0000000180)=0x5, 0x4) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r4 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) add_key$user(&(0x7f0000000040), 0x0, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r7, 0x5760, 0x14) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r8, 0x400455c8, 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8004) rseq(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x4, 0x0) 6.464717994s ago: executing program 3 (id=280): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="60000000020605000000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a310000000018000780050003001f0000000c00018008000140ffffffff050005000200000005000100"], 0x60}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x34008005}, 0x4000050) 6.361802496s ago: executing program 0 (id=281): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x80000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000200)={0xfffffffc, 0x0, 0x6, 0x0, 0xff, "db8f2d2b3b7596160c6981acf8805944823a7f"}) msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000a40)=""/4096) r5 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000080)="09000000010001", 0x7) 5.193084289s ago: executing program 0 (id=283): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0xa) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x717e, 0x100, 0x14, 0x193}, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 4.477107313s ago: executing program 4 (id=284): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x7fff, 0x0, 0x1}}, 0x40) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001180)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0xff60, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000012}, 0x94) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) 4.476344553s ago: executing program 0 (id=285): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x3, 0x10) socket$inet6(0xa, 0x80002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xcc657405ba8b63ff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0445624, &(0x7f00000000c0)={0x140980001, 0x1, "bf5dff0f251ed700f61765c214525a2572ce1ced49e8981e103268fadc1433ae", 0x200000000, 0x5, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, [0x0, 0x0, 0x6]}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r4}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="dc00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c000280050001000000000008000480040003800800084000000000080008400000000734000f"], 0xdc}}, 0x0) 4.267845567s ago: executing program 4 (id=286): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0xc, 0x0, &(0x7f00000002c0)=[@register_looper, @acquire], 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x1) syz_open_dev$vbi(0x0, 0x1, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) setrlimit(0x40000000000008, &(0x7f0000000000)={0x4848, 0xfffffffffffff006}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/wireless\x00') preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000200)=""/247, 0xf7}], 0x1, 0x1000a2, 0x0) 3.671176698s ago: executing program 4 (id=287): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040)='./bus\x00') 3.60857956s ago: executing program 4 (id=288): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xffffffffffffffe1, 0x0}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000400)={'batadv_slave_1\x00', 0x0}) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x7fffffff, 0x7, 0x4, 0x1000000, 0x800, 0x8, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x1, 0x8, 0x3f9a, 0x0, 0x8000000010001, 0x3}, 0x0, 0x0) 3.375638735s ago: executing program 2 (id=290): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r0, 0x0) madvise(&(0x7f0000722000/0x3000)=nil, 0x3000, 0x3) 3.334297555s ago: executing program 2 (id=291): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x3}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) 3.268404596s ago: executing program 3 (id=292): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x260140, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$GETPID(0x0, 0x3, 0xb, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0xa2) ioctl$PTP_SYS_OFFSET(r0, 0x43403d05, &(0x7f0000000180)={0x1}) 3.035574501s ago: executing program 2 (id=293): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800"], 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000240)='nv\x00', 0x2) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0xd1, @ipv4={'\x00', '\xff\xff', @loopback}, 0x104}, 0x1c) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x2940, 0x53a65cc8b13837c4, 0x9}, 0x18) 3.023680791s ago: executing program 2 (id=294): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x0, &(0x7f00000001c0)}) socket$nl_xfrm(0x10, 0x3, 0x6) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_clone3(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010, 0x0, 0x39d}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0) 2.171998588s ago: executing program 4 (id=295): socket$inet6(0xa, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6c240, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x7fff, 0x0, 0x1}}, 0x40) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000f}, 0x94) chdir(0x0) syz_open_dev$loop(&(0x7f0000000100), 0x6, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) 2.171301028s ago: executing program 3 (id=296): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x7fff, 0x0, 0x1}}, 0x40) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001180)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0xff60, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000012}, 0x94) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) 2.031453441s ago: executing program 2 (id=297): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000), 0x20440a0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000280)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r1, 0x5452, &(0x7f0000000280)=0x3a0af83a) shutdown(r1, 0x1) listen(r1, 0x20) shutdown(r1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setgroups(0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000140), 0x800, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x717e, 0x100, 0x14, 0x193}, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000000200)={0x2020}, 0x2020) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) 2.025491131s ago: executing program 0 (id=298): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040)='./bus\x00') 979.117551ms ago: executing program 1 (id=299): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_setup(0x47b, &(0x7f0000000ac0)={0x0, 0x4655, 0x80, 0x2, 0x4800020}) 963.297501ms ago: executing program 2 (id=300): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) socket(0x6, 0x80002, 0xfffffffb) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r2, 0x4148, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x33, 0x1, 0x70bd2b, 0x25dbdbfe, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) 940.277662ms ago: executing program 3 (id=301): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @loopback, 0xff}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) write$cgroup_pid(r1, 0x0, 0x0) 925.745462ms ago: executing program 4 (id=302): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="60000000020605000000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a310000000018000780050003001f0000000c00018008000140ffffffff050005000200000005000100"], 0x60}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x34008005}, 0x4000050) 815.466174ms ago: executing program 3 (id=303): timer_create(0x1, &(0x7f0000000280)={0x0, 0x1000022, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) mkdirat(0xffffffffffffffff, 0x0, 0x6) syz_open_dev$sg(0x0, 0x5, 0x484ec1) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x24004080) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_init_net_socket$ax25(0x3, 0x0, 0x8) bind$ax25(r3, &(0x7f0000000100)={{0x3, @null, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @null]}, 0x48) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0x8) setsockopt$ax25_SO_BINDTODEVICE(r5, 0x101, 0x19, &(0x7f00000001c0)=@bpq0, 0x10) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet(r6, &(0x7f00000000c0)={0x2, 0x8, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x8f}, 0x1c) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) 511.38289ms ago: executing program 0 (id=304): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x804) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r3, &(0x7f0000001540), 0x800000000000214, 0x20000001) recvmmsg(r4, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000400)=""/52, 0x34}, {0x0}], 0x2}, 0x9}], 0x1, 0x40000000, &(0x7f0000000f80)={0x77359400}) preadv(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x5, 0x0) 283.570774ms ago: executing program 1 (id=305): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48c0}, 0x20001880) 68.896749ms ago: executing program 1 (id=306): openat$drirender128(0xffffffffffffff9c, &(0x7f0000000800), 0x303, 0x0) syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) r0 = syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad6, 0x100, 0x1}, &(0x7f0000000040)=0x0, &(0x7f0000002a00)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffa, 0x0, 0x4) io_uring_enter(r0, 0xdb4, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) epoll_create(0x8000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a80)) pselect6(0x40, &(0x7f00000001c0)={0x1ff, 0x9, 0x2283, 0x0, 0x0, 0x0, 0xfffffffe, 0xffffffffffffff42}, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 1 (id=307): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x260140, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$GETPID(0x0, 0x3, 0xb, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0xa2) ioctl$PTP_SYS_OFFSET(r0, 0x43403d05, &(0x7f0000000180)={0x1}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.165' (ED25519) to the list of known hosts. syzkaller login: [ 59.186219][ T4175] cgroup: Unknown subsys name 'net' [ 59.323641][ T4175] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 60.797955][ T4175] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 62.750974][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 62.840568][ T4198] chnl_net:caif_netlink_parms(): no params data found [ 62.919390][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 62.965739][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 63.000512][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.007840][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.016626][ T4188] device bridge_slave_0 entered promiscuous mode [ 63.029785][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.037566][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.045743][ T4188] device bridge_slave_1 entered promiscuous mode [ 63.061340][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 63.075204][ T4198] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.082288][ T4198] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.090312][ T4198] device bridge_slave_0 entered promiscuous mode [ 63.121238][ T4198] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.128480][ T4198] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.137058][ T4198] device bridge_slave_1 entered promiscuous mode [ 63.161936][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.194453][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.242425][ T4198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.270588][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.278324][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.286370][ T4185] device bridge_slave_0 entered promiscuous mode [ 63.296243][ T4198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.319593][ T4188] team0: Port device team_slave_0 added [ 63.325906][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.333061][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.341436][ T4185] device bridge_slave_1 entered promiscuous mode [ 63.357094][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.364375][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.372311][ T4187] device bridge_slave_0 entered promiscuous mode [ 63.389570][ T4188] team0: Port device team_slave_1 added [ 63.410249][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.417500][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.425731][ T4187] device bridge_slave_1 entered promiscuous mode [ 63.455332][ T4198] team0: Port device team_slave_0 added [ 63.462816][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.479967][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.487390][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.495451][ T4186] device bridge_slave_0 entered promiscuous mode [ 63.512362][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.523999][ T4198] team0: Port device team_slave_1 added [ 63.544681][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.551863][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.560584][ T4186] device bridge_slave_1 entered promiscuous mode [ 63.568290][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.575509][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.601853][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.614859][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.621994][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.648157][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.676400][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.704615][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.711693][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.738268][ T4198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.751398][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.772614][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.784708][ T4185] team0: Port device team_slave_0 added [ 63.798034][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.805105][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.832136][ T4198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.861175][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.872480][ T4187] team0: Port device team_slave_0 added [ 63.881327][ T4185] team0: Port device team_slave_1 added [ 63.917797][ T4187] team0: Port device team_slave_1 added [ 63.942275][ T4186] team0: Port device team_slave_0 added [ 63.973861][ T4188] device hsr_slave_0 entered promiscuous mode [ 63.980766][ T4188] device hsr_slave_1 entered promiscuous mode [ 63.988746][ T4186] team0: Port device team_slave_1 added [ 64.010656][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.017885][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.044846][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.073252][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.080392][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.106713][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.121533][ T4198] device hsr_slave_0 entered promiscuous mode [ 64.128662][ T4198] device hsr_slave_1 entered promiscuous mode [ 64.136213][ T4198] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.144815][ T4198] Cannot create hsr debugfs directory [ 64.150909][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.158280][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.184459][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.209005][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.216407][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.242757][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.286391][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.293364][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.320084][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.341725][ T4187] device hsr_slave_0 entered promiscuous mode [ 64.349122][ T4187] device hsr_slave_1 entered promiscuous mode [ 64.355833][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.363467][ T4187] Cannot create hsr debugfs directory [ 64.374024][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.380992][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.407754][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.454463][ T1348] Bluetooth: hci3: command 0x0409 tx timeout [ 64.463023][ T1348] Bluetooth: hci1: command 0x0409 tx timeout [ 64.469640][ T1348] Bluetooth: hci0: command 0x0409 tx timeout [ 64.476660][ T1348] Bluetooth: hci2: command 0x0409 tx timeout [ 64.531480][ T4185] device hsr_slave_0 entered promiscuous mode [ 64.538776][ T4185] device hsr_slave_1 entered promiscuous mode [ 64.545101][ T2286] Bluetooth: hci4: command 0x0409 tx timeout [ 64.551650][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.559674][ T4185] Cannot create hsr debugfs directory [ 64.581975][ T4186] device hsr_slave_0 entered promiscuous mode [ 64.588909][ T4186] device hsr_slave_1 entered promiscuous mode [ 64.595659][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.603222][ T4186] Cannot create hsr debugfs directory [ 64.829810][ T4188] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.850816][ T4188] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.873207][ T4188] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.882281][ T4188] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.955834][ T4198] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.966154][ T4198] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.980327][ T4198] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.989757][ T4198] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 65.070594][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.080450][ T4185] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.090280][ T4185] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.113048][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.122754][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.135274][ T4185] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.145862][ T4185] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.162632][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.201477][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.211609][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.221658][ T1261] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.229002][ T1261] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.237760][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.250652][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.259696][ T1261] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.266922][ T1261] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.275804][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.285671][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.315378][ T4187] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.341602][ T4198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.351096][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.361529][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.372220][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.381926][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.393562][ T4187] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.405283][ T4187] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 65.416109][ T4187] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 65.448522][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.457481][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.490221][ T4198] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.515775][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.524057][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.531965][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.540841][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.550197][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.558968][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.570864][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.580147][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.589170][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.596314][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.616320][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.630629][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.640128][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.650295][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.659622][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.666765][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.679017][ T4186] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 65.695483][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.714773][ T4186] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 65.727316][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.745740][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.765017][ T4186] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 65.776055][ T4186] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 65.813280][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.825577][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.834866][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.844633][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.853153][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.862289][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.871305][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.888426][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.901510][ T4198] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.942855][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.951722][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.962370][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.970647][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.980006][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.993079][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.002748][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.013074][ T1261] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.020206][ T1261] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.059858][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.085382][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.096809][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.105173][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.113176][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.125813][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.134816][ T1261] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.142122][ T1261] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.164969][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.188092][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.197044][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.206237][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.221169][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.233210][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.240486][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.256750][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.266545][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.275629][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.282704][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.302323][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.317245][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.327453][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.340642][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.351605][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.387186][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.396781][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.406208][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.416560][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.424375][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.431842][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.441475][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.467817][ T4198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.487748][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.497692][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.509507][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.518647][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.528272][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.533993][ T4250] Bluetooth: hci2: command 0x041b tx timeout [ 66.538226][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.542801][ T4250] Bluetooth: hci0: command 0x041b tx timeout [ 66.564349][ T4250] Bluetooth: hci1: command 0x041b tx timeout [ 66.564586][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.570697][ T4250] Bluetooth: hci3: command 0x041b tx timeout [ 66.597792][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.609333][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.616918][ T4191] Bluetooth: hci4: command 0x041b tx timeout [ 66.623148][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.631518][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.640440][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.649480][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.658380][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.667123][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.677781][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.686886][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.696259][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.705300][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.713803][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.723162][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.732193][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.751972][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.763999][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.779013][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.788070][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.819702][ T4198] device veth0_vlan entered promiscuous mode [ 66.839521][ T4188] device veth0_vlan entered promiscuous mode [ 66.863088][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.883176][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.893299][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.902350][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.910512][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.920552][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.928716][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.944488][ T4188] device veth1_vlan entered promiscuous mode [ 66.968734][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.980672][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.003160][ T1277] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.010343][ T1277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.035712][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.056713][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.066322][ T1277] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.073698][ T1277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.082292][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.129560][ T4198] device veth1_vlan entered promiscuous mode [ 67.144919][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.156349][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.166018][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.175868][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.185194][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.192666][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.200299][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.208211][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.215827][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.229633][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.238670][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.252867][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.262128][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.277904][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.294757][ T4188] device veth0_macvtap entered promiscuous mode [ 67.306174][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.321505][ T4186] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 67.333836][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.350779][ T4188] device veth1_macvtap entered promiscuous mode [ 67.362013][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.374129][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.382117][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.390902][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.401433][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.410246][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.424520][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.450424][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.476510][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.487205][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.497377][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.507218][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.517043][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.526420][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.535588][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.545098][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.569562][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.589519][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.598977][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.617591][ T4188] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.632859][ T4188] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.643093][ T4188] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.652694][ T4188] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.670200][ T4198] device veth0_macvtap entered promiscuous mode [ 67.681690][ T4185] device veth0_vlan entered promiscuous mode [ 67.692810][ T4187] device veth0_vlan entered promiscuous mode [ 67.701567][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.711927][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.720631][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.729477][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.738837][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.747614][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.756644][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.765129][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.773048][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.787472][ T4198] device veth1_macvtap entered promiscuous mode [ 67.808436][ T4187] device veth1_vlan entered promiscuous mode [ 67.824024][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.835710][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.846619][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.854515][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.864984][ T4185] device veth1_vlan entered promiscuous mode [ 67.874000][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.885128][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.898441][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.918688][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.943130][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.960349][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.969437][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.989336][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.001912][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.012705][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.024136][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.048650][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.058279][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.074346][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.083136][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.106245][ T4198] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.116281][ T4198] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.129545][ T4198] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.139635][ T4198] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.164389][ T4187] device veth0_macvtap entered promiscuous mode [ 68.172043][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.221775][ T4187] device veth1_macvtap entered promiscuous mode [ 68.246853][ T4185] device veth0_macvtap entered promiscuous mode [ 68.287689][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.297003][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.306586][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.315905][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.334673][ T4185] device veth1_macvtap entered promiscuous mode [ 68.355327][ T1277] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.372884][ T1277] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.378047][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.395819][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.406732][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.417615][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.428950][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.451416][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.469288][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.477464][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.487801][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.497788][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.507100][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.526791][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.537819][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.548123][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.560003][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.570115][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.581454][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.593261][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.624201][ T21] Bluetooth: hci3: command 0x040f tx timeout [ 68.636160][ T21] Bluetooth: hci1: command 0x040f tx timeout [ 68.642325][ T21] Bluetooth: hci0: command 0x040f tx timeout [ 68.643142][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.651984][ T21] Bluetooth: hci2: command 0x040f tx timeout [ 68.659865][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.674533][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.685618][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.696776][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.704104][ T4258] Bluetooth: hci4: command 0x040f tx timeout [ 68.707899][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.726702][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.742890][ T4186] device veth0_vlan entered promiscuous mode [ 68.757000][ T1261] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.759893][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.765238][ T1261] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.786922][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.797094][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.811166][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.821347][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.832362][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.844394][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.851856][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.861015][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.870109][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.879012][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.888354][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.896771][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.907698][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.917168][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.925520][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.944351][ T4185] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.953098][ T4185] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.962746][ T4185] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.972195][ T4185] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.990234][ T4187] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.999336][ T4187] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.009000][ T4187] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.019729][ T4187] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.047349][ T4186] device veth1_vlan entered promiscuous mode [ 69.060528][ T1261] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.069327][ T1261] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.120296][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.214485][ T1261] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.238037][ T1261] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.283365][ T4186] device veth0_macvtap entered promiscuous mode [ 69.302720][ T4296] loop1: detected capacity change from 0 to 2048 [ 69.308791][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.321437][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.332684][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.351137][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.361725][ T4296] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 69.385435][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.395398][ T4186] device veth1_macvtap entered promiscuous mode [ 69.398965][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.411077][ T4204] udevd[4204]: incorrect nilfs2 checksum on /dev/loop1 [ 69.429582][ T4297] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 69.451050][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.485070][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.507443][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.529402][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.545933][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.560128][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.572745][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.599745][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.617174][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.632387][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.651081][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.676237][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.686514][ T1277] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.696929][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.705761][ T1277] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.727793][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.743286][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.760904][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.772111][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.787883][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.799235][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.815939][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.831096][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.852566][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.874958][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.883030][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.896185][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.912646][ T4186] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.932405][ T4186] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.951957][ T4186] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.963181][ T4186] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.031701][ T4303] loop1: detected capacity change from 0 to 64 [ 70.041259][ T1277] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.070970][ T1277] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.105980][ T3091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.129477][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.148710][ T3091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.178460][ T1261] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.252139][ T1277] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.273187][ T1277] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.289012][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.323012][ T1261] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.333516][ T1261] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.349543][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.437327][ T4299] ODEBUG: Out of memory. ODEBUG disabled [ 70.524086][ T4299] syz.3.4 (4299): drop_caches: 2 [ 70.642056][ T26] audit: type=1800 audit(1758368718.829:2): pid=4303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 70.720649][ T4251] Bluetooth: hci2: command 0x0419 tx timeout [ 70.742729][ T4309] loop4: detected capacity change from 0 to 512 [ 70.752640][ T4251] Bluetooth: hci0: command 0x0419 tx timeout [ 70.766682][ T4251] Bluetooth: hci1: command 0x0419 tx timeout [ 70.784054][ T4251] Bluetooth: hci3: command 0x0419 tx timeout [ 70.792614][ T4312] loop0: detected capacity change from 0 to 64 [ 70.806937][ T4313] loop2: detected capacity change from 0 to 1024 [ 70.829898][ T4309] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 70.849057][ T4251] Bluetooth: hci4: command 0x0419 tx timeout [ 70.884442][ T4309] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 70.909343][ T26] audit: type=1800 audit(1758368719.099:3): pid=4313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 70.966163][ T4309] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #16: comm syz.4.5: invalid indirect mapped block 4294967295 (level 0) [ 71.020856][ T4309] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #16: comm syz.4.5: invalid indirect mapped block 4294967295 (level 1) [ 71.050528][ T4309] EXT4-fs (loop4): 1 orphan inode deleted [ 71.090595][ T4318] loop1: detected capacity change from 0 to 256 [ 71.137694][ T4309] EXT4-fs (loop4): 1 truncate cleaned up [ 71.191488][ T4309] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 71.199380][ T4318] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 71.247246][ T4318] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 71.298406][ T4318] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 71.343566][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.350198][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.398611][ T4309] EXT4-fs error (device loop4): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.4.5: bad entry in directory: rec_len is too small for name_len - offset=12, inode=2, rec_len=12, size=1024 fake=0 [ 71.433799][ T4308] loop3: detected capacity change from 0 to 32768 [ 71.776032][ T4308] XFS (loop3): Mounting V5 Filesystem [ 72.058658][ T4308] XFS (loop3): Ending clean mount [ 72.111285][ T4308] XFS (loop3): Quotacheck needed: Please wait. [ 72.238077][ T4308] XFS (loop3): Quotacheck: Done. [ 72.426119][ T4344] loop2: detected capacity change from 0 to 64 [ 72.555938][ T4333] loop1: detected capacity change from 0 to 32768 [ 72.626108][ T4333] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.13 (4333) [ 72.830401][ T4333] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 72.873794][ T4333] BTRFS info (device loop1): using free space tree [ 72.888227][ T4333] BTRFS info (device loop1): has skinny extents [ 72.941960][ T4352] loop2: detected capacity change from 0 to 64 [ 73.057733][ T4341] loop4: detected capacity change from 0 to 32768 [ 73.141430][ T4341] XFS (loop4): Mounting V5 Filesystem [ 73.221046][ T4333] BTRFS info (device loop1): enabling ssd optimizations [ 73.273925][ T4341] XFS (loop4): Ending clean mount [ 73.288486][ T4341] XFS (loop4): Quotacheck needed: Please wait. [ 73.346181][ T26] audit: type=1800 audit(1758368721.539:4): pid=4352 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.18" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 73.417557][ T4352] Trying to free block not in datazone [ 73.487531][ T4341] XFS (loop4): Quotacheck: Done. [ 73.622496][ T4186] XFS (loop4): Unmounting Filesystem [ 73.925147][ T4204] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop1 scanned by udevd (4204) [ 74.273080][ T4198] XFS (loop3): Unmounting Filesystem [ 74.441649][ T4361] loop0: detected capacity change from 0 to 40427 [ 74.538874][ T4361] F2FS-fs (loop0): build fault injection attr: rate: 23, type: 0x1ffff [ 74.667937][ T4409] loop4: detected capacity change from 0 to 2048 [ 74.674761][ T4361] F2FS-fs (loop0): Unrecognized mount option "errors=continue" or missing value [ 74.838501][ T4412] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 74.963592][ T4409] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 75.035294][ T4409] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.163827][ T4409] ======================================================= [ 75.163827][ T4409] WARNING: The mand mount option has been deprecated and [ 75.163827][ T4409] and is ignored by this kernel. Remove the mand [ 75.163827][ T4409] option from the mount to silence this warning. [ 75.163827][ T4409] ======================================================= [ 75.368203][ T4409] EXT4-fs (loop4): re-mounted. Opts: . Quota mode: none. [ 75.439592][ T4409] EXT4-fs (loop4): re-mounted. Opts: (null). Quota mode: none. [ 75.793060][ T4413] netlink: 40 bytes leftover after parsing attributes in process `syz.0.27'. [ 77.250437][ T4450] loop4: detected capacity change from 0 to 4096 [ 77.357881][ T4452] loop2: detected capacity change from 0 to 128 [ 77.402453][ T4450] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 77.435930][ T4452] EXT4-fs (loop2): Test dummy encryption mode enabled [ 77.513893][ T4452] EXT4-fs (loop2): Test dummy encryption mode enabled [ 77.531166][ T4452] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 77.565129][ T4452] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,nomblk_io_submit,commit=0x0000000000000000,,errors=continue. Quota mode: none. [ 77.583797][ C0] vkms_vblank_simulate: vblank timer overrun [ 77.674739][ T4457] loop3: detected capacity change from 0 to 4096 [ 77.683729][ T4452] ext4 filesystem being mounted at /7/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 77.735638][ T4457] ntfs3: Unknown parameter 'hide_çízô¸¥áeFÎfV!iid0x0000000000000000' [ 78.044724][ T4448] loop1: detected capacity change from 0 to 32768 [ 78.056790][ T4462] loop4: detected capacity change from 0 to 1024 [ 78.094077][ T4448] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 78.104151][ T4448] BTRFS info (device loop1): using free space tree [ 78.110714][ T4448] BTRFS info (device loop1): has skinny extents [ 78.173751][ T4452] fscrypt (loop2): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 78.674107][ T4448] BTRFS info (device loop1): enabling ssd optimizations [ 79.431060][ T4482] netlink: 40 bytes leftover after parsing attributes in process `syz.2.41'. [ 79.642876][ T4499] loop3: detected capacity change from 0 to 32768 [ 80.694894][ T4518] Zero length message leads to an empty skb [ 80.709491][ T4518] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 81.087692][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 81.190225][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 81.279875][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10!!! [ 81.289355][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #12!!! [ 81.298514][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #112!!! [ 81.307678][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #112!!! [ 81.316868][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #192!!! [ 81.326006][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #192!!! [ 81.336191][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #192!!! [ 81.345338][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #192!!! [ 81.488982][ T4528] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 81.946986][ T4533] loop0: detected capacity change from 0 to 4096 [ 82.044235][ T4533] ntfs3: Unknown parameter 'hide_çízô¸¥áeFÎfV!iid0x0000000000000000' [ 82.456726][ T4530] loop2: detected capacity change from 0 to 32768 [ 82.669685][ T4530] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 82.847742][ T4530] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 83.142090][ T26] audit: type=1804 audit(1758368731.329:5): pid=4555 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.51" name="/newroot/9/file1/bus" dev="loop2" ino=17058 res=1 errno=0 [ 83.232065][ T26] audit: type=1800 audit(1758368731.369:6): pid=4555 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.51" name="bus" dev="loop2" ino=17058 res=0 errno=0 [ 83.391081][ T4187] ocfs2: Unmounting device (7,2) on (node local) [ 83.818734][ T4560] loop2: detected capacity change from 0 to 256 [ 83.867615][ T4560] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 83.915355][ T4560] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 83.962460][ T4560] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 84.062084][ T26] audit: type=1800 audit(1758368732.249:7): pid=4560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.60" name="file1" dev="loop2" ino=1048591 res=0 errno=0 [ 84.188169][ T4560] exFAT-fs (loop2): hint_cluster is invalid (17) [ 84.226194][ T4560] exFAT-fs (loop2): error, invalid access to FAT (entry 0xffffffff) [ 84.253474][ T4560] exFAT-fs (loop2): Filesystem has been set read-only [ 84.286059][ T26] audit: type=1800 audit(1758368732.479:8): pid=4561 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.60" name="file1" dev="loop2" ino=1048591 res=0 errno=0 [ 84.325039][ T4560] exFAT-fs (loop2): error, invalid access to FAT (entry 0xffffffff) [ 84.422514][ T4559] netlink: 40 bytes leftover after parsing attributes in process `syz.4.61'. [ 84.560208][ T4564] loop2: detected capacity change from 0 to 128 [ 84.636942][ T4564] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 84.711920][ T4564] ext4 filesystem being mounted at /11/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 86.035221][ T4581] netlink: 88 bytes leftover after parsing attributes in process `syz.3.65'. [ 86.044314][ T4581] netlink: 48 bytes leftover after parsing attributes in process `syz.3.65'. [ 86.152379][ T4583] loop1: detected capacity change from 0 to 4096 [ 86.172834][ T4585] loop2: detected capacity change from 0 to 2048 [ 86.195092][ T4583] ntfs3: Unknown parameter 'hide_çízô¸¥áeFÎfV!iid0x0000000000000000' [ 86.306718][ T4585] EXT4-fs (loop2): Ignoring removed bh option [ 86.419820][ T4585] EXT4-fs (loop2): mounted filesystem without journal. Opts: discard,bh,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 86.510835][ T26] audit: type=1800 audit(1758368734.699:9): pid=4592 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.67" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 86.728615][ T1108] cfg80211: failed to load regulatory.db [ 89.299986][ T4610] netlink: 16 bytes leftover after parsing attributes in process `syz.1.74'. [ 89.792825][ T4638] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 92.364217][ T2286] libceph: connect (1)[c::]:6789 error -101 [ 92.372100][ T2286] libceph: mon0 (1)[c::]:6789 connect error [ 92.531959][ T4702] ceph: No mds server is up or the cluster is laggy [ 92.575883][ T4689] netlink: 16 bytes leftover after parsing attributes in process `syz.2.94'. [ 92.651567][ T2286] libceph: connect (1)[c::]:6789 error -101 [ 92.667678][ T2286] libceph: mon0 (1)[c::]:6789 connect error [ 96.082416][ T4191] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 96.224507][ T4770] netlink: 16 bytes leftover after parsing attributes in process `syz.3.110'. [ 96.983522][ T4191] usb 3-1: Using ep0 maxpacket: 8 [ 97.103699][ T4191] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.298517][ T4191] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.338474][ T4191] usb 3-1: config 0 interface 0 has no altsetting 0 [ 97.382726][ T4191] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 97.424926][ T4191] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.544535][ T4191] usb 3-1: config 0 descriptor?? [ 98.792146][ T4822] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 98.808037][ T4191] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 98.839905][ T4191] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 98.862836][ T4191] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 98.891358][ T4191] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 98.946592][ T4191] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 98.990321][ T4191] mcp2221 0003:04D8:00DD.0001: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 100.275968][ T4243] usb 3-1: reset high-speed USB device number 2 using dummy_hcd [ 101.283359][ T4827] usb 3-1: USB disconnect, device number 2 [ 102.640564][ T4863] netlink: 8 bytes leftover after parsing attributes in process `syz.4.129'. [ 103.067982][ T4904] netlink: 4 bytes leftover after parsing attributes in process `syz.4.136'. [ 104.334894][ T4918] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 108.279938][ T4950] netlink: 88 bytes leftover after parsing attributes in process `syz.1.147'. [ 108.288934][ T4950] netlink: 48 bytes leftover after parsing attributes in process `syz.1.147'. [ 108.817850][ T4959] netlink: 'syz.1.150': attribute type 10 has an invalid length. [ 108.922197][ T4959] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.965369][ T4964] netlink: 8 bytes leftover after parsing attributes in process `syz.3.146'. [ 108.995977][ T4959] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 109.033592][ T4963] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.113509][ T4963] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.155356][ T4963] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.183543][ T4963] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.193073][ T4966] overlayfs: missing 'lowerdir' [ 109.257530][ T4963] bond0: (slave batadv0): Releasing backup interface [ 109.524832][ T4972] netlink: 'syz.3.154': attribute type 10 has an invalid length. [ 110.869972][ T4972] team0: Port device netdevsim0 added [ 111.230167][ T4959] syz.1.150 (4959) used greatest stack depth: 20704 bytes left [ 113.949057][ T5002] overlayfs: missing 'lowerdir' [ 114.156705][ T5006] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.166'. [ 117.729331][ T5044] overlayfs: missing 'lowerdir' [ 118.560549][ T5046] loop2: detected capacity change from 0 to 4096 [ 118.764257][ T5046] ntfs3: Unknown parameter 'hide_çízô¸¥áeFÎfV!iid0x0000000000000000' [ 121.122773][ T5070] netlink: 12 bytes leftover after parsing attributes in process `syz.3.182'. [ 124.549693][ T5096] overlayfs: missing 'lowerdir' [ 125.547588][ T5125] netlink: 12 bytes leftover after parsing attributes in process `syz.2.194'. [ 127.172989][ T26] audit: type=1800 audit(1758368775.359:10): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.201" name="bus" dev="ramfs" ino=34749 res=0 errno=0 [ 127.272946][ T5163] overlayfs: missing 'lowerdir' [ 127.291687][ T5166] input: syz0 as /devices/virtual/input/input5 [ 127.701623][ T5180] netlink: 12 bytes leftover after parsing attributes in process `syz.2.206'. [ 129.994996][ T5218] netlink: 2444 bytes leftover after parsing attributes in process `syz.1.220'. [ 132.499099][ T5243] netlink: 4 bytes leftover after parsing attributes in process `syz.1.225'. [ 132.786838][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.793425][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.339112][ T5275] netlink: 88 bytes leftover after parsing attributes in process `syz.3.232'. [ 133.348195][ T5275] netlink: 48 bytes leftover after parsing attributes in process `syz.3.232'. [ 133.445880][ T5276] syz.2.235 uses obsolete (PF_INET,SOCK_PACKET) [ 137.110948][ T5311] loop9: detected capacity change from 0 to 7 [ 137.208473][ T5311] Dev loop9: unable to read RDB block 7 [ 137.263326][ T5311] loop9: unable to read partition table [ 137.281868][ T5311] loop9: partition table beyond EOD, truncated [ 137.301012][ T5311] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 137.301012][ T5311] ) failed (rc=-5) [ 140.660118][ T5351] netlink: 88 bytes leftover after parsing attributes in process `syz.2.255'. [ 140.669438][ T5351] netlink: 48 bytes leftover after parsing attributes in process `syz.2.255'. [ 140.968773][ T5348] device syzkaller0 entered promiscuous mode [ 141.462135][ T5361] loop0: detected capacity change from 0 to 4096 [ 141.504369][ T5361] ntfs3: Unknown parameter 'hide_çízô¸¥áeFÎfV!iid0x0000000000000000' [ 142.613486][ T4191] Bluetooth: hci5: command 0x1003 tx timeout [ 142.621650][ T4190] Bluetooth: hci5: sending frame failed (-49) [ 142.640181][ T5368] netlink: 60 bytes leftover after parsing attributes in process `syz.4.264'. [ 142.678394][ T5368] process 'syz.4.264' launched '/dev/fd/8' with NULL argv: empty string added [ 144.714112][ T4301] Bluetooth: hci5: command 0x1001 tx timeout [ 144.728333][ T4190] Bluetooth: hci5: sending frame failed (-49) [ 144.927890][ T5391] overlayfs: missing 'lowerdir' [ 145.271082][ T5398] netlink: 68 bytes leftover after parsing attributes in process `syz.3.275'. [ 145.597874][ T5407] netlink: 'syz.2.279': attribute type 10 has an invalid length. [ 145.606951][ T5407] bond0: (slave wlan1): Opening slave failed [ 145.671581][ T26] audit: type=1326 audit(1758368793.859:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5400 comm="syz.3.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b95266c29 code=0x7ffc0000 [ 145.715172][ T26] audit: type=1326 audit(1758368793.899:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5400 comm="syz.3.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f2b95266c29 code=0x7ffc0000 [ 145.781234][ T5406] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 145.835451][ T26] audit: type=1326 audit(1758368793.899:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5400 comm="syz.3.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b95266c29 code=0x7ffc0000 [ 145.920733][ T26] audit: type=1326 audit(1758368793.899:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5400 comm="syz.3.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b95266c29 code=0x7ffc0000 [ 146.020241][ T26] audit: type=1326 audit(1758368793.899:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5400 comm="syz.3.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f2b95266c29 code=0x7ffc0000 [ 146.141858][ T26] audit: type=1326 audit(1758368793.899:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5400 comm="syz.3.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b95266c29 code=0x7ffc0000 [ 146.365562][ T26] audit: type=1326 audit(1758368793.909:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5400 comm="syz.3.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b95266c29 code=0x7ffc0000 [ 146.794023][ T4191] Bluetooth: hci5: command 0x1009 tx timeout [ 147.282089][ T26] audit: type=1326 audit(1758368793.939:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5400 comm="syz.3.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f2b95266c29 code=0x7ffc0000 [ 147.317156][ T26] audit: type=1326 audit(1758368793.939:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5400 comm="syz.3.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b95266c29 code=0x7ffc0000 [ 147.390821][ T26] audit: type=1326 audit(1758368793.939:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5400 comm="syz.3.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b95266c29 code=0x7ffc0000 [ 148.744414][ T5434] netlink: 88 bytes leftover after parsing attributes in process `syz.0.285'. [ 148.753548][ T5434] netlink: 48 bytes leftover after parsing attributes in process `syz.0.285'. [ 148.778880][ T5436] overlayfs: missing 'workdir' [ 151.471756][ T5467] overlayfs: missing 'workdir' [ 151.925243][ T5480] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 152.391762][ T5477] ================================================================== [ 152.400304][ T5477] BUG: KASAN: use-after-free in ax25_release+0x5ca/0x870 [ 152.407610][ T5477] Read of size 8 at addr ffff88802431d608 by task syz.3.303/5477 [ 152.415528][ T5477] [ 152.417894][ T5477] CPU: 0 PID: 5477 Comm: syz.3.303 Not tainted syzkaller #0 [ 152.425372][ T5477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 152.436713][ T5477] Call Trace: [ 152.440020][ T5477] [ 152.442980][ T5477] dump_stack_lvl+0x168/0x230 [ 152.447742][ T5477] ? show_regs_print_info+0x20/0x20 [ 152.452978][ T5477] ? _printk+0xcc/0x110 [ 152.457173][ T5477] ? ax25_release+0x5ca/0x870 [ 152.461886][ T5477] ? load_image+0x3b0/0x3b0 [ 152.466430][ T5477] print_address_description+0x60/0x2d0 [ 152.472035][ T5477] ? ax25_release+0x5ca/0x870 [ 152.476767][ T5477] kasan_report+0xdf/0x130 [ 152.481240][ T5477] ? ax25_release+0x5ca/0x870 [ 152.485950][ T5477] ax25_release+0x5ca/0x870 [ 152.490503][ T5477] sock_close+0xd5/0x240 [ 152.494974][ T5477] ? sock_mmap+0x90/0x90 [ 152.499278][ T5477] __fput+0x234/0x930 [ 152.503394][ T5477] task_work_run+0x125/0x1a0 [ 152.508508][ T5477] exit_to_user_mode_loop+0x10f/0x130 [ 152.513925][ T5477] exit_to_user_mode_prepare+0xee/0x180 [ 152.519528][ T5477] syscall_exit_to_user_mode+0x16/0x40 [ 152.525027][ T5477] do_syscall_64+0x58/0xa0 [ 152.529480][ T5477] ? clear_bhb_loop+0x30/0x80 [ 152.534189][ T5477] ? clear_bhb_loop+0x30/0x80 [ 152.538901][ T5477] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 152.544837][ T5477] RIP: 0033:0x7f2b95266c29 [ 152.549285][ T5477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.568946][ T5477] RSP: 002b:00007fff7fafc608 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 152.577490][ T5477] RAX: 0000000000000000 RBX: 0000000000025000 RCX: 00007f2b95266c29 [ 152.585500][ T5477] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 152.593504][ T5477] RBP: 00007f2b954afda0 R08: 0000000000000001 R09: 0000001e7fafc8ff [ 152.601600][ T5477] R10: 0000001b31720000 R11: 0000000000000246 R12: 00007f2b954adfac [ 152.609610][ T5477] R13: 00007f2b954adfa0 R14: ffffffffffffffff R15: 00007fff7fafc720 [ 152.617640][ T5477] [ 152.620684][ T5477] [ 152.623026][ T5477] Allocated by task 5480: [ 152.627369][ T5477] __kasan_kmalloc+0xb5/0xf0 [ 152.632075][ T5477] ax25_dev_device_up+0x50/0x580 [ 152.637049][ T5477] ax25_device_event+0x483/0x4f0 [ 152.642060][ T5477] raw_notifier_call_chain+0xcb/0x160 [ 152.647480][ T5477] __dev_notify_flags+0x178/0x2d0 [ 152.652638][ T5477] dev_change_flags+0xe3/0x1a0 [ 152.657432][ T5477] dev_ifsioc+0x147/0xe70 [ 152.661787][ T5477] dev_ioctl+0x55f/0xe50 [ 152.666052][ T5477] sock_do_ioctl+0x222/0x2f0 [ 152.670676][ T5477] sock_ioctl+0x4ed/0x6e0 [ 152.675037][ T5477] __se_sys_ioctl+0xfa/0x170 [ 152.679673][ T5477] do_syscall_64+0x4c/0xa0 [ 152.684206][ T5477] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 152.690133][ T5477] [ 152.692480][ T5477] Freed by task 5478: [ 152.696472][ T5477] kasan_set_track+0x4b/0x70 [ 152.701099][ T5477] kasan_set_free_info+0x1f/0x40 [ 152.706062][ T5477] ____kasan_slab_free+0xd5/0x110 [ 152.711139][ T5477] slab_free_freelist_hook+0xea/0x170 [ 152.716543][ T5477] kfree+0xef/0x2a0 [ 152.720636][ T5477] ax25_device_event+0x4b4/0x4f0 [ 152.725868][ T5477] raw_notifier_call_chain+0xcb/0x160 [ 152.731365][ T5477] __dev_notify_flags+0x178/0x2d0 [ 152.736639][ T5477] dev_change_flags+0xe3/0x1a0 [ 152.741445][ T5477] dev_ifsioc+0x147/0xe70 [ 152.745808][ T5477] dev_ioctl+0x55f/0xe50 [ 152.750084][ T5477] sock_do_ioctl+0x222/0x2f0 [ 152.754712][ T5477] sock_ioctl+0x4ed/0x6e0 [ 152.759077][ T5477] __se_sys_ioctl+0xfa/0x170 [ 152.763704][ T5477] do_syscall_64+0x4c/0xa0 [ 152.768152][ T5477] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 152.774156][ T5477] [ 152.776499][ T5477] Last potentially related work creation: [ 152.782226][ T5477] kasan_save_stack+0x35/0x60 [ 152.786933][ T5477] kasan_record_aux_stack+0xb8/0x100 [ 152.792269][ T5477] insert_work+0x54/0x3d0 [ 152.796633][ T5477] __queue_work+0x9c5/0xd50 [ 152.801173][ T5477] queue_work_on+0x11d/0x1d0 [ 152.805798][ T5477] netdevice_event+0x803/0x900 [ 152.810594][ T5477] raw_notifier_call_chain+0xcb/0x160 [ 152.816012][ T5477] __dev_notify_flags+0x178/0x2d0 [ 152.821116][ T5477] dev_change_flags+0xe3/0x1a0 [ 152.826175][ T5477] do_setlink+0xc01/0x3980 [ 152.830644][ T5477] rtnl_newlink+0x1419/0x17d0 [ 152.835396][ T5477] rtnetlink_rcv_msg+0x9b9/0xe60 [ 152.840453][ T5477] netlink_rcv_skb+0x1e0/0x430 [ 152.845594][ T5477] netlink_unicast+0x774/0x920 [ 152.850391][ T5477] netlink_sendmsg+0x8ab/0xbc0 [ 152.855231][ T5477] __sys_sendto+0x423/0x580 [ 152.859764][ T5477] __x64_sys_sendto+0xda/0xf0 [ 152.864502][ T5477] do_syscall_64+0x4c/0xa0 [ 152.868981][ T5477] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 152.874998][ T5477] [ 152.877350][ T5477] The buggy address belongs to the object at ffff88802431d600 [ 152.877350][ T5477] which belongs to the cache kmalloc-192 of size 192 [ 152.892253][ T5477] The buggy address is located 8 bytes inside of [ 152.892253][ T5477] 192-byte region [ffff88802431d600, ffff88802431d6c0) [ 152.905397][ T5477] The buggy address belongs to the page: [ 152.911075][ T5477] page:ffffea000090c740 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2431d [ 152.921484][ T5477] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 152.929080][ T5477] raw: 00fff00000000200 ffffea00008e0d80 0000000400000004 ffff888016841a00 [ 152.937689][ T5477] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 152.946285][ T5477] page dumped because: kasan: bad access detected [ 152.952813][ T5477] page_owner tracks the page as allocated [ 152.958560][ T5477] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12c00(GFP_NOIO|__GFP_NOWARN|__GFP_NORETRY), pid 1, ts 11441798659, free_ts 11344836889 [ 152.974624][ T5477] get_page_from_freelist+0x1b77/0x1c60 [ 152.980192][ T5477] __alloc_pages+0x1e1/0x470 [ 152.984807][ T5477] alloc_page_interleave+0x24/0x1e0 [ 152.990034][ T5477] new_slab+0xc0/0x4b0 [ 152.994119][ T5477] ___slab_alloc+0x81e/0xdf0 [ 152.998763][ T5477] __kmalloc+0x1cd/0x330 [ 153.003022][ T5477] usb_alloc_urb+0x3f/0x140 [ 153.007640][ T5477] usb_control_msg+0x115/0x3e0 [ 153.012466][ T5477] usb_get_string+0xa1/0x3c0 [ 153.017082][ T5477] usb_string_sub+0x76/0x420 [ 153.021714][ T5477] usb_string+0x38b/0x760 [ 153.026065][ T5477] usb_cache_string+0x7b/0xf0 [ 153.030767][ T5477] usb_new_device+0x352/0x1640 [ 153.035554][ T5477] register_root_hub+0x278/0x580 [ 153.040513][ T5477] usb_add_hcd+0xa88/0xef0 [ 153.044947][ T5477] vhci_hcd_probe+0x140/0x370 [ 153.049645][ T5477] page last free stack trace: [ 153.054330][ T5477] free_unref_page_prepare+0x637/0x6c0 [ 153.059817][ T5477] free_unref_page+0x94/0x280 [ 153.064519][ T5477] __vunmap+0x8ab/0xa40 [ 153.068868][ T5477] free_work+0x56/0x80 [ 153.072955][ T5477] process_one_work+0x863/0x1000 [ 153.077959][ T5477] worker_thread+0xaa8/0x12a0 [ 153.082771][ T5477] kthread+0x436/0x520 [ 153.087061][ T5477] ret_from_fork+0x1f/0x30 [ 153.091509][ T5477] [ 153.093849][ T5477] Memory state around the buggy address: [ 153.099495][ T5477] ffff88802431d500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 153.107665][ T5477] ffff88802431d580: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 153.115756][ T5477] >ffff88802431d600: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 153.124065][ T5477] ^ [ 153.128424][ T5477] ffff88802431d680: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 153.136514][ T5477] ffff88802431d700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 153.144594][ T5477] ================================================================== [ 153.152845][ T5477] Disabling lock debugging due to kernel taint [ 153.162965][ T5477] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 153.170206][ T5477] CPU: 1 PID: 5477 Comm: syz.3.303 Tainted: G B syzkaller #0 [ 153.178885][ T5477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 153.188963][ T5477] Call Trace: [ 153.192260][ T5477] [ 153.195591][ T5477] dump_stack_lvl+0x168/0x230 [ 153.200311][ T5477] ? show_regs_print_info+0x20/0x20 [ 153.205542][ T5477] ? load_image+0x3b0/0x3b0 [ 153.210078][ T5477] panic+0x2c9/0x7f0 [ 153.213991][ T5477] ? bpf_jit_dump+0xd0/0xd0 [ 153.218576][ T5477] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 153.224510][ T5477] ? _raw_spin_unlock+0x40/0x40 [ 153.229370][ T5477] ? print_memory_metadata+0x314/0x400 [ 153.234837][ T5477] ? ax25_release+0x5ca/0x870 [ 153.239625][ T5477] check_panic_on_warn+0x80/0xa0 [ 153.244731][ T5477] ? ax25_release+0x5ca/0x870 [ 153.249423][ T5477] end_report+0x6d/0xf0 [ 153.253598][ T5477] kasan_report+0x102/0x130 [ 153.258116][ T5477] ? ax25_release+0x5ca/0x870 [ 153.262798][ T5477] ax25_release+0x5ca/0x870 [ 153.267318][ T5477] sock_close+0xd5/0x240 [ 153.271589][ T5477] ? sock_mmap+0x90/0x90 [ 153.275910][ T5477] __fput+0x234/0x930 [ 153.279909][ T5477] task_work_run+0x125/0x1a0 [ 153.284681][ T5477] exit_to_user_mode_loop+0x10f/0x130 [ 153.290090][ T5477] exit_to_user_mode_prepare+0xee/0x180 [ 153.295773][ T5477] syscall_exit_to_user_mode+0x16/0x40 [ 153.301246][ T5477] do_syscall_64+0x58/0xa0 [ 153.305670][ T5477] ? clear_bhb_loop+0x30/0x80 [ 153.310350][ T5477] ? clear_bhb_loop+0x30/0x80 [ 153.315058][ T5477] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 153.320964][ T5477] RIP: 0033:0x7f2b95266c29 [ 153.325534][ T5477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.345251][ T5477] RSP: 002b:00007fff7fafc608 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 153.353694][ T5477] RAX: 0000000000000000 RBX: 0000000000025000 RCX: 00007f2b95266c29 [ 153.361781][ T5477] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 153.369928][ T5477] RBP: 00007f2b954afda0 R08: 0000000000000001 R09: 0000001e7fafc8ff [ 153.377911][ T5477] R10: 0000001b31720000 R11: 0000000000000246 R12: 00007f2b954adfac [ 153.385920][ T5477] R13: 00007f2b954adfa0 R14: ffffffffffffffff R15: 00007fff7fafc720 [ 153.393914][ T5477] [ 153.397057][ T5477] Kernel Offset: disabled [ 153.401410][ T5477] Rebooting in 86400 seconds..