last executing test programs: 11.395988977s ago: executing program 2 (id=17): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x7e, &(0x7f0000000800)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x8, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@empty}, {@broadcast, 0x1}, {@broadcast}, {@private}, {@multicast1}, {@multicast1}, {@dev={0xac, 0x14, 0x14, 0x1}}]}, @lsrr={0x83, 0x3}]}}}}}}}, 0x0) 11.212137404s ago: executing program 2 (id=19): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x8c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000440)='mm_page_alloc\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 11.002877473s ago: executing program 2 (id=21): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0) listen(r0, 0xcd43) 10.803789491s ago: executing program 2 (id=23): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000040000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c30000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xffd, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) acct(0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000a40)={[{@noquota}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@data_err_ignore}, {@noauto_da_alloc}, {@delalloc}, {@resuid}, {@oldalloc}, {@jqfmt_vfsv1}]}, 0xfc, 0x550, &(0x7f0000000340)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r3, &(0x7f00000006c0)=[{&(0x7f0000000140)="db", 0x11}], 0x1, 0x100000, 0x0, 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) pwritev2(r4, &(0x7f00000001c0)=[{&(0x7f00000008c0)="dc", 0x1}], 0x1, 0x7fff, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305839, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3fffffff404}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r6, 0x6628) open(&(0x7f0000000140)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x0) r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r8, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, "ef359f413bb90152f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea00", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00"}) sendfile(r4, r6, 0x0, 0x100001) 10.076717637s ago: executing program 2 (id=39): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xe, 0x4, 0x8, 0x406, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) timer_create(0x0, 0x0, &(0x7f00009b1ffc)=0x0) timer_delete(r2) 8.727783651s ago: executing program 3 (id=56): r0 = gettid() r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001000000000000", @ANYBLOB='\x00', @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='sys_enter\x00', r2}, 0x18) r3 = getpid() process_vm_readv(r3, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x12) poll(0x0, 0x0, 0xffffffffffbffff8) dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$setown(0xffffffffffffffff, 0x8, r0) tkill(r0, 0x13) 8.230347677s ago: executing program 2 (id=63): ioperm(0x0, 0x82, 0x1f) setrlimit(0x40000000000008, 0x0) 7.816167224s ago: executing program 0 (id=69): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x80801c, &(0x7f0000000f40), 0x1, 0x503, &(0x7f0000000880)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46100) fcntl$F_SET_RW_HINT(r0, 0x40c, 0x0) r1 = socket(0x1e, 0x1, 0x0) write$binfmt_misc(r1, 0x0, 0x0) write$cgroup_type(r0, &(0x7f0000000200), 0xf642e7e) 7.815599044s ago: executing program 1 (id=70): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) 7.660808059s ago: executing program 1 (id=72): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r1}, 0x18) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3, 0x0, 0x400000000}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0200000004000000080000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000080021850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x2, 0x7, 0xc, 0x7, 0x2, 0x0, 0x70bd27, 0x25dfdbff}, 0x10}}, 0x2400c010) 7.528067101s ago: executing program 4 (id=73): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEP_LINK_UP(r5, 0x0, 0x810) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 6.742284343s ago: executing program 0 (id=74): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 6.412809193s ago: executing program 4 (id=75): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0xffffffff7fffffff) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x18) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, 0x0, 0x0) write$binfmt_script(r5, 0x0, 0x0) 6.199990692s ago: executing program 0 (id=76): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb01001800000000000000b0000000b0000000050000000500000004000006040000000e00000080000000020000000300000001000000000000000e0000008900000012000000000000020200000001000000030000040600000010000000010000000a0000000600000000000000562100000e000000020000000000000010000000020000850a000000"], 0x0, 0xcd, 0x0, 0x0, 0x2, 0x10000, @value}, 0x28) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x5, 0x1d026dd5, 0xa, 0x4122, r0, 0x8000, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x3, 0x4, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8, @ANYBLOB="0000000000000000b7080000000000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) openat$snapshot(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000080)=0x5, 0x4) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000200000000be4739d8047257b0ad723b9af7dd38a52434906d33ca0c571af08e9b1759723a988c364a5c392b38bdd47701b1388c1367605131d09c58633abff03171350cfec0a27bd636"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r3}, 0x10) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 5.404318805s ago: executing program 4 (id=77): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) r1 = getpid() fcntl$lock(r0, 0x26, &(0x7f0000000680)={0x1, 0x2, 0x8, 0x0, r1}) 5.384630257s ago: executing program 3 (id=78): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x8000f28, 0x0) splice(r2, 0x0, r0, 0x0, 0x7f, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) 5.272116307s ago: executing program 4 (id=79): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) 5.191410975s ago: executing program 1 (id=80): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x1000002, &(0x7f0000000500)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c646973636172640061727365743d63703835322c757466383d202c6e6f6e756d7461696c3d302c6e6f6e75617461696c3d302c7574663c3d302c696f6368619615f9a9d8bc34fd234143727365743d69736f383835392d322c756e695f786c6174653d312c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c757466383d312c756e695f786c6174653d302c756e695f786c6174653d302c73686f72746e616d653d6d697865642c726f6469722c756e695f786c"], 0x1, 0x368, &(0x7f0000000180)="$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") munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000100)=""/155, 0x9b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 4.334857953s ago: executing program 4 (id=81): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r2) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) ioctl$EVIOCGBITSW(r2, 0x40095505, 0x0) 4.012048703s ago: executing program 3 (id=82): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x4}, 0x18) r1 = socket$inet(0x2, 0x3, 0x4) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) 3.842988898s ago: executing program 3 (id=83): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c250000000000202020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 3.704051651s ago: executing program 0 (id=84): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) read$nci(0xffffffffffffffff, 0x0, 0x0) 3.595972621s ago: executing program 1 (id=85): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffde3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x68, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000600)={0x0, 0x8, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}}, 0x0) 1.173127243s ago: executing program 3 (id=86): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'veth1_to_batadv\x00', 0x0}) accept4$tipc(r0, &(0x7f0000000180)=@id, &(0x7f00000001c0)=0x10, 0xeff03edaba642e90) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000700)=ANY=[@ANYBLOB="010000000000000002004e20e00000010000000000000000000000000000000000000000000000000000002894501c9458df1a530f14af92babd02000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000010000000300000002004e217f00000100000000000000000000000000bf000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e20e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e210a01010100"/514], 0x210) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000980)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a40)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000000)={0x18, 0x0, {0x2, @multicast, 'veth0_to_bridge\x00'}}, 0x1e) close(r6) sendmsg$nl_route(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x34}, 0x1, 0x0, 0x0, 0xc0d0}, 0x0) unlinkat(r1, 0x0, 0x0) write$binfmt_misc(r1, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={0x0, r1, 0x0, 0x7fffffff}, 0x18) capset(0x0, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x1}) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) r9 = pidfd_getfd(r8, r8, 0x0) linkat(r9, &(0x7f0000000200)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0) setns(r9, 0x24000080) setsockopt$inet6_mreq(r0, 0x29, 0x9, &(0x7f0000000040)={@private0, r3}, 0x14) 1.171934743s ago: executing program 0 (id=87): socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r4, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r2], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r5, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x11, 0x16, r4, 0x1, 0x7}, 0x14) 1.064246943s ago: executing program 1 (id=88): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000006000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) lseek(r0, 0xfffffffffffffff9, 0x3) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0xf3a, 0x0) write$binfmt_script(r3, 0x0, 0xfffffe48) syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00') mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) 600.009786ms ago: executing program 4 (id=89): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r1}, 0x18) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3, 0x0, 0x400000000}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0200000004000000080000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000080021850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x2, 0x7, 0xc, 0x7, 0x2, 0x0, 0x70bd27, 0x25dfdbff}, 0x10}}, 0x2400c010) 176.388724ms ago: executing program 1 (id=90): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) 79.280553ms ago: executing program 3 (id=91): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='cpuset\x00') r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) pread64(r0, &(0x7f0000000080)=""/237, 0xed, 0x0) 0s ago: executing program 0 (id=92): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000440)='kmem_cache_free\x00', r1}, 0x10) set_robust_list(&(0x7f0000000600)={0x0, 0x10}, 0x18) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.199' (ED25519) to the list of known hosts. [ 49.882845][ T3554] cgroup: Unknown subsys name 'net' [ 50.029979][ T3554] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 51.516663][ T3554] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 52.992024][ T3568] chnl_net:caif_netlink_parms(): no params data found [ 53.020135][ T3569] chnl_net:caif_netlink_parms(): no params data found [ 53.097775][ T3578] chnl_net:caif_netlink_parms(): no params data found [ 53.130838][ T3575] chnl_net:caif_netlink_parms(): no params data found [ 53.201118][ T3579] chnl_net:caif_netlink_parms(): no params data found [ 53.229737][ T3568] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.237035][ T3568] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.246427][ T3568] device bridge_slave_0 entered promiscuous mode [ 53.262487][ T3569] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.269659][ T3569] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.278022][ T3569] device bridge_slave_0 entered promiscuous mode [ 53.292551][ T3568] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.300118][ T3568] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.308710][ T3568] device bridge_slave_1 entered promiscuous mode [ 53.336071][ T3569] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.343230][ T3569] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.351773][ T3569] device bridge_slave_1 entered promiscuous mode [ 53.411943][ T3568] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.421448][ T3578] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.428678][ T3578] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.438026][ T3578] device bridge_slave_0 entered promiscuous mode [ 53.469587][ T3568] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.479159][ T3578] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.486498][ T3578] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.494977][ T3578] device bridge_slave_1 entered promiscuous mode [ 53.504267][ T3569] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.513642][ T3575] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.520728][ T3575] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.528912][ T3575] device bridge_slave_0 entered promiscuous mode [ 53.563791][ T3569] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.573010][ T3575] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.580365][ T3575] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.588590][ T3575] device bridge_slave_1 entered promiscuous mode [ 53.645185][ T3568] team0: Port device team_slave_0 added [ 53.651347][ T3579] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.659868][ T3579] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.669064][ T3579] device bridge_slave_0 entered promiscuous mode [ 53.678435][ T3578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.705978][ T3568] team0: Port device team_slave_1 added [ 53.714233][ T3575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.723501][ T3579] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.730568][ T3579] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.739207][ T3579] device bridge_slave_1 entered promiscuous mode [ 53.748638][ T3578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.768294][ T3569] team0: Port device team_slave_0 added [ 53.783192][ T3575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.809507][ T3569] team0: Port device team_slave_1 added [ 53.833269][ T3578] team0: Port device team_slave_0 added [ 53.855937][ T3568] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.863131][ T3568] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.889499][ T3568] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.911174][ T3578] team0: Port device team_slave_1 added [ 53.919194][ T3579] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.931016][ T3579] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.949987][ T3568] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.957213][ T3568] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.983550][ T3568] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.002929][ T3575] team0: Port device team_slave_0 added [ 54.026967][ T3569] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.034209][ T3569] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.060424][ T3569] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.084345][ T3575] team0: Port device team_slave_1 added [ 54.106051][ T3569] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.113084][ T3569] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.139227][ T3569] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.172357][ T3579] team0: Port device team_slave_0 added [ 54.180465][ T3579] team0: Port device team_slave_1 added [ 54.190209][ T3578] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.197483][ T3578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.223970][ T3578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.236822][ T3578] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.243902][ T3578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.270077][ T3578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.316712][ T3579] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.323822][ T3579] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.350058][ T3579] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.361861][ T3575] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.368914][ T3575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.395172][ T3575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.410133][ T3568] device hsr_slave_0 entered promiscuous mode [ 54.417168][ T3568] device hsr_slave_1 entered promiscuous mode [ 54.444540][ T3579] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.451553][ T3579] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.477741][ T3579] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.489709][ T3575] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.496909][ T3575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.523726][ T3575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.544925][ T3569] device hsr_slave_0 entered promiscuous mode [ 54.551796][ T3569] device hsr_slave_1 entered promiscuous mode [ 54.559283][ T3569] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.567288][ T3569] Cannot create hsr debugfs directory [ 54.654642][ T3578] device hsr_slave_0 entered promiscuous mode [ 54.661529][ T3578] device hsr_slave_1 entered promiscuous mode [ 54.665443][ T3559] Bluetooth: hci3: command 0x0409 tx timeout [ 54.667799][ T1074] Bluetooth: hci2: command 0x0409 tx timeout [ 54.674725][ T3559] Bluetooth: hci1: command 0x0409 tx timeout [ 54.686763][ T3559] Bluetooth: hci0: command 0x0409 tx timeout [ 54.690338][ T3578] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.700668][ T3578] Cannot create hsr debugfs directory [ 54.710151][ T3575] device hsr_slave_0 entered promiscuous mode [ 54.717473][ T3575] device hsr_slave_1 entered promiscuous mode [ 54.724321][ T3575] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.732000][ T3575] Cannot create hsr debugfs directory [ 54.746869][ T3559] Bluetooth: hci4: command 0x0409 tx timeout [ 54.771955][ T3579] device hsr_slave_0 entered promiscuous mode [ 54.778894][ T3579] device hsr_slave_1 entered promiscuous mode [ 54.785680][ T3579] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.793513][ T3579] Cannot create hsr debugfs directory [ 55.140846][ T3568] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 55.159029][ T3568] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 55.169254][ T3568] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 55.186591][ T3568] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 55.242323][ T3575] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 55.252116][ T3575] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 55.264384][ T3575] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.281010][ T3575] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.361323][ T3578] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 55.371614][ T3578] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 55.399220][ T3578] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 55.409878][ T3578] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 55.463169][ T3568] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.511031][ T3579] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 55.521967][ T3579] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 55.532511][ T3579] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 55.544746][ T3579] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 55.566036][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.577186][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.606313][ T3568] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.636916][ T1102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.647974][ T1102] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.657987][ T1102] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.665273][ T1102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.673759][ T1102] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.692365][ T1102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.701711][ T1102] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.711127][ T1102] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.718267][ T1102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.740968][ T3575] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.761693][ T3569] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.772639][ T3569] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.789607][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.804654][ T3578] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.816616][ T3569] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.834931][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.842883][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.853383][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.866739][ T3569] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.880391][ T3575] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.901850][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.911939][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.921485][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.930308][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.940337][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.950921][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.962565][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.971867][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.979130][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.001822][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.011204][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.021265][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.032152][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.044208][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.056700][ T3578] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.083672][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.092690][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.102914][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.110186][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.119618][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.130050][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.138940][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.156634][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.168085][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.177235][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.184378][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.193003][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.202465][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.211741][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.220932][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.228047][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.263586][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.273009][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.283028][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.293211][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.302104][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.311325][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.328168][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.337251][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.366983][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.381663][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.392563][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.409140][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.418024][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.438169][ T3579] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.478788][ T3575] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.492122][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.514127][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.523583][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.532285][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.540977][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.549529][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.558335][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.567231][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.576773][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.588265][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.597215][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.612603][ T3578] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.632490][ T3579] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.653025][ T3569] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.678339][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.692813][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.701897][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.712324][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.721702][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.728973][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.753653][ T3610] Bluetooth: hci1: command 0x041b tx timeout [ 56.759366][ T23] Bluetooth: hci0: command 0x041b tx timeout [ 56.759722][ T3610] Bluetooth: hci2: command 0x041b tx timeout [ 56.768128][ T23] Bluetooth: hci3: command 0x041b tx timeout [ 56.775775][ T3568] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.794279][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.802440][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.813153][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.823201][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.830372][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.838595][ T3559] Bluetooth: hci4: command 0x041b tx timeout [ 56.847899][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.858169][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.867567][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.876219][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.889079][ T3569] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.910458][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.924924][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.983257][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.992943][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.002458][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.014041][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.022890][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.031906][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.039006][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.047287][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.056154][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.064971][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.072266][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.080223][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.089877][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.099277][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.138985][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.152203][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.162398][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.171996][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.180917][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.191292][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.200383][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.209286][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.218574][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.232571][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.244829][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.256125][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.264376][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.280992][ T3569] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 57.291932][ T3569] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.307474][ T3579] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.320957][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.330515][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.340384][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.348429][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.356342][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.366367][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.378036][ T3578] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.391731][ T3568] device veth0_vlan entered promiscuous mode [ 57.419491][ T3575] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.446477][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.461353][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.485661][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.505239][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.519359][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.582857][ T3568] device veth1_vlan entered promiscuous mode [ 57.638127][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.660102][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.676052][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.691434][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.711219][ T3575] device veth0_vlan entered promiscuous mode [ 57.722430][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.731888][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.772538][ T3579] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.794567][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.809207][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.818188][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.827605][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.835581][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.843167][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.854995][ T3569] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.869871][ T3575] device veth1_vlan entered promiscuous mode [ 57.920173][ T3575] device veth0_macvtap entered promiscuous mode [ 57.930382][ T1102] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.939078][ T1102] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.949765][ T1102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.958750][ T1102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.967913][ T1102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.976997][ T1102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.986804][ T1102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.995656][ T1102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.004541][ T1102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.013479][ T1102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.023808][ T3568] device veth0_macvtap entered promiscuous mode [ 58.036651][ T3575] device veth1_macvtap entered promiscuous mode [ 58.058257][ T1102] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.067273][ T1102] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.076697][ T1102] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.095216][ T1102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.105774][ T1102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.115226][ T1102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.123794][ T1102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.141004][ T3575] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.151030][ T3568] device veth1_macvtap entered promiscuous mode [ 58.163811][ T1102] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.171906][ T1102] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.181190][ T1102] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.190102][ T1102] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.199338][ T1102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.224915][ T3575] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.237308][ T3578] device veth0_vlan entered promiscuous mode [ 58.258864][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.269064][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.282139][ T3575] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.292057][ T3575] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.301247][ T3575] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.310807][ T3575] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.325428][ T3568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.336461][ T3568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.349004][ T3568] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.368548][ T3568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.380885][ T3568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.392573][ T3568] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.401084][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.409997][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.419061][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.430157][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.441136][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.450091][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.459131][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.467889][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.486851][ T3578] device veth1_vlan entered promiscuous mode [ 58.498860][ T3568] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.509497][ T3568] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.518616][ T3568] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.527810][ T3568] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.538498][ T3569] device veth0_vlan entered promiscuous mode [ 58.547238][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.558169][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.577366][ T3579] device veth0_vlan entered promiscuous mode [ 58.601169][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.609327][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.640253][ T3569] device veth1_vlan entered promiscuous mode [ 58.685106][ T3579] device veth1_vlan entered promiscuous mode [ 58.701283][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.713044][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.722074][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.730749][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.741840][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.767834][ T3578] device veth0_macvtap entered promiscuous mode [ 58.819745][ T3578] device veth1_macvtap entered promiscuous mode [ 58.824579][ T3559] Bluetooth: hci2: command 0x040f tx timeout [ 58.837565][ T3559] Bluetooth: hci3: command 0x040f tx timeout [ 58.843988][ T3559] Bluetooth: hci0: command 0x040f tx timeout [ 58.850366][ T3559] Bluetooth: hci1: command 0x040f tx timeout [ 58.860980][ T3569] device veth0_macvtap entered promiscuous mode [ 58.869472][ T1102] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.878056][ T1102] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.887704][ T1102] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.896636][ T1102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.905656][ T23] Bluetooth: hci4: command 0x040f tx timeout [ 58.912587][ T1102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.922118][ T1102] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.941567][ T3578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.958167][ T3578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.968506][ T3578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.979471][ T3578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.991897][ T3578] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.004216][ T3578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.015243][ T3578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.026117][ T3578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.036867][ T3578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.047919][ T3578] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.060221][ T3578] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.072283][ T3578] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.081163][ T3578] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.090363][ T3578] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.107482][ T1102] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.116520][ T1102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.126072][ T1102] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.135755][ T1102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.146812][ T1203] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.155353][ T1203] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.164130][ T3569] device veth1_macvtap entered promiscuous mode [ 59.171245][ T1102] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.181481][ T1102] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.197567][ T3579] device veth0_macvtap entered promiscuous mode [ 59.210120][ T3579] device veth1_macvtap entered promiscuous mode [ 59.229185][ T1102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.238804][ T1102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.248842][ T1102] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.265799][ T1203] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.274730][ T1203] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.282944][ T3569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.295339][ T3569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.307475][ T3569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.318473][ T3569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.329165][ T3569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.339910][ T3569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.352180][ T3569] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.369768][ T3569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.381998][ T3569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.393094][ T3569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.410796][ T3569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.421197][ T3569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.431803][ T3569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.444481][ T3569] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.452871][ T1102] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.461653][ T1102] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.470647][ T1102] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.480148][ T1102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.489377][ T1102] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.498621][ T1102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.532748][ T3569] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.545699][ T3569] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.554541][ T3569] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.563618][ T3569] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.589029][ T3579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.599766][ T3579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.610151][ T3579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.621119][ T3579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.632614][ T3579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.645645][ T3579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.655615][ T3579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.666450][ T3579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.678526][ T3579] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.696230][ T1203] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.707131][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.722117][ T1203] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.725735][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.740345][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.742757][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.758322][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.769802][ T3579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.780889][ T3579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.793067][ T3579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.804026][ T3579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.814294][ T3579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.824880][ T3579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.834842][ T3579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.845391][ T3579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.856495][ T3579] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.881086][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.898046][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.908093][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.943976][ T3579] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.954060][ T3579] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.962804][ T3579] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.986257][ T3579] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.024037][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.039321][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.061537][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.319336][ T3647] device syzkaller0 entered promiscuous mode [ 60.359913][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.369066][ T1102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.377156][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.388446][ T1102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.392330][ T1203] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.424453][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.441311][ T1203] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.535423][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.548170][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.699866][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.743350][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.758744][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.826346][ T3657] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 60.871274][ T3623] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.871335][ T3623] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.873161][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.888501][ T26] audit: type=1326 audit(1727916936.252:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3656 comm="syz.0.1" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5b93b82ff9 code=0x0 [ 60.904336][ T3642] Bluetooth: hci1: command 0x0419 tx timeout [ 60.905074][ T3642] Bluetooth: hci0: command 0x0419 tx timeout [ 60.905154][ T3642] Bluetooth: hci3: command 0x0419 tx timeout [ 60.905221][ T3642] Bluetooth: hci2: command 0x0419 tx timeout [ 60.990292][ T21] Bluetooth: hci4: command 0x0419 tx timeout [ 61.407449][ T3672] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 61.474680][ T26] audit: type=1326 audit(1727916936.842:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3676 comm="syz.3.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1617e83ff9 code=0x7ffc0000 [ 61.498425][ T3675] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 3976 [ 61.529224][ T3672] loop0: detected capacity change from 0 to 128 [ 61.590938][ T26] audit: type=1326 audit(1727916936.872:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3676 comm="syz.3.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1617e83ff9 code=0x7ffc0000 [ 61.652478][ T26] audit: type=1326 audit(1727916936.872:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3676 comm="syz.3.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1617e83ff9 code=0x7ffc0000 [ 61.695571][ T26] audit: type=1326 audit(1727916936.872:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3676 comm="syz.3.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1617e83ff9 code=0x7ffc0000 [ 61.852344][ T26] audit: type=1326 audit(1727916936.872:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3676 comm="syz.3.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1617e83ff9 code=0x7ffc0000 [ 61.956608][ T26] audit: type=1326 audit(1727916936.892:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3676 comm="syz.3.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1617e83ff9 code=0x7ffc0000 [ 62.074126][ T26] audit: type=1326 audit(1727916936.892:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3676 comm="syz.3.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1617e83ff9 code=0x7ffc0000 [ 62.173421][ T26] audit: type=1326 audit(1727916936.892:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3676 comm="syz.3.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1617e83ff9 code=0x7ffc0000 [ 62.309855][ T26] audit: type=1326 audit(1727916936.892:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3676 comm="syz.3.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1617e83ff9 code=0x7ffc0000 [ 62.321370][ T3697] capability: warning: `syz.0.20' uses deprecated v2 capabilities in a way that may be insecure [ 62.576221][ T3703] loop2: detected capacity change from 0 to 1024 [ 62.647906][ T3703] EXT4-fs (loop2): Ignoring removed oldalloc option [ 62.755237][ T3703] EXT4-fs (loop2): mounted filesystem without journal. Opts: noquota,noauto_da_alloc,jqfmt=vfsold,data_err=ignore,noauto_da_alloc,delalloc,resuid=0x0000000000000000,oldalloc,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 62.911029][ T3725] loop4: detected capacity change from 0 to 164 [ 62.913792][ T3703] loop_set_status: loop2 () has still dirty pages (nrpages=2) [ 63.194741][ T3738] syz.3.36 uses obsolete (PF_INET,SOCK_PACKET) [ 63.215281][ T3579] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /6/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 63.322314][ T3579] EXT4-fs error (device loop2): ext4_empty_dir:3143: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 63.389951][ T3579] EXT4-fs warning (device loop2): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 63.426337][ T3579] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /6/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 63.500836][ T3749] netlink: 24 bytes leftover after parsing attributes in process `syz.3.44'. [ 63.539135][ T3579] EXT4-fs error (device loop2): ext4_empty_dir:3143: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 63.626026][ T3579] EXT4-fs warning (device loop2): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 63.646268][ T3751] EXT4-fs (sda1): resizing filesystem from 262144 to 2 blocks [ 63.693461][ T3751] EXT4-fs warning (device sda1): ext4_resize_fs:2004: can't shrink FS - resize aborted [ 63.695891][ T3579] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /6/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 63.787197][ T3579] EXT4-fs error (device loop2): ext4_empty_dir:3143: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 63.834791][ T3579] EXT4-fs warning (device loop2): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 63.856300][ T3579] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /6/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 63.881751][ T3579] EXT4-fs error (device loop2): ext4_empty_dir:3143: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 63.906221][ T3579] EXT4-fs warning (device loop2): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 63.919355][ T3579] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /6/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 63.956196][ T3579] EXT4-fs error (device loop2): ext4_empty_dir:3143: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 63.992182][ T3579] EXT4-fs warning (device loop2): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 64.017864][ T3579] EXT4-fs warning (device loop2): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 64.039106][ T3579] EXT4-fs warning (device loop2): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 64.073394][ T3579] EXT4-fs warning (device loop2): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 64.100724][ T3579] EXT4-fs warning (device loop2): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 64.115236][ T3766] loop7: detected capacity change from 0 to 7 [ 64.130696][ T3766] Dev loop7: unable to read RDB block 7 [ 64.137185][ T3766] loop7: unable to read partition table [ 64.140119][ T3579] EXT4-fs warning (device loop2): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 64.144399][ T3766] loop7: partition table beyond EOD, truncated [ 64.161076][ T3766] loop_reread_partitions: partition scan of loop7 (被xڬdƤݡ [ 64.161076][ T3766] ) failed (rc=-5) [ 64.305999][ T3778] loop1: detected capacity change from 0 to 512 [ 64.359346][ T3778] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 64.380813][ T3778] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 64.420415][ T3778] EXT4-fs (loop1): 1 truncate cleaned up [ 64.428709][ T3778] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 64.842013][ T3797] loop1: detected capacity change from 0 to 512 [ 64.901540][ T3797] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 64.936569][ T3797] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038 (0x7fffffff) [ 64.999359][ T9] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.166761][ T9] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.289288][ T3808] loop4: detected capacity change from 0 to 512 [ 65.326038][ T9] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.427424][ T9] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.460348][ T3808] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 65.501699][ T3808] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038 (0x7fffffff) [ 65.546820][ T3818] loop0: detected capacity change from 0 to 512 [ 65.683078][ T3818] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 65.775275][ T3818] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038 (0x7fffffff) [ 67.105592][ T3856] hub 1-0:1.0: USB hub found [ 67.113101][ T3856] hub 1-0:1.0: 1 port detected [ 67.858617][ T3612] Bluetooth: hci4: command 0x0409 tx timeout [ 68.036291][ T3811] chnl_net:caif_netlink_parms(): no params data found [ 68.686421][ T3927] loop1: detected capacity change from 0 to 256 [ 69.064385][ T3927] FAT-fs (loop1): Directory bread(block 64) failed [ 69.071361][ T3927] FAT-fs (loop1): Directory bread(block 65) failed [ 69.086854][ T3927] FAT-fs (loop1): Directory bread(block 66) failed [ 69.113634][ T3927] FAT-fs (loop1): Directory bread(block 67) failed [ 69.144092][ T3927] FAT-fs (loop1): Directory bread(block 68) failed [ 69.150675][ T3927] FAT-fs (loop1): Directory bread(block 69) failed [ 69.174042][ T3927] FAT-fs (loop1): Directory bread(block 70) failed [ 69.264127][ T3927] FAT-fs (loop1): Directory bread(block 71) failed [ 69.270847][ T3927] FAT-fs (loop1): Directory bread(block 72) failed [ 69.277482][ T3927] FAT-fs (loop1): Directory bread(block 73) failed [ 69.435044][ T3811] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.487127][ T3811] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.510792][ T3811] device bridge_slave_0 entered promiscuous mode [ 69.538603][ T3811] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.577236][ T3811] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.653690][ T3811] device bridge_slave_1 entered promiscuous mode [ 70.762300][ T3944] sched: RT throttling activated [ 70.763433][ T3608] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 70.865366][ T3613] Bluetooth: hci4: command 0x041b tx timeout [ 71.392676][ T1389] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.399502][ T1389] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.062109][ T9] device hsr_slave_0 left promiscuous mode [ 72.105829][ T9] device hsr_slave_1 left promiscuous mode [ 72.114803][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.122288][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 72.185237][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 72.202930][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 72.244007][ T9] device bridge_slave_1 left promiscuous mode [ 72.260439][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.307845][ T9] device bridge_slave_0 left promiscuous mode [ 72.316839][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.350711][ T9] device veth1_macvtap left promiscuous mode [ 72.359306][ T9] device veth0_macvtap left promiscuous mode [ 72.366202][ T9] device veth1_vlan left promiscuous mode [ 72.372520][ T9] device veth0_vlan left promiscuous mode [ 72.623549][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!! [ 72.632626][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!! [ 72.641647][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 72.650705][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 72.665534][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 72.674540][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 72.694171][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 72.813212][ T9] team0 (unregistering): Port device team_slave_1 removed [ 72.841235][ T9] team0 (unregistering): Port device team_slave_0 removed [ 72.871542][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 72.892325][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 72.904661][ T3642] Bluetooth: hci4: command 0x040f tx timeout [ 73.045613][ T9] bond0 (unregistering): Released all slaves [ 73.146365][ T3811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.160888][ T3811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.281602][ T26] kauditd_printk_skb: 48 callbacks suppressed [ 73.281619][ T26] audit: type=1326 audit(1727916948.642:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3995 comm="syz.0.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b93b82ff9 code=0x7ffc0000 [ 73.337863][ T3998] ------------[ cut here ]------------ [ 73.343805][ T3998] WARNING: CPU: 1 PID: 3998 at kernel/cgroup/cgroup.c:1424 cset_cgroup_from_root+0x1c7/0x230 [ 73.354007][ T3998] Modules linked in: [ 73.357942][ T3998] CPU: 1 PID: 3998 Comm: syz.3.91 Not tainted 5.15.167-syzkaller #0 [ 73.365934][ T3998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 73.376290][ T3998] RIP: 0010:cset_cgroup_from_root+0x1c7/0x230 [ 73.382374][ T3998] Code: 78 4c 89 f8 48 c1 e8 03 80 3c 28 00 74 08 4c 89 ff e8 5d b2 52 00 4d 8b 27 4d 85 e4 75 c7 e8 30 e8 08 00 0f 0b e8 29 e8 08 00 <0f> 0b e9 a4 fe ff ff e8 1d e8 08 00 0f 0b e9 f9 fe ff ff 48 c7 c1 [ 73.402000][ T3998] RSP: 0018:ffffc90002df7978 EFLAGS: 00010087 [ 73.408094][ T3998] RAX: ffffffff81777247 RBX: 0000000000000000 RCX: 0000000000040000 [ 73.416081][ T3998] RDX: ffffc900058f1000 RSI: 00000000000004d7 RDI: 00000000000004d8 [ 73.424079][ T3998] RBP: dffffc0000000000 R08: ffffffff817770e5 R09: 0000000000000003 [ 73.432044][ T3998] R10: ffffffffffffffff R11: dffffc0000000001 R12: ffff8880751dc000 [ 73.440186][ T3998] R13: dffffc0000000000 R14: ffff88801d4f8000 R15: ffffffff8c948000 [ 73.448153][ T3998] FS: 00007f16162fc6c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 73.457100][ T3998] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 73.463693][ T3998] CR2: 000000110c2b46af CR3: 000000007713a000 CR4: 00000000003506e0 [ 73.471662][ T3998] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 73.479714][ T3998] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 73.487883][ T3998] Call Trace: [ 73.491181][ T3998] [ 73.494147][ T3998] ? __warn+0x15b/0x300 [ 73.498344][ T3998] ? cset_cgroup_from_root+0x1c7/0x230 [ 73.503811][ T3998] ? report_bug+0x1b7/0x2e0 [ 73.508344][ T3998] ? handle_bug+0x3d/0x70 [ 73.512681][ T3998] ? exc_invalid_op+0x16/0x40 [ 73.517368][ T3998] ? asm_exc_invalid_op+0x16/0x20 [ 73.522396][ T3998] ? cset_cgroup_from_root+0x65/0x230 [ 73.527766][ T3998] ? cset_cgroup_from_root+0x1c7/0x230 [ 73.533248][ T3998] ? cset_cgroup_from_root+0x1c7/0x230 [ 73.538709][ T3998] ? cset_cgroup_from_root+0x1c7/0x230 [ 73.544202][ T3998] cgroup_path_ns_locked+0x6c/0xd0 [ 73.549312][ T3998] proc_cpuset_show+0x27d/0x3f0 [ 73.554250][ T3998] proc_single_show+0xf6/0x180 [ 73.559012][ T3998] seq_read_iter+0x43a/0xd10 [ 73.563699][ T3998] seq_read+0x452/0x5c0 [ 73.567868][ T3998] ? seq_open+0x140/0x140 [ 73.572317][ T3998] ? common_file_perm+0x17d/0x1d0 [ 73.577341][ T3998] ? fsnotify_perm+0x442/0x590 [ 73.582106][ T3998] ? seq_open+0x140/0x140 [ 73.586517][ T3998] vfs_read+0x2fc/0xe10 [ 73.590683][ T3998] ? kernel_read+0x1f0/0x1f0 [ 73.595299][ T3998] ? __fget_files+0x413/0x480 [ 73.599981][ T3998] ? __fdget+0x191/0x220 [ 73.604220][ T3998] __x64_sys_pread64+0x1a9/0x230 [ 73.609158][ T3998] ? ksys_pread64+0x1d0/0x1d0 [ 73.613851][ T3998] ? syscall_enter_from_user_mode+0x2e/0x240 [ 73.619829][ T3998] ? lockdep_hardirqs_on+0x94/0x130 [ 73.625254][ T3998] ? syscall_enter_from_user_mode+0x2e/0x240 [ 73.631258][ T3998] do_syscall_64+0x3b/0xb0 [ 73.635763][ T3998] ? clear_bhb_loop+0x15/0x70 [ 73.640436][ T3998] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 73.646326][ T3998] RIP: 0033:0x7f1617e83ff9 [ 73.650738][ T3998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.670435][ T3998] RSP: 002b:00007f16162fc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 73.678847][ T3998] RAX: ffffffffffffffda RBX: 00007f161803bf80 RCX: 00007f1617e83ff9 [ 73.686947][ T3998] RDX: 00000000000000ed RSI: 0000000020000080 RDI: 0000000000000003 [ 73.694951][ T3998] RBP: 00007f1617ef6296 R08: 0000000000000000 R09: 0000000000000000 [ 73.703030][ T3998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 73.710996][ T3998] R13: 0000000000000000 R14: 00007f161803bf80 R15: 00007ffc525bd078 [ 73.719037][ T3998] [ 73.722300][ T3998] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 73.729594][ T3998] CPU: 1 PID: 3998 Comm: syz.3.91 Not tainted 5.15.167-syzkaller #0 [ 73.737845][ T3998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 73.747907][ T3998] Call Trace: [ 73.751182][ T3998] [ 73.754106][ T3998] dump_stack_lvl+0x1e3/0x2d0 [ 73.758804][ T3998] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 73.764461][ T3998] ? panic+0x860/0x860 [ 73.768556][ T3998] ? cset_cgroup_from_root+0x180/0x230 [ 73.774035][ T3998] ? cset_cgroup_from_root+0x180/0x230 [ 73.779492][ T3998] panic+0x318/0x860 [ 73.783396][ T3998] ? __warn+0x16a/0x300 [ 73.787568][ T3998] ? fb_is_primary_device+0xd0/0xd0 [ 73.792788][ T3998] ? cset_cgroup_from_root+0x1c7/0x230 [ 73.798268][ T3998] __warn+0x2b2/0x300 [ 73.802266][ T3998] ? cset_cgroup_from_root+0x1c7/0x230 [ 73.807723][ T3998] report_bug+0x1b7/0x2e0 [ 73.812076][ T3998] handle_bug+0x3d/0x70 [ 73.816329][ T3998] exc_invalid_op+0x16/0x40 [ 73.820830][ T3998] asm_exc_invalid_op+0x16/0x20 [ 73.825689][ T3998] RIP: 0010:cset_cgroup_from_root+0x1c7/0x230 [ 73.831753][ T3998] Code: 78 4c 89 f8 48 c1 e8 03 80 3c 28 00 74 08 4c 89 ff e8 5d b2 52 00 4d 8b 27 4d 85 e4 75 c7 e8 30 e8 08 00 0f 0b e8 29 e8 08 00 <0f> 0b e9 a4 fe ff ff e8 1d e8 08 00 0f 0b e9 f9 fe ff ff 48 c7 c1 [ 73.851525][ T3998] RSP: 0018:ffffc90002df7978 EFLAGS: 00010087 [ 73.857603][ T3998] RAX: ffffffff81777247 RBX: 0000000000000000 RCX: 0000000000040000 [ 73.865664][ T3998] RDX: ffffc900058f1000 RSI: 00000000000004d7 RDI: 00000000000004d8 [ 73.873644][ T3998] RBP: dffffc0000000000 R08: ffffffff817770e5 R09: 0000000000000003 [ 73.881609][ T3998] R10: ffffffffffffffff R11: dffffc0000000001 R12: ffff8880751dc000 [ 73.889588][ T3998] R13: dffffc0000000000 R14: ffff88801d4f8000 R15: ffffffff8c948000 [ 73.897815][ T3998] ? cset_cgroup_from_root+0x65/0x230 [ 73.903205][ T3998] ? cset_cgroup_from_root+0x1c7/0x230 [ 73.908689][ T3998] ? cset_cgroup_from_root+0x1c7/0x230 [ 73.914158][ T3998] cgroup_path_ns_locked+0x6c/0xd0 [ 73.919351][ T3998] proc_cpuset_show+0x27d/0x3f0 [ 73.924214][ T3998] proc_single_show+0xf6/0x180 [ 73.929009][ T3998] seq_read_iter+0x43a/0xd10 [ 73.933617][ T3998] seq_read+0x452/0x5c0 [ 73.937776][ T3998] ? seq_open+0x140/0x140 [ 73.942129][ T3998] ? common_file_perm+0x17d/0x1d0 [ 73.947192][ T3998] ? fsnotify_perm+0x442/0x590 [ 73.951954][ T3998] ? seq_open+0x140/0x140 [ 73.956317][ T3998] vfs_read+0x2fc/0xe10 [ 73.960648][ T3998] ? kernel_read+0x1f0/0x1f0 [ 73.965234][ T3998] ? __fget_files+0x413/0x480 [ 73.969916][ T3998] ? __fdget+0x191/0x220 [ 73.974169][ T3998] __x64_sys_pread64+0x1a9/0x230 [ 73.979099][ T3998] ? ksys_pread64+0x1d0/0x1d0 [ 73.983775][ T3998] ? syscall_enter_from_user_mode+0x2e/0x240 [ 73.989746][ T3998] ? lockdep_hardirqs_on+0x94/0x130 [ 73.994956][ T3998] ? syscall_enter_from_user_mode+0x2e/0x240 [ 74.000952][ T3998] do_syscall_64+0x3b/0xb0 [ 74.005359][ T3998] ? clear_bhb_loop+0x15/0x70 [ 74.010024][ T3998] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 74.015910][ T3998] RIP: 0033:0x7f1617e83ff9 [ 74.020341][ T3998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.040041][ T3998] RSP: 002b:00007f16162fc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 74.048551][ T3998] RAX: ffffffffffffffda RBX: 00007f161803bf80 RCX: 00007f1617e83ff9 [ 74.056511][ T3998] RDX: 00000000000000ed RSI: 0000000020000080 RDI: 0000000000000003 [ 74.064475][ T3998] RBP: 00007f1617ef6296 R08: 0000000000000000 R09: 0000000000000000 [ 74.072433][ T3998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.080437][ T3998] R13: 0000000000000000 R14: 00007f161803bf80 R15: 00007ffc525bd078 [ 74.088430][ T3998] [ 75.189286][ T3998] Shutting down cpus with NMI [ 75.194516][ T3998] Kernel Offset: disabled [ 75.199185][ T3998] Rebooting in 86400 seconds..