last executing test programs: 33.280699398s ago: executing program 3 (id=204): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r1, 0x0, 0x0, 0x40) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000480)=0x1df9, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@ipv4_newroute={0x68, 0x18, 0x1, 0x0, 0x0, {0x2, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x7}, @RTA_ENCAP={0x44, 0x16, 0x0, 0x1, @LWT_BPF_OUT={0x40, 0x2, 0x0, 0x1, @LWT_BPF_PROG_NAME={0x3c, 0x2, '7\xe2\xbd\xf6,\xc0}\x9c99\xeasJ\x99\xe7,3\x06\xd0k(\xd0\xac9\x19N\xb4\xb8\x91\x95\x00'/56}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20042042}, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet(r1, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) sendfile(r0, r5, 0x0, 0x1000) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000140)={0x106, 0x8001, 0xe, 0x3, 0x7, "63ff08000000000010000100000100000000fc", 0x64, 0x1}) 31.834720014s ago: executing program 3 (id=209): openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c00020006", @ANYRES32, @ANYBLOB='\b'], 0x64}}, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x6023, 0x0) syz_emit_ethernet(0x288, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r1, 0x2284, &(0x7f0000002440)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000006000000080000000b0000000000", @ANYRES32, @ANYBLOB="0200000000009f000000000000008d9e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000100)={0x6, 0x1, 0x1, "446216e924934e178cb394e17e362af7c5cd5e9eb598e00b961feee297d2a061", 0x38414762}) r7 = syz_io_uring_setup(0xa0, &(0x7f00000002c0)={0x0, 0x105cc6, 0x1, 0x0, 0x207}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0xc000000, &(0x7f0000000000)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x12}) io_uring_enter(r7, 0x847ba, 0x0, 0xe, 0x0, 0x0) 29.837799814s ago: executing program 3 (id=213): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000c80)={{0x5, 0x1, 0x10, 0x0, 'syz1\x00'}, 0x0, [0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x213, 0x4, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xe8eb, 0x2, 0xffffffffffffffff, 0x8000000000000000, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffff, 0x0, 0x0, 0xfff, 0x0, 0x0, 0xc00000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x10000000000, 0x0, 0x0, 0x0, 0x0, 0xb, 0xc9f, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x1cb600000000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, 0x0, 0x0, 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x3, 0x2c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x800000000, 0x0, 0x1, 0x3, 0xffffffffffffffff, 0x61928afd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10000000000000, 0x0, 0x0, 0x10, 0x0, 0x5f1, 0x0, 0x5, 0xf, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x4000000000]}) 29.494596112s ago: executing program 3 (id=217): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x141201) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x8004551a, 0xffffffffffffffff) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x2) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) syz_io_uring_setup(0x49a, &(0x7f00000003c0)={0x0, 0x79ad, 0x3180, 0x7ffd, 0x32c, 0x0, r5}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r5, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) ioctl$SNDCTL_TMR_METRONOME(r5, 0x40045407) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x1) 26.996267802s ago: executing program 3 (id=227): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000003000), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fbdbdf25020000000a000900aaaaaaaaaa44000008000300", @ANYRES32=r3, @ANYBLOB='\b\x00\v'], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r4}, 0x18) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000480)='./file0\x00', 0x103680, 0x20) r5 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ftruncate(r6, 0x2000009) sendfile(r5, r6, 0x0, 0x6) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0xa) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r7 = inotify_init() inotify_add_watch(r7, &(0x7f00000000c0)='./bus\x00', 0x101) creat(&(0x7f0000000000)='./bus\x00', 0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000080)={0x13, 0x10, 0xfa00, {&(0x7f00000009c0), 0xffffffffffffffff, 0x1}}, 0x18) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000100)="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", 0xff}, {&(0x7f0000001480)="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", 0xc01}], 0x3) 25.834301946s ago: executing program 3 (id=232): r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x641, 0x0) flock(r0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x0) mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x3, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x2, 0xffffffff}, 0x0) openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) inotify_add_watch(0xffffffffffffffff, &(0x7f00000000c0)='.\x00', 0x5000009) add_key$user(&(0x7f0000000380), &(0x7f0000000000), 0x0, 0x0, 0xfffffffffffffffe) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) accept$unix(r3, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) getdents(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000020000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', r4, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f00000008c0)='fib6_table_lookup\x00', r5}, 0x10) r6 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r6, &(0x7f00000003c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000100)="b7", 0x1}], 0x1}, 0x40080c0) read$FUSE(0xffffffffffffffff, &(0x7f00000020c0)={0x2020}, 0x2020) 17.122302945s ago: executing program 2 (id=255): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, 0x0, 0x0, {0x1, 0x1, 0x4}, 0x1}, 0x18) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) preadv(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/56, 0x38}], 0x1, 0x8, 0x0) 16.161073032s ago: executing program 2 (id=259): r0 = syz_io_uring_setup(0x88e, &(0x7f0000000140)={0x0, 0xaef2, 0x400, 0x2, 0xbfcffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xffffbffc, 0x0, 0x4) r3 = socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000800)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1, {0x2}}) io_uring_enter(r0, 0x2d04, 0x0, 0x2, 0x0, 0x0) 15.44911802s ago: executing program 2 (id=264): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sg(&(0x7f00000000c0), 0x80, 0xa81) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) socket$rxrpc(0x21, 0x2, 0xa) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r6, 0x400455c8, 0x0) ioctl$TIOCSTI(r6, 0x5412, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$P9_RGETLOCK(r4, 0x0, 0xffffff6a) pipe2(&(0x7f0000000040), 0x4000) 14.566069701s ago: executing program 4 (id=267): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xe, 0x4, 0x8, 0xb}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13.146334075s ago: executing program 4 (id=269): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, 0x0, 0x0, {0x1, 0x1, 0x4}, 0x1}, 0x18) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) preadv(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/56, 0x38}], 0x1, 0x8, 0x0) 11.418484373s ago: executing program 4 (id=276): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x0, 0x0, 0x1, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r0 = socket$kcm(0x10, 0x400000002, 0x0) close(r0) r1 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r1, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818) sendmsg$sock(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)='k', 0x1}], 0x1, &(0x7f0000000080)=[@timestamping={{0x14, 0x1, 0x25, 0x303}}], 0x18}, 0x4000081) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0), 0x43}, 0x40002020) 11.246683217s ago: executing program 4 (id=278): syz_open_dev$vivid(0x0, 0x3, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sg(&(0x7f00000000c0), 0x80, 0xa81) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) open_tree(0xffffffffffffffff, 0x0, 0x89901) socket$rxrpc(0x21, 0x2, 0xa) pipe2(&(0x7f0000000000), 0x4000) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x0) 9.976449439s ago: executing program 32 (id=232): r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x641, 0x0) flock(r0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x0) mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x3, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x2, 0xffffffff}, 0x0) openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) inotify_add_watch(0xffffffffffffffff, &(0x7f00000000c0)='.\x00', 0x5000009) add_key$user(&(0x7f0000000380), &(0x7f0000000000), 0x0, 0x0, 0xfffffffffffffffe) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) accept$unix(r3, &(0x7f00000004c0), &(0x7f0000000300)=0x6e) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) getdents(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000020000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', r4, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f00000008c0)='fib6_table_lookup\x00', r5}, 0x10) r6 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r6, &(0x7f00000003c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000100)="b7", 0x1}], 0x1}, 0x40080c0) read$FUSE(0xffffffffffffffff, &(0x7f00000020c0)={0x2020}, 0x2020) 5.766689747s ago: executing program 0 (id=304): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='percpu_create_chunk\x00', r3}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) 5.584307402s ago: executing program 0 (id=306): syz_open_dev$video(&(0x7f0000000040), 0xffffffffffffff99, 0x8000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x22081) 4.823575333s ago: executing program 0 (id=308): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x5}, {0x2}]}, 0x94) sendmsg$inet(r0, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x4000040) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000001040)={0x2, 0x2, @private=0xa010101}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000140)="97", 0x1}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x7b, &(0x7f0000000000)=r3, 0x8) 4.016050978s ago: executing program 1 (id=309): r0 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000034c0)=""/4092, 0xffc}, {&(0x7f00000007c0)=""/131, 0x83}, {&(0x7f0000001cc0)=""/207, 0xcf}, {&(0x7f00000044c0)=""/4091, 0xffb}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8}, 0x40016002) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029ea69801d76ab0a272a2a788bab6c95f79725074", 0xd5}], 0x1}, 0x0) 3.902108387s ago: executing program 0 (id=310): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000100000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 3.876647979s ago: executing program 0 (id=311): openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) memfd_create(&(0x7f00000009c0)='y\x105\xf3\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) openat$comedi(0xffffffffffffff9c, 0x0, 0x80600, 0x0) syz_open_dev$video(&(0x7f0000000140), 0xd, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000180)=0x1b) ioctl$TIOCVHANGUP(r5, 0x5437, 0x2) syz_open_dev$video(&(0x7f0000000000), 0x75, 0x0) r6 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x240048c1) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f0000000100)=r7, 0x4) ioctl$TCSETSF(r5, 0x5404, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='netlink_extack\x00', r1}, 0x18) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c000000210001002cbd7000fddbbcfe0a800004ff000000040001001400010000000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4000841}, 0x20040000) 3.870663159s ago: executing program 1 (id=312): sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYRES16, @ANYBLOB="05000000000000", @ANYBLOB="3d000e0080000000ffffffffffff080211000000ffffffffffff0000feffffffffffffff070001000406f0027f0006a7000c006400000008000d000000000073f68ac399765b7ab289a21d254ebf1c30920188d7e0527bff31151da7c57628327841e9134f4b"], 0x70}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300000000000000000a0101010000000089", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f10", 0x8, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ebffffffffffffff"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3.506040559s ago: executing program 1 (id=313): sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYRES16, @ANYBLOB="0500000000000000", @ANYBLOB="3d000e0080000000ffffffffffff080211000000ffffffffffff0000feffffffffffffff070001000406f0027f0006a7000c006400000008000d000000000073f68ac399765b7a"], 0x70}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300000000000000000a01010100", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f10", 0x8, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.662913987s ago: executing program 5 (id=314): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$caif_stream(0x25, 0x1, 0x4) setsockopt$CAIFSO_REQ_PARAM(r4, 0x116, 0x80, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x100) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)={0x1c, r6, 0x325, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xd4}, 0x800) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) 2.278664297s ago: executing program 2 (id=315): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0xffffffff, 0x0, 0xe}, {0x10000002, 0x0, 0x4, 0x2}]}, 0x94) close(0x3) r1 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000)=r4, 0x10) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f00000005c0)="df", 0x1}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x11, &(0x7f0000000000), 0x8) 1.630546909s ago: executing program 1 (id=316): syz_open_dev$vivid(&(0x7f0000000280), 0x3, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000e80)='/sys/kernel/profiling', 0x22042, 0x33) write$binfmt_misc(r5, &(0x7f0000000300)='-', 0x1) splice(r4, 0x0, r6, 0x0, 0xbfd1, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x89901) socket$rxrpc(0x21, 0x2, 0xa) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$P9_RGETLOCK(r8, &(0x7f00000000c0)=ANY=[], 0xffffff6a) r9 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0x9ebb, 0x8, 0xc, 0x2000285}, &(0x7f0000000300)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x41, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x3400}) io_uring_enter(r9, 0x3515, 0x3, 0x0, 0x0, 0x0) tee(r7, 0xffffffffffffffff, 0xfffffffffffffc01, 0x0) 1.597375842s ago: executing program 5 (id=317): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.507124829s ago: executing program 2 (id=318): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000001500)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x40000a0}, 0x810) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$unix(0x1, 0x5, 0x0) 1.506496659s ago: executing program 5 (id=319): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xff9d}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$kcm(0x22, 0x2, 0x21) r0 = socket$kcm(0x22, 0x2, 0x21) close(r0) 597.706062ms ago: executing program 5 (id=320): r0 = socket$kcm(0xa, 0x1, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0xfffffffffffffe72, &(0x7f0000000000)=[{&(0x7f0000000300)="d800000018008105e00212ba0d8105040a020200020f100b067c55a1bc000900b80006990200000015000500fc038178a80015000338004002000c0901ac040000d67f6f947a7100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e970300000000000000000000000000000000000000008dc5fb510162", 0xd8}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty, 0xf5}, 0x80, 0x0}, 0x2004c041) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000031294", 0x2e}], 0x1}, 0x0) close(r0) 596.163042ms ago: executing program 1 (id=321): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) 470.461563ms ago: executing program 4 (id=322): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000340)='kmem_cache_free\x00', r2}, 0x18) getpid() ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000480)={0x0, {0x2, 0x4e23, @broadcast}, {0x2, 0x4e23, @multicast1}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xa}}, 0x152, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000300)='team_slave_1\x00', 0x6, 0x8, 0x4}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x40440c0) write$tun(r0, &(0x7f0000000100)={@void, @val={0x1, 0x3, 0x27, 0xd, 0x19, 0xc}, @ipv4=@udp={{0x7, 0x4, 0x3, 0x3f, 0x28, 0x67, 0x0, 0x4a, 0x11, 0x0, @private=0xa010101, @local, {[@timestamp={0x44, 0x8, 0x8e, 0x0, 0xd, [0x2]}]}}, {0x4e21, 0x4e23, 0xc, 0x0, @gue={{0x1, 0x1, 0x3, 0x9, 0x100, @void}}}}}, 0x32) 382.30362ms ago: executing program 5 (id=323): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) mlockall(0x7) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000240)='./file0\x00', 0x8c5) 250.37453ms ago: executing program 0 (id=324): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000001340)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb9619000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), r4) sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)={0x2c, r5, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x7}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x1}]}, 0x2c}}, 0x64000) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x19, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0, 0x10}], 0x1, 0xd, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x0, 0x9, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0x7000, 0xdddd1000, 0x0, 0x0, 0xc, 0x8, 0x0, 0x2, 0x0, 0x6, 0x9, 0x10}, {0x8080000, 0x0, 0xc, 0x8, 0x0, 0x0, 0x0, 0xfa, 0x7, 0x7, 0x0, 0xff}, {0x3000, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x100000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0xeeee8000, 0x3000, 0x9, 0x0, 0xff, 0x4, 0x0, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0xd, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80}, {0x8080000, 0x0, 0xa, 0x6, 0x5, 0x0, 0x3}, {0x80a0000, 0xdddd0000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x26}, {0x80a0000}, {0xeeef0000}, 0xfdfcffdb, 0x0, 0x1000, 0x28, 0xb, 0xf801, 0x0, [0x0, 0x0, 0x1]}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 153.525638ms ago: executing program 2 (id=325): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sg(&(0x7f00000000c0), 0x80, 0xa81) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) socket$rxrpc(0x21, 0x2, 0xa) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r6, 0x400455c8, 0x0) ioctl$TIOCSTI(r6, 0x5412, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$P9_RGETLOCK(r4, 0x0, 0xffffff6a) pipe2(&(0x7f0000000040), 0x4000) 86.681613ms ago: executing program 1 (id=326): sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYRES16, @ANYBLOB="0500000000000000", @ANYBLOB="3d000e0080000000ffffffffffff080211000000ffffffffffff0000feffffffffffffff070001000406f0027f0006a7000c006400000008000d000000000073f68ac399765b7a"], 0x70}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300000000000000000a01010100", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f10", 0x8, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 86.416643ms ago: executing program 5 (id=327): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$caif_stream(0x25, 0x1, 0x4) setsockopt$CAIFSO_REQ_PARAM(r4, 0x116, 0x80, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x100) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)={0x1c, r6, 0x325, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xd4}, 0x800) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) 0s ago: executing program 4 (id=328): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_create(0x0, 0x0, &(0x7f0000000000)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000500)='hrtimer_start\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000500)='hrtimer_start\x00', r2}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000200)={{}, {0x77359400}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.116' (ED25519) to the list of known hosts. [ 45.575910][ T4171] cgroup: Unknown subsys name 'net' [ 45.733375][ T4171] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 46.952446][ T4171] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 48.868164][ T4181] chnl_net:caif_netlink_parms(): no params data found [ 48.888333][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 48.914351][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 48.957215][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 48.970680][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 49.035845][ T4181] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.043104][ T4181] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.051584][ T4181] device bridge_slave_0 entered promiscuous mode [ 49.077267][ T4181] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.084405][ T4181] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.092940][ T4181] device bridge_slave_1 entered promiscuous mode [ 49.156308][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.164195][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.172551][ T4184] device bridge_slave_0 entered promiscuous mode [ 49.182671][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.189802][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.197502][ T4189] device bridge_slave_0 entered promiscuous mode [ 49.205165][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.212504][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.220273][ T4194] device bridge_slave_0 entered promiscuous mode [ 49.229409][ T4181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.238810][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.245856][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.253731][ T4184] device bridge_slave_1 entered promiscuous mode [ 49.266217][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.273557][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.281228][ T4189] device bridge_slave_1 entered promiscuous mode [ 49.288895][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.296046][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.304432][ T4194] device bridge_slave_1 entered promiscuous mode [ 49.312750][ T4181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.360618][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.367713][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.375614][ T4186] device bridge_slave_0 entered promiscuous mode [ 49.403847][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.414412][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.422228][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.430067][ T4186] device bridge_slave_1 entered promiscuous mode [ 49.438556][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.457562][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.469420][ T4181] team0: Port device team_slave_0 added [ 49.476798][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.506755][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.517475][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.527992][ T4181] team0: Port device team_slave_1 added [ 49.536270][ T4184] team0: Port device team_slave_0 added [ 49.544822][ T4184] team0: Port device team_slave_1 added [ 49.552906][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.586981][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.642317][ T4186] team0: Port device team_slave_0 added [ 49.650902][ T4189] team0: Port device team_slave_0 added [ 49.658188][ T4186] team0: Port device team_slave_1 added [ 49.666441][ T4194] team0: Port device team_slave_0 added [ 49.673300][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.680431][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.706489][ T4181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.718865][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.725812][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.752396][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.766245][ T4189] team0: Port device team_slave_1 added [ 49.781061][ T4194] team0: Port device team_slave_1 added [ 49.792785][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.800044][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.826718][ T4181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.838728][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.846193][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.872274][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.901979][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.909192][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.935474][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.968547][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.975507][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.002345][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.032365][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.039453][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.065753][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.077298][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.084502][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.110823][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.139616][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.146839][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.173249][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.184729][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.191924][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.218007][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.237915][ T4181] device hsr_slave_0 entered promiscuous mode [ 50.244853][ T4181] device hsr_slave_1 entered promiscuous mode [ 50.255422][ T4184] device hsr_slave_0 entered promiscuous mode [ 50.262366][ T4184] device hsr_slave_1 entered promiscuous mode [ 50.269374][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.277265][ T4184] Cannot create hsr debugfs directory [ 50.304154][ T4186] device hsr_slave_0 entered promiscuous mode [ 50.311310][ T4186] device hsr_slave_1 entered promiscuous mode [ 50.317822][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.325921][ T4186] Cannot create hsr debugfs directory [ 50.378735][ T4194] device hsr_slave_0 entered promiscuous mode [ 50.385478][ T4194] device hsr_slave_1 entered promiscuous mode [ 50.392050][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.400217][ T4194] Cannot create hsr debugfs directory [ 50.421650][ T4189] device hsr_slave_0 entered promiscuous mode [ 50.429071][ T4189] device hsr_slave_1 entered promiscuous mode [ 50.435599][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.443458][ T4189] Cannot create hsr debugfs directory [ 50.489255][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 50.489662][ T4190] Bluetooth: hci1: command 0x0409 tx timeout [ 50.568488][ T13] Bluetooth: hci3: command 0x0409 tx timeout [ 50.568634][ T4190] Bluetooth: hci4: command 0x0409 tx timeout [ 50.580792][ T4190] Bluetooth: hci2: command 0x0409 tx timeout [ 50.735160][ T4181] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 50.746008][ T4181] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 50.755321][ T4181] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 50.770044][ T4181] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 50.820139][ T4186] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 50.829541][ T4186] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 50.845005][ T4186] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 50.868346][ T4186] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 50.882228][ T4184] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 50.902493][ T4184] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 50.911350][ T4184] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 50.934893][ T4184] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 51.027746][ T4181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.044089][ T4194] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 51.063917][ T4194] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 51.072906][ T4194] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 51.082490][ T4194] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 51.094833][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.103878][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.114034][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.144245][ T4181] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.166828][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.175806][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.185440][ T151] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.193170][ T151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.202381][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.212666][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.221554][ T151] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.228657][ T151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.236421][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.244441][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.253371][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.282148][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.289797][ T4202] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.302001][ T4189] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 51.310549][ T4189] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 51.329646][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.344495][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.353303][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.363356][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.372625][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 51.382055][ T4189] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 51.403860][ T4202] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 51.412999][ T4202] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.421505][ T4202] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.432418][ T4202] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.441590][ T4202] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.448683][ T4202] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.457176][ T4202] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.465893][ T4202] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.474725][ T4202] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.483803][ T4202] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.492501][ T4202] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.499810][ T4202] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.508905][ T4202] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.517490][ T4202] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.525714][ T4189] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 51.550606][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.557429][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.567063][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.575240][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.584358][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.596080][ T4181] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 51.629266][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.638864][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.650378][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.660531][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.667603][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.681577][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.692872][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.702280][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.713685][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 51.723241][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.732021][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.740741][ T151] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.747783][ T151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.763592][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.788607][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 51.803228][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.814477][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.823382][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.834054][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.852125][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 51.865103][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 51.876654][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.884719][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.892867][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.901172][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.909851][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.919770][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.943116][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.953648][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.987789][ T4184] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 51.998694][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 52.019286][ T4181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.027459][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.041477][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.050713][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.059688][ T151] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.066760][ T151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.074680][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.084207][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.093468][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.102498][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.111238][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.120927][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.129500][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 52.137221][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 52.181435][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.195108][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.203752][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.220708][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.235961][ T151] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.243139][ T151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.252685][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.261693][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 52.272585][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 52.304204][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.312520][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.325176][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.336058][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.347807][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 52.355871][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 52.363491][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.396094][ T4194] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 52.409198][ T4194] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 52.422186][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.431525][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.440391][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 52.448904][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 52.457202][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.466056][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.474929][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.483547][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.496176][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 52.504598][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 52.512623][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.526902][ T4181] device veth0_vlan entered promiscuous mode [ 52.554755][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.566527][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 52.575359][ T23] Bluetooth: hci1: command 0x041b tx timeout [ 52.584199][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 52.587137][ T23] Bluetooth: hci0: command 0x041b tx timeout [ 52.615829][ T4181] device veth1_vlan entered promiscuous mode [ 52.625799][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 52.636223][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 52.644190][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 52.651947][ T23] Bluetooth: hci2: command 0x041b tx timeout [ 52.658043][ T23] Bluetooth: hci4: command 0x041b tx timeout [ 52.664996][ T23] Bluetooth: hci3: command 0x041b tx timeout [ 52.671350][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.681009][ T4186] device veth0_vlan entered promiscuous mode [ 52.697832][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.706625][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 52.720057][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 52.733314][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 52.745370][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.754199][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.762639][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.772451][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.781228][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.788335][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.796549][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.805653][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.814970][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.822170][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.830779][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 52.839327][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 52.847212][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.866771][ T4181] device veth0_macvtap entered promiscuous mode [ 52.876844][ T4181] device veth1_macvtap entered promiscuous mode [ 52.905980][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.914971][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 52.924602][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 52.933656][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 52.942151][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 52.950203][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 52.957725][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 52.966536][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 52.976212][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 52.992666][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.012761][ T4186] device veth1_vlan entered promiscuous mode [ 53.026448][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.041571][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.052502][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.068203][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.083268][ T4184] device veth0_vlan entered promiscuous mode [ 53.109957][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.120699][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 53.129738][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.138887][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.147279][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.156458][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.165742][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.174578][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.183235][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.191958][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.200736][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.211854][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.220156][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.236715][ T4186] device veth0_macvtap entered promiscuous mode [ 53.249793][ T4184] device veth1_vlan entered promiscuous mode [ 53.259690][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.267710][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.286119][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 53.300888][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 53.312870][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.323712][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 53.333178][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.342293][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 53.352839][ T4186] device veth1_macvtap entered promiscuous mode [ 53.363325][ T4181] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.373660][ T4181] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.382801][ T4181] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.391922][ T4181] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.445923][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.466968][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.485248][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.497705][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.508996][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.520372][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.531370][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 53.550018][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 53.557991][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 53.567276][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.576403][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 53.586871][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.604696][ T4186] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.616028][ T4186] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.630795][ T4186] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.642859][ T4186] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.682885][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.692388][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.704113][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 53.713030][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.723648][ T4184] device veth0_macvtap entered promiscuous mode [ 53.754027][ T4194] device veth0_vlan entered promiscuous mode [ 53.762092][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 53.771411][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 53.779235][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 53.786673][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.795345][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.804313][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.812177][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.824829][ T4184] device veth1_macvtap entered promiscuous mode [ 53.834845][ T151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.843336][ T151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.876876][ T4194] device veth1_vlan entered promiscuous mode [ 53.883835][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 53.893053][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 53.901355][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 53.913227][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.986433][ T418] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.993677][ T4194] device veth0_macvtap entered promiscuous mode [ 54.007926][ T418] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.012119][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 54.025176][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 54.033852][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.043015][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.052083][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 54.062910][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.074145][ T418] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.074942][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.088756][ T418] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.098866][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.110394][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.123694][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.144356][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.156010][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.166741][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.178456][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.189531][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.212911][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 54.220938][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.231651][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.240743][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.253832][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.262827][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.273641][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.297386][ T418] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.299380][ T4194] device veth1_macvtap entered promiscuous mode [ 54.312116][ T418] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.328418][ T4184] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.337217][ T4184] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.353685][ T4184] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.367367][ T4184] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.387346][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 54.427550][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.439553][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.450187][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.473638][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.493653][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.513109][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.528355][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #c2!!! [ 54.529122][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.548411][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.559255][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.575921][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.621279][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.655224][ T21] Bluetooth: hci0: command 0x040f tx timeout [ 54.671857][ T21] Bluetooth: hci1: command 0x040f tx timeout [ 54.694817][ T4288] block device autoloading is deprecated and will be removed. [ 54.752302][ T4251] Bluetooth: hci3: command 0x040f tx timeout [ 54.785346][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.830415][ T4251] Bluetooth: hci4: command 0x040f tx timeout [ 54.875608][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.904860][ T4251] Bluetooth: hci2: command 0x040f tx timeout [ 54.983324][ T4189] device veth0_vlan entered promiscuous mode [ 55.040296][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 55.070181][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.140387][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.150818][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 55.259073][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.321927][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.654705][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 56.371809][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 56.576607][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 56.827166][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.888654][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 56.969291][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 57.088337][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #42!!! [ 57.097245][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #42!!! [ 57.185318][ T4242] Bluetooth: hci0: command 0x0419 tx timeout [ 57.197681][ T4190] Bluetooth: hci1: command 0x0419 tx timeout [ 57.224959][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.243298][ T4190] Bluetooth: hci3: command 0x0419 tx timeout [ 57.264166][ T4190] Bluetooth: hci4: command 0x0419 tx timeout [ 57.294202][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.312931][ T4190] Bluetooth: hci2: command 0x0419 tx timeout [ 57.325495][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.335212][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.342085][ T4300] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 57.370936][ T4194] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.384313][ T4194] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.395156][ T4194] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.404895][ T4194] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.418543][ T4189] device veth1_vlan entered promiscuous mode [ 57.487690][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.512203][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.530471][ T4300] kvm: pic: non byte read [ 57.535559][ T4300] kvm: pic: non byte read [ 57.542937][ T4300] kvm: pic: single mode not supported [ 57.543055][ T4300] kvm: pic: level sensitive irq not supported [ 57.549493][ T4300] kvm: pic: non byte read [ 57.574446][ T4300] kvm: pic: non byte read [ 57.582948][ T4300] kvm: pic: non byte read [ 57.587586][ T4189] device veth0_macvtap entered promiscuous mode [ 57.587746][ T4300] kvm: pic: single mode not supported [ 57.606499][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.634876][ T4300] kvm: pic: non byte read [ 57.644066][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.650377][ T4306] atomic_op ffff88807ec2c198 conn xmit_atomic 0000000000000000 [ 57.653133][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.660840][ T4300] kvm: pic: non byte read [ 57.673021][ T4300] kvm: pic: non byte read [ 57.687856][ T4189] device veth1_macvtap entered promiscuous mode [ 57.695505][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.707125][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.717076][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.726428][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.734648][ T4300] kvm: pic: non byte read [ 57.737304][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.872171][ T418] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.872993][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.917311][ T418] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.969483][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.142706][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.781507][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.811662][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.823247][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.837601][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.852805][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.887650][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.916066][ T4202] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.925726][ T1109] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 58.932299][ T4202] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.946017][ T4202] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.983121][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.060263][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.091432][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.133023][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.204761][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.229489][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.244527][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.273880][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.308412][ T1109] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 59.317654][ T1109] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.329568][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.353962][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.373436][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.403442][ T4189] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.415380][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.426488][ T4189] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.426737][ T1109] usb 3-1: config 0 descriptor?? [ 59.435753][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.460717][ T4189] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.483075][ T4189] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.508916][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.779981][ T418] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.829044][ T1109] [drm] vendor descriptor length:6 data:06 5f 00 00 00 00 00 00 00 00 00 [ 59.838464][ T1109] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 60.499084][ T418] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.522651][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.550911][ T4290] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.776316][ T1109] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2 [ 60.801041][ T1109] [drm] Initialized udl on minor 2 [ 60.832708][ T4290] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.936490][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.847111][ T4335] device syzkaller0 entered promiscuous mode [ 61.868887][ T1109] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffff92 [ 61.908800][ T1109] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 64.019132][ T1109] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 64.112831][ T4369] Zero length message leads to an empty skb [ 64.232028][ T4370] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 64.264806][ T4370] netlink: 'syz.3.16': attribute type 10 has an invalid length. [ 64.448424][ T1109] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 64.463114][ T1109] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 64.527246][ T4370] batman_adv: batadv0: Adding interface: team0 [ 64.534745][ T4370] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.560823][ T4370] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 64.595692][ T1109] usb 3-1: USB disconnect, device number 2 [ 66.476363][ T4370] syz.3.16 (4370) used greatest stack depth: 20616 bytes left [ 70.086211][ T150] block nbd4: Attempted send on invalid socket [ 70.094018][ T150] blk_update_request: I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 70.109157][ T4433] efs: cannot read volume header [ 71.322024][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.329071][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.602668][ T4454] tmpfs: Unknown parameter 'quota' [ 72.760307][ T4455] lo speed is unknown, defaulting to 1000 [ 72.766800][ T4455] lo speed is unknown, defaulting to 1000 [ 72.781367][ T4455] lo speed is unknown, defaulting to 1000 [ 72.806402][ T4455] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 72.846808][ T4455] infiniband 3yz0: RDMA CMA: cma_listen_on_dev, error -98 [ 72.943127][ T4455] lo speed is unknown, defaulting to 1000 [ 72.956801][ T4455] lo speed is unknown, defaulting to 1000 [ 72.965634][ T4455] lo speed is unknown, defaulting to 1000 [ 73.016019][ T4455] lo speed is unknown, defaulting to 1000 [ 73.022361][ T4455] lo speed is unknown, defaulting to 1000 [ 74.827326][ T4470] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 74.848007][ T4470] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 76.420905][ T1325] cfg80211: failed to load regulatory.db [ 77.255236][ T4501] tc_dump_action: action bad kind [ 79.798382][ T4566] netlink: zone id is out of range [ 79.803632][ T4566] netlink: set zone limit has 4 unknown bytes [ 80.437409][ T4581] netlink: 28 bytes leftover after parsing attributes in process `syz.0.78'. [ 80.446384][ T4581] netlink: 28 bytes leftover after parsing attributes in process `syz.0.78'. [ 81.264502][ T4598] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 82.642377][ T4612] atomic_op ffff8880775ac198 conn xmit_atomic 0000000000000000 [ 84.626981][ T4631] device syzkaller0 entered promiscuous mode [ 85.098137][ T4646] netlink: 72 bytes leftover after parsing attributes in process `syz.4.99'. [ 87.226393][ T4677] atomic_op ffff888023c9f198 conn xmit_atomic 0000000000000000 [ 88.357616][ T4693] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 37748736, id = 0 [ 90.555429][ T4719] netlink: 28 bytes leftover after parsing attributes in process `syz.1.119'. [ 92.943436][ T4745] netlink: zone id is out of range [ 92.948860][ T4745] netlink: set zone limit has 4 unknown bytes [ 93.539740][ T4749] hub 8-0:1.0: USB hub found [ 93.546269][ T4749] hub 8-0:1.0: 1 port detected [ 93.675492][ T4749] capability: warning: `syz.4.126' uses 32-bit capabilities (legacy support in use) [ 94.896976][ T4759] tipc: Started in network mode [ 94.902171][ T4759] tipc: Node identity 5651e798dca4, cluster identity 4711 [ 94.910299][ T4759] tipc: Enabled bearer , priority 0 [ 94.919690][ T4759] device syzkaller0 entered promiscuous mode [ 95.434843][ T4412] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 95.447405][ T4754] tipc: Resetting bearer [ 95.467011][ T4754] tipc: Disabling bearer [ 95.878426][ T4412] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 95.914156][ T4770] netlink: 28 bytes leftover after parsing attributes in process `syz.0.134'. [ 97.586319][ T4412] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 97.595529][ T4412] usb 5-1: config 1 has no interface number 1 [ 97.602060][ T4412] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 97.615295][ T4412] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x6 has an invalid bInterval 255, changing to 7 [ 97.629256][ T4412] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x6 has invalid maxpacket 59378, setting to 1024 [ 97.699007][ T4412] usb 5-1: string descriptor 0 read error: -71 [ 97.705452][ T4412] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 97.718485][ T4412] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.832228][ T4412] usb 5-1: can't set config #1, error -71 [ 97.841511][ T4412] usb 5-1: USB disconnect, device number 2 [ 98.699777][ T4775] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 99.158465][ T4228] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 99.531604][ T4796] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 37748736, id = 0 [ 99.543203][ T4228] usb 2-1: config index 0 descriptor too short (expected 39, got 27) [ 99.570786][ T4228] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 99.650765][ T4228] usb 2-1: config 0 interface 0 has no altsetting 0 [ 99.849410][ T4228] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 99.871691][ T4228] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 99.910816][ T4228] usb 2-1: Product: syz [ 99.934655][ T4228] usb 2-1: Manufacturer: syz [ 99.956785][ T4228] usb 2-1: SerialNumber: syz [ 100.046730][ T4228] usb 2-1: config 0 descriptor?? [ 100.133004][ T4228] hub 2-1:0.0: bad descriptor, ignoring hub [ 100.163559][ T4228] hub: probe of 2-1:0.0 failed with error -5 [ 100.221801][ T21] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 100.252113][ T4228] usb 2-1: selecting invalid altsetting 0 [ 100.262460][ T21] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 100.536031][ T4803] tipc: Enabled bearer , priority 0 [ 100.545500][ T4803] device syzkaller0 entered promiscuous mode [ 101.159622][ T4228] usb 2-1: USB disconnect, device number 2 [ 101.178639][ T4799] tipc: Resetting bearer [ 101.313179][ T4799] tipc: Disabling bearer [ 101.363261][ T4805] udevd[4805]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 103.848424][ T4846] tmpfs: Unknown parameter 'quota' [ 104.345720][ T4842] atomic_op ffff8880772a7998 conn xmit_atomic 0000000000000000 [ 104.557972][ T4860] syz.4.163 uses obsolete (PF_INET,SOCK_PACKET) [ 104.786705][ T4861] netlink: 'syz.2.164': attribute type 10 has an invalid length. [ 104.903804][ T4861] batman_adv: batadv0: Adding interface: team0 [ 104.912833][ T4861] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.939540][ T4282] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 104.948568][ T4861] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 106.018330][ T1109] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 106.118490][ T4282] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 106.131454][ T4282] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.151535][ T4282] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.162109][ T4282] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 106.489119][ T4282] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 106.514051][ T4282] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 106.543262][ T4282] usb 2-1: Manufacturer: syz [ 106.564335][ T4282] usb 2-1: config 0 descriptor?? [ 106.718309][ T1109] usb 5-1: Using ep0 maxpacket: 16 [ 106.838411][ T1109] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 106.844103][ T4864] netlink: 320 bytes leftover after parsing attributes in process `syz.1.166'. [ 106.859080][ T1109] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 106.871196][ T1109] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 106.881125][ T1109] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 106.891794][ T1109] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 106.998569][ T1109] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 107.047413][ T4892] device syzkaller0 entered promiscuous mode [ 107.057392][ T1109] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 107.066003][ T1109] usb 5-1: Manufacturer: syz [ 107.091174][ T1109] usb 5-1: config 0 descriptor?? [ 107.132901][ T4282] appleir 0003:05AC:8243.0002: unknown main item tag 0x0 [ 107.152518][ T4282] appleir 0003:05AC:8243.0002: No inputs registered, leaving [ 107.185969][ T4282] appleir 0003:05AC:8243.0002: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 108.767150][ T4228] usb 2-1: USB disconnect, device number 3 [ 108.788712][ T1109] rc_core: IR keymap rc-hauppauge not found [ 108.794690][ T1109] Registered IR keymap rc-empty [ 108.833244][ T1109] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 108.908501][ T1109] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 108.939751][ T1109] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 108.997068][ T1109] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input5 [ 109.194333][ T1109] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 109.349914][ T1109] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 109.431492][ T1109] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 109.480438][ T1109] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 109.598509][ T1109] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 109.638572][ T1109] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 109.690798][ T1109] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 109.728380][ T1109] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 109.763368][ T1109] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 109.801353][ T1109] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 109.937866][ T1109] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 109.950526][ T1109] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 110.043477][ T1109] usb 5-1: USB disconnect, device number 3 [ 113.578533][ T4229] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 113.932745][ T4919] netlink: 8 bytes leftover after parsing attributes in process `syz.3.183'. [ 114.018488][ T4229] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 114.137413][ T4229] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.380999][ T4229] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.969320][ T4229] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 115.497819][ T4964] lo speed is unknown, defaulting to 1000 [ 115.559490][ T4229] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 115.574861][ T4229] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 115.596558][ T4229] usb 5-1: Manufacturer: syz [ 115.628443][ T4229] usb 5-1: config 0 descriptor?? [ 115.895986][ T4944] netlink: 320 bytes leftover after parsing attributes in process `syz.4.190'. [ 116.095961][ T4976] netlink: 'syz.0.199': attribute type 29 has an invalid length. [ 116.104096][ T4976] netlink: 4 bytes leftover after parsing attributes in process `syz.0.199'. [ 116.113180][ T4976] netlink: 'syz.0.199': attribute type 29 has an invalid length. [ 116.121174][ T4976] netlink: 4 bytes leftover after parsing attributes in process `syz.0.199'. [ 116.180723][ T4229] appleir 0003:05AC:8243.0003: unknown main item tag 0x0 [ 116.199553][ T4229] appleir 0003:05AC:8243.0003: No inputs registered, leaving [ 116.230609][ T4229] appleir 0003:05AC:8243.0003: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 116.647870][ T4989] netlink: 'syz.3.200': attribute type 4 has an invalid length. [ 117.515777][ T21] usb 5-1: USB disconnect, device number 4 [ 118.787685][ T5009] tmpfs: Unknown parameter 'usrquota' [ 118.952800][ T5021] netlink: 28 bytes leftover after parsing attributes in process `syz.3.209'. [ 118.972175][ T5021] netlink: 8 bytes leftover after parsing attributes in process `syz.3.209'. [ 121.009576][ T5041] Set syz0 is full, maxelem 0 reached [ 121.318347][ T4965] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 122.010837][ T4965] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 122.752717][ T4965] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.765768][ T4965] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.775896][ T4965] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 122.868542][ T4965] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 122.877814][ T4965] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 123.037120][ T4965] usb 3-1: Manufacturer: syz [ 123.054277][ T4965] usb 3-1: config 0 descriptor?? [ 123.718122][ T5043] netlink: 320 bytes leftover after parsing attributes in process `syz.2.216'. [ 123.926503][ T5087] vivid-001: ================= START STATUS ================= [ 123.991977][ T4965] appleir 0003:05AC:8243.0004: unknown main item tag 0x0 [ 124.014117][ T5087] vivid-001: Test Pattern: 75% Colorbar [ 124.021043][ T5087] vivid-001: Fill Percentage of Frame: 100 [ 124.030991][ T5087] vivid-001: Horizontal Movement: No Movement [ 124.045359][ T5087] vivid-001: Vertical Movement: No Movement [ 124.078579][ T5087] vivid-001: OSD Text Mode: All [ 124.840797][ T5087] vivid-001: Show Border: false [ 124.845895][ T5087] vivid-001: Show Square: false [ 124.862167][ T4965] appleir 0003:05AC:8243.0004: No inputs registered, leaving [ 124.882479][ T4965] appleir 0003:05AC:8243.0004: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 124.911332][ T5087] vivid-001: Sensor Flipped Horizontally: false [ 124.918647][ T5087] vivid-001: Sensor Flipped Vertically: false [ 125.027855][ T5087] vivid-001: Insert SAV Code in Image: false [ 125.065128][ T5087] vivid-001: Insert EAV Code in Image: false [ 125.822490][ T5087] vivid-001: Reduced Framerate: false [ 125.848541][ T5087] vivid-001: Enable Capture Cropping: true [ 125.856104][ T5087] vivid-001: Enable Capture Composing: true [ 125.878401][ T5087] vivid-001: Enable Capture Scaler: true [ 125.899968][ T5087] vivid-001: Timestamp Source: End of Frame [ 125.928444][ T5087] vivid-001: Colorspace: sRGB [ 125.931111][ T4965] usb 3-1: USB disconnect, device number 3 [ 125.945191][ T5087] vivid-001: Transfer Function: Default [ 126.092646][ T5087] vivid-001: Y'CbCr Encoding: Default [ 126.101155][ T5120] netlink: set zone limit has 8 unknown bytes [ 126.108390][ T5087] vivid-001: HSV Encoding: Hue 0-179 [ 126.118576][ T5087] vivid-001: Quantization: Default [ 126.688956][ T5087] vivid-001: Apply Alpha To Red Only: false [ 126.696917][ T5087] vivid-001: Standard Aspect Ratio: 4x3 [ 126.712291][ T5087] vivid-001: DV Timings Signal Mode: Current DV Timings inactive [ 126.726890][ T5087] vivid-001: DV Timings: 640x480p59 inactive [ 126.734747][ T5087] vivid-001: DV Timings Aspect Ratio: Source Width x Height [ 126.746761][ T5087] vivid-001: Maximum EDID Blocks: 2 [ 126.753359][ T5087] vivid-001: Limited RGB Range (16-235): false [ 126.764262][ T5087] vivid-001: Rx RGB Quantization Range: Automatic [ 126.773566][ T5087] vivid-001: Power Present: 0x00000001 [ 126.783628][ T5087] tpg source WxH: 640x360 (Y'CbCr) [ 126.858728][ T5087] tpg field: 1 [ 126.862161][ T5087] tpg crop: 640x360@0x0 [ 126.866456][ T5087] tpg compose: 640x360@0x0 [ 126.918417][ T5087] tpg colorspace: 8 [ 126.922516][ T5087] tpg transfer function: 0/0 [ 128.498230][ C0] sched: RT throttling activated [ 128.498321][ T5087] tpg Y'CbCr encoding: 0/0 [ 128.507856][ T5087] tpg quantization: 0/0 [ 128.831162][ T5087] tpg RGB range: 0/2 [ 128.835121][ T5087] vivid-001: ================== END STATUS ================== [ 129.318974][ T5156] Set syz0 is full, maxelem 0 reached [ 130.838548][ T4282] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 131.360833][ T4282] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 131.964001][ T4282] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 131.975141][ T4282] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 131.986003][ T4282] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.009869][ T5168] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 132.729687][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.736467][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.257169][ T4965] usb 5-1: USB disconnect, device number 5 [ 134.629984][ T5215] serio: Serial port ptm1 [ 137.533245][ T418] Bluetooth: hci5: Frame reassembly failed (-84) [ 137.550567][ T418] Bluetooth: hci5: Frame reassembly failed (-84) [ 139.628264][ T4229] Bluetooth: hci5: command 0x1003 tx timeout [ 139.650843][ T5008] Bluetooth: hci5: Frame reassembly failed (-84) [ 139.663684][ T5008] Bluetooth: hci5: Frame reassembly failed (-84) [ 139.753553][ T5079] Bluetooth: hci6: Frame reassembly failed (-84) [ 140.046661][ T5283] tipc: Enabling of bearer rejected, failed to enable media [ 140.819870][ T5288] atomic_op ffff88807e460998 conn xmit_atomic 0000000000000000 [ 141.269845][ T5298] lo speed is unknown, defaulting to 1000 [ 141.483446][ T5298] chnl_net:caif_netlink_parms(): no params data found [ 141.607310][ T5298] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.631384][ T5298] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.649635][ T5298] device bridge_slave_0 entered promiscuous mode [ 141.665269][ T5298] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.688528][ T4229] Bluetooth: hci5: command 0x1001 tx timeout [ 141.708418][ T146] Bluetooth: hci5: sending frame failed (-49) [ 142.448540][ T5298] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.457233][ T4229] Bluetooth: hci6: command 0x1003 tx timeout [ 142.517007][ T5298] device bridge_slave_1 entered promiscuous mode [ 142.527103][ T146] Bluetooth: hci6: sending frame failed (-49) [ 142.682793][ T5298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 142.712705][ T5298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 142.774767][ T5298] team0: Port device team_slave_0 added [ 142.789980][ T5298] team0: Port device team_slave_1 added [ 143.476686][ T5298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.484065][ T5298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.525494][ T5298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.542281][ T5298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.551211][ T5298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.606731][ T5298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.615563][ T4965] Bluetooth: hci7: command 0x0409 tx timeout [ 143.768828][ T4228] Bluetooth: hci5: command 0x1009 tx timeout [ 143.857568][ T5298] device hsr_slave_0 entered promiscuous mode [ 143.880028][ T5298] device hsr_slave_1 entered promiscuous mode [ 143.902283][ T5298] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 143.914716][ T5298] Cannot create hsr debugfs directory [ 144.366753][ T5298] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 144.381932][ T5298] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 144.505653][ T5298] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 144.525431][ T5298] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 144.868550][ T5298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.915262][ T5340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 144.928521][ T5340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 144.952248][ T5298] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.959248][ T4228] Bluetooth: hci6: command 0x1001 tx timeout [ 144.965635][ T146] Bluetooth: hci6: sending frame failed (-49) [ 144.987604][ T5342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 145.007438][ T5342] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 145.040441][ T5342] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.047647][ T5342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.090316][ T5342] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 145.121416][ T5340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 145.130978][ T5340] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 145.140791][ T5340] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.147951][ T5340] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.182834][ T5340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 145.786141][ T4282] Bluetooth: hci7: command 0x041b tx timeout [ 145.859691][ T5397] serio: Serial port ptm2 [ 145.888059][ T5337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 145.914442][ T5342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 145.923938][ T5342] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 145.933573][ T5342] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 145.945638][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 145.954993][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 145.967040][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 145.977921][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 145.989766][ T5298] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 146.001935][ T5298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 146.014567][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 146.023481][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 146.111231][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 146.121956][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 146.134682][ T5298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.253290][ T5342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 146.263886][ T5342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 146.284035][ T5342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 146.293230][ T5342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 146.303062][ T5342] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 146.311519][ T5342] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 146.323256][ T5298] device veth0_vlan entered promiscuous mode [ 146.335090][ T5298] device veth1_vlan entered promiscuous mode [ 146.355439][ T5342] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 146.364072][ T5342] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 146.372992][ T5342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 146.382965][ T5342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 146.393602][ T5298] device veth0_macvtap entered promiscuous mode [ 146.405560][ T5298] device veth1_macvtap entered promiscuous mode [ 146.422894][ T5298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.434007][ T5298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.444548][ T5298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.456289][ T5298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.466803][ T5298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.477452][ T5298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.488100][ T5298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.499032][ T5298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.509368][ T5298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.520008][ T5298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.531224][ T5298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 146.543098][ T5298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.554180][ T5298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.564800][ T5298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.575811][ T5298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.587220][ T5298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.598139][ T5298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.608054][ T5298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.618666][ T5298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.628740][ T5298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.639845][ T5298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.651134][ T5298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 146.658598][ T5342] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 146.667910][ T5342] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 146.677189][ T5342] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 146.686138][ T5342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 146.696014][ T5342] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 146.705311][ T5342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 146.720233][ T5298] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.730598][ T5298] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.739526][ T5298] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.749710][ T5298] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.848825][ T5340] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.857012][ T5340] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.888997][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 146.917881][ T5342] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.926836][ T5342] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.984890][ T5337] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 147.049276][ T4229] Bluetooth: hci6: command 0x1009 tx timeout [ 147.072256][ T5419] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 147.113705][ T5419] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 147.848681][ T4229] Bluetooth: hci7: command 0x040f tx timeout [ 149.375165][ T5448] delete_channel: no stack [ 149.381678][ T5447] delete_channel: no stack [ 149.819778][ T5454] tipc: Enabled bearer , priority 0 [ 149.834744][ T5454] device syzkaller0 entered promiscuous mode [ 150.090331][ T5456] netlink: 'syz.5.320': attribute type 10 has an invalid length. [ 150.115982][ T4282] Bluetooth: hci7: command 0x0419 tx timeout [ 150.271737][ T5456] team0: Port device wlan1 added [ 150.301863][ T5446] tipc: Resetting bearer [ 150.333252][ T5446] tipc: Disabling bearer [ 150.393504][ T5463] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 150.427302][ T5463] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 150.777545][ C0] ------------[ cut here ]------------ [ 150.779035][ C0] [ 150.779042][ C0] ====================================================== [ 150.779047][ C0] WARNING: possible circular locking dependency detected [ 150.779060][ C0] 5.15.189-syzkaller #0 Not tainted [ 150.779069][ C0] ------------------------------------------------------ [ 150.779073][ C0] udevd/3560 is trying to acquire lock: [ 150.779081][ C0] ffffffff8c110da0 (console_owner){-...}-{0:0}, at: console_lock_spinning_enable+0x2c/0x60 [ 150.779132][ C0] [ 150.779132][ C0] but task is already holding lock: [ 150.779136][ C0] ffff8880b902a218 (hrtimer_bases.lock){-.-.}-{2:2}, at: __hrtimer_run_queues+0x5ff/0xc40 [ 150.779171][ C0] [ 150.779171][ C0] which lock already depends on the new lock. [ 150.779171][ C0] [ 150.779175][ C0] [ 150.779175][ C0] the existing dependency chain (in reverse order) is: [ 150.779179][ C0] [ 150.779179][ C0] -> #6 (hrtimer_bases.lock){-.-.}-{2:2}: [ 150.779198][ C0] _raw_spin_lock_irqsave+0xa4/0xf0 [ 150.779216][ C0] hrtimer_start_range_ns+0xff/0xc20 [ 150.779231][ C0] enqueue_task_rt+0x60c/0xc00 [ 150.779244][ C0] enqueue_task+0x182/0x2b0 [ 150.779259][ C0] __sched_setscheduler+0x1379/0x1be0 [ 150.779274][ C0] sched_set_fifo+0xbc/0x120 [ 150.779288][ C0] drm_vblank_worker_init+0x149/0x1a0 [ 150.779301][ C0] drm_vblank_init+0x265/0x330 [ 150.779315][ C0] vkms_init+0x31a/0x700 [ 150.779330][ C0] do_one_initcall+0x1ee/0x680 [ 150.779344][ C0] do_initcall_level+0x137/0x1f0 [ 150.779359][ C0] do_initcalls+0x4b/0x90 [ 150.779372][ C0] kernel_init_freeable+0x3ce/0x560 [ 150.779385][ C0] kernel_init+0x19/0x1b0 [ 150.779405][ C0] ret_from_fork+0x1f/0x30 [ 150.779418][ C0] [ 150.779418][ C0] -> #5 (&rt_b->rt_runtime_lock){-.-.}-{2:2}: [ 150.779434][ C0] _raw_spin_lock+0x2a/0x40 [ 150.779447][ C0] rq_online_rt+0x125/0x310 [ 150.779458][ C0] sched_cpu_activate+0x4ae/0x650 [ 150.779470][ C0] cpuhp_invoke_callback+0x431/0x830 [ 150.779486][ C0] cpuhp_thread_fun+0x39a/0x7d0 [ 150.779500][ C0] smpboot_thread_fn+0x4f6/0x970 [ 150.779515][ C0] kthread+0x436/0x520 [ 150.779526][ C0] ret_from_fork+0x1f/0x30 [ 150.779538][ C0] [ 150.779538][ C0] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 150.779556][ C0] _raw_spin_lock_nested+0x2e/0x40 [ 150.779571][ C0] raw_spin_rq_lock_nested+0x26/0x140 [ 150.779584][ C0] task_fork_fair+0x5c/0x350 [ 150.779595][ C0] sched_cgroup_fork+0x2c6/0x320 [ 150.779609][ C0] copy_process+0x22d1/0x3e00 [ 150.779622][ C0] kernel_clone+0x219/0x930 [ 150.779634][ C0] kernel_thread+0xc8/0x120 [ 150.779645][ C0] rest_init+0x21/0x330 [ 150.779657][ C0] start_kernel+0x486/0x530 [ 150.779670][ C0] secondary_startup_64_no_verify+0xb1/0xbb [ 150.779685][ C0] [ 150.779685][ C0] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 150.779702][ C0] _raw_spin_lock_irqsave+0xa4/0xf0 [ 150.779717][ C0] try_to_wake_up+0x5c/0x1050 [ 150.779730][ C0] __wake_up_common+0x2a4/0x4e0 [ 150.779744][ C0] __wake_up+0x108/0x180 [ 150.779758][ C0] tty_port_default_wakeup+0xa5/0xf0 [ 150.779772][ C0] serial8250_tx_chars+0x629/0x830 [ 150.779786][ C0] serial8250_handle_irq+0x519/0x610 [ 150.779800][ C0] serial8250_default_handle_irq+0xb4/0x1a0 [ 150.779815][ C0] serial8250_interrupt+0x9b/0x1c0 [ 150.779828][ C0] __handle_irq_event_percpu+0x291/0x9b0 [ 150.779842][ C0] handle_irq_event+0xa5/0x220 [ 150.779855][ C0] handle_edge_irq+0x243/0xb20 [ 150.779869][ C0] __common_interrupt+0xd7/0x1e0 [ 150.779883][ C0] common_interrupt+0xb0/0xd0 [ 150.779894][ C0] asm_common_interrupt+0x22/0x40 [ 150.779906][ C0] __sanitizer_cov_trace_pc+0xc/0x60 [ 150.779919][ C0] account_kernel_stack+0x21e/0x340 [ 150.779932][ C0] dup_task_struct+0x70b/0xb30 [ 150.779944][ C0] copy_process+0x5b3/0x3e00 [ 150.779956][ C0] kernel_clone+0x219/0x930 [ 150.779968][ C0] __se_sys_clone3+0x2d5/0x360 [ 150.779980][ C0] do_syscall_64+0x4c/0xa0 [ 150.779995][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 150.780011][ C0] [ 150.780011][ C0] -> #2 (&tty->write_wait){-.-.}-{2:2}: [ 150.780030][ C0] _raw_spin_lock_irqsave+0xa4/0xf0 [ 150.780044][ C0] __wake_up+0xed/0x180 [ 150.780057][ C0] tty_port_default_wakeup+0xa5/0xf0 [ 150.780070][ C0] serial8250_tx_chars+0x629/0x830 [ 150.780084][ C0] serial8250_handle_irq+0x519/0x610 [ 150.780098][ C0] serial8250_default_handle_irq+0xb4/0x1a0 [ 150.780113][ C0] serial8250_interrupt+0x9b/0x1c0 [ 150.780125][ C0] __handle_irq_event_percpu+0x291/0x9b0 [ 150.780139][ C0] handle_irq_event+0xa5/0x220 [ 150.780151][ C0] handle_edge_irq+0x243/0xb20 [ 150.780164][ C0] __common_interrupt+0xd7/0x1e0 [ 150.780177][ C0] common_interrupt+0xb0/0xd0 [ 150.780189][ C0] asm_common_interrupt+0x22/0x40 [ 150.780201][ C0] _raw_spin_unlock_irqrestore+0xa5/0x100 [ 150.780216][ C0] uart_write+0x62f/0x880 [ 150.780228][ C0] n_tty_write+0xd21/0x1210 [ 150.780244][ C0] file_tty_write+0x557/0x910 [ 150.780258][ C0] vfs_write+0x712/0xd00 [ 150.780270][ C0] ksys_write+0x14d/0x250 [ 150.780282][ C0] do_syscall_64+0x4c/0xa0 [ 150.780296][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 150.780312][ C0] [ 150.780312][ C0] -> #1 (&port_lock_key){-.-.}-{2:2}: [ 150.780330][ C0] _raw_spin_lock_irqsave+0xa4/0xf0 [ 150.780345][ C0] serial8250_console_write+0x170/0xf80 [ 150.780360][ C0] console_unlock+0xc86/0x1200 [ 150.780374][ C0] vprintk_emit+0xc0/0x150 [ 150.780395][ C0] _printk+0xcc/0x110 [ 150.780409][ C0] register_console+0x682/0x960 [ 150.780420][ C0] univ8250_console_init+0x41/0x50 [ 150.780434][ C0] console_init+0x177/0x5d0 [ 150.780445][ C0] start_kernel+0x2f9/0x530 [ 150.780457][ C0] secondary_startup_64_no_verify+0xb1/0xbb [ 150.780471][ C0] [ 150.780471][ C0] -> #0 (console_owner){-...}-{0:0}: [ 150.780488][ C0] __lock_acquire+0x2c33/0x7c60 [ 150.780504][ C0] lock_acquire+0x197/0x3f0 [ 150.780517][ C0] console_lock_spinning_enable+0x51/0x60 [ 150.780529][ C0] console_unlock+0x9f8/0x1200 [ 150.780544][ C0] vprintk_emit+0xc0/0x150 [ 150.780558][ C0] _printk+0xcc/0x110 [ 150.780570][ C0] report_bug+0x1e5/0x2e0 [ 150.780584][ C0] handle_bug+0x3a/0x70 [ 150.780596][ C0] exc_invalid_op+0x16/0x40 [ 150.780607][ C0] asm_exc_invalid_op+0x16/0x20 [ 150.780618][ C0] copy_from_user_nofault+0x160/0x1c0 [ 150.780634][ C0] bpf_probe_read_compat+0xdd/0x170 [ 150.780648][ C0] bpf_prog_63d51858d7cca270+0x3d/0xf68 [ 150.780660][ C0] bpf_trace_run2+0x15b/0x2d0 [ 150.780675][ C0] __traceiter_hrtimer_start+0x6a/0xb0 [ 150.780688][ C0] enqueue_hrtimer+0x314/0x370 [ 150.780703][ C0] __hrtimer_run_queues+0x65a/0xc40 [ 150.780717][ C0] hrtimer_interrupt+0x3bb/0x8d0 [ 150.780732][ C0] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 150.780745][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 150.780758][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 150.780772][ C0] check_preemption_disabled+0x18/0x110 [ 150.780785][ C0] rcu_is_watching+0x11/0xa0 [ 150.780797][ C0] lock_release+0xba/0x870 [ 150.780811][ C0] _raw_spin_unlock+0x12/0x40 [ 150.780825][ C0] lockref_get_not_dead+0x72/0xb0 [ 150.780836][ C0] try_to_unlazy+0x2ad/0x6d0 [ 150.780851][ C0] path_openat+0x5cc/0x2f30 [ 150.780863][ C0] do_filp_open+0x1b3/0x3e0 [ 150.780875][ C0] do_sys_openat2+0x142/0x4a0 [ 150.780889][ C0] __x64_sys_openat+0x135/0x160 [ 150.780904][ C0] do_syscall_64+0x4c/0xa0 [ 150.780918][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 150.780934][ C0] [ 150.780934][ C0] other info that might help us debug this: [ 150.780934][ C0] [ 150.780938][ C0] Chain exists of: [ 150.780938][ C0] console_owner --> &rt_b->rt_runtime_lock --> hrtimer_bases.lock [ 150.780938][ C0] [ 150.780959][ C0] Possible unsafe locking scenario: [ 150.780959][ C0] [ 150.780962][ C0] CPU0 CPU1 [ 150.780966][ C0] ---- ---- [ 150.780969][ C0] lock(hrtimer_bases.lock); [ 150.780977][ C0] lock(&rt_b->rt_runtime_lock); [ 150.780986][ C0] lock(hrtimer_bases.lock); [ 150.780995][ C0] lock(console_owner); [ 150.781003][ C0] [ 150.781003][ C0] *** DEADLOCK *** [ 150.781003][ C0] [ 150.781006][ C0] 5 locks held by udevd/3560: [ 150.781015][ C0] #0: ffffffff8c11c360 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 150.781049][ C0] #1: ffff8881480eeaf0 (&dentry->d_lock){+.+.}-{2:2}, at: lockref_get_not_dead+0x22/0xb0 [ 150.781081][ C0] #2: ffff8880b902a218 (hrtimer_bases.lock){-.-.}-{2:2}, at: __hrtimer_run_queues+0x5ff/0xc40 [ 150.781116][ C0] #3: ffffffff8c11c360 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 150.781145][ C0] #4: ffffffff8c110e80 (console_lock){+.+.}-{0:0}, at: vprintk_emit+0xa7/0x150 [ 150.781179][ C0] [ 150.781179][ C0] stack backtrace: [ 150.781190][ C0] CPU: 0 PID: 3560 Comm: udevd Not tainted 5.15.189-syzkaller #0 [ 150.781204][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 150.781217][ C0] Call Trace: [ 150.781222][ C0] [ 150.781228][ C0] dump_stack_lvl+0x168/0x230 [ 150.781244][ C0] ? load_image+0x3b0/0x3b0 [ 150.781258][ C0] ? show_regs_print_info+0x20/0x20 [ 150.781277][ C0] ? print_circular_bug+0x12b/0x1a0 [ 150.781291][ C0] check_noncircular+0x274/0x310 [ 150.781306][ C0] ? add_chain_block+0x940/0x940 [ 150.781318][ C0] ? lockdep_lock+0xdc/0x1e0 [ 150.781336][ C0] ? mark_lock+0x94/0x320 [ 150.781352][ C0] __lock_acquire+0x2c33/0x7c60 [ 150.781378][ C0] ? verify_lock_unused+0x140/0x140 [ 150.781408][ C0] ? sprintf+0xd6/0x120 [ 150.781426][ C0] lock_acquire+0x197/0x3f0 [ 150.781441][ C0] ? console_lock_spinning_enable+0x2c/0x60 [ 150.781456][ C0] ? prb_read_valid+0x60/0x60 [ 150.781472][ C0] ? read_lock_is_recursive+0x10/0x10 [ 150.781487][ C0] ? do_raw_spin_lock+0x11d/0x280 [ 150.781502][ C0] ? __rwlock_init+0x140/0x140 [ 150.781516][ C0] ? do_raw_spin_unlock+0x11d/0x230 [ 150.781531][ C0] console_lock_spinning_enable+0x51/0x60 [ 150.781544][ C0] ? console_lock_spinning_enable+0x2c/0x60 [ 150.781557][ C0] console_unlock+0x9f8/0x1200 [ 150.781576][ C0] ? console_trylock_spinning+0x350/0x350 [ 150.781595][ C0] ? __down_trylock_console_sem+0x184/0x1e0 [ 150.781608][ C0] ? vprintk_emit+0xa7/0x150 [ 150.781624][ C0] ? printk_parse_prefix+0x330/0x330 [ 150.781639][ C0] ? vprintk_emit+0xa7/0x150 [ 150.781655][ C0] ? console_trylock+0x70/0x70 [ 150.781668][ C0] ? mark_lock+0x94/0x320 [ 150.781688][ C0] ? vprintk_emit+0x150/0x150 [ 150.781702][ C0] ? __lock_acquire+0x12d9/0x7c60 [ 150.781719][ C0] ? __lock_acquire+0x13ad/0x7c60 [ 150.781738][ C0] vprintk_emit+0xc0/0x150 [ 150.781755][ C0] _printk+0xcc/0x110 [ 150.781771][ C0] ? load_image+0x3b0/0x3b0 [ 150.781786][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 150.781803][ C0] ? find_bug+0xa1/0x350 [ 150.781816][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 150.781832][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 150.781848][ C0] report_bug+0x1e5/0x2e0 [ 150.781864][ C0] handle_bug+0x3a/0x70 [ 150.781877][ C0] exc_invalid_op+0x16/0x40 [ 150.781890][ C0] asm_exc_invalid_op+0x16/0x20 [ 150.781907][ C0] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 150.781925][ C0] Code: 24 45 31 f6 31 ff 89 de e8 ed f7 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 70 f4 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 150.781937][ C0] RSP: 0018:ffffc90000007b58 EFLAGS: 00010006 [ 150.781950][ C0] RAX: ffffffff819ecfb0 RBX: 0000000000000008 RCX: ffff88807c8f0000 [ 150.781961][ C0] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000000 [ 150.781970][ C0] RBP: 0000000000000000 R08: dffffc0000000000 R09: ffffed100f91e001 [ 150.781980][ C0] R10: ffffed100f91e001 R11: 1ffff1100f91e000 R12: ffff88807c8f1788 [ 150.781991][ C0] R13: 00007ffffffff000 R14: ffffc90000007bc8 R15: 0000000020000000 [ 150.782004][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 150.782022][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 150.782039][ C0] bpf_probe_read_compat+0xdd/0x170 [ 150.782056][ C0] bpf_prog_63d51858d7cca270+0x3d/0xf68 [ 150.782069][ C0] bpf_trace_run2+0x15b/0x2d0 [ 150.782084][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 150.782101][ C0] ? bpf_trace_run1+0x2d0/0x2d0 [ 150.782121][ C0] ? __bpf_trace_hrtimer_init+0x30/0x30 [ 150.782136][ C0] __traceiter_hrtimer_start+0x6a/0xb0 [ 150.782151][ C0] enqueue_hrtimer+0x314/0x370 [ 150.782168][ C0] __hrtimer_run_queues+0x65a/0xc40 [ 150.782187][ C0] ? snd_hrtimer_stop+0x90/0x90 [ 150.782207][ C0] ? hrtimer_interrupt+0x8d0/0x8d0 [ 150.782223][ C0] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 150.782240][ C0] hrtimer_interrupt+0x3bb/0x8d0 [ 150.782265][ C0] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 150.782280][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 150.782295][ C0] [ 150.782299][ C0] [ 150.782304][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 150.782318][ C0] RIP: 0010:check_preemption_disabled+0x18/0x110 [ 150.782334][ C0] Code: 00 cc 48 c7 c7 e0 92 59 8a 48 c7 c6 20 93 59 8a eb 00 55 41 57 41 56 53 48 83 ec 10 65 48 8b 04 25 28 00 00 00 48 89 44 24 08 <65> 8b 05 a9 d7 59 76 65 8b 0d 12 32 5a 76 f7 c1 ff ff ff 7f 74 1f [ 150.782346][ C0] RSP: 0018:ffffc900012df788 EFLAGS: 00000286 [ 150.782358][ C0] RAX: 95e613c1ec281a00 RBX: 0000000000000000 RCX: ffffffff815c77b9 [ 150.782368][ C0] RDX: 0000000000000000 RSI: ffffffff8a599320 RDI: ffffffff8a5992e0 [ 150.782378][ C0] RBP: ffffc900012df8e8 R08: dffffc0000000000 R09: fffffbfff1ad2dd6 [ 150.782394][ C0] R10: fffffbfff1ad2dd6 R11: 1ffffffff1ad2dd5 R12: 1ffff1102901dd63 [ 150.782405][ C0] R13: dffffc0000000000 R14: ffff8881480eeb18 R15: 1ffff9200025bf08 [ 150.782419][ C0] ? lock_release+0xa9/0x870 [ 150.782438][ C0] rcu_is_watching+0x11/0xa0 [ 150.782452][ C0] lock_release+0xba/0x870 [ 150.782468][ C0] ? lockref_get_not_dead+0x72/0xb0 [ 150.782481][ C0] ? do_raw_spin_lock+0x11d/0x280 [ 150.782495][ C0] ? __lock_acquire+0x7c60/0x7c60 [ 150.782510][ C0] ? __rwlock_init+0x140/0x140 [ 150.782527][ C0] _raw_spin_unlock+0x12/0x40 [ 150.782542][ C0] lockref_get_not_dead+0x72/0xb0 [ 150.782556][ C0] try_to_unlazy+0x2ad/0x6d0 [ 150.782574][ C0] path_openat+0x5cc/0x2f30 [ 150.782595][ C0] ? __kasan_slab_alloc+0xb3/0xd0 [ 150.782610][ C0] ? __kasan_slab_alloc+0x9c/0xd0 [ 150.782623][ C0] ? slab_post_alloc_hook+0x4c/0x380 [ 150.782637][ C0] ? verify_lock_unused+0x140/0x140 [ 150.782652][ C0] ? __x64_sys_openat+0x135/0x160 [ 150.782670][ C0] ? do_filp_open+0x3e0/0x3e0 [ 150.782690][ C0] do_filp_open+0x1b3/0x3e0 [ 150.782705][ C0] ? vfs_tmpfile+0x300/0x300 [ 150.782727][ C0] ? _raw_spin_unlock+0x24/0x40 [ 150.782742][ C0] ? alloc_fd+0x598/0x630 [ 150.782761][ C0] do_sys_openat2+0x142/0x4a0 [ 150.782777][ C0] ? __lock_acquire+0x7c60/0x7c60 [ 150.782794][ C0] ? do_sys_open+0xe0/0xe0 [ 150.782810][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 150.782828][ C0] ? lock_chain_count+0x20/0x20 [ 150.782843][ C0] ? vtime_user_exit+0x2dc/0x400 [ 150.782859][ C0] __x64_sys_openat+0x135/0x160 [ 150.782877][ C0] do_syscall_64+0x4c/0xa0 [ 150.782892][ C0] ? clear_bhb_loop+0x30/0x80 [ 150.782905][ C0] ? clear_bhb_loop+0x30/0x80 [ 150.782919][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 150.782936][ C0] RIP: 0033:0x7f3cdcf78407 [ 150.782950][ C0] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 150.782960][ C0] RSP: 002b:00007ffc5c519e60 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 150.782975][ C0] RAX: ffffffffffffffda RBX: 00007f3cdce8a880 RCX: 00007f3cdcf78407 [ 150.782985][ C0] RDX: 0000000000080141 RSI: 0000560a8375702e RDI: ffffffffffffff9c [ 150.782995][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 150.783003][ C0] R10: 00000000000001a4 R11: 0000000000000202 R12: 00000000ffffffff [ 150.783011][ C0] R13: 00000000ffffffff R14: ffffffffffffffff R15: 00007ffc5c51a180 [ 150.783026][ C0] [ 152.420007][ C0] WARNING: CPU: 0 PID: 3560 at mm/maccess.c:226 copy_from_user_nofault+0x160/0x1c0 [ 152.429289][ C0] Modules linked in: [ 152.433159][ C0] CPU: 0 PID: 3560 Comm: udevd Not tainted 5.15.189-syzkaller #0 [ 152.440851][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 152.450888][ C0] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 152.457039][ C0] Code: 24 45 31 f6 31 ff 89 de e8 ed f7 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 70 f4 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 152.476729][ C0] RSP: 0018:ffffc90000007b58 EFLAGS: 00010006 [ 152.482789][ C0] RAX: ffffffff819ecfb0 RBX: 0000000000000008 RCX: ffff88807c8f0000 [ 152.490838][ C0] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000000 [ 152.498879][ C0] RBP: 0000000000000000 R08: dffffc0000000000 R09: ffffed100f91e001 [ 152.506856][ C0] R10: ffffed100f91e001 R11: 1ffff1100f91e000 R12: ffff88807c8f1788 [ 152.514824][ C0] R13: 00007ffffffff000 R14: ffffc90000007bc8 R15: 0000000020000000 [ 152.522959][ C0] FS: 00007f3cdce8a880(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 152.532236][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 152.539097][ C0] CR2: 0000000020000000 CR3: 0000000029382000 CR4: 00000000003526f0 [ 152.547069][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 152.555203][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 152.563227][ C0] Call Trace: [ 152.566502][ C0] [ 152.569336][ C0] bpf_probe_read_compat+0xdd/0x170 [ 152.574623][ C0] bpf_prog_63d51858d7cca270+0x3d/0xf68 [ 152.580161][ C0] bpf_trace_run2+0x15b/0x2d0 [ 152.584833][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 152.590801][ C0] ? bpf_trace_run1+0x2d0/0x2d0 [ 152.595729][ C0] ? __bpf_trace_hrtimer_init+0x30/0x30 [ 152.601351][ C0] __traceiter_hrtimer_start+0x6a/0xb0 [ 152.606794][ C0] enqueue_hrtimer+0x314/0x370 [ 152.611550][ C0] __hrtimer_run_queues+0x65a/0xc40 [ 152.616819][ C0] ? snd_hrtimer_stop+0x90/0x90 [ 152.621661][ C0] ? hrtimer_interrupt+0x8d0/0x8d0 [ 152.626927][ C0] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 152.632999][ C0] hrtimer_interrupt+0x3bb/0x8d0 [ 152.638034][ C0] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 152.644034][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 152.649666][ C0] [ 152.652581][ C0] [ 152.655492][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 152.661456][ C0] RIP: 0010:check_preemption_disabled+0x18/0x110 [ 152.667796][ C0] Code: 00 cc 48 c7 c7 e0 92 59 8a 48 c7 c6 20 93 59 8a eb 00 55 41 57 41 56 53 48 83 ec 10 65 48 8b 04 25 28 00 00 00 48 89 44 24 08 <65> 8b 05 a9 d7 59 76 65 8b 0d 12 32 5a 76 f7 c1 ff ff ff 7f 74 1f [ 152.687470][ C0] RSP: 0018:ffffc900012df788 EFLAGS: 00000286 [ 152.693624][ C0] RAX: 95e613c1ec281a00 RBX: 0000000000000000 RCX: ffffffff815c77b9 [ 152.701688][ C0] RDX: 0000000000000000 RSI: ffffffff8a599320 RDI: ffffffff8a5992e0 [ 152.709655][ C0] RBP: ffffc900012df8e8 R08: dffffc0000000000 R09: fffffbfff1ad2dd6 [ 152.717705][ C0] R10: fffffbfff1ad2dd6 R11: 1ffffffff1ad2dd5 R12: 1ffff1102901dd63 [ 152.725664][ C0] R13: dffffc0000000000 R14: ffff8881480eeb18 R15: 1ffff9200025bf08 [ 152.733720][ C0] ? lock_release+0xa9/0x870 [ 152.738409][ C0] rcu_is_watching+0x11/0xa0 [ 152.743077][ C0] lock_release+0xba/0x870 [ 152.747485][ C0] ? lockref_get_not_dead+0x72/0xb0 [ 152.752753][ C0] ? do_raw_spin_lock+0x11d/0x280 [ 152.757784][ C0] ? __lock_acquire+0x7c60/0x7c60 [ 152.762943][ C0] ? __rwlock_init+0x140/0x140 [ 152.767885][ C0] _raw_spin_unlock+0x12/0x40 [ 152.772546][ C0] lockref_get_not_dead+0x72/0xb0 [ 152.777556][ C0] try_to_unlazy+0x2ad/0x6d0 [ 152.782305][ C0] path_openat+0x5cc/0x2f30 [ 152.786911][ C0] ? __kasan_slab_alloc+0xb3/0xd0 [ 152.792046][ C0] ? __kasan_slab_alloc+0x9c/0xd0 [ 152.797062][ C0] ? slab_post_alloc_hook+0x4c/0x380 [ 152.802331][ C0] ? verify_lock_unused+0x140/0x140 [ 152.807518][ C0] ? __x64_sys_openat+0x135/0x160 [ 152.812555][ C0] ? do_filp_open+0x3e0/0x3e0 [ 152.817306][ C0] do_filp_open+0x1b3/0x3e0 [ 152.821878][ C0] ? vfs_tmpfile+0x300/0x300 [ 152.826454][ C0] ? _raw_spin_unlock+0x24/0x40 [ 152.831294][ C0] ? alloc_fd+0x598/0x630 [ 152.835606][ C0] do_sys_openat2+0x142/0x4a0 [ 152.840355][ C0] ? __lock_acquire+0x7c60/0x7c60 [ 152.845455][ C0] ? do_sys_open+0xe0/0xe0 [ 152.849978][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 152.855945][ C0] ? lock_chain_count+0x20/0x20 [ 152.860892][ C0] ? vtime_user_exit+0x2dc/0x400 [ 152.865901][ C0] __x64_sys_openat+0x135/0x160 [ 152.870736][ C0] do_syscall_64+0x4c/0xa0 [ 152.875219][ C0] ? clear_bhb_loop+0x30/0x80 [ 152.879889][ C0] ? clear_bhb_loop+0x30/0x80 [ 152.884659][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 152.890712][ C0] RIP: 0033:0x7f3cdcf78407 [ 152.895202][ C0] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 152.914787][ C0] RSP: 002b:00007ffc5c519e60 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 152.923199][ C0] RAX: ffffffffffffffda RBX: 00007f3cdce8a880 RCX: 00007f3cdcf78407 [ 152.931205][ C0] RDX: 0000000000080141 RSI: 0000560a8375702e RDI: ffffffffffffff9c [ 152.939244][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 152.947607][ C0] R10: 00000000000001a4 R11: 0000000000000202 R12: 00000000ffffffff [ 152.955662][ C0] R13: 00000000ffffffff R14: ffffffffffffffff R15: 00007ffc5c51a180 [ 152.963799][ C0] [ 152.966824][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 152.974096][ C0] CPU: 0 PID: 3560 Comm: udevd Not tainted 5.15.189-syzkaller #0 [ 152.981985][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 152.992117][ C0] Call Trace: [ 152.995390][ C0] [ 152.998262][ C0] dump_stack_lvl+0x168/0x230 [ 153.003027][ C0] ? show_regs_print_info+0x20/0x20 [ 153.008204][ C0] ? load_image+0x3b0/0x3b0 [ 153.012708][ C0] panic+0x2c9/0x7f0 [ 153.016593][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 153.021170][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 153.026710][ C0] __warn+0x248/0x2b0 [ 153.030674][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 153.036212][ C0] report_bug+0x1b7/0x2e0 [ 153.040786][ C0] handle_bug+0x3a/0x70 [ 153.045008][ C0] exc_invalid_op+0x16/0x40 [ 153.049667][ C0] asm_exc_invalid_op+0x16/0x20 [ 153.054504][ C0] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 153.060639][ C0] Code: 24 45 31 f6 31 ff 89 de e8 ed f7 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 70 f4 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 153.080396][ C0] RSP: 0018:ffffc90000007b58 EFLAGS: 00010006 [ 153.086532][ C0] RAX: ffffffff819ecfb0 RBX: 0000000000000008 RCX: ffff88807c8f0000 [ 153.094487][ C0] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000000 [ 153.102438][ C0] RBP: 0000000000000000 R08: dffffc0000000000 R09: ffffed100f91e001 [ 153.110389][ C0] R10: ffffed100f91e001 R11: 1ffff1100f91e000 R12: ffff88807c8f1788 [ 153.118337][ C0] R13: 00007ffffffff000 R14: ffffc90000007bc8 R15: 0000000020000000 [ 153.126294][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 153.131831][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 153.137358][ C0] bpf_probe_read_compat+0xdd/0x170 [ 153.142537][ C0] bpf_prog_63d51858d7cca270+0x3d/0xf68 [ 153.148095][ C0] bpf_trace_run2+0x15b/0x2d0 [ 153.152750][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 153.158627][ C0] ? bpf_trace_run1+0x2d0/0x2d0 [ 153.163477][ C0] ? __bpf_trace_hrtimer_init+0x30/0x30 [ 153.169024][ C0] __traceiter_hrtimer_start+0x6a/0xb0 [ 153.174459][ C0] enqueue_hrtimer+0x314/0x370 [ 153.179208][ C0] __hrtimer_run_queues+0x65a/0xc40 [ 153.184390][ C0] ? snd_hrtimer_stop+0x90/0x90 [ 153.189313][ C0] ? hrtimer_interrupt+0x8d0/0x8d0 [ 153.194406][ C0] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 153.200623][ C0] hrtimer_interrupt+0x3bb/0x8d0 [ 153.205547][ C0] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 153.211686][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 153.217403][ C0] [ 153.220327][ C0] [ 153.223244][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 153.229306][ C0] RIP: 0010:check_preemption_disabled+0x18/0x110 [ 153.235739][ C0] Code: 00 cc 48 c7 c7 e0 92 59 8a 48 c7 c6 20 93 59 8a eb 00 55 41 57 41 56 53 48 83 ec 10 65 48 8b 04 25 28 00 00 00 48 89 44 24 08 <65> 8b 05 a9 d7 59 76 65 8b 0d 12 32 5a 76 f7 c1 ff ff ff 7f 74 1f [ 153.255603][ C0] RSP: 0018:ffffc900012df788 EFLAGS: 00000286 [ 153.261662][ C0] RAX: 95e613c1ec281a00 RBX: 0000000000000000 RCX: ffffffff815c77b9 [ 153.269619][ C0] RDX: 0000000000000000 RSI: ffffffff8a599320 RDI: ffffffff8a5992e0 [ 153.277763][ C0] RBP: ffffc900012df8e8 R08: dffffc0000000000 R09: fffffbfff1ad2dd6 [ 153.285890][ C0] R10: fffffbfff1ad2dd6 R11: 1ffffffff1ad2dd5 R12: 1ffff1102901dd63 [ 153.293842][ C0] R13: dffffc0000000000 R14: ffff8881480eeb18 R15: 1ffff9200025bf08 [ 153.301895][ C0] ? lock_release+0xa9/0x870 [ 153.306480][ C0] rcu_is_watching+0x11/0xa0 [ 153.311051][ C0] lock_release+0xba/0x870 [ 153.315541][ C0] ? lockref_get_not_dead+0x72/0xb0 [ 153.320803][ C0] ? do_raw_spin_lock+0x11d/0x280 [ 153.325820][ C0] ? __lock_acquire+0x7c60/0x7c60 [ 153.330827][ C0] ? __rwlock_init+0x140/0x140 [ 153.335571][ C0] _raw_spin_unlock+0x12/0x40 [ 153.340234][ C0] lockref_get_not_dead+0x72/0xb0 [ 153.345268][ C0] try_to_unlazy+0x2ad/0x6d0 [ 153.349866][ C0] path_openat+0x5cc/0x2f30 [ 153.354475][ C0] ? __kasan_slab_alloc+0xb3/0xd0 [ 153.359579][ C0] ? __kasan_slab_alloc+0x9c/0xd0 [ 153.364585][ C0] ? slab_post_alloc_hook+0x4c/0x380 [ 153.369937][ C0] ? verify_lock_unused+0x140/0x140 [ 153.375290][ C0] ? __x64_sys_openat+0x135/0x160 [ 153.380486][ C0] ? do_filp_open+0x3e0/0x3e0 [ 153.385169][ C0] do_filp_open+0x1b3/0x3e0 [ 153.389654][ C0] ? vfs_tmpfile+0x300/0x300 [ 153.394239][ C0] ? _raw_spin_unlock+0x24/0x40 [ 153.399077][ C0] ? alloc_fd+0x598/0x630 [ 153.403478][ C0] do_sys_openat2+0x142/0x4a0 [ 153.408235][ C0] ? __lock_acquire+0x7c60/0x7c60 [ 153.413340][ C0] ? do_sys_open+0xe0/0xe0 [ 153.417930][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 153.423893][ C0] ? lock_chain_count+0x20/0x20 [ 153.428729][ C0] ? vtime_user_exit+0x2dc/0x400 [ 153.433647][ C0] __x64_sys_openat+0x135/0x160 [ 153.438480][ C0] do_syscall_64+0x4c/0xa0 [ 153.442877][ C0] ? clear_bhb_loop+0x30/0x80 [ 153.447533][ C0] ? clear_bhb_loop+0x30/0x80 [ 153.452186][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 153.458066][ C0] RIP: 0033:0x7f3cdcf78407 [ 153.462468][ C0] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 153.482452][ C0] RSP: 002b:00007ffc5c519e60 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 153.490974][ C0] RAX: ffffffffffffffda RBX: 00007f3cdce8a880 RCX: 00007f3cdcf78407 [ 153.498932][ C0] RDX: 0000000000080141 RSI: 0000560a8375702e RDI: ffffffffffffff9c [ 153.506982][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 153.515019][ C0] R10: 00000000000001a4 R11: 0000000000000202 R12: 00000000ffffffff [ 153.523070][ C0] R13: 00000000ffffffff R14: ffffffffffffffff R15: 00007ffc5c51a180 [ 153.531118][ C0] [ 153.534565][ C0] Kernel Offset: disabled [ 153.538897][ C0] Rebooting in 86400 seconds..