last executing test programs: 4.860611592s ago: executing program 2 (id=189): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a011e00000000000000000a0000060900020073797a31000000000900010073797a31000000001400038010"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) ioctl$FE_SET_PROPERTY(0xffffffffffffffff, 0x40106f52, &(0x7f0000000180)={0x3e, 0x0}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'veth0_to_hsr\x00', 0x0}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4.860119303s ago: executing program 3 (id=190): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42902, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x44, 0x2c, 0xd27, 0x870b525, 0x8000, {0x0, 0x0, 0x0, r2, {0x8, 0xc}, {}, {0xa, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2204403c}, 0x0) 4.672465456s ago: executing program 2 (id=192): r0 = syz_open_dev$sndpcmp(&(0x7f0000000340), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604110, &(0x7f0000000600)={0x0, [[0x9, 0x0, 0x0, 0x9], [0x1000], [0x2]], '\x00', [{}, {}, {}, {}, {}, {}, {}, {0x9, 0xfffffffc}], '\x00', 0x0, 0x0, 0x0, 0x2}) 4.595089018s ago: executing program 3 (id=194): syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x55) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) setsockopt$MRT_DONE(0xffffffffffffffff, 0x0, 0xc9, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x235, &(0x7f0000000140)={0x0, 0x4533, 0x10100, 0x3, 0x3d8}, &(0x7f0000000300), 0x0, &(0x7f00000002c0)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f0000000000)={0x0, 0x2, 0x8}) fcntl$lock(r1, 0x7, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0xfffffff8, 0x0, 0x0, 0x4}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000400)=ANY=[@ANYRES16, @ANYRESHEX=0x0, @ANYRES8=r1, @ANYBLOB, @ANYRESOCT, @ANYRESOCT=r1], 0x0) ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4008af00, &(0x7f00000000c0)=0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) fcntl$lock(0xffffffffffffffff, 0x3, &(0x7f0000000200)={0x1, 0x0, 0x100000000000081, 0xcf}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'hsr0\x00'}) socket$nl_route(0x10, 0x3, 0x0) 4.578843169s ago: executing program 2 (id=195): close(0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendto$inet6(r0, &(0x7f00000004c0)="b0", 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) shutdown(r0, 0x1) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x10) 3.960537072s ago: executing program 2 (id=197): r0 = semget(0x1, 0x4, 0x39c) semop(r0, &(0x7f00000002c0), 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9}, 0x50) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000040)=0x85) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r1, 0x6, 0x8, 0x0, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) syz_io_uring_setup(0x186, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_usb_connect(0x2, 0x47, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000a3233910daa658744d2d010203010902350001080010000904df0003080662ff09050c0220000606050710003e8fad67020102"], 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001100), 0x20402, 0x0) write$proc_mixer(r3, &(0x7f0000000280)=[{'IMIX', @val={' \'', 'Master Playback Volume'}}], 0x33) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000000080)={[{0x0, 0x3ff, 0x2, 0x9, 0x35, 0x0, 0x74, 0x1, 0x80, 0x6, 0x9, 0x20, 0x6}, {0x0, 0xa157, 0xf9, 0x6, 0x4d, 0x4, 0x70, 0x4, 0x8, 0x5, 0xd7, 0x2, 0x6}, {0x7, 0x0, 0x7, 0x3, 0x6, 0x2, 0x9, 0xa, 0x7, 0x8, 0x6, 0x4, 0xffffffff}], 0x7}) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 3.352483056s ago: executing program 4 (id=206): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x20, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) socket$nl_audit(0x10, 0x3, 0x9) setns(r5, 0x24020000) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42792000) fsopen(&(0x7f0000000180)='ext4\x00', 0x0) 3.048058292s ago: executing program 1 (id=209): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={0x0}, 0x1, 0x0, 0x0, 0x8840}, 0x8000) 2.896513006s ago: executing program 1 (id=210): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x80000001}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0) 2.506986925s ago: executing program 4 (id=211): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000180)=[@acquire={0x40046305, 0x1}], 0x0, 0x0, 0x0}) 2.425348916s ago: executing program 4 (id=212): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x80000001}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x7c}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 1.856449599s ago: executing program 3 (id=213): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xfe, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 1.845169639s ago: executing program 0 (id=215): rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1.78755935s ago: executing program 2 (id=216): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r0 = eventfd(0x34) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f00003b6000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x32e6, &(0x7f0000000040)={0x0, 0xc89a, 0xc000, 0xfdfffffc, 0x65}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x6f9d, 0x7721, 0x16, 0x0, 0x0) write$eventfd(r0, &(0x7f0000000300)=0x101, 0x8) 1.720476382s ago: executing program 0 (id=217): r0 = syz_open_dev$loop(&(0x7f0000000180), 0x800000000000006, 0x128202) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x13, r1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f00000001c0)={@local, @remote}, 0xc) 1.633408294s ago: executing program 3 (id=218): syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x8801) r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0xffb) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000001180)={{0x3, 0x2, 0x80000000, 0x100, 'syz1\x00', 0xffffffff}, 0x0, [0x6ba74c59, 0x85, 0xf, 0xfff, 0x1000000009, 0x6, 0x7, 0xdb, 0x0, 0xf0, 0x3, 0x5, 0x8001, 0xfffffffffffffffb, 0x6, 0x2938, 0x100, 0xfffffffffffffff8, 0xfffffffffffffff9, 0xfffffffffffffffb, 0x5, 0x9025, 0x5, 0x5, 0x7, 0x100000001, 0x40, 0x9, 0x9, 0x100000005, 0x100, 0x9, 0xb, 0x1a7427cb, 0x7, 0x8, 0x7, 0x6, 0x5, 0xfffd, 0xffffffff, 0xffffffffffffff3d, 0x800, 0x5, 0xe4e, 0x9, 0x6, 0xa8, 0x659, 0xc2, 0xfff, 0x2, 0xffff, 0xffffffffffffff53, 0x0, 0x101, 0x7f, 0x100000000004, 0x7, 0x10, 0x2, 0x40d1c, 0x0, 0x9, 0x8001, 0x0, 0x1, 0x6, 0x4, 0x4, 0x4, 0x1, 0x9, 0xe3, 0xfa0, 0x9, 0xffffffffffffbffd, 0x401, 0x8, 0x7fffffffffffffff, 0x101, 0xffffffffffffff2f, 0xe, 0x4, 0x4040000, 0xffffffff, 0x1, 0x7, 0x5, 0x1ff, 0xa46, 0xfff7fffffffffb27, 0x100, 0x5, 0x7, 0x5, 0x3, 0xfffffdfffffffff9, 0x6, 0x8, 0x3, 0x4, 0x9, 0x800027ee, 0x0, 0x0, 0x0, 0x4, 0x101, 0x8, 0x6, 0x8000000000000001, 0x4, 0x3, 0x1, 0xa03, 0x8001, 0x3, 0x9, 0x87, 0x80, 0x3, 0x2, 0x2c, 0xa, 0x6, 0x1, 0x8]}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000c80)={{0x3, 0x1, 0x1, 0x3557, 'syz1\x00', 0x200005}, 0x1, [0x2, 0x84, 0x1c00000000000002, 0x7fffffffffffffff, 0x80000003, 0x3896, 0x5, 0x3, 0x8, 0xffffffff, 0xfffffffffffffff7, 0x9, 0x7, 0x80, 0x2fc2f8ae, 0x1, 0x101, 0xa70, 0x7fffffffffffffff, 0xa1, 0xfffffffffffffff8, 0x40, 0x2, 0x7, 0x10, 0x9, 0x8, 0x2, 0x6, 0x6, 0x6, 0x5, 0x2, 0x101, 0xffff, 0x144be44d, 0xc3b, 0x400000000003, 0x800000, 0x12, 0x2, 0x8, 0xbb9, 0x2, 0x8, 0x9, 0xb1e, 0x8, 0xf, 0x651, 0x8, 0x8000, 0xc, 0xffffffffffffffff, 0x4, 0x0, 0x400, 0x1, 0x5, 0x80000000, 0x5, 0x81, 0x5, 0x1, 0x6, 0xb, 0x4, 0x5af0512f, 0x8001, 0x5, 0xfffd, 0x8, 0x1, 0x100000001, 0x81, 0x3, 0x1, 0x800, 0xf5, 0x7, 0x1, 0x401, 0xf, 0x4, 0x2c, 0x5, 0x8, 0x2, 0x3, 0x5, 0x80000000, 0xed, 0x9, 0x7, 0x3, 0x7, 0x500000000000000, 0x100, 0xfffffffffffffffb, 0x6, 0xf, 0xf95, 0x4, 0x4, 0x8, 0x61, 0x1, 0xe, 0x8, 0x1, 0x2, 0x0, 0x400000000, 0x13ff, 0xa, 0xd3, 0x80, 0x6, 0x1000, 0x401, 0xe51b, 0x9, 0x7, 0x3, 0x9, 0x5, 0x9, 0x1ff]}) 1.591940485s ago: executing program 2 (id=219): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@getlink={0x20, 0x12, 0x800, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x200, 0x644}}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x814) mkdir(&(0x7f00000002c0)='./file0\x00', 0xa0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000080)='./file0\x00') r2 = open(&(0x7f00000000c0)='./file0\x00', 0x149442, 0x0) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @loopback}, 0x10) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x80049367, &(0x7f0000000100)) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r6, 0x400455c8, 0x4) connect$pppl2tp(r4, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) sendfile(r4, r3, 0x0, 0x80001d00c0d0) unlink(0x0) socket$pppoe(0x18, 0x1, 0x0) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f0000000040)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}, 'veth1_to_team\x00'}}, 0x1e) link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000000)='./file0\x00') mknodat$loop(0xffffffffffffff9c, 0x0, 0x6004, 0x1) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f00000003c0)=0xa, 0x4) 1.544541366s ago: executing program 0 (id=220): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={0x0}, 0x1, 0x0, 0x0, 0x8840}, 0x8000) 1.439401548s ago: executing program 4 (id=221): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x20, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) socket$nl_audit(0x10, 0x3, 0x9) setns(r4, 0x24020000) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r2, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42792000) fsopen(&(0x7f0000000180)='ext4\x00', 0x0) 1.33535706s ago: executing program 3 (id=222): socket$nl_audit(0x10, 0x3, 0x9) socket$packet(0x11, 0x3, 0x300) socket$inet6_sctp(0xa, 0x5, 0x84) openat$nullb(0xffffffffffffff9c, &(0x7f0000000340), 0x22a80, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f0000000280)='hfs\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c000180060006006558000014000280100014800c00", @ANYRES8=r1], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 1.288467171s ago: executing program 0 (id=223): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x89a, &(0x7f0000000180)=ANY=[@ANYRES32], 0x1, 0x30e, &(0x7f0000000f00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000440)='\x85\xb1\xccBpy\xc1s\xf9\\\x98\xce\xa4g\xd2\xd4\xdei\xa1\x8e\x9c\xe4\x82\x05\xf3u\fep\x8eL\xd7u@6\xefq\xa1\x9a\xfb\x1f$\x19\xd3\xa5R\xcc\x84\xdc\xcfJ\t\x04z\xc9\x89D\xad3\xfd\x9ei\xb5\x11\x8a\xc9_\xc3|\xb2^g\xe5Gt\x1e\xc6\x81\xb4\xdd\xd7V\"\x92\xbci\x97#\xfc\xd1\x8d\x8b\xe7\xda4\xb7e\b\xcc\xf7\'&\xe0\xa2\xb6\xb3\xfc\xd5[\xd9\xf6\xb7\xa8\xa7\xaf\\\xc1\x89]K\x9c\xc9IM\x02\a3\xcf\x897`j_FtM\x19\xdb\xf2U%L\x11\fx\xd2/*\xa9\xbd2\xd6\x9c+\x91~oF\xa4\xd3\xab\x9d\xa3\xd3\xa5\xe4&>fI*K\x12^k\xd3\xf6}\x11\x92eA9\a\xba\xaf\xabyq\xc8\xd5P\x9e-S\xdf\x1d\xb1\xc2\x18\xa9\xfd\x9b\x86hn\xf2\x14s\x1b\x038S\xafh\x95\x0f\xcd\xeb\xce\xd5\x91\xa8\'\x11c\xca\xc5\x00\xcdW0\xbeh\x12s\xa1C!\xe1\xc2\xeb\xa1\x82^\x11\xf8\x1d\x9d\xc5\xe5|C\x94\xcb\xb5\xbc\xa3\xd2\xdc\xec\xc0\x00}P\xd9\x90\x8a\xc5\xef\xce\xfd\xbf]\x7f\x8e\xffT=M|A\x1b\x83d\xf6\xca\xf4\xd6\xfdJ\xf8\r9\xc0\xc4\xfb\x92\x80\xfd\xbd\x00\xa9e\x00\xb7\xde\xd2\t\xe5O\xa5=\xf0;\xe1\xc0\xf2i_\x92pA') syz_open_procfs(r0, &(0x7f00000001c0)='totmaps\x00') openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x3d, 0x7fff0000}]}) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') socket$nl_route(0x10, 0x3, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KDDISABIO(r3, 0x4b37) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TIOCSLCKTRMIOS(r3, 0x5457, 0x0) 1.287613362s ago: executing program 1 (id=224): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0x401, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x5, @loopback}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}]}, 0x58}}, 0x0) 1.023685717s ago: executing program 1 (id=225): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x50) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0xffffffff, 0xe661, 0x629, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x6, 0x10002, 0x0, 0x5, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x7, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2c0, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0xd, 0x4e2, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x7c9d, 0x9, 0x8, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x5, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x0, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x1000]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 445.2767ms ago: executing program 4 (id=226): socket$nl_audit(0x10, 0x3, 0x9) socket$packet(0x11, 0x3, 0x300) socket$inet6_sctp(0xa, 0x5, 0x84) openat$nullb(0xffffffffffffff9c, &(0x7f00000002c0), 0x62080, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) syz_emit_ethernet(0x2e, &(0x7f00000004c0)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @broadcast}, {0x0, 0x883e, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x7, 0x0, @void}}}}}}}, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x402) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ed56b6c5", 0x4) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000006c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 347.412872ms ago: executing program 3 (id=227): r0 = semget(0x1, 0x4, 0x39c) semop(r0, &(0x7f00000002c0), 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9}, 0x50) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000040)=0x85) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r1, 0x6, 0x8, 0x0, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) syz_io_uring_setup(0x186, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_usb_connect(0x2, 0x47, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000a3233910daa658744d2d010203010902350001080010000904df0003080662ff09050c0220000606050710003e8fad67020102"], 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001100), 0x20402, 0x0) write$proc_mixer(r3, &(0x7f0000000280)=[{'IMIX', @val={' \'', 'Master Playback Volume'}}], 0x33) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000000080)={[{0x0, 0x3ff, 0x2, 0x9, 0x35, 0x0, 0x74, 0x1, 0x80, 0x6, 0x9, 0x20, 0x6}, {0x0, 0xa157, 0xf9, 0x6, 0x4d, 0x4, 0x70, 0x4, 0x8, 0x5, 0xd7, 0x2, 0x6}, {0x7, 0x0, 0x7, 0x3, 0x6, 0x2, 0x9, 0xa, 0x7, 0x8, 0x6, 0x4, 0xffffffff}], 0x7}) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) 92.475938ms ago: executing program 0 (id=228): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112b0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01ac69398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc786b409ac930c90ff90f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d85893f229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ef6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b6214912a517810200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09e3187a10d905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5de0900000000000000cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367638cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e1217c1342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c67df4c6505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734837ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a6d072034cecc457776c5fa1f33b0203c07052c6bc314b0ac5c63bc2083c9cda0b7480e0b17854ffcc76176ce266bc698f7921b8afe798a7a5ed33ab0374455ee368fda99a0e681bf9426831b193395cb01a7332a50aac841cb7d48a1768a7640a9820631ba775a2d4f12e8e717eaaa2a6d14fee0c15f36c203dbc7c06128bec84231d43e152ef19ce027436fb4ebb9fce431b913f4817597a6f53d1626f9d1cb7b36fb18ac19547a9b20ede70c81a75686cea85dcd34408128da7cab045541bc6b9a0a79f63f2e7646356e04b977c9f47467537015240b974184be9c54b7c628ae4d97ebdb06070344468994afbaac71e5ffac2c61d9af66f9de2760a38e968a781528531c1c936a02065be48f1eee77be878873206d65bd0b1241fab9139abd7f40febe81fed3684e6b59273da01f1743c6a5df300ec59c65e8174fc2d95a62ca7b937289ad14107333007eab833a5849eb19f18ae41743dfb949377e"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xfe, 0x60000000, &(0x7f0000000100)="b9ff03076844268cb89e14f008004be0ffff00124000632f77fbacf01416ac141416440c05114d2f87e5940c05ab860c13f2325f1a39010702038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) 80.424268ms ago: executing program 1 (id=229): r0 = syz_open_dev$vivid(&(0x7f0000001e40), 0x1, 0x2) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000001e80)={0x2, 0xe, 0x80, "3652ca3753867a06b0e049c76d71813e6e727222ab8828e6e1410a2f9420a768", 0x41415270}) 54.521819ms ago: executing program 0 (id=230): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket(0x2b, 0x1, 0x1) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x5) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) close(0x3) ioctl$VT_DISALLOCATE(r3, 0x5608) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 102.58µs ago: executing program 4 (id=231): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x80000001}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x7c}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 0s ago: executing program 1 (id=232): timer_create(0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, 0x0) fsopen(0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x24000840) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8000f28, 0x5) sendmmsg$inet(r0, &(0x7f0000003240)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000e80)="2389", 0x2}], 0x1}}], 0x1, 0x4040040) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.30' (ED25519) to the list of known hosts. [ 60.382069][ T4173] cgroup: Unknown subsys name 'net' [ 60.498250][ T4173] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 62.009522][ T4173] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 63.726773][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 63.743617][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 63.806042][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 63.839023][ T4196] chnl_net:caif_netlink_parms(): no params data found [ 63.894950][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 63.968360][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.975680][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.984532][ T4185] device bridge_slave_0 entered promiscuous mode [ 64.003437][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.010546][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.018743][ T4185] device bridge_slave_1 entered promiscuous mode [ 64.033133][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.040325][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.048514][ T4186] device bridge_slave_0 entered promiscuous mode [ 64.056770][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.064087][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.072019][ T4186] device bridge_slave_1 entered promiscuous mode [ 64.095263][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.102566][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.110399][ T4194] device bridge_slave_0 entered promiscuous mode [ 64.140225][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.147503][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.155644][ T4194] device bridge_slave_1 entered promiscuous mode [ 64.162955][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.170023][ T4196] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.178153][ T4196] device bridge_slave_0 entered promiscuous mode [ 64.194166][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.219651][ T4196] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.227009][ T4196] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.235219][ T4196] device bridge_slave_1 entered promiscuous mode [ 64.244057][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.255231][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.276726][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.284380][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.292625][ T4187] device bridge_slave_0 entered promiscuous mode [ 64.306645][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.313755][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.321637][ T4187] device bridge_slave_1 entered promiscuous mode [ 64.336301][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.354571][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.367182][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.415863][ T4185] team0: Port device team_slave_0 added [ 64.430646][ T4185] team0: Port device team_slave_1 added [ 64.438189][ T4196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.449992][ T4186] team0: Port device team_slave_0 added [ 64.458394][ T4194] team0: Port device team_slave_0 added [ 64.467010][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.485401][ T4196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.495881][ T4186] team0: Port device team_slave_1 added [ 64.503483][ T4194] team0: Port device team_slave_1 added [ 64.517944][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.565834][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.573167][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.599535][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.619043][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.626128][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.652804][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.665069][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.672482][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.698787][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.716870][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.723947][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.750099][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.764184][ T4196] team0: Port device team_slave_0 added [ 64.781644][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.788791][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.815076][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.826738][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.833923][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.860200][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.873576][ T4187] team0: Port device team_slave_0 added [ 64.888043][ T4196] team0: Port device team_slave_1 added [ 64.913987][ T4187] team0: Port device team_slave_1 added [ 64.945010][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.952123][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.978278][ T4196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.007355][ T4186] device hsr_slave_0 entered promiscuous mode [ 65.014405][ T4186] device hsr_slave_1 entered promiscuous mode [ 65.027947][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.035181][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.061362][ T4196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.086204][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.093283][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.119341][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.136078][ T4185] device hsr_slave_0 entered promiscuous mode [ 65.143535][ T4185] device hsr_slave_1 entered promiscuous mode [ 65.150233][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.158301][ T4185] Cannot create hsr debugfs directory [ 65.171541][ T4194] device hsr_slave_0 entered promiscuous mode [ 65.178543][ T4194] device hsr_slave_1 entered promiscuous mode [ 65.185192][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.193054][ T4194] Cannot create hsr debugfs directory [ 65.206042][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.213285][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.239357][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.340316][ T4196] device hsr_slave_0 entered promiscuous mode [ 65.348025][ T4196] device hsr_slave_1 entered promiscuous mode [ 65.354963][ T4196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.363202][ T4196] Cannot create hsr debugfs directory [ 65.373275][ T4187] device hsr_slave_0 entered promiscuous mode [ 65.379960][ T4187] device hsr_slave_1 entered promiscuous mode [ 65.386872][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.395353][ T4187] Cannot create hsr debugfs directory [ 65.442790][ T4190] Bluetooth: hci4: command 0x0409 tx timeout [ 65.449460][ T4190] Bluetooth: hci2: command 0x0409 tx timeout [ 65.455759][ T1108] Bluetooth: hci3: command 0x0409 tx timeout [ 65.457971][ T4190] Bluetooth: hci0: command 0x0409 tx timeout [ 65.478826][ T4190] Bluetooth: hci1: command 0x0409 tx timeout [ 65.722329][ T4185] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.737441][ T4185] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.747625][ T4185] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.759755][ T4185] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.802735][ T4186] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 65.818852][ T4186] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 65.836557][ T4186] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 65.854183][ T4186] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 65.899619][ T4187] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.916183][ T4187] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.927285][ T4187] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 65.954919][ T4187] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 65.996284][ T4194] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 66.014158][ T4194] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 66.043163][ T4194] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 66.058104][ T4194] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 66.073363][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.124586][ T4196] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 66.140638][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.154593][ T4196] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 66.164681][ T4196] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 66.175226][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.185392][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.204723][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.215230][ T4196] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 66.226025][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.235280][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.253867][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.260999][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.270990][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.280251][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.287555][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.297730][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.307031][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.316477][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.323608][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.333078][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.379007][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.388907][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.399355][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.409196][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.418503][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.425643][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.436902][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.445966][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.454738][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.461882][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.478653][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.488751][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.497913][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.509320][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.517747][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.553603][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.565582][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.579647][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.588578][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.600404][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.609030][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.618022][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.626798][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.637036][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.646239][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.658416][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.667186][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.678288][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.687846][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.711298][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.724419][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.744430][ T4186] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 66.755326][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.767492][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.776030][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.785333][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.795415][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.805243][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.814131][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.824162][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.832160][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.843778][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.854107][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.863800][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.874438][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.881518][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.896278][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.914385][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.939582][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.955458][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.971206][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.978366][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.992273][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.019895][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.030370][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.040556][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.047698][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.058691][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.068713][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.077785][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.084906][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.093576][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.140381][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.148177][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.157902][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.174442][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.184932][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.194022][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.203683][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.212609][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.221579][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.231354][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.240362][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.250250][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.286275][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.295519][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.306246][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.315948][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.326033][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.335454][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.345050][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.355027][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.366912][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.379076][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.395574][ T4196] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.407749][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.419006][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.432643][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.443056][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.451004][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.459883][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.484486][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.491567][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.504355][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.513522][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.520629][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.529295][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.533779][ T4231] Bluetooth: hci1: command 0x041b tx timeout [ 67.544254][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.553837][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.560927][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.568457][ T4231] Bluetooth: hci0: command 0x041b tx timeout [ 67.580450][ T4231] Bluetooth: hci3: command 0x041b tx timeout [ 67.593160][ T4231] Bluetooth: hci2: command 0x041b tx timeout [ 67.608200][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.608400][ T4231] Bluetooth: hci4: command 0x041b tx timeout [ 67.642810][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.654593][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.692512][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.701332][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.715118][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.727390][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.737205][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.750356][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.759597][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.770174][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.783011][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.790160][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.821558][ T4196] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.858771][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.881179][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.896226][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.907822][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.920634][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.977247][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.989198][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.015304][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.037380][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.067396][ T4185] device veth0_vlan entered promiscuous mode [ 68.103549][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.111068][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.127971][ T4185] device veth1_vlan entered promiscuous mode [ 68.148727][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.161722][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.171779][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.193627][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.201200][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.253349][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.269775][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.278079][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.286227][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.295551][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.312121][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.320808][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.346028][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.359676][ T4185] device veth0_macvtap entered promiscuous mode [ 68.370730][ T4185] device veth1_macvtap entered promiscuous mode [ 68.385152][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.394701][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.403972][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.412107][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.420359][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.429855][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.438831][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.448603][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.479772][ T4194] device veth0_vlan entered promiscuous mode [ 68.489291][ T4187] device veth0_vlan entered promiscuous mode [ 68.505956][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.515610][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.525498][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.533958][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.546364][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.554396][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.571337][ T4194] device veth1_vlan entered promiscuous mode [ 68.586439][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.596767][ T4187] device veth1_vlan entered promiscuous mode [ 68.622497][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.630657][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.639440][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.648390][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.657980][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.667838][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.676710][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.690094][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.709298][ T4186] device veth0_vlan entered promiscuous mode [ 68.723492][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.732680][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.741322][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.750648][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.759713][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.768827][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.777739][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.787037][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.796227][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.805644][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.819412][ T4185] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.828486][ T4185] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.837737][ T4185] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.850096][ T4185] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.861543][ T4196] device veth0_vlan entered promiscuous mode [ 68.891459][ T4187] device veth0_macvtap entered promiscuous mode [ 68.901383][ T4186] device veth1_vlan entered promiscuous mode [ 68.920082][ T4194] device veth0_macvtap entered promiscuous mode [ 68.938511][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.947208][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.956984][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.967042][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.976297][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.987225][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.998881][ T4187] device veth1_macvtap entered promiscuous mode [ 69.011687][ T4196] device veth1_vlan entered promiscuous mode [ 69.039117][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.051378][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.072941][ T4194] device veth1_macvtap entered promiscuous mode [ 69.096618][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.108457][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.125705][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.144026][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.158880][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.169117][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.180617][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.192649][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.208506][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.219280][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.231255][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.244727][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.254747][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.264228][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.273756][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.284451][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.293663][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.307639][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.318367][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.328831][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.340172][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.352142][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.376430][ T4186] device veth0_macvtap entered promiscuous mode [ 69.388342][ T4186] device veth1_macvtap entered promiscuous mode [ 69.396666][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.405959][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.415147][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.425909][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.436131][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.445428][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.464545][ T4187] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.473702][ T4187] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.482627][ T4187] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.491363][ T4187] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.503401][ T4194] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.512412][ T4194] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.521175][ T4194] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.530341][ T4194] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.568512][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.598037][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.612867][ T4264] Bluetooth: hci3: command 0x040f tx timeout [ 69.625806][ T4264] Bluetooth: hci0: command 0x040f tx timeout [ 69.635071][ T4264] Bluetooth: hci1: command 0x040f tx timeout [ 69.648137][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.658869][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.672765][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.683805][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.695022][ T13] Bluetooth: hci4: command 0x040f tx timeout [ 69.701248][ T13] Bluetooth: hci2: command 0x040f tx timeout [ 69.707610][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.717762][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.728600][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.740243][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.780633][ T4196] device veth0_macvtap entered promiscuous mode [ 69.789316][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.798959][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.808397][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.817549][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.827405][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.857356][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.869403][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.875980][ T4196] device veth1_macvtap entered promiscuous mode [ 69.888235][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.899425][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.909716][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.923737][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.934159][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.944973][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.956646][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.975294][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.985259][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.993940][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.004772][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.024663][ T4186] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.034061][ T4186] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.044218][ T4186] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.053227][ T4186] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.086407][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.098656][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.112288][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.123222][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.133512][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.145278][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.156759][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.169484][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.193439][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.201171][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.220584][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.246334][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.256666][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.266338][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.279276][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.290275][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.300799][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.313821][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.326140][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.336869][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.347597][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.358176][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.369358][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.387710][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.397691][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.411504][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.428077][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.446917][ T4196] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.468426][ T4196] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.478012][ T4196] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.487874][ T4196] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.515996][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.528596][ T1238] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.709639][ T1238] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.206749][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.214018][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.400345][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.478476][ T1238] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.478485][ T4257] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.511773][ T4257] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.520462][ T1238] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.542342][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.550617][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.642798][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.651151][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.684966][ T1238] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.694844][ T13] Bluetooth: hci1: command 0x0419 tx timeout [ 71.701121][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.714708][ T13] Bluetooth: hci0: command 0x0419 tx timeout [ 71.732498][ T1238] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.748327][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.771911][ T13] Bluetooth: hci3: command 0x0419 tx timeout [ 71.786009][ T4235] Bluetooth: hci2: command 0x0419 tx timeout [ 71.800524][ T4235] Bluetooth: hci4: command 0x0419 tx timeout [ 71.807426][ T4257] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.831146][ T4257] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.866103][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.222233][ T4291] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 72.315530][ T4297] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 73.471485][ T4316] netlink: 'syz.4.16': attribute type 11 has an invalid length. [ 73.536867][ T4316] fuse: Unknown parameter '0x000000000000000a' [ 75.373109][ T4353] 9pnet_virtio: no channels available for device syz [ 75.497252][ T144] Bluetooth: hci5: Frame reassembly failed (-84) [ 75.637422][ T4297] ODEBUG: Out of memory. ODEBUG disabled [ 75.852748][ T13] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 75.891903][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 76.711859][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 76.731840][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 76.741837][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 76.751838][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 76.761841][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 76.771844][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 77.221823][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 77.271821][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 77.411819][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 77.939067][ T4232] Bluetooth: hci5: command 0x1003 tx timeout [ 77.952280][ T4197] Bluetooth: hci5: sending frame failed (-49) [ 79.164507][ T13] usb 5-1: string descriptor 0 read error: -71 [ 79.170968][ T13] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 79.188602][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.202765][ T13] usb 5-1: config 0 descriptor?? [ 79.232153][ T13] usb 5-1: can't set config #0, error -71 [ 79.265175][ T13] usb 5-1: USB disconnect, device number 2 [ 79.766826][ T4403] loop2: detected capacity change from 0 to 128 [ 79.994712][ T4403] FAT-fs (loop2): Unrecognized mount option "ÿÿÿÿ" or missing value [ 80.003621][ T4190] Bluetooth: hci5: command 0x1001 tx timeout [ 80.012087][ T4197] Bluetooth: hci5: sending frame failed (-49) [ 80.490089][ T4411] loop2: detected capacity change from 0 to 128 [ 80.754766][ T26] audit: type=1326 audit(1784133770.224:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4416 comm="syz.0.51" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff27f64be59 code=0x7ffc0000 [ 80.868408][ T26] audit: type=1326 audit(1784133770.254:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4416 comm="syz.0.51" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff27f64be59 code=0x7ffc0000 [ 80.969697][ T26] audit: type=1326 audit(1784133770.254:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4416 comm="syz.0.51" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff27f64be59 code=0x7ffc0000 [ 81.033956][ T26] audit: type=1326 audit(1784133770.254:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4416 comm="syz.0.51" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff27f64be59 code=0x7ffc0000 [ 81.119153][ T26] audit: type=1326 audit(1784133770.254:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4416 comm="syz.0.51" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7ff27f64be59 code=0x7ffc0000 [ 81.152359][ T26] audit: type=1326 audit(1784133770.264:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4416 comm="syz.0.51" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff27f64be59 code=0x7ffc0000 [ 81.223084][ T26] audit: type=1326 audit(1784133770.264:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4416 comm="syz.0.51" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff27f64be59 code=0x7ffc0000 [ 81.273564][ T26] audit: type=1326 audit(1784133770.264:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4416 comm="syz.0.51" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff27f64be59 code=0x7ffc0000 [ 81.298983][ T26] audit: type=1326 audit(1784133770.264:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4416 comm="syz.0.51" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff27f64be59 code=0x7ffc0000 [ 81.325299][ T26] audit: type=1326 audit(1784133770.264:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4416 comm="syz.0.51" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff27f64be59 code=0x7ffc0000 [ 81.501866][ T4232] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 81.872582][ T4232] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 81.908147][ T4232] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 81.999809][ T4232] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 82.141906][ T4232] usb 3-1: config 1 has no interface number 0 [ 82.226217][ T4232] usb 3-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 82.366162][ T4232] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 82.577896][ T4229] Bluetooth: hci5: command 0x1009 tx timeout [ 82.735460][ T4232] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 82.750532][ T4232] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.764729][ T4232] usb 3-1: Product: syz [ 82.768963][ T4232] usb 3-1: Manufacturer: syz [ 82.776356][ T4232] usb 3-1: SerialNumber: syz [ 83.273416][ T4232] usb 3-1: USB disconnect, device number 2 [ 84.599404][ T4467] loop4: detected capacity change from 0 to 2048 [ 84.624382][ T4467] ======================================================= [ 84.624382][ T4467] WARNING: The mand mount option has been deprecated and [ 84.624382][ T4467] and is ignored by this kernel. Remove the mand [ 84.624382][ T4467] option from the mount to silence this warning. [ 84.624382][ T4467] ======================================================= [ 84.837399][ T4467] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 85.001183][ T4481] dccp_invalid_packet: pskb_may_pull failed [ 85.304240][ T4495] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 85.374192][ T4495] process 'syz.3.77' launched '/dev/fd/5' with NULL argv: empty string added [ 86.576780][ T1325] cfg80211: failed to load regulatory.db [ 88.576828][ T4528] 9pnet_virtio: no channels available for device syz [ 88.681121][ T4533] syz.3.91 uses obsolete (PF_INET,SOCK_PACKET) [ 88.771913][ T1325] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 88.992760][ T4540] fuse: Bad value for 'fd' [ 89.252141][ T1325] usb 5-1: config 0 has an invalid interface number: 119 but max is 0 [ 89.285132][ T1325] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 89.452996][ T1325] usb 5-1: config 0 has no interface number 0 [ 89.557310][ T1325] usb 5-1: config 0 interface 119 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 90.034432][ T4555] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4556] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[4555] [ 90.122199][ T1325] usb 5-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 90.147621][ T1325] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.198350][ T1325] usb 5-1: Product: syz [ 90.204020][ T1325] usb 5-1: Manufacturer: syz [ 90.212977][ T1325] usb 5-1: SerialNumber: syz [ 90.238382][ T1325] usb 5-1: config 0 descriptor?? [ 90.286349][ T1325] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.119/input/input5 [ 90.488911][ T4273] usb 5-1: USB disconnect, device number 3 [ 90.596096][ T4567] 9pnet_virtio: no channels available for device syz [ 90.701732][ T4257] Bluetooth: hci5: Frame reassembly failed (-84) [ 91.689941][ T4587] loop4: detected capacity change from 0 to 2048 [ 91.747534][ T4587] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 92.731991][ T21] Bluetooth: hci5: command 0x1003 tx timeout [ 92.738133][ T4197] Bluetooth: hci5: sending frame failed (-49) [ 94.569436][ T4636] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 94.596932][ T4636] team0: Port device batadv1 added [ 94.684112][ T4644] netlink: 8 bytes leftover after parsing attributes in process `syz.0.131'. [ 94.813013][ T4273] Bluetooth: hci5: command 0x1001 tx timeout [ 94.825346][ T4197] Bluetooth: hci5: sending frame failed (-49) [ 96.882053][ T4190] Bluetooth: hci5: command 0x1009 tx timeout [ 98.123770][ T4714] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 99.986617][ T4750] netlink: 28 bytes leftover after parsing attributes in process `syz.1.167'. [ 100.758935][ T4772] netlink: 24 bytes leftover after parsing attributes in process `syz.3.176'. [ 100.818141][ T4772] netlink: 12 bytes leftover after parsing attributes in process `syz.3.176'. [ 100.886317][ T4776] trusted_key: encrypted_key: keyword 'upeate' not recognized [ 101.005160][ T4779] Zero length message leads to an empty skb [ 101.105727][ T4784] fuse: Bad value for 'fd' [ 102.360827][ T4823] 9pnet_virtio: no channels available for device syz [ 102.732187][ T4232] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 102.748686][ T4832] overlayfs: missing 'lowerdir' [ 103.122075][ T4232] usb 3-1: config 8 has an invalid interface number: 223 but max is 0 [ 103.146683][ T4232] usb 3-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 103.215258][ T4232] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 103.288074][ T4853] 9pnet_virtio: no channels available for device syz [ 103.303882][ T4232] usb 3-1: config 8 has no interface number 0 [ 103.324851][ T4232] usb 3-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 103.552201][ T4232] usb 3-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 103.577299][ T4232] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.611768][ T4232] usb 3-1: Product: syz [ 103.628878][ T4232] usb 3-1: Manufacturer: syz [ 103.657066][ T4232] usb 3-1: SerialNumber: syz [ 103.970529][ T4232] usb 3-1: USB disconnect, device number 3 [ 105.004370][ T4884] 9pnet_virtio: no channels available for device syz [ 105.086700][ T4348] Bluetooth: hci5: Frame reassembly failed (-84) [ 105.251119][ T4893] netlink: 'syz.1.224': attribute type 5 has an invalid length. [ 105.260489][ T4891] netlink: 'syz.3.222': attribute type 1 has an invalid length. [ 105.275973][ T4891] netlink: 'syz.3.222': attribute type 2 has an invalid length. [ 106.369731][ T4908] [ 106.372126][ T4908] ====================================================== [ 106.379165][ T4908] WARNING: possible circular locking dependency detected [ 106.386218][ T4908] syzkaller #0 Not tainted [ 106.390654][ T4908] ------------------------------------------------------ [ 106.397705][ T4908] syz.0.230/4908 is trying to acquire lock: [ 106.403613][ T4908] ffff88807a6d1f98 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0xfa/0x210 [ 106.415075][ T4908] [ 106.415075][ T4908] but task is already holding lock: [ 106.422465][ T4908] ffff88807a6d0c60 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x249/0x520 [ 106.431560][ T4908] [ 106.431560][ T4908] which lock already depends on the new lock. [ 106.431560][ T4908] [ 106.441980][ T4908] [ 106.441980][ T4908] the existing dependency chain (in reverse order) is: [ 106.451014][ T4908] [ 106.451014][ T4908] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 106.458795][ T4908] lock_sock_nested+0x44/0x100 [ 106.464108][ T4908] smc_listen_out+0x105/0x3b0 [ 106.469333][ T4908] smc_listen_work+0x52a/0xd10 [ 106.474649][ T4908] process_one_work+0x867/0xff0 [ 106.480077][ T4908] worker_thread+0xad7/0x12a0 [ 106.485297][ T4908] kthread+0x42e/0x520 [ 106.489942][ T4908] ret_from_fork+0x1f/0x30 [ 106.494902][ T4908] [ 106.494902][ T4908] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 106.505120][ T4908] __lock_acquire+0x2c66/0x7b50 [ 106.510522][ T4908] lock_acquire+0x19e/0x400 [ 106.515589][ T4908] __flush_work+0x116/0x210 [ 106.520636][ T4908] __cancel_work_timer+0x3f4/0x560 [ 106.526294][ T4908] smc_clcsock_release+0x5c/0xe0 [ 106.531772][ T4908] __smc_release+0x644/0x7b0 [ 106.536903][ T4908] smc_close_non_accepted+0xd1/0x1f0 [ 106.542733][ T4908] smc_close_active+0xae2/0xea0 [ 106.548129][ T4908] __smc_release+0x9c/0x7b0 [ 106.553182][ T4908] smc_release+0x2c1/0x520 [ 106.558166][ T4908] sock_close+0xbf/0x210 [ 106.562960][ T4908] __fput+0x212/0x8c0 [ 106.567485][ T4908] task_work_run+0x125/0x1a0 [ 106.572616][ T4908] exit_to_user_mode_loop+0x10f/0x130 [ 106.578533][ T4908] exit_to_user_mode_prepare+0xee/0x180 [ 106.584623][ T4908] syscall_exit_to_user_mode+0x16/0x40 [ 106.590637][ T4908] do_syscall_64+0x58/0xa0 [ 106.595619][ T4908] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 106.602170][ T4908] [ 106.602170][ T4908] other info that might help us debug this: [ 106.602170][ T4908] [ 106.612416][ T4908] Possible unsafe locking scenario: [ 106.612416][ T4908] [ 106.619880][ T4908] CPU0 CPU1 [ 106.625268][ T4908] ---- ---- [ 106.630651][ T4908] lock(sk_lock-AF_SMC/1); [ 106.635289][ T4908] lock((work_completion)(&new_smc->smc_listen_work)); [ 106.644764][ T4908] lock(sk_lock-AF_SMC/1); [ 106.651842][ T4908] lock((work_completion)(&new_smc->smc_listen_work)); [ 106.658806][ T4908] [ 106.658806][ T4908] *** DEADLOCK *** [ 106.658806][ T4908] [ 106.666967][ T4908] 2 locks held by syz.0.230/4908: [ 106.672451][ T4908] #0: ffff8880616a5c10 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x82/0x210 [ 106.682682][ T4908] #1: ffff88807a6d0c60 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x249/0x520 [ 106.692131][ T4908] [ 106.692131][ T4908] stack backtrace: [ 106.698042][ T4908] CPU: 1 PID: 4908 Comm: syz.0.230 Not tainted syzkaller #0 [ 106.705356][ T4908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 106.715445][ T4908] Call Trace: [ 106.718757][ T4908] [ 106.721717][ T4908] dump_stack_lvl+0x188/0x250 [ 106.726434][ T4908] ? load_image+0x410/0x410 [ 106.730973][ T4908] ? show_regs_print_info+0x20/0x20 [ 106.736207][ T4908] ? print_circular_bug+0x12b/0x1a0 [ 106.741432][ T4908] check_noncircular+0x296/0x330 [ 106.746400][ T4908] ? deref_stack_reg+0xd0/0x120 [ 106.751257][ T4908] ? look_up_lock_class+0x71/0x110 [ 106.756378][ T4908] ? add_chain_block+0x9b0/0x9b0 [ 106.761328][ T4908] ? lockdep_lock+0xf1/0x1f0 [ 106.765955][ T4908] ? lock_release+0xb5/0x8a0 [ 106.770578][ T4908] ? mark_lock+0x94/0x320 [ 106.774934][ T4908] ? _find_first_zero_bit+0xd1/0xf0 [ 106.780179][ T4908] __lock_acquire+0x2c66/0x7b50 [ 106.785074][ T4908] ? hlock_conflict+0x59/0x1f0 [ 106.789870][ T4908] ? __bfs+0x27a/0x560 [ 106.793973][ T4908] ? verify_lock_unused+0x140/0x140 [ 106.799205][ T4908] ? mark_lock+0x94/0x320 [ 106.803563][ T4908] ? __lock_acquire+0x13dc/0x7b50 [ 106.808627][ T4908] ? lockdep_unlock+0x143/0x2e0 [ 106.813510][ T4908] lock_acquire+0x19e/0x400 [ 106.818022][ T4908] ? __flush_work+0xfa/0x210 [ 106.822630][ T4908] ? read_lock_is_recursive+0x10/0x10 [ 106.828039][ T4908] __flush_work+0x116/0x210 [ 106.832564][ T4908] ? __flush_work+0xfa/0x210 [ 106.837167][ T4908] ? flush_work+0x20/0x20 [ 106.841506][ T4908] ? try_to_grab_pending+0xfb/0x820 [ 106.846710][ T4908] ? mark_lock+0x94/0x320 [ 106.851045][ T4908] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 106.857119][ T4908] ? lock_chain_count+0x20/0x20 [ 106.861975][ T4908] ? mark_lock+0x94/0x320 [ 106.866418][ T4908] ? __cancel_work_timer+0x36a/0x560 [ 106.871705][ T4908] __cancel_work_timer+0x3f4/0x560 [ 106.876829][ T4908] ? cancel_work_sync+0x20/0x20 [ 106.881714][ T4908] ? __local_bh_enable_ip+0x136/0x1c0 [ 106.887109][ T4908] ? lockdep_hardirqs_on+0x94/0x140 [ 106.892315][ T4908] ? __local_bh_enable_ip+0x136/0x1c0 [ 106.897726][ T4908] ? _local_bh_enable+0xa0/0xa0 [ 106.902581][ T4908] smc_clcsock_release+0x5c/0xe0 [ 106.907534][ T4908] __smc_release+0x644/0x7b0 [ 106.912140][ T4908] smc_close_non_accepted+0xd1/0x1f0 [ 106.917445][ T4908] smc_close_active+0xae2/0xea0 [ 106.922304][ T4908] ? sock_no_sendpage_locked+0x1a0/0x1a0 [ 106.927963][ T4908] __smc_release+0x9c/0x7b0 [ 106.932496][ T4908] smc_release+0x2c1/0x520 [ 106.936933][ T4908] sock_close+0xbf/0x210 [ 106.941186][ T4908] ? sock_mmap+0x90/0x90 [ 106.945437][ T4908] __fput+0x212/0x8c0 [ 106.949466][ T4908] task_work_run+0x125/0x1a0 [ 106.954067][ T4908] exit_to_user_mode_loop+0x10f/0x130 [ 106.959445][ T4908] exit_to_user_mode_prepare+0xee/0x180 [ 106.965015][ T4908] syscall_exit_to_user_mode+0x16/0x40 [ 106.970501][ T4908] do_syscall_64+0x58/0xa0 [ 106.974922][ T4908] ? clear_bhb_loop+0x30/0x80 [ 106.979624][ T4908] ? clear_bhb_loop+0x30/0x80 [ 106.984329][ T4908] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 106.990240][ T4908] RIP: 0033:0x7ff27f64be59 [ 106.994664][ T4908] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.014297][ T4908] RSP: 002b:00007ffdc0152198 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 107.022872][ T4908] RAX: 0000000000000000 RBX: 00007ffdc0152280 RCX: 00007ff27f64be59 [ 107.030875][ T4908] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 107.038868][ T4908] RBP: 0000000000019f42 R08: 0000000000000001 R09: 0000000000000000 [ 107.046843][ T4908] R10: 0000001b31420000 R11: 0000000000000246 R12: 00007ffdc01522c0 [ 107.054821][ T4908] R13: 00007ff27f8d3fac R14: 0000000000019f7c R15: 00007ff27f8d3fa0 [ 107.062892][ T4908] [ 107.121959][ T4232] Bluetooth: hci5: command 0x1003 tx timeout [ 107.128689][ T4197] Bluetooth: hci5: sending frame failed (-49) [ 109.201991][ T4190] Bluetooth: hci5: command 0x1001 tx timeout [ 109.208497][ T4197] Bluetooth: hci5: sending frame failed (-49) [ 111.281852][ T4232] Bluetooth: hci5: command 0x1009 tx timeout