last executing test programs: 15.017697571s ago: executing program 4 (id=5): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x7b, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x68}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000e80)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="200004000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14.086980176s ago: executing program 3 (id=14): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x40) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={0x0, &(0x7f0000000680)=""/4096, 0x0, 0x0, 0x2}, 0x38) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000580)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/242, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/60, 0xeeee0000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1008082, &(0x7f00000002c0)={[{@nodioread_nolock}, {@jqfmt_vfsv0}, {@abort}, {@errors_continue}, {@dioread_nolock}, {@jqfmt_vfsv0}, {@nomblk_io_submit}, {@nobarrier}]}, 0x0, 0x5e4, &(0x7f00000011c0)="$eJzs3c1vVFUbAPDnTD9oKe/bQt68igtpYgwkSksLGGJcwNaQBj/ixo2VFkQKNLRGiyaUBDcmxo0xJq5ciP+FEtmy0pULN64MCVHD0sQxd2Zu6bR3+kXbqdzfL5n23nPmcs7l9uk59/ScOwGU1mD2pRKxPyKmU0R/ml/Iq1ar1VrmYP19D/786Gz2SlGtvvZ7itRIy9+fGt/7si+dET0R8eMPKfZ1LC93Zu7axfGpqcmrjf3h2UvTwzNz1w5fuDR+fvL85OXRF0ZPHD92/MTIkQ2d1/WCtNM3332//5OxN7/56q808u0vYylOxsuNNy4+j80yGIO1/5O0PKvvxGYX1iYd9Usdiy9x6ix6Z9f2VYo1y69fdnWeiP7oiIcXrz8+fqWtlQO2VDXV23mgjJL4h5LK+wH5vf3S++BKW3olwHa4f6o+ALA8/jvrY4PRUxsb2P0gxeJhnRQRGxuZa7YnIu7eGbt57s7YzdiicTig2PyNiHiyKP5TLf4HoicGavFfaYr/rF9wpvE9S391g+UvHSoW/7B96vHfs2L8R4v4f2tR/L+9wfIHH26+09sU/70bPSUAAAAAAAAordunIuL5or//Vxbm/0TB/J++iDi5CeUPLtlf/vf/yr1NKAYocP9UxEuF838r+ezfgY7G1n9q8wG60rkLU5NHIuK/EXEounZl+yMrlHH4031ftsobbMz/y19Z+XcbcwEb9bjXuav5mInx2fFHPW8g4v6NiKcK5/+mhfY/FbT/2e+D6TWWse/ZW2da5a0e/8BWqX4dcbCw/X/41Iq08vM5hmv9geG8V7Dc0x9+9l2r8jca/4WPmADWJWv/d68c/wNp8fN6ZtZfxtG5zmqrvI32/7vT67VHznQ30j4Yn529OhLRnU53ZKlN6aPrrzM8jvJ4yOMli/9Dz6w8/lfU/++NiPkl/3b6o3lNce7/f/f92qo++v/QPln8T6yr/V//xuitge9blb+29v9Yra0/1Egx/gd1X+Rh2t2cXhCOnUVZ211fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgcVCJiT6TK0MJ2pTI0FNEXEf+L3ZWpKzOzz5278t7liSyv9vn/lfyTfvvr+yn//P+BRfujS/aPRsTeiPi8o7e2P3T2ytREu08eAAAAAAAAAAAAAAAAAAAAdoi+Fuv/M791tLt2wJbrbHcFgLYpiP+f2lEPYPtp/6G8xD+Ul/iH8hL/UF7iH8pL/EN5iX8oL/EPAAAAAACPlb0Hbv+cImL+xd7aK9PdyOtqa82ArVZpdwWAtvGIHygvU3+gvNzjA2mV/J6WB6125Eqmzz7CwQAAAAAAAAAAAABQOgf3W/8PZWX9P5SX9f9QXvn6/wNtrgew/dzjA7HKSv7C9f+rHgUAAAAAAAAAAAAAbKaZuWsXx6emJq/aeGNnVGM7N6rV6vXsp2Cn1OdfvpFPhd8p9Vmyka/1W9tR7fudBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANPsnAAD//36dKMI=") 13.360706094s ago: executing program 3 (id=15): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8000000000000001}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840), 0x0) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r4, r4, r4}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) syz_open_dev$tty1(0xc, 0x4, 0x3) 12.155365481s ago: executing program 3 (id=16): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000), 0x10) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) write$uinput_user_dev(r2, &(0x7f0000000240)={'syz0\x00', {0x9, 0x1, 0x2, 0x3}, 0x2, [0x5, 0x5, 0x81, 0x8, 0x4, 0x1000, 0x50000, 0x1, 0x10001, 0xffffa103, 0x3, 0x6, 0x6, 0x6, 0x7, 0x3, 0x6, 0x0, 0x40, 0x5, 0x1cac, 0x3eb, 0xb8f, 0x3, 0x400, 0x40, 0x6, 0x0, 0xfffffffa, 0xdc, 0xffffffff, 0xa1bc, 0x200, 0x7, 0x6, 0x6, 0x3, 0x1, 0x0, 0x0, 0x2, 0x400, 0x7a08, 0x200, 0x3, 0x6, 0x7ff, 0x7f, 0x1c, 0x7, 0xe, 0x9, 0x5, 0xa, 0x3, 0x2, 0xf7, 0xfff, 0x71, 0x5, 0x1ac0, 0x4f, 0x6, 0x8], [0x5, 0x3ff, 0x6, 0xea, 0x3, 0x0, 0xca, 0x1c5936c5, 0x9, 0xfffffff8, 0x4, 0x1, 0x7, 0x6, 0xa, 0x4, 0x2, 0x4, 0x5, 0x2, 0x0, 0x6, 0x0, 0x1, 0x9, 0x6, 0x5e5893ee, 0xfffffff7, 0x9, 0x10000, 0x3, 0x8001, 0x2e6d, 0x7ff, 0x1, 0x1000, 0x877, 0x9, 0x8, 0x8, 0x80000000, 0xfff, 0x5, 0x7, 0x8, 0x5, 0x75da, 0x2, 0x5, 0xe8, 0x3, 0x9, 0x5, 0x7, 0xb99c, 0x2, 0x1, 0x4, 0x4, 0x1, 0x1, 0x9, 0x2, 0xc406], [0x80000001, 0x2, 0x9, 0x9, 0x0, 0xb9, 0x897, 0x5, 0x3, 0x4, 0x2, 0x5, 0x3, 0x9, 0x9, 0x7, 0x9, 0x61, 0x9, 0x5, 0x9, 0x8, 0x2, 0x6, 0x8001, 0x4, 0xc, 0x80000000, 0x7fffffff, 0x1, 0x1, 0x6, 0x8, 0x3, 0x2, 0x5, 0x3, 0x2, 0x1, 0x24, 0x9, 0x2000000, 0x4, 0xff, 0x7, 0x3eef6cc9, 0x1, 0x7, 0x7, 0x8bd, 0x9, 0xfffffff9, 0x80000001, 0x5, 0xffffff1d, 0x6, 0x0, 0xa, 0xfff, 0xfff, 0x1, 0x1, 0x19ee, 0xfffffff9], [0x0, 0x10, 0x101, 0x2, 0x4, 0x9c500, 0xef, 0x8, 0xc61, 0x7, 0xd, 0x358, 0xd567, 0x1d5, 0xc8b, 0x658, 0xcbfd, 0x101, 0x6, 0x5, 0xb, 0x5, 0x6, 0x3, 0x75d6, 0xb26, 0x3ff, 0x6, 0x9, 0x0, 0x1, 0xf412, 0x2, 0x2, 0x2000002, 0x3, 0x3, 0x9, 0x3, 0x5, 0x3, 0x3, 0xfffffff3, 0x8000, 0x6, 0x6, 0xffff, 0x80, 0xf, 0xfff, 0xfff, 0xffff, 0xfffffffe, 0x80, 0xb975, 0x5, 0x5e1, 0xa, 0xffff58ee, 0x2, 0x2530, 0x4, 0x26da282, 0xc]}, 0x45c) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) mknodat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x800, 0x0) pipe(0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000080), 0x5, 0x490a01) ioctl$RTC_SET_TIME(r0, 0x4024700a, 0x0) 11.968701676s ago: executing program 2 (id=17): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000480)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x1fff, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) write(r0, &(0x7f0000000140)="8265000000000000", 0x5ac) 10.272924493s ago: executing program 2 (id=19): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)) r3 = syz_open_dev$radio(&(0x7f0000000300), 0x2, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f907, 0x5}) 9.517971704s ago: executing program 4 (id=20): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000002500)=@ipv4_newnexthop={0x20, 0x68, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NHA_ID={0x8, 0x1, 0x2}]}, 0x20}}, 0x0) 8.747652936s ago: executing program 2 (id=21): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = dup(0xffffffffffffffff) getsockname$inet6(r4, 0x0, 0x0) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = epoll_create1(0x80000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/wakeup_count', 0x80800, 0x8) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f00000000c0)={0xe000001a}) read$char_usb(r7, &(0x7f0000001980)=""/179, 0xb3) 8.022050294s ago: executing program 3 (id=23): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000000214010069bd7000fddbdf250900020073797a30000000000800010000000000"], 0x24}, 0x1, 0x0, 0x0, 0x24000841}, 0x800) 7.629784865s ago: executing program 4 (id=24): syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000040)='./file1\x00', 0xa18c14, &(0x7f0000000280)={[{@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@shortname_winnt}, {@fat=@codepage={'codepage', 0x3d, '852'}}, {@shortname_win95}, {@fat=@check_strict}, {@uni_xlateno}, {@shortname_winnt}, {@shortname_lower}, {@shortname_mixed}, {@rodir}, {@utf8no}, {@numtail}]}, 0x81, 0x29b, &(0x7f0000000580)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x17c) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r0, @ANYRES64=0x0], 0x20) 7.588217289s ago: executing program 2 (id=25): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) fcntl$setlease(r1, 0x400, 0x1) memfd_create(&(0x7f0000000040)='/dev/nullb0\x00', 0x0) ioctl$UDMABUF_CREATE(r1, 0x40187542, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f00000002c0)=@nullb, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000480)=0x0) io_submit(r3, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x14, 0x1, 0x0, r2, &(0x7f0000000000), 0x100000, 0x3f}]) r4 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r4, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000000)=0x1000000010) ioctl$BLKRRPART(r4, 0x125f, 0x0) 7.44800339s ago: executing program 3 (id=26): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x18, 0x19, 0x1, 0x0, 0x25dfdbfb, {0x1d, 0xd601, 0x9}, [@nested={0x4, 0x12}]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f00000005c0)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) 6.064591492s ago: executing program 0 (id=27): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x7fff, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd02000050f68436ba123bb8eaa2b24f442cb30be009c8ed63f51820817a2c92322bfd1b9a780f3ab7ef03eeab27a4eaa9690a02ae2bab4a7f672b7cf896e6ba4298d8a8", 0x45}], 0x1, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000f}, 0x94) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) 5.850333769s ago: executing program 4 (id=29): socket(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r2, 0x0, 0x20000040) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) r4 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r4, &(0x7f0000000400), 0x10) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, 0x0, 0x0) r5 = syz_io_uring_setup(0x10f, &(0x7f0000000140)={0x0, 0xb423, 0x0, 0x5, 0x199}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x3, r3, 0x0, 0x0, 0x0, 0x80800}) io_uring_enter(r5, 0x3516, 0x3e44, 0x8, 0x0, 0x0) 4.997502758s ago: executing program 1 (id=30): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000005140)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000008000000000010000000c0002000000000000000000400007800c00018008000100", @ANYRES32=r0, @ANYRES32=r1], 0x60}, 0x1, 0x0, 0x0, 0x4081}, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r4 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x5865, 0x10, 0x2, 0x24d}, &(0x7f00000006c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f00000002c0)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r4, 0x100847c0, 0x0, 0x1, 0x0, 0x0) 4.951831621s ago: executing program 2 (id=31): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) rt_sigaction(0x16, &(0x7f0000000080)={0x0, 0x90000000, 0x0}, 0x0, 0x8, &(0x7f0000000200)) tkill(0x0, 0x16) 4.896535946s ago: executing program 0 (id=32): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)) r3 = syz_open_dev$radio(&(0x7f0000000300), 0x2, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f907, 0x5}) 4.760017737s ago: executing program 1 (id=33): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0xabd7, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000240)={0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r5, 0xc01064c7, &(0x7f00000004c0)={0x0, 0x0, 0x0}) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x8, 0x3, 0x1ff, 0x3d, 0x963, 0x3, 0x53, 0x202, 0x1, 0xc}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2000) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) 3.769543646s ago: executing program 0 (id=34): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800"/16], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000001fc0)={0x2020}, 0x2020) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000500)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @fda={0x66646185, 0xa, 0x2, 0x19}, @fda={0x66646185, 0x7, 0x2, 0x2b}}, &(0x7f0000000200)={0x2e, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff) recvmmsg(r8, &(0x7f0000001a00)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000000c0)=""/183, 0xb7}, {&(0x7f0000000200)=""/128, 0x80}, {&(0x7f0000000600)=""/200, 0xc8}, {&(0x7f0000001f00)=""/4078, 0xfee}], 0x4}, 0xc}], 0x1, 0x40010080, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r8, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0) 3.691198403s ago: executing program 1 (id=35): pipe2$9p(&(0x7f0000000040), 0x80000) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) msgctl$MSG_INFO(0x0, 0xc, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x4000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000200)={0x6, 0x6, 0x355}) sync() syz_open_dev$sndctrl(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) setitimer(0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 2.543579035s ago: executing program 0 (id=36): r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r0, r0, r0}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) 1.288096427s ago: executing program 0 (id=37): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) sendmmsg$inet(r1, &(0x7f0000002700)=[{{&(0x7f0000000800)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="1bc7a7fab25c4d096d13ab609699ccfad50f833b12f72e7d9a802d8457394031e7227a4d2e5133ed69e3195918c45d8b0ef7819b03d71ace368b2fd8c3db9191abc22ee97998989d915efcc43b63e353a9d8e8dfe21a31a73a4d908795b98c62b655664130a6af358e15446e3b497e599e062848ec62e3b3ead00bd921780434f1561243737f27a2bf98d708c1bf4fd2c2e3f8ea2617d0c69dc73c597a12ba4be2bb9439d7a518eac95b7b8776223bfefeed41d09154ce0983f0450acd463a6e3f8285a144a20dec45b607a1720ceb95883a14ea680f7f00d86053bec5d49bc08e692bd70c", 0xe5}, {&(0x7f0000001700)="6242870f0e6b4396205a2c501f10b0602b64a04104bf0ef28ebfda215394bae4413f4292888a899117ec83cfbb17c52caa27a3b4f2621e6941138caa786f3f6d7ebf1863150a9b64333542704a410fa62c556d76d8250364fa8445b75536a74b3dec286c7b5dba4cb16a12e4a1a7c96cf85432faa291cde51564e210d496637444e64540519a6f8a381cee6ddf4f4a5abbc88b9317684146d539489aaddc2b21909092ab26a104ada4362c43d54fce970e", 0xb1}, {&(0x7f0000000580)="55bbeefbb9a13c80e6527d489144bf9bdcfdf9108b8fbd754043e281e3c4af285fd230aba5e7f71f81f05b23afb867db3b29e2d37b802dfc57712a9a4a6f8e948f5bbcbb8308ae67d57e70daa13148536e5cfe1eec171afbbf0a99f64a3b065896289be98f34a3ac141f9996f71a6c32cd9e930f86b9aa8d31e566b3e6f389abdb6943940ad3a772bf4639838127bd4775b1", 0x92}, {&(0x7f00000001c0)="3e6069e04318de6ead0334bb1e66cb4e88bc998b266287091cf880dc0fb0e8b3bbdf8d45987e6302f1ac521b8e43d5135865c441efb1377fa4b4c9946f8ba2f5999ff4070213fdf5716b9c7992cc57adb3691cbe123cb43ed522a35874f4503d56d44c71c7ab62adc0", 0x69}, {0x0}, {&(0x7f0000001940)="ac6aed94fbb8c7fecccf1fbe0f823f4711e4d4e5831b1172b79994156deeb8f47a21f6bd119ffeb486267bd8dbaa3b868deca95efc3fea013ea88ddd3222ff7cc0a3448434dca51f5bc1972720dc071c5c5e2358a62bb3d9ccb581431764476f92bc0dd581a715f7ff8cef23b35dceb96809ab4bfbc85cd9eed4820e2a821913e94ed62ce3b44103e31a82b7c14ea5dae6b42906b14cc21e24fcb7b255b5fd8b3d9eda621defc3f398cc545fb03d6549353921bb4a52b3230008f967ddc1ad8635d58667b82a58ec030a57d199f14b172133", 0xd2}, {&(0x7f0000002300)="0b41dae71fdbfbd927fcefd552617a67c06039347098f690358459d82800ee224faa7dcc81cff086255c05d8d5ee175f635bdb8853bf08b2605ada1c1cf8812456748282d57d86948df219e8422c2853df192f5fceb38fd57788af3fb5284e53393be844bac927edfb43d17da758dc2b9ad2fa87f8521a0f1889b362b32cef609d20392a2e680ae667158a9d831c6acd5854e2420a16ea245a7c26de40c041919f0de146884889aedac056c285012b270a78448caab41053c2017d15dafa284871f716173b8047f8b1ffdc5a8a", 0xcd}], 0x7}}, {{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000940)="036157dd45d9a56c0f33f53edcee705d085cd62afdad07260d0000006da9061adaaf88a1fb96f1058fbb383b6f43226aa440a9d640eda8b41906343c607ee251abccc429fc9ceb4e4518a5b5334e612642bfdb12d1cedb35add3fee841594f1c4680f198d0dda677a5c273e2e0f212d809d6541f1c1902d77514c8c9217ecb702b7e34ac3e891ed26fcb11f56f5398c11e6be366e1b130600cf9ca353bc157471a64aaa6a649cc297558a15e0844faeb2d9d8e48207d3c5c3609d973c6196c006073eacdf7780b5108261c170a0514bdc31ad229b360bab2f336f16ce1ba476ba38395b6990b171fa040da4a59e85555394b9f230b62ab6246e38fed7caeba889968ca75e446c7ea64657458d25e1415c96de80cfe6941126f73", 0x11a}, {&(0x7f0000002480)="9467776b9ec22f06151761843173440c3e9448d40384f222fec952053bd200bbc7ccef8e7c88fb0ae01fa531ad6deb000578a6c82661d5bf15bffe28cf236057bacc915533a7a58c9253414b4eea351e504828a7279ced0949ed778c25ae266f71689f85decb0b7cd62083d9dc4ff648d4fdd2e18f", 0x75}], 0x2}}], 0x3, 0x2000c044) sendto$inet(r1, &(0x7f00000004c0)="0003", 0x2, 0x16000000, 0x0, 0x0) 1.148831398s ago: executing program 0 (id=38): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xf5}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) 996.05512ms ago: executing program 2 (id=39): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x400, 0x0) ppoll(&(0x7f0000000100)=[{r0}], 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)={[0xfffffffffffffff8]}, 0x8) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) 855.887781ms ago: executing program 1 (id=40): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="03000000040000000400", @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32=0x0], 0x50) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x18, 0x30, 0x1, 0x0, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x14) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) r3 = socket$qrtr(0x2a, 0x2, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_debug_messages', 0x101842, 0x23) write(r4, &(0x7f0000000140)="1e1508", 0x3) connect$qrtr(r3, 0x0, 0x0) 635.757659ms ago: executing program 1 (id=41): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) dup(r0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x40) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={0x0, &(0x7f0000000680)=""/4096, 0x0, 0x0, 0x2}, 0x38) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000580)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/242, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/60, 0xeeee0000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1008082, &(0x7f00000002c0)={[{@nodioread_nolock}, {@jqfmt_vfsv0}, {@abort}, {@errors_continue}, {@dioread_nolock}, {@jqfmt_vfsv0}, {@nomblk_io_submit}, {@nobarrier}]}, 0x0, 0x5e4, &(0x7f00000011c0)="$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") 97.498242ms ago: executing program 1 (id=42): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000380)="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", 0x101}, {&(0x7f0000000140)="fa5cf2e9f531fb0969f9185e70e92cdc9c578dfad370ac8bf37435a70fd07e734b398c2615a9cd7a34ee41cc51b26e2829bf8dc17401669862766a05bf9a9c9c175d2e9c2de6f5b8b77a38e616fca1db5a2c1d4f69b8d64b5d4ce3a9bde53e5c3e6103421a38ad276686161286b64996b09b5d09f78cfb7e27c38be8e0e7346f8ba3453065c6d01bcece056fb93efd3997d82531970613a7c7e55d0e22f3b107774ca1bb3526e6c5524e8307b9012440403f", 0xb2}], 0x2}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000004c0)={[0x8aba, 0x100d, 0x4, 0x804, 0x7ffd, 0xf, 0x120000, 0x9, 0x1, 0x5, 0x8000000000000000, 0x1, 0x1, 0xfe, 0x6, 0x1], 0x4000, 0x141200}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000100)=@x86={0x6, 0x2, 0x10, 0x0, 0xb, 0x7, 0x2, 0x9, 0x1, 0x51, 0x0, 0x8, 0x0, 0x4, 0x10, 0xff, 0xb, 0x2, 0x7, '\x00', 0x6, 0x4080000000000005}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 3 (id=43): connect$unix(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = openat$sndtimer(0xffffff9c, &(0x7f0000000000), 0x183002) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r2) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.19' (ED25519) to the list of known hosts. [ 67.214293][ T4172] cgroup: Unknown subsys name 'net' [ 67.354284][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.820854][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 70.921049][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 71.024600][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 71.065024][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 71.099594][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.107774][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.116668][ T4185] device bridge_slave_0 entered promiscuous mode [ 71.129785][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.137399][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.145821][ T4185] device bridge_slave_1 entered promiscuous mode [ 71.184548][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 71.194903][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 71.252662][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.296762][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.313982][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.321180][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.329759][ T4184] device bridge_slave_0 entered promiscuous mode [ 71.359530][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.366750][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.375743][ T4184] device bridge_slave_1 entered promiscuous mode [ 71.414148][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.421458][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.430001][ T4186] device bridge_slave_0 entered promiscuous mode [ 71.442956][ T4185] team0: Port device team_slave_0 added [ 71.457979][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.465381][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.473948][ T4183] device bridge_slave_0 entered promiscuous mode [ 71.481267][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.488298][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.498273][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.505536][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.513452][ T4186] device bridge_slave_1 entered promiscuous mode [ 71.529372][ T4185] team0: Port device team_slave_1 added [ 71.535971][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.543141][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.551546][ T4183] device bridge_slave_1 entered promiscuous mode [ 71.560977][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.609645][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.620576][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.639671][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.647143][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.656036][ T4192] device bridge_slave_0 entered promiscuous mode [ 71.679718][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.690922][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.702708][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.712304][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.720454][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.728579][ T4192] device bridge_slave_1 entered promiscuous mode [ 71.736909][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.744909][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.771292][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.821243][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.828492][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.854773][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.869143][ T4184] team0: Port device team_slave_0 added [ 71.907178][ T4184] team0: Port device team_slave_1 added [ 71.916205][ T4183] team0: Port device team_slave_0 added [ 71.932581][ T4186] team0: Port device team_slave_0 added [ 71.941243][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.959435][ T4183] team0: Port device team_slave_1 added [ 71.975375][ T4186] team0: Port device team_slave_1 added [ 71.981681][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.988872][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.015106][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.029466][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.064767][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.071757][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.098321][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.121446][ T4185] device hsr_slave_0 entered promiscuous mode [ 72.128872][ T4185] device hsr_slave_1 entered promiscuous mode [ 72.161347][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.168618][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.195172][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.208269][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.215311][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.241660][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.253348][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.260410][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.286931][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.299822][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.306910][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.333239][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.351120][ T4192] team0: Port device team_slave_0 added [ 72.375535][ T4192] team0: Port device team_slave_1 added [ 72.439733][ T4184] device hsr_slave_0 entered promiscuous mode [ 72.446972][ T4184] device hsr_slave_1 entered promiscuous mode [ 72.453785][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.461711][ T4184] Cannot create hsr debugfs directory [ 72.476342][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.483455][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.510359][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.526052][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.533036][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.559227][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.582614][ T4186] device hsr_slave_0 entered promiscuous mode [ 72.584782][ T4188] Bluetooth: hci2: command 0x0409 tx timeout [ 72.588952][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 72.601727][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 72.601768][ T4186] device hsr_slave_1 entered promiscuous mode [ 72.614994][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.622973][ T4186] Cannot create hsr debugfs directory [ 72.643424][ T4183] device hsr_slave_0 entered promiscuous mode [ 72.650539][ T4183] device hsr_slave_1 entered promiscuous mode [ 72.657742][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.669418][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 72.673779][ T4183] Cannot create hsr debugfs directory [ 72.675755][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 72.806952][ T4192] device hsr_slave_0 entered promiscuous mode [ 72.813957][ T4192] device hsr_slave_1 entered promiscuous mode [ 72.821008][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.828874][ T4192] Cannot create hsr debugfs directory [ 73.064262][ T4185] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.076233][ T4185] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.088325][ T4185] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.099702][ T4185] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.166858][ T4184] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.177036][ T4184] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.188062][ T4184] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.199969][ T4184] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.268462][ T4183] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.283346][ T4183] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.295220][ T4183] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.307853][ T4183] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.384959][ T4192] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.395678][ T4192] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.410068][ T4192] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.420392][ T4192] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.435066][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.489266][ T1164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.500445][ T1164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.512251][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.541930][ T4186] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 73.558576][ T4186] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 73.569651][ T4186] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 73.579949][ T4186] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 73.592171][ T1164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.601683][ T1164] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.615346][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.622926][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.632237][ T1164] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.668187][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.675835][ T1164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.687071][ T1164] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.696712][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.704062][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.715088][ T1164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.728242][ T1164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.740623][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.768966][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.780095][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.789548][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.800834][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.809867][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.819231][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.827371][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.844683][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.856169][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.874266][ T1164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.883064][ T1164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.892430][ T1164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.904081][ T1164] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.913055][ T1164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.922087][ T1164] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.960545][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.970691][ T1164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.980333][ T1164] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.989468][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.996868][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.006853][ T1164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.018579][ T1164] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.027656][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.034931][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.042993][ T1164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.052078][ T1164] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.061105][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.068260][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.079395][ T1164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.088850][ T1164] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.098197][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.105330][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.113361][ T1164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.122705][ T1164] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.131900][ T1164] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.142419][ T1164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.162248][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.209863][ T1164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.220282][ T1164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.234383][ T1164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.248149][ T1164] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.258492][ T1164] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.286400][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.301356][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.310661][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.321256][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.329909][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.338890][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.350134][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.361663][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.372637][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.392533][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.428495][ T1164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.439164][ T1164] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.448843][ T1164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.458674][ T1164] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.468320][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.475462][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.483261][ T1164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.492072][ T1164] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.501270][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.508507][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.517265][ T1164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.526971][ T1164] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.536027][ T1164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.544830][ T1164] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.553377][ T1164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.562374][ T1164] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.570891][ T1164] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.579295][ T1164] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.600122][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.630224][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.641928][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.664338][ T4267] Bluetooth: hci2: command 0x041b tx timeout [ 74.670713][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.679951][ T4245] Bluetooth: hci0: command 0x041b tx timeout [ 74.687509][ T4245] Bluetooth: hci3: command 0x041b tx timeout [ 74.695213][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.709901][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.730979][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.739416][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.753009][ T4261] Bluetooth: hci1: command 0x041b tx timeout [ 74.754333][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.760250][ T4261] Bluetooth: hci4: command 0x041b tx timeout [ 74.776102][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.789932][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.808297][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.844715][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.855138][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.871585][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.890017][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.900344][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.916742][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.930435][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.972020][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.980645][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.990802][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.000018][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.007527][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.015938][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.026032][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.035327][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.042524][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.051351][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.061220][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.070682][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.079268][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.088764][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.121224][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.132103][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.141792][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.153315][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.162490][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.170651][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.182643][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.191832][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.201278][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.210761][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.229221][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.262494][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.272229][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.288196][ T4185] device veth0_vlan entered promiscuous mode [ 75.310589][ T4186] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 75.321395][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.334812][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.346036][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.355780][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.365338][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.376203][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.385457][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.394857][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.402808][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.411157][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.447468][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.459492][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.477559][ T4185] device veth1_vlan entered promiscuous mode [ 75.495001][ T4184] device veth0_vlan entered promiscuous mode [ 75.501621][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.511408][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.525316][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.537324][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.546246][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.555161][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.565132][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.573140][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.581864][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.590222][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.605906][ T4183] device veth0_vlan entered promiscuous mode [ 75.633531][ T4184] device veth1_vlan entered promiscuous mode [ 75.653329][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.663327][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.671558][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.693025][ T4185] device veth0_macvtap entered promiscuous mode [ 75.707889][ T4183] device veth1_vlan entered promiscuous mode [ 75.727989][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.736994][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.746779][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.755094][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.764664][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.773255][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.786045][ T4185] device veth1_macvtap entered promiscuous mode [ 75.817158][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.829434][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.839113][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.850605][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.880995][ T4184] device veth0_macvtap entered promiscuous mode [ 75.901163][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.909642][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.919915][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.929578][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.937718][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.960354][ T4184] device veth1_macvtap entered promiscuous mode [ 75.976325][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.985290][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.996112][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.006648][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.020340][ T4183] device veth0_macvtap entered promiscuous mode [ 76.040308][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.051707][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.065761][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.073219][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.081958][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.091406][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.100709][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.110505][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.119902][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.129775][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.138739][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.148871][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.159209][ T4192] device veth0_vlan entered promiscuous mode [ 76.175166][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.185843][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.197122][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.209657][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.220627][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.232521][ T4183] device veth1_macvtap entered promiscuous mode [ 76.241129][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.250847][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.262947][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.275377][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.287966][ T4184] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.297362][ T4184] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.307557][ T4184] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.316653][ T4184] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.330077][ T4192] device veth1_vlan entered promiscuous mode [ 76.347710][ T4185] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.356834][ T4185] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.367678][ T4185] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.376983][ T4185] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.447066][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.460691][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.471990][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.483171][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.497186][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.542281][ T1164] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.550912][ T1164] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.559521][ T1164] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.571414][ T1164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.583345][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.596812][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.607147][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.618201][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.629858][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.658464][ T4192] device veth0_macvtap entered promiscuous mode [ 76.686692][ T1164] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.702811][ T1164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.717253][ T1164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.727033][ T1164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.738848][ T4183] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.748797][ T4183] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.758464][ T4294] Bluetooth: hci3: command 0x040f tx timeout [ 76.758658][ T4183] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.771800][ T4294] Bluetooth: hci0: command 0x040f tx timeout [ 76.773991][ T4183] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.779739][ T4294] Bluetooth: hci2: command 0x040f tx timeout [ 76.809503][ T4192] device veth1_macvtap entered promiscuous mode [ 76.818284][ T1164] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.826507][ T4294] Bluetooth: hci4: command 0x040f tx timeout [ 76.828619][ T1164] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.832826][ T4294] Bluetooth: hci1: command 0x040f tx timeout [ 76.879870][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.890887][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.901836][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.914064][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.924449][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.936004][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.947516][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.959945][ T4275] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.969117][ T4275] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.985416][ T1164] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.002462][ T1164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.012068][ T1164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.021702][ T1164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.031831][ T1164] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.041677][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.052414][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.062429][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.076484][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.086864][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.097747][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.109174][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.136308][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.147202][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.163833][ T4275] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.168933][ T4192] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.171966][ T4275] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.180777][ T4192] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.198846][ T4192] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.208260][ T4192] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.236011][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.286467][ T1164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.301370][ T1164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.316171][ T4275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.327592][ T4186] device veth0_vlan entered promiscuous mode [ 77.330073][ T4275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.362705][ T4275] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.378047][ T1164] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.387507][ T1164] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.389985][ T4275] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.395858][ T1164] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.413457][ T4275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.423228][ T4275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.431413][ T4186] device veth1_vlan entered promiscuous mode [ 77.458365][ T1164] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 77.468377][ T1164] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.477543][ T1164] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.574096][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 77.584945][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.593243][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.600412][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.611091][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.620719][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.635312][ T1183] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.643466][ T1183] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.673958][ T4186] device veth0_macvtap entered promiscuous mode [ 77.730217][ T4186] device veth1_macvtap entered promiscuous mode [ 77.780814][ T4299] loop2: detected capacity change from 0 to 512 [ 77.789264][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.801199][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.809930][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.854685][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.921970][ T4301] loop1: detected capacity change from 0 to 512 [ 77.939613][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.948512][ T4299] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 77.976968][ T4301] EXT4-fs (loop1): Ignoring removed oldalloc option [ 77.990436][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.008124][ T4301] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 78.043896][ T4299] ext4 filesystem being mounted at /0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 78.059137][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.094872][ T4301] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 78.109106][ T4299] syz.2.3 uses obsolete (PF_INET,SOCK_PACKET) [ 78.128854][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.142294][ T4301] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2825: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 78.166662][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.192667][ T4301] EXT4-fs (loop1): 1 truncate cleaned up [ 78.203949][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.204661][ T4301] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,oldalloc,barrier=0x0000000000000003,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 78.254489][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.269935][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.287429][ T1164] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.314035][ T1164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.356020][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.366610][ T4275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.366670][ T4275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.383248][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 78.399976][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.420530][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.457684][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.475758][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.493749][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.510863][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.522163][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.560922][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.615348][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.627289][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.683940][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.919951][ T1325] Bluetooth: hci2: command 0x0419 tx timeout [ 79.113406][ T4186] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.132401][ T1325] Bluetooth: hci0: command 0x0419 tx timeout [ 79.137099][ T4186] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.151433][ T1325] Bluetooth: hci3: command 0x0419 tx timeout [ 79.170230][ T1325] Bluetooth: hci1: command 0x0419 tx timeout [ 79.176627][ T1325] Bluetooth: hci4: command 0x0419 tx timeout [ 79.182503][ T4186] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.202984][ T4186] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.353456][ T4275] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.366437][ T4275] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.407557][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.425879][ T4306] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.440895][ T4306] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.479827][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.503527][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 79.512866][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 79.525798][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 79.535106][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 79.544676][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 79.553983][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 79.574910][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #3c2!!! [ 79.621835][ T4320] hub 8-0:1.0: USB hub found [ 79.632548][ T4320] hub 8-0:1.0: 1 port detected [ 80.598255][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 80.607741][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 81.140646][ T4333] loop3: detected capacity change from 0 to 128 [ 81.413940][ T7] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 81.693557][ T7] usb 5-1: Using ep0 maxpacket: 32 [ 81.824537][ T7] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.863368][ T7] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.053957][ T7] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 82.073513][ T7] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 82.114405][ T7] usb 5-1: Product: syz [ 82.118633][ T7] usb 5-1: Manufacturer: syz [ 82.125694][ T4326] loop0: detected capacity change from 0 to 32768 [ 82.135334][ T4342] loop3: detected capacity change from 0 to 1024 [ 82.200450][ T4342] EXT4-fs (loop3): Invalid log cluster size: 4294967295 [ 82.219771][ T4326] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.8 (4326) [ 82.257892][ T7] hub 5-1:4.0: USB hub found [ 82.329309][ T4326] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 82.403318][ T4326] BTRFS info (device loop0): using free space tree [ 82.413722][ T4326] BTRFS info (device loop0): has skinny extents [ 82.473675][ T7] hub 5-1:4.0: 2 ports detected [ 84.020764][ T4373] input: syz0 as /devices/virtual/input/input5 [ 84.224249][ T4326] BTRFS error (device loop0): open_ctree failed: -22 [ 84.653706][ T4385] hub 5-1:4.0: activate --> -90 [ 85.588145][ T4386] usb 5-1: USB disconnect, device number 2 [ 87.148294][ T13] cfg80211: failed to load regulatory.db [ 88.429713][ T4410] Trying to write to read-only block-device nullb0 [ 88.449871][ T4407] loop4: detected capacity change from 0 to 256 [ 88.466899][ T4406] Trying to write to read-only block-device nullb0 [ 88.512243][ T4406] Trying to write to read-only block-device nullb0 [ 88.593933][ T4410] Trying to write to read-only block-device nullb0 [ 88.855569][ T4406] Trying to write to read-only block-device nullb0 [ 88.874872][ T4410] Trying to write to read-only block-device nullb0 [ 88.991065][ T4416] process 'syz.0.22' launched './file0' with NULL argv: empty string added [ 89.052276][ T4406] Trying to write to read-only block-device nullb0 [ 89.816028][ T4410] Trying to write to read-only block-device nullb0 [ 89.873796][ T4406] Trying to write to read-only block-device nullb0 [ 90.008921][ T4406] Trying to write to read-only block-device nullb0 [ 92.537936][ T4448] binder: BINDER_SET_CONTEXT_MGR already set [ 92.544289][ T4448] binder: 4443:4448 ioctl 4018620d 200000004a80 returned -16 [ 93.518999][ T4453] syz.1.35 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 95.456874][ T4473] loop1: detected capacity change from 0 to 1024 [ 95.529829][ T4473] EXT4-fs (loop1): Invalid log cluster size: 4294967295 [ 96.042218][ T4469] ================================================================== [ 96.050720][ T4469] BUG: KASAN: use-after-free in __lock_acquire+0xf7/0x7c60 [ 96.058258][ T4469] Read of size 8 at addr ffff8880298aa8b8 by task syz.2.39/4469 [ 96.065922][ T4469] [ 96.068378][ T4469] CPU: 1 PID: 4469 Comm: syz.2.39 Not tainted 5.15.189-syzkaller #0 [ 96.076627][ T4469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 96.087002][ T4469] Call Trace: [ 96.090327][ T4469] [ 96.093316][ T4469] dump_stack_lvl+0x168/0x230 [ 96.098034][ T4469] ? show_regs_print_info+0x20/0x20 [ 96.103408][ T4469] ? load_image+0x3b0/0x3b0 [ 96.107948][ T4469] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 96.113357][ T4469] print_address_description+0x60/0x2d0 [ 96.119027][ T4469] ? __lock_acquire+0xf7/0x7c60 [ 96.124011][ T4469] kasan_report+0xdf/0x130 [ 96.128460][ T4469] ? __lock_acquire+0xf7/0x7c60 [ 96.133452][ T4469] __lock_acquire+0xf7/0x7c60 [ 96.138247][ T4469] ? __lock_acquire+0x12d9/0x7c60 [ 96.143572][ T4469] ? lock_chain_count+0x20/0x20 [ 96.148572][ T4469] ? verify_lock_unused+0x140/0x140 [ 96.154579][ T4469] ? verify_lock_unused+0x140/0x140 [ 96.159980][ T4469] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 96.166083][ T4469] ? lock_chain_count+0x20/0x20 [ 96.171132][ T4469] ? __rwlock_init+0x140/0x140 [ 96.176026][ T4469] lock_acquire+0x197/0x3f0 [ 96.180705][ T4469] ? remove_wait_queue+0x20/0x120 [ 96.185811][ T4469] ? read_lock_is_recursive+0x10/0x10 [ 96.191307][ T4469] ? rcu_lock_release+0x9/0x20 [ 96.196096][ T4469] ? _raw_spin_lock_irqsave+0x7f/0xf0 [ 96.201995][ T4469] ? lockdep_hardirqs_off+0x70/0x100 [ 96.207694][ T4469] _raw_spin_lock_irqsave+0xa4/0xf0 [ 96.213131][ T4469] ? remove_wait_queue+0x20/0x120 [ 96.218428][ T4469] ? _raw_spin_lock+0x40/0x40 [ 96.223138][ T4469] ? __fget_files+0x40f/0x480 [ 96.227937][ T4469] remove_wait_queue+0x20/0x120 [ 96.233014][ T4469] poll_freewait+0x99/0x210 [ 96.237594][ T4469] do_sys_poll+0xda0/0x1100 [ 96.242135][ T4469] ? do_sys_poll+0x671/0x1100 [ 96.247136][ T4469] ? poll_select_finish+0x5e0/0x5e0 [ 96.252450][ T4469] ? __ia32_compat_sys_ppoll_time64+0x2f0/0x2f0 [ 96.258909][ T4469] ? __ia32_compat_sys_ppoll_time64+0x2f0/0x2f0 [ 96.265283][ T4469] ? set_user_sigmask+0x157/0x1b0 [ 96.270515][ T4469] ? sigprocmask+0x190/0x190 [ 96.275137][ T4469] ? __lock_acquire+0x7c60/0x7c60 [ 96.280338][ T4469] __se_sys_ppoll+0x1fc/0x260 [ 96.285143][ T4469] ? __x64_sys_ppoll+0xc0/0xc0 [ 96.290213][ T4469] ? lockdep_hardirqs_on+0x94/0x140 [ 96.295530][ T4469] ? __x64_sys_ppoll+0x1c/0xc0 [ 96.300432][ T4469] do_syscall_64+0x4c/0xa0 [ 96.304884][ T4469] ? clear_bhb_loop+0x30/0x80 [ 96.309694][ T4469] ? clear_bhb_loop+0x30/0x80 [ 96.314395][ T4469] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 96.320540][ T4469] RIP: 0033:0x7f83145fcbe9 [ 96.324989][ T4469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.344890][ T4469] RSP: 002b:00007f8312864038 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 96.353540][ T4469] RAX: ffffffffffffffda RBX: 00007f8314823fa0 RCX: 00007f83145fcbe9 [ 96.361668][ T4469] RDX: 0000200000000240 RSI: 0000000000000001 RDI: 0000200000000100 [ 96.369765][ T4469] RBP: 00007f831467fe19 R08: 0000000000000008 R09: 0000000000000000 [ 96.377884][ T4469] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000000 [ 96.386428][ T4469] R13: 00007f8314824038 R14: 00007f8314823fa0 R15: 00007ffef0315088 [ 96.394528][ T4469] [ 96.397661][ T4469] [ 96.399996][ T4469] Allocated by task 1: [ 96.404184][ T4469] __kasan_kmalloc+0xb5/0xf0 [ 96.408898][ T4469] comedi_device_postconfig+0x496/0xc50 [ 96.414560][ T4469] comedi_auto_config+0x265/0x3a0 [ 96.419703][ T4469] comedi_test_init+0x8f/0x130 [ 96.424502][ T4469] do_one_initcall+0x1ee/0x680 [ 96.429302][ T4469] do_initcall_level+0x137/0x1f0 [ 96.434462][ T4469] do_initcalls+0x4b/0x90 [ 96.438835][ T4469] kernel_init_freeable+0x3ce/0x560 [ 96.444063][ T4469] kernel_init+0x19/0x1b0 [ 96.448417][ T4469] ret_from_fork+0x1f/0x30 [ 96.452866][ T4469] [ 96.455558][ T4469] Freed by task 4470: [ 96.459921][ T4469] kasan_set_track+0x4b/0x70 [ 96.466853][ T4469] kasan_set_free_info+0x1f/0x40 [ 96.471919][ T4469] ____kasan_slab_free+0xd5/0x110 [ 96.477391][ T4469] slab_free_freelist_hook+0xea/0x170 [ 96.482799][ T4469] kfree+0xef/0x2a0 [ 96.486766][ T4469] comedi_device_detach+0x35f/0x6e0 [ 96.492217][ T4469] comedi_unlocked_ioctl+0xbd0/0xe90 [ 96.497616][ T4469] __se_sys_ioctl+0xfa/0x170 [ 96.502237][ T4469] do_syscall_64+0x4c/0xa0 [ 96.506777][ T4469] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 96.512788][ T4469] [ 96.515130][ T4469] The buggy address belongs to the object at ffff8880298aa800 [ 96.515130][ T4469] which belongs to the cache kmalloc-256 of size 256 [ 96.529558][ T4469] The buggy address is located 184 bytes inside of [ 96.529558][ T4469] 256-byte region [ffff8880298aa800, ffff8880298aa900) [ 96.542990][ T4469] The buggy address belongs to the page: [ 96.548725][ T4469] page:ffffea0000a62a80 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x298aa [ 96.559099][ T4469] head:ffffea0000a62a80 order:1 compound_mapcount:0 [ 96.565699][ T4469] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 96.574383][ T4469] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff888016841b40 [ 96.583211][ T4469] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 96.592220][ T4469] page dumped because: kasan: bad access detected [ 96.598928][ T4469] page_owner tracks the page as allocated [ 96.604752][ T4469] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, ts 20516661012, free_ts 0 [ 96.623012][ T4469] get_page_from_freelist+0x1b77/0x1c60 [ 96.628771][ T4469] __alloc_pages+0x1e1/0x470 [ 96.633412][ T4469] alloc_page_interleave+0x24/0x1e0 [ 96.638650][ T4469] new_slab+0xc0/0x4b0 [ 96.642746][ T4469] ___slab_alloc+0x81e/0xdf0 [ 96.647383][ T4469] kmem_cache_alloc_trace+0x1a5/0x2a0 [ 96.652785][ T4469] bus_add_driver+0xda/0x5a0 [ 96.657569][ T4469] driver_register+0x32d/0x430 [ 96.662430][ T4469] __hid_register_driver+0x126/0x170 [ 96.667837][ T4469] do_one_initcall+0x1ee/0x680 [ 96.672856][ T4469] do_initcall_level+0x137/0x1f0 [ 96.677828][ T4469] do_initcalls+0x4b/0x90 [ 96.682270][ T4469] kernel_init_freeable+0x3ce/0x560 [ 96.687967][ T4469] kernel_init+0x19/0x1b0 [ 96.692421][ T4469] ret_from_fork+0x1f/0x30 [ 96.696860][ T4469] page_owner free stack trace missing [ 96.702329][ T4469] [ 96.704751][ T4469] Memory state around the buggy address: [ 96.710572][ T4469] ffff8880298aa780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 96.718668][ T4469] ffff8880298aa800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 96.726751][ T4469] >ffff8880298aa880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 96.734926][ T4469] ^ [ 96.741160][ T4469] ffff8880298aa900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 96.749310][ T4469] ffff8880298aa980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 96.757403][ T4469] ================================================================== [ 96.765589][ T4469] Disabling lock debugging due to kernel taint [ 96.771963][ T4469] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 96.779661][ T4469] CPU: 1 PID: 4469 Comm: syz.2.39 Tainted: G B 5.15.189-syzkaller #0 [ 96.789176][ T4469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 96.799566][ T4469] Call Trace: [ 96.802872][ T4469] [ 96.805820][ T4469] dump_stack_lvl+0x168/0x230 [ 96.810535][ T4469] ? show_regs_print_info+0x20/0x20 [ 96.816018][ T4469] ? load_image+0x3b0/0x3b0 [ 96.820549][ T4469] panic+0x2c9/0x7f0 [ 96.824482][ T4469] ? bpf_jit_dump+0xd0/0xd0 [ 96.829007][ T4469] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 96.834930][ T4469] ? _raw_spin_unlock+0x40/0x40 [ 96.839800][ T4469] ? __lock_acquire+0xf7/0x7c60 [ 96.844920][ T4469] check_panic_on_warn+0x80/0xa0 [ 96.849906][ T4469] ? __lock_acquire+0xf7/0x7c60 [ 96.855009][ T4469] end_report+0x6d/0xf0 [ 96.859188][ T4469] kasan_report+0x102/0x130 [ 96.863730][ T4469] ? __lock_acquire+0xf7/0x7c60 [ 96.868780][ T4469] __lock_acquire+0xf7/0x7c60 [ 96.873495][ T4469] ? __lock_acquire+0x12d9/0x7c60 [ 96.878630][ T4469] ? lock_chain_count+0x20/0x20 [ 96.883612][ T4469] ? verify_lock_unused+0x140/0x140 [ 96.888921][ T4469] ? verify_lock_unused+0x140/0x140 [ 96.894175][ T4469] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 96.900186][ T4469] ? lock_chain_count+0x20/0x20 [ 96.905057][ T4469] ? __rwlock_init+0x140/0x140 [ 96.909936][ T4469] lock_acquire+0x197/0x3f0 [ 96.914474][ T4469] ? remove_wait_queue+0x20/0x120 [ 96.919526][ T4469] ? read_lock_is_recursive+0x10/0x10 [ 96.924923][ T4469] ? rcu_lock_release+0x9/0x20 [ 96.929798][ T4469] ? _raw_spin_lock_irqsave+0x7f/0xf0 [ 96.935192][ T4469] ? lockdep_hardirqs_off+0x70/0x100 [ 96.940676][ T4469] _raw_spin_lock_irqsave+0xa4/0xf0 [ 96.946093][ T4469] ? remove_wait_queue+0x20/0x120 [ 96.951225][ T4469] ? _raw_spin_lock+0x40/0x40 [ 96.955924][ T4469] ? __fget_files+0x40f/0x480 [ 96.960981][ T4469] remove_wait_queue+0x20/0x120 [ 96.965890][ T4469] poll_freewait+0x99/0x210 [ 96.970423][ T4469] do_sys_poll+0xda0/0x1100 [ 96.975190][ T4469] ? do_sys_poll+0x671/0x1100 [ 96.979917][ T4469] ? poll_select_finish+0x5e0/0x5e0 [ 96.985251][ T4469] ? __ia32_compat_sys_ppoll_time64+0x2f0/0x2f0 [ 96.991884][ T4469] ? __ia32_compat_sys_ppoll_time64+0x2f0/0x2f0 [ 96.998198][ T4469] ? set_user_sigmask+0x157/0x1b0 [ 97.003349][ T4469] ? sigprocmask+0x190/0x190 [ 97.008139][ T4469] ? __lock_acquire+0x7c60/0x7c60 [ 97.013298][ T4469] __se_sys_ppoll+0x1fc/0x260 [ 97.018016][ T4469] ? __x64_sys_ppoll+0xc0/0xc0 [ 97.023022][ T4469] ? lockdep_hardirqs_on+0x94/0x140 [ 97.028699][ T4469] ? __x64_sys_ppoll+0x1c/0xc0 [ 97.033593][ T4469] do_syscall_64+0x4c/0xa0 [ 97.038136][ T4469] ? clear_bhb_loop+0x30/0x80 [ 97.042849][ T4469] ? clear_bhb_loop+0x30/0x80 [ 97.047848][ T4469] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 97.053875][ T4469] RIP: 0033:0x7f83145fcbe9 [ 97.058476][ T4469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.078748][ T4469] RSP: 002b:00007f8312864038 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 97.087287][ T4469] RAX: ffffffffffffffda RBX: 00007f8314823fa0 RCX: 00007f83145fcbe9 [ 97.095509][ T4469] RDX: 0000200000000240 RSI: 0000000000000001 RDI: 0000200000000100 [ 97.103787][ T4469] RBP: 00007f831467fe19 R08: 0000000000000008 R09: 0000000000000000 [ 97.111949][ T4469] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000000 [ 97.120123][ T4469] R13: 00007f8314824038 R14: 00007f8314823fa0 R15: 00007ffef0315088 [ 97.128490][ T4469] [ 97.131811][ T4469] Kernel Offset: disabled [ 97.136472][ T4469] Rebooting in 86400 seconds..