last executing test programs: 1m44.992951195s ago: executing program 0 (id=50): accept$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, &(0x7f0000000100)=0x10) writev(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44801}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0xe8c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x1, 0x8, 0x0, 'queue0\x00', 0x2}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x95ff]}}], 0xffc8) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x9, 0x10}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x10000, 0x4) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) modify_ldt$read(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xa, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0xf0, 0x71, 0x10, 0x1e}}, &(0x7f0000000480)='GPL\x00'}, 0x80) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000940)={0x80001b0, 0x0, [{0xeeee8000, 0xf4, &(0x7f0000000600)=""/244}]}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40046f41, &(0x7f0000000440)=0x1f) 1m42.964393199s ago: executing program 0 (id=55): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) r0 = getpgid(0x0) prlimit64(r0, 0xe, &(0x7f00000002c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000e40)=@mangle={'mangle\x00', 0x64, 0x6, 0x500, 0x0, 0x270, 0xd0, 0x340, 0x0, 0x430, 0x430, 0x430, 0x430, 0x430, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x270}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x1, 0x3, 0x44}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f00000004c0)={0x1f, 0xffff, 0x3}, 0x6) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r5, {0x0, 0xa6d}}, './file0\x00'}) write(r5, &(0x7f0000000040)="05000000010001", 0x7) 1m41.856478298s ago: executing program 0 (id=58): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0}, 0x18) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001300)='/proc/timer_list\x00', 0x0, 0x0) preadv(r3, &(0x7f0000001500)=[{&(0x7f00000002c0)=""/4084, 0xff4}], 0x1, 0xf73, 0x0) 1m38.333720198s ago: executing program 0 (id=66): accept$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, &(0x7f0000000100)=0x10) writev(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44801}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0xe8c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x1, 0x8, 0x0, 'queue0\x00', 0x2}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x95ff]}}], 0xffc8) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x9, 0x10}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x10000, 0x4) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) modify_ldt$read(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xa, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0xf0, 0x71, 0x10, 0x1e}}, &(0x7f0000000480)='GPL\x00'}, 0x80) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000940)={0x80001b0, 0x0, [{0xeeee8000, 0xf4, &(0x7f0000000600)=""/244}]}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40046f41, &(0x7f0000000440)=0x1f) 1m35.87547178s ago: executing program 0 (id=74): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000480)=ANY=[@ANYBLOB="08000000000000000a00000012b8b42bff01000000000000000000000000000101000100"/108], 0x90) r3 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r4 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x400008bf) write$binfmt_elf32(r3, &(0x7f0000000040)=ANY=[@ANYRES64=r4], 0x69) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r5, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000001100)={{}, {0x1, 0x6}, [], {0x4, 0x5}, [], {0x10, 0x3}, {0x20, 0x7}}, 0x24, 0x1) setreuid(0xffffffffffffffff, 0xee01) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 1m31.854529319s ago: executing program 0 (id=84): r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000080)=0x7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)={0x14, 0x25, 0x1, 0x70bd2c, 0x25dfdbfb, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x10) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000840)={0x0, 0x8}, 0x8) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r5, 0x10e, 0x5, &(0x7f0000000040)=""/162, &(0x7f0000000100)=0xa2) r6 = gettid() bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @func={0x1, 0x0, 0x0, 0x12}, @ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}, {0x0, [0x2e, 0x0, 0x0, 0x61]}}, 0x0, 0x46}, 0x28) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000300)=ANY=[], 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) 1m16.730437248s ago: executing program 32 (id=84): r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000080)=0x7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)={0x14, 0x25, 0x1, 0x70bd2c, 0x25dfdbfb, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x10) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000840)={0x0, 0x8}, 0x8) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r5, 0x10e, 0x5, &(0x7f0000000040)=""/162, &(0x7f0000000100)=0xa2) r6 = gettid() bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @func={0x1, 0x0, 0x0, 0x12}, @ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}, {0x0, [0x2e, 0x0, 0x0, 0x61]}}, 0x0, 0x46}, 0x28) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000300)=ANY=[], 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) 15.430700006s ago: executing program 2 (id=256): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000001040)) 14.880337025s ago: executing program 2 (id=257): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002280)={0x11, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, &(0x7f00000003c0)=[{0x2, 0x4, 0x4007, 0x4}, {0x2, 0x1, 0x8, 0x3}, {0x1, 0x4, 0x4, 0x8d6d05163eee395e}, {0x0, 0x5, 0xa, 0x7}, {0x5, 0x4, 0x0, 0x3}, {0x5, 0x2, 0x5, 0x9}, {0x4, 0x1, 0xe, 0x1}], 0x10, 0xfffffffc}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x181040, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000500)=ANY=[@ANYBLOB="0100000000000000830000"]) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c80)={0x0, &(0x7f0000000c40)=""/3, 0x26, 0x3, 0x1, 0x1}, 0x28) r4 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) accept(0xffffffffffffffff, &(0x7f0000002080)=@l2tp6, &(0x7f0000002100)=0x80) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000003c0)=@nat={'nat\x00', 0x670, 0x5, 0x458, 0xe8, 0x180, 0xfeffffff, 0x2a0, 0x180, 0x3c0, 0x3c0, 0xffffffff, 0x3c0, 0x3c0, 0x5, 0x0, {[{{@uncond, 0x0, 0xb0, 0xe8, 0x0, {}, [@common=@socket0={{0x20}}, @common=@socket0={{0x20}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x1, @multicast1, @remote, @gre_key, @gre_key}}}}, {{@ip={@dev, @empty, 0x0, 0x0, 'vlan1\x00', 'veth0\x00'}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x0, 0x0, 0x4}}, @common=@inet=@ecn={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'syzkaller1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth0_virt_wifi\x00'}}, @common=@addrtype={{0x30}}]}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b8) r6 = epoll_create(0x6) dup3(r4, r6, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) 14.832319137s ago: executing program 1 (id=258): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x34, r2, 0x1, 0x70bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa5}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}]}, 0x34}}, 0x8020) 14.669360409s ago: executing program 1 (id=260): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000100)=ANY=[], 0xfc, 0x383, &(0x7f0000000e00)="$eJzs3c9rI2UYwPEnaZpOumyTgygK0ge96GVoqxcvapBdEAsu3Y24Kwiz24mGjEmZCZGI2HryJuLNf0Bw2eOCwoL6D/Tibb148WQvgqCLiiPzK8mk082P7dJ0+/3A7jzJ+z6ZdzKT8ryBeXPw9hcfNOueWbc6kjdUciIi90QqkpdELtoUJcOePH/uj7tPX7567Y3q5uaFLdWL1SsvbKjqyur3H35cirvdWZL9yrsHYvy6//j+kwf/XXm/4WnD01a7o5Zeb//Ssa47tm43vKapesmxLc/WRsuz3ai9HbXXnfbOTk+t1vb55R3X9jy1Wj1t2j3ttLXj9tR6z2q01DRNPb+cNdxHmDFtQiHeVmfc4Y0Z83Dc/vZ9/z7Nrlu1FkTM0qGW2s2HOi4AADCXRur/r5IaoSL5fkGZi+cCxTBOTwOC+j+Jw/o/mCwM6v9bz/zYOffW7ZW4/r9TzKr/X/w5yk/V/8Hej73+/2bk8eGK6NTbnaZz7ebWljVr/Y/5sJr+RP42mLHHgvo/+DT0Z/SfvnNrLQyo/wEAAAAAAAAAAAAAAAAAAAAAOA3u+X7Z9/1ysk3+DW4hiB+L/OP7vtz3RmOcOsl5z4+c/6V4RYH+9YBH0uWr18QIb9wrrIg4n3Vr3Vq0jduTjmtSln/D6yEWLTixFzZqoCI/OLvd2mKcsBD+XxVRccSWdSlLJZUfxhdf37ywrpEoP9z/breWKywH+XVphPkbUpbHsvM3MvOL8tyzQ/mmlOWnG9IWR7bD63qQ/8m66mtvbo7kl8J+WV55uKcEAAAAAIBjZ6oa8fS5kp7/RvN301TNag/m8jI8Pz/8/UB/fr2WOT8vlJ8qnOyxAwAAAABwVnjFj5qW49iu1zsyKMm4Pkvxq400FWTMKwdBYYI+qeBuGCwOnvnu85dW0ntfGDrCSV+5GP+CxqTDcL2eTDzmJPhzSTLfzGQJ11STkf2uThgkxz9BZ2PaU+B6+emP3Xa91WA8Om3W4si+kq+NjsqSS7O9Y0cHycq54zo/8eXXf822i1y8au9w08u3jTFHGga5kWf2xly0v/v+2PEsZv+1+HbqH5kBAAAAMD+Sor/kJc+8erIDAgAAAAAAAAAAAAAAAAAAAAAAAAAAAADgDHrABc8mCk74EAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC58X8AAAD//7h58F4=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) fallocate(r0, 0x0, 0x0, 0xfffb) 13.311163233s ago: executing program 1 (id=264): openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, &(0x7f0000000200)=0x93, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fanotify_init(0x40, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200), 0x1503, 0x0) ioctl$RNDADDENTROPY(r5, 0x40085203, &(0x7f0000000240)={0xa}) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) mount(&(0x7f0000000040)=@filename='\x00', &(0x7f00000000c0)='.\x00', &(0x7f0000000040)='ubifs\x00', 0x0, 0x0) 12.85933478s ago: executing program 1 (id=267): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd"], 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001640)=@newtaction={0xf0, 0x30, 0x1, 0x2, 0x25dfdbfc, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x2, 0x0, 0x446, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, 0xfffffffd}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x401, 0x1, 0x0, {0x0, 0x0, 0x0, 0x401}}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x8010}, 0x2000000) 12.618991994s ago: executing program 5 (id=269): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r4, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r4, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) 11.748551459s ago: executing program 2 (id=270): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000280), 0x106, 0x5}}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = getpid() io_uring_setup(0x4edb, 0x0) r2 = syz_pidfd_open(r1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={0x0, 0x0}, 0x28) open_by_handle_at(r2, 0x0, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x4000) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @local}) recvmmsg(0xffffffffffffffff, &(0x7f0000004ec0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2000, 0x0) symlink(0x0, &(0x7f0000000240)='./file0\x00') mkdir(&(0x7f0000000400)='\x00', 0x0) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f00000001c0)='./cgroup\x00', &(0x7f0000000180)='ufs\x00', 0x1a0c099, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) setxattr$trusted_overlay_redirect(0x0, 0x0, 0x0, 0x0, 0x0) 11.628718551s ago: executing program 5 (id=271): socket$kcm(0x10, 0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x8d, &(0x7f0000000580)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x2, 0x0, 0x0, 0x1000, {[@md5sig={0x13, 0x12, "2313a3101166d6c856214c013c019043"}]}}, {"28003e64a9d240e0f4403499a02ed7825eac4510f0a31d3d4ed9d44b953f498d3fac0a1c99d50000ac90218b6a4cabaa0a229a52ad886d7a623692c15df8ba0c49984c"}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000f00), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x4c, r4, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x4c}}, 0x0) 9.94706042s ago: executing program 2 (id=275): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4844}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) r0 = getpgid(0x0) prlimit64(r0, 0xe, &(0x7f00000002c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000e40)=@mangle={'mangle\x00', 0x64, 0x6, 0x500, 0x0, 0x270, 0xd0, 0x340, 0x0, 0x430, 0x430, 0x430, 0x430, 0x430, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x270}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x1, 0x3, 0x44}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f00000004c0)={0x1f, 0xffff, 0x3}, 0x6) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r5, {0x0, 0xa6d}}, './file0\x00'}) write(r5, &(0x7f0000000040)="05000000010001", 0x7) 7.366985914s ago: executing program 4 (id=282): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000004c0), 0x80641, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x2, 0x7fffffff, 0x6, 0x14}) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x4a0002, 0x100) mkdirat(r1, &(0x7f00000000c0)='./file0\x00', 0x90) ioctl$IOCTL_STATUS_ACCEL_DEV(0xffffffffffffffff, 0x40046103, &(0x7f00000035c0)={0x4, 0xffff, 0x7, 0x0, 0x80, 0xd, 0xe, 0x10, 0x4, 0x0, 0x85, "257f52d7d1f1bd0f3da28982ba2e62f84c98c3b46c0ffaf7f85abf58c17b849f"}) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80280, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = signalfd(r1, &(0x7f0000000100)={[0x401]}, 0x8) r6 = syz_io_uring_setup(0x117, &(0x7f0000000300)={0x0, 0x0, 0x800, 0x4000, 0x3a6, 0x0, r5}, 0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000380)={0x7, 0x0}, 0x8) r10 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xb, 0x13, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@call={0x85, 0x0, 0x0, 0xbb}, @alu={0x4, 0x0, 0x2, 0x8, 0x8, 0x40, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='GPL\x00', 0x810, 0x0, 0x0, 0x41000, 0x41, '\x00', r8, @fallback=0x20, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x0, 0xa, 0x8000, 0x10}, 0x10, r9, r5, 0x5, &(0x7f00000003c0)=[r3, r10, r5, r5, r5, r5], &(0x7f00000005c0)=[{0x1, 0x5, 0x9, 0x9}, {0x2, 0x2, 0x8, 0xf}, {0x2, 0x3, 0xa, 0x2}, {0x2, 0x1, 0x10, 0xa}, {0x3, 0x5, 0x6, 0x5}], 0x10, 0x5}, 0x94) syz_io_uring_submit(0x0, r7, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r3, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x18}, 0x0, 0x20040000}) io_uring_enter(r6, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r11 = syz_open_dev$sndpcmp(&(0x7f0000001c40), 0x1ff, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r11, 0x4112, 0x0) r12 = syz_open_pts(r0, 0x101000) r13 = dup3(r12, r0, 0x0) ioctl$TIOCSTI(r13, 0x5412, &(0x7f0000000000)=0x17) 6.97662343s ago: executing program 5 (id=283): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f00003f5000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x41, 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r3, 0x0, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r3, 0x114, 0x1, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[0xa, 0x8000, 0x0, 0x5, 0x7ffc, 0x0, 0xc8, 0x7, 0x85, 0x2, 0x401, 0x10000000007, 0x3, 0x800, 0x5, 0xfffffffffffffd], 0x8000000, 0x285f40}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.348620711s ago: executing program 4 (id=284): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be521634", 0xc}, {&(0x7f0000000140)="ebe3a0e9796cfd", 0x7}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d10", 0x25}], 0x3}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000021c0)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000180)={0x2020}, 0x2024) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000121"], 0xffe) 6.157459984s ago: executing program 1 (id=285): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x0) 6.033514936s ago: executing program 3 (id=286): eventfd2(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, 0x0, 0x4004000) getpid() ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(0xffffffffffffffff, 0x7b0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6.032233716s ago: executing program 4 (id=287): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$mice(0xffffffffffffff9c, 0x0, 0x1) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1811e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x183341, 0x2) ioctl$F2FS_IOC_SET_PIN_FILE(r3, 0x4004f50d, 0x0) r4 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r4, 0x0, 0xfc01, 0x1000f4) creat(&(0x7f0000000180)='./bus\x00', 0x9b00000000000000) 5.849539929s ago: executing program 5 (id=288): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x2004002, &(0x7f0000000300)={[{@volume={'volume', 0x3d, 0x3e}}, {@gid}, {@dmode={'dmode', 0x3d, 0x4}}, {@rootdir={'rootdir', 0x3d, 0x4}}, {@uid_ignore}, {@unhide}, {@noadinicb}, {@iocharset={'iocharset', 0x3d, 'macturkish'}}, {@longad}]}, 0x1, 0xc32, &(0x7f0000000e00)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) 3.251387004s ago: executing program 4 (id=289): accept$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, &(0x7f0000000100)=0x10) writev(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44801}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0xe8c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x1, 0x8, 0x0, 'queue0\x00', 0x2}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x95ff]}}], 0xffc8) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x9, 0x10}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x10000, 0x4) read$msr(r1, 0x0, 0x0) modify_ldt$read(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xa, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0xf0, 0x71, 0x10, 0x1e}}, &(0x7f0000000480)='GPL\x00'}, 0x80) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000940)={0x80001b0, 0x0, [{0xeeee8000, 0xf4, &(0x7f0000000600)=""/244}]}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40046f41, &(0x7f0000000440)=0x1f) 3.250226544s ago: executing program 3 (id=290): syz_open_dev$dri(0x0, 0x1, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x78) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) sendto$packet(r3, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) 3.249416744s ago: executing program 1 (id=291): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x90) r3 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r4 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x400008bf) write$binfmt_elf32(r3, &(0x7f0000000040)=ANY=[@ANYRES64=r4], 0x69) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r5, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000001100)={{}, {0x1, 0x6}, [], {0x4, 0x5}, [], {0x10, 0x3}, {0x20, 0x7}}, 0x24, 0x1) setreuid(0xffffffffffffffff, 0xee01) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 2.93724421s ago: executing program 4 (id=292): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.103951423s ago: executing program 5 (id=293): socket$kcm(0x10, 0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x8d, &(0x7f0000000580)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x2, 0x0, 0x0, 0x1000, {[@md5sig={0x13, 0x12, "2313a3101166d6c856214c013c019043"}]}}, {"28003e64a9d240e0f4403499a02ed7825eac4510f0a31d3d4ed9d44b953f498d3fac0a1c99d50000ac90218b6a4cabaa0a229a52ad886d7a623692c15df8ba0c49984c"}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000f00), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x4c, r4, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x4c}}, 0x0) 2.058723644s ago: executing program 3 (id=294): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000004c0), 0x80641, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x2, 0x7fffffff, 0x6, 0x14}) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x4a0002, 0x100) mkdirat(r1, &(0x7f00000000c0)='./file0\x00', 0x90) ioctl$IOCTL_STATUS_ACCEL_DEV(0xffffffffffffffff, 0x40046103, &(0x7f00000035c0)={0x4, 0xffff, 0x7, 0x0, 0x80, 0xd, 0xe, 0x10, 0x4, 0x0, 0x85, "257f52d7d1f1bd0f3da28982ba2e62f84c98c3b46c0ffaf7f85abf58c17b849f"}) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80280, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = signalfd(r1, &(0x7f0000000100)={[0x401]}, 0x8) r6 = syz_io_uring_setup(0x117, &(0x7f0000000300)={0x0, 0x0, 0x800, 0x4000, 0x3a6, 0x0, r5}, 0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000380)={0x7, 0x0}, 0x8) r10 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xb, 0x13, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@call={0x85, 0x0, 0x0, 0xbb}, @alu={0x4, 0x0, 0x2, 0x8, 0x8, 0x40, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='GPL\x00', 0x810, 0x0, 0x0, 0x41000, 0x41, '\x00', r8, @fallback=0x20, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x0, 0xa, 0x8000, 0x10}, 0x10, r9, r5, 0x5, &(0x7f00000003c0)=[r3, r10, r5, r5, r5, r5], &(0x7f00000005c0)=[{0x1, 0x5, 0x9, 0x9}, {0x2, 0x2, 0x8, 0xf}, {0x2, 0x3, 0xa, 0x2}, {0x2, 0x1, 0x10, 0xa}, {0x3, 0x5, 0x6, 0x5}], 0x10, 0x5}, 0x94) syz_io_uring_submit(0x0, r7, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r3, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x18}, 0x0, 0x20040000}) io_uring_enter(r6, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r11 = syz_open_dev$sndpcmp(&(0x7f0000001c40), 0x1ff, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r11, 0x4112, 0x0) r12 = syz_open_pts(r0, 0x101000) r13 = dup3(r12, r0, 0x0) ioctl$TIOCSTI(r13, 0x5412, &(0x7f0000000000)=0x17) 1.883522638s ago: executing program 3 (id=295): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd"], 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001640)=@newtaction={0xf0, 0x30, 0x1, 0x2, 0x25dfdbfc, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x2, 0x0, 0x446, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, 0xfffffffd}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x401, 0x1, 0x0, {0x0, 0x0, 0x0, 0x401}}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x8010}, 0x2000000) 1.572612063s ago: executing program 2 (id=296): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$vim2m(0x0, 0x47b, 0x2) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) getdents64(0xffffffffffffffff, &(0x7f0000001280)=""/173, 0xad) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) lseek(0xffffffffffffffff, 0x851, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)={[&(0x7f0000000300)='\x1d\xa7\xa8\x9f|\xe4\xdc-$', &(0x7f0000000380)='G \x00', &(0x7f0000000400)='\x00', &(0x7f0000000500)='\x00\x00\x80[\x00\x00']}) 1.572424083s ago: executing program 4 (id=297): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r4, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r4, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) 376.537363ms ago: executing program 3 (id=298): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be521634", 0xc}, {&(0x7f0000000140)="ebe3a0e9796cfd", 0x7}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d10", 0x25}], 0x3}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000021c0)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000180)={0x2020}, 0x2024) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000121"], 0xffe) 312.364814ms ago: executing program 2 (id=299): sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000280), 0x106, 0x5}}, 0x20) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000100)=0x8000) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = getpid() io_uring_setup(0x4edb, 0x0) syz_pidfd_open(r2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x4000) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @local}) recvmmsg(0xffffffffffffffff, &(0x7f0000004ec0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2000, 0x0) symlink(0x0, &(0x7f0000000240)='./file0\x00') mkdir(&(0x7f0000000400)='\x00', 0x0) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f00000001c0)='./cgroup\x00', &(0x7f0000000180)='ufs\x00', 0x1a0c099, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 118.415368ms ago: executing program 5 (id=300): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) 0s ago: executing program 3 (id=301): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.234' (ED25519) to the list of known hosts. [ 65.884691][ T4171] cgroup: Unknown subsys name 'net' [ 66.025629][ T4171] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.531289][ T4171] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 69.082133][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 69.105206][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 69.130931][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 69.156317][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 69.334212][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.341677][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.351482][ T4184] device bridge_slave_0 entered promiscuous mode [ 69.360525][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.367862][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.376103][ T4192] device bridge_slave_0 entered promiscuous mode [ 69.396449][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.404282][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.412693][ T4189] device bridge_slave_0 entered promiscuous mode [ 69.422279][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.429526][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.437620][ T4189] device bridge_slave_1 entered promiscuous mode [ 69.446084][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.453521][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.462416][ T4184] device bridge_slave_1 entered promiscuous mode [ 69.470200][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.477576][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.485666][ T4192] device bridge_slave_1 entered promiscuous mode [ 69.500711][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 69.547090][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.554431][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.562972][ T4183] device bridge_slave_0 entered promiscuous mode [ 69.599766][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.609997][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.617726][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.626072][ T4183] device bridge_slave_1 entered promiscuous mode [ 69.635839][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.647176][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.667618][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.685508][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.696912][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.752925][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.783290][ T4192] team0: Port device team_slave_0 added [ 69.791571][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.812403][ T4189] team0: Port device team_slave_0 added [ 69.821087][ T4184] team0: Port device team_slave_0 added [ 69.828441][ T4189] team0: Port device team_slave_1 added [ 69.843697][ T4192] team0: Port device team_slave_1 added [ 69.859399][ T4184] team0: Port device team_slave_1 added [ 69.880761][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.887939][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.896861][ T4182] device bridge_slave_0 entered promiscuous mode [ 69.915562][ T4183] team0: Port device team_slave_0 added [ 69.952509][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.959661][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.967570][ T4182] device bridge_slave_1 entered promiscuous mode [ 69.976098][ T4183] team0: Port device team_slave_1 added [ 69.983041][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.990242][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.017698][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.030550][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.037718][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.064585][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.076657][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.083692][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.110714][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.143725][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.151073][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.178622][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.190977][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.198319][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.224933][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.236936][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.244958][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.272079][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.304258][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.311306][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.338001][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.359281][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.370599][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.387938][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.395508][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.422189][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.452283][ T4182] team0: Port device team_slave_0 added [ 70.494067][ T4182] team0: Port device team_slave_1 added [ 70.519516][ T4184] device hsr_slave_0 entered promiscuous mode [ 70.529131][ T4184] device hsr_slave_1 entered promiscuous mode [ 70.571828][ T4192] device hsr_slave_0 entered promiscuous mode [ 70.578995][ T4192] device hsr_slave_1 entered promiscuous mode [ 70.585809][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.594232][ T4192] Cannot create hsr debugfs directory [ 70.613363][ T4183] device hsr_slave_0 entered promiscuous mode [ 70.621228][ T4183] device hsr_slave_1 entered promiscuous mode [ 70.628271][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.636147][ T4183] Cannot create hsr debugfs directory [ 70.642584][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.649875][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.676331][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.691346][ T4189] device hsr_slave_0 entered promiscuous mode [ 70.698413][ T4189] device hsr_slave_1 entered promiscuous mode [ 70.705372][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.713536][ T4189] Cannot create hsr debugfs directory [ 70.729596][ T4173] Bluetooth: hci3: command 0x0409 tx timeout [ 70.737212][ T4173] Bluetooth: hci4: command 0x0409 tx timeout [ 70.738712][ T4185] Bluetooth: hci0: command 0x0409 tx timeout [ 70.744264][ T4173] Bluetooth: hci1: command 0x0409 tx timeout [ 70.756049][ T4173] Bluetooth: hci2: command 0x0409 tx timeout [ 70.764890][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.772372][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.799417][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.947155][ T4182] device hsr_slave_0 entered promiscuous mode [ 70.954440][ T4182] device hsr_slave_1 entered promiscuous mode [ 70.962385][ T4182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.970458][ T4182] Cannot create hsr debugfs directory [ 71.173924][ T4183] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.186229][ T4183] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.196299][ T4183] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.218849][ T4183] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.274338][ T4192] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 71.284373][ T4192] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.295687][ T4192] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.315867][ T4192] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 71.381811][ T4184] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.403721][ T4184] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.419825][ T4184] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.441497][ T4184] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.451750][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.459298][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.520362][ T4189] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.530532][ T4189] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.555976][ T4189] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.565764][ T4189] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.601851][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.624252][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.651512][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.664490][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.675238][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.684110][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.693503][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.714701][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.745864][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.754988][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.765851][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.773159][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.782400][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.792255][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.801231][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.808409][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.816542][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.825913][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.841929][ T4182] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.856734][ T4182] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.867875][ T4182] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.880676][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.891809][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.901144][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.908810][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.917253][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.926507][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.949961][ T4182] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.979395][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.989858][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.999453][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.008309][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.017480][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.027548][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.036832][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.044092][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.052885][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.062089][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.073818][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.082402][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.092299][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.111911][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.124225][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.136244][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.144554][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.154624][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.182871][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.200988][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.211425][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.226949][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.246786][ T4192] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.258463][ T4192] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.275009][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.284573][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.302730][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.312331][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.346185][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.361759][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.379699][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.398387][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.416635][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.451053][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.465550][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.490368][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.497619][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.521691][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.570998][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.581732][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.591373][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.598438][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.606740][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.615475][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.623383][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.636569][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.650452][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.673558][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.693040][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.701284][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.711135][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.719691][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.727816][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.737898][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.749273][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.761827][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.806644][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.809176][ T7] Bluetooth: hci0: command 0x041b tx timeout [ 72.815343][ T4245] Bluetooth: hci2: command 0x041b tx timeout [ 72.833172][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.834814][ T4245] Bluetooth: hci1: command 0x041b tx timeout [ 72.847551][ T4245] Bluetooth: hci4: command 0x041b tx timeout [ 72.849745][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.860836][ T4245] Bluetooth: hci3: command 0x041b tx timeout [ 72.870635][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.879761][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.886948][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.896887][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.905635][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.915415][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.924628][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.933637][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.940782][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.951028][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.960875][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.970405][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.979828][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.988994][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.005401][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.015199][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.033795][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.057083][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.077221][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.091760][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.102836][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.112068][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.121524][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.165388][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.185552][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.194702][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.209406][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.217354][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.226734][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.235489][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.245490][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.253893][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.267207][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.277090][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.295725][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.305741][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.315236][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.322461][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.331786][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.341953][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.351574][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.358950][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.370628][ T4183] device veth0_vlan entered promiscuous mode [ 73.396274][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.405326][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.414632][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.424990][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.435692][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.446652][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.462898][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.472611][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.486571][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.496339][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.514005][ T4183] device veth1_vlan entered promiscuous mode [ 73.552400][ T4192] device veth0_vlan entered promiscuous mode [ 73.563108][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.574323][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.584285][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.593838][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.616264][ T4182] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 73.627764][ T4182] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.654490][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.662687][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.673119][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.683599][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.692882][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.702728][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.710675][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.718157][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.739235][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.757005][ T4192] device veth1_vlan entered promiscuous mode [ 73.797172][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.817522][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.830945][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.867879][ T4183] device veth0_macvtap entered promiscuous mode [ 73.886589][ T4183] device veth1_macvtap entered promiscuous mode [ 73.894934][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.911504][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.927254][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.938190][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.948194][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.986065][ T4192] device veth0_macvtap entered promiscuous mode [ 74.000947][ T4192] device veth1_macvtap entered promiscuous mode [ 74.010926][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.021978][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.031217][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.039464][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.046971][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.056328][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.067305][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.076455][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.084437][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.094074][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.102663][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.110640][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.122069][ T4184] device veth0_vlan entered promiscuous mode [ 74.147316][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.159578][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.169093][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.178134][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.193632][ T4184] device veth1_vlan entered promiscuous mode [ 74.211041][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.222750][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.235066][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.249439][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.271681][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.279782][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.288434][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.297499][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.308330][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.317619][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.326804][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.339562][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.350302][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.362000][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.384772][ T4183] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.394728][ T4183] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.403943][ T4183] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.414742][ T4183] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.426942][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.436519][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.445663][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.454927][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.466564][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.476403][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.491819][ T4192] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.502718][ T4192] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.514257][ T4192] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.524060][ T4192] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.549941][ T4184] device veth0_macvtap entered promiscuous mode [ 74.566673][ T4184] device veth1_macvtap entered promiscuous mode [ 74.579059][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.587435][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.596425][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.605747][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.643684][ T4189] device veth0_vlan entered promiscuous mode [ 74.651092][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.660198][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.668008][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.677401][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.707226][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.719670][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.730060][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.741174][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.757183][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.780633][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.793510][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.803019][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.814757][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.824997][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.834689][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.849825][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.873496][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.885270][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.889302][ T13] Bluetooth: hci0: command 0x040f tx timeout [ 74.897230][ T23] Bluetooth: hci3: command 0x040f tx timeout [ 74.910280][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.916032][ T23] Bluetooth: hci4: command 0x040f tx timeout [ 74.927302][ T23] Bluetooth: hci1: command 0x040f tx timeout [ 74.927601][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.933754][ T23] Bluetooth: hci2: command 0x040f tx timeout [ 74.953388][ T4189] device veth1_vlan entered promiscuous mode [ 74.969825][ T4182] device veth0_vlan entered promiscuous mode [ 74.977390][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.987852][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.997121][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.012259][ T4184] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.022861][ T4184] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.032051][ T4184] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.041332][ T4184] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.073781][ T4182] device veth1_vlan entered promiscuous mode [ 75.126188][ T4189] device veth0_macvtap entered promiscuous mode [ 75.160026][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.169688][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.178004][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.186801][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.197741][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.206802][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.216121][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.227564][ T4189] device veth1_macvtap entered promiscuous mode [ 75.245905][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.260362][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.285733][ T4182] device veth0_macvtap entered promiscuous mode [ 75.298402][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.310098][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.318210][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.326717][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.344563][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.355555][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.366049][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.378039][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.387975][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.398933][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.410922][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.425986][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.428243][ T4182] device veth1_macvtap entered promiscuous mode [ 75.445649][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.455212][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.455854][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.464678][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.481529][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.491164][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.494337][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.511475][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.515201][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.522215][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.541447][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.553723][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.564921][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.576781][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.625374][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.646181][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.658421][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.680456][ T4189] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.690332][ T4189] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.699464][ T4189] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.708311][ T4189] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.733938][ T4275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.749204][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.757294][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.769698][ T4275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.786266][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.803230][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.816434][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.833887][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.855797][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.868168][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.878297][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.889876][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.904099][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.046752][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.056901][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.065247][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.074867][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.138853][ T4304] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 76.188076][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.234619][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.298786][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.361904][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.409012][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.473562][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.533437][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.596772][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.678222][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.802968][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.826819][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.851897][ T4182] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.870190][ T4182] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.879953][ T4182] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.890426][ T4182] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.927079][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.978594][ T13] Bluetooth: hci0: command 0x0419 tx timeout [ 76.978835][ T23] Bluetooth: hci2: command 0x0419 tx timeout [ 76.989366][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.029301][ T23] Bluetooth: hci1: command 0x0419 tx timeout [ 77.036583][ T23] Bluetooth: hci4: command 0x0419 tx timeout [ 77.045077][ T23] Bluetooth: hci3: command 0x0419 tx timeout [ 77.136876][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.242040][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.258263][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.274102][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 77.274163][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 77.288553][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 77.293018][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #48!!! [ 77.300961][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 77.318982][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 77.327879][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 77.328535][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 77.337033][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 77.345893][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 77.354795][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 77.633301][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.884991][ T1229] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.918460][ T1229] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.690931][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.742153][ T4309] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.027707][ T4329] syz.2.3 uses obsolete (PF_INET,SOCK_PACKET) [ 79.036607][ T4309] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.074102][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 79.097932][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.113122][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.141811][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.205736][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.655281][ T4339] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 79.701423][ T4341] UBIFS error (pid: 4341): cannot open "ubifs", error -22 [ 86.371956][ T4374] dccp_invalid_packet: P.Data Offset(0) too small [ 86.981462][ T21] cfg80211: failed to load regulatory.db [ 87.954265][ T4389] netlink: 8 bytes leftover after parsing attributes in process `syz.0.24'. [ 87.963151][ T4389] netlink: 24 bytes leftover after parsing attributes in process `syz.0.24'. [ 87.972457][ T4389] Zero length message leads to an empty skb [ 88.172078][ T4394] UBIFS error (pid: 4394): cannot open "ubifs", error -22 [ 90.738890][ T4419] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 91.638873][ T4423] dccp_invalid_packet: P.Data Offset(0) too small [ 92.129490][ T4432] netlink: 8 bytes leftover after parsing attributes in process `syz.3.36'. [ 92.138727][ T4432] netlink: 24 bytes leftover after parsing attributes in process `syz.3.36'. [ 92.895936][ T4426] process 'syz.4.33' launched './file0' with NULL argv: empty string added [ 93.757230][ T4445] input: syz1 as /devices/virtual/input/input5 [ 93.907802][ T4446] device batadv_slave_1 entered promiscuous mode [ 93.918426][ T4446] device batadv_slave_1 left promiscuous mode [ 94.216764][ T4447] UBIFS error (pid: 4447): cannot open "ubifs", error -22 [ 96.658061][ T4469] dccp_invalid_packet: P.Data Offset(0) too small [ 96.839940][ T4472] netlink: 8 bytes leftover after parsing attributes in process `syz.0.49'. [ 96.849112][ T4472] netlink: 24 bytes leftover after parsing attributes in process `syz.0.49'. [ 97.122970][ T4479] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 98.842554][ T4490] UBIFS error (pid: 4490): cannot open "ubifs", error -22 [ 102.307248][ T4517] netlink: 8 bytes leftover after parsing attributes in process `syz.2.60'. [ 102.323683][ T4517] netlink: 24 bytes leftover after parsing attributes in process `syz.2.60'. [ 102.628228][ T4523] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 104.076400][ T4542] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 104.784592][ T4546] UBIFS error (pid: 4546): cannot open "ubifs", error -22 [ 106.233349][ T4565] input: syz1 as /devices/virtual/input/input6 [ 106.281565][ T4565] device batadv_slave_1 entered promiscuous mode [ 106.291675][ T4565] device batadv_slave_1 left promiscuous mode [ 107.022302][ T4569] netlink: 8 bytes leftover after parsing attributes in process `syz.3.75'. [ 107.031535][ T4569] netlink: 24 bytes leftover after parsing attributes in process `syz.3.75'. [ 108.188389][ T4580] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 110.956563][ T4588] UBIFS error (pid: 4588): cannot open "ubifs", error -22 [ 112.376464][ T4617] input: syz1 as /devices/virtual/input/input7 [ 112.934862][ T4620] netlink: 8 bytes leftover after parsing attributes in process `syz.3.89'. [ 112.943955][ T4620] netlink: 24 bytes leftover after parsing attributes in process `syz.3.89'. [ 113.165631][ T4625] dccp_invalid_packet: P.Data Offset(0) too small [ 116.948661][ T4646] UBIFS error (pid: 4646): cannot open "ubifs", error -22 [ 118.904380][ T4660] input: syz1 as /devices/virtual/input/input8 [ 119.740231][ T4666] dccp_invalid_packet: P.Data Offset(0) too small [ 120.736444][ T4674] netlink: 8 bytes leftover after parsing attributes in process `syz.4.104'. [ 120.745644][ T4674] netlink: 24 bytes leftover after parsing attributes in process `syz.4.104'. [ 121.180352][ T4679] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 123.178393][ T4690] UBIFS error (pid: 4690): cannot open "ubifs", error -22 [ 127.300595][ T4716] netlink: 8 bytes leftover after parsing attributes in process `syz.2.117'. [ 127.316868][ T4716] netlink: 24 bytes leftover after parsing attributes in process `syz.2.117'. [ 128.984886][ T4732] UBIFS error (pid: 4732): cannot open "ubifs", error -22 [ 131.048600][ T4229] Bluetooth: hci5: command 0x0409 tx timeout [ 131.275258][ T4343] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.398223][ T4752] input: syz1 as /devices/virtual/input/input9 [ 132.577855][ T4343] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.872917][ T4756] netlink: 8 bytes leftover after parsing attributes in process `syz.3.129'. [ 132.882433][ T4756] netlink: 24 bytes leftover after parsing attributes in process `syz.3.129'. [ 132.894275][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.894352][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.955514][ T4343] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.208743][ T4245] Bluetooth: hci5: command 0x041b tx timeout [ 133.257685][ T4771] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 134.074635][ T4775] UBIFS error (pid: 4775): cannot open "ubifs", error -22 [ 134.846253][ T4343] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.887270][ T4729] chnl_net:caif_netlink_parms(): no params data found [ 135.269319][ T4729] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.332629][ T4729] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.406548][ T4729] device bridge_slave_0 entered promiscuous mode [ 135.542612][ T4729] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.561116][ T4729] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.570022][ T4729] device bridge_slave_1 entered promiscuous mode [ 135.700092][ T4729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.764432][ T4729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 136.009136][ T4173] Bluetooth: hci5: command 0x040f tx timeout [ 136.087943][ T4729] team0: Port device team_slave_0 added [ 136.161022][ T4729] team0: Port device team_slave_1 added [ 136.250041][ T4729] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 136.336058][ T4729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.431873][ T4729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 136.445100][ T4729] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 136.452336][ T4729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.479694][ T4729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 136.594608][ T4729] device hsr_slave_0 entered promiscuous mode [ 136.611543][ T4729] device hsr_slave_1 entered promiscuous mode [ 136.646531][ T4729] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 136.668992][ T4729] Cannot create hsr debugfs directory [ 138.199174][ T4245] Bluetooth: hci5: command 0x0419 tx timeout [ 139.026540][ T4810] input: syz1 as /devices/virtual/input/input10 [ 139.042594][ T4810] device batadv_slave_1 entered promiscuous mode [ 139.057226][ T4810] device batadv_slave_1 left promiscuous mode [ 139.076248][ T4729] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 139.106788][ T4729] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 139.160794][ T4729] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 139.357011][ T4729] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 140.524609][ T4824] netlink: 8 bytes leftover after parsing attributes in process `syz.4.142'. [ 140.533759][ T4824] netlink: 24 bytes leftover after parsing attributes in process `syz.4.142'. [ 140.659734][ T4343] device hsr_slave_0 left promiscuous mode [ 140.731085][ T4838] UBIFS error (pid: 4838): cannot open "ubifs", error -22 [ 140.732705][ T4343] device hsr_slave_1 left promiscuous mode [ 141.506292][ T4343] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.518682][ T4343] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.538402][ T4343] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.555259][ T4343] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.622851][ T4841] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 142.035346][ T4343] device bridge_slave_1 left promiscuous mode [ 142.080283][ T4343] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.284008][ T4343] device bridge_slave_0 left promiscuous mode [ 142.331239][ T4343] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.039684][ T4343] device veth1_macvtap left promiscuous mode [ 143.056944][ T4343] device veth0_macvtap left promiscuous mode [ 143.099464][ T4343] device veth1_vlan left promiscuous mode [ 143.106444][ T4343] device veth0_vlan left promiscuous mode [ 144.746611][ T4875] input: syz1 as /devices/virtual/input/input11 [ 146.181319][ T4884] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 146.894885][ T4343] team0 (unregistering): Port device team_slave_1 removed [ 146.956785][ T4343] team0 (unregistering): Port device team_slave_0 removed [ 147.006759][ T4343] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 147.071928][ T4343] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 147.304293][ T4343] bond0 (unregistering): Released all slaves [ 147.578048][ T4879] netlink: 8 bytes leftover after parsing attributes in process `syz.1.153'. [ 147.902510][ T4729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.919798][ T4893] UBIFS error (pid: 4893): cannot open "ubifs", error -22 [ 148.002049][ T4729] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.152253][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 148.183426][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 148.225933][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 148.319438][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 148.329659][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.336800][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.355826][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 148.366746][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 148.422356][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.429497][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.447459][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 148.503406][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 148.559337][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 148.568294][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 148.759470][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 148.905737][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 149.037363][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 149.180880][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 149.357688][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 149.577119][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 149.691305][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 149.789898][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 149.893703][ T4729] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 150.027522][ T4926] input: syz1 as /devices/virtual/input/input12 [ 150.079440][ T4926] device batadv_slave_1 entered promiscuous mode [ 150.089716][ T4926] device batadv_slave_1 left promiscuous mode [ 150.691621][ T4936] netlink: 8 bytes leftover after parsing attributes in process `syz.2.166'. [ 151.025286][ T4942] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 151.164762][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 151.183037][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 151.252613][ T4729] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.944865][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 151.969430][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 152.031161][ T4729] device veth0_vlan entered promiscuous mode [ 152.081406][ T4729] device veth1_vlan entered promiscuous mode [ 152.220837][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 152.341876][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 152.771155][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 152.985942][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 153.044282][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 153.130270][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 153.163669][ T4729] device veth0_macvtap entered promiscuous mode [ 153.207084][ T4729] device veth1_macvtap entered promiscuous mode [ 153.420817][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 153.430099][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 153.439603][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 153.453960][ T4729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.526553][ T4729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.604973][ T4729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.642987][ T4974] UBIFS error (pid: 4974): cannot open "ubifs", error -22 [ 153.691249][ T4729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.771598][ T4729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.782802][ T4729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.793084][ T4729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.804032][ T4729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.816912][ T4729] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 153.979066][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 154.119261][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 154.242576][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 154.301113][ T4729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.326856][ T4729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.350102][ T4729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.373424][ T4729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.395117][ T4729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.426584][ T4729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.477612][ T4729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.520787][ T4729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.532876][ T4729] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.566527][ T4729] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.576990][ T4729] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.588224][ T4729] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.771200][ T4729] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.829926][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 154.876424][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 155.399261][ T1229] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.466760][ T1229] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.551494][ T4999] device batadv_slave_1 entered promiscuous mode [ 155.562857][ T4999] device batadv_slave_1 left promiscuous mode [ 155.945143][ T4322] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.988345][ T4322] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.051422][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 156.085291][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 156.267581][ T5005] netlink: 8 bytes leftover after parsing attributes in process `syz.1.178'. [ 156.467622][ T5012] dccp_invalid_packet: P.Data Offset(0) too small [ 160.295959][ T5048] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 160.687246][ T5054] device batadv_slave_1 entered promiscuous mode [ 160.698031][ T5054] device batadv_slave_1 left promiscuous mode [ 161.329961][ T5060] netlink: 8 bytes leftover after parsing attributes in process `syz.2.190'. [ 161.338868][ T5060] netlink: 24 bytes leftover after parsing attributes in process `syz.2.190'. [ 161.418692][ T5056] device syzkaller0 entered promiscuous mode [ 164.440742][ T5095] dccp_invalid_packet: P.Data Offset(0) too small [ 165.932595][ T5108] UBIFS error (pid: 5108): cannot open "ubifs", error -22 [ 166.236364][ T5120] device batadv_slave_1 entered promiscuous mode [ 166.254957][ T5120] device batadv_slave_1 left promiscuous mode [ 166.891449][ T5127] netlink: 8 bytes leftover after parsing attributes in process `syz.3.204'. [ 166.901015][ T5127] netlink: 24 bytes leftover after parsing attributes in process `syz.3.204'. [ 168.161027][ T5135] device syzkaller0 entered promiscuous mode [ 171.657062][ T5183] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 171.931247][ T5182] UBIFS error (pid: 5182): cannot open "ubifs", error -22 [ 172.227831][ T5192] device batadv_slave_1 entered promiscuous mode [ 172.238210][ T5192] device batadv_slave_1 left promiscuous mode [ 172.754533][ T5194] dccp_invalid_packet: P.Data Offset(0) too small [ 173.824114][ T5213] netlink: 8 bytes leftover after parsing attributes in process `syz.3.220'. [ 176.312805][ T5237] UBIFS error (pid: 5237): cannot open "ubifs", error -22 [ 176.790404][ T5247] dccp_invalid_packet: P.Data Offset(0) too small [ 176.953504][ T5253] device batadv_slave_1 entered promiscuous mode [ 176.964349][ T5253] device batadv_slave_1 left promiscuous mode [ 177.657971][ T5259] device syzkaller0 entered promiscuous mode [ 177.835701][ T5264] blk_update_request: I/O error, dev loop4, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 179.597426][ T5284] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 179.768778][ T5287] netlink: 8 bytes leftover after parsing attributes in process `syz.3.238'. [ 179.778898][ T5287] netlink: 24 bytes leftover after parsing attributes in process `syz.3.238'. [ 180.467271][ T5296] UBIFS error (pid: 5296): cannot open "ubifs", error -22 [ 181.186095][ T5309] loop3: detected capacity change from 0 to 32768 [ 181.410212][ T5309] ======================================================= [ 181.410212][ T5309] WARNING: The mand mount option has been deprecated and [ 181.410212][ T5309] and is ignored by this kernel. Remove the mand [ 181.410212][ T5309] option from the mount to silence this warning. [ 181.410212][ T5309] ======================================================= [ 181.632707][ T5309] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 182.008113][ T5309] syz.3.242 (5309) used greatest stack depth: 20512 bytes left [ 182.150474][ T4184] ocfs2: Unmounting device (7,3) on (node local) [ 182.316162][ T5327] dccp_invalid_packet: P.Data Offset(0) too small [ 183.797000][ T5335] device batadv_slave_1 entered promiscuous mode [ 183.797472][ T5335] device batadv_slave_1 left promiscuous mode [ 185.135030][ T5348] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 185.521191][ T5356] netlink: 8 bytes leftover after parsing attributes in process `syz.2.250'. [ 185.530622][ T5356] netlink: 24 bytes leftover after parsing attributes in process `syz.2.250'. [ 185.863752][ T5362] UBIFS error (pid: 5362): cannot open "ubifs", error -22 [ 187.472906][ T5395] loop1: detected capacity change from 0 to 128 [ 187.670066][ T5395] FAT-fs (loop1): Invalid FSINFO signature: 0x41000000, 0x61417272 (sector = 1) [ 188.559547][ T4344] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 188.567131][ T5407] netlink: 8 bytes leftover after parsing attributes in process `syz.4.262'. [ 188.577105][ T5407] netlink: 24 bytes leftover after parsing attributes in process `syz.4.262'. [ 188.682535][ T144] FAT-fs (loop1): Invalid FSINFO signature: 0x41000000, 0x61417272 (sector = 1) [ 188.699930][ T5410] loop4: detected capacity change from 0 to 512 [ 188.761422][ T5410] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 188.790754][ T5410] EXT4-fs (loop4): Mount option "nouser_xattr" will be removed by 3.5 [ 188.790754][ T5410] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 188.790754][ T5410] [ 188.829493][ T5411] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 188.859015][ T4344] usb 4-1: Using ep0 maxpacket: 8 [ 188.883649][ T5410] EXT4-fs (loop4): orphan cleanup on readonly fs [ 188.943012][ T5410] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.263: bg 0: block 248: padding at end of block bitmap is not set [ 188.960228][ T5415] UBIFS error (pid: 5415): cannot open "ubifs", error -22 [ 188.966575][ T5410] Quota error (device loop4): write_blk: dquota write failed [ 188.983119][ T5410] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 188.995235][ T5410] EXT4-fs error (device loop4): ext4_acquire_dquot:6207: comm syz.4.263: Failed to acquire dquot type 1 [ 189.041050][ T5410] EXT4-fs (loop4): 1 truncate cleaned up [ 189.048375][ T5410] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,nobarrier,jqfmt=vfsv0,grpjquota=,data_err=abort,noquota,nouser_xattr,noload,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 189.378959][ T4344] usb 4-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 189.547380][ T4344] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 189.564171][ T4344] usb 4-1: Product: syz [ 189.568770][ T4344] usb 4-1: Manufacturer: syz [ 189.573398][ T4344] usb 4-1: SerialNumber: syz [ 189.852376][ T4344] usb 4-1: config 0 descriptor?? [ 190.815645][ T5440] blk_update_request: I/O error, dev loop2, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 191.220842][ T4344] usb 4-1: USB disconnect, device number 2 [ 191.288877][ T1110] Bluetooth: hci2: command 0x0406 tx timeout [ 191.295379][ T1110] Bluetooth: hci4: command 0x0406 tx timeout [ 191.316380][ T1110] Bluetooth: hci3: command 0x0406 tx timeout [ 191.407200][ T1110] Bluetooth: hci0: command 0x0406 tx timeout [ 192.119785][ T5449] netlink: 8 bytes leftover after parsing attributes in process `syz.4.274'. [ 192.129586][ T5449] netlink: 24 bytes leftover after parsing attributes in process `syz.4.274'. [ 192.322810][ T5455] loop4: detected capacity change from 0 to 128 [ 192.402701][ T4398] udevd[4398]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 193.412910][ T5466] UBIFS error (pid: 5466): cannot open "ubifs", error -22 [ 193.967509][ T5482] autofs4:pid:5482:autofs_fill_super: called with bogus options [ 194.616348][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.624891][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.795971][ T5494] dccp_invalid_packet: P.Data Offset(0) too small [ 196.036767][ T5508] netlink: 8 bytes leftover after parsing attributes in process `syz.3.286'. [ 196.046775][ T5508] netlink: 24 bytes leftover after parsing attributes in process `syz.3.286'. [ 198.782902][ T5518] loop5: detected capacity change from 0 to 2048 [ 198.879218][ T5518] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 201.817671][ T5558] dccp_invalid_packet: P.Data Offset(0) too small [ 202.013349][ T5567] blk_update_request: I/O error, dev loop2, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 202.110888][ T5548] ================================================================== [ 202.119618][ T5548] BUG: KASAN: use-after-free in rose_transmit_link+0x5b0/0x730 [ 202.127235][ T5548] Read of size 1 at addr ffff88805e415032 by task syz.4.297/5548 [ 202.135310][ T5548] [ 202.137650][ T5548] CPU: 1 PID: 5548 Comm: syz.4.297 Not tainted 5.15.189-syzkaller #0 [ 202.145719][ T5548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 202.155786][ T5548] Call Trace: [ 202.159072][ T5548] [ 202.162205][ T5548] dump_stack_lvl+0x168/0x230 [ 202.167048][ T5548] ? show_regs_print_info+0x20/0x20 [ 202.172296][ T5548] ? _printk+0xcc/0x110 [ 202.176472][ T5548] ? rose_transmit_link+0x5b0/0x730 [ 202.181867][ T5548] ? load_image+0x3b0/0x3b0 [ 202.186382][ T5548] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 202.191770][ T5548] print_address_description+0x60/0x2d0 [ 202.197533][ T5548] ? rose_transmit_link+0x5b0/0x730 [ 202.202959][ T5548] kasan_report+0xdf/0x130 [ 202.207404][ T5548] ? rose_transmit_link+0x5b0/0x730 [ 202.212831][ T5548] ? __phys_addr+0xb6/0x170 [ 202.217355][ T5548] rose_transmit_link+0x5b0/0x730 [ 202.222541][ T5548] ? skb_put+0x117/0x210 [ 202.226842][ T5548] rose_write_internal+0x673/0x1e80 [ 202.232588][ T5548] ? rose_validate_nr+0x120/0x120 [ 202.237801][ T5548] ? del_timer+0x11a/0x1b0 [ 202.242326][ T5548] ? skb_queue_purge+0x62/0x290 [ 202.247241][ T5548] rose_release+0x22a/0x4e0 [ 202.251775][ T5548] sock_close+0xd5/0x240 [ 202.256244][ T5548] ? sock_mmap+0x90/0x90 [ 202.261095][ T5548] __fput+0x234/0x930 [ 202.265970][ T5548] task_work_run+0x125/0x1a0 [ 202.270690][ T5548] get_signal+0x1222/0x12c0 [ 202.275347][ T5548] arch_do_signal_or_restart+0xc1/0x1300 [ 202.281054][ T5548] ? kick_process+0xd4/0x140 [ 202.285849][ T5548] ? task_work_add+0x1a7/0x1d0 [ 202.290713][ T5548] ? get_sigframe_size+0x10/0x10 [ 202.295766][ T5548] ? __sys_connect+0x239/0x410 [ 202.300561][ T5548] ? exit_to_user_mode_loop+0x3b/0x130 [ 202.306161][ T5548] exit_to_user_mode_loop+0x9e/0x130 [ 202.311481][ T5548] exit_to_user_mode_prepare+0xb1/0x140 [ 202.317395][ T5548] syscall_exit_to_user_mode+0x16/0x40 [ 202.323071][ T5548] do_syscall_64+0x58/0xa0 [ 202.327710][ T5548] ? clear_bhb_loop+0x30/0x80 [ 202.333306][ T5548] ? clear_bhb_loop+0x30/0x80 [ 202.338257][ T5548] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 202.344440][ T5548] RIP: 0033:0x7fef3631a9a9 [ 202.348885][ T5548] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.369641][ T5548] RSP: 002b:00007fef34182038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 202.378268][ T5548] RAX: fffffffffffffe00 RBX: 00007fef36541fa0 RCX: 00007fef3631a9a9 [ 202.386739][ T5548] RDX: 0000000000000040 RSI: 0000200000000100 RDI: 000000000000000d [ 202.394879][ T5548] RBP: 00007fef3639cd69 R08: 0000000000000000 R09: 0000000000000000 [ 202.403238][ T5548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 202.411768][ T5548] R13: 0000000000000000 R14: 00007fef36541fa0 R15: 00007ffcd75cabf8 [ 202.419771][ T5548] [ 202.422916][ T5548] [ 202.425334][ T5548] Allocated by task 5425: [ 202.429770][ T5548] __kasan_kmalloc+0xb5/0xf0 [ 202.434503][ T5548] rose_add_node+0x227/0xdb0 [ 202.439378][ T5548] rose_rt_ioctl+0x9db/0xe20 [ 202.444218][ T5548] rose_ioctl+0x27a/0x790 [ 202.448647][ T5548] sock_do_ioctl+0xd3/0x2f0 [ 202.453355][ T5548] sock_ioctl+0x4ed/0x6e0 [ 202.457702][ T5548] __se_sys_ioctl+0xfa/0x170 [ 202.462299][ T5548] do_syscall_64+0x4c/0xa0 [ 202.466731][ T5548] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 202.472644][ T5548] [ 202.475357][ T5548] Freed by task 5557: [ 202.479379][ T5548] kasan_set_track+0x4b/0x70 [ 202.483983][ T5548] kasan_set_free_info+0x1f/0x40 [ 202.488937][ T5548] ____kasan_slab_free+0xd5/0x110 [ 202.494358][ T5548] slab_free_freelist_hook+0xea/0x170 [ 202.499938][ T5548] kfree+0xef/0x2a0 [ 202.503769][ T5548] rose_rt_device_down+0x4e2/0x530 [ 202.509257][ T5548] rose_device_event+0x5ec/0x680 [ 202.514271][ T5548] raw_notifier_call_chain+0xcb/0x160 [ 202.519741][ T5548] __dev_notify_flags+0x178/0x2d0 [ 202.525098][ T5548] dev_change_flags+0xe3/0x1a0 [ 202.530076][ T5548] dev_ifsioc+0x147/0xe70 [ 202.534513][ T5548] dev_ioctl+0x55f/0xe50 [ 202.539188][ T5548] sock_do_ioctl+0x222/0x2f0 [ 202.544243][ T5548] sock_ioctl+0x4ed/0x6e0 [ 202.548684][ T5548] __se_sys_ioctl+0xfa/0x170 [ 202.553288][ T5548] do_syscall_64+0x4c/0xa0 [ 202.557723][ T5548] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 202.563800][ T5548] [ 202.566128][ T5548] The buggy address belongs to the object at ffff88805e415000 [ 202.566128][ T5548] which belongs to the cache kmalloc-512 of size 512 [ 202.580266][ T5548] The buggy address is located 50 bytes inside of [ 202.580266][ T5548] 512-byte region [ffff88805e415000, ffff88805e415200) [ 202.593563][ T5548] The buggy address belongs to the page: [ 202.599317][ T5548] page:ffffea0001790500 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5e414 [ 202.609473][ T5548] head:ffffea0001790500 order:2 compound_mapcount:0 compound_pincount:0 [ 202.617842][ T5548] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 202.626034][ T5548] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888016841c80 [ 202.634710][ T5548] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 202.643394][ T5548] page dumped because: kasan: bad access detected [ 202.649815][ T5548] page_owner tracks the page as allocated [ 202.655745][ T5548] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 4299, ts 75677956502, free_ts 22427554822 [ 202.676328][ T5548] get_page_from_freelist+0x1b77/0x1c60 [ 202.681893][ T5548] __alloc_pages+0x1e1/0x470 [ 202.686488][ T5548] new_slab+0xc0/0x4b0 [ 202.690555][ T5548] ___slab_alloc+0x81e/0xdf0 [ 202.695332][ T5548] kmem_cache_alloc_trace+0x1a5/0x2a0 [ 202.701188][ T5548] __ipv6_dev_mc_inc+0x413/0xac0 [ 202.706158][ T5548] addrconf_dad_work+0x3bf/0x1520 [ 202.711300][ T5548] process_one_work+0x863/0x1000 [ 202.716550][ T5548] worker_thread+0xaa8/0x12a0 [ 202.721451][ T5548] kthread+0x436/0x520 [ 202.725549][ T5548] ret_from_fork+0x1f/0x30 [ 202.730014][ T5548] page last free stack trace: [ 202.734687][ T5548] free_unref_page_prepare+0x637/0x6c0 [ 202.740237][ T5548] free_unref_page+0x94/0x280 [ 202.745011][ T5548] free_contig_range+0x96/0xf0 [ 202.749886][ T5548] destroy_args+0xef/0x8b0 [ 202.754650][ T5548] debug_vm_pgtable+0x318/0x370 [ 202.759522][ T5548] do_one_initcall+0x1ee/0x680 [ 202.764338][ T5548] do_initcall_level+0x137/0x1f0 [ 202.769370][ T5548] do_initcalls+0x4b/0x90 [ 202.774158][ T5548] kernel_init_freeable+0x3ce/0x560 [ 202.779576][ T5548] kernel_init+0x19/0x1b0 [ 202.784109][ T5548] ret_from_fork+0x1f/0x30 [ 202.788736][ T5548] [ 202.791216][ T5548] Memory state around the buggy address: [ 202.796853][ T5548] ffff88805e414f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 202.805002][ T5548] ffff88805e414f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 202.813099][ T5548] >ffff88805e415000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 202.821254][ T5548] ^ [ 202.827134][ T5548] ffff88805e415080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 202.835315][ T5548] ffff88805e415100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 202.843566][ T5548] ================================================================== [ 202.851800][ T5548] Disabling lock debugging due to kernel taint [ 202.998731][ T5548] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 203.006076][ T5548] CPU: 0 PID: 5548 Comm: syz.4.297 Tainted: G B 5.15.189-syzkaller #0 [ 203.015919][ T5548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 203.026396][ T5548] Call Trace: [ 203.029694][ T5548] [ 203.032716][ T5548] dump_stack_lvl+0x168/0x230 [ 203.037579][ T5548] ? show_regs_print_info+0x20/0x20 [ 203.043003][ T5548] ? load_image+0x3b0/0x3b0 [ 203.047556][ T5548] panic+0x2c9/0x7f0 [ 203.051637][ T5548] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 203.057988][ T5548] ? bpf_jit_dump+0xd0/0xd0 [ 203.062512][ T5548] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 203.068682][ T5548] ? _raw_spin_unlock+0x40/0x40 [ 203.073539][ T5548] ? rose_transmit_link+0x5b0/0x730 [ 203.078946][ T5548] check_panic_on_warn+0x80/0xa0 [ 203.083947][ T5548] ? rose_transmit_link+0x5b0/0x730 [ 203.089224][ T5548] end_report+0x6d/0xf0 [ 203.093471][ T5548] kasan_report+0x102/0x130 [ 203.097986][ T5548] ? rose_transmit_link+0x5b0/0x730 [ 203.103385][ T5548] ? __phys_addr+0xb6/0x170 [ 203.107900][ T5548] rose_transmit_link+0x5b0/0x730 [ 203.113056][ T5548] ? skb_put+0x117/0x210 [ 203.117319][ T5548] rose_write_internal+0x673/0x1e80 [ 203.122541][ T5548] ? rose_validate_nr+0x120/0x120 [ 203.127680][ T5548] ? del_timer+0x11a/0x1b0 [ 203.132101][ T5548] ? skb_queue_purge+0x62/0x290 [ 203.137072][ T5548] rose_release+0x22a/0x4e0 [ 203.141660][ T5548] sock_close+0xd5/0x240 [ 203.145915][ T5548] ? sock_mmap+0x90/0x90 [ 203.150169][ T5548] __fput+0x234/0x930 [ 203.154300][ T5548] task_work_run+0x125/0x1a0 [ 203.158931][ T5548] get_signal+0x1222/0x12c0 [ 203.163470][ T5548] arch_do_signal_or_restart+0xc1/0x1300 [ 203.169119][ T5548] ? kick_process+0xd4/0x140 [ 203.173764][ T5548] ? task_work_add+0x1a7/0x1d0 [ 203.178842][ T5548] ? get_sigframe_size+0x10/0x10 [ 203.183889][ T5548] ? __sys_connect+0x239/0x410 [ 203.188687][ T5548] ? exit_to_user_mode_loop+0x3b/0x130 [ 203.194346][ T5548] exit_to_user_mode_loop+0x9e/0x130 [ 203.199753][ T5548] exit_to_user_mode_prepare+0xb1/0x140 [ 203.205630][ T5548] syscall_exit_to_user_mode+0x16/0x40 [ 203.211147][ T5548] do_syscall_64+0x58/0xa0 [ 203.215569][ T5548] ? clear_bhb_loop+0x30/0x80 [ 203.220245][ T5548] ? clear_bhb_loop+0x30/0x80 [ 203.224922][ T5548] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 203.231038][ T5548] RIP: 0033:0x7fef3631a9a9 [ 203.235467][ T5548] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.255075][ T5548] RSP: 002b:00007fef34182038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 203.263502][ T5548] RAX: fffffffffffffe00 RBX: 00007fef36541fa0 RCX: 00007fef3631a9a9 [ 203.272226][ T5548] RDX: 0000000000000040 RSI: 0000200000000100 RDI: 000000000000000d [ 203.280293][ T5548] RBP: 00007fef3639cd69 R08: 0000000000000000 R09: 0000000000000000 [ 203.288457][ T5548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 203.296628][ T5548] R13: 0000000000000000 R14: 00007fef36541fa0 R15: 00007ffcd75cabf8 [ 203.305082][ T5548] [ 203.308311][ T5548] Kernel Offset: disabled [ 203.313017][ T5548] Rebooting in 86400 seconds..