last executing test programs: 13.082283037s ago: executing program 3 (id=57): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1a, 0x0, &(0x7f0000000080)) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r3) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000340)) keyctl$KEYCTL_MOVE(0x1e, r4, r3, r5, 0x0) 12.042166867s ago: executing program 3 (id=61): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x28000054) sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r4, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000004c0)=""/232, 0xe8}, {&(0x7f0000000340)=""/121, 0x79}, {&(0x7f00000006c0)=""/145, 0x91}, {&(0x7f0000000480)=""/21, 0x15}], 0x4}, 0x1}], 0x2, 0x2023, 0x0) 11.457335508s ago: executing program 4 (id=63): syz_open_procfs(0x0, &(0x7f0000000080)='sched\x00') syz_open_dev$sndpcmc(0x0, 0x0, 0xa340658bc40d4f52) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) inotify_init() r3 = open(&(0x7f0000000140)='./file0\x00', 0x60842, 0xe7) fcntl$setlease(r3, 0x400, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000007000000612200000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r5], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r6}, &(0x7f0000000d00), &(0x7f0000000140)='%+9llu \x00'}, 0x20) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 11.287242641s ago: executing program 3 (id=66): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) clock_nanosleep(0xfffffff2, 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000000280)) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x11, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c) chdir(&(0x7f00000003c0)='./bus\x00') r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r2, &(0x7f0000001fc0)=""/184, 0x20002078) 11.055585496s ago: executing program 3 (id=68): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x80, 0x631, {0x0}, {0xee00}, 0xa2, 0x8001}) ptrace$ARCH_GET_UNTAG_MASK(0x1e, r1, &(0x7f0000000080), 0x4001) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000180)={0x1}, 0x8) close(r3) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg_v2(r4, &(0x7f0000000300)={0x2, 0x0, {0x0, 0x0, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r4, &(0x7f00000004c0)={0x2, 0x0, {&(0x7f0000001080)=""/185, 0xb9, 0x0, 0x3, 0x2}}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) landlock_restrict_self(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x400000, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 10.492896687s ago: executing program 4 (id=69): mkdir(&(0x7f0000000040)='./file0\x00', 0x80) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) ioprio_set$pid(0x2, 0x0, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000440)='./bus\x00') r0 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x1000000000003, 0x3, 0x8000000000007, 0xaa, 0x3, 0x80001, {0x0, 0x180, 0x20fe, 0x0, 0x87, 0xd615, 0x9, 0x9, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) sendfile(r0, r0, &(0x7f0000000080), 0x7f03) 8.866430788s ago: executing program 4 (id=72): ioctl$SNDRV_PCM_IOCTL_REWIND(0xffffffffffffffff, 0x40084146, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(r0, &(0x7f0000000140)='net/netlink\x00') pread64(r3, &(0x7f0000000200)=""/102400, 0x19000, 0x4000000a) 8.646449902s ago: executing program 0 (id=73): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 8.645180053s ago: executing program 3 (id=75): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x1000, 0x0, @loopback}, 0x1c) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) splice(r3, 0x0, r2, 0x0, 0x10000008ebc, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40000) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) 7.74303069s ago: executing program 2 (id=78): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x28000054) sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r4, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000004c0)=""/232, 0xe8}, {&(0x7f0000000340)=""/121, 0x79}, {&(0x7f00000006c0)=""/145, 0x91}, {&(0x7f0000000480)=""/21, 0x15}], 0x4}, 0x1}], 0x2, 0x2023, 0x0) 7.642511242s ago: executing program 2 (id=79): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000007000000612200000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r1], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) 7.092246493s ago: executing program 2 (id=80): syz_open_procfs(0x0, &(0x7f0000000080)='sched\x00') syz_open_dev$sndpcmc(0x0, 0x0, 0xa340658bc40d4f52) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) inotify_init() r4 = open(&(0x7f0000000140)='./file0\x00', 0x60842, 0xe7) fcntl$setlease(r4, 0x400, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000007000000612200000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r6], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r7}, &(0x7f0000000d00), &(0x7f0000000140)='%+9llu \x00'}, 0x20) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 7.035068984s ago: executing program 0 (id=81): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x4d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$can_j1939(0x1d, 0x2, 0x7) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0xaad82, 0x0) r4 = socket$key(0xf, 0x3, 0x2) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000740)=ANY=[], 0x118}}, 0x44) sendmsg$key(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="021600000a0000000000000000000000080012000007a18208"], 0x50}}, 0x0) 6.141809811s ago: executing program 2 (id=83): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) clock_nanosleep(0xfffffff2, 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000000280)) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x11, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c) chdir(&(0x7f00000003c0)='./bus\x00') r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r2, &(0x7f0000001fc0)=""/184, 0x20002078) 5.734422629s ago: executing program 0 (id=84): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f00000003c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000001380)={0xffffffffffffffff}) recvmmsg$unix(r3, &(0x7f0000005b80)=[{{&(0x7f0000000280), 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/109, 0x6d}], 0x1, &(0x7f00000004c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0xa8}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000005c0)=""/79, 0x4f}, {&(0x7f0000000380)=""/40, 0x28}, {&(0x7f0000000640)=""/168, 0xa8}, {&(0x7f0000000700)=""/209, 0xd1}], 0x4}}, {{&(0x7f0000000840), 0x6e, &(0x7f0000000940)=[{&(0x7f00000009c0)=""/240, 0xf0}, {&(0x7f00000008c0)=""/58, 0x3a}, {&(0x7f0000000900)=""/21, 0x15}], 0x3, &(0x7f0000000ac0)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000000b00), 0x6e, &(0x7f0000000e80)=[{&(0x7f0000000b80)=""/45, 0x2d}, {&(0x7f0000000bc0)=""/184, 0xb8}, {&(0x7f0000000c80)=""/104, 0x68}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f0000000d00)=""/131, 0x83}, {&(0x7f0000000dc0)=""/166, 0xa6}], 0x6, &(0x7f0000000f00)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000f40)=""/42, 0x2a}, {&(0x7f0000000f80)=""/84, 0x54}, {0x0}, {&(0x7f00000010c0)=""/60, 0x3c}], 0x4, &(0x7f0000001180)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}}, {{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000013c0)=""/117, 0x75}, {0x0}, {&(0x7f0000001340)=""/1, 0x1}, {&(0x7f0000001540)=""/252, 0xfc}, {&(0x7f0000001680)=""/235, 0xeb}, {&(0x7f00000037c0)=""/4096, 0x1000}], 0x6, &(0x7f0000001800)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}}, {{&(0x7f0000001880), 0x6e, &(0x7f0000001980)=[{&(0x7f0000001900)=""/116, 0x74}, {&(0x7f00000047c0)=""/144, 0x90}, {&(0x7f0000004880)=""/4096, 0x1000}, {&(0x7f0000005880)=""/240, 0xf0}, {&(0x7f0000005980)=""/173, 0xad}], 0x5, &(0x7f0000005a40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}}], 0x7, 0x1, &(0x7f00000014c0)={0x77359400}) sendmsg$nl_route_sched(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000980)=@newtclass={0x24, 0x28, 0x4, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xa}, {0x5, 0xa}, {0xe, 0xffe0}}}, 0xfdef}, 0x1, 0x0, 0x0, 0x40d1}, 0x40d8) syz_genetlink_get_family_id$fou(&(0x7f0000000400), r3) 5.542912113s ago: executing program 1 (id=85): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x80, 0x631, {0x0}, {0xee00}, 0xa2, 0x8001}) ptrace$ARCH_GET_UNTAG_MASK(0x1e, r1, &(0x7f0000000080), 0x4001) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000180)={0x1}, 0x8) close(r3) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg_v2(r4, &(0x7f0000000300)={0x2, 0x0, {0x0, 0x0, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r4, &(0x7f00000004c0)={0x2, 0x0, {&(0x7f0000001080)=""/185, 0xb9, 0x0, 0x3, 0x2}}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) landlock_restrict_self(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x400000, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 5.459840814s ago: executing program 2 (id=86): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x0, @null, @bpq0, 0x0, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r3 = openat$ppp(0xffffffffffffff9c, 0x0, 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, 0x0) r4 = openat$ppp(0xffffffffffffff9c, 0x0, 0x189a42, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, 0x0) close(0xffffffffffffffff) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r5, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r5, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) 5.457812474s ago: executing program 0 (id=96): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_pidfd_open(r0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) wait4(r0, 0x0, 0x40000000, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc040ff0b, &(0x7f0000000200)) 4.880673485s ago: executing program 1 (id=87): mkdir(&(0x7f0000000040)='./file0\x00', 0x80) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) ioprio_set$pid(0x2, 0x0, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000440)='./bus\x00') r0 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x1000000000003, 0x3, 0x8000000000007, 0xaa, 0x3, 0x80001, {0x0, 0x180, 0x20fe, 0x0, 0x87, 0xd615, 0x9, 0x9, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) sendfile(r0, r0, &(0x7f0000000080), 0x7f03) 4.563850542s ago: executing program 1 (id=88): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1a, 0x0, &(0x7f0000000080)) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r3) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000340)) keyctl$KEYCTL_MOVE(0x1e, r4, r3, r5, 0x0) 3.650071189s ago: executing program 2 (id=89): socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10suse\x00\x00\x00\x00\x00\x00\x00dn\x00\x00\x00', 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r3, &(0x7f0000002940), 0x40000000000017d, 0x811) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) setsockopt(0xffffffffffffffff, 0x7, 0x81, &(0x7f0000000280)="1a000000", 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x40d4, &(0x7f0000000140)={0xa, 0x4e23, 0x4, @loopback, 0xffffffff}, 0x1c) 3.649648229s ago: executing program 4 (id=90): r0 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0xfd}) socket$inet(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000080)}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @private=0xa010501, 0x0, 0x0, 'none\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000340)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x0, 0x4, 0x4, {0xa, 0x4e22, 0xffffffea, @remote, 0xffff}}}, 0x3a) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000280)=0x2) 3.568667771s ago: executing program 1 (id=91): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0xd, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x44084) 3.320473896s ago: executing program 1 (id=92): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0xee31b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r2 = getpid() syz_clone3(&(0x7f0000000380)={0x82040480, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[r2], 0x1}, 0x58) 3.320258016s ago: executing program 0 (id=93): r0 = socket(0x10, 0x3, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, 0xfffffffffffffffc, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioprio_set$uid(0x0, 0x0, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r2, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r2, 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x28}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 3.309204286s ago: executing program 3 (id=94): socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(0x0, &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10suse\x00\x00\x00\x00\x00\x00\x00dn\x00\x00\x00', 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r3, &(0x7f0000002940), 0x40000000000017d, 0x811) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) setsockopt(0xffffffffffffffff, 0x7, 0x81, &(0x7f0000000280)="1a000000", 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x40d4, &(0x7f0000000140)={0xa, 0x4e23, 0x4, @loopback, 0xffffffff}, 0x1c) 1.53494286s ago: executing program 0 (id=95): timer_create(0x1, 0x0, &(0x7f0000000300)) syz_open_dev$sg(0x0, 0x5, 0x484ec1) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000340)={0x1, @sliced={0x3, [0x7ff, 0x3, 0x4, 0x0, 0x5, 0xa8a, 0xa9, 0x9, 0x101, 0x189f, 0x9, 0xd87, 0xfff, 0x9, 0x3, 0x4, 0x6, 0x8, 0x0, 0x81, 0x3, 0x3, 0xb, 0x7fe, 0x9, 0x7, 0x2, 0xfffe, 0x95, 0x5, 0xc02, 0x3bc, 0x5, 0xf002, 0x4, 0x1, 0x6, 0x8006, 0x1, 0x8, 0x35, 0x5, 0x5, 0x8000, 0x5, 0x9, 0xff6e, 0x800], 0x6}}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x24004080) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_init_net_socket$ax25(0x3, 0x0, 0x8) bind$ax25(r3, &(0x7f0000000100)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8914, &(0x7f0000000000)) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc) setsockopt$ax25_SO_BINDTODEVICE(r4, 0x101, 0x19, &(0x7f00000001c0)=@bpq0, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8f}, 0x19) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) 892.434313ms ago: executing program 4 (id=97): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @rand_addr=0x1}, 0x2, 0x4}}, 0x26) 892.110723ms ago: executing program 4 (id=98): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeda}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r4) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_ADDFB2(r4, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [], [0x2b8]}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x880) 0s ago: executing program 1 (id=99): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x8080000, 0x1d000, 0x1}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000040)={0xdddd0000, 0x10000}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.140' (ED25519) to the list of known hosts. [ 48.189009][ T4170] cgroup: Unknown subsys name 'net' [ 48.334807][ T4170] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 49.597777][ T4170] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 51.345835][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 51.460362][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 51.479797][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 51.496533][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 51.537455][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.545290][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.553245][ T4184] device bridge_slave_0 entered promiscuous mode [ 51.589580][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.596779][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.604960][ T4184] device bridge_slave_1 entered promiscuous mode [ 51.621176][ T4181] chnl_net:caif_netlink_parms(): no params data found [ 51.684950][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.692289][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.700017][ T4182] device bridge_slave_0 entered promiscuous mode [ 51.709142][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.729115][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.736435][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.744310][ T4194] device bridge_slave_0 entered promiscuous mode [ 51.752353][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.759435][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.767239][ T4182] device bridge_slave_1 entered promiscuous mode [ 51.776191][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.794769][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.802120][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.810194][ T4194] device bridge_slave_1 entered promiscuous mode [ 51.865074][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.872558][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.880898][ T4183] device bridge_slave_0 entered promiscuous mode [ 51.900249][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.911801][ T4184] team0: Port device team_slave_0 added [ 51.917727][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.925660][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.933555][ T4183] device bridge_slave_1 entered promiscuous mode [ 51.950044][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.968786][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.979537][ T4184] team0: Port device team_slave_1 added [ 51.994006][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.003455][ T4181] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.011258][ T4181] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.018903][ T4181] device bridge_slave_0 entered promiscuous mode [ 52.055396][ T4181] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.062810][ T4181] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.071081][ T4181] device bridge_slave_1 entered promiscuous mode [ 52.092319][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.117090][ T4182] team0: Port device team_slave_0 added [ 52.123838][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.130929][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.156828][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.169651][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.180879][ T4194] team0: Port device team_slave_0 added [ 52.200769][ T4182] team0: Port device team_slave_1 added [ 52.208058][ T4181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.217648][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.224696][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.250772][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.263168][ T4194] team0: Port device team_slave_1 added [ 52.290891][ T4181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.305672][ T4183] team0: Port device team_slave_0 added [ 52.331825][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.338786][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.365242][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.378096][ T4183] team0: Port device team_slave_1 added [ 52.384669][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.391713][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.417805][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.441481][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.448440][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.474716][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.491520][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.498459][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.529638][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.554042][ T4181] team0: Port device team_slave_0 added [ 52.562331][ T4181] team0: Port device team_slave_1 added [ 52.579751][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.586930][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.613743][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.635229][ T4184] device hsr_slave_0 entered promiscuous mode [ 52.642158][ T4184] device hsr_slave_1 entered promiscuous mode [ 52.669124][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.676332][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.702465][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.717930][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.725076][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.751332][ T4181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.793493][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.800922][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.827627][ T4181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.840811][ T4182] device hsr_slave_0 entered promiscuous mode [ 52.847711][ T4182] device hsr_slave_1 entered promiscuous mode [ 52.854246][ T4182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.862176][ T4182] Cannot create hsr debugfs directory [ 52.879368][ T4194] device hsr_slave_0 entered promiscuous mode [ 52.886476][ T4194] device hsr_slave_1 entered promiscuous mode [ 52.893178][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.900894][ T4194] Cannot create hsr debugfs directory [ 52.936166][ T4183] device hsr_slave_0 entered promiscuous mode [ 52.943041][ T4183] device hsr_slave_1 entered promiscuous mode [ 52.949514][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.957232][ T4183] Cannot create hsr debugfs directory [ 53.008995][ T4181] device hsr_slave_0 entered promiscuous mode [ 53.016232][ T4181] device hsr_slave_1 entered promiscuous mode [ 53.022987][ T4181] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.031576][ T4181] Cannot create hsr debugfs directory [ 53.071176][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 53.071176][ T26] Bluetooth: hci0: command 0x0409 tx timeout [ 53.090218][ T13] Bluetooth: hci1: command 0x0409 tx timeout [ 53.150281][ T26] Bluetooth: hci4: command 0x0409 tx timeout [ 53.162156][ T26] Bluetooth: hci3: command 0x0409 tx timeout [ 53.305429][ T4182] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 53.318710][ T4182] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 53.329665][ T4182] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 53.344582][ T4182] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 53.372013][ T4184] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 53.400639][ T4184] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 53.411924][ T4184] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 53.432775][ T4184] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 53.482857][ T4183] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 53.495474][ T4183] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 53.505201][ T4183] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 53.517778][ T4183] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 53.556403][ T4181] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 53.595593][ T4181] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 53.604699][ T4181] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 53.623784][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.631651][ T4181] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 53.664589][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.676917][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.686867][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.695086][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.705204][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.714589][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.721894][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.731675][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.765351][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.775409][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.784254][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.791423][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.800874][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.809603][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.818415][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.829231][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.837846][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.865659][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.878970][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.890707][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.899428][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.908543][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.918564][ T4194] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 53.928127][ T4194] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 53.937815][ T4194] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 53.948628][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.958297][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.968360][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.976456][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.992234][ T4194] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 54.006024][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.033279][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.044314][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.053785][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.064477][ T4226] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.071558][ T4226] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.093732][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.110994][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.119657][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.129629][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.138413][ T4226] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.145524][ T4226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.156045][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.177896][ T4181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.190608][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.218201][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.246156][ T4181] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.255654][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.264570][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.273980][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.282457][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.290781][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.298461][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.306465][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.339376][ T4183] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 54.351198][ T4183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.368427][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.377284][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.388956][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.396076][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.405900][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.414566][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.423089][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.433104][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.442805][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.449914][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.457463][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.466175][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.474965][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.483628][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.491912][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.500391][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.508855][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.517713][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.524770][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.533511][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.542329][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.550950][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.557999][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.565791][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.574169][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.581961][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.589878][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.597399][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.621805][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.639190][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.649196][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.663759][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.677183][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.689657][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.712964][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.722425][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.731973][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.741769][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.751934][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.761501][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.771350][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.786507][ T4184] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 54.798252][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.826309][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.835508][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.844743][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.855331][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.868562][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.877365][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.886452][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.895305][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.903724][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.913666][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.929075][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.940792][ T4181] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.950718][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.959480][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.996465][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.010514][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.019447][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.034051][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.049729][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.067599][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.078902][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.089771][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.104015][ T4182] device veth0_vlan entered promiscuous mode [ 55.115666][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.123995][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.154949][ T4182] device veth1_vlan entered promiscuous mode [ 55.161572][ T4255] Bluetooth: hci1: command 0x041b tx timeout [ 55.169122][ T4255] Bluetooth: hci2: command 0x041b tx timeout [ 55.176538][ T4255] Bluetooth: hci0: command 0x041b tx timeout [ 55.177355][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.197494][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.206143][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.215336][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.222421][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.230215][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.230753][ T4255] Bluetooth: hci3: command 0x041b tx timeout [ 55.238923][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.249302][ T4255] Bluetooth: hci4: command 0x041b tx timeout [ 55.254862][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.266329][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.278585][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.302155][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.310700][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.318928][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.329980][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.338305][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.345375][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.354271][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.363040][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.372182][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.380200][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.401034][ T4183] device veth0_vlan entered promiscuous mode [ 55.413058][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.422471][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.431210][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.443484][ T4181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.455142][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.466019][ T4183] device veth1_vlan entered promiscuous mode [ 55.501876][ T4182] device veth0_macvtap entered promiscuous mode [ 55.512336][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.521487][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.529453][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.539651][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.548523][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.557461][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.566611][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.575040][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.584619][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.593387][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.602308][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.611444][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.620044][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.628418][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.637465][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.645868][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.662191][ T4182] device veth1_macvtap entered promiscuous mode [ 55.681799][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.690657][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.718658][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.737962][ T4183] device veth0_macvtap entered promiscuous mode [ 55.746360][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.756584][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.766298][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.774763][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.783232][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.791964][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.814882][ T4184] device veth0_vlan entered promiscuous mode [ 55.825464][ T4183] device veth1_macvtap entered promiscuous mode [ 55.835703][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.849266][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.858011][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.873802][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.883724][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.892262][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.904412][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.912547][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.922316][ T4181] device veth0_vlan entered promiscuous mode [ 55.931237][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.938533][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.947475][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.969618][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.986674][ T4181] device veth1_vlan entered promiscuous mode [ 56.003572][ T4182] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.015006][ T4182] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.026747][ T4182] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.036720][ T4182] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.047315][ T4184] device veth1_vlan entered promiscuous mode [ 56.062692][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.071236][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.079153][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.087525][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.095189][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.139372][ T4184] device veth0_macvtap entered promiscuous mode [ 56.152738][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.164972][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.176705][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.190830][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.198881][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.208401][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.218300][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.226870][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.236083][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.261585][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.274803][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.291008][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.308823][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.319604][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.329681][ T4184] device veth1_macvtap entered promiscuous mode [ 56.343298][ T4183] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.353490][ T4183] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.362529][ T4183] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.371510][ T4183] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.400598][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.408595][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.417856][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.460159][ T4181] device veth0_macvtap entered promiscuous mode [ 56.467497][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.475816][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.485496][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.494792][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.503120][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.512468][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.520742][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.536441][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.547328][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.548990][ T4275] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.561695][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.566596][ T4275] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.579013][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.595493][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.607167][ T4194] device veth0_vlan entered promiscuous mode [ 56.616744][ T4181] device veth1_macvtap entered promiscuous mode [ 56.628873][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.637369][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.645387][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.654046][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.669725][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.680888][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.691044][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.701754][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.713031][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.723916][ T4184] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.732715][ T4184] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.741859][ T4184] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.758103][ T4184] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.797572][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.807674][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.823476][ T4194] device veth1_vlan entered promiscuous mode [ 56.867413][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.878704][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.890341][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.901239][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.911351][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.922301][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.937734][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.947270][ T4275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.957114][ T4275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.975035][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.984780][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.998431][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.010052][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.021165][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.031399][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.042551][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.052676][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.063411][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.074787][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.101677][ T4181] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.111141][ T4181] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.119911][ T4181] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.128600][ T4181] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.139676][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.154207][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.187522][ T4194] device veth0_macvtap entered promiscuous mode [ 57.201140][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.212294][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.226303][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.230399][ T1108] Bluetooth: hci0: command 0x040f tx timeout [ 57.238092][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.246065][ T1108] Bluetooth: hci2: command 0x040f tx timeout [ 57.250027][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.254031][ T1108] Bluetooth: hci1: command 0x040f tx timeout [ 57.268418][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.279281][ T4194] device veth1_macvtap entered promiscuous mode [ 57.311715][ T4255] Bluetooth: hci4: command 0x040f tx timeout [ 57.349082][ T4255] Bluetooth: hci3: command 0x040f tx timeout [ 57.370208][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.379595][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.398464][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.413384][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.423367][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.436392][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.446578][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.457643][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.468174][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.481912][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.497647][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.674059][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.709951][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #42!!! [ 57.710131][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 57.719873][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 57.846452][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.859517][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.875293][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.994912][ T4275] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.015250][ T4275] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.085115][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.095793][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.105979][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.130045][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.140256][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.157362][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.172419][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.191053][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.211697][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.231310][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.245145][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.258956][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.681313][ T4194] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.718592][ T4194] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.738641][ T4194] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.747789][ T4194] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.824699][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.850180][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.865917][ T4275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.879637][ T4275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.881784][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.925264][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.988403][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.995977][ T4226] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.009172][ T4226] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.017032][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.041092][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 59.043743][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.311756][ T26] Bluetooth: hci1: command 0x0419 tx timeout [ 59.321893][ T26] Bluetooth: hci2: command 0x0419 tx timeout [ 59.329102][ T26] Bluetooth: hci0: command 0x0419 tx timeout [ 59.342713][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.390064][ T1108] Bluetooth: hci3: command 0x0419 tx timeout [ 59.397597][ T1108] Bluetooth: hci4: command 0x0419 tx timeout [ 59.413606][ T4275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.424883][ T4275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.536239][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.946183][ T4330] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8'. [ 59.950416][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 59.964013][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #30a!!! [ 59.972992][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #30a!!! [ 59.981967][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #30a!!! [ 60.269960][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #42!!! [ 60.299869][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 61.277858][ T4337] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 61.334506][ T4337] netlink: 'syz.3.4': attribute type 5 has an invalid length. [ 61.355199][ T4337] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4'. [ 61.496293][ T4337] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 61.538927][ T4337] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 61.555635][ T4337] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 61.566243][ T4337] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 61.576000][ T4337] device geneve2 entered promiscuous mode [ 65.495320][ T4172] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 65.607399][ T4185] libceph: connect (1)[c::]:6789 error -101 [ 65.680203][ T4383] process 'syz.1.20' launched '/dev/fd/5' with NULL argv: empty string added [ 66.170579][ T4185] libceph: mon0 (1)[c::]:6789 connect error [ 66.480080][ T4172] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 66.488417][ T4172] usb 1-1: config 0 has no interface number 0 [ 67.389874][ C1] sched: RT throttling activated [ 67.403193][ T4185] libceph: connect (1)[c::]:6789 error -101 [ 67.409224][ T4185] libceph: mon0 (1)[c::]:6789 connect error [ 67.419595][ T4377] ceph: No mds server is up or the cluster is laggy [ 67.539218][ T4172] usb 1-1: config 0 interface 41 has no altsetting 0 [ 67.715272][ T4172] usb 1-1: string descriptor 0 read error: -71 [ 67.744113][ T1108] libceph: connect (1)[c::]:6789 error -101 [ 67.754770][ T1108] libceph: mon0 (1)[c::]:6789 connect error [ 67.795022][ T4172] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 67.812556][ T4172] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.886052][ T4172] usb 1-1: config 0 descriptor?? [ 67.961298][ T4172] usb 1-1: can't set config #0, error -71 [ 68.057334][ T4172] usb 1-1: USB disconnect, device number 2 [ 68.750333][ T1108] libceph: connect (1)[c::]:6789 error -101 [ 69.028368][ T1108] libceph: mon0 (1)[c::]:6789 connect error [ 69.295821][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 69.644373][ T4411] tipc: Started in network mode [ 69.675502][ T4411] tipc: Node identity , cluster identity 4711 [ 69.682139][ T4411] tipc: Failed to obtain node identity [ 69.687800][ T4411] tipc: Enabling of bearer rejected, failed to enable media [ 71.246422][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.246584][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.436340][ T4429] mmap: syz.1.34 (4429) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 72.464482][ T4436] syz.4.36 sent an empty control message without MSG_MORE. [ 73.959125][ T4451] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 76.353231][ T2855] cfg80211: failed to load regulatory.db [ 76.753733][ T4482] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 79.540675][ T4506] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 80.132316][ T4515] tipc: Started in network mode [ 80.132334][ T4515] tipc: Node identity , cluster identity 4711 [ 80.132349][ T4515] tipc: Failed to obtain node identity [ 80.132365][ T4515] tipc: Enabling of bearer rejected, failed to enable media [ 81.727549][ T4532] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 83.906094][ T4547] overlayfs: './file1' not a directory [ 84.037539][ T4554] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 85.151755][ T4565] tipc: Started in network mode [ 85.182045][ T4565] tipc: Node identity , cluster identity 4711 [ 85.217449][ T4565] tipc: Failed to obtain node identity [ 85.640108][ T4565] tipc: Enabling of bearer rejected, failed to enable media [ 87.305489][ T4591] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 92.863734][ T4641] ================================================================== [ 92.871958][ T4641] BUG: KASAN: use-after-free in ax25_release+0x5ca/0x870 [ 92.878985][ T4641] Read of size 8 at addr ffff888023013808 by task syz.0.95/4641 [ 92.886716][ T4641] [ 92.889046][ T4641] CPU: 0 PID: 4641 Comm: syz.0.95 Not tainted syzkaller #0 [ 92.896244][ T4641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 92.906316][ T4641] Call Trace: [ 92.909581][ T4641] [ 92.912491][ T4641] dump_stack_lvl+0x168/0x230 [ 92.917161][ T4641] ? show_regs_print_info+0x20/0x20 [ 92.922346][ T4641] ? _printk+0xcc/0x110 [ 92.926486][ T4641] ? ax25_release+0x5ca/0x870 [ 92.931143][ T4641] ? load_image+0x3b0/0x3b0 [ 92.935627][ T4641] print_address_description+0x60/0x2d0 [ 92.941152][ T4641] ? ax25_release+0x5ca/0x870 [ 92.945802][ T4641] kasan_report+0xdf/0x130 [ 92.950195][ T4641] ? ax25_release+0x5ca/0x870 [ 92.954847][ T4641] ax25_release+0x5ca/0x870 [ 92.959327][ T4641] sock_close+0xd5/0x240 [ 92.963552][ T4641] ? sock_mmap+0x90/0x90 [ 92.967769][ T4641] __fput+0x234/0x930 [ 92.971733][ T4641] task_work_run+0x125/0x1a0 [ 92.976302][ T4641] exit_to_user_mode_loop+0x10f/0x130 [ 92.981653][ T4641] exit_to_user_mode_prepare+0xee/0x180 [ 92.987177][ T4641] syscall_exit_to_user_mode+0x16/0x40 [ 92.992639][ T4641] do_syscall_64+0x58/0xa0 [ 92.997032][ T4641] ? clear_bhb_loop+0x30/0x80 [ 93.001693][ T4641] ? clear_bhb_loop+0x30/0x80 [ 93.006363][ T4641] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 93.012260][ T4641] RIP: 0033:0x7f649de28ec9 [ 93.016688][ T4641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.036275][ T4641] RSP: 002b:00007ffe2363b808 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 93.044670][ T4641] RAX: 0000000000000000 RBX: 00007f649e081da0 RCX: 00007f649de28ec9 [ 93.052619][ T4641] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 93.060567][ T4641] RBP: 00007f649e081da0 R08: 00000000000001ac R09: 000000162363baff [ 93.068533][ T4641] R10: 00007f649e081cb0 R11: 0000000000000246 R12: 00000000000167ff [ 93.076484][ T4641] R13: 00007f649e080090 R14: ffffffffffffffff R15: 00007ffe2363b920 [ 93.084461][ T4641] [ 93.087460][ T4641] [ 93.089759][ T4641] Allocated by task 4407: [ 93.094058][ T4641] __kasan_kmalloc+0xb5/0xf0 [ 93.098626][ T4641] ax25_dev_device_up+0x50/0x580 [ 93.103540][ T4641] ax25_device_event+0x483/0x4f0 [ 93.108454][ T4641] raw_notifier_call_chain+0xcb/0x160 [ 93.113798][ T4641] __dev_notify_flags+0x178/0x2d0 [ 93.118796][ T4641] dev_change_flags+0xe3/0x1a0 [ 93.123532][ T4641] dev_ifsioc+0x147/0xe70 [ 93.127838][ T4641] dev_ioctl+0x55f/0xe50 [ 93.132052][ T4641] sock_do_ioctl+0x222/0x2f0 [ 93.136620][ T4641] sock_ioctl+0x4ed/0x6e0 [ 93.140928][ T4641] __se_sys_ioctl+0xfa/0x170 [ 93.145512][ T4641] do_syscall_64+0x4c/0xa0 [ 93.149900][ T4641] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 93.155785][ T4641] [ 93.158087][ T4641] Freed by task 4644: [ 93.162037][ T4641] kasan_set_track+0x4b/0x70 [ 93.166613][ T4641] kasan_set_free_info+0x1f/0x40 [ 93.171536][ T4641] ____kasan_slab_free+0xd5/0x110 [ 93.176540][ T4641] slab_free_freelist_hook+0xea/0x170 [ 93.181889][ T4641] kfree+0xef/0x2a0 [ 93.185674][ T4641] ax25_device_event+0x4b4/0x4f0 [ 93.190593][ T4641] raw_notifier_call_chain+0xcb/0x160 [ 93.195951][ T4641] __dev_notify_flags+0x178/0x2d0 [ 93.200956][ T4641] dev_change_flags+0xe3/0x1a0 [ 93.205701][ T4641] dev_ifsioc+0x147/0xe70 [ 93.210008][ T4641] dev_ioctl+0x55f/0xe50 [ 93.214230][ T4641] sock_do_ioctl+0x222/0x2f0 [ 93.218797][ T4641] sock_ioctl+0x4ed/0x6e0 [ 93.223103][ T4641] __se_sys_ioctl+0xfa/0x170 [ 93.227678][ T4641] do_syscall_64+0x4c/0xa0 [ 93.232069][ T4641] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 93.237938][ T4641] [ 93.240240][ T4641] Last potentially related work creation: [ 93.245932][ T4641] kasan_save_stack+0x35/0x60 [ 93.250584][ T4641] kasan_record_aux_stack+0xb8/0x100 [ 93.255844][ T4641] insert_work+0x54/0x3d0 [ 93.260165][ T4641] __queue_work+0x9c5/0xd50 [ 93.264643][ T4641] queue_work_on+0x11d/0x1d0 [ 93.269205][ T4641] netdevice_event+0x803/0x900 [ 93.273941][ T4641] raw_notifier_call_chain+0xcb/0x160 [ 93.279298][ T4641] register_netdevice+0x1275/0x16b0 [ 93.284473][ T4641] veth_newlink+0x8ed/0xda0 [ 93.289057][ T4641] rtnl_newlink+0x114c/0x17d0 [ 93.293709][ T4641] rtnetlink_rcv_msg+0x9b9/0xe60 [ 93.298620][ T4641] netlink_rcv_skb+0x1e0/0x430 [ 93.303358][ T4641] netlink_unicast+0x774/0x920 [ 93.308097][ T4641] netlink_sendmsg+0x8ab/0xbc0 [ 93.312840][ T4641] __sys_sendto+0x423/0x580 [ 93.317316][ T4641] __x64_sys_sendto+0xda/0xf0 [ 93.321968][ T4641] do_syscall_64+0x4c/0xa0 [ 93.326360][ T4641] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 93.332225][ T4641] [ 93.334523][ T4641] Second to last potentially related work creation: [ 93.341078][ T4641] kasan_save_stack+0x35/0x60 [ 93.345728][ T4641] kasan_record_aux_stack+0xb8/0x100 [ 93.351006][ T4641] insert_work+0x54/0x3d0 [ 93.355311][ T4641] __queue_work+0x9c5/0xd50 [ 93.359788][ T4641] queue_work_on+0x11d/0x1d0 [ 93.364351][ T4641] call_usermodehelper_exec+0x26b/0x460 [ 93.369877][ T4641] kobject_uevent_env+0x681/0x890 [ 93.374892][ T4641] driver_register+0x3e2/0x430 [ 93.379636][ T4641] do_one_initcall+0x1ee/0x680 [ 93.384383][ T4641] do_initcall_level+0x137/0x1f0 [ 93.389294][ T4641] do_initcalls+0x4b/0x90 [ 93.393597][ T4641] kernel_init_freeable+0x3ce/0x560 [ 93.398768][ T4641] kernel_init+0x19/0x1b0 [ 93.403071][ T4641] ret_from_fork+0x1f/0x30 [ 93.407461][ T4641] [ 93.409758][ T4641] The buggy address belongs to the object at ffff888023013800 [ 93.409758][ T4641] which belongs to the cache kmalloc-192 of size 192 [ 93.423797][ T4641] The buggy address is located 8 bytes inside of [ 93.423797][ T4641] 192-byte region [ffff888023013800, ffff8880230138c0) [ 93.436873][ T4641] The buggy address belongs to the page: [ 93.442492][ T4641] page:ffffea00008c04c0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x23013 [ 93.452616][ T4641] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 93.460143][ T4641] raw: 00fff00000000200 ffffea0000898a40 0000000400000004 ffff888016841a00 [ 93.468701][ T4641] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 93.477252][ T4641] page dumped because: kasan: bad access detected [ 93.483647][ T4641] page_owner tracks the page as allocated [ 93.489336][ T4641] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 1, ts 6816978030, free_ts 6816632860 [ 93.504954][ T4641] get_page_from_freelist+0x1b77/0x1c60 [ 93.510503][ T4641] __alloc_pages+0x1e1/0x470 [ 93.515072][ T4641] alloc_page_interleave+0x24/0x1e0 [ 93.520255][ T4641] new_slab+0xc0/0x4b0 [ 93.524298][ T4641] ___slab_alloc+0x81e/0xdf0 [ 93.528857][ T4641] kmem_cache_alloc_trace+0x1a5/0x2a0 [ 93.534217][ T4641] call_usermodehelper_setup+0x8a/0x260 [ 93.539771][ T4641] kobject_uevent_env+0x65e/0x890 [ 93.544769][ T4641] driver_register+0x3e2/0x430 [ 93.549509][ T4641] u132_hcd_init+0x84/0xd0 [ 93.553899][ T4641] do_one_initcall+0x1ee/0x680 [ 93.558638][ T4641] do_initcall_level+0x137/0x1f0 [ 93.563547][ T4641] do_initcalls+0x4b/0x90 [ 93.567849][ T4641] kernel_init_freeable+0x3ce/0x560 [ 93.573021][ T4641] kernel_init+0x19/0x1b0 [ 93.577347][ T4641] ret_from_fork+0x1f/0x30 [ 93.581736][ T4641] page last free stack trace: [ 93.586381][ T4641] free_unref_page_prepare+0x637/0x6c0 [ 93.591814][ T4641] free_unref_page+0x94/0x280 [ 93.596465][ T4641] __mmdrop+0xaa/0x3e0 [ 93.600506][ T4641] free_bprm+0x141/0x300 [ 93.604723][ T4641] kernel_execve+0x380/0x900 [ 93.609628][ T4641] call_usermodehelper_exec_async+0x207/0x350 [ 93.615682][ T4641] ret_from_fork+0x1f/0x30 [ 93.620075][ T4641] [ 93.622382][ T4641] Memory state around the buggy address: [ 93.627992][ T4641] ffff888023013700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 93.636025][ T4641] ffff888023013780: 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 93.644059][ T4641] >ffff888023013800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 93.652099][ T4641] ^ [ 93.656401][ T4641] ffff888023013880: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 93.664434][ T4641] ffff888023013900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 93.672558][ T4641] ================================================================== [ 93.680589][ T4641] Disabling lock debugging due to kernel taint [ 93.719753][ T4641] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 93.726963][ T4641] CPU: 1 PID: 4641 Comm: syz.0.95 Tainted: G B syzkaller #0 [ 93.735657][ T4641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 93.745695][ T4641] Call Trace: [ 93.748958][ T4641] [ 93.751887][ T4641] dump_stack_lvl+0x168/0x230 [ 93.756547][ T4641] ? show_regs_print_info+0x20/0x20 [ 93.761731][ T4641] ? load_image+0x3b0/0x3b0 [ 93.766239][ T4641] panic+0x2c9/0x7f0 [ 93.770120][ T4641] ? bpf_jit_dump+0xd0/0xd0 [ 93.774623][ T4641] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 93.780559][ T4641] ? _raw_spin_unlock+0x40/0x40 [ 93.785407][ T4641] ? print_memory_metadata+0x314/0x400 [ 93.790867][ T4641] ? ax25_release+0x5ca/0x870 [ 93.795539][ T4641] check_panic_on_warn+0x80/0xa0 [ 93.800459][ T4641] ? ax25_release+0x5ca/0x870 [ 93.805114][ T4641] end_report+0x6d/0xf0 [ 93.809255][ T4641] kasan_report+0x102/0x130 [ 93.813749][ T4641] ? ax25_release+0x5ca/0x870 [ 93.818401][ T4641] ax25_release+0x5ca/0x870 [ 93.822884][ T4641] sock_close+0xd5/0x240 [ 93.827162][ T4641] ? sock_mmap+0x90/0x90 [ 93.831383][ T4641] __fput+0x234/0x930 [ 93.835347][ T4641] task_work_run+0x125/0x1a0 [ 93.839921][ T4641] exit_to_user_mode_loop+0x10f/0x130 [ 93.845290][ T4641] exit_to_user_mode_prepare+0xee/0x180 [ 93.850861][ T4641] syscall_exit_to_user_mode+0x16/0x40 [ 93.856378][ T4641] do_syscall_64+0x58/0xa0 [ 93.860781][ T4641] ? clear_bhb_loop+0x30/0x80 [ 93.865438][ T4641] ? clear_bhb_loop+0x30/0x80 [ 93.870091][ T4641] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 93.876009][ T4641] RIP: 0033:0x7f649de28ec9 [ 93.880409][ T4641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.900009][ T4641] RSP: 002b:00007ffe2363b808 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 93.908400][ T4641] RAX: 0000000000000000 RBX: 00007f649e081da0 RCX: 00007f649de28ec9 [ 93.916354][ T4641] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 93.924315][ T4641] RBP: 00007f649e081da0 R08: 00000000000001ac R09: 000000162363baff [ 93.932267][ T4641] R10: 00007f649e081cb0 R11: 0000000000000246 R12: 00000000000167ff [ 93.940221][ T4641] R13: 00007f649e080090 R14: ffffffffffffffff R15: 00007ffe2363b920 [ 93.948177][ T4641] [ 93.951362][ T4641] Kernel Offset: disabled [ 93.955684][ T4641] Rebooting in 86400 seconds..