last executing test programs: 13.729796171s ago: executing program 3 (id=200): r0 = memfd_create(&(0x7f0000000480)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\x00\x00{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9dp]\xc9H\x94\x0e\xf1v\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0xd}}, @NFT_MSG_NEWSET={0x20, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWOBJ={0x18, 0x12, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x3}, @NFT_OBJECT_CONNLIMIT=@NFTA_OBJ_DATA={0x4}}], {0x14}}, 0xa8}, 0x1, 0x0, 0x0, 0x44810}, 0x44000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0x746}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f00000000c0)) close(r1) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x88081, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r1, 0x4010744d, &(0x7f0000000180)) r4 = dup(r0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd74) 13.15682141s ago: executing program 3 (id=205): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r2, r1, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x74}]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0x98, &(0x7f00000000c0)=""/152}, 0x80) 12.115101645s ago: executing program 3 (id=209): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x0, &(0x7f0000000200), 0x45, 0x7b6, &(0x7f0000001140)="$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") ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) 11.003875831s ago: executing program 0 (id=211): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0xac, r4, 0x1, 0x70bd26, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0xac}, 0x1, 0x0, 0x0, 0x40008d1}, 0x0) 10.727428485s ago: executing program 2 (id=214): r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0xfffe, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x1000000, 0xfffffffffffffffd}, {0x0, 0x4, 0x0, 0x8}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1e}}, 0x2, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x1, 0x1, 0xb7}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 9.818305488s ago: executing program 1 (id=215): r0 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000004800010000000700000000000a008000", @ANYRES32=r0, @ANYBLOB="0000000008000200cf010000140001"], 0x38}}, 0x0) 9.507687072s ago: executing program 0 (id=216): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioprio_get$pid(0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000e8000000000006d9000085"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000380), 0xc0001, 0x0) write$cgroup_int(r0, 0x0, 0x0) syz_emit_ethernet(0x82, &(0x7f00000002c0)={@dev, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x4c, 0x3a, 0x0, @dev, @private2={0xfc, 0x2, '\x00', 0x1}, {[], @mlv2_query={0x82, 0x0, 0x0, 0x8, 0x3, @mcast2, 0x1, 0x1, 0x1, 0x1, 0x3, [@mcast1, @loopback, @dev={0xfe, 0x80, '\x00', 0xf}]}}}}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f00000001c0), 0x2, 0x0) mkdirat$cgroup(r1, &(0x7f0000000300)='syz1\x00', 0x1ff) mkdirat$cgroup(r1, &(0x7f0000001e40)='syz0\x00', 0x1ff) write$cgroup_type(r2, &(0x7f0000000280), 0x9) 9.347806245s ago: executing program 2 (id=217): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x33) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000e00)='%pi6 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b70800000000e1ff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 8.639111535s ago: executing program 1 (id=218): bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) socket(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) r2 = socket$l2tp6(0xa, 0x2, 0x73) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="50000000100001042dbd70000000000000000000", @ANYRES32=r5, @ANYBLOB="000000000000000030001280080001007369740024000280080014002f00000008000300ac"], 0x50}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000000c0)={@local, 0x78, r5}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c00010062"], 0x3c}}, 0x0) 8.342725859s ago: executing program 0 (id=220): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x3, 0x0, 0x0, 0x0, 0x67, 0xfffffffffffffffd, 0x44}, 0x0) r2 = syz_io_uring_setup(0x890, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x47f6, 0x0, 0x2, 0x0, 0x0) r5 = syz_io_uring_setup(0x1ec3, 0x0, &(0x7f0000000000), &(0x7f0000000140)) io_uring_register$IORING_UNREGISTER_RING_FDS(r5, 0x15, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2c, &(0x7f0000000000)=0xf1c1, 0x4) 6.95252732s ago: executing program 4 (id=221): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000019240)='./file0\x00', &(0x7f0000019300)={[&(0x7f0000000380)=' T\xfc\x81\x8e\x9f5\x0e \x043[B\xad\x13\x9f\xae\x8f\xbb\x9a\x0f\x9f\x03\xa5\xfc9\xbb\xa4.\xf4\xeb\x03\xf1\xb6\x8c\xc4E\x93\n&k\xec\xc8\xdch\xd6\x1e\xcb\fA\\da/O\xdcn7\x1b@\xbf\xfb\x17J\xaaD\xe4\x01\xbc', &(0x7f0000000000)='.-+\x00']}, &(0x7f0000019100)={[&(0x7f0000000200)=' ']}) 6.677177034s ago: executing program 2 (id=222): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x5}, 0x38) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@mask_cswp={0x58, 0x114, 0x9, {{0xe, 0x7}, &(0x7f0000000140)=0x6, 0x0, 0x6, 0x2, 0x7ff, 0x4, 0x22, 0xfffffffffffffffa}}], 0x58, 0x8004}, 0x0) 6.676681304s ago: executing program 3 (id=223): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r0, r2, 0x1, 0x0, @void}, 0x10) timer_create(0x2, &(0x7f0000000240)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x7fffffffffffffff]}, 0x8, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x18a}, {r3}, {r3, 0x2004}], 0x3, 0x0, 0x0, 0x0) r5 = socket(0x8000000010, 0x2, 0x0) write(r5, &(0x7f00000002c0)="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", 0xfc) 5.161145876s ago: executing program 2 (id=224): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_opts(r4, 0x0, 0x4, 0xfffffffffffffffe, &(0x7f0000000200)) 5.159493966s ago: executing program 4 (id=225): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r5, &(0x7f00000000c0)={0x2, 0x4e24, @loopback}, 0x10) 4.973958049s ago: executing program 1 (id=226): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000340)={r4, @in={{0x2, 0x4e22, @empty}}, 0xfff3, 0x3}, 0x90) 4.958142198s ago: executing program 0 (id=227): ioctl$KVM_CAP_X86_GUEST_MODE(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000240)) statfs(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r3], 0x20}}, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f00000001c0)={@remote}, 0x14) 3.786559965s ago: executing program 4 (id=228): r0 = socket$inet(0x2, 0x3, 0x6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x63, 0x11, 0x21}}, &(0x7f0000000000)='GPL\x00'}, 0x94) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @multicast}, 0x5d, {0x2, 0xe22, @dev={0xac, 0x14, 0x14, 0x80}}}) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x0, @local}, 0x4a, {0x2, 0x4e21, @private=0xa010100}, 'syz_tun\x00'}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, &(0x7f0000000180)=ANY=[], 0x4) ioctl$SIOCSIFHWADDR(r2, 0x8924, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r1, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="82", 0x1}, {&(0x7f00000003c0)="84", 0x1}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r1, &(0x7f0000000300), 0xa6, 0x3b00, 0x0, 0xfffffffffffffdfd) socket$kcm(0x21, 0x2, 0x2) 3.514525019s ago: executing program 2 (id=229): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000004c0)={0x79, 0x0, 0x3}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x14) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x414, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2a1, &(0x7f0000000f40)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file1\x00', 0x80000, 0x0, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000"], &(0x7f0000000000), 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000600)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x60, 0x24, 0xf0b, 0x20, 0x25dfdbff, {0x60, 0x0, 0x0, r4, {0x0, 0xc}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x34, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x5}}, @TCA_HTB_DIRECT_QLEN={0x0, 0x5, 0x3ff}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000805}, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x80) 2.709011871s ago: executing program 4 (id=230): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000040)={0xffffffffffffffff}) close_range(r1, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_io_uring_setup(0x10d, &(0x7f00000005c0)={0x0, 0xb4b7, 0x800}, &(0x7f0000000200)=0x0, &(0x7f0000000380)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r7, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}) io_uring_enter(r2, 0x3f70, 0x0, 0x0, 0x0, 0x0) 2.708235531s ago: executing program 1 (id=231): epoll_create1(0x0) epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x40000}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="af4fd73a", 0xffffffffffffff19, 0x840, 0x0, 0x0) shutdown(r0, 0x1) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000340)=0x20000000, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 2.600903303s ago: executing program 3 (id=232): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a20fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) 2.527502204s ago: executing program 4 (id=233): bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r0, 0x80000001) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, &(0x7f0000000540)) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x5, 0x0, 0x1, 0xfffffffffffffffd, 0x0, 0x0, 0xffffffffffffffff}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 2.508997364s ago: executing program 0 (id=234): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x2, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) r2 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x400000000000000, 0x0, 0x0}, 0x0) ioctl$SNDCTL_SEQ_PANIC(r2, 0x5111) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = shmget$private(0x0, 0x3000, 0x400, &(0x7f0000ffd000/0x3000)=nil) shmat(r3, &(0x7f0000ffc000/0x2000)=nil, 0x5000) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x3) open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) setxattr$trusted_overlay_nlink(0x0, 0x0, 0x0, 0x0, 0x3) 1.512453548s ago: executing program 2 (id=235): socket$kcm(0xa, 0x922000000003, 0x11) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x4040800) 1.431379679s ago: executing program 0 (id=236): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e24, @loopback}}, 0x5}, &(0x7f0000000180)=0x88) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) r1 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) recvmmsg$unix(r3, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 1.4253406s ago: executing program 1 (id=237): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x5}, 0x38) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@mask_cswp={0x58, 0x114, 0x9, {{0xe, 0x7}, &(0x7f0000000140)=0x6, 0x0, 0x6, 0x2, 0x7ff, 0x4, 0x22, 0xfffffffffffffffa}}], 0x58, 0x8004}, 0x0) 1.40902896s ago: executing program 3 (id=238): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_read_part_table(0x635, &(0x7f0000000000)="$eJzs3D9oXeUbB/DvSe899yaFtr8fTl1SncViZ28NSHqpdKp061IVJFQc4lSx5Ea6mCGDg7NLEbLUumjo4KAt4iROoYNacRWkqNQiPXLuOfdPBEFsOwifz5Dzvs953vd5n5yTMSf8py2kmxTjYS+dJMdf/kvGZiYJ6df5Sapue+/czuqp01VVVUWdcz7dPPn5oetJOu2S/nSbqqo2ppOTufrB0o13i1F353Zd9ObWgTq82BzjSPL0wbI/3mZuh1TVvoP1HuXvgX/n2uBWUVwp29lTvzxYST76efXs7pmt966/2IY3ki+T+vm/U78Xk+y3cvHYhc54WD/lN+f3/bW5lLPI7HEvprPvDKMr68PtlcHa3iRwdLjz6WvP/X7sRqoT+arsLExuFLP9ymT08O3X/R+u3/7tS4O1veHlxemNJ97//xdZbid3qypH6pL/y/hPZ/kRVAYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4HG4NriVZDTcTtb2hr02unp298xWmeSFV/tt6Pj8qgPt9WIu3KmvG1lPfvgk3fmkov4xjiyku9LEvl+unhkPOpP6vcVmcGmwtje8v5TcefbB0WGzKjc/OzErtzHdeTfPt6N7VWM82fy7JtsS1eEm7+v78/0XnWR9uD2uf/nHotM0/HExmh5zIcnrvbzSNFPdK9u1f8zaAAAAAAAAAAAAAAAAAAAAgIeyeur0G3fb8fl+kp/eXqjHVa/5L/diqdiX/20vWTyZXO2nGK0kuf3Sb+U3h7a+az8dMEovoyQHP9w81y4p920w/URAkap8nJ3xT/wZAAD//8Wbezo=") r2 = dup(r1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000200000408000000000000000300000000000000000000000200"/63], 0x0, 0x56}, 0x28) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000c00)={{{@in6=@mcast1, @in=@multicast2}}, {{@in6=@ipv4={""/10, ""/2, @private}}, 0x0, @in6=@remote}}, &(0x7f0000000000)=0xe8) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000640)={0x0, 0xd000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000001040)={0x10000, 0x4, 0x6000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) 1.36701488s ago: executing program 4 (id=239): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000200", 0x8, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, @local, {[], @mlv2_report}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000006c000100"/20, @ANYRES32=r2, @ANYBLOB="000000000000000018003480040035"], 0x38}}, 0x0) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f00000000c0)='./file0\x00', 0x60004ce) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x6080) bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r4, 0x4c80, 0xffffffffffffffb6) 0s ago: executing program 1 (id=240): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002240)={0x0, 0x0, 0x0}, 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r3 = syz_open_dev$usbmon(&(0x7f0000000100), 0x1, 0x101040) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x2}, 0x10, 0x0) landlock_restrict_self(r4, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000140)={0x2, 0x4c21, @local}, 0xb) ioctl$MON_IOCG_STATS(r3, 0x80089203, &(0x7f0000000140)) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x54, 0x24, 0xd0f, 0x70bd2c, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0x1, 0xe}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x24, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x9}, @TCA_CODEL_ECN={0x8, 0x4, 0x5}, @TCA_CODEL_CE_THRESHOLD={0x8}, @TCA_CODEL_TARGET={0x8, 0x1, 0x2}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x55}, 0xc010) socket$caif_seqpacket(0x25, 0x5, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.178' (ED25519) to the list of known hosts. [ 65.853247][ T4172] cgroup: Unknown subsys name 'net' [ 65.988599][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.967891][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 69.757994][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 69.772589][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 69.788352][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 69.839029][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 69.905825][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 69.973231][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.980549][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.989941][ T4194] device bridge_slave_0 entered promiscuous mode [ 70.029918][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.037431][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.045713][ T4194] device bridge_slave_1 entered promiscuous mode [ 70.062220][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.069548][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.078152][ T4184] device bridge_slave_0 entered promiscuous mode [ 70.116773][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.124145][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.132689][ T4184] device bridge_slave_1 entered promiscuous mode [ 70.144781][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.152548][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.161187][ T4190] device bridge_slave_0 entered promiscuous mode [ 70.175891][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.184132][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.192578][ T4182] device bridge_slave_0 entered promiscuous mode [ 70.223910][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.231742][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.239922][ T4190] device bridge_slave_1 entered promiscuous mode [ 70.250320][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.261320][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.269909][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.278944][ T4182] device bridge_slave_1 entered promiscuous mode [ 70.295587][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.303038][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.311753][ T4183] device bridge_slave_0 entered promiscuous mode [ 70.328596][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.347904][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.358047][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.366989][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.375540][ T4183] device bridge_slave_1 entered promiscuous mode [ 70.411995][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.448776][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.466870][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.479293][ T4184] team0: Port device team_slave_0 added [ 70.494972][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.507030][ T4194] team0: Port device team_slave_0 added [ 70.517104][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.529311][ T4184] team0: Port device team_slave_1 added [ 70.537146][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.562743][ T4194] team0: Port device team_slave_1 added [ 70.585997][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.624065][ T4182] team0: Port device team_slave_0 added [ 70.661641][ T4190] team0: Port device team_slave_0 added [ 70.669471][ T4183] team0: Port device team_slave_0 added [ 70.676977][ T4182] team0: Port device team_slave_1 added [ 70.683799][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.691580][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.718731][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.733576][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.741346][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.771156][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.784888][ T4190] team0: Port device team_slave_1 added [ 70.793294][ T4183] team0: Port device team_slave_1 added [ 70.825553][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.833671][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.862129][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.876835][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.885142][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.914222][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.953414][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.961278][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.995391][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.026879][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.036085][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.065422][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.080492][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.089616][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.119400][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.131767][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.138845][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.166394][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.192321][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.199470][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.226715][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.284213][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.291571][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.318143][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.321968][ T4185] Bluetooth: hci0: command 0x0409 tx timeout [ 71.328867][ T1108] Bluetooth: hci1: command 0x0409 tx timeout [ 71.348042][ T1108] Bluetooth: hci4: command 0x0409 tx timeout [ 71.366468][ T4184] device hsr_slave_0 entered promiscuous mode [ 71.374177][ T4184] device hsr_slave_1 entered promiscuous mode [ 71.384412][ T4194] device hsr_slave_0 entered promiscuous mode [ 71.391814][ T4194] device hsr_slave_1 entered promiscuous mode [ 71.398758][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.406903][ T4185] Bluetooth: hci2: command 0x0409 tx timeout [ 71.408235][ T4194] Cannot create hsr debugfs directory [ 71.418562][ T1108] Bluetooth: hci3: command 0x0409 tx timeout [ 71.437303][ T4190] device hsr_slave_0 entered promiscuous mode [ 71.444365][ T4190] device hsr_slave_1 entered promiscuous mode [ 71.451528][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.459223][ T4190] Cannot create hsr debugfs directory [ 71.467746][ T4182] device hsr_slave_0 entered promiscuous mode [ 71.475243][ T4182] device hsr_slave_1 entered promiscuous mode [ 71.484253][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.490867][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.498598][ T4182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.506378][ T4182] Cannot create hsr debugfs directory [ 71.639490][ T4183] device hsr_slave_0 entered promiscuous mode [ 71.646827][ T4183] device hsr_slave_1 entered promiscuous mode [ 71.654004][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.661936][ T4183] Cannot create hsr debugfs directory [ 71.898378][ T4184] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.911592][ T4184] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.930672][ T4184] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.941528][ T4184] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.989999][ T4182] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.019179][ T4182] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.047290][ T4194] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.061648][ T4182] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.078011][ T4182] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.092770][ T4194] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.105941][ T4194] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.117235][ T4194] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.184492][ T4190] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.197960][ T4190] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.223804][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.259268][ T4190] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.284154][ T4190] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.293980][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.305755][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.316882][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.335589][ T4183] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 72.356633][ T4183] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 72.373643][ T4183] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 72.389003][ T4183] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 72.400354][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.413404][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.424647][ T427] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.432123][ T427] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.441308][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.522973][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.534264][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.543699][ T427] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.551198][ T427] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.558925][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.582345][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.594930][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.617076][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.627301][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.637880][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.647868][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.670465][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.679844][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.692980][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.702696][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.728909][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.745031][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.755073][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.764670][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.773659][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.795200][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.805182][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.815303][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.830091][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.840925][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.849630][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.856879][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.866052][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.879647][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.888566][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.895732][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.919075][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.927022][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.952058][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.969433][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.983719][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.993747][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.003443][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.010974][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.019635][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.028862][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.038080][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.045820][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.056838][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.077956][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.093073][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.107455][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.117924][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.136829][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.158841][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.173250][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.187437][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.197780][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.208459][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.222123][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.235966][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.246495][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.279550][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.298237][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.310061][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.328657][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.339938][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.356455][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.367198][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.375834][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.386714][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.397815][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.407384][ T4265] Bluetooth: hci4: command 0x041b tx timeout [ 73.408595][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.414847][ T4265] Bluetooth: hci1: command 0x041b tx timeout [ 73.414946][ T4265] Bluetooth: hci0: command 0x041b tx timeout [ 73.439956][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.449216][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.458459][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.478087][ T4182] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 73.492641][ T4182] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.496790][ T4265] Bluetooth: hci3: command 0x041b tx timeout [ 73.511285][ T4265] Bluetooth: hci2: command 0x041b tx timeout [ 73.524528][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.534287][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.546454][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.554217][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.562973][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.577956][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.588944][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.599725][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.610165][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.619811][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.628902][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.636248][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.646177][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.655112][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.664614][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.674408][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.697644][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.728243][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.754365][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.764440][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.781333][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.788638][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.797409][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.806589][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.816196][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.826307][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.835768][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.846266][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.856629][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.876319][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.887542][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.898334][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.927321][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.943368][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.962231][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.977087][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.992018][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.011906][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.025697][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.055850][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.082632][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.096125][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.115371][ T4183] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 74.129469][ T4183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.146690][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.155612][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.164459][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.173700][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.183433][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.192235][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.200657][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.240322][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.249314][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.268889][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.305986][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.315137][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.333308][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.347735][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.379308][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.405604][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.433774][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.465476][ T4184] device veth0_vlan entered promiscuous mode [ 74.477940][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.488567][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.500487][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.517767][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.545920][ T4184] device veth1_vlan entered promiscuous mode [ 74.575783][ T4182] device veth0_vlan entered promiscuous mode [ 74.584201][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.594218][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.603992][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.613390][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.625965][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.637150][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.646143][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.654808][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.664827][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.673549][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.682673][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.695810][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.719160][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.734410][ T4182] device veth1_vlan entered promiscuous mode [ 74.752430][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.771816][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.789426][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.798932][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.826494][ T4194] device veth0_vlan entered promiscuous mode [ 74.841700][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.852779][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.861934][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.870216][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.880385][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.906881][ T4184] device veth0_macvtap entered promiscuous mode [ 74.942203][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.953286][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.964814][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.975363][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.989231][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.997882][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.008439][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.022875][ T4194] device veth1_vlan entered promiscuous mode [ 75.033963][ T4184] device veth1_macvtap entered promiscuous mode [ 75.046963][ T4182] device veth0_macvtap entered promiscuous mode [ 75.055631][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.067100][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.095204][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.104946][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.138283][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.147703][ T4190] device veth0_vlan entered promiscuous mode [ 75.163479][ T4182] device veth1_macvtap entered promiscuous mode [ 75.177766][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.186959][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.196632][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.214172][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.240431][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.255906][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.267567][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.284346][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.299929][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.313093][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.324502][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.337363][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.346657][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.358091][ T4190] device veth1_vlan entered promiscuous mode [ 75.393526][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.405200][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.417367][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.427009][ T4184] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.436591][ T4184] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.446716][ T4184] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.456035][ T4184] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.468654][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.477981][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.486337][ T4251] Bluetooth: hci0: command 0x040f tx timeout [ 75.487434][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.492856][ T4251] Bluetooth: hci1: command 0x040f tx timeout [ 75.502625][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.507165][ T4251] Bluetooth: hci4: command 0x040f tx timeout [ 75.522137][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.534806][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.544965][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.554241][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.568586][ T4183] device veth0_vlan entered promiscuous mode [ 75.575828][ T4251] Bluetooth: hci2: command 0x040f tx timeout [ 75.582269][ T4251] Bluetooth: hci3: command 0x040f tx timeout [ 75.592548][ T4182] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.602307][ T4182] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.612323][ T4182] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.622051][ T4182] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.639832][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.651843][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.664441][ T4194] device veth0_macvtap entered promiscuous mode [ 75.676168][ T4194] device veth1_macvtap entered promiscuous mode [ 75.694310][ T4183] device veth1_vlan entered promiscuous mode [ 75.727107][ T4190] device veth0_macvtap entered promiscuous mode [ 75.748174][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.757346][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.767576][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.776482][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.786178][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.795032][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.822425][ T4190] device veth1_macvtap entered promiscuous mode [ 75.855787][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.873050][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.884117][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.895859][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.908907][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.927158][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.938595][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.949657][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.961210][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.974540][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.983184][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.992365][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.001705][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.012029][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.021632][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.032621][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.050428][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.063137][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.074134][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.086521][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.098012][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.113510][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.135747][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.158250][ T4194] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.169408][ T4194] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.182789][ T4194] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.193935][ T4194] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.209475][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.219966][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.233219][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.244738][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.254962][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.266919][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.277263][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.289024][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.301694][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.326726][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.336096][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.345852][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.355658][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.381980][ T4183] device veth0_macvtap entered promiscuous mode [ 76.392613][ T3097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.428320][ T3097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.439766][ T4190] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.452453][ T4190] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.461563][ T4190] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.470637][ T4190] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.486569][ T4183] device veth1_macvtap entered promiscuous mode [ 76.522596][ T4276] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.523711][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.531745][ T4276] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.548548][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.552616][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.562678][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.571925][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.580112][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.588397][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.637564][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.647710][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.718562][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.739696][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.759462][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.772424][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.783926][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.794463][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.805661][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.815566][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.826983][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.838785][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.880912][ T3097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.906232][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.917826][ T3097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.943315][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.956207][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.971182][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.985932][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.005731][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.020051][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.036672][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.047704][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.064502][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.077707][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.097150][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.121040][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.199250][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.233967][ T4183] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.247820][ T4183] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.257673][ T4183] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.267435][ T4183] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.302483][ T427] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.312786][ T427] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.325815][ T427] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.352069][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.374198][ T427] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.384925][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.423724][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.438145][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.499847][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.563962][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.573056][ T4308] Bluetooth: hci4: command 0x0419 tx timeout [ 77.580108][ T4308] Bluetooth: hci1: command 0x0419 tx timeout [ 77.617646][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.627396][ T4308] Bluetooth: hci0: command 0x0419 tx timeout [ 77.664753][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.674680][ T4265] Bluetooth: hci3: command 0x0419 tx timeout [ 77.681595][ T4265] Bluetooth: hci2: command 0x0419 tx timeout [ 77.700036][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.736615][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.768640][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.783561][ T4311] syz.2.3[4311] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 77.783760][ T4311] syz.2.3[4311] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 78.966879][ T4332] loop3: detected capacity change from 0 to 1024 [ 79.023116][ T4321] netlink: 'syz.4.5': attribute type 24 has an invalid length. [ 80.604167][ T4345] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 80.739025][ T4348] loop1: detected capacity change from 0 to 65 [ 80.782391][ T144] hfsplus: b-tree write err: -5, ino 4 [ 80.859355][ T4348] BFS-fs: bfs_fill_super(): Impossible last inode number 2097665 > 513 on loop1 [ 80.880277][ T4351] netlink: 24 bytes leftover after parsing attributes in process `syz.0.17'. [ 80.958570][ T4351] netlink: 'syz.0.17': attribute type 1 has an invalid length. [ 80.980197][ T4351] netlink: 'syz.0.17': attribute type 2 has an invalid length. [ 81.042168][ T4352] bridge0: port 3(batadv1) entered blocking state [ 81.075267][ T4352] bridge0: port 3(batadv1) entered disabled state [ 81.106892][ T4352] device batadv1 entered promiscuous mode [ 81.131120][ T4358] Zero length message leads to an empty skb [ 81.827759][ T154] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 81.837486][ T154] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 82.119967][ T4369] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 82.191541][ T4372] loop1: detected capacity change from 0 to 512 [ 82.782195][ T4371] netlink: 'syz.3.22': attribute type 1 has an invalid length. [ 82.809373][ T4371] nlmon0: Master is either lo or non-ether device [ 82.849186][ T4372] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 82.894094][ T4372] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 83.133994][ T4372] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2825: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 83.651658][ T4372] EXT4-fs (loop1): 1 truncate cleaned up [ 83.841954][ T4372] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,minixdf,quota,,errors=continue. Quota mode: writeback. [ 83.927672][ T26] audit: type=1326 audit(1752528901.146:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4389 comm="syz.4.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46f1134929 code=0x7ffc0000 [ 83.974638][ T4393] netlink: 'syz.0.26': attribute type 1 has an invalid length. [ 83.998366][ T26] audit: type=1326 audit(1752528901.186:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4389 comm="syz.4.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f46f1134929 code=0x7ffc0000 [ 84.096360][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 84.445203][ T26] audit: type=1326 audit(1752528901.186:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4389 comm="syz.4.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46f1134929 code=0x7ffc0000 [ 84.468403][ C1] vkms_vblank_simulate: vblank timer overrun [ 84.540337][ T26] audit: type=1326 audit(1752528901.186:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4389 comm="syz.4.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46f1134929 code=0x7ffc0000 [ 84.568992][ T26] audit: type=1326 audit(1752528901.196:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4389 comm="syz.4.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f46f1134929 code=0x7ffc0000 [ 84.579366][ T4393] loop0: detected capacity change from 0 to 512 [ 84.602959][ T26] audit: type=1326 audit(1752528901.196:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4389 comm="syz.4.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46f1134929 code=0x7ffc0000 [ 84.672521][ T4405] cgroup: Unknown subsys name 'obj_role' [ 84.899656][ T26] audit: type=1326 audit(1752528901.196:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4389 comm="syz.4.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46f1134929 code=0x7ffc0000 [ 86.178490][ T26] audit: type=1326 audit(1752528901.196:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4389 comm="syz.4.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f46f1134929 code=0x7ffc0000 [ 86.257547][ T4412] tipc: Failed to remove unknown binding: 66,1,1/0:4277648966/4277648968 [ 86.268878][ T4354] ODEBUG: Out of memory. ODEBUG disabled [ 86.320167][ T4412] tipc: Failed to remove unknown binding: 66,1,1/0:4277648966/4277648968 [ 86.323784][ T4393] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 86.381350][ T4393] EXT4-fs (loop0): 1 truncate cleaned up [ 86.388666][ T4393] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota="errors=continue,noload,data_err=ignore,usrjquota="errors=continue,errors=remount-ro,noblock_validity,. Quota mode: writeback. [ 86.490043][ T4393] EXT4-fs (loop0): Unrecognized mount option "YڄyFmZ1(O[ [ 86.490043][ T4393] ^+E]0rQ#{̎cp6;:PrflIG>?υ-H"&F)!I|.z" or missing value [ 86.556528][ T26] audit: type=1326 audit(1752528901.376:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4389 comm="syz.4.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46f1134929 code=0x7ffc0000 [ 86.814597][ T26] audit: type=1326 audit(1752528901.536:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4389 comm="syz.4.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46f1134929 code=0x7ffc0000 [ 86.876443][ T7] cfg80211: failed to load regulatory.db [ 87.651002][ T21] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 88.573454][ T4442] loop0: detected capacity change from 0 to 128 [ 88.610965][ T4440] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 88.618019][ T4440] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 88.661724][ T4440] vhci_hcd vhci_hcd.0: Device attached [ 88.726499][ T4442] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 88.759434][ T4439] loop2: detected capacity change from 0 to 4096 [ 88.909451][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 89.011718][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 89.022229][ T7] usb 35-1: new high-speed USB device number 2 using vhci_hcd [ 89.114063][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 89.640751][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 89.679444][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 89.690342][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #292!!! [ 89.707563][ T4443] vhci_hcd: connection reset by peer [ 89.729307][ T4442] UDF-fs: error (device loop0): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 89.729838][ T4385] vhci_hcd: stop threads [ 89.841383][ T4439] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 89.888872][ T4385] vhci_hcd: release socket [ 89.907408][ T4385] vhci_hcd: disconnect device [ 89.947891][ T4461] loop3: detected capacity change from 0 to 4096 [ 90.255863][ T4461] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 90.613309][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 90.630745][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 90.639829][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 91.216560][ T4461] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 91.468066][ T4194] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 92.810698][ C0] sched: RT throttling activated [ 93.917893][ T4508] netlink: 8 bytes leftover after parsing attributes in process `syz.1.52'. [ 94.466956][ T7] vhci_hcd: vhci_device speed not set [ 96.137710][ T4527] loop0: detected capacity change from 0 to 1024 [ 97.380912][ T4531] vxcan1: tx drop: invalid da for name 0x0000000000000011 [ 98.532467][ T4527] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 101.302214][ T4559] loop1: detected capacity change from 0 to 2048 [ 102.653136][ T4564] process 'syz.3.65' launched '/dev/fd/8' with NULL argv: empty string added [ 102.665239][ T4578] loop1: detected capacity change from 0 to 256 [ 103.049881][ T4587] cgroup: Invalid name [ 103.983853][ T4586] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 103.991819][ T4586] IPv6: NLM_F_CREATE should be set when creating new route [ 105.621689][ T4604] loop1: detected capacity change from 0 to 512 [ 105.808460][ T4604] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 105.911235][ T4604] EXT4-fs (loop1): 1 truncate cleaned up [ 105.948124][ T4604] EXT4-fs (loop1): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,block_validity,debug_want_extra_isize=0x0000000000000068,quota,resuid=0x0000000000000000,lazytime,noblock_validity,usrquota,,errors=continue. Quota mode: writeback. [ 105.965672][ T4611] loop3: detected capacity change from 0 to 32768 [ 106.021600][ T4611] XFS: ikeep mount option is deprecated. [ 106.111791][ T4622] netlink: 4 bytes leftover after parsing attributes in process `syz.2.77'. [ 106.206375][ T4629] netlink: 24 bytes leftover after parsing attributes in process `syz.2.78'. [ 106.246858][ T4611] XFS (loop3): Mounting V5 Filesystem [ 106.564811][ T4611] XFS (loop3): Ending clean mount [ 106.652089][ T4611] XFS (loop3): Quotacheck needed: Please wait. [ 106.819116][ T4611] XFS (loop3): Quotacheck: Done. [ 109.293633][ T4184] XFS (loop3): Unmounting Filesystem [ 121.389217][ T4740] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.398609][ T4740] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.407516][ T4740] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.416295][ T4740] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.582874][ T4740] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 121.628641][ T4743] netlink: 'syz.0.107': attribute type 10 has an invalid length. [ 121.649263][ T4751] loop2: detected capacity change from 0 to 2048 [ 121.692443][ T4743] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.946957][ T4743] device bridge_slave_1 left promiscuous mode [ 121.964454][ T4743] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.980132][ T4751] NILFS (loop2): invalid segment: Inconsistency found [ 122.404682][ T4751] NILFS (loop2): trying rollback from an earlier position [ 122.526078][ T4751] NILFS (loop2): recovery complete [ 122.538194][ T4743] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 122.559557][ T4745] netlink: 14 bytes leftover after parsing attributes in process `syz.0.107'. [ 122.580883][ T4767] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 122.841765][ T4745] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 123.036502][ T4745] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 123.096530][ T4745] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 123.159048][ T4745] bond0 (unregistering): Released all slaves [ 123.211668][ T4251] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 123.262728][ T4773] netlink: 4 bytes leftover after parsing attributes in process `syz.3.117'. [ 123.281176][ T4743] syz.0.107 (4743) used greatest stack depth: 20896 bytes left [ 123.480988][ T4251] usb 5-1: Using ep0 maxpacket: 32 [ 123.622285][ T4251] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 123.649168][ T4251] usb 5-1: config 0 has no interface number 0 [ 123.707378][ T4251] usb 5-1: config 0 interface 2 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 125.076912][ T4251] usb 5-1: config 0 interface 2 has no altsetting 0 [ 125.099752][ T4251] usb 5-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 125.109946][ T4251] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.177013][ T4251] usb 5-1: config 0 descriptor?? [ 127.184802][ T4251] uclogic 0003:5543:0781.0001: unknown main item tag 0x0 [ 127.290576][ T4251] uclogic 0003:5543:0781.0001: unknown main item tag 0x0 [ 127.410908][ T4251] uclogic 0003:5543:0781.0001: unknown main item tag 0x0 [ 127.525145][ T4251] uclogic 0003:5543:0781.0001: item fetching failed at offset 6/7 [ 128.108492][ T4251] uclogic 0003:5543:0781.0001: parse failed [ 128.114502][ T4251] uclogic: probe of 0003:5543:0781.0001 failed with error -22 [ 128.130033][ T4251] usb 5-1: USB disconnect, device number 2 [ 130.670559][ T4836] netlink: 4 bytes leftover after parsing attributes in process `syz.3.132'. [ 130.724975][ T4839] loop3: detected capacity change from 0 to 256 [ 132.924465][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.932254][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.897056][ T4868] netlink: 'syz.1.140': attribute type 4 has an invalid length. [ 133.973371][ T4886] tipc: Failed to remove unknown binding: 66,1,1/0:3242691057/3242691059 [ 133.991612][ T4885] netlink: 8 bytes leftover after parsing attributes in process `syz.3.143'. [ 134.074613][ T4889] tipc: Failed to remove unknown binding: 66,1,1/0:3242691057/3242691059 [ 134.103555][ T4889] tipc: Failed to remove unknown binding: 66,1,1/0:3242691057/3242691059 [ 134.126310][ T4885] loop3: detected capacity change from 0 to 256 [ 134.151427][ T4885] ======================================================= [ 134.151427][ T4885] WARNING: The mand mount option has been deprecated and [ 134.151427][ T4885] and is ignored by this kernel. Remove the mand [ 134.151427][ T4885] option from the mount to silence this warning. [ 134.151427][ T4885] ======================================================= [ 134.252472][ T4885] FAT-fs (loop3): Directory bread(block 64) failed [ 134.261868][ T4885] FAT-fs (loop3): Directory bread(block 65) failed [ 134.274424][ T4885] FAT-fs (loop3): Directory bread(block 66) failed [ 134.281479][ T4885] FAT-fs (loop3): Directory bread(block 67) failed [ 134.288256][ T4885] FAT-fs (loop3): Directory bread(block 68) failed [ 134.297902][ T4885] FAT-fs (loop3): Directory bread(block 69) failed [ 134.305279][ T4885] FAT-fs (loop3): Directory bread(block 70) failed [ 134.312377][ T4885] FAT-fs (loop3): Directory bread(block 71) failed [ 134.319273][ T4885] FAT-fs (loop3): Directory bread(block 72) failed [ 134.326471][ T4885] FAT-fs (loop3): Directory bread(block 73) failed [ 134.449510][ T4898] netlink: 28 bytes leftover after parsing attributes in process `syz.0.150'. [ 134.530791][ T4898] syz.0.150 (4898) used greatest stack depth: 20448 bytes left [ 135.988889][ T4918] netlink: 28 bytes leftover after parsing attributes in process `syz.2.156'. [ 136.141972][ T4911] netlink: 830 bytes leftover after parsing attributes in process `syz.1.154'. [ 136.221706][ T4923] bridge0: port 4(syz_tun) entered blocking state [ 136.228902][ T4923] bridge0: port 4(syz_tun) entered disabled state [ 136.236967][ T4923] device syz_tun entered promiscuous mode [ 136.243387][ T4923] bridge0: port 4(syz_tun) entered blocking state [ 136.250147][ T4923] bridge0: port 4(syz_tun) entered forwarding state [ 140.715474][ T4958] netlink: 'syz.0.167': attribute type 21 has an invalid length. [ 140.873972][ T4958] netlink: 4 bytes leftover after parsing attributes in process `syz.0.167'. [ 141.096323][ T4968] loop2: detected capacity change from 0 to 1024 [ 141.592476][ T4975] hfsplus: invalid extended attribute record [ 141.680426][ T4973] loop0: detected capacity change from 0 to 164 [ 141.904702][ T4973] ISOFS: Bad logical zone size 25856 [ 142.569034][ T4204] Bluetooth: Wrong link type (-22) [ 143.890589][ T4399] hfsplus: b-tree write err: -5, ino 4 [ 146.257381][ T5017] syz.1.182 uses obsolete (PF_INET,SOCK_PACKET) [ 146.467522][ T5019] loop4: detected capacity change from 0 to 64 [ 146.774319][ T5019] hfs: unable to locate alternate MDB [ 146.854189][ T5019] hfs: continuing without an alternate MDB [ 147.580505][ T26] kauditd_printk_skb: 16 callbacks suppressed [ 147.594281][ T26] audit: type=1800 audit(1752528964.746:28): pid=5027 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.184" name="file1" dev="loop4" ino=18 res=0 errno=0 [ 148.444672][ T5025] loop1: detected capacity change from 0 to 40427 [ 148.774008][ T5025] F2FS-fs (loop1): Found nat_bits in checkpoint [ 149.751850][ T5025] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 149.855378][ T5053] loop2: detected capacity change from 0 to 128 [ 149.901138][ T5025] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 151.442367][ T5053] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 151.456119][ T4190] attempt to access beyond end of device [ 151.456119][ T4190] loop1: rw=2049, want=45104, limit=40427 [ 151.542740][ T5053] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 151.704067][ T5053] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 152.043556][ T26] audit: type=1326 audit(1752528969.266:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5049 comm="syz.2.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd099dec929 code=0x7fc00000 [ 152.177650][ T26] audit: type=1326 audit(1752528969.266:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5049 comm="syz.2.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd099dec929 code=0x7fc00000 [ 152.230148][ T5087] netlink: 8 bytes leftover after parsing attributes in process `syz.0.199'. [ 152.260835][ T26] audit: type=1326 audit(1752528969.266:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5049 comm="syz.2.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd099dec929 code=0x7fc00000 [ 152.311370][ T26] audit: type=1326 audit(1752528969.266:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5049 comm="syz.2.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd099dec929 code=0x7fc00000 [ 152.471033][ T26] audit: type=1326 audit(1752528969.266:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5049 comm="syz.2.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd099dec929 code=0x7fc00000 [ 152.546371][ T26] audit: type=1326 audit(1752528969.266:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5049 comm="syz.2.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd099dec929 code=0x7fc00000 [ 152.638622][ T26] audit: type=1326 audit(1752528969.266:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5049 comm="syz.2.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd099dec929 code=0x7fc00000 [ 152.719831][ T5099] netlink: 12 bytes leftover after parsing attributes in process `syz.4.204'. [ 152.727203][ T26] audit: type=1326 audit(1752528969.266:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5049 comm="syz.2.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd099dec929 code=0x7fc00000 [ 152.792014][ T26] audit: type=1326 audit(1752528969.266:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5049 comm="syz.2.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd099dec929 code=0x7fc00000 [ 153.556238][ T26] audit: type=1326 audit(1752528969.266:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5049 comm="syz.2.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd099dec929 code=0x7fc00000 [ 153.662511][ T26] audit: type=1326 audit(1752528969.266:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5049 comm="syz.2.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd099dec929 code=0x7fc00000 [ 153.784061][ T26] audit: type=1326 audit(1752528969.266:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5049 comm="syz.2.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd099dec929 code=0x7fc00000 [ 153.899520][ T26] audit: type=1326 audit(1752528969.266:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5049 comm="syz.2.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd099dec929 code=0x7fc00000 [ 153.930791][ T26] audit: type=1326 audit(1752528969.266:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5049 comm="syz.2.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd099dec929 code=0x7fc00000 [ 153.959074][ T26] audit: type=1326 audit(1752528969.266:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5049 comm="syz.2.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd099dec929 code=0x7fc00000 [ 154.002601][ T5113] xt_CT: No such helper "snmp" [ 154.137721][ T26] audit: type=1326 audit(1752528969.266:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5049 comm="syz.2.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd099dec929 code=0x7fc00000 [ 154.476340][ T5118] loop3: detected capacity change from 0 to 2048 [ 155.082543][ T5130] mmap: syz.2.210 (5130) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 156.879233][ T5118] EXT4-fs: error -4 creating inode table initialization thread [ 157.047566][ T5118] EXT4-fs (loop3): mount failed [ 157.237218][ T5150] netlink: 16 bytes leftover after parsing attributes in process `syz.1.218'. [ 158.876525][ T5150] netlink: 12 bytes leftover after parsing attributes in process `syz.1.218'. [ 160.012991][ T5170] atomic_op ffff888022352998 conn xmit_atomic 0000000000000000 [ 162.527141][ T5194] netlink: 'syz.3.223': attribute type 12 has an invalid length. [ 163.070033][ T5191] loop2: detected capacity change from 0 to 128 [ 163.146378][ T5191] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 163.257655][ T5191] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 163.399433][ T5191] netlink: 24 bytes leftover after parsing attributes in process `syz.2.229'. [ 163.445008][ T154] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 164.550601][ T5216] 9pnet: Insufficient options for proto=fd [ 164.792773][ T5225] atomic_op ffff88805ff9d998 conn xmit_atomic 0000000000000000 [ 165.980336][ T5231] general protection fault, probably for non-canonical address 0xdffffc0000000012: 0000 [#1] PREEMPT SMP KASAN [ 165.992195][ T5231] KASAN: null-ptr-deref in range [0x0000000000000090-0x0000000000000097] [ 166.000987][ T5231] CPU: 1 PID: 5231 Comm: syz.1.240 Not tainted 5.15.188-syzkaller #0 [ 166.009079][ T5231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 166.019166][ T5231] RIP: 0010:update_vf+0x31/0xfc0 [ 166.024137][ T5231] Code: 41 54 53 48 83 ec 60 41 89 f7 49 89 fd 49 be 00 00 00 00 00 fc ff df e8 4d 2b 79 f9 4d 8d a5 90 00 00 00 4c 89 e0 48 c1 e8 03 <42> 80 3c 30 00 74 08 4c 89 e7 e8 30 a4 be f9 bb e8 00 00 00 49 03 [ 166.043855][ T5231] RSP: 0018:ffffc90002efeeb0 EFLAGS: 00010206 [ 166.049962][ T5231] RAX: 0000000000000012 RBX: 0000000000000000 RCX: 0000000000080000 [ 166.057948][ T5231] RDX: ffffc9000bf61000 RSI: 00000000000002e0 RDI: 00000000000002e1 [ 166.065945][ T5231] RBP: 1ffffffff1604cd4 R08: ffff888022eb0000 R09: 0000000000000002 [ 166.074268][ T5231] R10: 00000000ffffffff R11: 0000000000000002 R12: 0000000000000090 [ 166.082279][ T5231] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000000 [ 166.090275][ T5231] FS: 00007f69e4b446c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 166.099243][ T5231] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 166.105846][ T5231] CR2: 00007f1545d99f98 CR3: 000000005792d000 CR4: 00000000003526e0 [ 166.113841][ T5231] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 166.121835][ T5231] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 166.129832][ T5231] Call Trace: [ 166.133130][ T5231] [ 166.136087][ T5231] hfsc_qlen_notify+0x22/0xb0 [ 166.140800][ T5231] qdisc_tree_reduce_backlog+0x25f/0x430 [ 166.143970][ T5223] loop3: detected capacity change from 0 to 2048 [ 166.146453][ T5231] codel_change+0x8d1/0xc00 [ 166.146480][ T5231] ? lockdep_init_map_type+0x9d/0x850 [ 166.162665][ T5231] ? memset+0x1e/0x40 [ 166.166681][ T5231] ? lockdep_init_map_type+0x9d/0x850 [ 166.172080][ T5231] ? lockdep_softirqs_off+0x420/0x420 [ 166.177485][ T5231] ? codel_reset+0x150/0x150 [ 166.182114][ T5231] codel_init+0x190/0x330 [ 166.186468][ T5231] ? qdisc_peek_dequeued+0x1f0/0x1f0 [ 166.191784][ T5231] qdisc_create+0x7bd/0x1170 [ 166.196411][ T5231] ? qdisc_notify+0x350/0x350 [ 166.201650][ T5231] ? lockdep_rtnl_is_held+0x22/0x30 [ 166.206880][ T5231] tc_modify_qdisc+0xaad/0x16c0 [ 166.211778][ T5231] ? rcu_lock_release+0x20/0x20 [ 166.216666][ T5231] ? rcu_lock_release+0x20/0x20 [ 166.221547][ T5231] rtnetlink_rcv_msg+0x9b9/0xe60 [ 166.226522][ T5231] ? rtnetlink_bind+0x80/0x80 [ 166.231227][ T5231] ? __local_bh_enable_ip+0x12a/0x1b0 [ 166.236629][ T5231] ? lockdep_hardirqs_on+0x94/0x140 [ 166.241860][ T5231] ? __local_bh_enable_ip+0x12a/0x1b0 [ 166.247258][ T5231] ? _local_bh_enable+0xa0/0xa0 [ 166.252146][ T5231] ? __dev_queue_xmit+0x1bc5/0x2ed0 [ 166.257380][ T5231] ? dev_queue_xmit+0x20/0x20 [ 166.262081][ T5231] ? memcpy+0x3c/0x60 [ 166.266089][ T5231] ? __copy_skb_header+0x417/0x5a0 [ 166.271231][ T5231] ? __skb_clone+0x480/0x790 [ 166.275862][ T5231] netlink_rcv_skb+0x1e0/0x430 [ 166.280658][ T5231] ? rtnetlink_bind+0x80/0x80 [ 166.285356][ T5231] ? netlink_ack+0xb60/0xb60 [ 166.289955][ T5231] netlink_unicast+0x77c/0x920 [ 166.294729][ T5231] netlink_sendmsg+0x8ab/0xbc0 [ 166.299496][ T5231] ? netlink_getsockopt+0x560/0x560 [ 166.304696][ T5231] ? aa_sock_msg_perm+0x94/0x150 [ 166.309636][ T5231] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 166.314925][ T5231] ? security_socket_sendmsg+0x7c/0xa0 [ 166.320386][ T5231] ? netlink_getsockopt+0x560/0x560 [ 166.325584][ T5231] ____sys_sendmsg+0x5a2/0x8c0 [ 166.330360][ T5231] ? memset+0x1e/0x40 [ 166.334343][ T5231] ? __sys_sendmsg_sock+0x30/0x30 [ 166.339484][ T5231] ? import_iovec+0x6f/0xa0 [ 166.343992][ T5231] ___sys_sendmsg+0x1f0/0x260 [ 166.348683][ T5231] ? __sys_sendmsg+0x250/0x250 [ 166.353487][ T5231] ? __fdget+0x18b/0x210 [ 166.357730][ T5231] __se_sys_sendmsg+0x190/0x250 [ 166.362596][ T5231] ? __x64_sys_sendmsg+0x80/0x80 [ 166.367556][ T5231] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 166.373546][ T5231] ? lockdep_hardirqs_on+0x94/0x140 [ 166.378754][ T5231] do_syscall_64+0x4c/0xa0 [ 166.383181][ T5231] ? clear_bhb_loop+0x30/0x80 [ 166.387885][ T5231] ? clear_bhb_loop+0x30/0x80 [ 166.392566][ T5231] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 166.398457][ T5231] RIP: 0033:0x7f69e6cdc929 [ 166.402878][ T5231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.422509][ T5231] RSP: 002b:00007f69e4b44038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 166.430956][ T5231] RAX: ffffffffffffffda RBX: 00007f69e6f03fa0 RCX: 00007f69e6cdc929 [ 166.438932][ T5231] RDX: 000000000000c010 RSI: 0000200000000280 RDI: 0000000000000003 [ 166.446904][ T5231] RBP: 00007f69e6d5eb39 R08: 0000000000000000 R09: 0000000000000000 [ 166.455006][ T5231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 166.462979][ T5231] R13: 0000000000000000 R14: 00007f69e6f03fa0 R15: 00007fff45061bb8 [ 166.471150][ T5231] [ 166.474192][ T5231] Modules linked in: [ 166.478196][ T5231] ---[ end trace 00439955c8ea06ac ]--- [ 166.483710][ T5231] RIP: 0010:update_vf+0x31/0xfc0 [ 166.488685][ T5231] Code: 41 54 53 48 83 ec 60 41 89 f7 49 89 fd 49 be 00 00 00 00 00 fc ff df e8 4d 2b 79 f9 4d 8d a5 90 00 00 00 4c 89 e0 48 c1 e8 03 <42> 80 3c 30 00 74 08 4c 89 e7 e8 30 a4 be f9 bb e8 00 00 00 49 03 [ 166.508368][ T5231] RSP: 0018:ffffc90002efeeb0 EFLAGS: 00010206 [ 166.514575][ T5231] RAX: 0000000000000012 RBX: 0000000000000000 RCX: 0000000000080000 [ 166.522612][ T5231] RDX: ffffc9000bf61000 RSI: 00000000000002e0 RDI: 00000000000002e1 [ 166.530617][ T5231] RBP: 1ffffffff1604cd4 R08: ffff888022eb0000 R09: 0000000000000002 [ 166.538643][ T5231] R10: 00000000ffffffff R11: 0000000000000002 R12: 0000000000000090 [ 166.546661][ T5231] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000000 [ 166.554683][ T5231] FS: 00007f69e4b446c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 166.563659][ T5231] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 166.570271][ T5231] CR2: 00007f1545d99f98 CR3: 000000005792d000 CR4: 00000000003526e0 [ 166.578293][ T5231] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 166.586311][ T5231] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 166.594356][ T5231] Kernel panic - not syncing: Fatal exception in interrupt [ 166.601827][ T5231] Kernel Offset: disabled [ 166.606163][ T5231] Rebooting in 86400 seconds..