last executing test programs: 16.340224465s ago: executing program 0 (id=1): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') bind$x25(0xffffffffffffffff, 0x0, 0x0) 16.113462675s ago: executing program 0 (id=6): madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$swradio(&(0x7f00000001c0), 0x0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbfc, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x844}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x4000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) kexec_load(0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x7ffdd000, 0x8000}], 0x320000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000f8ffffff95"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) socket(0x2, 0x80805, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) close_range(r1, r3, 0x0) io_setup(0x9, &(0x7f0000000240)=0x0) socket$kcm(0x10, 0x2, 0x0) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r5, &(0x7f0000000040), 0x10) io_submit(r4, 0x1, &(0x7f0000000100)=[&(0x7f00000002c0)={0x400000, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000200)="05", 0x1}]) 11.048591572s ago: executing program 4 (id=18): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='0'], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0x444) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xffff2000, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 10.734858391s ago: executing program 0 (id=21): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000002340)='mountstats\x00') openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) bind$pptp(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x2, {0x1, @multicast2}}, 0x1e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x10000, 0x25dfdbfb, {}, [{0x90, 0x1, [@m_ct={0x44, 0x0, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x8, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x3, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x8}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) mbind(&(0x7f00001e7000/0x2000)=nil, 0x2000, 0x8003, &(0x7f0000000000)=0x9, 0x3, 0x2) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r5 = syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/time_for_children\x00') ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r4, &(0x7f00000007c0)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000040)='binder\x00', 0x2200892, 0x0) pread64(r0, &(0x7f0000002380)=""/253, 0xfd, 0x4eb) 10.479063145s ago: executing program 4 (id=22): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) syz_emit_ethernet(0x66, &(0x7f00000000c0)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010102, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}}}}}}, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000040)=0x9, 0x4) 10.293768102s ago: executing program 4 (id=23): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0x6}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000001fee)='R\x10suse\x00\x00\x00\x00\x00\x00\x00dn\x00\x00\x00', 0x0) r2 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r2, &(0x7f0000002940), 0x40000000000017d, 0x811) 9.895933348s ago: executing program 1 (id=24): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x431, 0x70bd28, 0x259fdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_TX={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c890}, 0x20000000) 9.637832042s ago: executing program 1 (id=26): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, 0x0, 0x24008084) 9.538957411s ago: executing program 1 (id=27): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000003340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [r1, r1]}}], 0x14, 0x40}}], 0x1, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) 9.344656059s ago: executing program 1 (id=28): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1b8, 0x0, 0xa, 0x148, 0x0, 0x60, 0x2a0, 0x2a8, 0x2a8, 0x2a0, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x70, 0x94, 0x0, {0x200003ae, 0x7f00}}, @common=@unspec=@NFQUEUE0={0x24, 'NFQUEUE\x00', 0x0, {0x5}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0x214) 9.10976009s ago: executing program 1 (id=29): set_mempolicy(0x2002, &(0x7f0000000000)=0x9, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0x2, 0x7, 0xa, 0x5, 0x1, 0x4, 0x2}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ftruncate(0xffffffffffffffff, 0x8800000) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000000c0)={&(0x7f0000000080)="2fceea6d79d175d6256bb4cfb4db781aaee4de3538489ad0807f7a7ae250c6337200"/50, &(0x7f0000000400)=""/115, 0x0, &(0x7f0000000480)="83abbd84d2107b707f004de20c7f5a25060f09162f866ac7a06ee0f820a3995c3b620ebfc273e7767ca8b979f20a301d0776604e9a4a6e6ddbcf6a0fb3f1f7478868f21c7300780dce871df5ec762cb2cba36907833984", 0xc19f, 0xffffffffffffffff, 0x4}, 0x38) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) listen(r1, 0x0) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x700, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) 8.937660886s ago: executing program 3 (id=30): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x20}) 8.13314353s ago: executing program 3 (id=32): mlockall(0x1) mlockall(0x3) mlockall(0x5) creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x2404c005) syz_open_dev$sndpcmp(0x0, 0x8, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) r0 = syz_io_uring_setup(0x16db, &(0x7f0000000400)={0x0, 0xe7a8, 0x400, 0x7ffe, 0x40024e}, 0x0, &(0x7f0000000180)=0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x8, 0x4}, {0x50, 0x4}}}}, 0x11) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(0x0, r1, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000}) io_uring_enter(r0, 0x3d0e, 0x4c1, 0x43, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x1) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) fcntl$lock(r2, 0x24, &(0x7f0000000040)={0x1}) fsopen(&(0x7f0000000040)='xfs\x00', 0x1) 6.485811692s ago: executing program 2 (id=35): syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x82c02) syz_open_dev$video(&(0x7f0000000040), 0x7, 0x0) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, 0x0, 0x2e) syz_socket_connect_nvme_tcp() bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@fallback, 0x5, 0x1, 0x8b78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0xfffffec4) syz_io_uring_setup(0x23b5, &(0x7f0000000140)={0x0, 0xb0c4, 0x0, 0x2, 0x5a}, &(0x7f0000000000)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000340)={0x1d, r6, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x20000000) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r5, 0x6b, 0x1, &(0x7f0000000380)=[{0x1, 0x3, {0x1, 0x0, 0x1}, {0x0, 0xf0, 0x4}, 0xfd, 0xfe}, {0x0, 0x2, {0x0, 0xff}, {0x1, 0xff, 0x3}, 0x0, 0xfe}, {0x2, 0x2, {0x1, 0x0, 0x1}, {}, 0x1}, {0x3, 0x2, {0x2, 0xff, 0x4}, {0x0, 0x0, 0x3}, 0xff, 0xfd}, {0x3, 0x3, {0x0, 0x0, 0x2}, {0x0, 0x1}, 0x1, 0x2}], 0xa0) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r6, {0xfff3, 0x10}, {0xfff1, 0x9}, {0x2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x48040}, 0x20000050) 6.455720955s ago: executing program 0 (id=36): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r0, 0x1) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x2, @empty, 0x2}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='lo\x00', 0x10) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @empty, 0x8}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, 0x0}}], 0x1, 0x240c089d) 6.355304274s ago: executing program 3 (id=37): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, 0x0, 0x24008084) 5.408175201s ago: executing program 3 (id=38): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x118) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f00000000c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x62881, 0x19d) write$P9_RREADLINK(r0, &(0x7f0000000180)={0xffffffffffffff9e, 0x17, 0xfffd, {0x7, './file0'}}, 0x10) open(&(0x7f0000000140)='./file0\x00', 0x33f, 0x0) 5.325793299s ago: executing program 3 (id=39): timerfd_create(0x9, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_io_uring_setup(0x49c0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ftruncate(r1, 0x1000006) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x1000000}) syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100004106cd40cd060f011bd5000000010902"], 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000580)=0x1) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 5.325271929s ago: executing program 0 (id=40): r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, &(0x7f0000000000)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1K\x00\x00\x00\x00\x00\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001000000", @ANYRES32, @ANYBLOB="0000000000000000000094b4f562defb5f7756b4cbf5a6d7563c5ac743a2ccb509f77b40dee5bad90c6573030da19ef59bae484332d88c609d30248a44a69cc56623a061439a1dc47a295d5a43429071b408dba7cc7061b052d1a2f3d10824d6fb361906efef7904a738902f10f4662b1849de", @ANYRES32=0x0, @ANYBLOB='\x00'/21], 0x48) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="ff0c0000000c0000000700000005000000000000060400000000400000006100000000000000"], 0x0, 0x2b, 0x0, 0x1}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000001400)=@base={0xb, 0x6, 0x4, 0x3a7, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r5, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@call={0x85, 0x0, 0x0, 0x7a}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500), &(0x7f00000006c0), 0x3, r4}, 0x38) open(&(0x7f0000000280)='.\x00', 0x800, 0x0) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r6, 0x0) recvmmsg(r6, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ocfs2_control(0xffffff9c, &(0x7f0000000000), 0x80, 0x0) fsopen(0x0, 0x0) setxattr$security_capability(0x0, &(0x7f0000000080), 0x0, 0x0, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom0\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 5.0965825s ago: executing program 4 (id=41): bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)=""/210, 0xd2}], 0x1}}], 0x2, 0x60, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da", 0x33}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40804) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/62, 0x3e}], 0x2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xf, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100}, 0x94) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000340)="0a000300010000", 0x7) recvmmsg(r5, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x40001af, 0x12122, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'veth1_to_batadv\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000080), 0xf9ba, 0x14b082) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000580)={0x53, 0xfffffffffffffffb, 0x6, 0x4, @buffer={0x0, 0x19, &(0x7f0000000340)=""/25}, &(0x7f00000004c0)="1518a7a093f1", 0x0, 0x84, 0x2, 0x0, 0x0}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12) 1.782063005s ago: executing program 0 (id=42): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x22, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0x52}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) socket$netlink(0x10, 0x3, 0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x18c) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0x6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0), 0x0}, 0x20) 1.433707517s ago: executing program 2 (id=43): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xc, 0x4}, {}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @local}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 1.126827926s ago: executing program 4 (id=44): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x20000006, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x7, 0x3, 0xc, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0xfffffffe, 0x400, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x35, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x200025, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0x10000, 0x400, 0x7ffd, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x8, 0x800, 0xffff, 0x6, 0x96, 0x9, 0x2, 0x0, 0x200, 0x401, 0xc, 0x2, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x5, 0x7, 0x200, 0x3], [0x401, 0x8000c584, 0x5, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x6, 0x5, 0x80, 0x9, 0x7ffe, 0x10000, 0x0, 0x3, 0x400004, 0x3, 0x6d7e, 0xfffffffc, 0x8, 0x3, 0x3ff, 0x20000006, 0x1, 0x95e, 0xffffffff, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0x10002, 0x3, 0x3, 0x88, 0x2, 0xffffff80, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x1, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x3, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x200, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xfffff734, 0x5, 0x4, 0x20008, 0x8a5, 0x82, 0x44, 0x409, 0x3, 0x4, 0x4, 0xe, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0x200, 0x7, 0x1f3, 0xfffffffd, 0xa, 0xe, 0x101, 0xf, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) readv(r0, &(0x7f0000001240)=[{&(0x7f00000012c0)=""/41, 0x29}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 840.283342ms ago: executing program 2 (id=45): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="20000000140009050000000000000000020100ff", @ANYRES32=r2, @ANYBLOB="080002006a"], 0x20}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="70000000140009050000000000000000020100ff", @ANYRES32=r5, @ANYBLOB="1400060006000000000000f0000000000000000008000200ac"], 0x70}, 0x1, 0x0, 0x0, 0x40880}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d80)=@ipv4_newaddr={0x20, 0x14, 0x509, 0x0, 0x0, {0x2, 0x1, 0x0, 0xff, r6}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x4e21, @empty}}) 677.786397ms ago: executing program 4 (id=46): r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) r1 = epoll_create1(0x0) ptrace$getenv(0x4201, r0, 0x5, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'ip_vti0\x00', r5, 0x0, 0x0, 0x6, 0x6, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0xd}, @multicast2}}}}) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000200)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0xf, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0xd}, @multicast2, {[@lsrr={0x83, 0x27, 0xc7, [@private=0xa010102, @empty, @private=0xa010100, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, @empty, @dev={0xac, 0x14, 0x14, 0xb}, @private=0xa010101]}]}}}}}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000003a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x18000000000002a0, 0xe40, 0x2f, &(0x7f0000000500)="b958945d8ae49c4f19be14f06558", 0x0, 0x1cb0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014, 0x3f00}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4044081}, 0x0) mount(&(0x7f0000000140)=@sg0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='nsfs\x00', 0x40, &(0x7f0000000040)='syzkadler\x01/\n\x00') r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r9}, 0xc) 657.640869ms ago: executing program 1 (id=47): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) set_robust_list(&(0x7f0000000200)={0x0, 0x2}, 0xc) 620.129492ms ago: executing program 2 (id=48): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008041}, 0x24008084) 481.579875ms ago: executing program 3 (id=49): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f0000000080)={{0x4, 0xdddd0000, 0x0, 0x9e, 0x3, 0x1, 0xf, 0x0, 0x0, 0xf9, 0x0, 0x7f}, {0xd000, 0x8080000, 0x3, 0x5, 0xc2, 0xc0, 0x6, 0x66, 0xc5, 0x1, 0x30, 0x40}, {0xdddd0000, 0xdddd1000, 0xf, 0x7, 0xb, 0x34, 0xe, 0x6, 0x3, 0xc, 0x2, 0xff}, {0x8000000, 0x80a0000, 0xc, 0x58, 0x7f, 0x76, 0x2, 0xc, 0x7f, 0xfc, 0x9, 0xe}, {0x1000, 0x1000, 0x9, 0x8f, 0x80, 0x2, 0x9, 0x3, 0x1, 0x4, 0x4, 0x6}, {0xdddd1000, 0x6000, 0x3, 0x2, 0x3, 0x7, 0x1, 0xb7, 0x2, 0x1, 0xf8, 0xd}, {0xf7f71000, 0x100000, 0xd, 0x2, 0x8, 0x3, 0x6, 0x0, 0x9, 0xb, 0x6, 0x7}, {0xffff1000, 0x5000, 0x9, 0x6, 0xff, 0x0, 0x9, 0x80, 0x9, 0x8f, 0xdb, 0x8}, {0x4000, 0x59}, {0x4, 0x6}, 0x10000, 0x0, 0x1000, 0x151, 0x6, 0x1000, 0xdddd1000, [0x8, 0x2, 0x3, 0x3]}) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x6e0}]}) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x54, r4, 0x1, 0x0, 0x200004, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wlan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6_vti0\x00'}]}, 0x54}, 0x1, 0x40030000000000, 0x0, 0x800}, 0x80) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendfile(0xffffffffffffffff, r8, 0x0, 0x40008) syz_emit_ethernet(0x201, &(0x7f00000008c0)={@random="f74b4d6f9ca8", @local, @val={@void}, {@mpls_mc={0x8848, {[{0x2, 0x0, 0x1}, {0xb, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x66}, {0x4, 0x0, 0x1}, {0x100}], @ipv4=@gre={{0x9, 0x4, 0x2, 0x7, 0x1d7, 0x65, 0x0, 0x4, 0x2f, 0x0, @multicast1, @multicast2, {[@lsrr={0x83, 0xf, 0xd7, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @local]}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0xb, 0xfe01], "4b7b6e23138e27175d620f79ccb1bce6496113a1647dbc29753c2433edc376dfb64a35782c619574eb3adf2b492c10ef6ab91444a28922868c4ad9df6df2f7c28a98e06787f2d843e4d87d8167d2c26f666899239a9ec0acfc6dbff6d06fc142c51292bcdd774b4b33e17f32f3ad3e524a29c85ef83ea1b115962536f238d4c1dbdf0fcb16e68531bc09f5a268c1a879a192a01f425e8d21298f8ea67479c9e4829e4d96b78b6f7f7a4c1cb110ab428f8895997f723aea2a67d4f1f9ce794c272a8024f57698472479aaa02a6e"}, {0x0, 0x0, 0x1}, {0x8, 0x88be, 0x1, {{0x8, 0x1, 0x7, 0x0, 0x1, 0x3, 0x4, 0x25}, 0x1, {0x4}}}, {0x8, 0x22eb, 0x1, {{0x5, 0x2, 0x1, 0x0, 0x0, 0x0, 0x3, 0x12}, 0x2, {0x7, 0x3, 0x0, 0x7, 0x1, 0x0, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x1, "7fafdd237fa3b77426663bbe312acc0d359d00b235edbd327750af5201ba5087d21f5fd4177d823c07892dc2c466f890fa55d12e2c3e8369643b145930749f4571bc888075deb226b62f8feaeff610d7198ae1c488c357061ec4ab2b3e2d863d5431c6c0cb61db0a30be7a14c51a30c83464b27a3758de28a26c001734d66c57eae47087c4d8755fcef7b113e0c1ccaa105b2b92a726ad05930798786038"}}}}}}}, 0x0) 427.98261ms ago: executing program 2 (id=50): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x81) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@uuid_off}]}) 0s ago: executing program 2 (id=51): mkdir(&(0x7f0000000100)='./file1\x00', 0x0) syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d", @ANYRES64], 0xf8) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.135' (ED25519) to the list of known hosts. [ 57.321454][ T4172] cgroup: Unknown subsys name 'net' [ 57.445667][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 58.926441][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 60.404939][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 60.454864][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 60.580942][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.588127][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.596672][ T4183] device bridge_slave_0 entered promiscuous mode [ 60.607640][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.615644][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.623920][ T4183] device bridge_slave_1 entered promiscuous mode [ 60.693300][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 60.703926][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.711521][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.719759][ T4182] device bridge_slave_0 entered promiscuous mode [ 60.732050][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.752336][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.759702][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.767439][ T4182] device bridge_slave_1 entered promiscuous mode [ 60.774879][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 60.785164][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.804614][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 60.860383][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.877172][ T4183] team0: Port device team_slave_0 added [ 60.891032][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.915557][ T4183] team0: Port device team_slave_1 added [ 60.947927][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.955305][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.963442][ T4184] device bridge_slave_0 entered promiscuous mode [ 60.991792][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.998870][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.025096][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.037252][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.044590][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.052895][ T4184] device bridge_slave_1 entered promiscuous mode [ 61.062514][ T4182] team0: Port device team_slave_0 added [ 61.081908][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.088968][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.115059][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.127677][ T4182] team0: Port device team_slave_1 added [ 61.165708][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.177165][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.195660][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.204151][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.212498][ T4185] device bridge_slave_0 entered promiscuous mode [ 61.246130][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.253495][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.261978][ T4185] device bridge_slave_1 entered promiscuous mode [ 61.268973][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.276129][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.284161][ T4191] device bridge_slave_0 entered promiscuous mode [ 61.291786][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.298764][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.324916][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.354272][ T4183] device hsr_slave_0 entered promiscuous mode [ 61.361324][ T4183] device hsr_slave_1 entered promiscuous mode [ 61.375858][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.382983][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.391582][ T4191] device bridge_slave_1 entered promiscuous mode [ 61.399022][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.406098][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.432117][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.445405][ T4184] team0: Port device team_slave_0 added [ 61.474967][ T4184] team0: Port device team_slave_1 added [ 61.491648][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.530160][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.539919][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.546880][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.573115][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.586297][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.616027][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.623234][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.649174][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.662101][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.706678][ T4182] device hsr_slave_0 entered promiscuous mode [ 61.713533][ T4182] device hsr_slave_1 entered promiscuous mode [ 61.720616][ T4182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.728367][ T4182] Cannot create hsr debugfs directory [ 61.741855][ T4185] team0: Port device team_slave_0 added [ 61.775361][ T4185] team0: Port device team_slave_1 added [ 61.784248][ T4184] device hsr_slave_0 entered promiscuous mode [ 61.791189][ T4184] device hsr_slave_1 entered promiscuous mode [ 61.797666][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.805468][ T4184] Cannot create hsr debugfs directory [ 61.813737][ T4191] team0: Port device team_slave_0 added [ 61.821715][ T4191] team0: Port device team_slave_1 added [ 61.885116][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.892596][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.918721][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.930448][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.937415][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.964442][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.990553][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.997632][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.023920][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.036236][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.043412][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.069732][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.151130][ T4193] Bluetooth: hci2: command 0x0409 tx timeout [ 62.162023][ T13] Bluetooth: hci1: command 0x0409 tx timeout [ 62.170747][ T4191] device hsr_slave_0 entered promiscuous mode [ 62.177622][ T4191] device hsr_slave_1 entered promiscuous mode [ 62.184554][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.192227][ T4191] Cannot create hsr debugfs directory [ 62.215393][ T4185] device hsr_slave_0 entered promiscuous mode [ 62.222407][ T4185] device hsr_slave_1 entered promiscuous mode [ 62.229010][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.229720][ T4193] Bluetooth: hci3: command 0x0409 tx timeout [ 62.237708][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 62.248988][ T4185] Cannot create hsr debugfs directory [ 62.254749][ T4193] Bluetooth: hci0: command 0x0409 tx timeout [ 62.389750][ T4183] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 62.425376][ T4183] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 62.452082][ T4183] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 62.461693][ T4183] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 62.507643][ T4182] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.518254][ T4182] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.532161][ T4182] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.558308][ T4182] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.593961][ T4184] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 62.606271][ T4184] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 62.618691][ T4184] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 62.636619][ T4184] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 62.712757][ T4191] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 62.726090][ T4191] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 62.735536][ T4191] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 62.749033][ T4191] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 62.775614][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.804173][ T4185] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.814788][ T4185] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.825414][ T4185] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.846311][ T4185] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.866136][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.875294][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.886209][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.920981][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.931588][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.954912][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.963772][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.972976][ T897] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.980235][ T897] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.988777][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.999586][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.007256][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.024443][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.044345][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.053312][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.061655][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.070475][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.078815][ T1277] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.085900][ T1277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.094062][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.122253][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.131097][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.142245][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.150804][ T1235] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.157899][ T1235] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.166116][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.180238][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.188658][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.197416][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.205819][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.235901][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.244730][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.255346][ T1235] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.262587][ T1235] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.272583][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.282053][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.290927][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.299381][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.308018][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.316601][ T1235] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.323704][ T1235] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.332464][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.341127][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.349784][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.358466][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.367411][ T1235] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.374504][ T1235] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.382791][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.391407][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.401207][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.409913][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.418486][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.429954][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.442398][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.452276][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.461502][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.473108][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.505735][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.515554][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.539250][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.553915][ T4182] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 63.565380][ T4182] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.582044][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.605331][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.617830][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.628091][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.637147][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.647268][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.656058][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.664755][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.674058][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.683023][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.691738][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.700412][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.708907][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.717639][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.725448][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.734064][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.742552][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.761360][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.768955][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.794432][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.803447][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.836181][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.851872][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.873264][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.887282][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.894510][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.933435][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.943597][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.961085][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.978516][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.985667][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.994468][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.010292][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.018910][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.026031][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.036484][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.048243][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.060142][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.068732][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.075850][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.090494][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.100681][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.109887][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.143339][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.163692][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.173869][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.182735][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.192008][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.201209][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.210518][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.219134][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.228487][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.237781][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.240924][ T4246] Bluetooth: hci1: command 0x041b tx timeout [ 64.248875][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.262967][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.269697][ T4246] Bluetooth: hci2: command 0x041b tx timeout [ 64.275841][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.285302][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.294610][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.303273][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.311269][ T4260] Bluetooth: hci0: command 0x041b tx timeout [ 64.317399][ T4260] Bluetooth: hci4: command 0x041b tx timeout [ 64.323321][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.324277][ T4260] Bluetooth: hci3: command 0x041b tx timeout [ 64.351961][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.361103][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.382189][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.397370][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.405108][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.414236][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.422332][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.430988][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.439286][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.468566][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.477961][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.487827][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.496245][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.506616][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.526886][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.553374][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.570474][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.597810][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.611210][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.643653][ T4182] device veth0_vlan entered promiscuous mode [ 64.656564][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.670336][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.691210][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.706460][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.724222][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.751162][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.759916][ T4183] device veth0_vlan entered promiscuous mode [ 64.782349][ T4182] device veth1_vlan entered promiscuous mode [ 64.796749][ T4183] device veth1_vlan entered promiscuous mode [ 64.810848][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.818957][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.827242][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.835873][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.845079][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.854477][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.862319][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.885845][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.906648][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.922682][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.935551][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.944855][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.953802][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.974920][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.994178][ T4183] device veth0_macvtap entered promiscuous mode [ 65.005769][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.014603][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.022711][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.033141][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.041866][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.050855][ T4184] device veth0_vlan entered promiscuous mode [ 65.063743][ T4182] device veth0_macvtap entered promiscuous mode [ 65.078122][ T4182] device veth1_macvtap entered promiscuous mode [ 65.087067][ T4183] device veth1_macvtap entered promiscuous mode [ 65.101048][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.115388][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.125425][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.139069][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.149693][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.190926][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.198410][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.207712][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.217390][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.226073][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.240824][ T4184] device veth1_vlan entered promiscuous mode [ 65.265077][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.284027][ T4183] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.293576][ T4183] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.303386][ T4183] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.312611][ T4183] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.329747][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.337835][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.350359][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.359253][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.376328][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.388435][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.400081][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.426133][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.436235][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.446020][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.454556][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.464215][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.472394][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.486865][ T4184] device veth0_macvtap entered promiscuous mode [ 65.497569][ T4185] device veth0_vlan entered promiscuous mode [ 65.505314][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.517815][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.529524][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.544496][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.554405][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.564528][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.573325][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.582143][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.592909][ T4184] device veth1_macvtap entered promiscuous mode [ 65.613462][ T4182] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.622676][ T4182] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.633960][ T4182] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.643901][ T4182] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.655296][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.664448][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.698082][ T4185] device veth1_vlan entered promiscuous mode [ 65.726493][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.737946][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.748124][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.759551][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.771150][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.795664][ T4191] device veth0_vlan entered promiscuous mode [ 65.816727][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.826838][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.836781][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.845921][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.854553][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.862438][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.887848][ T4191] device veth1_vlan entered promiscuous mode [ 65.914233][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.926677][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.937884][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.948550][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.960867][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.985603][ T4185] device veth0_macvtap entered promiscuous mode [ 65.997386][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.005990][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.014571][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.022560][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.027362][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.041533][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.050838][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.059250][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.068077][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.076129][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.087464][ T4184] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.096510][ T4184] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.105706][ T4184] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.114953][ T4184] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.147009][ T4185] device veth1_macvtap entered promiscuous mode [ 66.184221][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.194150][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.213631][ T4191] device veth0_macvtap entered promiscuous mode [ 66.227321][ T4191] device veth1_macvtap entered promiscuous mode [ 66.237399][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.252083][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.261452][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.270499][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.278977][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.287607][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.327252][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.327689][ T23] Bluetooth: hci2: command 0x040f tx timeout [ 66.342157][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.354102][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.356797][ T23] Bluetooth: hci1: command 0x040f tx timeout [ 66.367230][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.378823][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.390621][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.394855][ T23] Bluetooth: hci3: command 0x040f tx timeout [ 66.400953][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.417231][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.419799][ T23] Bluetooth: hci4: command 0x040f tx timeout [ 66.433680][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.443443][ T23] Bluetooth: hci0: command 0x040f tx timeout [ 66.463939][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.475619][ T4270] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.484038][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.486955][ T4270] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.504683][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.517644][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.528533][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.538791][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.551555][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.564895][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.576182][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.587780][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.606666][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.618462][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.628638][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.641081][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.651219][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.662030][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.676945][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.687670][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.705314][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.714848][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.727408][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.737102][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.752511][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.765817][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.783846][ T4185] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.793389][ T4185] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.803921][ T4185] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.813230][ T4185] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.838697][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.868493][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.882425][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.896494][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.909235][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.925458][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.935701][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.946236][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.958888][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.995117][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.010648][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.022206][ T4191] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.036013][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.047629][ T4191] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.056947][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.069605][ T4191] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.115516][ T4191] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.151002][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.308838][ T1277] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.339058][ T1277] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.379590][ T4270] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.387564][ T4270] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.399977][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.458136][ T1235] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.471374][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.496302][ T1235] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.670047][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 67.785030][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 67.794368][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 67.887500][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 68.092337][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 68.403943][ T4193] Bluetooth: hci1: command 0x0419 tx timeout [ 68.412410][ T4193] Bluetooth: hci2: command 0x0419 tx timeout [ 68.469865][ T4193] Bluetooth: hci0: command 0x0419 tx timeout [ 68.477095][ T4193] Bluetooth: hci4: command 0x0419 tx timeout [ 68.498921][ T4193] Bluetooth: hci3: command 0x0419 tx timeout [ 68.546583][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.587223][ T4302] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.627503][ T4302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.634423][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.701892][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.714113][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.735288][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.866581][ T4319] input: syz1 as /devices/virtual/input/input5 [ 69.269797][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!! [ 69.278946][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!! [ 69.321456][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 69.423213][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 69.433170][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #48!!! [ 71.113208][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.119890][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.657644][ T4350] loop3: detected capacity change from 0 to 32768 [ 71.725863][ T4350] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.16 (4350) [ 71.920351][ T4350] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 71.976811][ T4350] BTRFS info (device loop3): using free space tree [ 72.046784][ T4350] BTRFS info (device loop3): has skinny extents [ 72.469969][ T4350] BTRFS info (device loop3): enabling ssd optimizations [ 72.513163][ T4384] binder: 4380:4384 unknown command 1074553619 [ 72.535406][ T4384] binder: 4380:4384 ioctl c0306201 200000000040 returned -22 [ 72.689607][ T4388] binder: 4380:4388 unknown command 1074553620 [ 72.695807][ T4388] binder: 4380:4388 ioctl c0306201 200000000640 returned -22 [ 73.204695][ T4392] BTRFS info (device loop3): balance: start -d -m [ 73.354785][ T4392] BTRFS info (device loop3): relocating block group 6881280 flags data|metadata [ 74.020475][ T4392] BTRFS info (device loop3): 1 enospc errors during balance [ 74.049413][ T4392] BTRFS info (device loop3): balance: canceled [ 75.054081][ T4426] ======================================================= [ 75.054081][ T4426] WARNING: The mand mount option has been deprecated and [ 75.054081][ T4426] and is ignored by this kernel. Remove the mand [ 75.054081][ T4426] option from the mount to silence this warning. [ 75.054081][ T4426] ======================================================= [ 75.637438][ T4435] input: syz0 as /devices/virtual/input/input6 [ 76.534242][ T4199] Bluetooth: Wrong link type (-57) [ 76.825782][ T4443] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 76.919740][ T4444] Zero length message leads to an empty skb [ 76.943570][ T4444] netlink: 105 bytes leftover after parsing attributes in process `syz.2.35'. [ 76.952798][ T4444] netlink: 105 bytes leftover after parsing attributes in process `syz.2.35'. [ 76.967812][ T4444] netlink: 4 bytes leftover after parsing attributes in process `syz.2.35'. [ 77.215605][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88801e9c8400: rx timeout, send abort [ 77.716179][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88801b1bb400: rx timeout, send abort [ 77.726530][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88801e9c8400: abort rx timeout. Force session deactivation [ 77.803278][ T4450] 9pnet_virtio: no channels available for device syz [ 78.224513][ C1] vxcan0 (unregistering): j1939_tp_rxtimer: 0xffff88801b1bb400: abort rx timeout. Force session deactivation [ 79.518432][ T4455] sched: RT throttling activated [ 81.447443][ T1326] cfg80211: failed to load regulatory.db [ 81.639416][ T4297] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 82.184823][ T4474] input: syz1 as /devices/virtual/input/input7 [ 82.417764][ T4477] netlink: 60 bytes leftover after parsing attributes in process `syz.2.45'. [ 82.935612][ T4492] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 82.975150][ T4491] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 82.995196][ T26] audit: type=1326 audit(1767063927.438:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4481 comm="syz.1.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7facbfc07829 code=0x7ffc0000 [ 83.073256][ T4491] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=on. [ 83.084693][ T26] audit: type=1326 audit(1767063927.468:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4481 comm="syz.1.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7facbfc07829 code=0x7ffc0000 [ 83.232764][ T26] audit: type=1326 audit(1767063927.468:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4481 comm="syz.1.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7facbfc07829 code=0x7ffc0000 [ 83.325614][ T26] audit: type=1326 audit(1767063927.478:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4481 comm="syz.1.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7facbfc07829 code=0x7ffc0000 [ 83.393739][ T26] audit: type=1326 audit(1767063927.478:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4481 comm="syz.1.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7facbfc07829 code=0x7ffc0000 [ 83.468139][ T4199] Bluetooth: hci1: Unknown advertising packet type: 0xffff [ 83.468351][ T4199] ================================================================== [ 83.483763][ T4199] BUG: KASAN: slab-out-of-bounds in hci_le_meta_evt+0x12db/0x3b80 [ 83.491569][ T4199] Read of size 1 at addr ffff888023c5cc08 by task kworker/u5:6/4199 [ 83.499536][ T4199] [ 83.501856][ T4199] CPU: 1 PID: 4199 Comm: kworker/u5:6 Not tainted syzkaller #0 [ 83.509411][ T4199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 83.519482][ T4199] Workqueue: hci1 hci_rx_work [ 83.524173][ T4199] Call Trace: [ 83.527445][ T4199] [ 83.530371][ T4199] dump_stack_lvl+0x168/0x230 [ 83.535148][ T4199] ? show_regs_print_info+0x20/0x20 [ 83.540342][ T4199] ? load_image+0x3b0/0x3b0 [ 83.544837][ T4199] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 83.550211][ T4199] print_address_description+0x60/0x2d0 [ 83.555843][ T4199] ? hci_le_meta_evt+0x12db/0x3b80 [ 83.560973][ T4199] kasan_report+0xdf/0x130 [ 83.565386][ T4199] ? hci_le_meta_evt+0x12db/0x3b80 [ 83.570494][ T4199] hci_le_meta_evt+0x12db/0x3b80 [ 83.575427][ T4199] ? hci_event_packet+0x2b0/0x12f0 [ 83.580547][ T4199] ? hci_remote_host_features_evt+0x280/0x280 [ 83.586610][ T4199] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 83.592244][ T4199] ? mark_lock+0x94/0x320 [ 83.596578][ T4199] ? mutex_unlock+0x10/0x10 [ 83.601085][ T4199] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 83.607066][ T4199] ? lock_chain_count+0x20/0x20 [ 83.611914][ T4199] ? __rwlock_init+0x140/0x140 [ 83.616678][ T4199] hci_event_packet+0xe05/0x12f0 [ 83.621613][ T4199] ? lockdep_hardirqs_on+0x94/0x140 [ 83.626812][ T4199] ? rcu_lock_release+0x20/0x20 [ 83.631662][ T4199] ? hci_send_to_monitor+0x9c/0x4a0 [ 83.636856][ T4199] hci_rx_work+0x255/0xa10 [ 83.641277][ T4199] process_one_work+0x863/0x1000 [ 83.646218][ T4199] ? worker_detach_from_pool+0x240/0x240 [ 83.651847][ T4199] ? lockdep_hardirqs_off+0x70/0x100 [ 83.657143][ T4199] ? _raw_spin_lock_irq+0xab/0xe0 [ 83.662182][ T4199] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 83.667552][ T4199] ? wq_worker_running+0x97/0x170 [ 83.672586][ T4199] worker_thread+0xaa8/0x12a0 [ 83.677280][ T4199] kthread+0x436/0x520 [ 83.681345][ T4199] ? rcu_lock_release+0x20/0x20 [ 83.686187][ T4199] ? kthread_blkcg+0xd0/0xd0 [ 83.690768][ T4199] ret_from_fork+0x1f/0x30 [ 83.695192][ T4199] [ 83.698202][ T4199] [ 83.700531][ T4199] Allocated by task 4496: [ 83.704842][ T4199] __kasan_kmalloc+0xb5/0xf0 [ 83.709434][ T4199] __alloc_skb+0x22c/0x750 [ 83.713871][ T4199] vhci_write+0xbc/0x450 [ 83.718106][ T4199] vfs_write+0x712/0xd00 [ 83.722338][ T4199] ksys_write+0x14d/0x250 [ 83.726654][ T4199] do_syscall_64+0x4c/0xa0 [ 83.731066][ T4199] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 83.736955][ T4199] [ 83.739270][ T4199] The buggy address belongs to the object at ffff888023c5c800 [ 83.739270][ T4199] which belongs to the cache kmalloc-1k of size 1024 [ 83.753308][ T4199] The buggy address is located 8 bytes to the right of [ 83.753308][ T4199] 1024-byte region [ffff888023c5c800, ffff888023c5cc00) [ 83.767005][ T4199] The buggy address belongs to the page: [ 83.772635][ T4199] page:ffffea00008f1600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x23c58 [ 83.782776][ T4199] head:ffffea00008f1600 order:3 compound_mapcount:0 compound_pincount:0 [ 83.791095][ T4199] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 83.799086][ T4199] raw: 00fff00000010200 ffffea0000961200 0000000400000004 ffff888016841dc0 [ 83.807680][ T4199] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 83.816253][ T4199] page dumped because: kasan: bad access detected [ 83.822661][ T4199] page_owner tracks the page as allocated [ 83.828363][ T4199] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4191, ts 65793464892, free_ts 65722786086 [ 83.846930][ T4199] get_page_from_freelist+0x1b77/0x1c60 [ 83.852487][ T4199] __alloc_pages+0x1e1/0x470 [ 83.857079][ T4199] new_slab+0xc0/0x4b0 [ 83.861146][ T4199] ___slab_alloc+0x81e/0xdf0 [ 83.865727][ T4199] __kmalloc_node_track_caller+0x1fc/0x3a0 [ 83.871533][ T4199] __alloc_skb+0x22c/0x750 [ 83.875998][ T4199] inet6_rt_notify+0xdd/0x290 [ 83.880668][ T4199] fib6_add+0x1d3b/0x3d30 [ 83.884994][ T4199] ip6_route_add+0x86/0x130 [ 83.889498][ T4199] addrconf_permanent_addr+0x652/0x980 [ 83.894991][ T4199] addrconf_notify+0x827/0xf00 [ 83.899762][ T4199] raw_notifier_call_chain+0xcb/0x160 [ 83.905136][ T4199] __dev_notify_flags+0x178/0x2d0 [ 83.910191][ T4199] dev_change_flags+0xe3/0x1a0 [ 83.914956][ T4199] do_setlink+0xc01/0x3980 [ 83.919371][ T4199] rtnl_newlink+0x1419/0x17d0 [ 83.924059][ T4199] page last free stack trace: [ 83.928717][ T4199] free_unref_page_prepare+0x637/0x6c0 [ 83.934175][ T4199] free_unref_page+0x94/0x280 [ 83.938848][ T4199] __unfreeze_partials+0x1a5/0x200 [ 83.943960][ T4199] put_cpu_partial+0x12d/0x190 [ 83.948718][ T4199] qlist_free_all+0x35/0x90 [ 83.953214][ T4199] kasan_quarantine_reduce+0x150/0x160 [ 83.958670][ T4199] __kasan_slab_alloc+0x2f/0xd0 [ 83.963512][ T4199] slab_post_alloc_hook+0x4c/0x380 [ 83.968630][ T4199] kmem_cache_alloc_trace+0x103/0x2a0 [ 83.974002][ T4199] netdevice_event+0x324/0x900 [ 83.978763][ T4199] raw_notifier_call_chain+0xcb/0x160 [ 83.984219][ T4199] __dev_notify_flags+0x178/0x2d0 [ 83.989255][ T4199] dev_change_flags+0xe3/0x1a0 [ 83.994016][ T4199] do_setlink+0xc01/0x3980 [ 83.998425][ T4199] rtnl_newlink+0x1419/0x17d0 [ 84.003114][ T4199] rtnetlink_rcv_msg+0x7ff/0xe90 [ 84.008046][ T4199] [ 84.010361][ T4199] Memory state around the buggy address: [ 84.015981][ T4199] ffff888023c5cb00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 84.024045][ T4199] ffff888023c5cb80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 84.032112][ T4199] >ffff888023c5cc00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 84.040160][ T4199] ^ [ 84.044476][ T4199] ffff888023c5cc80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 84.052532][ T4199] ffff888023c5cd00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 84.060582][ T4199] ================================================================== [ 84.068628][ T4199] Disabling lock debugging due to kernel taint [ 84.088352][ T4199] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 84.095573][ T4199] CPU: 1 PID: 4199 Comm: kworker/u5:6 Tainted: G B syzkaller #0 [ 84.104528][ T4199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 84.114591][ T4199] Workqueue: hci1 hci_rx_work [ 84.119274][ T4199] Call Trace: [ 84.122564][ T4199] [ 84.125493][ T4199] dump_stack_lvl+0x168/0x230 [ 84.130165][ T4199] ? show_regs_print_info+0x20/0x20 [ 84.135363][ T4199] ? load_image+0x3b0/0x3b0 [ 84.139876][ T4199] panic+0x2c9/0x7f0 [ 84.143773][ T4199] ? bpf_jit_dump+0xd0/0xd0 [ 84.148268][ T4199] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 84.154156][ T4199] ? _raw_spin_unlock+0x40/0x40 [ 84.159003][ T4199] ? hci_le_meta_evt+0x12db/0x3b80 [ 84.164109][ T4199] check_panic_on_warn+0x80/0xa0 [ 84.169065][ T4199] ? hci_le_meta_evt+0x12db/0x3b80 [ 84.174201][ T4199] end_report+0x6d/0xf0 [ 84.178361][ T4199] kasan_report+0x102/0x130 [ 84.182857][ T4199] ? hci_le_meta_evt+0x12db/0x3b80 [ 84.187961][ T4199] hci_le_meta_evt+0x12db/0x3b80 [ 84.192893][ T4199] ? hci_event_packet+0x2b0/0x12f0 [ 84.198009][ T4199] ? hci_remote_host_features_evt+0x280/0x280 [ 84.204083][ T4199] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 84.209714][ T4199] ? mark_lock+0x94/0x320 [ 84.214041][ T4199] ? mutex_unlock+0x10/0x10 [ 84.218537][ T4199] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 84.224512][ T4199] ? lock_chain_count+0x20/0x20 [ 84.229373][ T4199] ? __rwlock_init+0x140/0x140 [ 84.234171][ T4199] hci_event_packet+0xe05/0x12f0 [ 84.239105][ T4199] ? lockdep_hardirqs_on+0x94/0x140 [ 84.244314][ T4199] ? rcu_lock_release+0x20/0x20 [ 84.249165][ T4199] ? hci_send_to_monitor+0x9c/0x4a0 [ 84.254360][ T4199] hci_rx_work+0x255/0xa10 [ 84.258775][ T4199] process_one_work+0x863/0x1000 [ 84.263710][ T4199] ? worker_detach_from_pool+0x240/0x240 [ 84.269378][ T4199] ? lockdep_hardirqs_off+0x70/0x100 [ 84.274802][ T4199] ? _raw_spin_lock_irq+0xab/0xe0 [ 84.279844][ T4199] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 84.285235][ T4199] ? wq_worker_running+0x97/0x170 [ 84.290465][ T4199] worker_thread+0xaa8/0x12a0 [ 84.295142][ T4199] kthread+0x436/0x520 [ 84.299197][ T4199] ? rcu_lock_release+0x20/0x20 [ 84.304036][ T4199] ? kthread_blkcg+0xd0/0xd0 [ 84.308614][ T4199] ret_from_fork+0x1f/0x30 [ 84.313029][ T4199] [ 84.316153][ T4199] Kernel Offset: disabled [ 84.320481][ T4199] Rebooting in 86400 seconds..