last executing test programs: 14.554941015s ago: executing program 4 (id=5): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) syz_read_part_table(0x5bd, &(0x7f0000000000)="$eJzs2z9o02kYB/AnahAUzsXJ4bAOTi6KoxmsJFFRCNEu4qCgiJgpghAhINihzdDSDKVjl1LI0j9T0wwdjpYWOpfSoUehQ6ejXQpdmuOu7+3t9Q8Inw/8ePK+7zd58gy/8Q1+aZfir263m4mI7tWTf7uvlS88u116XH4dkYm3EdHzx28z/5xkUuK/X72T1ptpPTF+rTO49zTb2ni1f/fdYuNSOv+RnuuT7b5TD8e5m8ot3fjZXy0O1XKf14v17YG11ZfTu/ly+0WjOfM8++RDyi2neiXVr1GL7/El3kclKvExqmfUf6y1df/wVrE19+nRQaEzvPAg5UqnnPO4/b/1jLxp1nvvzd4cfVibXynvXD7KVf7H2wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMWbyi3d+NlfLQ7Vcp/Xi/XtgbXVl9O7+XL7RaM58zz75EPKLad6JdWvUYvv8SXeRyUq8TGqZ9R/rLV1//BWsTX36dFBoTO88CDlSqec87j9v/WMvGnWe+/N3hx9WJtfKe9cPspVrp7THwAAAAAAAAAAAAAAAAAAAICIyBee3S49Lr+OyMTbiGj/3vvvVf9uuu+eSbk76cNm2p8Yv9YZ3HuabW282r/7brHxZ9r/kZ7rk+2+i5+Gk/o7AAD//5Yblcc=") 14.311088599s ago: executing program 3 (id=8): r0 = socket$kcm(0xa, 0x1, 0x106) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r2}, 0x18) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r1) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) sendmsg$kcm(r0, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x5}, 0x80, 0x0}, 0x24004059) close(r0) 14.134037332s ago: executing program 3 (id=10): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r3, &(0x7f0000001a40)=[{&(0x7f00000002c0)=""/254, 0xfe}], 0x1, 0x5, 0x9) 14.054836363s ago: executing program 4 (id=11): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_switch\x00', r4}, 0xe) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r5) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'lo\x00', {0x2, 0x4e21, @remote}}) 11.988498144s ago: executing program 4 (id=12): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000740)={&(0x7f00000002c0)=@id={0x1e, 0x3, 0x0, {0x4e24, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4040004}, 0x20008010) 11.934306286s ago: executing program 4 (id=13): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000d40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x607, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 11.822566667s ago: executing program 4 (id=14): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) 11.431961463s ago: executing program 3 (id=15): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={r0, 0x7, 0x104, 0xfffffffe}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 11.01603248s ago: executing program 3 (id=18): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) socket(0x8000000010, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f86dd", 0x12}], 0x1) 9.823909128s ago: executing program 3 (id=21): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7f, 0x8b}, 0x0) syslog(0x4, 0xfffffffffffffffc, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x71, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@resuid}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$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") 9.591860912s ago: executing program 2 (id=24): socket$netlink(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000140), 0x1, 0x4fa, &(0x7f0000000ac0)="$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") r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_val, @exit]}, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') socket$xdp(0x2c, 0x3, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000040), 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x88, 0x1403, 0x200, 0x70bd29, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vxcan1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'pim6reg0\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x2000c800}, 0x811) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) 5.031227062s ago: executing program 3 (id=27): symlink(&(0x7f0000001780)='./file0/../file0\x00', 0x0) memfd_create(0x0, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) io_uring_setup(0x21a4, &(0x7f0000000000)={0x0, 0x75f, 0x10, 0x1, 0x11cb}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x3) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x810) 4.867929164s ago: executing program 1 (id=28): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r2}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}]}}) 4.859569945s ago: executing program 2 (id=30): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, 0x0, 0x22}, 0x28) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}}, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 3.833292571s ago: executing program 2 (id=31): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r0, &(0x7f0000000340)=ANY=[], 0xff2e) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) 3.731220972s ago: executing program 0 (id=32): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) 3.607733984s ago: executing program 1 (id=33): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000480)={'broute\x00', 0x0, 0x0, 0x0, [0x6de0, 0x4, 0xfffffffffffff0af, 0x4, 0x7, 0x1], 0x0, 0x0}, 0x78) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_GETX(r4, 0x80089203, &(0x7f0000000a40)={0x0, 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.55886824s ago: executing program 1 (id=34): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = eventfd2(0x0, 0x0) read$eventfd(r2, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) sendmsg$NFC_CMD_START_POLL(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)={0x34, r6, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x86}, @NFC_ATTR_IM_PROTOCOLS={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$IEEE802154_LIST_PHY(r5, &(0x7f0000000280)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x14, 0x0, 0x200, 0x70bd27, 0x25dbdc01}, 0x14}, 0x1, 0x0, 0x0, 0x8004190}, 0x20004000) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021200011800e000100636f6e6e6c696d69740000000c00028008000140fffffff73c0000000c0a01010000000000000000070400000900020073797a31000000000900010073797a3000000000100003800c0000800800034000000002"], 0xe0}}, 0x0) close(0xffffffffffffffff) unshare(0x64000600) 2.504706811s ago: executing program 0 (id=35): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x24, r1, 0x1, 0x70bd28, 0x1, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x24}}, 0x80) 2.081264988s ago: executing program 1 (id=36): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000000000000000000000000002850000000f000000850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000580)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "b80423", 0x28, 0x0, 0x0, @empty, @local, {[@dstopts={0x0, 0x4, '\x00', [@calipso={0x7, 0x18, {0x1, 0x4, 0x3, 0x9, [0x3, 0x800]}}, @padn, @ra]}]}}}}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a5"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket$inet6(0xa, 0x2, 0x3a) r4 = dup(r3) bind$unix(r4, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) bind$isdn_base(r4, &(0x7f0000000780)={0x22, 0x10, 0xe0, 0x5e, 0x7}, 0x6) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_misc(r5, &(0x7f0000000240), 0xfffffecc) ioctl$TIOCSWINSZ(r5, 0x5414, &(0x7f0000000000)={0xff80, 0x5, 0x8, 0xc}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file1\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x2f0, &(0x7f0000000880)="$eJzs3L9PE2EYwPGnpS2lBK6D0WhieKOLLheou6ExkBibSJAafyTGA67a9GxJr8HUGMHJ1fhHOBBGNhLlH2Bxc3JxYzFxkMF4pvejFCgCtVAo309C7oXnea7v2yvkeRt6Gw/evyjkbD1nVCQcVxISEdkUSUpYAiH/GHbHMWm0KNf7f369fO/hozvpTGZsUqnx9NSNlFJqcOjTy9d9ftpqr6wnn2z8SH1fP79+cePP1PO8rfK2KpYqylDTpW8VY9oy1WzeLuhKTVimYZsqX7TNshcvefGcVZqbqyqjODuQmCubtq2MYlUVzKqqlFSlXFXGMyNfVLquq4GEYD/ZpclJI91i8UybJ4MjUi6njR4R6dsVyS51ZEIAAKCj/P6/3u2Hay19Q/8fOWj/H2na/y9fWav0318Z9Pv/1Vit/xdp6P+fbp1rW/8fF5Ej7/93d0TdxXH+Hf+v/h+nRK3/T/i/v663j5eH3QH9PwAAAAAAAAAAAAAAAAAAAAAAp8Gm42iO42jBMfjqFZG4+wkS73svOySy2OkZo50Od/3RbbZu3BEZFLHezWfns97RT1gTEUtMGRZNfruvB19tHBPlJqmapHy2Fvz6hflsjxtJ5yTv1o+IJsmd9Y4zfjszNqI82+ujkmisT4km55rXp3bWR2vHmFy72lCviyZfZqQklsz6n4wL6t+MKHXrbmbH4/e5eQAAAAAAdANd1dX3772NcX133Nsfe/H6/rrp+wPe/nq46f4+IpcinVo1AAAAAABni119VTAsyyyfxkHwv0hNc4IVHvSEwX2N98gJSWh7aLSdywke/AQ8q9EDPWPhlqY6FDvkRWk6CN422itHJlo5s6Pt8UI6xODCh4+/2nctbq7E91lpq4PYfiuNHs9fHwAAAADHaavpD34y2tkJAQAAAAAAAAAAAAAAAAAAAAAAAAAAAABwBh3HjeU6vUYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgpPgbAAD//1m0BfI=") r6 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) setsockopt(r6, 0x81a, 0xaa1, &(0x7f00000004c0)="60c1c99f2ce08836a799c28dd67f5b249ade07bca06c920b8cf3ff185f81b7a2812d74fde3acbb1719de27c13cfd108c1cf8b209ad7ec1fe2215b2344e7671c00cfc055e257799a4daf35a900567", 0x4e) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) setsockopt$MRT6_FLUSH(r9, 0x29, 0xd4, &(0x7f0000000680), 0x4) sendfile(r6, r6, 0x0, 0x800000009) 2.071412918s ago: executing program 2 (id=37): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) ioctl$TIOCSRS485(r0, 0x542f, &(0x7f0000000500)={0x10041, 0x2, 0xfffffffc}) ioctl$TIOCMIWAIT(r0, 0x545c, 0x200000000000000) ioctl$TIOCVHANGUP(r0, 0x5437, 0x300) 2.018450649s ago: executing program 0 (id=38): open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x803400, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00170000000000120000f1850000007d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, 0x0, r1, 0x0, 0x46) close(r1) 1.826843882s ago: executing program 0 (id=39): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="a1832abd7000ffffffff05000000080003"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4040004) 1.627335465s ago: executing program 0 (id=40): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r2}, 0x10) socket$inet6(0xa, 0x80002, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x2) readv(r3, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000002c40), 0x80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', 0xffffffffffffffff, 0x0, 0x8000000000004}, 0x18) readv(r4, &(0x7f0000000140), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000003000"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bridge0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200c08a5}, 0x8000) 1.222133441s ago: executing program 0 (id=41): syz_usb_connect(0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000240)={0x53, 0xfffffffffffffffc, 0x0, 0x3, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x90f, 0x12, 0x2, 0x0}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000040)={0xffff, 0x7, 0x200, 0x2, 0x4, 0x9, 0x7, 0x725f, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r2, 0xc81, 0x7f2b, 0xffff}, &(0x7f0000000140)=0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a", 0x23}], 0x1}, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 1.105557423s ago: executing program 2 (id=42): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, 0x0, 0x22}, 0x28) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}}, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 991.902205ms ago: executing program 1 (id=43): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000480)={'broute\x00', 0x0, 0x0, 0x0, [0x6de0, 0x4, 0xfffffffffffff0af, 0x4, 0x7, 0x1], 0x0, 0x0}, 0x78) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_GETX(r4, 0x80089203, &(0x7f0000000a40)={0x0, 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 985.761345ms ago: executing program 2 (id=44): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000000)=0x2, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x3, 0xe1d6, 0x0, 0xff}) 0s ago: executing program 1 (id=45): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000480)={'broute\x00', 0x0, 0x0, 0x0, [0x6de0, 0x4, 0xfffffffffffff0af, 0x4, 0x7, 0x1], 0x0, 0x0}, 0x78) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_GETX(r4, 0x80089203, &(0x7f0000000a40)={0x0, 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.164' (ED25519) to the list of known hosts. [ 55.000728][ T4174] cgroup: Unknown subsys name 'net' [ 55.161739][ T4174] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 56.591299][ T4174] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 58.441895][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 58.486414][ T4196] chnl_net:caif_netlink_parms(): no params data found [ 58.528598][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 58.539036][ T4195] chnl_net:caif_netlink_parms(): no params data found [ 58.588134][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 58.691735][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.699045][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.708048][ T4184] device bridge_slave_0 entered promiscuous mode [ 58.731394][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.738569][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.747071][ T4192] device bridge_slave_0 entered promiscuous mode [ 58.754942][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.762069][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.770885][ T4192] device bridge_slave_1 entered promiscuous mode [ 58.779013][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.786204][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.794472][ T4184] device bridge_slave_1 entered promiscuous mode [ 58.806108][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.813165][ T4196] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.821346][ T4196] device bridge_slave_0 entered promiscuous mode [ 58.853685][ T4196] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.861014][ T4196] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.869113][ T4196] device bridge_slave_1 entered promiscuous mode [ 58.918237][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.925361][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.933280][ T4195] device bridge_slave_0 entered promiscuous mode [ 58.943400][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.954391][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.963656][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.971514][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.979684][ T4185] device bridge_slave_0 entered promiscuous mode [ 58.995026][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.002320][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.010184][ T4195] device bridge_slave_1 entered promiscuous mode [ 59.019263][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.030297][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.049087][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.057124][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.064892][ T4185] device bridge_slave_1 entered promiscuous mode [ 59.073786][ T4196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.111222][ T4196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.136196][ T4184] team0: Port device team_slave_0 added [ 59.158695][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.170622][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.181691][ T4192] team0: Port device team_slave_0 added [ 59.189095][ T4184] team0: Port device team_slave_1 added [ 59.196751][ T4192] team0: Port device team_slave_1 added [ 59.204158][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.245830][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.258117][ T4196] team0: Port device team_slave_0 added [ 59.279625][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.286890][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.312996][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.343485][ T4196] team0: Port device team_slave_1 added [ 59.359136][ T4195] team0: Port device team_slave_0 added [ 59.365463][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.372801][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.398846][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.417216][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.424188][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.450408][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.477083][ T4195] team0: Port device team_slave_1 added [ 59.483248][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.490300][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.516331][ T4196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.532183][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.539176][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.565400][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.584366][ T4185] team0: Port device team_slave_0 added [ 59.598654][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.605845][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.631997][ T4196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.652019][ T4185] team0: Port device team_slave_1 added [ 59.688891][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.696359][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.722534][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.762293][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.769712][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.795810][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.811029][ T4184] device hsr_slave_0 entered promiscuous mode [ 59.818058][ T4184] device hsr_slave_1 entered promiscuous mode [ 59.834793][ T4196] device hsr_slave_0 entered promiscuous mode [ 59.841678][ T4196] device hsr_slave_1 entered promiscuous mode [ 59.848758][ T4196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.857430][ T4196] Cannot create hsr debugfs directory [ 59.863365][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.870475][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.896740][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.911418][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.918663][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.944656][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.959278][ T4192] device hsr_slave_0 entered promiscuous mode [ 59.966974][ T4192] device hsr_slave_1 entered promiscuous mode [ 59.973499][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.981119][ T4192] Cannot create hsr debugfs directory [ 60.046448][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 60.078623][ T4195] device hsr_slave_0 entered promiscuous mode [ 60.085743][ T4195] device hsr_slave_1 entered promiscuous mode [ 60.092212][ T4195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.100110][ T4195] Cannot create hsr debugfs directory [ 60.125699][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 60.135815][ T21] Bluetooth: hci3: command 0x0409 tx timeout [ 60.148558][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 60.157630][ T4185] device hsr_slave_0 entered promiscuous mode [ 60.164383][ T4185] device hsr_slave_1 entered promiscuous mode [ 60.171665][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.179340][ T4185] Cannot create hsr debugfs directory [ 60.215974][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 60.421563][ T4192] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 60.432938][ T4192] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 60.442993][ T4192] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 60.470090][ T4192] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 60.506303][ T4196] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 60.518796][ T4196] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 60.534285][ T4196] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 60.548242][ T4196] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 60.639555][ T4184] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 60.649551][ T4184] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 60.660693][ T4184] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 60.674028][ T4184] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 60.743367][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.770014][ T4195] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 60.783774][ T4195] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 60.797335][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.824635][ T4195] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 60.833803][ T4195] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 60.844267][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.854224][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.869277][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.877549][ T740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.886881][ T740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.911114][ T4196] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.921228][ T740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.931057][ T740] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.941669][ T740] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.949247][ T740] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.972870][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.987662][ T740] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.996674][ T740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.005240][ T740] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.015227][ T740] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.022357][ T740] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.043242][ T4185] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 61.056203][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.070092][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.079336][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.090046][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.097272][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.105385][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.116979][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.126927][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.134002][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.152460][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.159957][ T4185] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 61.172270][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.181724][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.189661][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.198876][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.232516][ T4185] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 61.242099][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.253065][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.261868][ T3089] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.268990][ T3089] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.278418][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.287900][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.297359][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.305825][ T3089] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.312881][ T3089] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.321005][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.329761][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.340790][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.349367][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.358427][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.367868][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.385380][ T4185] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 61.400544][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.409072][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.417500][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.425372][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.436385][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.445133][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.454206][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.464256][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.473198][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.494897][ T4184] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 61.505957][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.523489][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.532759][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.542926][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.551992][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.561330][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.570848][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.580635][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.589119][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.597700][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.606219][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.614467][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.623409][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.632611][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.675296][ T4196] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 61.687428][ T4196] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.704782][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.737742][ T740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.752753][ T740] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.763751][ T740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.778585][ T740] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.791382][ T740] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.814947][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.861582][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.883938][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.893097][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.941435][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.956381][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.963911][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.972577][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.984749][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.993652][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.000786][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.008929][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.018079][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.026667][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.033740][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.042594][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.052180][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.074367][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.096736][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.119186][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.134282][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.135877][ T4252] Bluetooth: hci0: command 0x041b tx timeout [ 62.156382][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.176326][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.185495][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.194001][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.202742][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.210499][ T4252] Bluetooth: hci2: command 0x041b tx timeout [ 62.221395][ T4195] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.231926][ T4252] Bluetooth: hci3: command 0x041b tx timeout [ 62.238363][ T4252] Bluetooth: hci1: command 0x041b tx timeout [ 62.242142][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.272202][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.281128][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.291587][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.296270][ T2285] Bluetooth: hci4: command 0x041b tx timeout [ 62.308097][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.350249][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.364992][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.373440][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.382509][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.391468][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.401693][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.409275][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.416834][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.424660][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.434781][ T4184] device veth0_vlan entered promiscuous mode [ 62.453763][ T740] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.469905][ T740] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.484818][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.509104][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.525057][ T740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.541656][ T740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.566745][ T4192] device veth0_vlan entered promiscuous mode [ 62.584023][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.593738][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.609696][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.618705][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.628344][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.637495][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.646072][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.653142][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.661008][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.669960][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.679173][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.686296][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.702557][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.711073][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.719030][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.734982][ T4184] device veth1_vlan entered promiscuous mode [ 62.748951][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.768437][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.782564][ T4192] device veth1_vlan entered promiscuous mode [ 62.795842][ T740] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.804044][ T740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.851871][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.861098][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.871872][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.916911][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.925106][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.935581][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.944344][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.954205][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.963675][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.973337][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.992027][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.001606][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.018933][ T4184] device veth0_macvtap entered promiscuous mode [ 63.032096][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.040960][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.049963][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.059458][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.078889][ T4192] device veth0_macvtap entered promiscuous mode [ 63.088105][ T740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.096969][ T740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.105471][ T740] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.116197][ T4184] device veth1_macvtap entered promiscuous mode [ 63.139084][ T4192] device veth1_macvtap entered promiscuous mode [ 63.152222][ T740] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.161601][ T740] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.176707][ T740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.185200][ T740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.200670][ T740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.210451][ T740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.220595][ T740] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.228975][ T740] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.239796][ T4195] device veth0_vlan entered promiscuous mode [ 63.271910][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.291135][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.301062][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.312631][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.322131][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.333069][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.344336][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.358312][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.366557][ T4195] device veth1_vlan entered promiscuous mode [ 63.377250][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.384609][ T4196] device veth0_vlan entered promiscuous mode [ 63.392239][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.400579][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.409958][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.418103][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.427807][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.436853][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.445373][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.462014][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.470200][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.481213][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.494066][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.506146][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.521113][ T4192] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.530803][ T4192] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.539906][ T4192] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.548936][ T4192] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.569348][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.577512][ T740] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.586413][ T740] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.595195][ T740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.606228][ T4184] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.614944][ T4184] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.624571][ T4184] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.634380][ T4184] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.647605][ T4196] device veth1_vlan entered promiscuous mode [ 63.713568][ T740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.727653][ T740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.772277][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.783216][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.796231][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.804823][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.828633][ T4196] device veth0_macvtap entered promiscuous mode [ 63.837875][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.847658][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.856545][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.866937][ T4195] device veth0_macvtap entered promiscuous mode [ 63.876623][ T4195] device veth1_macvtap entered promiscuous mode [ 63.901642][ T4196] device veth1_macvtap entered promiscuous mode [ 63.914481][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.923622][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.933702][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.942132][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.950016][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.968649][ T4185] device veth0_vlan entered promiscuous mode [ 64.004111][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.017118][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.027062][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.037663][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.049899][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.063257][ T4185] device veth1_vlan entered promiscuous mode [ 64.076868][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.077081][ T740] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.096024][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.099337][ T740] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.106087][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.123822][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.133951][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.145915][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.157079][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.167540][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.175989][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.185305][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.195400][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.203426][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.211591][ T4287] Bluetooth: hci0: command 0x040f tx timeout [ 64.212581][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.229629][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.240764][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.251869][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.262601][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.274523][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.286365][ T4287] Bluetooth: hci1: command 0x040f tx timeout [ 64.292473][ T4287] Bluetooth: hci3: command 0x040f tx timeout [ 64.300561][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.312207][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.320070][ T4287] Bluetooth: hci2: command 0x040f tx timeout [ 64.324665][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.338787][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.348909][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.359625][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.370954][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.378921][ T23] Bluetooth: hci4: command 0x040f tx timeout [ 64.387244][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.395454][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.404560][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.413483][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.422308][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.440704][ T4195] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.450418][ T4195] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.459447][ T4195] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.469647][ T4195] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.487769][ T4196] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.496889][ T4196] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.506897][ T4196] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.515951][ T4196] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.539462][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.566967][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.580411][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.591637][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.600647][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.614852][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.626233][ T4185] device veth0_macvtap entered promiscuous mode [ 64.638839][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.654073][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.662628][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.721747][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.733601][ T4185] device veth1_macvtap entered promiscuous mode [ 64.740489][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.779950][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.789520][ T3089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.821705][ T3089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.873184][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.893037][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.904555][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.915794][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.928632][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.938720][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.949267][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.959985][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.973435][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.990754][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.014822][ T740] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.016003][ T3089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.033326][ T740] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.054599][ T3089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.083753][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.108173][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.121055][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.131724][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.142921][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.154283][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.164485][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.176537][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.186840][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.197830][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.208747][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.219769][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.231249][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.263609][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.282582][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.309427][ T4185] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.319553][ T4185] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.330258][ T4185] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.341234][ T4185] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.369613][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.396335][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.404221][ T4297] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6'. [ 65.410245][ T4299] loop4: detected capacity change from 0 to 2048 [ 65.443028][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.481862][ T4176] GPT:first_usable_lbas don't match. [ 65.494101][ T4297] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6'. [ 65.508498][ T4176] GPT:34 != 290 [ 65.544431][ T4176] GPT: Use GNU Parted to correct GPT errors. [ 65.564787][ T4176] loop4: p1 p2 p3 [ 65.629120][ T4302] device syzkaller0 entered promiscuous mode [ 65.634392][ T4299] GPT:first_usable_lbas don't match. [ 65.642077][ T4299] GPT:34 != 290 [ 65.648481][ T4299] GPT: Use GNU Parted to correct GPT errors. [ 65.654691][ T4299] loop4: p1 p2 p3 [ 65.688388][ T740] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.703762][ T740] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.787177][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.935360][ T4310] loop0: detected capacity change from 0 to 8192 [ 65.964770][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.995447][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.033728][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.041781][ T4310] ======================================================= [ 66.041781][ T4310] WARNING: The mand mount option has been deprecated and [ 66.041781][ T4310] and is ignored by this kernel. Remove the mand [ 66.041781][ T4310] option from the mount to silence this warning. [ 66.041781][ T4310] ======================================================= [ 66.248225][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 66.298562][ T4316] Bluetooth: hci0: command 0x0419 tx timeout [ 66.345927][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 66.384099][ T4285] Bluetooth: hci2: command 0x0419 tx timeout [ 66.459623][ T4285] Bluetooth: hci3: command 0x0419 tx timeout [ 66.563831][ T4285] Bluetooth: hci1: command 0x0419 tx timeout [ 66.752266][ T4316] Bluetooth: hci4: command 0x0419 tx timeout [ 66.814210][ T4313] udevd[4313]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 67.785554][ C0] sched: RT throttling activated [ 67.833556][ T4323] loop1: detected capacity change from 0 to 2048 [ 68.469281][ T4323] EXT4-fs (loop1): failed to initialize system zone (-117) [ 68.496202][ T4323] EXT4-fs (loop1): mount failed [ 68.508607][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 68.522750][ T4313] udevd[4313]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 68.534132][ T4338] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15'. [ 68.549050][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 68.659623][ T4338] device team1 entered promiscuous mode [ 68.715697][ T4338] Zero length message leads to an empty skb [ 68.906062][ T26] audit: type=1326 audit(1752726747.349:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4347 comm="syz.3.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09f8806929 code=0x7ffc0000 [ 68.971227][ T4348] syz.3.18 uses obsolete (PF_INET,SOCK_PACKET) [ 68.990629][ T26] audit: type=1326 audit(1752726747.399:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4347 comm="syz.3.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f09f8806929 code=0x7ffc0000 [ 69.031345][ T26] audit: type=1326 audit(1752726747.399:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4347 comm="syz.3.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09f8806929 code=0x7ffc0000 [ 69.054072][ T26] audit: type=1326 audit(1752726747.399:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4347 comm="syz.3.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09f8806929 code=0x7ffc0000 [ 69.107635][ T26] audit: type=1326 audit(1752726747.399:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4347 comm="syz.3.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f09f8806929 code=0x7ffc0000 [ 69.215777][ T26] audit: type=1326 audit(1752726747.409:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4347 comm="syz.3.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09f8806929 code=0x7ffc0000 [ 70.031010][ T26] audit: type=1326 audit(1752726747.409:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4347 comm="syz.3.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09f8806929 code=0x7ffc0000 [ 70.101755][ T26] audit: type=1326 audit(1752726747.419:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4347 comm="syz.3.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f09f8806929 code=0x7ffc0000 [ 70.124915][ T26] audit: type=1326 audit(1752726747.419:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4347 comm="syz.3.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09f8806929 code=0x7ffc0000 [ 70.298235][ T26] audit: type=1326 audit(1752726747.419:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4347 comm="syz.3.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09f8806929 code=0x7ffc0000 [ 70.494173][ T4376] loop3: detected capacity change from 0 to 512 [ 71.405075][ T4378] loop2: detected capacity change from 0 to 512 [ 71.801033][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.801188][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 73.797856][ T4375] serio: Serial port ptm0 [ 75.033106][ T4385] syz.1.28[4385] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 75.033237][ T4385] syz.1.28[4385] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 78.013165][ T4420] loop1: detected capacity change from 0 to 128 [ 78.203658][ T4423] netlink: 24 bytes leftover after parsing attributes in process `syz.0.39'. [ 78.208074][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 78.208088][ T26] audit: type=1800 audit(1752726756.659:18): pid=4420 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.36" name="file1" dev="loop1" ino=1048590 res=0 errno=0 [ 78.420337][ T4426] serio: Serial port ptm0 [ 78.532143][ T4426] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 78.547366][ T4426] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 78.713763][ T4431] netlink: 4 bytes leftover after parsing attributes in process `syz.0.41'. [ 78.713817][ T4431] device bridge_slave_1 left promiscuous mode [ 78.714593][ T4431] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.748184][ T4431] device bridge_slave_0 left promiscuous mode [ 78.748318][ T4431] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.109766][ T4428] bridge0 speed is unknown, defaulting to 1000 [ 79.161576][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 79.184942][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 79.194058][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 79.203158][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 79.212233][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 79.221306][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 79.230392][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 79.239506][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 79.248611][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 79.257739][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 79.885846][ T4428] ================================================================== [ 79.894249][ T4428] BUG: KASAN: use-after-free in siw_query_port+0x358/0x450 [ 79.901486][ T4428] Read of size 4 at addr ffff888077a900d8 by task kworker/0:10/4428 [ 79.909480][ T4428] [ 79.911836][ T4428] CPU: 0 PID: 4428 Comm: kworker/0:10 Not tainted 5.15.188-syzkaller #0 [ 79.920176][ T4428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 79.930247][ T4428] Workqueue: infiniband ib_cache_event_task [ 79.936181][ T4428] Call Trace: [ 79.939477][ T4428] [ 79.942437][ T4428] dump_stack_lvl+0x168/0x230 [ 79.947153][ T4428] ? show_regs_print_info+0x20/0x20 [ 79.952389][ T4428] ? _printk+0xcc/0x110 [ 79.956564][ T4428] ? load_image+0x3b0/0x3b0 [ 79.961085][ T4428] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 79.966485][ T4428] print_address_description+0x60/0x2d0 [ 79.972047][ T4428] ? siw_query_port+0x358/0x450 [ 79.976915][ T4428] kasan_report+0xdf/0x130 [ 79.981356][ T4428] ? siw_query_port+0x358/0x450 [ 79.986223][ T4428] ? _raw_spin_unlock+0x24/0x40 [ 79.991105][ T4428] siw_query_port+0x358/0x450 [ 79.995820][ T4428] ib_cache_update+0x1bb/0x980 [ 80.000626][ T4428] ? ib_cache_setup_one+0x5d0/0x5d0 [ 80.005846][ T4428] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 80.011845][ T4428] ? read_lock_is_recursive+0x10/0x10 [ 80.017262][ T4428] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 80.023180][ T4428] ? _raw_spin_unlock+0x40/0x40 [ 80.028064][ T4428] ib_cache_event_task+0xd4/0x1c0 [ 80.033115][ T4428] process_one_work+0x863/0x1000 [ 80.038075][ T4428] ? worker_detach_from_pool+0x240/0x240 [ 80.043709][ T4428] ? lockdep_hardirqs_off+0x70/0x100 [ 80.049002][ T4428] ? _raw_spin_lock_irq+0xab/0xe0 [ 80.054041][ T4428] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 80.059422][ T4428] ? wq_worker_running+0x97/0x170 [ 80.064463][ T4428] worker_thread+0xaa8/0x12a0 [ 80.069144][ T4428] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 80.075059][ T4428] ? lockdep_hardirqs_on+0x94/0x140 [ 80.080282][ T4428] ? lockdep_hardirqs_on+0x94/0x140 [ 80.085486][ T4428] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 80.091389][ T4428] kthread+0x436/0x520 [ 80.095489][ T4428] ? rcu_lock_release+0x20/0x20 [ 80.100349][ T4428] ? kthread_blkcg+0xd0/0xd0 [ 80.104954][ T4428] ret_from_fork+0x1f/0x30 [ 80.109389][ T4428] [ 80.112528][ T4428] [ 80.114885][ T4428] Allocated by task 4195: [ 80.119220][ T4428] __kasan_kmalloc+0xb5/0xf0 [ 80.123823][ T4428] kvmalloc_node+0x84/0x130 [ 80.128336][ T4428] alloc_netdev_mqs+0x84/0xc40 [ 80.133108][ T4428] rtnl_create_link+0x2fb/0xa90 [ 80.137973][ T4428] rtnl_newlink+0x105e/0x17d0 [ 80.142666][ T4428] rtnetlink_rcv_msg+0x9b9/0xe60 [ 80.147695][ T4428] netlink_rcv_skb+0x1e0/0x430 [ 80.152463][ T4428] netlink_unicast+0x77c/0x920 [ 80.157237][ T4428] netlink_sendmsg+0x8ab/0xbc0 [ 80.161999][ T4428] __sys_sendto+0x423/0x580 [ 80.166505][ T4428] __x64_sys_sendto+0xda/0xf0 [ 80.171190][ T4428] do_syscall_64+0x4c/0xa0 [ 80.175605][ T4428] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 80.181496][ T4428] [ 80.183826][ T4428] Freed by task 4431: [ 80.187809][ T4428] kasan_set_track+0x4b/0x70 [ 80.192398][ T4428] kasan_set_free_info+0x1f/0x40 [ 80.197328][ T4428] ____kasan_slab_free+0xd5/0x110 [ 80.202350][ T4428] slab_free_freelist_hook+0xea/0x170 [ 80.207718][ T4428] kfree+0xef/0x2a0 [ 80.211525][ T4428] device_release+0x92/0x1c0 [ 80.216111][ T4428] kobject_put+0x21d/0x460 [ 80.220519][ T4428] netdev_run_todo+0x8d0/0xa40 [ 80.225318][ T4428] rtnetlink_rcv_msg+0x9c0/0xe60 [ 80.230291][ T4428] netlink_rcv_skb+0x1e0/0x430 [ 80.235063][ T4428] netlink_unicast+0x77c/0x920 [ 80.239827][ T4428] netlink_sendmsg+0x8ab/0xbc0 [ 80.244585][ T4428] sock_write_iter+0x29c/0x380 [ 80.249348][ T4428] vfs_write+0x712/0xd00 [ 80.253591][ T4428] ksys_write+0x14d/0x250 [ 80.257919][ T4428] do_syscall_64+0x4c/0xa0 [ 80.262339][ T4428] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 80.268231][ T4428] [ 80.270557][ T4428] Last potentially related work creation: [ 80.276262][ T4428] kasan_save_stack+0x35/0x60 [ 80.280942][ T4428] kasan_record_aux_stack+0xb8/0x100 [ 80.286214][ T4428] insert_work+0x54/0x3d0 [ 80.290533][ T4428] __queue_work+0x9c5/0xd50 [ 80.295027][ T4428] queue_work_on+0x11d/0x1d0 [ 80.299607][ T4428] br_multicast_dev_del+0x35c/0x5f0 [ 80.304797][ T4428] br_dev_uninit+0x1a/0x70 [ 80.309201][ T4428] unregister_netdevice_many+0x131d/0x18f0 [ 80.315001][ T4428] rtnl_dellink+0x3db/0x700 [ 80.319494][ T4428] rtnetlink_rcv_msg+0x9b9/0xe60 [ 80.324424][ T4428] netlink_rcv_skb+0x1e0/0x430 [ 80.329177][ T4428] netlink_unicast+0x77c/0x920 [ 80.334081][ T4428] netlink_sendmsg+0x8ab/0xbc0 [ 80.338853][ T4428] sock_write_iter+0x29c/0x380 [ 80.343619][ T4428] vfs_write+0x712/0xd00 [ 80.347864][ T4428] ksys_write+0x14d/0x250 [ 80.352196][ T4428] do_syscall_64+0x4c/0xa0 [ 80.356619][ T4428] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 80.362510][ T4428] [ 80.364857][ T4428] Second to last potentially related work creation: [ 80.371430][ T4428] kasan_save_stack+0x35/0x60 [ 80.376107][ T4428] kasan_record_aux_stack+0xb8/0x100 [ 80.381391][ T4428] insert_work+0x54/0x3d0 [ 80.385717][ T4428] __queue_work+0x9c5/0xd50 [ 80.390210][ T4428] queue_work_on+0x11d/0x1d0 [ 80.394810][ T4428] fdb_delete+0xd22/0xf00 [ 80.399142][ T4428] br_fdb_delete_by_port+0x246/0x310 [ 80.404440][ T4428] del_nbp+0x67c/0xb90 [ 80.408513][ T4428] br_dev_delete+0x6a/0x100 [ 80.413030][ T4428] rtnl_dellink+0x3d3/0x700 [ 80.417527][ T4428] rtnetlink_rcv_msg+0x9b9/0xe60 [ 80.422464][ T4428] netlink_rcv_skb+0x1e0/0x430 [ 80.427222][ T4428] netlink_unicast+0x77c/0x920 [ 80.431983][ T4428] netlink_sendmsg+0x8ab/0xbc0 [ 80.436742][ T4428] sock_write_iter+0x29c/0x380 [ 80.441532][ T4428] vfs_write+0x712/0xd00 [ 80.445766][ T4428] ksys_write+0x14d/0x250 [ 80.450091][ T4428] do_syscall_64+0x4c/0xa0 [ 80.454497][ T4428] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 80.460389][ T4428] [ 80.462714][ T4428] The buggy address belongs to the object at ffff888077a90000 [ 80.462714][ T4428] which belongs to the cache kmalloc-cg-8k of size 8192 [ 80.477023][ T4428] The buggy address is located 216 bytes inside of [ 80.477023][ T4428] 8192-byte region [ffff888077a90000, ffff888077a92000) [ 80.490380][ T4428] The buggy address belongs to the page: [ 80.496008][ T4428] page:ffffea0001dea400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x77a90 [ 80.506154][ T4428] head:ffffea0001dea400 order:3 compound_mapcount:0 compound_pincount:0 [ 80.514484][ T4428] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 80.522475][ T4428] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff88801684c3c0 [ 80.531136][ T4428] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000 [ 80.539705][ T4428] page dumped because: kasan: bad access detected [ 80.546111][ T4428] page_owner tracks the page as allocated [ 80.551810][ T4428] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd60c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4195, ts 58381729641, free_ts 58345701380 [ 80.572635][ T4428] get_page_from_freelist+0x1b77/0x1c60 [ 80.578177][ T4428] __alloc_pages+0x1e1/0x470 [ 80.582765][ T4428] new_slab+0xc0/0x4b0 [ 80.586836][ T4428] ___slab_alloc+0x81e/0xdf0 [ 80.591458][ T4428] __kmalloc_node+0x200/0x3b0 [ 80.596136][ T4428] kvmalloc_node+0x84/0x130 [ 80.600644][ T4428] alloc_netdev_mqs+0x84/0xc40 [ 80.605412][ T4428] rtnl_create_link+0x2fb/0xa90 [ 80.610272][ T4428] rtnl_newlink+0x105e/0x17d0 [ 80.614962][ T4428] rtnetlink_rcv_msg+0x9b9/0xe60 [ 80.619913][ T4428] netlink_rcv_skb+0x1e0/0x430 [ 80.624679][ T4428] netlink_unicast+0x77c/0x920 [ 80.629464][ T4428] netlink_sendmsg+0x8ab/0xbc0 [ 80.634241][ T4428] __sys_sendto+0x423/0x580 [ 80.638759][ T4428] __x64_sys_sendto+0xda/0xf0 [ 80.643446][ T4428] do_syscall_64+0x4c/0xa0 [ 80.647893][ T4428] page last free stack trace: [ 80.652583][ T4428] free_unref_page_prepare+0x637/0x6c0 [ 80.658063][ T4428] free_unref_page+0x94/0x280 [ 80.662744][ T4428] qlist_free_all+0x35/0x90 [ 80.667246][ T4428] kasan_quarantine_reduce+0x150/0x160 [ 80.672709][ T4428] __kasan_slab_alloc+0x2f/0xd0 [ 80.677564][ T4428] slab_post_alloc_hook+0x4c/0x380 [ 80.682677][ T4428] kmem_cache_alloc_trace+0x103/0x2a0 [ 80.688051][ T4428] load_elf_binary+0x1b8e/0x2890 [ 80.692978][ T4428] bprm_execve+0xa92/0x17d0 [ 80.697479][ T4428] kernel_execve+0x82a/0x900 [ 80.702070][ T4428] call_usermodehelper_exec_async+0x207/0x350 [ 80.708133][ T4428] ret_from_fork+0x1f/0x30 [ 80.712561][ T4428] [ 80.714878][ T4428] Memory state around the buggy address: [ 80.720495][ T4428] ffff888077a8ff80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 80.728546][ T4428] ffff888077a90000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 80.736605][ T4428] >ffff888077a90080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 80.744835][ T4428] ^ [ 80.751755][ T4428] ffff888077a90100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 80.759804][ T4428] ffff888077a90180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 80.767869][ T4428] ================================================================== [ 80.775924][ T4428] Disabling lock debugging due to kernel taint [ 80.788093][ T4428] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 80.795329][ T4428] CPU: 0 PID: 4428 Comm: kworker/0:10 Tainted: G B 5.15.188-syzkaller #0 [ 80.805068][ T4428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 80.815155][ T4428] Workqueue: infiniband ib_cache_event_task [ 80.821172][ T4428] Call Trace: [ 80.824463][ T4428] [ 80.827403][ T4428] dump_stack_lvl+0x168/0x230 [ 80.832107][ T4428] ? show_regs_print_info+0x20/0x20 [ 80.837317][ T4428] ? load_image+0x3b0/0x3b0 [ 80.841844][ T4428] panic+0x2c9/0x7f0 [ 80.845746][ T4428] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 80.851912][ T4428] ? bpf_jit_dump+0xd0/0xd0 [ 80.856445][ T4428] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 80.862366][ T4428] ? _raw_spin_unlock+0x40/0x40 [ 80.867243][ T4428] ? siw_query_port+0x358/0x450 [ 80.872118][ T4428] check_panic_on_warn+0x80/0xa0 [ 80.877070][ T4428] ? siw_query_port+0x358/0x450 [ 80.881945][ T4428] end_report+0x6d/0xf0 [ 80.886120][ T4428] kasan_report+0x102/0x130 [ 80.890640][ T4428] ? siw_query_port+0x358/0x450 [ 80.895512][ T4428] ? _raw_spin_unlock+0x24/0x40 [ 80.900376][ T4428] siw_query_port+0x358/0x450 [ 80.905088][ T4428] ib_cache_update+0x1bb/0x980 [ 80.909895][ T4428] ? ib_cache_setup_one+0x5d0/0x5d0 [ 80.915112][ T4428] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 80.921113][ T4428] ? read_lock_is_recursive+0x10/0x10 [ 80.926502][ T4428] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 80.932418][ T4428] ? _raw_spin_unlock+0x40/0x40 [ 80.937295][ T4428] ib_cache_event_task+0xd4/0x1c0 [ 80.942344][ T4428] process_one_work+0x863/0x1000 [ 80.947310][ T4428] ? worker_detach_from_pool+0x240/0x240 [ 80.952961][ T4428] ? lockdep_hardirqs_off+0x70/0x100 [ 80.958268][ T4428] ? _raw_spin_lock_irq+0xab/0xe0 [ 80.963321][ T4428] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 80.968708][ T4428] ? wq_worker_running+0x97/0x170 [ 80.973755][ T4428] worker_thread+0xaa8/0x12a0 [ 80.978441][ T4428] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 80.984351][ T4428] ? lockdep_hardirqs_on+0x94/0x140 [ 80.989568][ T4428] ? lockdep_hardirqs_on+0x94/0x140 [ 80.994776][ T4428] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 81.000687][ T4428] kthread+0x436/0x520 [ 81.004769][ T4428] ? rcu_lock_release+0x20/0x20 [ 81.009642][ T4428] ? kthread_blkcg+0xd0/0xd0 [ 81.014256][ T4428] ret_from_fork+0x1f/0x30 [ 81.018692][ T4428] [ 81.022001][ T4428] Kernel Offset: disabled [ 81.026401][ T4428] Rebooting in 86400 seconds..