last executing test programs: 5.368667117s ago: executing program 3 (id=4): prlimit64(0x0, 0x6, 0x0, 0x0) setreuid(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x80000002, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r3) r4 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r4, 0x4) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="0094fffd00000000000000000000e7ff00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) recvfrom$inet_nvme(0xffffffffffffffff, 0x0, 0x0, 0x40000002, 0x0, 0x0) ppoll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x4559}], 0x1, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) 3.24604558s ago: executing program 3 (id=6): socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_complete={{0x3, 0xb}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}}}, 0xe) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r0, 0x26, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x9}) fcntl$lock(r0, 0x24, 0x0) r1 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000480)='io.pressure\x00', 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) read(r1, &(0x7f0000000140)=""/252, 0xfc) bind$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000100)={0x1f, @any, 0x1}, 0x10) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0x4}}, 0x9) syz_emit_vhci(&(0x7f0000000600)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0xe}, @l2cap_cid_signaling={{0xa}, [@l2cap_conf_rsp={{0x5, 0x2, 0x6}, {0x40}}]}}, 0x13) syz_emit_vhci(&(0x7f0000000700)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_conf_req={{0x4, 0x3, 0x4}, {0x40}}]}}, 0x11) 3.141562872s ago: executing program 3 (id=7): fstatfs(0xffffffffffffffff, &(0x7f00000003c0)=""/146) socket$netlink(0x10, 0x3, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}], 0x1, 0x0, 0x4, 0xf) syz_open_procfs(0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x37) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604110, 0x0) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[], 0x1a000}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0x4c814) 3.141466882s ago: executing program 0 (id=1): r0 = socket(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000300)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000002"], 0x48) 2.995413976s ago: executing program 0 (id=8): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/my_zoned_dev\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nullb/my_zoned_dev/memory_backed\x00', 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nullb/my_zoned_dev/zoned\x00', 0x2, 0xb96e0453b2f36300) write(r0, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x8946, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nullb/my_zoned_dev/power\x00', 0x2, 0x0) write(r1, &(0x7f00000002c0)='1', 0x1) 2.624403365s ago: executing program 0 (id=9): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x4, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}]}}]}, 0x3c}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 2.624300935s ago: executing program 1 (id=2): syz_usb_connect(0x0, 0x63, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000404c17aa5500010102030109025100010100c0320904000002080650000705010200020007058202000200090400010408066200070501020002000324010705020200020003240207"], 0x0) 2.616887695s ago: executing program 4 (id=10): openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pipe2$watch_queue(&(0x7f0000001180), 0x80) add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000080)='*', 0x1, 0xfffffffffffffffe) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, 0x0, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000480)=ANY=[], 0xb) pipe2(0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r5, @ANYBLOB="08002600940900000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 2.477924659s ago: executing program 2 (id=3): shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000fff000/0x1000)=nil) socket(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000540)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2008404, &(0x7f0000000a80)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000f43e5ede6482e0da85c340db186e601112e222972d0f9956a1ad2b8c8a1d6e6d29f6d72d1776b95c88d01baa022c765ee8e5f212c4bc7453b7f8c9b80fbf583026e0521dbb21044553b38863d0", @ANYBLOB="999c07c03c5bc6a3d07b90faae21d196274f93a659439830472d5633b24aaad481c74e142cd734ec6fd04935a94af71c756dbd6f5e2f39b2c4c30725d103d40d7e65129bb928ef73849dae618e438695e0a9078605ba418298145bf2fec11b0d16763288e7ecfe663aa5ff450d1e46d251160109c0378e04fe2629890c28366a6489e706ecf23195dc7f19e03fad8e8247e4cb8cbed7203be12840989824d0f70021b286d00a99d9772cd88ea28b6d328e719fb0553d888a6021a39d53a54015c0932f7dd20e34233d12358e6366a7f3e56e9a4435a621b5ecf6061b6eb809e49cfdff706fb7ca5f9d9727e03a", @ANYRESDEC, @ANYRESDEC, @ANYRES16=0x0, @ANYRESHEX], 0x41, 0x2bd, &(0x7f00000007c0)="$eJzs3LFrE2EYx/HHpDZpSpsIIiioD7roEto4OGqQFsSAUpuiDsLVXjTkTMpdqETEZhFX/47i6Cao/0AXcXF3K4Lg0kE86d2lvbRpm7ZJk9rvB8r75p73x71NruVJILfy4N3zUsFJF4yqROIqEZG6rIqk1maBE8EY8eaDElaXq8O/v5+///DRnWwuNzGlOpmdvpZR1dGLn168en/pS3V45sPox5gspx6v/Mr8WB5cPrvyd/pZ0dGio+VKVQ2drVSqxqxl6lzRKaVV71mm4ZhaLDum3VQvWJX5+Zoa5bmRxLxtOo4a5ZqWzJpWK1q1a2o8NYplTafTOpKQYywiMtDGsvzS1JSR3bbsRju6KXTdUKuDtp2tty7mlw5hTwAAoM/s3P/7vf72/X9uxh/30v+f2b3/F6H/75J606Nd+n8cVdfDV79tZ41E8PfbjP4fAAAAAAAAAAAAAAAAAAAAAICjYNV1k67rJtfG4JD3OCYicRFxg3qPt4kuCb/+buhnl9f/Ro+2iw4LfXEvLmK9Xcgv5P3Rr2cLUhRLTBmTpPzxroeAP5+8nZsYU09KPluLQX5xIR+VWCPfkGqVv3Bq3M9rc/6kJMLnz0hSTrc+f6ZlflCuXA7l05KUr0+kIpbMedf1Rv71uOqtu7lN+SFvHQAAAAAA/4O0rtvy/t2rewvisrXu50OfD7iuu7jT5wOb3l8PyLl2blEJAAAAAAAOzKm9LBmWZdr7mMRE5ADxzk9cV6T324hKfzwbzZObItIH2zisSVxE/CO6n/jP9XhbKbeNNQMi0vOnZQ+TXv9nAgAAANBpG03/HkLf3nRxRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHD/t3g+ssX5LqVHYIR46XfTQf0EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgj/wLAAD//7KDHOI=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_merged\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) 1.861362684s ago: executing program 3 (id=11): syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800010, &(0x7f0000002240)=ANY=[@ANYBLOB='iocharset=iso8859-1,nostrict,iocharset=default,session=00000000000000000000,gid=', @ANYRESDEC=0x0, @ANYBLOB="2c6c617374626c6f636b3d31383434363734343037333730393535313631332c756e64656c6574652c706172746974696f6e15ffffff30303030303030303030303030303030312c756e686964652c6e6f7672732c00027166c2e223a33a8f83ed9767a529b742464ac1cc93a376ce2c4f5053349d1faaeb113d4416cd0196a29fae03697e745c1e4d19e3a50ae53bd0d806b964c63d30515328f6b09c83e5b2693abd89d6edfb5267764b2da6b50bcb3c83ed496f68cfb534"], 0x1, 0xc43, &(0x7f00000001c0)="$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") syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b00010000"], 0x0) r0 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000700)={0x4, 0x8}, 0x2000) 1.545685002s ago: executing program 4 (id=12): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe0}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc53", 0x35}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b1", 0x6d}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc", 0x1f}], 0x3}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000740)="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", 0x142}], 0x1}}], 0x2, 0x14042082) syz_read_part_table(0x1056, &(0x7f0000000000)="$eJzsz81tAjEUBOBx9scbKdKeUlrqyV7SREqgBSqgA+4UAjJeiQ6Aw/dd3sgeW3rhpY71kefkI8mQLSXJKaWNlpfPfF9aHnvvPzlfh0ztZF2G6f58ad1a99Rtpc+vtX+0jfNf/d0vS34Oz9sUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN7XLQAA//8koAkb") sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.415836985s ago: executing program 0 (id=13): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000140), 0x1, 0x241, &(0x7f0000000840)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="68000000000905040000000000000000020000000900010073797a3000000000140002800600010000020000050002000600000008000500000000002c0004800800010000000001200002800c000100706f6c69637930000800020000000002080003000000001e", 0x68}], 0x1}, 0x0) 817.31074ms ago: executing program 2 (id=14): r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x13, r0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_GET_LAPIC(r6, 0x8400ae8e, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) 572.138496ms ago: executing program 4 (id=15): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback=0x22}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x801a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) writev(r1, &(0x7f0000000380)=[{&(0x7f0000000100)="0001", 0x2}, {&(0x7f00000000c0)="a42a17", 0x3}], 0x2) 400.90462ms ago: executing program 4 (id=16): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x4004990) close(0xffffffffffffffff) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x8}, @hci_rp_read_auth_payload_to={{0xf7}, {0x0, 0xc8, 0xf801}}}}, 0xb) 217.613185ms ago: executing program 1 (id=17): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, &(0x7f0000000300)='-2 -3\n\x00', 0x6) openat(0xffffffffffffff9c, &(0x7f0000000a00)='./nfsd/portlist\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f0000000500)='1\n\x00', 0x2) 168.074276ms ago: executing program 4 (id=18): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000c40)=@newtfilter={0x34, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) 0s ago: executing program 4 (id=19): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.21' (ED25519) to the list of known hosts. [ 61.489229][ T4172] cgroup: Unknown subsys name 'net' [ 61.621318][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 63.131665][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 64.619843][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 64.647827][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 64.710251][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 64.761468][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 64.839605][ T4198] chnl_net:caif_netlink_parms(): no params data found [ 64.860416][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.868769][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.878068][ T4187] device bridge_slave_0 entered promiscuous mode [ 64.920549][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.927944][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.936727][ T4187] device bridge_slave_1 entered promiscuous mode [ 64.972408][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.979609][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.988184][ T4190] device bridge_slave_0 entered promiscuous mode [ 65.006674][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.013780][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.022264][ T4189] device bridge_slave_0 entered promiscuous mode [ 65.038069][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.045313][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.053207][ T4190] device bridge_slave_1 entered promiscuous mode [ 65.062497][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.074040][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.092634][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.099822][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.108193][ T4189] device bridge_slave_1 entered promiscuous mode [ 65.158700][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.166693][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.174993][ T4188] device bridge_slave_0 entered promiscuous mode [ 65.184829][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.196963][ T4187] team0: Port device team_slave_0 added [ 65.204925][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.217328][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.232236][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.239645][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.248393][ T4188] device bridge_slave_1 entered promiscuous mode [ 65.257666][ T4187] team0: Port device team_slave_1 added [ 65.272613][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.317469][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.333879][ T4198] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.341428][ T4198] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.350605][ T4198] device bridge_slave_0 entered promiscuous mode [ 65.364874][ T4198] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.372056][ T4198] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.380754][ T4198] device bridge_slave_1 entered promiscuous mode [ 65.397385][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.408895][ T4190] team0: Port device team_slave_0 added [ 65.416468][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.423457][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.449744][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.470864][ T4189] team0: Port device team_slave_0 added [ 65.486504][ T4189] team0: Port device team_slave_1 added [ 65.493726][ T4190] team0: Port device team_slave_1 added [ 65.507762][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.515195][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.541254][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.596267][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.603451][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.629873][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.644205][ T4198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.656398][ T4188] team0: Port device team_slave_0 added [ 65.663087][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.670306][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.696773][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.709577][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.717178][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.743757][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.761814][ T4198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.772517][ T4188] team0: Port device team_slave_1 added [ 65.779931][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.787098][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.813605][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.903818][ T4187] device hsr_slave_0 entered promiscuous mode [ 65.911649][ T4187] device hsr_slave_1 entered promiscuous mode [ 65.927395][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.934546][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.961697][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.976985][ T4198] team0: Port device team_slave_0 added [ 65.987843][ T4189] device hsr_slave_0 entered promiscuous mode [ 65.995458][ T4189] device hsr_slave_1 entered promiscuous mode [ 66.002497][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.010856][ T4189] Cannot create hsr debugfs directory [ 66.029020][ T4190] device hsr_slave_0 entered promiscuous mode [ 66.036014][ T4190] device hsr_slave_1 entered promiscuous mode [ 66.043642][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.051380][ T4190] Cannot create hsr debugfs directory [ 66.057796][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.065275][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.091566][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.104422][ T4198] team0: Port device team_slave_1 added [ 66.179957][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.187096][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.213611][ T4198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.247025][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.254028][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.280229][ T4198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.305932][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 66.315908][ T4194] Bluetooth: hci2: command 0x0409 tx timeout [ 66.323209][ T4188] device hsr_slave_0 entered promiscuous mode [ 66.329661][ T4194] Bluetooth: hci3: command 0x0409 tx timeout [ 66.335836][ T4194] Bluetooth: hci0: command 0x0409 tx timeout [ 66.342259][ T4188] device hsr_slave_1 entered promiscuous mode [ 66.349122][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.356755][ T4188] Cannot create hsr debugfs directory [ 66.395043][ T4194] Bluetooth: hci1: command 0x0409 tx timeout [ 66.501498][ T4198] device hsr_slave_0 entered promiscuous mode [ 66.508505][ T4198] device hsr_slave_1 entered promiscuous mode [ 66.515217][ T4198] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.522882][ T4198] Cannot create hsr debugfs directory [ 66.703497][ T4187] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 66.715343][ T4187] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 66.726228][ T4187] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 66.736243][ T4187] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 66.800332][ T4190] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 66.814224][ T4190] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 66.824392][ T4190] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 66.847744][ T4190] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 66.889282][ T4188] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 66.919330][ T4188] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 66.930788][ T4188] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 66.944597][ T4188] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.997565][ T4198] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 67.014635][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.035352][ T4198] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 67.045269][ T4198] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 67.059404][ T4198] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 67.098528][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.110468][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.122616][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.144497][ T4189] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 67.161686][ T4189] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 67.175952][ T4189] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 67.190038][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.205595][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.215681][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.224995][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.232380][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.242379][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.251902][ T4189] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 67.281442][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.295293][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.304447][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.313609][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.324157][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.333438][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.340584][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.361142][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.389145][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.398373][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.407970][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.415122][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.445837][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.453988][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.466930][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.476731][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.486044][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.493145][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.501626][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.510613][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.519907][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.529134][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.538859][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.547872][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.557374][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.566393][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.574707][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.584074][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.593064][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.602970][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.612764][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.620998][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.635744][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.647429][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.666695][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.686897][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.696895][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.705693][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.714234][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.723143][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.732706][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.759761][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.769691][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.780694][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.801804][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.826949][ T4198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.858744][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.877355][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.893856][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.901048][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.917164][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.930038][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.944526][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.959575][ T4198] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.005115][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.022385][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.033180][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.040417][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.049574][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.059500][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.068911][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.078569][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.087565][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.127453][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.141407][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.151967][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.159152][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.175407][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.184283][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.199137][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.206334][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.215124][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.224023][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.233988][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.243629][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.253661][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.262267][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.273850][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.291083][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.307741][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.320013][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.353367][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.363860][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.373024][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.382223][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.393829][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.397487][ T4236] Bluetooth: hci0: command 0x041b tx timeout [ 68.411947][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.415455][ T4236] Bluetooth: hci3: command 0x041b tx timeout [ 68.422622][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.434956][ T4236] Bluetooth: hci2: command 0x041b tx timeout [ 68.437189][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.449620][ T4236] Bluetooth: hci4: command 0x041b tx timeout [ 68.460425][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.473760][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.476120][ T4236] Bluetooth: hci1: command 0x041b tx timeout [ 68.501489][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.509941][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.522576][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.543613][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.568052][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.590153][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.597345][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.613479][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.622958][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.665593][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.683732][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.693886][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.703338][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.710472][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.719952][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.729156][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.738739][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.772856][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.793061][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.806804][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.816479][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.826687][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.835845][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.846255][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.856036][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.864640][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.875008][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.909516][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.918508][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.926527][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.934499][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.944384][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.955062][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.963726][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.980470][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.991522][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.008474][ T4190] device veth0_vlan entered promiscuous mode [ 69.034600][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.049001][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.077013][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.087138][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.101124][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.133215][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.161726][ T4190] device veth1_vlan entered promiscuous mode [ 69.199467][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.210624][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.227533][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.264055][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.278140][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.307989][ T4188] device veth0_vlan entered promiscuous mode [ 69.315518][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.323704][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.332457][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.380461][ T4198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.396257][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.405305][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.414186][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.429747][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.441043][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.449396][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.459986][ T4188] device veth1_vlan entered promiscuous mode [ 69.468345][ T4187] device veth0_vlan entered promiscuous mode [ 69.477010][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.485766][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.494507][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.533127][ T4190] device veth0_macvtap entered promiscuous mode [ 69.540814][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.551361][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.560803][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.570899][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.580944][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.590265][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.605525][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.618275][ T4187] device veth1_vlan entered promiscuous mode [ 69.629024][ T4190] device veth1_macvtap entered promiscuous mode [ 69.643526][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.653122][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.661756][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.672001][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.700044][ T4188] device veth0_macvtap entered promiscuous mode [ 69.716352][ T4188] device veth1_macvtap entered promiscuous mode [ 69.740044][ T4198] device veth0_vlan entered promiscuous mode [ 69.751187][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.765181][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.776882][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.786272][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.794571][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.803050][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.811663][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.821085][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.831637][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.840962][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.850432][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.859780][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.868104][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.881294][ T4190] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.890436][ T4190] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.900305][ T4190] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.910934][ T4190] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.939921][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.950778][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.963210][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.974693][ T4198] device veth1_vlan entered promiscuous mode [ 69.983683][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.993112][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.004135][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.014002][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.023815][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.032842][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.043821][ T4187] device veth0_macvtap entered promiscuous mode [ 70.064109][ T4189] device veth0_vlan entered promiscuous mode [ 70.073691][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.086248][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.098055][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.113418][ T4188] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.122915][ T4188] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.133707][ T4188] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.143124][ T4188] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.172284][ T4187] device veth1_macvtap entered promiscuous mode [ 70.180384][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.189059][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.198037][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.207320][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.217050][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.227119][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.238123][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.246350][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.259797][ T4189] device veth1_vlan entered promiscuous mode [ 70.338628][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.351382][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.361613][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.372219][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.387261][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.422992][ T4189] device veth0_macvtap entered promiscuous mode [ 70.442142][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.450601][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.459405][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.469086][ T7] Bluetooth: hci4: command 0x040f tx timeout [ 70.475442][ T7] Bluetooth: hci2: command 0x040f tx timeout [ 70.482414][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.490630][ T7] Bluetooth: hci3: command 0x040f tx timeout [ 70.497824][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.506050][ T7] Bluetooth: hci0: command 0x040f tx timeout [ 70.512860][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.523799][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.537721][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.549633][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.555537][ T7] Bluetooth: hci1: command 0x040f tx timeout [ 70.560700][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.578678][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.590002][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.611607][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.622118][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.634533][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.643828][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.656125][ T4198] device veth0_macvtap entered promiscuous mode [ 70.679045][ T4189] device veth1_macvtap entered promiscuous mode [ 70.701034][ T4198] device veth1_macvtap entered promiscuous mode [ 70.728166][ T4187] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.738283][ T4187] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.748332][ T4187] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.757587][ T4187] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.785434][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.797745][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.806237][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.816892][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.828386][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.839170][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.850209][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.864588][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.875549][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.888151][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.908030][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.929801][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.954261][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.964181][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.976252][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.987640][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.999275][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.010295][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.021312][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.032918][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.044393][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.058260][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.070396][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.088727][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.096739][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.109142][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.120543][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.138095][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.151163][ T4189] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.160350][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.171139][ T4189] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.181080][ T4189] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.194063][ T4189] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.222584][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.253623][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.264869][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.275917][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.286739][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.296897][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.309051][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.319223][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.330154][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.343756][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.391391][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.393500][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.413577][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.423665][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.436195][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.443788][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.450470][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.459721][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.483516][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.497235][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.514249][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.524888][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.536113][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.546035][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.561580][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.580253][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.608048][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.617890][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.630214][ T4198] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.640406][ T4198] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.650472][ T4198] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.659437][ T4198] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.753808][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.814120][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.545744][ T4194] Bluetooth: hci0: command 0x0419 tx timeout [ 72.552766][ T4194] Bluetooth: hci3: command 0x0419 tx timeout [ 72.567666][ T4194] Bluetooth: hci2: command 0x0419 tx timeout [ 72.573864][ T4194] Bluetooth: hci4: command 0x0419 tx timeout [ 72.625396][ T4194] Bluetooth: hci1: command 0x0419 tx timeout [ 73.534786][ C1] sched: RT throttling activated [ 73.561028][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.735414][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.743293][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.803408][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.820960][ T4239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.836998][ T4239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.853502][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.915403][ T26] audit: type=1800 audit(1786364296.334:2): pid=4286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.8" name="memory_backed" dev="configfs" ino=32434 res=0 errno=0 [ 73.928945][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.963523][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.990840][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.000748][ T26] audit: type=1800 audit(1786364296.374:3): pid=4286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.8" name="zoned" dev="configfs" ino=32440 res=0 errno=0 [ 74.027279][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.043201][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.076105][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.093922][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.110582][ T26] audit: type=1800 audit(1786364296.374:4): pid=4286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.8" name="power" dev="configfs" ino=32441 res=0 errno=0 [ 74.119335][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.202519][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.503526][ T4297] loop2: detected capacity change from 0 to 128 [ 74.528609][ T4297] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 74.716954][ T4236] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 75.185521][ T4236] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 75.204115][ T4236] usb 2-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 75.239235][ T4297] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 75.408810][ T4302] loop3: detected capacity change from 0 to 2048 [ 75.415843][ T4236] usb 2-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 75.489437][ T4236] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.527192][ T4236] usb 2-1: Product: syz [ 75.549606][ T4306] loop0: detected capacity change from 0 to 128 [ 75.559034][ T4236] usb 2-1: Manufacturer: syz [ 75.582376][ T4236] usb 2-1: SerialNumber: syz [ 75.591489][ T4302] UDF-fs: bad mount option "partitionÿÿÿ00000000000000001" or missing value [ 75.625756][ T4306] ======================================================= [ 75.625756][ T4306] WARNING: The mand mount option has been deprecated and [ 75.625756][ T4306] and is ignored by this kernel. Remove the mand [ 75.625756][ T4306] option from the mount to silence this warning. [ 75.625756][ T4306] ======================================================= [ 75.679078][ T13] Bluetooth: hci2: command 0x041b tx timeout [ 75.721592][ T4306] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 75.735086][ T4304] loop4: detected capacity change from 0 to 8192 [ 75.744619][ T4236] usb-storage 2-1:1.0: USB Mass Storage device detected [ 75.771392][ T4306] ext4 filesystem being mounted at /3/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 75.932433][ T9] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 76.045595][ T4304] loop4: p1 < > p3 p4 < > [ 76.069590][ T4236] usb-storage 2-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 76.087232][ T4236] scsi host1: usb-storage 2-1:1.0 [ 76.095550][ T4304] loop4: p3 start 986112 is beyond EOD, truncated [ 76.106369][ T4236] usb 2-1: USB disconnect, device number 2 [ 76.195011][ T13] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 76.490348][ T4264] udevd[4264]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 76.505442][ T4311] udevd[4311]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 76.541681][ T4311] udevd[4311]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 76.566439][ T4264] udevd[4264]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 76.644950][ T13] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 76.673495][ T13] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 76.791144][ T4327] svc: failed to register nfsdv3 RPC service (errno 111). [ 76.810449][ T4327] svc: failed to register nfsaclv3 RPC service (errno 111). [ 76.895106][ T13] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 76.907954][ T4330] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 76.937196][ T13] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 77.270139][ T4189] ================================================================== [ 77.278730][ T4189] BUG: KASAN: use-after-free in nfsd_shutdown_threads+0x89/0x1a0 [ 77.286660][ T4189] Write of size 4 at addr ffff88801f840850 by task syz-executor/4189 [ 77.294778][ T4189] [ 77.297159][ T4189] CPU: 1 PID: 4189 Comm: syz-executor Not tainted syzkaller #0 [ 77.304739][ T4189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 77.314845][ T4189] Call Trace: [ 77.318211][ T4189] [ 77.321181][ T4189] dump_stack_lvl+0x188/0x250 [ 77.325917][ T4189] ? show_regs_print_info+0x20/0x20 [ 77.331169][ T4189] ? load_image+0x410/0x410 [ 77.335716][ T4189] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 77.341223][ T4189] ? rcu_lock_release+0x5/0x20 [ 77.346029][ T4189] print_address_description+0x60/0x2d0 [ 77.351614][ T4189] ? nfsd_shutdown_threads+0x89/0x1a0 [ 77.357034][ T4189] kasan_report+0xdf/0x130 [ 77.361486][ T4189] ? nfsd_shutdown_threads+0x89/0x1a0 [ 77.366899][ T4189] kasan_check_range+0x235/0x290 [ 77.371878][ T4189] nfsd_shutdown_threads+0x89/0x1a0 [ 77.377115][ T4189] nfsd_umount+0x3e/0xc0 [ 77.381387][ T4189] deactivate_locked_super+0x93/0xf0 [ 77.386708][ T4189] cleanup_mnt+0x426/0x4d0 [ 77.391165][ T4189] task_work_run+0x125/0x1a0 [ 77.395800][ T4189] exit_to_user_mode_loop+0x10f/0x130 [ 77.401205][ T4189] exit_to_user_mode_prepare+0xee/0x180 [ 77.406783][ T4189] syscall_exit_to_user_mode+0x16/0x40 [ 77.412291][ T4189] do_syscall_64+0x58/0xa0 [ 77.416749][ T4189] ? clear_bhb_loop+0x30/0x80 [ 77.421458][ T4189] ? clear_bhb_loop+0x30/0x80 [ 77.426179][ T4189] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 77.432128][ T4189] RIP: 0033:0x7f575ebba317 [ 77.436576][ T4189] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 77.456218][ T4189] RSP: 002b:00007ffc16599d98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 77.464674][ T4189] RAX: 0000000000000000 RBX: 00007f575ec4f474 RCX: 00007f575ebba317 [ 77.472693][ T4189] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc16599e50 [ 77.480701][ T4189] RBP: 00007ffc16599e50 R08: 00007ffc1659ae50 R09: 00000000ffffffff [ 77.488705][ T4189] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc1659aee0 [ 77.496714][ T4189] R13: 00007f575ec4f474 R14: 0000000000012d1f R15: 00007ffc1659af20 [ 77.504865][ T4189] [ 77.507917][ T4189] [ 77.510263][ T4189] Allocated by task 4327: [ 77.514626][ T4189] __kasan_kmalloc+0xaf/0xe0 [ 77.519265][ T4189] __svc_create+0x60/0x9d0 [ 77.523722][ T4189] svc_create_pooled+0x62f/0x810 [ 77.528699][ T4189] nfsd_create_serv+0x2f9/0x700 [ 77.533585][ T4189] nfsd_svc+0x132/0x9e0 [ 77.537770][ T4189] write_threads+0x2ea/0x350 [ 77.542391][ T4189] nfsctl_transaction_write+0x105/0x150 [ 77.547968][ T4189] vfs_write+0x304/0xd70 [ 77.552265][ T4189] ksys_write+0x153/0x260 [ 77.556629][ T4189] do_syscall_64+0x4c/0xa0 [ 77.561078][ T4189] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 77.567004][ T4189] [ 77.569349][ T4189] Freed by task 4327: [ 77.573352][ T4189] kasan_set_track+0x4b/0x70 [ 77.578023][ T4189] kasan_set_free_info+0x1f/0x40 [ 77.582991][ T4189] ____kasan_slab_free+0xd5/0x110 [ 77.588042][ T4189] slab_free_freelist_hook+0xec/0x170 [ 77.593439][ T4189] kfree+0xef/0x2a0 [ 77.597292][ T4189] nfsd_svc+0x7cf/0x9e0 [ 77.601474][ T4189] write_threads+0x2ea/0x350 [ 77.606093][ T4189] nfsctl_transaction_write+0x105/0x150 [ 77.611673][ T4189] vfs_write+0x304/0xd70 [ 77.615944][ T4189] ksys_write+0x153/0x260 [ 77.620299][ T4189] do_syscall_64+0x4c/0xa0 [ 77.624748][ T4189] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 77.630692][ T4189] [ 77.630919][ T13] usb 4-1: Product: syz [ 77.633044][ T4189] The buggy address belongs to the object at ffff88801f840800 [ 77.633044][ T4189] which belongs to the cache kmalloc-512 of size 512 [ 77.633078][ T4189] The buggy address is located 80 bytes inside of [ 77.633078][ T4189] 512-byte region [ffff88801f840800, ffff88801f840a00) [ 77.658542][ T13] usb 4-1: Manufacturer: syz [ 77.664527][ T4189] The buggy address belongs to the page: [ 77.664552][ T4189] page:ffffea00007e1000 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88801f840c00 pfn:0x1f840 [ 77.674241][ T13] usb 4-1: SerialNumber: syz [ 77.675325][ T4189] head:ffffea00007e1000 order:2 compound_mapcount:0 compound_pincount:0 [ 77.675345][ T4189] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 77.675388][ T4189] raw: 00fff00000010200 ffffea0000a83108 ffffea0001e68808 ffff888016c41c80 [ 77.675408][ T4189] raw: ffff88801f840c00 000000000010000f 00000001ffffffff 0000000000000000 [ 77.675419][ T4189] page dumped because: kasan: bad access detected [ 77.675434][ T4189] page_owner tracks the page as allocated [ 77.675442][ T4189] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 861, ts 8921741745, free_ts 0 [ 77.675474][ T4189] get_page_from_freelist+0x24f6/0x2670 [ 77.675503][ T4189] __alloc_pages+0x1ee/0x480 [ 77.675523][ T4189] new_slab+0xc0/0x4b0 [ 77.675541][ T4189] ___slab_alloc+0x807/0xdd0 [ 77.675557][ T4189] kmem_cache_alloc_trace+0xf9/0x290 [ 77.675575][ T4189] alloc_bprm+0x56/0x690 [ 77.675592][ T4189] kernel_execve+0x49/0x8e0 [ 77.675609][ T4189] call_usermodehelper_exec_async+0x207/0x350 [ 77.675629][ T4189] ret_from_fork+0x1f/0x30 [ 77.675650][ T4189] page_owner free stack trace missing [ 77.675657][ T4189] [ 77.675662][ T4189] Memory state around the buggy address: [ 77.707039][ T13] usb 4-1: config 0 descriptor?? [ 77.708078][ T4189] ffff88801f840700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 77.708095][ T4189] ffff88801f840780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 77.708111][ T4189] >ffff88801f840800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 77.708122][ T4189] ^ [ 77.848396][ T4189] ffff88801f840880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 77.856494][ T4189] ffff88801f840900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 77.864591][ T4189] ================================================================== [ 77.868349][ T13] Bluetooth: hci2: command 0x040f tx timeout [ 77.872674][ T4189] Disabling lock debugging due to kernel taint [ 77.899182][ T4189] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 77.906440][ T4189] CPU: 0 PID: 4189 Comm: syz-executor Tainted: G B syzkaller #0 [ 77.915405][ T4189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 77.925489][ T4189] Call Trace: [ 77.928800][ T4189] [ 77.931758][ T4189] dump_stack_lvl+0x188/0x250 [ 77.936479][ T4189] ? show_regs_print_info+0x20/0x20 [ 77.941760][ T4189] ? load_image+0x410/0x410 [ 77.946315][ T4189] panic+0x2f8/0x850 [ 77.950262][ T4189] ? bpf_jit_dump+0xd0/0xd0 [ 77.954806][ T4189] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 77.960831][ T4189] ? _raw_spin_unlock+0x40/0x40 [ 77.965726][ T4189] ? nfsd_shutdown_threads+0x89/0x1a0 [ 77.971189][ T4189] check_panic_on_warn+0x80/0xa0 [ 77.976163][ T4189] ? nfsd_shutdown_threads+0x89/0x1a0 [ 77.981567][ T4189] end_report+0x6d/0xf0 [ 77.985757][ T4189] kasan_report+0x102/0x130 [ 77.990292][ T4189] ? nfsd_shutdown_threads+0x89/0x1a0 [ 77.995699][ T4189] kasan_check_range+0x235/0x290 [ 78.000801][ T4189] nfsd_shutdown_threads+0x89/0x1a0 [ 78.006026][ T4189] nfsd_umount+0x3e/0xc0 [ 78.010296][ T4189] deactivate_locked_super+0x93/0xf0 [ 78.015619][ T4189] cleanup_mnt+0x426/0x4d0 [ 78.020069][ T4189] task_work_run+0x125/0x1a0 [ 78.024693][ T4189] exit_to_user_mode_loop+0x10f/0x130 [ 78.030097][ T4189] exit_to_user_mode_prepare+0xee/0x180 [ 78.035677][ T4189] syscall_exit_to_user_mode+0x16/0x40 [ 78.041169][ T4189] do_syscall_64+0x58/0xa0 [ 78.045771][ T4189] ? clear_bhb_loop+0x30/0x80 [ 78.050493][ T4189] ? clear_bhb_loop+0x30/0x80 [ 78.055210][ T4189] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 78.061173][ T4189] RIP: 0033:0x7f575ebba317 [ 78.065626][ T4189] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 78.085267][ T4189] RSP: 002b:00007ffc16599d98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 78.093728][ T4189] RAX: 0000000000000000 RBX: 00007f575ec4f474 RCX: 00007f575ebba317 [ 78.101771][ T4189] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc16599e50 [ 78.109808][ T4189] RBP: 00007ffc16599e50 R08: 00007ffc1659ae50 R09: 00000000ffffffff [ 78.117808][ T4189] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc1659aee0 [ 78.125805][ T4189] R13: 00007f575ec4f474 R14: 0000000000012d1f R15: 00007ffc1659af20 [ 78.133819][ T4189] [ 78.137099][ T4189] Kernel Offset: disabled [ 78.141450][ T4189] Rebooting in 86400 seconds..