last executing test programs: 7.303821384s ago: executing program 2 (id=7): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.575914695s ago: executing program 2 (id=20): r0 = fanotify_init(0x200, 0x0) r1 = memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1) r2 = dup(r1) fanotify_mark(r0, 0x1, 0x3, r2, 0x0) r3 = dup(r2) write$binfmt_elf64(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c4606ff78a33e0200000000000002003e00cd000000c9030000000000004000000000000000e702000000000000030000000500380002000600b106090003"], 0xb0) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 6.295107906s ago: executing program 2 (id=13): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x200a4800) recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 6.286974923s ago: executing program 3 (id=14): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) symlink(&(0x7f0000000000)='./file1\x00', &(0x7f0000004540)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x42, 0x189) rename(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='./bus\x00') 6.05966023s ago: executing program 3 (id=15): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'veth0_to_hsr\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(r2, 0x40047435, &(0x7f0000000200)=0x1) 6.008695524s ago: executing program 2 (id=16): r0 = socket(0x1e, 0x4, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) sendmmsg(r0, &(0x7f0000003240), 0x4000000000000e4, 0x9000000) 5.78830086s ago: executing program 3 (id=17): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_int(r0, &(0x7f0000000540), 0xfffffdd8) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) 5.025921138s ago: executing program 2 (id=19): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x4}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000500)={'team_slave_0\x00', &(0x7f0000000340)=@ethtool_perm_addr}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) 3.898041431s ago: executing program 3 (id=23): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 3.421202491s ago: executing program 1 (id=27): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400400103000000092101000001220500090581030002"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x81, 0xff08, &(0x7f0000000c40)="2318e78a8110b1c89f478f51e1a8dc6a90c8e40855f1484f523e935f5b4f4a225183bfd4ca317400"/49) read$char_usb(r1, &(0x7f0000000100)=""/242, 0xf2) 3.311901503s ago: executing program 0 (id=28): r0 = socket$inet(0x2, 0x2, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r1 = socket$inet(0x2, 0x2, 0x1) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = socket(0x2, 0x2, 0x1) bind$unix(r2, &(0x7f0000000000)=@abs, 0x6e) bind$inet(r1, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) 3.177017342s ago: executing program 0 (id=29): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x55, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000480)="c4817d28780a420f2042b805000000b9000000000f01d9c7442400cc000000c74424020080ff36ffff2c24c483554c4199000f32410f01df400f01c248b8f7750000000000000f23d00f21f8351000000b0f23f80f9be6", 0x1b}], 0x1, 0x22, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.935542909s ago: executing program 0 (id=30): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x50, 0x0, &(0x7f00000003c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.718544425s ago: executing program 0 (id=31): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1ec) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10010, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) 2.61686411s ago: executing program 0 (id=32): r0 = fanotify_init(0x200, 0x0) r1 = memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1) r2 = dup(r1) fanotify_mark(r0, 0x1, 0x2, r2, 0x0) r3 = dup(r2) write$binfmt_elf64(r3, &(0x7f00000006c0)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0xff, 0x78, 0xa3, 0x23e, 0x2, 0x3e, 0xcd, 0x3c9, 0x40, 0x2ea, 0x3, 0x5, 0x38, 0x0, 0x6, 0x6b1, 0x9}}, 0x40) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 2.336259922s ago: executing program 2 (id=33): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4008054) write$nci(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="7105030908e8d5c40f0d"], 0x19) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) 2.291932754s ago: executing program 0 (id=34): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x7}, 0x1c) recvfrom(r0, 0x0, 0x0, 0x2, 0x0, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) write$cgroup_pid(r1, &(0x7f0000000240), 0xb375) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 2.06073202s ago: executing program 32 (id=34): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x7}, 0x1c) recvfrom(r0, 0x0, 0x0, 0x2, 0x0, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) write$cgroup_pid(r1, &(0x7f0000000240), 0xb375) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 1.749115216s ago: executing program 3 (id=36): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000000)={r3}, &(0x7f0000000080)=0x8) 1.641935475s ago: executing program 3 (id=37): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000100)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000006c0)={0x44, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 607.957946ms ago: executing program 1 (id=38): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000380)={{0xd9, 0xffe, 0x8, 0x8009}, 'syz0\x00', 0x11}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffe, 0x2) dup3(r1, r0, 0x80000) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 461.738468ms ago: executing program 1 (id=39): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x202, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, 0x0}], 0x1, 0x26, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000000)="f00fc7484d36f08266060266b9800000c00f326635000400000f308bc1de780066b9aa0200000f3266b9ab0900000f32f2f031b3e759dc2c", 0x38}], 0x1, 0x9f6a364b3fac2a63, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 223.252931ms ago: executing program 1 (id=40): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x400) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000080)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000240)={0x1, 0x91cc, 0x2000000, 0x10000, 0x0, 0x0, 0x80, 0x0, 0xfffffffffffffffe}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r2, 0xc06c4124, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}) 132.217252ms ago: executing program 1 (id=41): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1) readv(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/75, 0x4b}], 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=42): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20008891}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0xc, 0x3032, 0xffffffffffffffff, 0x0) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000300)=""/84, 0x54}, {&(0x7f0000001bc0)=""/4091, 0xffb}, {&(0x7f0000000700)=""/226, 0xe2}, {&(0x7f0000000c40)=""/204, 0xcc}, {&(0x7f0000000b80)=""/174, 0xae}, {&(0x7f0000000540)=""/161, 0xa1}, {&(0x7f00000001c0)=""/80, 0x50}, {&(0x7f0000000380)=""/214, 0xd6}], 0x8}, 0x22120) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x480201, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.125' (ED25519) to the list of known hosts. [ 80.278846][ T5811] cgroup: Unknown subsys name 'net' [ 80.399102][ T5811] cgroup: Unknown subsys name 'cpuset' [ 80.408267][ T5811] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.014387][ T5811] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.093793][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.102085][ T5831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.111443][ T5832] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.120067][ T5832] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.123233][ T5831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.128482][ T5832] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.136418][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.143457][ T5832] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.149808][ T5831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.160024][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.164719][ T5831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.176387][ T5832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.178808][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.185677][ T5832] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.199262][ T5832] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.258585][ T5141] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.267807][ T5141] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.282531][ T5141] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.291214][ T5141] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.303184][ T5141] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.796086][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 84.849795][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 84.892442][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 85.156201][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.163860][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.172012][ T5823] bridge_slave_0: entered allmulticast mode [ 85.179855][ T5823] bridge_slave_0: entered promiscuous mode [ 85.188989][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.196504][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.203747][ T5824] bridge_slave_0: entered allmulticast mode [ 85.212050][ T5824] bridge_slave_0: entered promiscuous mode [ 85.220632][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.228313][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.235823][ T5822] bridge_slave_0: entered allmulticast mode [ 85.243887][ T5822] bridge_slave_0: entered promiscuous mode [ 85.259106][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.266657][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.274071][ T5823] bridge_slave_1: entered allmulticast mode [ 85.283284][ T5823] bridge_slave_1: entered promiscuous mode [ 85.291768][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.299513][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.307522][ T5824] bridge_slave_1: entered allmulticast mode [ 85.317537][ T5824] bridge_slave_1: entered promiscuous mode [ 85.325256][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.332953][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.340627][ T5822] bridge_slave_1: entered allmulticast mode [ 85.348926][ T5822] bridge_slave_1: entered promiscuous mode [ 85.437790][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 85.454034][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.468734][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.483214][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.503522][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.516886][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.530015][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.649423][ T5824] team0: Port device team_slave_0 added [ 85.661826][ T5822] team0: Port device team_slave_0 added [ 85.670529][ T5823] team0: Port device team_slave_0 added [ 85.685203][ T5824] team0: Port device team_slave_1 added [ 85.693828][ T5822] team0: Port device team_slave_1 added [ 85.702365][ T5823] team0: Port device team_slave_1 added [ 85.816443][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.823424][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.850419][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.863316][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.870731][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.878358][ T5827] bridge_slave_0: entered allmulticast mode [ 85.886365][ T5827] bridge_slave_0: entered promiscuous mode [ 85.896578][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.903542][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.929926][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.943627][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.950669][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.977079][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.989796][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.997036][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.023944][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.045529][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.053008][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.060659][ T5827] bridge_slave_1: entered allmulticast mode [ 86.069492][ T5827] bridge_slave_1: entered promiscuous mode [ 86.078322][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.085914][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.112445][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.125155][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.132112][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.158448][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.249587][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.264371][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.296078][ T5141] Bluetooth: hci2: command tx timeout [ 86.305073][ T5141] Bluetooth: hci0: command tx timeout [ 86.305276][ T5832] Bluetooth: hci1: command tx timeout [ 86.329678][ T5823] hsr_slave_0: entered promiscuous mode [ 86.336579][ T5823] hsr_slave_1: entered promiscuous mode [ 86.361803][ T5824] hsr_slave_0: entered promiscuous mode [ 86.368691][ T5824] hsr_slave_1: entered promiscuous mode [ 86.375727][ T5824] debugfs: 'hsr0' already exists in 'hsr' [ 86.381527][ T5824] Cannot create hsr debugfs directory [ 86.387050][ T5832] Bluetooth: hci3: command tx timeout [ 86.424562][ T5827] team0: Port device team_slave_0 added [ 86.434608][ T5827] team0: Port device team_slave_1 added [ 86.448215][ T5822] hsr_slave_0: entered promiscuous mode [ 86.455491][ T5822] hsr_slave_1: entered promiscuous mode [ 86.462289][ T5822] debugfs: 'hsr0' already exists in 'hsr' [ 86.468151][ T5822] Cannot create hsr debugfs directory [ 86.535753][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.542917][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.568869][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.582507][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.589817][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.616295][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.854850][ T5827] hsr_slave_0: entered promiscuous mode [ 86.862079][ T5827] hsr_slave_1: entered promiscuous mode [ 86.868838][ T5827] debugfs: 'hsr0' already exists in 'hsr' [ 86.874870][ T5827] Cannot create hsr debugfs directory [ 87.261352][ T5823] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.303840][ T5823] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.319331][ T5823] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.369092][ T5823] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.495926][ T5824] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.508328][ T5824] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.523324][ T5824] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.536135][ T5824] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.645979][ T5822] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.660518][ T5822] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.671423][ T5822] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.683950][ T5822] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.842994][ T5827] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.866571][ T5827] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.880189][ T5827] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.892277][ T5827] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.971301][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.043276][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.070190][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.093525][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.100917][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.150177][ T426] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.157410][ T426] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.169667][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.194099][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.283031][ T426] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.290291][ T426] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.302483][ T426] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.309765][ T426] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.356711][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.376036][ T5832] Bluetooth: hci0: command tx timeout [ 88.376330][ T5141] Bluetooth: hci2: command tx timeout [ 88.381492][ T5832] Bluetooth: hci1: command tx timeout [ 88.404309][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.435401][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.442653][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.455231][ T5832] Bluetooth: hci3: command tx timeout [ 88.503311][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.510620][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.527645][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.552665][ T5824] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.584061][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.591385][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.638303][ T426] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.645654][ T426] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.070944][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.146296][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.368495][ T5823] veth0_vlan: entered promiscuous mode [ 89.383685][ T5824] veth0_vlan: entered promiscuous mode [ 89.415948][ T5823] veth1_vlan: entered promiscuous mode [ 89.432512][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.448751][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.460726][ T5824] veth1_vlan: entered promiscuous mode [ 89.591226][ T5824] veth0_macvtap: entered promiscuous mode [ 89.614185][ T5823] veth0_macvtap: entered promiscuous mode [ 89.627411][ T5824] veth1_macvtap: entered promiscuous mode [ 89.660643][ T5822] veth0_vlan: entered promiscuous mode [ 89.670677][ T5823] veth1_macvtap: entered promiscuous mode [ 89.704422][ T5822] veth1_vlan: entered promiscuous mode [ 89.717638][ T5827] veth0_vlan: entered promiscuous mode [ 89.734114][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.764447][ T5827] veth1_vlan: entered promiscuous mode [ 89.784682][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.808465][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.829510][ T1113] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.855249][ T1113] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.873792][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.889987][ T1113] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.903394][ T1113] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.938788][ T5822] veth0_macvtap: entered promiscuous mode [ 89.963673][ T1113] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.973555][ T1113] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.989524][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.017674][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.033945][ T5822] veth1_macvtap: entered promiscuous mode [ 90.085584][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.094221][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.112067][ T5827] veth0_macvtap: entered promiscuous mode [ 90.141188][ T5827] veth1_macvtap: entered promiscuous mode [ 90.151537][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.168605][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.214494][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.231815][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.249334][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.259211][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.262522][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.277791][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.324125][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.358161][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.373234][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.383569][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.427363][ T5824] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 90.451867][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.455986][ T5832] Bluetooth: hci1: command tx timeout [ 90.461587][ T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.467081][ T51] Bluetooth: hci2: command tx timeout [ 90.476279][ T5141] Bluetooth: hci0: command tx timeout [ 90.518056][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.528697][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.540234][ T5141] Bluetooth: hci3: command tx timeout [ 90.618071][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.631651][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.722961][ T5918] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 90.774163][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.783496][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.888914][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.919089][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.985329][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.987825][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.010492][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.020291][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.408455][ T5932] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6'. [ 91.470450][ T5931] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-22) [ 91.674195][ T5941] netlink: 14 bytes leftover after parsing attributes in process `syz.3.9'. [ 92.120032][ T5950] process 'syz.2.20' launched '/dev/fd/6' with NULL argv: empty string added [ 92.136976][ T1212] cfg80211: failed to load regulatory.db [ 92.545774][ T5141] Bluetooth: hci0: command tx timeout [ 92.552583][ T5141] Bluetooth: hci1: command tx timeout [ 92.554574][ T5832] Bluetooth: hci2: command tx timeout [ 92.635103][ T51] Bluetooth: hci3: command tx timeout [ 92.771368][ T5960] tipc: Started in network mode [ 92.790442][ T5960] tipc: Node identity 4, cluster identity 4711 [ 92.846073][ T5960] tipc: Node number set to 4 [ 95.116774][ T24] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 95.315613][ T24] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 95.331468][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.349921][ T24] usb 4-1: Product: syz [ 95.354154][ T24] usb 4-1: Manufacturer: syz [ 95.360739][ T24] usb 4-1: SerialNumber: syz [ 95.372215][ T24] usb 4-1: config 0 descriptor?? [ 95.485324][ T5924] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 95.602200][ T24] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 95.678037][ T5924] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.699530][ T5924] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 95.724973][ T5924] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.753736][ T5924] usb 2-1: config 0 descriptor?? [ 95.800714][ T5982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.820606][ T5982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.894409][ T5999] ======================================================= [ 95.894409][ T5999] WARNING: The mand mount option has been deprecated and [ 95.894409][ T5999] and is ignored by this kernel. Remove the mand [ 95.894409][ T5999] option from the mount to silence this warning. [ 95.894409][ T5999] ======================================================= [ 96.008152][ T5989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.042330][ T5989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.071837][ T5924] usbhid 2-1:0.0: can't add hid device: -71 [ 96.081065][ T5924] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 96.112185][ T5924] usb 2-1: USB disconnect, device number 2 [ 96.263626][ T24] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 96.317398][ T24] usb 4-1: USB disconnect, device number 2 [ 96.389489][ T13] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xd5 [ 96.429753][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.561240][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.623725][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 96.634039][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 96.644031][ T5924] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 96.651765][ T5832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 96.653387][ T5832] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 96.668352][ T5832] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 96.677752][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.771583][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.817378][ T5924] usb 2-1: Using ep0 maxpacket: 32 [ 96.847140][ T5924] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.899057][ T5924] usb 2-1: config 0 interface 0 has no altsetting 0 [ 96.921022][ T5924] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.00 [ 96.948676][ T5924] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.971566][ T5924] usb 2-1: config 0 descriptor?? [ 96.983119][ T5924] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 97.009140][ T5924] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 97.170739][ T6007] chnl_net:caif_netlink_parms(): no params data found [ 97.187260][ T36] bridge_slave_1: left allmulticast mode [ 97.194482][ T36] bridge_slave_1: left promiscuous mode [ 97.205481][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.220703][ T36] bridge_slave_0: left allmulticast mode [ 97.226716][ T36] bridge_slave_0: left promiscuous mode [ 97.232864][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.276183][ T5892] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 97.406064][ T5989] ldusb 2-1:0.0: Read buffer overflow, 270 bytes dropped [ 97.422133][ T796] usb 2-1: USB disconnect, device number 3 [ 97.431692][ T796] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 97.447478][ T5892] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 97.457562][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.466180][ T5892] usb 4-1: Product: syz [ 97.473543][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 97.475619][ T5892] usb 4-1: Manufacturer: syz [ 97.488262][ T5892] usb 4-1: SerialNumber: syz [ 97.501525][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 97.511023][ T5892] usb 4-1: config 0 descriptor?? [ 97.518554][ T36] bond0 (unregistering): Released all slaves [ 97.727829][ T5892] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 97.755887][ T6007] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.764476][ T6007] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.772742][ T6007] bridge_slave_0: entered allmulticast mode [ 97.782738][ T6007] bridge_slave_0: entered promiscuous mode [ 97.808100][ T6007] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.816361][ T6007] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.824268][ T6007] bridge_slave_1: entered allmulticast mode [ 97.833030][ T6007] bridge_slave_1: entered promiscuous mode [ 97.899303][ T6007] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.915621][ T6007] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.948603][ T36] hsr_slave_0: left promiscuous mode [ 97.956062][ T36] hsr_slave_1: left promiscuous mode [ 97.963897][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.971983][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.983515][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.006873][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.031303][ T36] veth1_macvtap: left promiscuous mode [ 98.035926][ T6020] input: syz0 as /devices/virtual/input/input5 [ 98.039362][ T36] veth0_macvtap: left promiscuous mode [ 98.050863][ T36] veth1_vlan: left promiscuous mode [ 98.059850][ T36] veth0_vlan: left promiscuous mode [ 98.211921][ T6022] kvm: emulating exchange as write [ 98.527187][ T36] team0 (unregistering): Port device team_slave_1 removed [ 98.579675][ T36] team0 (unregistering): Port device team_slave_0 removed [ 98.705428][ T51] Bluetooth: hci1: command tx timeout [ 98.745621][ T5892] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 98.770550][ T5892] usb 4-1: USB disconnect, device number 3 [ 98.814947][ C1] list_del corruption, ffff88807becd890->next is NULL [ 98.822547][ C1] ------------[ cut here ]------------ [ 98.828007][ C1] kernel BUG at lib/list_debug.c:53! [ 98.833314][ C1] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 98.839670][ C1] CPU: 1 UID: 0 PID: 6007 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 98.849388][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 98.859551][ C1] RIP: 0010:__list_del_entry_valid_or_report+0xdf/0x190 [ 98.866690][ C1] Code: 49 39 1f 0f 85 9e 00 00 00 b0 01 5b 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc cc 48 c7 c7 a0 fc 29 8c 48 89 de e8 42 ee 63 fc 90 <0f> 0b 48 c7 c7 00 fd 29 8c 48 89 de e8 30 ee 63 fc 90 0f 0b 4c 89 [ 98.887013][ C1] RSP: 0018:ffffc90000a08d58 EFLAGS: 00010046 [ 98.893391][ C1] RAX: 0000000000000033 RBX: ffff88807becd890 RCX: 45ea1d9b6745f200 [ 98.901381][ C1] RDX: 0000000000000100 RSI: 0000000080000101 RDI: 0000000000000000 [ 98.909656][ C1] RBP: 0000000000000203 R08: ffffc90000a08ae7 R09: 1ffff9200014115c [ 98.917736][ C1] R10: dffffc0000000000 R11: fffff5200014115d R12: 1ffff1100f7d9b12 [ 98.925985][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 98.934498][ C1] FS: 0000555567a28500(0000) GS:ffff888125102000(0000) knlGS:0000000000000000 [ 98.943888][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 98.950649][ C1] CR2: 00007f009df87600 CR3: 000000007a118000 CR4: 00000000003526f0 [ 98.958897][ C1] Call Trace: [ 98.962197][ C1] [ 98.965219][ C1] dst_destroy+0x202/0x5a0 [ 98.969984][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 98.976292][ C1] ? rcu_core+0x751/0x1070 [ 98.981077][ C1] ? __pfx_dst_destroy_rcu+0x10/0x10 [ 98.986773][ C1] rcu_core+0x7cd/0x1070 [ 98.991134][ C1] ? __pfx_rcu_core+0x10/0x10 [ 98.995841][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 99.001131][ C1] ? sched_clock_cpu+0x74/0x440 [ 99.006074][ C1] handle_softirqs+0x22a/0x870 [ 99.011021][ C1] ? __irq_exit_rcu+0x5f/0x150 [ 99.015881][ C1] __irq_exit_rcu+0x5f/0x150 [ 99.020507][ C1] irq_exit_rcu+0x9/0x30 [ 99.024839][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 99.030507][ C1] [ 99.033497][ C1] [ 99.036713][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 99.043752][ C1] RIP: 0010:unwind_next_frame+0x9f9/0x23c0 [ 99.049701][ C1] Code: 8b 34 24 e9 a9 02 00 00 49 8d 5e 40 48 89 d8 48 c1 e8 03 80 3c 28 00 74 11 48 89 df e8 40 49 b9 00 48 8b 34 24 48 8b 54 24 08 <4c> 8b 23 48 8d 5a 01 48 89 d0 48 c1 e8 03 0f b6 04 28 84 c0 0f 85 [ 99.071427][ C1] RSP: 0018:ffffc90004546418 EFLAGS: 00000246 [ 99.077610][ C1] RAX: 1ffff920008a8ca5 RBX: ffffc90004546528 RCX: ffffffff904f58c8 [ 99.086566][ C1] RDX: ffffffff90cdb084 RSI: ffffffff90cdb088 RDI: ffffffff8c29f900 [ 99.095153][ C1] RBP: dffffc0000000000 R08: 000000000000000d R09: ffffffff8e960620 [ 99.103591][ C1] R10: ffffc90004546538 R11: ffffffff81b11850 R12: ffffffff90cdb089 [ 99.112104][ C1] R13: ffffc90004546538 R14: ffffc900045464e8 R15: ffffc90004546520 [ 99.120357][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 99.126828][ C1] ? unwind_next_frame+0xd4/0x23c0 [ 99.132163][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 99.137483][ C1] ? __unwind_start+0x5b8/0x760 [ 99.142614][ C1] ? stack_trace_save+0xa9/0x100 [ 99.147662][ C1] ? stack_trace_save+0xa9/0x100 [ 99.152620][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 99.159063][ C1] arch_stack_walk+0x11b/0x150 [ 99.164492][ C1] ? stack_trace_save+0xa9/0x100 [ 99.169720][ C1] stack_trace_save+0xa9/0x100 [ 99.174534][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 99.180014][ C1] ? kasan_save_track+0x4f/0x80 [ 99.185065][ C1] ? kasan_save_track+0x3e/0x80 [ 99.190147][ C1] ? __kasan_kmalloc+0x93/0xb0 [ 99.194944][ C1] ? __kmalloc_noprof+0x35c/0x760 [ 99.200006][ C1] ? __register_sysctl_table+0xba1/0x1340 [ 99.205740][ C1] ? neigh_sysctl_register+0x9b1/0xa90 [ 99.211671][ C1] kasan_save_track+0x3e/0x80 [ 99.216704][ C1] __kasan_kmalloc+0x93/0xb0 [ 99.221424][ C1] __kmalloc_node_track_caller_noprof+0x4db/0x7b0 [ 99.227963][ C1] ? __addrconf_sysctl_register+0xa7/0x4d0 [ 99.234251][ C1] ? __kmalloc_node_track_caller_noprof+0x34a/0x7b0 [ 99.241030][ C1] kmemdup_noprof+0x2b/0x70 [ 99.246092][ C1] __addrconf_sysctl_register+0xa7/0x4d0 [ 99.252053][ C1] ? __pfx_ndisc_ifinfo_sysctl_change+0x10/0x10 [ 99.258420][ C1] ? __pfx_neigh_sysctl_register+0x10/0x10 [ 99.264596][ C1] ? __pfx___addrconf_sysctl_register+0x10/0x10 [ 99.271170][ C1] ? mutex_init_lockdep+0xf9/0x130 [ 99.276557][ C1] addrconf_sysctl_register+0x168/0x1c0 [ 99.282124][ C1] ipv6_add_dev+0xd44/0x13c0 [ 99.287000][ C1] addrconf_notify+0x771/0x1050 [ 99.291931][ C1] notifier_call_chain+0x1be/0x400 [ 99.297857][ C1] register_netdevice+0x173a/0x1cf0 [ 99.303258][ C1] ? __pfx_register_netdevice+0x10/0x10 [ 99.308851][ C1] ? nla_strscpy+0x10f/0x170 [ 99.313710][ C1] veth_newlink+0x67b/0xb70 [ 99.318231][ C1] ? __pfx_veth_newlink+0x10/0x10 [ 99.323626][ C1] ? alloc_netdev_mqs+0xcd5/0x1200 [ 99.329090][ C1] ? rtnl_newlink_create+0x277/0xb70 [ 99.334773][ C1] ? rtnl_newlink+0x1666/0x1be0 [ 99.339824][ C1] ? rtnetlink_rcv_msg+0x7d5/0xbe0 [ 99.345047][ C1] ? netlink_unicast+0x80f/0x9b0 [ 99.350025][ C1] ? netlink_sendmsg+0x813/0xb40 [ 99.355086][ C1] ? sock_sendmsg_nosec+0x18f/0x1d0 [ 99.360389][ C1] ? do_syscall_64+0x14d/0xf80 [ 99.365558][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.372185][ C1] ? validate_linkmsg+0x765/0x950 [ 99.377444][ C1] ? __pfx_veth_newlink+0x10/0x10 [ 99.382752][ C1] rtnl_newlink_create+0x329/0xb70 [ 99.387876][ C1] ? __mutex_lock+0x5ac/0x1300 [ 99.392905][ C1] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 99.398709][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 99.404261][ C1] ? full_name_hash+0x92/0xe0 [ 99.409071][ C1] rtnl_newlink+0x1666/0x1be0 [ 99.414322][ C1] ? __pfx_rtnl_newlink+0x10/0x10 [ 99.419467][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 99.424688][ C1] ? kernel_text_address+0xa5/0xe0 [ 99.429949][ C1] ? __kernel_text_address+0xd/0x30 [ 99.435338][ C1] ? unwind_get_return_address+0x4d/0x90 [ 99.441419][ C1] ? __pfx_rtnl_newlink+0x10/0x10 [ 99.446559][ C1] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 99.451676][ C1] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 99.457102][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 99.462596][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 99.467638][ C1] netlink_rcv_skb+0x232/0x4b0 [ 99.472442][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 99.478261][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 99.483848][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 99.490076][ C1] netlink_unicast+0x80f/0x9b0 [ 99.494974][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 99.500527][ C1] ? netlink_sendmsg+0x650/0xb40 [ 99.505584][ C1] ? skb_put+0x11b/0x210 [ 99.510090][ C1] netlink_sendmsg+0x813/0xb40 [ 99.514880][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 99.520983][ C1] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 99.527412][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 99.533429][ C1] sock_sendmsg_nosec+0x18f/0x1d0 [ 99.538472][ C1] __sys_sendto+0x3ff/0x590 [ 99.543232][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 99.548404][ C1] ? rcu_is_watching+0x15/0xb0 [ 99.554139][ C1] __x64_sys_sendto+0xde/0x100 [ 99.558929][ C1] do_syscall_64+0x14d/0xf80 [ 99.563897][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.570188][ C1] ? clear_bhb_loop+0x40/0x90 [ 99.575456][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.581570][ C1] RIP: 0033:0x7f044135cfce [ 99.586188][ C1] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 99.606573][ C1] RSP: 002b:00007ffc25a4ec98 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 99.615694][ C1] RAX: ffffffffffffffda RBX: 0000555567a28500 RCX: 00007f044135cfce [ 99.624698][ C1] RDX: 0000000000000088 RSI: 00007f0442144670 RDI: 0000000000000003 [ 99.632846][ C1] RBP: 0000000000000001 R08: 00007ffc25a4ed14 R09: 000000000000000c [ 99.641493][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 99.650016][ C1] R13: 0000000000000000 R14: 00007f0442144670 R15: 0000000000000000 [ 99.658188][ C1] [ 99.661350][ C1] Modules linked in: [ 99.665792][ C1] ---[ end trace 0000000000000000 ]--- [ 99.671699][ C1] RIP: 0010:__list_del_entry_valid_or_report+0xdf/0x190 [ 99.678832][ C1] Code: 49 39 1f 0f 85 9e 00 00 00 b0 01 5b 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc cc 48 c7 c7 a0 fc 29 8c 48 89 de e8 42 ee 63 fc 90 <0f> 0b 48 c7 c7 00 fd 29 8c 48 89 de e8 30 ee 63 fc 90 0f 0b 4c 89 [ 99.699933][ C1] RSP: 0018:ffffc90000a08d58 EFLAGS: 00010046 [ 99.706463][ C1] RAX: 0000000000000033 RBX: ffff88807becd890 RCX: 45ea1d9b6745f200 [ 99.714925][ C1] RDX: 0000000000000100 RSI: 0000000080000101 RDI: 0000000000000000 [ 99.722998][ C1] RBP: 0000000000000203 R08: ffffc90000a08ae7 R09: 1ffff9200014115c [ 99.731059][ C1] R10: dffffc0000000000 R11: fffff5200014115d R12: 1ffff1100f7d9b12 [ 99.739819][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 99.748876][ C1] FS: 0000555567a28500(0000) GS:ffff888125102000(0000) knlGS:0000000000000000 [ 99.758233][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 99.765318][ C1] CR2: 00007f009df87600 CR3: 000000007a118000 CR4: 00000000003526f0 [ 99.773940][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 99.782003][ C1] Kernel Offset: disabled [ 99.786431][ C1] Rebooting in 86400 seconds..