last executing test programs: 12.912242411s ago: executing program 1 (id=45): syz_io_uring_setup(0x88b, 0x0, 0x0, &(0x7f0000000580)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000080)={0x11, 0x802, r3, 0x1, 0x0, 0x6, @local}, 0x14) syz_emit_ethernet(0x32, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb0000000000000802"], 0x0) 12.873092111s ago: executing program 3 (id=46): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004811) openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000200)) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009"], 0x0) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x541b, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r3 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f00000001c0)=0x2) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000480)={0x202, 0x200, 0x2, {0x4, @pix={0x7, 0x8, 0x34565559, 0x3, 0x800000, 0xfffffff3, 0x5, 0x2000983e, 0x1, 0x3, 0x2}}, 0x9}) socket$igmp(0x2, 0x3, 0x2) r4 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) socket$kcm(0x10, 0x2, 0x4) 12.783010691s ago: executing program 1 (id=47): socket$netlink(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() socket$kcm(0x1e, 0xa, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x5) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000280), 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000010008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r5}, 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c00000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800b0001006970766c616e00000c000280060001000200000008000500"], 0x4c}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) 11.866303367s ago: executing program 1 (id=49): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) gettid() r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000740)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000800)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x2c}, @ptr={0x70742a85, 0x0, &(0x7f0000000400)=""/216, 0xd8, 0x1, 0xffffffffffffffff}, @fda={0x66646185, 0x9, 0x1}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 9.72294108s ago: executing program 3 (id=54): syz_usb_connect(0x0, 0x24, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x69577000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) futex(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x2) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYRES16=r3, @ANYBLOB="01000400000000fdffff6500000008000300", @ANYRES32=r5], 0x2c}}, 0x0) 9.125835864s ago: executing program 2 (id=58): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)={0x28, r1, 0x4c1dad3e3d6a7499, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000080}, 0x2400c000) 8.014813671s ago: executing program 2 (id=61): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000, 0xa, &(0x7f0000ffb000/0x3000)=nil) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x1, @empty, 0x200}, 0x1c) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f0000000040)={0xb, 0x3f, 0x7fffffff, 0x0, 0xd}) listen(r3, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}]}], {0x14}}, 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x8044) r7 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x2400c840}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x94, 0x2, 0x1, 0x301, 0x0, 0x0, {0x3}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_NAT_DST={0x3c, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @broadcast}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}]}, @CTA_SEQ_ADJ_ORIG={0x34, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xfffffff8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xd}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}]}, 0x94}, 0x1, 0x0, 0x0, 0x4018000}, 0x880) connect$unix(r7, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x8010, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 7.960927611s ago: executing program 0 (id=62): unshare(0x2040400) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) mknod(&(0x7f0000000000)='./file0\x00', 0x1000, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) r2 = syz_io_uring_setup(0x10e, &(0x7f0000000180)={0x0, 0x8d2dc, 0x0, 0x2}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r1, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r2, 0x47f5, 0x0, 0x0, 0x0, 0x0) 7.131567646s ago: executing program 1 (id=63): ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)={@id={0x2, 0x0, @d}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ca1ccf40030450f8c919010203010902120001"], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mkdir(0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = openat$cgroup_pressure(r3, 0x0, 0x2, 0x0) write$cgroup_pressure(r4, &(0x7f0000000080)={'full', 0x5f, 0x80000005, 0x20, 0x4}, 0x2f) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x8004587d, &(0x7f0000000080)) 6.870984638s ago: executing program 0 (id=64): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x6) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00'}, 0x80) r4 = epoll_create1(0x0) r5 = fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@cgroup=r5, r3, 0x11, 0x0, r5}, 0x14) 6.460451971s ago: executing program 2 (id=67): r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000200)={0xf000000, 0x1, 0xfffffffe, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x98f910, 0x7fff, '\x00', @string=&(0x7f0000000080)=0x81}}) 6.347061861s ago: executing program 2 (id=68): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') getdents64(r0, &(0x7f0000000080)=""/58, 0x3a) getdents(r0, 0xffffffffffffffff, 0x5a) 6.323219961s ago: executing program 2 (id=69): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, "f896e404"}, @local=@item_012={0x1, 0x2, 0x2, 'e'}, @main=@item_012={0x2, 0x0, 0x9, "f792"}, @main=@item_4={0x3, 0x0, 0x0, "9ef12d19"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0x501c4814, &(0x7f00000000c0)={0x1, 0xffffffff}) 6.254363952s ago: executing program 3 (id=70): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x189802) syz_io_uring_setup(0x498, &(0x7f00000000c0)={0x0, 0x79af, 0x400, 0xfffffffc, 0x272}, &(0x7f0000000340), &(0x7f0000000040)) execve(&(0x7f0000000180)='./file0\x00', &(0x7f00000003c0)={[0x0, &(0x7f0000000380)='/dev/snd/midiC#D#\x00']}, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x9c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x9c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) 5.663030745s ago: executing program 0 (id=71): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x401) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000380)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/233, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x1, 0x0, &(0x7f0000000700)=""/88, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001c40)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) ioctl$FS_IOC_GETVERSION(r0, 0x4008af12, &(0x7f0000000600)) 5.354511628s ago: executing program 3 (id=73): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) gettid() r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000740)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000800)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x2c}, @ptr={0x70742a85, 0x0, &(0x7f0000000400)=""/216, 0xd8, 0x1, 0xffffffffffffffff}, @fda={0x66646185, 0x9, 0x1}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 5.275015928s ago: executing program 0 (id=74): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x9, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) sendmmsg$inet(r0, &(0x7f0000008b80)=[{{0x0, 0x0, 0x0}}], 0x1a000, 0x40000) 4.570787622s ago: executing program 4 (id=78): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$peekuser(0x3, r0, 0x80) 4.504523603s ago: executing program 4 (id=79): socket$alg(0x26, 0x5, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x800) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r1, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x6}}, 0x20) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200"], 0x0}, 0x94) r6 = syz_open_dev$loop(&(0x7f0000000080), 0x401, 0x800600) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x84, @local, 0x15, 0x3, 'lc\x00', 0x1, 0x4, 0x8}, 0x2c) r8 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000340)={{0x84, @loopback, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3a}, 0x4e23, 0x2, 0x0, 0x12d61, 0xe}}, 0x44) sendmsg$sock(r8, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x20000000) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000440)='./cgroup\x00', 0x2) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000000c0)={0xffffffffffffffff, 0x1000, {0x0, 0x0, 0x0, 0x6, 0x1, 0x0, 0x0, 0x1b, 0x15, "54c870a8634edc745dfa1ab0a34a10622e64ee4edb80cc9bd36b93b23733e6180aa539ec68114b5aba1c98911df5ba72296d56740d56ea4d0434aa3592a47913", "fc0177a6f3bb16d5d5568693e0e50bbf206c9d8db97c00040000000000005f8a654e14dc7c4cc6020000003b3acc9f02cd3eac8be657b534bfa1142100696b29", "c921095856cdf9fd8199034f3b875fe5c92394e3c7a178fb1c16c99189819ef4", [0x1, 0x9]}}) 3.556569179s ago: executing program 4 (id=80): syz_usb_connect(0x0, 0x24, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x69577000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) futex(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x2) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYRES16=r3, @ANYBLOB="01000400000000fdffff6500000008000300", @ANYRES32=r5], 0x2c}}, 0x0) 3.24281373s ago: executing program 1 (id=81): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x6) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00'}, 0x80) r5 = epoll_create1(0x0) r6 = fcntl$dupfd(r5, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@cgroup=r6, r4, 0x11, 0x0, r6}, 0x14) 2.651308194s ago: executing program 2 (id=82): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="bcea"]) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f00000001c0)={0x51, 0xffff, 0x560c, {0x803, 0x5d5}, {0xfffa, 0x2}, @period={0x59, 0x2, 0x4, 0x6d, 0x9ee, {0x2, 0xb, 0xfffb, 0xa}, 0x0, 0x0}}) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000001c0)={0x51, 0xffff, 0x560c, {0x803, 0x5d5}, {0xfffa, 0x2}, @period={0x59, 0x2, 0x4, 0x6d, 0x9ee, {0x2, 0xb, 0xfffb, 0xa}, 0x0, 0x0}}) 1.889772588s ago: executing program 3 (id=83): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$sysfs(0xffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_emit_ethernet(0x2a, &(0x7f0000000180)=ANY=[@ANYBLOB="e625e5e1479260f9ffff44f308060401080006040001aaaaaaaaaaaae0000002bbbb0800000000852734ab446f6b7f1d840000"], 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0x80000003) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) r2 = dup2(r1, r1) read$FUSE(r2, &(0x7f00000063c0)={0x2020}, 0x2020) syz_usb_connect(0x1, 0x2d, 0x0, 0x0) 1.863819609s ago: executing program 0 (id=84): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x721701, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r1, 0x641e) r2 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeda, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffb9, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0xfffffffffffffe5f) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) write(r2, &(0x7f00000001c0)="240000005800410f9c00f4f90085b3025cb1", 0x12) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f00000003c0)) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), r1) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="cc030000", @ANYRES16=r9, @ANYBLOB="000228bd7000ffdbdf2546000000080001007063690011000200303030303a30303a31302e300000000008008e00020000000c008f0000000000000000000c0090000900000000000000080001007063690011000200303030303a30303a31302e300000000008008e00000000000c008f0002000000000000000c00900000000000010000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00030000000c008f00c2060000000000000c0090000700000000000000"], 0xcc}, 0x1, 0x0, 0x0, 0x4800}, 0x5) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r11}, 0x18) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000840)={r10, &(0x7f0000000640), 0x0}, 0x20) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x4c, r7, 0xd55319eec59dfa33, 0xfffffffe, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7, 0x67}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'pim6reg1\x00'}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc804}, 0xc2010) 1.74297348s ago: executing program 1 (id=85): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, 0x0, 0x0) r4 = syz_open_procfs(0x0, 0x0) read$FUSE(r4, &(0x7f0000000980)={0x2020}, 0x2020) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000020303000000000800010001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r7, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'macvlan0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010000000000540012800c0001006d6163766c616e0044000280060002000100000008000100010000000800030003000000080007000500000008000100100000000600020001000000100005800a000400aaaaaaaaaa2e0000080005", @ANYRES32=r8, @ANYBLOB='\b'], 0x84}}, 0x20008040) ioctl$HCIINQUIRY(r5, 0x400448ca, 0x0) 934.575535ms ago: executing program 0 (id=86): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x700, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @empty}}, @sadb_address={0x3, 0x6, 0xb8, 0x0, 0x0, @in={0x2, 0x3, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, 0x20000001}]}, 0x50}, 0x1, 0x7}, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x20}}, 0x4008840) capset(0x0, &(0x7f0000000280)={0x0, 0x7, 0x0, 0x81, 0xffffffff}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r4, 0x5608) 432.990118ms ago: executing program 4 (id=87): r0 = socket$inet6(0xa, 0x3, 0x8) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@generic={0x8, 0x2, 0x3, 0x64, 0x7f}]}, 0x0, 0xffffffff}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$set_reqkey_keyring(0xf, 0xfffffffb) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000380)) socket$netlink(0x10, 0x3, 0x4) openat$cuse(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) mount$cgroup(0x0, &(0x7f0000002980)='.\x00', &(0x7f00000029c0), 0x84, &(0x7f0000000040)={[{@none}, {@name={'name', 0x3d, 'none\xc8\xec\x00'/21}}]}) 210.672329ms ago: executing program 4 (id=88): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) r2 = syz_io_uring_setup(0x10f, &(0x7f00000009c0)={0x0, 0x46ee, 0x10000, 0xffffdffd, 0x32e}, &(0x7f0000000140)=0x0, &(0x7f0000001080)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r0, 0x22, &(0x7f00000000c0)=@un=@file={0x1, './file0\x00'}, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x3516, 0x67f, 0x64, 0x0, 0x0) 50.88909ms ago: executing program 4 (id=89): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) close(r0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x4e21, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0xb}}}, 0xb8}}, 0x0) 0s ago: executing program 3 (id=90): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) sendmsg$inet(r4, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}, @noop]}}}], 0x40}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.53' (ED25519) to the list of known hosts. [ 47.747715][ T4171] cgroup: Unknown subsys name 'net' [ 47.876272][ T4171] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 49.067873][ T4171] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 50.375934][ T4181] chnl_net:caif_netlink_parms(): no params data found [ 50.457372][ T4196] chnl_net:caif_netlink_parms(): no params data found [ 50.527027][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 50.574020][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 50.583731][ T4181] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.590931][ T4181] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.599398][ T4181] device bridge_slave_0 entered promiscuous mode [ 50.611787][ T4181] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.618826][ T4181] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.626916][ T4181] device bridge_slave_1 entered promiscuous mode [ 50.642366][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.649419][ T4196] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.657493][ T4196] device bridge_slave_0 entered promiscuous mode [ 50.683630][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 50.693336][ T4196] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.700390][ T4196] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.708271][ T4196] device bridge_slave_1 entered promiscuous mode [ 50.758968][ T4196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.773238][ T4181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.784308][ T4181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.803425][ T4196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.864050][ T4181] team0: Port device team_slave_0 added [ 50.870028][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.877263][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.885364][ T4182] device bridge_slave_0 entered promiscuous mode [ 50.908468][ T4196] team0: Port device team_slave_0 added [ 50.915525][ T4181] team0: Port device team_slave_1 added [ 50.921819][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.928865][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.936670][ T4182] device bridge_slave_1 entered promiscuous mode [ 50.956941][ T4196] team0: Port device team_slave_1 added [ 50.980257][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.987510][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.995328][ T4183] device bridge_slave_0 entered promiscuous mode [ 51.002833][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.009878][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.017591][ T4190] device bridge_slave_0 entered promiscuous mode [ 51.042993][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.050096][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.058228][ T4183] device bridge_slave_1 entered promiscuous mode [ 51.065144][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.072495][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.080035][ T4190] device bridge_slave_1 entered promiscuous mode [ 51.087619][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.094839][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.120797][ T4196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.132845][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.139785][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.165940][ T4181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.178918][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.200348][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.207401][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.233417][ T4196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.244996][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.252223][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.278836][ T4181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.291670][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.314452][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.339748][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.350260][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.382996][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.405552][ T4190] team0: Port device team_slave_0 added [ 51.420405][ T4182] team0: Port device team_slave_0 added [ 51.439384][ T4190] team0: Port device team_slave_1 added [ 51.447840][ T4196] device hsr_slave_0 entered promiscuous mode [ 51.455108][ T4196] device hsr_slave_1 entered promiscuous mode [ 51.462666][ T4182] team0: Port device team_slave_1 added [ 51.501971][ T4183] team0: Port device team_slave_0 added [ 51.518000][ T4181] device hsr_slave_0 entered promiscuous mode [ 51.524711][ T4181] device hsr_slave_1 entered promiscuous mode [ 51.536654][ T4181] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 51.544452][ T4181] Cannot create hsr debugfs directory [ 51.550989][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.558071][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.584086][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.596545][ T4183] team0: Port device team_slave_1 added [ 51.602854][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.609790][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.635876][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.664049][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.671006][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.697534][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.716206][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.723348][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.749585][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.796917][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.804102][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.830125][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.865339][ T4182] device hsr_slave_0 entered promiscuous mode [ 51.872367][ T4182] device hsr_slave_1 entered promiscuous mode [ 51.878803][ T4182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 51.886424][ T4182] Cannot create hsr debugfs directory [ 51.896246][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.903827][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.929862][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.996265][ T4190] device hsr_slave_0 entered promiscuous mode [ 52.002965][ T4190] device hsr_slave_1 entered promiscuous mode [ 52.009408][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.017012][ T4190] Cannot create hsr debugfs directory [ 52.032030][ T4183] device hsr_slave_0 entered promiscuous mode [ 52.038614][ T4183] device hsr_slave_1 entered promiscuous mode [ 52.045226][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.052899][ T4183] Cannot create hsr debugfs directory [ 52.161755][ T4184] Bluetooth: hci0: command 0x0409 tx timeout [ 52.174942][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 52.181045][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 52.200779][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 52.206994][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 52.302940][ T4181] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 52.319010][ T4181] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 52.329096][ T4181] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 52.338477][ T4181] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 52.371519][ T4196] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 52.380912][ T4196] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 52.393891][ T4196] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 52.403317][ T4196] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 52.481532][ T4182] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 52.490979][ T4182] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 52.500641][ T4182] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 52.509897][ T4182] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 52.568227][ T4183] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 52.580435][ T4183] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 52.596380][ T4181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.611362][ T4183] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 52.623618][ T4183] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 52.639917][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.654863][ T4181] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.666649][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.675620][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.697026][ T4196] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.716245][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.725139][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.733308][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.742979][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.752446][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.759583][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.767994][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.781922][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.790479][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.799136][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.806218][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.833281][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.845426][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.854157][ T428] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.861257][ T428] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.870945][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.899823][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.908411][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.917338][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.926499][ T428] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.933586][ T428] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.943286][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.951867][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.962602][ T4190] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 52.975952][ T4190] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 52.984745][ T4190] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 53.003759][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.012715][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.023848][ T4190] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 53.043872][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.053184][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.062086][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.070321][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.079810][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.088859][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.106567][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.125703][ T4181] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.137585][ T4181] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.145469][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.157319][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.165925][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.177562][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.186542][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.216616][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.225165][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.236442][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.245625][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.256464][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.264156][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.272044][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.280203][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.300126][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.317096][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.342099][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.349874][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.359656][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.370203][ T428] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.377301][ T428] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.387311][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.396260][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.405004][ T428] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.412068][ T428] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.426415][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.434565][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.443127][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.464453][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.474449][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.483971][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.495273][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.508944][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.524594][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.534290][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.549328][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.569936][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.581908][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.610185][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.627148][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.639246][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.649281][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.659291][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.668132][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.675223][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.685176][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.698619][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 53.706233][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 53.724981][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.734282][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.748432][ T1226] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.755533][ T1226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.779031][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.791378][ T4181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.805472][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.816136][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.827653][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 53.839939][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 53.857438][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.892721][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.899874][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.908360][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.917649][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.926917][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.937301][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.947088][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.955950][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.964889][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.973638][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.005164][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.014176][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.028027][ T1226] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.035142][ T1226] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.049396][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.057135][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.064715][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.073269][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.082272][ T1226] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.089315][ T1226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.096987][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.105874][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.114294][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.122424][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.130564][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.139015][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.153067][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.165066][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.181421][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.189659][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.202715][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.217290][ T4181] device veth0_vlan entered promiscuous mode [ 54.239099][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.247117][ T4231] Bluetooth: hci4: command 0x041b tx timeout [ 54.251346][ T13] Bluetooth: hci2: command 0x041b tx timeout [ 54.255309][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.259104][ T13] Bluetooth: hci1: command 0x041b tx timeout [ 54.267864][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.284490][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.292553][ T13] Bluetooth: hci3: command 0x041b tx timeout [ 54.293527][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.298603][ T13] Bluetooth: hci0: command 0x041b tx timeout [ 54.307607][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.321965][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.336971][ T4181] device veth1_vlan entered promiscuous mode [ 54.365784][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 54.376504][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.392663][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.401049][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.414846][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.423989][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.432642][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.461996][ T4196] device veth0_vlan entered promiscuous mode [ 54.480766][ T4196] device veth1_vlan entered promiscuous mode [ 54.489678][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.500140][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.509670][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.518258][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.527227][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 54.549933][ T4182] device veth0_vlan entered promiscuous mode [ 54.582503][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.590910][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.605037][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 54.618692][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.627683][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.636795][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.645411][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.657655][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.665519][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.673612][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.681673][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.694893][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.711886][ T4181] device veth0_macvtap entered promiscuous mode [ 54.724968][ T4182] device veth1_vlan entered promiscuous mode [ 54.741565][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 54.749645][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 54.759502][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.769428][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.782950][ T4181] device veth1_macvtap entered promiscuous mode [ 54.791519][ T4196] device veth0_macvtap entered promiscuous mode [ 54.812888][ T4196] device veth1_macvtap entered promiscuous mode [ 54.828427][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.840776][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.851805][ T4181] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.860719][ T4181] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.871256][ T4181] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.879948][ T4181] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.898287][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.909437][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.922793][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.930130][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 54.938549][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 54.947132][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 54.955859][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 54.964466][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.973343][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.982110][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.990468][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.999225][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.007475][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.016341][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.024874][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.059330][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.069343][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.080903][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.103717][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.115018][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.127123][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.135851][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.145196][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.154120][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.163472][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.172538][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.180950][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.189808][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.198368][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.208093][ T4182] device veth0_macvtap entered promiscuous mode [ 55.233329][ T4196] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.244759][ T4196] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.253946][ T4196] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.262765][ T4196] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.275263][ T4183] device veth0_vlan entered promiscuous mode [ 55.286168][ T4182] device veth1_macvtap entered promiscuous mode [ 55.305356][ T4183] device veth1_vlan entered promiscuous mode [ 55.315646][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.324145][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.332532][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.340423][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.349923][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.421661][ T1226] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.423222][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.429617][ T1226] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.444179][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.458819][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.469484][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.481441][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.489123][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.497649][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.506049][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.515194][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 55.524035][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.532704][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.541508][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.549387][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.559978][ T4190] device veth0_vlan entered promiscuous mode [ 55.574516][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.583280][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.612618][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.624665][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.635911][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.646433][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.657225][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.668677][ T4190] device veth1_vlan entered promiscuous mode [ 55.683362][ T4183] device veth0_macvtap entered promiscuous mode [ 55.699914][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.704424][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.708543][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.722602][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.734622][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.744089][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 55.764293][ T4182] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.774587][ T4182] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.785533][ T4182] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.794478][ T4182] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.808484][ T4183] device veth1_macvtap entered promiscuous mode [ 55.848400][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.860922][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.872824][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.883286][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.893744][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.904443][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.920720][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.941768][ T4190] device veth0_macvtap entered promiscuous mode [ 55.957922][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.966530][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.975674][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.984700][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.994057][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.003155][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.032258][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.045894][ T1226] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.054850][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.065448][ T1226] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.077314][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.091877][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.102716][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.110949][ T4292] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 56.113632][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.141023][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.160139][ T4190] device veth1_macvtap entered promiscuous mode [ 56.170156][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.179030][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.187603][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.197514][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.215716][ T4183] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.227472][ T4183] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.237097][ T4183] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.247807][ T4183] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.312678][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.321630][ T4231] Bluetooth: hci1: command 0x040f tx timeout [ 56.322295][ T1107] Bluetooth: hci0: command 0x040f tx timeout [ 56.327652][ T4231] Bluetooth: hci2: command 0x040f tx timeout [ 56.340374][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.347716][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.347733][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.347742][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.347751][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.347760][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.347770][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.347779][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.347790][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.349001][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.371203][ T1107] Bluetooth: hci3: command 0x040f tx timeout [ 56.387695][ T4231] Bluetooth: hci4: command 0x040f tx timeout [ 56.394039][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.463011][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.473621][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.486367][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.496958][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.507786][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.518241][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.529663][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.546176][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.561970][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.573919][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.584008][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.592876][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.603239][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.623870][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.632236][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.640919][ T4190] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.650862][ T4190] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.663741][ T4190] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.673258][ T4190] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.705823][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.720891][ T4298] tipc: Started in network mode [ 56.727835][ T4298] tipc: Node identity fefe9efb2eea, cluster identity 4711 [ 56.735414][ T4298] tipc: Enabled bearer , priority 0 [ 56.748319][ T4298] device syzkaller0 entered promiscuous mode [ 56.810908][ T4298] tipc: Resetting bearer [ 56.830528][ T1226] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.839625][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.848566][ T1226] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.859657][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.867641][ T4301] loop4: detected capacity change from 0 to 128 [ 56.887427][ T4296] tipc: Resetting bearer [ 56.894481][ T4301] ======================================================= [ 56.894481][ T4301] WARNING: The mand mount option has been deprecated and [ 56.894481][ T4301] and is ignored by this kernel. Remove the mand [ 56.894481][ T4301] option from the mount to silence this warning. [ 56.894481][ T4301] ======================================================= [ 56.943672][ T4296] tipc: Disabling bearer [ 56.965580][ T4301] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 56.985314][ T4301] hpfs: filesystem error: improperly stopped [ 56.992562][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.000473][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.005812][ T4301] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 57.023072][ T4301] hpfs: You really don't want any checks? You are crazy... [ 57.030575][ T4301] hpfs: hpfs_map_sector(): read error [ 57.048507][ T4301] hpfs: code page support is disabled [ 57.056740][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.082666][ T4301] hpfs: hpfs_map_4sectors(): unaligned read [ 57.109698][ T4301] hpfs: hpfs_map_4sectors(): unaligned read [ 57.117839][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.141303][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.150362][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.151227][ T4301] hpfs: filesystem error: unable to find root dir [ 57.175509][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.231659][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.277069][ T428] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.292073][ T428] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.332227][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.922048][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 58.035374][ T4315] loop0: detected capacity change from 0 to 32768 [ 58.071692][ T4315] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.1 (4315) [ 58.161460][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 58.182104][ T4315] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 58.212642][ T4315] BTRFS info (device loop0): using free space tree [ 58.231177][ T4315] BTRFS info (device loop0): has skinny extents [ 58.413041][ T4255] Bluetooth: hci3: command 0x0419 tx timeout [ 58.431522][ T4255] Bluetooth: hci2: command 0x0419 tx timeout [ 58.460674][ T4255] Bluetooth: hci0: command 0x0419 tx timeout [ 58.481012][ T4255] Bluetooth: hci1: command 0x0419 tx timeout [ 58.490356][ T4255] Bluetooth: hci4: command 0x0419 tx timeout [ 58.634579][ T4315] BTRFS info (device loop0): enabling ssd optimizations [ 58.881458][ T4255] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 59.191233][ T4255] usb 3-1: Using ep0 maxpacket: 8 [ 59.331327][ T4255] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 59.370573][ T4255] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 59.431621][ T4255] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 59.503924][ T4255] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 59.581600][ T4255] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 59.621939][ T4255] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.732467][ T4255] hub 3-1:1.0: bad descriptor, ignoring hub [ 59.758576][ T4255] hub: probe of 3-1:1.0 failed with error -5 [ 59.786152][ T4255] cdc_wdm 3-1:1.0: skipping garbage [ 59.836446][ T4255] cdc_wdm 3-1:1.0: skipping garbage [ 59.924296][ T4255] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 59.954050][ T4255] cdc_wdm 3-1:1.0: Unknown control protocol [ 60.053821][ T4255] usb 3-1: USB disconnect, device number 2 [ 60.410507][ T4383] IPVS: lc: FWM 3 0x00000003 - no destination available [ 60.418292][ C0] IPVS: lc: FWM 3 0x00000003 - no destination available [ 60.551496][ T4255] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 60.867022][ T4255] usb 3-1: Using ep0 maxpacket: 8 [ 61.201908][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 61.211108][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 61.220042][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 61.229445][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 61.230596][ T4255] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 61.244279][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 61.257342][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 62.013753][ T4255] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 62.129908][ T4255] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 62.187258][ T4255] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 62.231661][ T4255] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 62.286706][ T4255] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.351102][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 62.360156][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 62.431362][ T4255] usb 3-1: can't set config #1, error -71 [ 62.442188][ T4255] usb 3-1: USB disconnect, device number 3 [ 62.911332][ T4413] process 'syz.3.30' launched './file1' with NULL argv: empty string added [ 63.471666][ T4184] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 63.626649][ T4428] VFS: Lookup of 'binder0' in fuse fuse would have caused loop [ 63.841507][ T4184] usb 4-1: config 0 has too many interfaces: 204, using maximum allowed: 32 [ 63.873587][ T4184] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 204 [ 63.924226][ T4184] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.982158][ T4184] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.056042][ T4184] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 64.109783][ T4184] usb 4-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 64.150464][ T4184] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.193981][ T4184] usb 4-1: config 0 descriptor?? [ 65.330211][ T4184] hid-generic 0003:28BD:0909.0001: unknown main item tag 0x0 [ 65.385239][ T4184] hid-generic 0003:28BD:0909.0001: unknown main item tag 0x0 [ 65.445443][ T4184] hid-generic 0003:28BD:0909.0001: unknown main item tag 0x0 [ 65.473128][ T4184] hid-generic 0003:28BD:0909.0001: unknown main item tag 0x0 [ 65.515925][ T4184] hid-generic 0003:28BD:0909.0001: unknown main item tag 0x0 [ 65.539987][ T4184] hid-generic 0003:28BD:0909.0001: unknown main item tag 0x0 [ 65.566550][ T4184] hid-generic 0003:28BD:0909.0001: unknown main item tag 0x0 [ 65.618963][ T4184] hid-generic 0003:28BD:0909.0001: hidraw0: USB HID v0.00 Device [HID 28bd:0909] on usb-dummy_hcd.3-1/input0 [ 65.676115][ T4184] usb 4-1: USB disconnect, device number 2 [ 65.826239][ T4454] fido_id[4454]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 65.971213][ T3520] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 66.226140][ T3520] usb 5-1: Using ep0 maxpacket: 8 [ 66.351212][ T3520] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 66.436634][ T3520] usb 5-1: config 179 has no interface number 0 [ 66.451202][ T3520] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 66.463594][ T3520] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 66.475207][ T3520] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 66.552195][ T4473] netlink: 8 bytes leftover after parsing attributes in process `syz.1.47'. [ 66.819839][ T3520] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 67.084764][ T3520] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 67.101186][ T3520] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 67.110495][ T3520] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.141421][ T4443] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 67.240392][ T4381] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 67.445864][ T3520] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input6 [ 67.950452][ T4255] usb 5-1: USB disconnect, device number 2 [ 67.961113][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 68.269223][ T4255] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 68.576398][ T4491] IPVS: lc: FWM 3 0x00000003 - no destination available [ 68.586910][ C1] IPVS: lc: FWM 3 0x00000003 - no destination available [ 69.151195][ T4381] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 69.268009][ T4381] usb 4-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 69.297636][ T4381] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 69.318718][ T4381] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.362715][ T4381] usb 4-1: can't set config #27, error -71 [ 69.388667][ T4381] usb 4-1: USB disconnect, device number 3 [ 70.035667][ T4502] program syz.4.52 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 70.941309][ T4502] netlink: 4 bytes leftover after parsing attributes in process `syz.4.52'. [ 71.124693][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.131397][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.446993][ T3520] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 72.851557][ T3520] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 72.873056][ T3520] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 73.112068][ T3520] usb 2-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice=19.c9 [ 73.131294][ T4381] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 73.488337][ T3520] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.583004][ T3520] usb 2-1: Product: syz [ 73.627642][ T3520] usb 2-1: Manufacturer: syz [ 73.701241][ T3520] usb 2-1: SerialNumber: syz [ 73.758422][ T3520] usb 2-1: config 0 descriptor?? [ 73.977982][ T4568] Zero length message leads to an empty skb [ 74.181381][ T4381] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 74.196504][ T4381] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 74.226160][ T4381] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 74.244152][ T4381] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.266072][ T4381] usb 3-1: config 0 descriptor?? [ 74.313192][ T4381] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 74.862444][ T4584] IPVS: lc: FWM 3 0x00000003 - no destination available [ 74.869690][ C1] IPVS: lc: FWM 3 0x00000003 - no destination available [ 75.629991][ T4248] usb 2-1: USB disconnect, device number 2 [ 76.269733][ T26] cfg80211: failed to load regulatory.db [ 76.449892][ T26] usb 3-1: USB disconnect, device number 4 [ 77.021185][ T26] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 77.329751][ T26] usb 3-1: Using ep0 maxpacket: 8 [ 77.821536][ T26] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 77.883460][ T26] usb 3-1: config 179 has no interface number 0 [ 77.955514][ T26] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 78.078382][ T26] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 78.106365][ T26] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 78.118170][ T26] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 78.201830][ T26] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 78.224053][ T26] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 78.233772][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.261843][ T4596] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 78.274502][ T4610] netlink: 8 bytes leftover after parsing attributes in process `syz.1.85'. [ 78.284635][ T4610] netlink: 8 bytes leftover after parsing attributes in process `syz.1.85'. [ 78.594059][ T26] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input7 [ 78.925936][ T4453] usb 3-1: USB disconnect, device number 5 [ 78.931890][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 78.931953][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 79.000188][ T4453] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 79.142247][ T4621] ================================================================== [ 79.150551][ T4621] BUG: KASAN: slab-out-of-bounds in xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 79.159766][ T4621] Read of size 1 at addr ffff8880621ab608 by task syz.4.89/4621 [ 79.167394][ T4621] [ 79.169722][ T4621] CPU: 1 PID: 4621 Comm: syz.4.89 Not tainted syzkaller #0 [ 79.176916][ T4621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 79.186979][ T4621] Call Trace: [ 79.190257][ T4621] [ 79.193202][ T4621] dump_stack_lvl+0x168/0x230 [ 79.197895][ T4621] ? show_regs_print_info+0x20/0x20 [ 79.203103][ T4621] ? load_image+0x3b0/0x3b0 [ 79.207614][ T4621] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 79.212997][ T4621] ? xfrm_pol_bin_obj+0x140/0x140 [ 79.218032][ T4621] print_address_description+0x60/0x2d0 [ 79.223587][ T4621] ? xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 79.230098][ T4621] kasan_report+0xdf/0x130 [ 79.234520][ T4621] ? xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 79.241029][ T4621] xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 79.247364][ T4621] ? xfrm_policy_addr_delta+0x212/0x340 [ 79.252915][ T4621] xfrm_policy_inexact_insert_node+0x950/0xb60 [ 79.259077][ T4621] ? xfrm_policy_alloc+0x75/0x2b0 [ 79.264119][ T4621] xfrm_policy_inexact_alloc_chain+0x7cf/0xea0 [ 79.270296][ T4621] ? xfrm_policy_inexact_insert+0xe0/0x1460 [ 79.276201][ T4621] xfrm_policy_inexact_insert+0xe0/0x1460 [ 79.281936][ T4621] ? __get_hash_thresh+0x105/0x410 [ 79.287052][ T4621] ? policy_hash_bysel+0x10a/0x570 [ 79.292179][ T4621] xfrm_policy_insert+0x112/0x930 [ 79.297220][ T4621] xfrm_add_policy+0x4d6/0x860 [ 79.302000][ T4621] ? xfrm_dump_sa_done+0xc0/0xc0 [ 79.306944][ T4621] ? apparmor_capable+0x12c/0x190 [ 79.312000][ T4621] ? __nla_parse+0x3c/0x50 [ 79.316425][ T4621] xfrm_user_rcv_msg+0x58d/0x860 [ 79.321373][ T4621] ? xfrm_netlink_rcv+0x90/0x90 [ 79.326256][ T4621] ? xfrm_netlink_rcv+0x66/0x90 [ 79.331111][ T4621] ? xfrm_netlink_rcv+0x66/0x90 [ 79.335967][ T4621] ? xfrm_netlink_rcv+0x66/0x90 [ 79.340820][ T4621] ? __mutex_lock_common+0x431/0x2390 [ 79.346197][ T4621] ? __copy_skb_header+0x417/0x5a0 [ 79.351320][ T4621] ? __skb_clone+0x480/0x790 [ 79.355923][ T4621] netlink_rcv_skb+0x1e0/0x430 [ 79.360690][ T4621] ? xfrm_netlink_rcv+0x90/0x90 [ 79.365547][ T4621] ? netlink_ack+0xb60/0xb60 [ 79.370139][ T4621] ? __lock_acquire+0x7c60/0x7c60 [ 79.375185][ T4621] xfrm_netlink_rcv+0x75/0x90 [ 79.379870][ T4621] netlink_unicast+0x774/0x920 [ 79.384653][ T4621] netlink_sendmsg+0x8ab/0xbc0 [ 79.389429][ T4621] ? netlink_getsockopt+0x560/0x560 [ 79.394639][ T4621] ? aa_sock_msg_perm+0x94/0x150 [ 79.399580][ T4621] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 79.404868][ T4621] ? security_socket_sendmsg+0x7c/0xa0 [ 79.410331][ T4621] ? netlink_getsockopt+0x560/0x560 [ 79.415534][ T4621] ____sys_sendmsg+0x5a2/0x8c0 [ 79.420316][ T4621] ? memset+0x1e/0x40 [ 79.424301][ T4621] ? __sys_sendmsg_sock+0x30/0x30 [ 79.429344][ T4621] ? import_iovec+0x6f/0xa0 [ 79.433860][ T4621] ___sys_sendmsg+0x1f0/0x260 [ 79.438548][ T4621] ? __sys_sendmsg+0x250/0x250 [ 79.443325][ T4621] ? percpu_counter_add_batch+0x13b/0x160 [ 79.449084][ T4621] ? __fdget+0x18b/0x210 [ 79.453344][ T4621] __se_sys_sendmsg+0x190/0x250 [ 79.458203][ T4621] ? __x64_sys_sendmsg+0x80/0x80 [ 79.463139][ T4621] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 79.469139][ T4621] ? lockdep_hardirqs_on+0x94/0x140 [ 79.474347][ T4621] do_syscall_64+0x4c/0xa0 [ 79.478763][ T4621] ? clear_bhb_loop+0x30/0x80 [ 79.483467][ T4621] ? clear_bhb_loop+0x30/0x80 [ 79.488147][ T4621] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 79.494056][ T4621] RIP: 0033:0x7f466b2f06c9 [ 79.498477][ T4621] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.518082][ T4621] RSP: 002b:00007f4669557038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 79.526501][ T4621] RAX: ffffffffffffffda RBX: 00007f466b546fa0 RCX: 00007f466b2f06c9 [ 79.534472][ T4621] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000005 [ 79.542441][ T4621] RBP: 00007f466b372f91 R08: 0000000000000000 R09: 0000000000000000 [ 79.550408][ T4621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 79.558397][ T4621] R13: 00007f466b547038 R14: 00007f466b546fa0 R15: 00007fffab44e558 [ 79.566389][ T4621] [ 79.569413][ T4621] [ 79.571729][ T4621] Allocated by task 4621: [ 79.576045][ T4621] __kasan_kmalloc+0xb5/0xf0 [ 79.580635][ T4621] sk_prot_alloc+0xe7/0x210 [ 79.585137][ T4621] sk_alloc+0x2f/0x310 [ 79.589202][ T4621] pfkey_create+0xd8/0x560 [ 79.593616][ T4621] __sock_create+0x47b/0x900 [ 79.598206][ T4621] __sys_socket+0xe2/0x170 [ 79.602619][ T4621] __x64_sys_socket+0x76/0x80 [ 79.607292][ T4621] do_syscall_64+0x4c/0xa0 [ 79.611707][ T4621] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 79.617605][ T4621] [ 79.619924][ T4621] The buggy address belongs to the object at ffff8880621ab000 [ 79.619924][ T4621] which belongs to the cache kmalloc-2k of size 2048 [ 79.633970][ T4621] The buggy address is located 1544 bytes inside of [ 79.633970][ T4621] 2048-byte region [ffff8880621ab000, ffff8880621ab800) [ 79.647421][ T4621] The buggy address belongs to the page: [ 79.653049][ T4621] page:ffffea0001886a00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x621a8 [ 79.663200][ T4621] head:ffffea0001886a00 order:3 compound_mapcount:0 compound_pincount:0 [ 79.671515][ T4621] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 79.679500][ T4621] raw: 00fff00000010200 0000000000000000 0000000100000001 ffff888016842000 [ 79.688076][ T4621] raw: 0000000000000000 0000000000080008 00000001ffffffff 0000000000000000 [ 79.696645][ T4621] page dumped because: kasan: bad access detected [ 79.703058][ T4621] page_owner tracks the page as allocated [ 79.708762][ T4621] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4181, ts 52079840494, free_ts 11394795310 [ 79.727858][ T4621] get_page_from_freelist+0x1b77/0x1c60 [ 79.733417][ T4621] __alloc_pages+0x1e1/0x470 [ 79.738010][ T4621] new_slab+0xc0/0x4b0 [ 79.742075][ T4621] ___slab_alloc+0x81e/0xdf0 [ 79.746670][ T4621] kmem_cache_alloc_trace+0x1a5/0x2a0 [ 79.752051][ T4621] ipv6_add_dev+0xce/0x1190 [ 79.756565][ T4621] addrconf_notify+0x66f/0xf00 [ 79.761341][ T4621] raw_notifier_call_chain+0xcb/0x160 [ 79.766717][ T4621] register_netdevice+0x1275/0x16b0 [ 79.771921][ T4621] ipvlan_link_new+0x3c5/0xae0 [ 79.776687][ T4621] rtnl_newlink+0x114c/0x17d0 [ 79.781363][ T4621] rtnetlink_rcv_msg+0x7ff/0xe90 [ 79.786310][ T4621] netlink_rcv_skb+0x1e0/0x430 [ 79.791066][ T4621] netlink_unicast+0x774/0x920 [ 79.795831][ T4621] netlink_sendmsg+0x8ab/0xbc0 [ 79.800588][ T4621] __sys_sendto+0x423/0x580 [ 79.805093][ T4621] page last free stack trace: [ 79.809756][ T4621] free_unref_page_prepare+0x637/0x6c0 [ 79.815218][ T4621] free_unref_page+0x94/0x280 [ 79.819900][ T4621] free_contig_range+0x96/0xf0 [ 79.824667][ T4621] destroy_args+0x100/0xa20 [ 79.829170][ T4621] debug_vm_pgtable+0x318/0x370 [ 79.834026][ T4621] do_one_initcall+0x1ee/0x680 [ 79.838792][ T4621] do_initcall_level+0x137/0x1f0 [ 79.843726][ T4621] do_initcalls+0x4b/0x90 [ 79.848053][ T4621] kernel_init_freeable+0x3ce/0x560 [ 79.853249][ T4621] kernel_init+0x19/0x1b0 [ 79.857577][ T4621] ret_from_fork+0x1f/0x30 [ 79.861992][ T4621] [ 79.864308][ T4621] Memory state around the buggy address: [ 79.869924][ T4621] ffff8880621ab500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 79.877976][ T4621] ffff8880621ab580: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc [ 79.886030][ T4621] >ffff8880621ab600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 79.894079][ T4621] ^ [ 79.898397][ T4621] ffff8880621ab680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 79.906453][ T4621] ffff8880621ab700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 79.914502][ T4621] ================================================================== [ 79.922550][ T4621] Disabling lock debugging due to kernel taint [ 79.928782][ T4621] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 79.935972][ T4621] CPU: 1 PID: 4621 Comm: syz.4.89 Tainted: G B syzkaller #0 [ 79.944557][ T4621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 79.954601][ T4621] Call Trace: [ 79.957868][ T4621] [ 79.960791][ T4621] dump_stack_lvl+0x168/0x230 [ 79.965469][ T4621] ? show_regs_print_info+0x20/0x20 [ 79.970662][ T4621] ? load_image+0x3b0/0x3b0 [ 79.975164][ T4621] panic+0x2c9/0x7f0 [ 79.979058][ T4621] ? bpf_jit_dump+0xd0/0xd0 [ 79.983557][ T4621] ? _raw_spin_unlock_irqrestore+0xa5/0x100 [ 79.989451][ T4621] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 79.995359][ T4621] ? _raw_spin_unlock+0x40/0x40 [ 80.000206][ T4621] ? xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 80.006698][ T4621] check_panic_on_warn+0x80/0xa0 [ 80.011629][ T4621] ? xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 80.018128][ T4621] end_report+0x6d/0xf0 [ 80.022284][ T4621] kasan_report+0x102/0x130 [ 80.026781][ T4621] ? xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 80.033278][ T4621] xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 80.039603][ T4621] ? xfrm_policy_addr_delta+0x212/0x340 [ 80.045141][ T4621] xfrm_policy_inexact_insert_node+0x950/0xb60 [ 80.051292][ T4621] ? xfrm_policy_alloc+0x75/0x2b0 [ 80.056321][ T4621] xfrm_policy_inexact_alloc_chain+0x7cf/0xea0 [ 80.062476][ T4621] ? xfrm_policy_inexact_insert+0xe0/0x1460 [ 80.068374][ T4621] xfrm_policy_inexact_insert+0xe0/0x1460 [ 80.074093][ T4621] ? __get_hash_thresh+0x105/0x410 [ 80.079198][ T4621] ? policy_hash_bysel+0x10a/0x570 [ 80.084313][ T4621] xfrm_policy_insert+0x112/0x930 [ 80.089350][ T4621] xfrm_add_policy+0x4d6/0x860 [ 80.094112][ T4621] ? xfrm_dump_sa_done+0xc0/0xc0 [ 80.099046][ T4621] ? apparmor_capable+0x12c/0x190 [ 80.104063][ T4621] ? __nla_parse+0x3c/0x50 [ 80.108475][ T4621] xfrm_user_rcv_msg+0x58d/0x860 [ 80.113417][ T4621] ? xfrm_netlink_rcv+0x90/0x90 [ 80.118276][ T4621] ? xfrm_netlink_rcv+0x66/0x90 [ 80.123126][ T4621] ? xfrm_netlink_rcv+0x66/0x90 [ 80.127978][ T4621] ? xfrm_netlink_rcv+0x66/0x90 [ 80.132822][ T4621] ? __mutex_lock_common+0x431/0x2390 [ 80.138195][ T4621] ? __copy_skb_header+0x417/0x5a0 [ 80.143304][ T4621] ? __skb_clone+0x480/0x790 [ 80.147894][ T4621] netlink_rcv_skb+0x1e0/0x430 [ 80.152651][ T4621] ? xfrm_netlink_rcv+0x90/0x90 [ 80.157500][ T4621] ? netlink_ack+0xb60/0xb60 [ 80.162082][ T4621] ? __lock_acquire+0x7c60/0x7c60 [ 80.167103][ T4621] xfrm_netlink_rcv+0x75/0x90 [ 80.171778][ T4621] netlink_unicast+0x774/0x920 [ 80.176549][ T4621] netlink_sendmsg+0x8ab/0xbc0 [ 80.181308][ T4621] ? netlink_getsockopt+0x560/0x560 [ 80.186505][ T4621] ? aa_sock_msg_perm+0x94/0x150 [ 80.191436][ T4621] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 80.196719][ T4621] ? security_socket_sendmsg+0x7c/0xa0 [ 80.202168][ T4621] ? netlink_getsockopt+0x560/0x560 [ 80.207356][ T4621] ____sys_sendmsg+0x5a2/0x8c0 [ 80.212120][ T4621] ? memset+0x1e/0x40 [ 80.216102][ T4621] ? __sys_sendmsg_sock+0x30/0x30 [ 80.221122][ T4621] ? import_iovec+0x6f/0xa0 [ 80.225621][ T4621] ___sys_sendmsg+0x1f0/0x260 [ 80.230298][ T4621] ? __sys_sendmsg+0x250/0x250 [ 80.235065][ T4621] ? percpu_counter_add_batch+0x13b/0x160 [ 80.240791][ T4621] ? __fdget+0x18b/0x210 [ 80.245025][ T4621] __se_sys_sendmsg+0x190/0x250 [ 80.249877][ T4621] ? __x64_sys_sendmsg+0x80/0x80 [ 80.254809][ T4621] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 80.260790][ T4621] ? lockdep_hardirqs_on+0x94/0x140 [ 80.265982][ T4621] do_syscall_64+0x4c/0xa0 [ 80.270393][ T4621] ? clear_bhb_loop+0x30/0x80 [ 80.275064][ T4621] ? clear_bhb_loop+0x30/0x80 [ 80.279736][ T4621] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 80.285623][ T4621] RIP: 0033:0x7f466b2f06c9 [ 80.290029][ T4621] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.309626][ T4621] RSP: 002b:00007f4669557038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 80.318035][ T4621] RAX: ffffffffffffffda RBX: 00007f466b546fa0 RCX: 00007f466b2f06c9 [ 80.325999][ T4621] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000005 [ 80.333962][ T4621] RBP: 00007f466b372f91 R08: 0000000000000000 R09: 0000000000000000 [ 80.341924][ T4621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 80.349885][ T4621] R13: 00007f466b547038 R14: 00007f466b546fa0 R15: 00007fffab44e558 [ 80.357853][ T4621] [ 80.361059][ T4621] Kernel Offset: disabled [ 80.365389][ T4621] Rebooting in 86400 seconds..