last executing test programs: 13.307604391s ago: executing program 0 (id=145): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/11], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000280)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000140)=0xffffffc0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004f00)=[{{&(0x7f0000000140)={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x27}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000240)="92", 0x1}], 0x1}}], 0x1, 0x240800d0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb0}}, 0x0) 11.208043525s ago: executing program 3 (id=147): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x50) socket$inet6_sctp(0xa, 0x1, 0x84) fsopen(&(0x7f0000000280)='cifs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6(0xa, 0x2, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x1ff, 0x7a, 0x0, 0x8000, 0x6, 0x3}, 0x0, &(0x7f0000000080)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0x12, 0x80000003}, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000500)=0x3) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, 0x0) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f00000001c0)=""/124) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f0000000140)=0x3) r2 = syz_open_dev$sndctrl(&(0x7f0000000340), 0x0, 0x300) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r2, 0x40045532, &(0x7f0000003f80)=""/4086) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 9.397620983s ago: executing program 3 (id=150): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000005fc0)={@ipv4={'\x00', '\xff\xff', @private=0xa010102}, @mcast2, @mcast2, 0x4, 0x8000, 0x40, 0x0, 0x1000, 0x10c0014}) 9.186401447s ago: executing program 0 (id=152): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000000)=0x1) 9.185711317s ago: executing program 3 (id=153): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4800}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x58, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2c, 0x3, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000851}, 0x40) 9.178798607s ago: executing program 2 (id=154): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip_vti0\x00', 0x0}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f03fe7feee8140006001e0089e9aaa911d7c2290f0086dd1327c9167c642b4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 8.927955633s ago: executing program 0 (id=155): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002ac0), r4) sendmsg$IEEE802154_DISASSOCIATE_REQ(r4, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f0000003100)={0x14, r5, 0x1, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40898}, 0x8010) r6 = syz_open_dev$video(&(0x7f00000002c0), 0x3, 0x1c0201) ioctl$VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f00000001c0)={0xa, @pix={0x0, 0x6, 0x33565348}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@delchain={0x24, 0x65, 0x21, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x2, 0x10}, {0xe}, {0xb, 0x3}}}, 0x24}}, 0x8000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) socket$alg(0x26, 0x5, 0x0) 7.266779988s ago: executing program 2 (id=156): r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) setpriority(0x1, 0xffffffffffffffff, 0x3) syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000180)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r2) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000002c40)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="010023bd70a664dbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000080) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a200000001a0a010300000000000000000100000009000100"], 0xfc}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={r0, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) creat(&(0x7f0000000080)='./bus\x00', 0x0) mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,') socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0xa, 0x7, 0x106) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x40050) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568", @ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) 7.16540839s ago: executing program 1 (id=157): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x6f1dd9aa, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1, 0x2}) 6.817204187s ago: executing program 0 (id=158): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x2, 0x402) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000340)={&(0x7f00000001c0)=[{0xf, 0x29, 0x0, 0x0}], 0x1}) 6.67598998s ago: executing program 1 (id=159): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002380)=@bridge_delvlan={0x24, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r3}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x2, 0x3}}}]}, 0x24}}, 0x0) sendmsg$kcm(r0, &(0x7f0000002400)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000022c0)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 6.634148131s ago: executing program 2 (id=160): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0200000004000000080000010000008000ea5ea1496f899735ca0000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x50) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYRES64=r1], 0xfffffffffffffe0b) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32=r0], &(0x7f0000000000)='GPL\x00', 0x5, 0xbc, &(0x7f0000000600)=""/188, 0x1f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x10007) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000340)={0xffffffffffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000300), r7, 0x0, 0x1, 0x4}}, 0x20) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) sendmmsg$unix(r5, &(0x7f00000007c0)=[{{&(0x7f0000000500)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f00000006c0), 0x0, &(0x7f0000000780)=[@rights={{0x34, 0x1, 0x1, [r0, 0xffffffffffffffff, r0, r6, 0xffffffffffffffff, r4, r0, r5, r2, r0]}}], 0x34}}], 0x1, 0x40850) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x65) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x180, 0x0) ioctl$SNDCTL_SYNTH_ID(r8, 0xc08c5114, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448ca, 0x0) r9 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'syztnl0\x00', &(0x7f00000003c0)={'tunl0\x00', 0x0, 0x40, 0x7800, 0x4000, 0x1401, {{0x14, 0x4, 0x1, 0x2e, 0x50, 0x64, 0x0, 0x8, 0x29, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x2c}, {[@ssrr={0x89, 0x17, 0x72, [@rand_addr=0x64010102, @multicast1, @rand_addr=0x64010101, @empty, @rand_addr=0x64010101]}, @generic={0x88, 0x9, "442391eb901a52"}, @timestamp_addr={0x44, 0x1c, 0x86, 0x1, 0x8, [{@empty, 0x75c0bca5}, {@rand_addr=0x64010100, 0x80000000}, {@remote, 0x9}]}]}}}}}) connect$can_bcm(r9, &(0x7f0000001ff0), 0x10) 6.554329933s ago: executing program 4 (id=161): socket$inet_tcp(0x2, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_emit_vhci(&(0x7f0000000ac0)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x8, 0xc8, 0x5}}}, 0x8) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r1) r2 = socket(0x15, 0x5, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) getsockopt(r2, 0x200000000114, 0x2721, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) listen(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0xa64a, 0x0, 0x8000, 0x4, 0x58}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) 6.363462527s ago: executing program 1 (id=162): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)={0x1, 0x0, [{0xd, 0x84, 0x9, 0x1a000, 0xc9a6}]}) 6.025783473s ago: executing program 3 (id=163): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/11], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000280)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000140)=0xffffffc0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004f00)=[{{&(0x7f0000000140)={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x27}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000240)="92", 0x1}], 0x1}}], 0x1, 0x240800d0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb0}}, 0x0) 5.769178959s ago: executing program 1 (id=164): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) socket(0x23, 0x2, 0x0) setresgid(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newtfilter={0x48, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xfff2, 0xf}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @remote}, @TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x4}]}}]}, 0x48}}, 0x4800) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) 5.624047732s ago: executing program 4 (id=165): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003380)=[{{0x0, 0x0, &(0x7f00000031c0)=[{&(0x7f0000002140)="247cfe07e4a1a49dcad474d2e2ee17b1db603db24183749b30a6cd1428485050b741d412d36f9d51fa8f4af8aa186278e499a33905f1e0be3af365822a4e3b09caddc5a3e2f2ed9bc84874db944c0012e3b0a225a12600687f889a005a5bb0540c33c077ed5cdb4da9786296122c84ed0107ac18cb63713946f8a3d964ee3bd1bb84a3167a7a9236e1a5e68fe2fc727842881e", 0x93}], 0x1}}], 0x1, 0x4000801) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000020c0)={&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000002100)=0x40) 5.586221963s ago: executing program 2 (id=166): open(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, 0x0, 0x0) bind$inet(r6, 0x0, 0x0) connect$inet(r6, 0x0, 0x0) sendmmsg$inet(r6, 0x0, 0x0, 0xf00) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r8, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 5.559108554s ago: executing program 4 (id=167): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x101000, 0x0) read(r0, 0x0, 0x0) 5.468836075s ago: executing program 4 (id=168): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002ac0), r4) sendmsg$IEEE802154_DISASSOCIATE_REQ(r4, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f0000003100)={0x14, r5, 0x1, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40898}, 0x8010) r6 = syz_open_dev$video(&(0x7f00000002c0), 0x3, 0x1c0201) ioctl$VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f00000001c0)={0xa, @pix={0x0, 0x6, 0x33565348}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@delchain={0x24, 0x65, 0x21, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x2, 0x10}, {0xe}, {0xb, 0x3}}}, 0x24}}, 0x8000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) socket$alg(0x26, 0x5, 0x0) 4.679937892s ago: executing program 1 (id=169): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip_vti0\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r3, &(0x7f00000000c0)="3f03fe7feee8140006001e0089e9aaa911d7c2290f0086dd1327c9167c642b4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) 4.665646762s ago: executing program 3 (id=170): r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) setpriority(0x1, 0xffffffffffffffff, 0x3) syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000180)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r2) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000002c40)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="010023bd70a664dbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000080) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a200000001a0a010300000000000000000100000009000100"], 0xfc}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={r0, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) creat(&(0x7f0000000080)='./bus\x00', 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0xa, 0x7, 0x106) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x40050) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568", @ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) 4.164400863s ago: executing program 3 (id=171): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r3 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x1014c0, 0x1) ioctl$KDSKBENT(r3, 0x4b47, &(0x7f0000000100)={0x6, 0x0, 0x5}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000f00)={'dummy0\x00', &(0x7f00000004c0)=@ethtool_link_settings={0x4c, 0x6, 0x87, 0xf9, 0x4, 0xc, 0x3, 0x6, 0x48, 0x0, [0x2, 0x7, 0x3c, 0x5, 0x4, 0xeb, 0x1ff, 0x9]}}) setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) 3.967719807s ago: executing program 4 (id=172): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x9, 0x0, &(0x7f0000001540)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2}, 0x94) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, &(0x7f0000000500)={0x0, 0x1, "47487f7447bc435ce4db6ebe75d58b7145ad9a7f06241c9a07c370040bd9f7b3", 0x3, 0x7ff, 0x1c00, 0x80000000, 0x241}) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000200)={0x0, 0x8}, 0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002700090026bd7000fddbdf25080000000b0001"], 0x20}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) migrate_pages(0x0, 0x71, 0x0, 0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYRES16=r2], 0x54}, 0x1, 0x0, 0x0, 0x4c091}, 0x24000010) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x100400d2}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYRESOCT=r3], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0xfa9ae9ebe3e8a8cb) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x28000001}, 0x20008800) ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, 0x0) mlock(&(0x7f0000451000/0x1000)=nil, 0x1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000440)={'ip6gre0\x00', {0x2, 0x4e20, @broadcast}}) 3.920415728s ago: executing program 0 (id=173): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4800}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x58, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2c, 0x3, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000851}, 0x40) 3.445025898s ago: executing program 1 (id=174): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0xe07e872420dfefca) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) getrlimit(0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f00000001c0)={0x1, 0x0, [{0x9ea27589817d43c7, 0x74, &(0x7f0000000600)=""/116}]}) ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x1) r6 = socket$kcm(0x2, 0x3, 0x2) r7 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r7, 0x0, 0x41) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'wlan1\x00', @random="0200ac7f7f00"}) ioctl$SIOCSIFHWADDR(r6, 0x8916, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000200)) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb4, 0x19, 0x1, 0x10000, 0x14000, {{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x2f}, {0x8, 0x0, 0x100000001, 0x0, 0x0, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x0, 0xfffffffffffffeff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x3, 0x3}}, 0xb4}, 0x1, 0x0, 0x0, 0x4080000}, 0x4004) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 1.640045216s ago: executing program 4 (id=175): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x14, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000000), 0x104, 0x88180) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8003}]}) close_range(r1, 0xffffffffffffffff, 0x0) 92.695698ms ago: executing program 2 (id=176): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x18, 0x1411, 0x1, 0x70bd29, 0x20003, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0) 43.00224ms ago: executing program 0 (id=177): r0 = socket$kcm(0x21, 0x2, 0xa) syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e20, 0x9c000000, @ipv4={'\x00', '\xff\xff', @remote}, 0x1df}}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="100000001001000001"], 0x10}, 0x40) readv(r0, &(0x7f0000004500)=[{&(0x7f0000000180)=""/45, 0x2d}], 0x1) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) 0s ago: executing program 2 (id=178): writev(0xffffffffffffffff, &(0x7f0000000040), 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfb, {{@in6=@private0, @in6=@local, 0x0, 0x4, 0x1, 0x0, 0xa, 0x60, 0x80, 0x87, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe, 0x4}, 0x9, 0x0, 0x0, 0x1, 0x2}}, 0xb8}}, 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000001"], 0xb8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000040)=ANY=[@ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x71, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}}, 0xe8) r4 = socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x0) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 31.147676][ T3853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.157097][ T3853] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.31' (ED25519) to the list of known hosts. syzkaller login: [ 47.400706][ T4171] cgroup: Unknown subsys name 'net' [ 47.548237][ T4171] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 48.767362][ T4171] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 50.016632][ T4198] chnl_net:caif_netlink_parms(): no params data found [ 50.068753][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 50.122783][ T4195] chnl_net:caif_netlink_parms(): no params data found [ 50.176866][ T4197] chnl_net:caif_netlink_parms(): no params data found [ 50.206669][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 50.216268][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.223957][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.231849][ T4187] device bridge_slave_0 entered promiscuous mode [ 50.248390][ T4198] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.255568][ T4198] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.263651][ T4198] device bridge_slave_0 entered promiscuous mode [ 50.274619][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.281701][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.290220][ T4187] device bridge_slave_1 entered promiscuous mode [ 50.314849][ T4198] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.321992][ T4198] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.330110][ T4198] device bridge_slave_1 entered promiscuous mode [ 50.361648][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.389343][ T4198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.404929][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.421759][ T4198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.446369][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.453572][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.461504][ T4195] device bridge_slave_0 entered promiscuous mode [ 50.493638][ T4198] team0: Port device team_slave_0 added [ 50.507058][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.514364][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.521989][ T4195] device bridge_slave_1 entered promiscuous mode [ 50.529153][ T4197] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.536911][ T4197] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.545073][ T4197] device bridge_slave_0 entered promiscuous mode [ 50.554181][ T4198] team0: Port device team_slave_1 added [ 50.560016][ T4197] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.567143][ T4197] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.575008][ T4197] device bridge_slave_1 entered promiscuous mode [ 50.590020][ T4187] team0: Port device team_slave_0 added [ 50.602600][ T4187] team0: Port device team_slave_1 added [ 50.627574][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.634743][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.661661][ T4198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.691224][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.707288][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.714378][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.740401][ T4198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.751470][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.758787][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.766777][ T4188] device bridge_slave_0 entered promiscuous mode [ 50.775719][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.791356][ T4197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.802821][ T4197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.816806][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.823990][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.831822][ T4188] device bridge_slave_1 entered promiscuous mode [ 50.846951][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.854007][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.880009][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.926643][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.936686][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.943741][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.969728][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.982694][ T4197] team0: Port device team_slave_0 added [ 50.996881][ T4195] team0: Port device team_slave_0 added [ 51.006451][ T4198] device hsr_slave_0 entered promiscuous mode [ 51.013813][ T4198] device hsr_slave_1 entered promiscuous mode [ 51.022342][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.035220][ T4197] team0: Port device team_slave_1 added [ 51.043715][ T4195] team0: Port device team_slave_1 added [ 51.086793][ T4188] team0: Port device team_slave_0 added [ 51.113587][ T4187] device hsr_slave_0 entered promiscuous mode [ 51.120130][ T4187] device hsr_slave_1 entered promiscuous mode [ 51.126994][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 51.134997][ T4187] Cannot create hsr debugfs directory [ 51.140891][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.147880][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.173906][ T4197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.186608][ T4188] team0: Port device team_slave_1 added [ 51.199878][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.207096][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.233214][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.250332][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.257332][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.283357][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.295286][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.302232][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.328480][ T4197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.349721][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.356827][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.383084][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.400791][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.407812][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.433919][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.539040][ T4188] device hsr_slave_0 entered promiscuous mode [ 51.546133][ T4188] device hsr_slave_1 entered promiscuous mode [ 51.552610][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 51.560468][ T4188] Cannot create hsr debugfs directory [ 51.568927][ T4195] device hsr_slave_0 entered promiscuous mode [ 51.575709][ T4195] device hsr_slave_1 entered promiscuous mode [ 51.582181][ T4195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 51.589970][ T4195] Cannot create hsr debugfs directory [ 51.598422][ T4197] device hsr_slave_0 entered promiscuous mode [ 51.605709][ T4197] device hsr_slave_1 entered promiscuous mode [ 51.612370][ T4197] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 51.620195][ T4197] Cannot create hsr debugfs directory [ 51.724219][ T4189] Bluetooth: hci0: command 0x0409 tx timeout [ 51.732105][ T4189] Bluetooth: hci1: command 0x0409 tx timeout [ 51.809127][ T13] Bluetooth: hci4: command 0x0409 tx timeout [ 51.813413][ T4189] Bluetooth: hci3: command 0x0409 tx timeout [ 51.819740][ T4198] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 51.828180][ T4189] Bluetooth: hci2: command 0x0409 tx timeout [ 51.858955][ T4198] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 51.890683][ T4198] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 51.899398][ T4198] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 51.956923][ T4187] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 51.968751][ T4187] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 51.978206][ T4187] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 51.997152][ T4187] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 52.032129][ T4195] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 52.044747][ T4195] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 52.073638][ T4195] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 52.090025][ T4195] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 52.129854][ T4197] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 52.139217][ T4197] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 52.159700][ T4197] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 52.170499][ T4198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.194510][ T4197] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 52.212483][ T4198] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.231622][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.242180][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.258915][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.268188][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.277718][ T3084] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.285045][ T3084] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.313902][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.322931][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.332000][ T4188] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 52.357231][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.367304][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.377676][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.384778][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.393509][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.424781][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.432604][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.444407][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.452850][ T4188] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 52.464024][ T4188] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 52.475360][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.483046][ T4188] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 52.494318][ T1415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.504588][ T1415] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.525338][ T4197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.541180][ T1415] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.550011][ T1415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.559831][ T1415] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.568948][ T1415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.578082][ T1415] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.586789][ T1415] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.593900][ T1415] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.602266][ T1415] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.619433][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.628639][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.640095][ T1415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.648318][ T1415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.664848][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.674337][ T4197] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.690556][ T4198] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 52.702085][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.714794][ T1415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.724140][ T1415] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.732439][ T1415] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.739510][ T1415] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.747534][ T1415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.755937][ T1415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.764358][ T1415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.772621][ T1415] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.797061][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.807394][ T1415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.818179][ T1415] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.826930][ T1415] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.834023][ T1415] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.842743][ T1415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.851559][ T1415] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.860166][ T1415] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.867294][ T1415] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.876507][ T1415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.885136][ T1415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.893851][ T1415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.902708][ T1415] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.928422][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.940097][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.954087][ T3084] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.961171][ T3084] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.975931][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.985886][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.994707][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.003005][ T3084] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.010082][ T3084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.018421][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.027270][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.036055][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.044274][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.071726][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.082413][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.091753][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.107003][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.118333][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.131412][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.140248][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.149058][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.157564][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.166172][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.175335][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.183936][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.192312][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.207675][ T4197] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.232517][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.247106][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.267419][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.277129][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.307781][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.319104][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.339299][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.355610][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.381476][ T4195] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 53.400155][ T4195] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.420245][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.429330][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.438359][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.446943][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.456435][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 53.464205][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 53.471646][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.481785][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.490714][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.502286][ T4198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.521579][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.538947][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.574446][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.593801][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 53.601344][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 53.622247][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.648105][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.658560][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.667806][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.678134][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.726139][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 53.735230][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 53.742674][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.752077][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.760870][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.767989][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.775984][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.785387][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.793853][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.800888][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.808920][ T26] Bluetooth: hci1: command 0x041b tx timeout [ 53.810198][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.815262][ T26] Bluetooth: hci0: command 0x041b tx timeout [ 53.829806][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.838811][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.848328][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.857012][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.865637][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.875201][ T4197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.892885][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.903677][ T4233] Bluetooth: hci2: command 0x041b tx timeout [ 53.910440][ T4187] device veth0_vlan entered promiscuous mode [ 53.918395][ T4233] Bluetooth: hci3: command 0x041b tx timeout [ 53.918419][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.927577][ T4233] Bluetooth: hci4: command 0x041b tx timeout [ 53.934218][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 53.947209][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 53.954973][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.965322][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.974149][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.982600][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.991481][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.001440][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.010931][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.021048][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.030003][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.041335][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.050058][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.068342][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.080668][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.094135][ T4198] device veth0_vlan entered promiscuous mode [ 54.115026][ T1415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.124212][ T1415] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.141303][ T1415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.150787][ T1415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.166234][ T4187] device veth1_vlan entered promiscuous mode [ 54.175322][ T4198] device veth1_vlan entered promiscuous mode [ 54.193569][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 54.201881][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 54.247907][ T4195] device veth0_vlan entered promiscuous mode [ 54.255628][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.266397][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.275400][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.284374][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.292727][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.301621][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.310531][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.318977][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.327771][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.335891][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.343873][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.351481][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.379737][ T4198] device veth0_macvtap entered promiscuous mode [ 54.389280][ T4197] device veth0_vlan entered promiscuous mode [ 54.396694][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 54.406064][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.414949][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.426463][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.436175][ T4198] device veth1_macvtap entered promiscuous mode [ 54.456102][ T4195] device veth1_vlan entered promiscuous mode [ 54.468359][ T4197] device veth1_vlan entered promiscuous mode [ 54.483312][ T4187] device veth0_macvtap entered promiscuous mode [ 54.505052][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 54.515551][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 54.524979][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 54.533019][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.541716][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.554384][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 54.562473][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 54.576042][ T4187] device veth1_macvtap entered promiscuous mode [ 54.589190][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.601984][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 54.612230][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 54.626911][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.638977][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.667489][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.681899][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.693649][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.707627][ T4195] device veth0_macvtap entered promiscuous mode [ 54.724080][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.736715][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.748418][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.765127][ T4198] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.774711][ T4198] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.783865][ T4198] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.792561][ T4198] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.802813][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.811824][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.820622][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.829576][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.839622][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.849321][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.862676][ T4195] device veth1_macvtap entered promiscuous mode [ 54.870443][ T4197] device veth0_macvtap entered promiscuous mode [ 54.880794][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.891981][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.902919][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.918747][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 54.928297][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 54.936905][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 54.945337][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.955325][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.974141][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.985317][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.995513][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.006260][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.017966][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.027814][ T4197] device veth1_macvtap entered promiscuous mode [ 55.041949][ T4187] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.051361][ T4187] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.060300][ T4187] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.069969][ T4187] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.080707][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.089140][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.100008][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.109038][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.118041][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.139771][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.150359][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.160556][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.172041][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.184980][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.211092][ T4188] device veth0_vlan entered promiscuous mode [ 55.218143][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.227070][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.236622][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.245634][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.261766][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.272646][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.282809][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.293839][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.303682][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.327466][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.339686][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.348848][ T4195] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.357906][ T4195] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.367021][ T4195] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.375853][ T4195] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.402523][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.412418][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.421481][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.430827][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.442450][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.453244][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.463050][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.473816][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.484685][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.495195][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.506349][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.522782][ T4197] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.531681][ T4197] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.542018][ T4197] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.550800][ T4197] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.566340][ T1415] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.578047][ T1415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.592492][ T4188] device veth1_vlan entered promiscuous mode [ 55.685279][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.698662][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.709848][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 55.728157][ T4188] device veth0_macvtap entered promiscuous mode [ 55.743738][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.747340][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.751567][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.767236][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.780855][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 55.788947][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.820762][ T3084] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.826248][ T4188] device veth1_macvtap entered promiscuous mode [ 55.831217][ T3084] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.849831][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.858531][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.879185][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.883760][ T4231] Bluetooth: hci0: command 0x040f tx timeout [ 55.890786][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 55.899802][ T4231] Bluetooth: hci1: command 0x040f tx timeout [ 55.906840][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 55.927490][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.945315][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.955766][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.966606][ T4230] Bluetooth: hci4: command 0x040f tx timeout [ 55.971224][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.972686][ T4230] Bluetooth: hci3: command 0x040f tx timeout [ 55.983794][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.990487][ T4230] Bluetooth: hci2: command 0x040f tx timeout [ 56.005166][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.015280][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.025965][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.041298][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.076264][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.093675][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.103790][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.117294][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.128876][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.139636][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.150291][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.161057][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.171139][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.181866][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.210727][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.298038][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.369406][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.497980][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.547184][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.563725][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.580819][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.668296][ T1415] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.712067][ T1415] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.764982][ T4188] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.802345][ T4188] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.862805][ T4188] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.922800][ T4188] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.291044][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.348162][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.371717][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.398659][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.418129][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.451713][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.538822][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.569250][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.212791][ T4189] Bluetooth: hci1: command 0x0419 tx timeout [ 58.546156][ T4189] Bluetooth: hci0: command 0x0419 tx timeout [ 58.552311][ T4189] Bluetooth: hci2: command 0x0419 tx timeout [ 58.558452][ T4189] Bluetooth: hci3: command 0x0419 tx timeout [ 58.564559][ T4189] Bluetooth: hci4: command 0x0419 tx timeout [ 58.660778][ T1415] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.724116][ T4286] ======================================================= [ 58.724116][ T4286] WARNING: The mand mount option has been deprecated and [ 58.724116][ T4286] and is ignored by this kernel. Remove the mand [ 58.724116][ T4286] option from the mount to silence this warning. [ 58.724116][ T4286] ======================================================= [ 58.730204][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.828878][ T4289] Zero length message leads to an empty skb [ 58.857239][ T4287] device syzkaller0 entered promiscuous mode [ 58.882594][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.439716][ T4286] fuse: Unknown parameter '' [ 60.630959][ T25] audit: type=1326 audit(1784482781.931:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4298 comm="syz.1.10" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc289c1ae99 code=0x0 [ 60.687915][ T4300] syz.1.10 uses obsolete (PF_INET,SOCK_PACKET) [ 61.933152][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 61.953145][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 61.963147][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 61.973147][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 61.983146][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 61.993145][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 62.003148][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 62.013147][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 62.023146][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 62.033146][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 62.104538][ T4297] sched: RT throttling activated [ 62.140716][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.736301][ T2301] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 62.934013][ T4314] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 63.724811][ T4233] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 64.033363][ T4233] usb 5-1: Using ep0 maxpacket: 32 [ 64.153705][ T4233] usb 5-1: config 0 has no interfaces? [ 64.393577][ T4233] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 64.464212][ T4233] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 64.632815][ T4233] usb 5-1: Product: syz [ 64.722251][ T4233] usb 5-1: Manufacturer: syz [ 64.820958][ T4233] usb 5-1: SerialNumber: syz [ 65.203843][ T4233] usb 5-1: config 0 descriptor?? [ 68.494278][ T7] usb 5-1: USB disconnect, device number 2 [ 69.002667][ T4339] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.011153][ T4339] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.796840][ T4339] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.860057][ T4339] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.159157][ T4339] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.168310][ T4339] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.177577][ T4339] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.186589][ T4339] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.249483][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.256156][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.282848][ T4344] netlink: 'syz.1.19': attribute type 10 has an invalid length. [ 71.306013][ T4339] syz.0.16 (4339) used greatest stack depth: 19824 bytes left [ 71.316198][ T4344] team0: Port device dummy0 added [ 71.325010][ T4350] netlink: 'syz.1.19': attribute type 10 has an invalid length. [ 71.352695][ T4350] team0: Port device dummy0 removed [ 71.364805][ T4343] netlink: 'syz.2.18': attribute type 4 has an invalid length. [ 71.880723][ T4443] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 74.923427][ T4453] autofs4:pid:4453:autofs_fill_super: called with bogus options [ 75.049248][ T4468] netlink: 8 bytes leftover after parsing attributes in process `syz.1.36'. [ 75.194672][ T4468] netlink: 48 bytes leftover after parsing attributes in process `syz.1.36'. [ 76.655647][ T1107] cfg80211: failed to load regulatory.db [ 77.150294][ T4498] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 78.392678][ T4509] 9pnet_virtio: no channels available for device syz [ 79.399185][ T4522] netlink: 20 bytes leftover after parsing attributes in process `syz.2.49'. [ 79.742606][ T4530] binder: BINDER_SET_CONTEXT_MGR already set [ 79.782579][ T4530] binder: 4524:4530 ioctl 4018620d 200000004a80 returned -16 [ 81.767957][ T4546] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 82.762364][ T4550] lo speed is unknown, defaulting to 1000 [ 82.769654][ T4550] lo speed is unknown, defaulting to 1000 [ 82.776791][ T4550] lo speed is unknown, defaulting to 1000 [ 82.785144][ T4550] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 82.795862][ T4550] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 82.814878][ T4550] lo speed is unknown, defaulting to 1000 [ 82.821426][ T4550] lo speed is unknown, defaulting to 1000 [ 82.827706][ T4550] lo speed is unknown, defaulting to 1000 [ 82.834008][ T4550] lo speed is unknown, defaulting to 1000 [ 82.840278][ T4550] lo speed is unknown, defaulting to 1000 [ 85.562872][ T4583] binder: 4576:4583 ioctl 4c0a 0 returned -22 [ 89.897405][ T4631] tmpfs: Unknown parameter 'quota' [ 89.899544][ T4628] binder: BINDER_SET_CONTEXT_MGR already set [ 90.783313][ T4628] binder: 4626:4628 ioctl 4018620d 200000004a80 returned -16 [ 91.269682][ T4642] binder: 4626:4642 unknown command 0 [ 91.345025][ T4642] binder: 4626:4642 ioctl c0306201 2000000001c0 returned -22 [ 91.816028][ T4648] netlink: 24 bytes leftover after parsing attributes in process `syz.4.83'. [ 98.302426][ T4724] siw: device registration error -23 [ 108.338236][ T4818] fuse: Unknown parameter '' [ 109.470630][ T4825] netlink: 4 bytes leftover after parsing attributes in process `syz.3.129'. [ 110.605837][ T4834] tmpfs: Unknown parameter 'quota' [ 110.746873][ T4270] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 112.733311][ T4270] usb 2-1: device descriptor read/all, error -71 [ 118.323416][ T1110] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 118.603662][ T1110] usb 3-1: Using ep0 maxpacket: 32 [ 118.724692][ T1110] usb 3-1: config index 0 descriptor too short (expected 13339, got 27) [ 118.953173][ T1110] usb 3-1: config 108 has an invalid descriptor of length 32, skipping remainder of the config [ 120.384110][ T1110] usb 3-1: config 108 has 0 interfaces, different from the descriptor's value: 32 [ 120.479489][ T1110] usb 3-1: string descriptor 0 read error: -71 [ 120.509891][ T1110] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 120.539925][ T1110] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 120.641978][ T1110] usb 3-1: can't set config #108, error -71 [ 120.695583][ T1110] usb 3-1: USB disconnect, device number 2 [ 120.978645][ T4907] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.152' sets config #1 [ 123.049423][ T4925] lo speed is unknown, defaulting to 1000 [ 123.057352][ T4925] lo speed is unknown, defaulting to 1000 [ 123.066168][ T4925] lo speed is unknown, defaulting to 1000 [ 123.277122][ T4925] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 123.316206][ T4925] lo speed is unknown, defaulting to 1000 [ 123.327933][ T4925] lo speed is unknown, defaulting to 1000 [ 123.337757][ T4925] lo speed is unknown, defaulting to 1000 [ 123.347927][ T4925] lo speed is unknown, defaulting to 1000 [ 123.358414][ T4925] lo speed is unknown, defaulting to 1000 [ 123.428195][ T4934] netlink: 'syz.1.159': attribute type 10 has an invalid length. [ 123.437434][ T4934] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.445184][ T4934] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.492245][ T4934] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.499577][ T4934] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.507857][ T4934] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.515015][ T4934] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.537597][ T4934] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 123.593655][ T4270] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 124.023191][ T4270] usb 1-1: Using ep0 maxpacket: 8 [ 124.143457][ T4270] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 124.239935][ T4270] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.339262][ T4270] pvrusb2: Hardware description: Terratec Grabster AV400 [ 124.371126][ T4270] pvrusb2: ********** [ 124.381654][ T4270] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 124.458194][ T4270] pvrusb2: Important functionality might not be entirely working. [ 124.475811][ T4270] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 124.806456][ T4270] pvrusb2: ********** [ 124.854451][ T2426] pvrusb2: Invalid write control endpoint [ 125.462637][ T4270] usb 1-1: USB disconnect, device number 2 [ 125.864102][ T2426] pvrusb2: Invalid write control endpoint [ 125.879190][ T2426] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 125.892822][ T2426] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 125.903339][ T2426] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 125.916781][ T2426] pvrusb2: Device being rendered inoperable [ 125.941351][ T2426] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 125.988274][ T2426] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 126.955706][ T2426] pvrusb2: Attached sub-driver cx25840 [ 127.842462][ T2426] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 128.093178][ T2426] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 128.349694][ T4988] netlink: 4 bytes leftover after parsing attributes in process `syz.1.174'. [ 128.358794][ T4988] device bridge_slave_1 left promiscuous mode [ 128.365454][ T4988] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.812644][ T4988] device bridge_slave_0 left promiscuous mode [ 129.820518][ T4988] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.077972][ T4988] bond0: (slave bridge0): Releasing backup interface [ 130.119976][ T5002] ================================================================== [ 130.128299][ T5002] BUG: KASAN: slab-out-of-bounds in xfrm_policy_inexact_list_reinsert+0x5a3/0x650 [ 130.137532][ T5002] Read of size 1 at addr ffff88807c165608 by task syz.2.178/5002 [ 130.145264][ T5002] [ 130.147604][ T5002] CPU: 1 PID: 5002 Comm: syz.2.178 Not tainted syzkaller #0 [ 130.154894][ T5002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 130.164968][ T5002] Call Trace: [ 130.168256][ T5002] [ 130.171195][ T5002] dump_stack_lvl+0x188/0x250 [ 130.175891][ T5002] ? show_regs_print_info+0x20/0x20 [ 130.181107][ T5002] ? load_image+0x410/0x410 [ 130.185625][ T5002] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 130.191115][ T5002] print_address_description+0x60/0x2d0 [ 130.196768][ T5002] ? xfrm_policy_inexact_list_reinsert+0x5a3/0x650 [ 130.203288][ T5002] kasan_report+0xdf/0x130 [ 130.207723][ T5002] ? xfrm_policy_inexact_list_reinsert+0x5a3/0x650 [ 130.214246][ T5002] xfrm_policy_inexact_list_reinsert+0x5a3/0x650 [ 130.220600][ T5002] ? xfrm_policy_addr_delta+0x210/0x330 [ 130.226171][ T5002] xfrm_policy_inexact_insert_node+0x5a4/0xb70 [ 130.232364][ T5002] xfrm_policy_inexact_alloc_chain+0x7a2/0xe70 [ 130.238555][ T5002] ? xfrm_policy_inexact_insert+0xd7/0x12d0 [ 130.244513][ T5002] xfrm_policy_inexact_insert+0xd7/0x12d0 [ 130.250242][ T5002] ? policy_hash_bysel+0x139/0x750 [ 130.255366][ T5002] xfrm_policy_insert+0x10f/0x940 [ 130.260399][ T5002] xfrm_add_policy+0x4e6/0x870 [ 130.265161][ T5002] ? xfrm_dump_sa_done+0xc0/0xc0 [ 130.270083][ T5002] ? apparmor_capable+0x12c/0x190 [ 130.275100][ T5002] ? __nla_parse+0x3c/0x50 [ 130.279505][ T5002] xfrm_user_rcv_msg+0x694/0x980 [ 130.284434][ T5002] ? xfrm_netlink_rcv+0x90/0x90 [ 130.289304][ T5002] ? __mutex_lock_common+0x435/0x2400 [ 130.294672][ T5002] netlink_rcv_skb+0x1e9/0x430 [ 130.299423][ T5002] ? xfrm_netlink_rcv+0x66/0x90 [ 130.304256][ T5002] ? xfrm_netlink_rcv+0x90/0x90 [ 130.309092][ T5002] ? netlink_ack+0xb10/0xb10 [ 130.313667][ T5002] ? __lock_acquire+0x7b50/0x7b50 [ 130.318683][ T5002] xfrm_netlink_rcv+0x75/0x90 [ 130.323347][ T5002] netlink_unicast+0x78f/0x940 [ 130.328114][ T5002] netlink_sendmsg+0x8ba/0xbe0 [ 130.332873][ T5002] ? netlink_getsockopt+0x570/0x570 [ 130.338061][ T5002] ? aa_sock_msg_perm+0x94/0x150 [ 130.342986][ T5002] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 130.348259][ T5002] ? security_socket_sendmsg+0x7c/0xa0 [ 130.353701][ T5002] ? netlink_getsockopt+0x570/0x570 [ 130.358886][ T5002] ____sys_sendmsg+0x5be/0x8f0 [ 130.363641][ T5002] ? __sys_sendmsg_sock+0x30/0x30 [ 130.368657][ T5002] ? import_iovec+0x6f/0xa0 [ 130.373151][ T5002] ___sys_sendmsg+0x236/0x2e0 [ 130.377821][ T5002] ? __sys_sendmsg+0x290/0x290 [ 130.382638][ T5002] __se_sys_sendmsg+0x1b7/0x2a0 [ 130.387478][ T5002] ? __x64_sys_sendmsg+0x80/0x80 [ 130.392397][ T5002] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 130.398374][ T5002] ? lockdep_hardirqs_on+0x94/0x140 [ 130.403591][ T5002] do_syscall_64+0x4c/0xa0 [ 130.407991][ T5002] ? clear_bhb_loop+0x30/0x80 [ 130.412658][ T5002] ? clear_bhb_loop+0x30/0x80 [ 130.417318][ T5002] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 130.423292][ T5002] RIP: 0033:0x7fb0e1b55e99 [ 130.427696][ T5002] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.447288][ T5002] RSP: 002b:00007fb0dfdae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 130.455691][ T5002] RAX: ffffffffffffffda RBX: 00007fb0e1dddfa0 RCX: 00007fb0e1b55e99 [ 130.463651][ T5002] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000009 [ 130.471611][ T5002] RBP: 00007fb0e1bebeaf R08: 0000000000000000 R09: 0000000000000000 [ 130.479567][ T5002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.487524][ T5002] R13: 00007fb0e1dde038 R14: 00007fb0e1dddfa0 R15: 00007fff1ca9a918 [ 130.495492][ T5002] [ 130.498494][ T5002] [ 130.500805][ T5002] Allocated by task 5002: [ 130.505124][ T5002] __kasan_kmalloc+0xaf/0xe0 [ 130.509706][ T5002] sk_prot_alloc+0xe7/0x210 [ 130.514193][ T5002] sk_alloc+0x2f/0x310 [ 130.518242][ T5002] pfkey_create+0xd8/0x560 [ 130.522667][ T5002] __sock_create+0x473/0x910 [ 130.527238][ T5002] __sys_socket+0xe2/0x170 [ 130.531634][ T5002] __x64_sys_socket+0x76/0x80 [ 130.536286][ T5002] do_syscall_64+0x4c/0xa0 [ 130.540680][ T5002] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 130.546562][ T5002] [ 130.548866][ T5002] Last potentially related work creation: [ 130.554565][ T5002] kasan_save_stack+0x35/0x60 [ 130.559227][ T5002] kasan_record_aux_stack+0xb8/0x100 [ 130.564497][ T5002] call_rcu+0x189/0x900 [ 130.568632][ T5002] netlink_release+0x134c/0x1790 [ 130.573552][ T5002] sock_release+0x7b/0x140 [ 130.577946][ T5002] diag_net_exit+0x3c/0x60 [ 130.582344][ T5002] cleanup_net+0x703/0xba0 [ 130.586741][ T5002] process_one_work+0x867/0xff0 [ 130.591582][ T5002] worker_thread+0xad7/0x12a0 [ 130.596239][ T5002] kthread+0x42e/0x520 [ 130.600288][ T5002] ret_from_fork+0x1f/0x30 [ 130.604711][ T5002] [ 130.607018][ T5002] The buggy address belongs to the object at ffff88807c165000 [ 130.607018][ T5002] which belongs to the cache kmalloc-2k of size 2048 [ 130.621051][ T5002] The buggy address is located 1544 bytes inside of [ 130.621051][ T5002] 2048-byte region [ffff88807c165000, ffff88807c165800) [ 130.634483][ T5002] The buggy address belongs to the page: [ 130.640100][ T5002] page:ffffea0001f05800 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88807c166000 pfn:0x7c160 [ 130.651532][ T5002] head:ffffea0001f05800 order:3 compound_mapcount:0 compound_pincount:0 [ 130.659837][ T5002] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 130.667813][ T5002] raw: 00fff00000010200 0000000000000000 0000000100000001 ffff888016c42000 [ 130.676377][ T5002] raw: ffff88807c166000 0000000080080006 00000001ffffffff 0000000000000000 [ 130.684934][ T5002] page dumped because: kasan: bad access detected [ 130.691331][ T5002] page_owner tracks the page as allocated [ 130.697042][ T5002] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 4266, ts 56467888366, free_ts 54597051235 [ 130.717509][ T5002] get_page_from_freelist+0x24f6/0x2670 [ 130.723133][ T5002] __alloc_pages+0x1ee/0x480 [ 130.727707][ T5002] new_slab+0xc0/0x4b0 [ 130.731776][ T5002] ___slab_alloc+0x807/0xdd0 [ 130.736349][ T5002] __kmalloc+0x11d/0x340 [ 130.740572][ T5002] cache_create_net+0x8e/0x250 [ 130.745318][ T5002] nfsd_export_init+0x55/0x1e0 [ 130.750078][ T5002] nfsd_init_net+0x29/0x1e0 [ 130.754564][ T5002] ops_init+0x360/0x5f0 [ 130.758708][ T5002] setup_net+0x39e/0xa10 [ 130.762930][ T5002] copy_net_ns+0x33e/0x5b0 [ 130.767326][ T5002] create_new_namespaces+0x3ce/0x700 [ 130.772592][ T5002] unshare_nsproxy_namespaces+0x116/0x160 [ 130.778294][ T5002] ksys_unshare+0x4f6/0x8e0 [ 130.782779][ T5002] __x64_sys_unshare+0x34/0x40 [ 130.787529][ T5002] do_syscall_64+0x4c/0xa0 [ 130.791926][ T5002] page last free stack trace: [ 130.796599][ T5002] free_unref_page_prepare+0x637/0x6c0 [ 130.802040][ T5002] free_unref_page+0x8f/0x2a0 [ 130.806697][ T5002] qlist_free_all+0x35/0x90 [ 130.811180][ T5002] kasan_quarantine_reduce+0x150/0x160 [ 130.816618][ T5002] __kasan_slab_alloc+0x2f/0xc0 [ 130.821449][ T5002] slab_post_alloc_hook+0x4c/0x380 [ 130.826540][ T5002] __kmalloc+0x189/0x340 [ 130.830762][ T5002] tomoyo_realpath_from_path+0xed/0x5e0 [ 130.836299][ T5002] tomoyo_condition+0x1a03/0x2d90 [ 130.841303][ T5002] tomoyo_check_acl+0x192/0x420 [ 130.846135][ T5002] tomoyo_execute_permission+0x11f/0x400 [ 130.851760][ T5002] tomoyo_find_next_domain+0x442/0x1a50 [ 130.857297][ T5002] tomoyo_bprm_check_security+0xdd/0x120 [ 130.862913][ T5002] security_bprm_check+0x5e/0x90 [ 130.867831][ T5002] bprm_execve+0x9f2/0x1740 [ 130.872316][ T5002] kernel_execve+0x808/0x8e0 [ 130.876891][ T5002] [ 130.879210][ T5002] Memory state around the buggy address: [ 130.884818][ T5002] ffff88807c165500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 130.892860][ T5002] ffff88807c165580: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc [ 130.900904][ T5002] >ffff88807c165600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 130.908968][ T5002] ^ [ 130.913276][ T5002] ffff88807c165680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 130.921318][ T5002] ffff88807c165700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 130.929444][ T5002] ================================================================== [ 130.937482][ T5002] Disabling lock debugging due to kernel taint [ 130.943701][ T5002] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 130.950890][ T5002] CPU: 1 PID: 5002 Comm: syz.2.178 Tainted: G B syzkaller #0 [ 130.959573][ T5002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 130.969612][ T5002] Call Trace: [ 130.972874][ T5002] [ 130.975786][ T5002] dump_stack_lvl+0x188/0x250 [ 130.980446][ T5002] ? show_regs_print_info+0x20/0x20 [ 130.985644][ T5002] ? load_image+0x410/0x410 [ 130.990128][ T5002] panic+0x2f8/0x850 [ 130.993998][ T5002] ? bpf_jit_dump+0xd0/0xd0 [ 130.998483][ T5002] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 131.004355][ T5002] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 131.010232][ T5002] ? _raw_spin_unlock+0x40/0x40 [ 131.015066][ T5002] ? xfrm_policy_inexact_list_reinsert+0x5a3/0x650 [ 131.021546][ T5002] check_panic_on_warn+0x80/0xa0 [ 131.026473][ T5002] ? xfrm_policy_inexact_list_reinsert+0x5a3/0x650 [ 131.032983][ T5002] end_report+0x6d/0xf0 [ 131.037135][ T5002] kasan_report+0x102/0x130 [ 131.041644][ T5002] ? xfrm_policy_inexact_list_reinsert+0x5a3/0x650 [ 131.048151][ T5002] xfrm_policy_inexact_list_reinsert+0x5a3/0x650 [ 131.054494][ T5002] ? xfrm_policy_addr_delta+0x210/0x330 [ 131.060035][ T5002] xfrm_policy_inexact_insert_node+0x5a4/0xb70 [ 131.066176][ T5002] xfrm_policy_inexact_alloc_chain+0x7a2/0xe70 [ 131.072338][ T5002] ? xfrm_policy_inexact_insert+0xd7/0x12d0 [ 131.078210][ T5002] xfrm_policy_inexact_insert+0xd7/0x12d0 [ 131.083948][ T5002] ? policy_hash_bysel+0x139/0x750 [ 131.089037][ T5002] xfrm_policy_insert+0x10f/0x940 [ 131.094040][ T5002] xfrm_add_policy+0x4e6/0x870 [ 131.098784][ T5002] ? xfrm_dump_sa_done+0xc0/0xc0 [ 131.103701][ T5002] ? apparmor_capable+0x12c/0x190 [ 131.108705][ T5002] ? __nla_parse+0x3c/0x50 [ 131.113097][ T5002] xfrm_user_rcv_msg+0x694/0x980 [ 131.118025][ T5002] ? xfrm_netlink_rcv+0x90/0x90 [ 131.122868][ T5002] ? __mutex_lock_common+0x435/0x2400 [ 131.128222][ T5002] netlink_rcv_skb+0x1e9/0x430 [ 131.132970][ T5002] ? xfrm_netlink_rcv+0x66/0x90 [ 131.137798][ T5002] ? xfrm_netlink_rcv+0x90/0x90 [ 131.142624][ T5002] ? netlink_ack+0xb10/0xb10 [ 131.147198][ T5002] ? __lock_acquire+0x7b50/0x7b50 [ 131.152206][ T5002] xfrm_netlink_rcv+0x75/0x90 [ 131.156869][ T5002] netlink_unicast+0x78f/0x940 [ 131.157193][ T4229] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 131.161651][ T5002] netlink_sendmsg+0x8ba/0xbe0 [ 131.173917][ T5002] ? netlink_getsockopt+0x570/0x570 [ 131.179143][ T5002] ? aa_sock_msg_perm+0x94/0x150 [ 131.184100][ T5002] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 131.189363][ T5002] ? security_socket_sendmsg+0x7c/0xa0 [ 131.194797][ T5002] ? netlink_getsockopt+0x570/0x570 [ 131.199976][ T5002] ____sys_sendmsg+0x5be/0x8f0 [ 131.204721][ T5002] ? __sys_sendmsg_sock+0x30/0x30 [ 131.209748][ T5002] ? import_iovec+0x6f/0xa0 [ 131.214245][ T5002] ___sys_sendmsg+0x236/0x2e0 [ 131.218901][ T5002] ? __sys_sendmsg+0x290/0x290 [ 131.223742][ T5002] __se_sys_sendmsg+0x1b7/0x2a0 [ 131.228566][ T5002] ? __x64_sys_sendmsg+0x80/0x80 [ 131.233473][ T5002] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 131.239432][ T5002] ? lockdep_hardirqs_on+0x94/0x140 [ 131.244626][ T5002] do_syscall_64+0x4c/0xa0 [ 131.249017][ T5002] ? clear_bhb_loop+0x30/0x80 [ 131.253672][ T5002] ? clear_bhb_loop+0x30/0x80 [ 131.258334][ T5002] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 131.264228][ T5002] RIP: 0033:0x7fb0e1b55e99 [ 131.268631][ T5002] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.288216][ T5002] RSP: 002b:00007fb0dfdae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 131.296624][ T5002] RAX: ffffffffffffffda RBX: 00007fb0e1dddfa0 RCX: 00007fb0e1b55e99 [ 131.304578][ T5002] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000009 [ 131.312525][ T5002] RBP: 00007fb0e1bebeaf R08: 0000000000000000 R09: 0000000000000000 [ 131.320474][ T5002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.328422][ T5002] R13: 00007fb0e1dde038 R14: 00007fb0e1dddfa0 R15: 00007fff1ca9a918 [ 131.336374][ T5002] [ 131.339593][ T5002] Kernel Offset: disabled [ 131.343904][ T5002] Rebooting in 86400 seconds..