last executing test programs: 3.273633924s ago: executing program 2 (id=277): r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x64) listen(r0, 0x7f) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) 3.257119885s ago: executing program 1 (id=279): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000440)={0x42, 0x80000009, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000480)={0x80042, 0x1}, 0x10) bind$tipc(r0, 0x0, 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) sendmsg$tipc(r0, &(0x7f00000004c0)={&(0x7f0000000500)=@name={0x1e, 0x2, 0x3, {{0x42, 0x2}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x48004) 3.142368687s ago: executing program 1 (id=280): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_freezer_state(r2, &(0x7f00000000c0), 0x2, 0x0) r4 = openat$cgroup_procs(r2, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000180), 0x12) write$cgroup_freezer_state(r3, &(0x7f0000000200)='THAWED\x00', 0x7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c00)=@newtaction={0x18, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x20000015) socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000040)=0x482, 0x4) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf250100"], 0x18}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="88000000031401002abd700001dcdf250900020073797a320000000008004100727865001400330076657468315f746f5f626f6e640000000900020073797a32020000000800410073697700140033007767320000000000000000000000000009000200730800410073697700140033006d6163766c616e310000000000000000"], 0x88}, 0x1, 0x0, 0x0, 0x20000040}, 0x24008080) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000000000000000020000000900010073797a300000000064000000090a010400000000000000000200000008000a40000000010900020073797a31000000000900010073797a300000000008000540000000080800034000000084200009801c0002800c00018008000140000000040c0001800800014000000004540000000c0a01010000000000000000020000000900020073797a31000000000900010073797a30000000002800038024000080100001800c0001000000e4ff0000000010000a"], 0x100}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {}, {0xa, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x80000001}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4040050) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000840)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="04002bbd7000fbdbdf25020000000500e635fd55d3eb3003002e00000014000900fe8000000000000000000000000000bb0400050008000b00c3f6a22cd74cc87c7f39ebd0c949ce41a3732996d09912a9ee581c96f69b412fc6bff4e8f154a3c57a616f3ce2510035707d94c048aecf8310c46da6ba15", @ANYRES32=0x0, @ANYBLOB='\b\x00\v\x00', @ANYRES32, @ANYBLOB="06000a004e210000"], 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x4041) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0x1, 0x58, &(0x7f00000002c0)}, 0x10) recvmmsg(r0, &(0x7f0000008d80)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)=""/121, 0x79}, {&(0x7f0000001600)=""/4091, 0xffb}], 0x2}, 0x6}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x8bfffe}], 0x4, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x55, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r6 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000240)=ANY=[@ANYRESHEX, @ANYBLOB='m'], 0x31) 3.097169952s ago: executing program 2 (id=283): socket$netlink(0x10, 0x3, 0xc) r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0xfbd, &(0x7f0000000400)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfaf, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xf9b, 0x0, @opaque="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"}}}}}, 0x0) readv(r0, &(0x7f00000013c0)=[{&(0x7f0000001400)=""/168, 0xa8}], 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01040000000000000000050000000900010073797a3000000000080002000000000154000000030a03000000000000000000050000000900010073797a30000000000900030073797a3000000000280004800800024000000012080001400000000014000300776c616e303210d1c70000000000000000000000140000001100010000000000000000000000000a"], 0xa4}, 0x1, 0x0, 0x0, 0x4c841}, 0x802) 2.92555815s ago: executing program 0 (id=286): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1a, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x18}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x34fdb}]}, &(0x7f0000000180)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x5f, '\x00', 0x0, 0x3d}, 0x94) 2.807967522s ago: executing program 0 (id=288): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0xca02}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000400)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) preadv(r0, &(0x7f0000000440)=[{&(0x7f0000000480)=""/14, 0xe}], 0x27, 0x0, 0x1) 2.466582767s ago: executing program 4 (id=291): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd27, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x4e22, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2f, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x9, 0xa00, 0x40800000000000, 0x800000000000000}, 0x8165, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="a00000002100010000000000fefffffffe8000000000000000000000000000aa00000000000000000000000000000000fffe0000000200000a00e08087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000000000000050001100"], 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x13, &(0x7f0000000640)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000700)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000740)=""/222, 0x0, 0x8}, 0x78) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000900)={&(0x7f0000000d00)=ANY=[@ANYRES32=r4, @ANYRESDEC=r3, @ANYBLOB="628dbfe1c8b681974ec57a76aaffeda6dc9f8a7c67a74ecf74e39c83326d99734edecf7b6c3f017bcad60a92829d58035eb525245d7fbe69209f227b3be577706fe3bfc5bdb9d2931539c3b991b3039b964478fe68409825e9472e88f01f8366c24012999932a3790c204c1059642f7a0c8f9a07", @ANYRES32=r0], 0x40}, 0x1, 0x0, 0x0, 0x4001}, 0x4080) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r5) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)={0x34, 0x0, 0x1, 0x0, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_RX={0x8}, @ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x34}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000a80), r6) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='$\x00'}]}, 0x1c}}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)={0x68, r7, 0x5, 0x0, 0x0, {0x1, 0x1}, [@IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x1f90}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x80}]}]}, 0x68}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r6, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000f00)={0xc0, r7, 0x5, 0x0, 0x0, {0x5, 0x1}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x1f90}]}, @IPVS_CMD_ATTR_DEST={0x7c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x1f90}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x3c}}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xe705}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}]}]}, 0xc0}}, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind(r9, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000e40)={0xc}, 0x8) syz_genetlink_get_family_id$batadv(&(0x7f0000000e80), 0xffffffffffffffff) r10 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r10, 0x0, 0x0, 0x0, &(0x7f0000000ec0)={0xa, 0x1f90, 0x0, @local}, 0x1c) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000000104010400000000398f0000000000000500010001"], 0x1c}}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x10000, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, 0x1, 0x4, 0x101, 0x0, 0x0, {0xa}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x200c8016}, 0x24004894) 1.846359521s ago: executing program 2 (id=292): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000140)={r1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000180)={r1, 0x1, 0x6, @remote}, 0x10) 1.700136535s ago: executing program 3 (id=293): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000010000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000037000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.598981796s ago: executing program 3 (id=294): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x1, 0x4, 0x0, 0xff, "bac5115c7dad488702b535116fad55baf63cdd52fc30106310abb622a1c3c01c13c04df6b906288e64e96754059e65c39c5759b069d6e6d9589e5f2348878c", 0x24}, 0x60) 1.598781376s ago: executing program 0 (id=295): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x4c, 0x12, 0x1, 0x70bd27, 0x25dfdbfb, {0x2, 0x6, 0x7, 0x8, {0x4e23, 0x4e23, [0xb5, 0x7, 0xa, 0x1], [0x88, 0x5, 0x40, 0x8], 0x0, [0x0, 0x3]}, 0x6, 0xff}}, 0x4c}, 0x1, 0x0, 0x0, 0x4010000}, 0x40) 1.577868588s ago: executing program 1 (id=296): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000087c0), r0) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000008940)={0x0, 0x0, &(0x7f0000008900)={&(0x7f0000008880)={0x28, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x10}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0x4800}, 0x40) 1.496096176s ago: executing program 3 (id=297): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001680)={0x40, r1, 0x1, 0x4004, 0xf7ffffff, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0xc082}, 0x20008000) 1.433545093s ago: executing program 2 (id=298): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000dc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0xb}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x70}, 0x1, 0x0, 0x0, 0xb0}, 0x20008094) 1.433368713s ago: executing program 0 (id=299): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1a, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x18}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x35011}]}, &(0x7f0000000180)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x5f, '\x00', 0x0, 0x3b}, 0x94) 1.433030763s ago: executing program 4 (id=300): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) 1.419730804s ago: executing program 1 (id=301): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x3, @remote, 'ip6_vti0\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r1, 0x40047438, &(0x7f0000000040)) unshare(0x60600) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$PPPIOCCONNECT(r1, 0x4004743a, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) 1.394363667s ago: executing program 3 (id=302): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1234, 0x2, 0x10, {0x2, 0x5678, @empty}}, 0x24) listen(r0, 0x1) close(0x3) 1.305440126s ago: executing program 0 (id=303): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000380)={0x0, 0x30, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x44}}]}, &(0x7f0000000400)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000440)={r1}, &(0x7f0000000480)=0x8) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, 0x0, &(0x7f00000004c0)) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000001ac0)=0xa, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4, 0x0, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x122, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x4001}) r6 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000100)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', 0x1}) r7 = socket$inet_sctp(0x2, 0x1, 0x84) unshare(0x400) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='memory.events\x00', 0x7a44, 0x1700) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x7a05, 0x1700) write$tun(r9, &(0x7f0000000580)=ANY=[], 0x33) sendfile(r9, r8, 0x0, 0x10000) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='memory.events\x00', 0x7a05, 0x1700) sendfile(r10, r8, 0x0, 0x9) bind(r7, &(0x7f0000000180)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r7, 0x5) write$tun(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c11223344000800000005000500000005c0040008"], 0x4a) 1.305242296s ago: executing program 4 (id=304): socket$netlink(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000240), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6) socket$inet6(0xa, 0x2, 0x3a) socket$nl_route(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000400), 0x101042, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000340)='./dev/sda\x00', 0x101042, 0x5) 1.271803959s ago: executing program 2 (id=305): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001e80)=@newtaction={0x48, 0x31, 0x1, 0xfffffffd, 0x25dfdbfb, {0x0, 0x0, 0x11}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x3, {0x1}}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 1.232943684s ago: executing program 3 (id=306): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000070000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021340011800a0001006c696d6974000000240002800c00024000000000000000060c000140ffffffffffffffff0800034009"], 0xb8}, 0x1, 0x0, 0x0, 0x20040050}, 0x0) 1.013536586s ago: executing program 1 (id=307): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0x1, 0x4, 0x0, 0xff, "bac5115c7dad488702b535116fad55baf63cdd52fc30106310abb622a1c3c01c13c04df6b906288e64e96754059e65c39c5759b069d6e6d9589e5f2348878c", 0x24}, 0x60) 908.386717ms ago: executing program 2 (id=308): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={0x0}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xfffffffb}, 0x5, 0x34, 0x91f}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0x16}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x18000, 0x2, 0x1, 0x5, 0xb, 0xfffffffc}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000b0}, 0xc0d0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56561, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r10, {0x0, 0x6}, {0x3, 0x8}, {0x7, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x8}, @TCA_TBF_PRATE64={0xc, 0x5, 0xf118a815524c8bb}, @TCA_TBF_PARMS={0x28, 0x1, {{0xed, 0x2, 0xe1, 0x400, 0xac, 0x8}, {0x36, 0x2, 0x4, 0x2, 0x3, 0x5}, 0x6, 0x9, 0x1e69}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 713.958657ms ago: executing program 3 (id=309): socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = socket$rds(0x15, 0x5, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) bind$rds(r0, &(0x7f0000000600)={0x2, 0x4e21, @local}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='memory.events\x00', 0x275a, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) socket$inet(0x2, 0x3, 0x2) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) pselect6(0x40, &(0x7f00000007c0)={0x0, 0x0, 0xd6c1, 0x7, 0x4, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000800)={0x3fb, 0xffffffffffffdffd, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x192dbfb5, 0xfffffffffffffffc}, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0xf, &(0x7f0000000900)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf6c5, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x64, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000009c0)={r2, 0xfca804a0, 0xe, 0x0, &(0x7f0000000a40)="b8000005000000005baf2312bbc2", 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) socket$igmp6(0xa, 0x3, 0x2) socket$inet_sctp(0x2, 0x1, 0x84) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), r3) sendmsg$NLBL_MGMT_C_REMOVEDEF(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x14, r4, 0x1, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x84) syz_open_procfs$namespace(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x13, &(0x7f0000000a80)=ANY=[@ANYBLOB="0000000000deff10660800000000000000001000950000000000000036000000002020207b1af8ff00000000bfa100000000000007010000f8ff032a8b4bf299958b7600b50a000000d2bc3a2c0001000000000006000000950000000000000000000000000000000c18b342a96101631b0f6da52370c8c039ad488958293322608d637010f962ca73c2b79a2830594d67787a957cbdf7619f0983d8494f97c387226cf6598f47e4e82e8c2778849e4611aab7c3388466fb932f32"], &(0x7f0000000580)='GPL\x00', 0xa, 0xde, &(0x7f0000000240)=""/222, 0x0, 0x8}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000380)=ANY=[], 0x32600) 302.923909ms ago: executing program 4 (id=310): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@bridge_newvlan={0x24, 0x70, 0x1, 0x70bd2a, 0x25dfdbff, {0x7, 0x0, 0x0, r1}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x42, 0x1}}}]}, 0x24}, 0x1, 0x0, 0x0, 0x40c4}, 0x4040) 237.526396ms ago: executing program 1 (id=311): r0 = socket$kcm(0x29, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000100), 0xffffff6a) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000180)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000480)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000540)=0x84) sendfile(r0, r1, 0x0, 0xffffffff000) 186.392371ms ago: executing program 4 (id=312): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000003a00010325bd20adba0e4a8804"], 0x14}}, 0x0) 184.225791ms ago: executing program 0 (id=313): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140), 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x11, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x36}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r2, 0x0, 0xe, 0x0, &(0x7f00000006c0)="87fc5d85da21530562070095c108", 0x0, 0x8011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x40}, 0x50) 0s ago: executing program 4 (id=314): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000006800010000000000fddbdf250200020000000000060012"], 0x3c}, 0x1, 0x0, 0x0, 0x4044c02}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x90}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.31' (ED25519) to the list of known hosts. [ 63.225751][ T4175] cgroup: Unknown subsys name 'net' [ 63.367083][ T4175] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 64.931130][ T4175] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 66.174741][ T4193] rxe_eth0 speed is unknown, defaulting to 1000 [ 66.182061][ T4189] rdma_rxe: rxe_register_device failed with error -23 [ 66.189964][ T4189] rdma_rxe: failed to add rxe_eth0 [ 66.210237][ T4195] rdma_rxe: rxe_register_device failed with error -23 [ 66.217208][ T4195] rdma_rxe: failed to add rxe_eth0 [ 66.233477][ T4188] rdma_rxe: rxe_register_device failed with error -23 [ 66.248939][ T4193] rxe_eth0 speed is unknown, defaulting to 1000 [ 66.259190][ T4190] rdma_rxe: rxe_register_device failed with error -23 [ 66.265743][ T4188] rdma_rxe: failed to add rxe_eth0 [ 66.279967][ T4190] rdma_rxe: failed to add rxe_eth0 [ 66.291277][ T4193] rxe_eth0 speed is unknown, defaulting to 1000 [ 66.444355][ T4193] infiniband rxe0: set active [ 66.453707][ T4193] infiniband rxe0: added rxe_eth0 [ 66.470956][ T23] rxe_eth0 speed is unknown, defaulting to 1000 [ 66.506430][ T4193] RDS/IB: rxe0: added [ 66.513465][ T4193] smc: adding ib device rxe0 with port count 1 [ 66.525858][ T4193] smc: ib device rxe0 port 1 has pnetid [ 66.533937][ T1108] rxe_eth0 speed is unknown, defaulting to 1000 [ 66.556857][ T4193] rxe_eth0 speed is unknown, defaulting to 1000 [ 66.666460][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 66.733271][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 66.777592][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 66.811157][ T4195] chnl_net:caif_netlink_parms(): no params data found [ 66.833900][ T4193] rxe_eth0 speed is unknown, defaulting to 1000 [ 67.002598][ T4193] rxe_eth0 speed is unknown, defaulting to 1000 [ 67.036920][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.047987][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.075440][ T4189] device bridge_slave_0 entered promiscuous mode [ 67.160520][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.167659][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.188475][ T4189] device bridge_slave_1 entered promiscuous mode [ 67.207909][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.219388][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.234916][ T4195] device bridge_slave_0 entered promiscuous mode [ 67.253342][ T4193] rxe_eth0 speed is unknown, defaulting to 1000 [ 67.280531][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.287741][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.302633][ T4195] device bridge_slave_1 entered promiscuous mode [ 67.321219][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.328352][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.336984][ T4190] device bridge_slave_0 entered promiscuous mode [ 67.374699][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.382530][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.390698][ T4188] device bridge_slave_0 entered promiscuous mode [ 67.398653][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.408499][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.422099][ T4190] device bridge_slave_1 entered promiscuous mode [ 67.431784][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.449818][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.459168][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.474283][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.486426][ T4188] device bridge_slave_1 entered promiscuous mode [ 67.508795][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.528104][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.581829][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.592804][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.604968][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.616961][ T4189] team0: Port device team_slave_0 added [ 67.625659][ T4189] team0: Port device team_slave_1 added [ 67.634042][ T4195] team0: Port device team_slave_0 added [ 67.640808][ T4193] rxe_eth0 speed is unknown, defaulting to 1000 [ 67.645351][ T4195] team0: Port device team_slave_1 added [ 67.661859][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.733029][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.740225][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.766730][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.780544][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.787706][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.814129][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.826190][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.833621][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.860595][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.874541][ T4190] team0: Port device team_slave_0 added [ 67.899951][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.906941][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.934909][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.949083][ T4190] team0: Port device team_slave_1 added [ 67.970448][ T4188] team0: Port device team_slave_0 added [ 68.007670][ T4188] team0: Port device team_slave_1 added [ 68.018543][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.025908][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.052157][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.065529][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.073335][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.099698][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.128489][ T4189] device hsr_slave_0 entered promiscuous mode [ 68.135617][ T4189] device hsr_slave_1 entered promiscuous mode [ 68.160624][ T23] Bluetooth: hci3: command 0x0409 tx timeout [ 68.162882][ T4195] device hsr_slave_0 entered promiscuous mode [ 68.168344][ T23] Bluetooth: hci1: command 0x0409 tx timeout [ 68.173785][ T4177] Bluetooth: hci4: command 0x0409 tx timeout [ 68.185423][ T4177] Bluetooth: hci2: command 0x0409 tx timeout [ 68.192219][ T4177] Bluetooth: hci0: command 0x0409 tx timeout [ 68.198608][ T4195] device hsr_slave_1 entered promiscuous mode [ 68.206071][ T4195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.214083][ T4195] Cannot create hsr debugfs directory [ 68.257170][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.264258][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.290469][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.305227][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.313080][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.339270][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.354161][ T4190] device hsr_slave_0 entered promiscuous mode [ 68.361104][ T4190] device hsr_slave_1 entered promiscuous mode [ 68.368114][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.375863][ T4190] Cannot create hsr debugfs directory [ 68.526989][ T4188] device hsr_slave_0 entered promiscuous mode [ 68.534298][ T4188] device hsr_slave_1 entered promiscuous mode [ 68.541675][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.549273][ T4188] Cannot create hsr debugfs directory [ 68.766926][ T4190] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 68.794072][ T4190] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 68.803871][ T4190] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 68.814776][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 68.843548][ T4190] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 68.883146][ T4195] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 68.894904][ T4195] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 68.925173][ T4195] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 68.936471][ T4195] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 68.983048][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.990924][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.998813][ T4193] device bridge_slave_0 entered promiscuous mode [ 69.008943][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.016190][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.025391][ T4193] device bridge_slave_1 entered promiscuous mode [ 69.073463][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.086058][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.119099][ T4193] team0: Port device team_slave_0 added [ 69.134320][ T4189] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.145134][ T4193] team0: Port device team_slave_1 added [ 69.166408][ T4189] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.179447][ T4189] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.192523][ T4189] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.202651][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.210099][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.236323][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.266883][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.274340][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.303017][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.345660][ T4193] device hsr_slave_0 entered promiscuous mode [ 69.353187][ T4193] device hsr_slave_1 entered promiscuous mode [ 69.360398][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.367995][ T4193] Cannot create hsr debugfs directory [ 69.418512][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.441301][ T4188] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.457290][ T4188] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.467098][ T4188] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.488016][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.512288][ T4188] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.565834][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.575429][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.585493][ T1147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.593561][ T1147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.615718][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.631073][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.674728][ T1147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.684371][ T1147] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.693982][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.701333][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.712776][ T1147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.721612][ T1147] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.730337][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.737429][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.745470][ T1147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.756263][ T1147] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.765835][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.772967][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.808711][ T1147] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.817360][ T1147] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.825664][ T1147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.835049][ T1147] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.845558][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.852704][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.862957][ T1147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.874099][ T1147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.888368][ T1147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.897804][ T1147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.918596][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.935804][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.946242][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.968792][ T4190] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 69.982365][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.994937][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.004977][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.016850][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.026441][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.038698][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.047807][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.057199][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.066391][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.075930][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.085453][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.094077][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.111553][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.121031][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.130020][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.138259][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.172741][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.181624][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.201294][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.211634][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.223191][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.233296][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.245215][ T4193] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.252947][ T4257] Bluetooth: hci0: command 0x041b tx timeout [ 70.263636][ T4257] Bluetooth: hci1: command 0x041b tx timeout [ 70.272503][ T4257] Bluetooth: hci2: command 0x041b tx timeout [ 70.278631][ T4257] Bluetooth: hci4: command 0x041b tx timeout [ 70.288672][ T4257] Bluetooth: hci3: command 0x041b tx timeout [ 70.302554][ T4193] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.318516][ T4193] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.328439][ T4193] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.354968][ T1147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.364404][ T1147] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.373444][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.380686][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.393148][ T1147] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.424060][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.437445][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.448731][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.470603][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.477714][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.497831][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.530287][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.567632][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.575365][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.583995][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.593947][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.602949][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.611688][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.619514][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.632056][ T1147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.643736][ T1147] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.662691][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.678082][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.705901][ T1147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.726597][ T1147] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.760332][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.775435][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.795703][ T1147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.805815][ T1147] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.815200][ T1147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.825177][ T1147] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.834321][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.841467][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.849476][ T1147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.858523][ T1147] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.868567][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.875711][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.886222][ T1147] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.905508][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.924312][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.963952][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.981054][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.997556][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.006814][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.031008][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.055310][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.064002][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.090600][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.099480][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.124194][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.139861][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.148212][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.164942][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.236690][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.288991][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.306761][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.317886][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.326177][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.347860][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.364233][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.370996][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.392136][ T1147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.405789][ T1147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.418814][ T1147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.434771][ T1147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.444261][ T1147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.453207][ T1147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.472462][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.495535][ T4195] device veth0_vlan entered promiscuous mode [ 71.508287][ T1147] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.517933][ T1147] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.534107][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.544627][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.553914][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.561053][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.574685][ T4195] device veth1_vlan entered promiscuous mode [ 71.610688][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.618928][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.627973][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.636016][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.643842][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.653009][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.661940][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.671576][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.681396][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.688490][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.696499][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.706767][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.716333][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.726462][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.734708][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.754634][ T4190] device veth0_vlan entered promiscuous mode [ 71.776070][ T4189] device veth0_vlan entered promiscuous mode [ 71.784939][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.795898][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.806282][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.815590][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.824741][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.833739][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.844632][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.853705][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.862239][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.876078][ T4190] device veth1_vlan entered promiscuous mode [ 71.894457][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.907410][ T4189] device veth1_vlan entered promiscuous mode [ 71.918269][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.929488][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.938536][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.948757][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.957654][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.966472][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.993174][ T1147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.002236][ T1147] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.033392][ T1147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.043218][ T1147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.054643][ T1147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.063680][ T1147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.075819][ T4195] device veth0_macvtap entered promiscuous mode [ 72.085720][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.096279][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.106103][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.121953][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.133803][ T4190] device veth0_macvtap entered promiscuous mode [ 72.150518][ T4195] device veth1_macvtap entered promiscuous mode [ 72.179576][ T4190] device veth1_macvtap entered promiscuous mode [ 72.194841][ T4189] device veth0_macvtap entered promiscuous mode [ 72.208939][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.218535][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.227438][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.237014][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.246379][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.255990][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.265610][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.281762][ T4188] device veth0_vlan entered promiscuous mode [ 72.304077][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.313323][ T4189] device veth1_macvtap entered promiscuous mode [ 72.320145][ T4250] Bluetooth: hci3: command 0x040f tx timeout [ 72.327183][ T4250] Bluetooth: hci4: command 0x040f tx timeout [ 72.338324][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.350436][ T4250] Bluetooth: hci2: command 0x040f tx timeout [ 72.356665][ T4250] Bluetooth: hci1: command 0x040f tx timeout [ 72.363398][ T4250] Bluetooth: hci0: command 0x040f tx timeout [ 72.369813][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.387549][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.397283][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.409741][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.417601][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.427623][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.436011][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.445192][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.454356][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.465526][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.485284][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.504817][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.522600][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.537075][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.549211][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.564076][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.573560][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.586212][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.607188][ T4190] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.617164][ T4190] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.632350][ T4190] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.643090][ T4190] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.663393][ T4195] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.672763][ T4195] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.682137][ T4195] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.691182][ T4195] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.707176][ T4188] device veth1_vlan entered promiscuous mode [ 72.719948][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.730704][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.742096][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.752992][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.764399][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.780597][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.791393][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.802758][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.814083][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.826364][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.839363][ T4189] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.851748][ T4189] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.861041][ T4189] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.870137][ T4189] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.888795][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.897481][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.906174][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.915660][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.924937][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.934088][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.993170][ T1147] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.000978][ T1147] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.058186][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.117916][ T4188] device veth0_macvtap entered promiscuous mode [ 73.150993][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.160866][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.178892][ T4188] device veth1_macvtap entered promiscuous mode [ 73.198742][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.209796][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.217851][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.227822][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.237762][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.269301][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.286752][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.298354][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.309654][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.321897][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.332690][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.344675][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.372144][ T1147] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.381588][ T1147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.391709][ T1147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.400775][ T1147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.426400][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.437663][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.451716][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.462971][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.473009][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.484067][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.495807][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.505315][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.519035][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.544388][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.554160][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.563807][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.575487][ T4188] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.584645][ T4188] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.594127][ T4188] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.604246][ T4188] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.633577][ T1147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.642637][ T1147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.653352][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.666709][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.691105][ T1147] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.699279][ T1147] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.710182][ T1147] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.722503][ T4193] device veth0_vlan entered promiscuous mode [ 73.740834][ T4263] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.756085][ T4263] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.776689][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.794572][ T4193] device veth1_vlan entered promiscuous mode [ 73.838822][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.846607][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.846735][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.862856][ T1147] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.871788][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.891159][ T1147] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.899329][ T1147] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.944346][ T1147] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.969090][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.992100][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.005985][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.019498][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.033883][ T4193] device veth0_macvtap entered promiscuous mode [ 74.064277][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.076325][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.097299][ T4193] device veth1_macvtap entered promiscuous mode [ 74.489577][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 74.509575][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10a!!! [ 74.519579][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10a!!! [ 74.529583][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 74.539583][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 74.549581][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 74.559581][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 74.569579][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 74.579578][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 74.589578][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 75.355495][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.386692][ T13] Bluetooth: hci0: command 0x0419 tx timeout [ 75.395168][ T13] Bluetooth: hci1: command 0x0419 tx timeout [ 75.407916][ T13] Bluetooth: hci2: command 0x0419 tx timeout [ 75.415326][ T13] Bluetooth: hci4: command 0x0419 tx timeout [ 75.427287][ T13] Bluetooth: hci3: command 0x0419 tx timeout [ 75.511193][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.557753][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.579265][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.595659][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.626866][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.655222][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.679998][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.709817][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.736611][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.759400][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.782306][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.803442][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.812541][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.831183][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.897672][ T4303] device syzkaller0 entered promiscuous mode [ 75.926888][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.958460][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.989699][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.030069][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.068385][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.096673][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.111175][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.129950][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.177874][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.297217][ T1147] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.317365][ T1147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.342976][ T4193] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.355966][ T4193] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.376050][ T4193] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.384957][ T4193] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.576177][ T26] audit: type=1800 audit(1793795930.853:2): pid=4321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.9" name=08 dev="sda1" ino=2046 res=0 errno=0 [ 76.608202][ T4325] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11'. [ 76.623639][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.640080][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.690896][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.762125][ T4263] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.789006][ T4263] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.814197][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.906397][ T4340] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16'. [ 78.766336][ T4352] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 78.871561][ T23] rxe_eth0 speed is unknown, defaulting to 1000 [ 81.045890][ T4384] device syzkaller0 entered promiscuous mode [ 81.443557][ T4393] loop0: detected capacity change from 0 to 512 [ 81.633115][ T4393] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 81.697707][ T4393] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.31: invalid indirect mapped block 256 (level 1) [ 81.757517][ T4393] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.31: invalid indirect mapped block 2683928664 (level 1) [ 82.623787][ T4393] EXT4-fs (loop0): 1 truncate cleaned up [ 82.640310][ T4393] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,max_dir_size_kb=0x0000000000000009,stripe=0x0000000000000ee9,nodioread_nolock,discard,usrjquota=.nouid32,noauto_da_alloc,jqfmt=vfsv0,barrier,nogrpid,,,errors=continue. Quota mode: writeback. [ 83.158115][ T4412] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz.0.31: Invalid block bitmap block 3 in block_group 0 [ 84.261141][ T4421] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 84.707431][ T4436] ip_tables: iptables: counters copy to user failed while replacing table [ 86.734634][ T7] cfg80211: failed to load regulatory.db [ 88.546375][ T4458] device syzkaller0 entered promiscuous mode [ 89.294784][ T4471] loop2: detected capacity change from 0 to 512 [ 89.310456][ T4469] loop3: detected capacity change from 0 to 1024 [ 89.393541][ T4191] Bluetooth: hci1: Received unexpected HCI Event 00000000 [ 89.606891][ T4475] loop4: detected capacity change from 0 to 256 [ 89.723373][ T4478] Zero length message leads to an empty skb [ 90.299934][ T4475] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18d7c, utbl_chksum : 0xe619d30d) [ 90.358238][ T4480] 9pnet: Insufficient options for proto=fd [ 90.588705][ T4484] loop2: detected capacity change from 0 to 512 [ 93.503786][ T4484] EXT4-fs: failed to create workqueue [ 93.536028][ T4484] EXT4-fs (loop2): mount failed [ 93.827765][ T4506] device syzkaller0 entered promiscuous mode [ 93.836468][ T4508] loop2: detected capacity change from 0 to 512 [ 93.891902][ T4508] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 93.959435][ T4508] EXT4-fs (loop2): 1 truncate cleaned up [ 94.015693][ T4515] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 94.045720][ T4508] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,dioread_nolock,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,nojournal_checksum,grpjquota=,,errors=continue. Quota mode: none. [ 94.080368][ T4508] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2812: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 94.202556][ T4518] loop0: detected capacity change from 0 to 2048 [ 94.901933][ T4518] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 94.949825][ T4518] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.323607][ T4558] loop4: detected capacity change from 0 to 512 [ 98.338933][ T4559] ip_tables: iptables: counters copy to user failed while replacing table [ 98.525589][ T4561] device syzkaller0 entered promiscuous mode [ 104.104653][ T4592] ip_tables: iptables: counters copy to user failed while replacing table [ 104.441625][ T4599] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 104.603727][ T4604] FAULT_INJECTION: forcing a failure. [ 104.603727][ T4604] name failslab, interval 1, probability 0, space 0, times 1 [ 104.617119][ T4604] CPU: 1 PID: 4604 Comm: syz.2.88 Not tainted syzkaller #0 [ 104.624408][ T4604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 104.634599][ T4604] Call Trace: [ 104.637920][ T4604] [ 104.640888][ T4604] dump_stack_lvl+0x188/0x250 [ 104.645858][ T4604] ? show_regs_print_info+0x20/0x20 [ 104.651153][ T4604] ? load_image+0x410/0x410 [ 104.655797][ T4604] ? __might_sleep+0xf0/0xf0 [ 104.660607][ T4604] ? __lock_acquire+0x7d40/0x7d40 [ 104.665874][ T4604] should_fail+0x383/0x4b0 [ 104.670349][ T4604] should_failslab+0x5/0x20 [ 104.674897][ T4604] slab_pre_alloc_hook+0x51/0xc0 [ 104.679884][ T4604] ? getname_flags+0xb7/0x4f0 [ 104.684602][ T4604] kmem_cache_alloc+0x3d/0x280 [ 104.689412][ T4604] getname_flags+0xb7/0x4f0 [ 104.693958][ T4604] __x64_sys_mkdirat+0x78/0x90 [ 104.698788][ T4604] do_syscall_64+0x4c/0xa0 [ 104.703424][ T4604] ? clear_bhb_loop+0x30/0x80 [ 104.708155][ T4604] ? clear_bhb_loop+0x30/0x80 [ 104.712895][ T4604] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 104.719064][ T4604] RIP: 0033:0x7f9d30c84b19 [ 104.723533][ T4604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.743475][ T4604] RSP: 002b:00007f9d2eedb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 104.751945][ T4604] RAX: ffffffffffffffda RBX: 00007f9d30f0afa0 RCX: 00007f9d30c84b19 [ 104.759974][ T4604] RDX: 00000000000001ff RSI: 0000000000000000 RDI: ffffffffffffff9c [ 104.768001][ T4604] RBP: 00007f9d30d1cb70 R08: 0000000000000000 R09: 0000000000000000 [ 104.776023][ T4604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.784057][ T4604] R13: 00007f9d30f0b038 R14: 00007f9d30f0afa0 R15: 00007fff8dbc3698 [ 104.792096][ T4604] [ 104.879449][ T4613] netlink: 'syz.2.90': attribute type 7 has an invalid length. [ 104.919651][ T4613] netlink: 'syz.2.90': attribute type 8 has an invalid length. [ 108.109584][ C1] sched: RT throttling activated [ 108.946245][ T4191] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 108.970394][ T4640] loop4: detected capacity change from 0 to 16 [ 109.106223][ T4640] erofs: (device loop4): check_layout_compatibility: unidentified incompatible feature 8, please upgrade kernel version [ 109.306742][ T4643] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 109.404792][ T4645] loop4: detected capacity change from 0 to 1024 [ 109.424696][ T4645] ======================================================= [ 109.424696][ T4645] WARNING: The mand mount option has been deprecated and [ 109.424696][ T4645] and is ignored by this kernel. Remove the mand [ 109.424696][ T4645] option from the mount to silence this warning. [ 109.424696][ T4645] ======================================================= [ 109.577667][ T26] audit: type=1326 audit(1793795963.853:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4646 comm="syz.0.100" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ea9504b19 code=0x7ffc0000 [ 109.632985][ T4645] EXT4-fs (loop4): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000000,,errors=continue. Quota mode: none. [ 109.690142][ T4645] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.719885][ T26] audit: type=1326 audit(1793795963.903:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4646 comm="syz.0.100" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ea9504b19 code=0x7ffc0000 [ 109.815104][ T4644] EXT4-fs error (device loop4): ext4_free_blocks:6231: comm syz.4.99: Freeing blocks not in datazone - block = 0, count = 16 [ 109.839719][ T26] audit: type=1326 audit(1793795963.903:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4646 comm="syz.0.100" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ea9504b19 code=0x7ffc0000 [ 109.865075][ T4652] loop1: detected capacity change from 0 to 512 [ 109.897806][ T26] audit: type=1326 audit(1793795963.913:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4646 comm="syz.0.100" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4ea9504b19 code=0x7ffc0000 [ 109.902035][ T4652] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 109.932568][ T4644] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.99: bg 0: block 112: padding at end of block bitmap is not set [ 109.951613][ T4652] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 110.072362][ T4644] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 110.174117][ T26] audit: type=1326 audit(1793795963.913:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4646 comm="syz.0.100" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ea9504b19 code=0x7ffc0000 [ 110.319650][ T26] audit: type=1326 audit(1793795963.913:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4646 comm="syz.0.100" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ea9504b19 code=0x7ffc0000 [ 110.977281][ T26] audit: type=1326 audit(1793795963.913:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4646 comm="syz.0.100" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ea9504b19 code=0x7ffc0000 [ 111.901203][ T4652] EXT4-fs (loop1): 1 truncate cleaned up [ 111.906932][ T4652] EXT4-fs (loop1): mounted filesystem without journal. Opts: nojournal_checksum,jqfmt=vfsold,lazytime,usrquota,usrquota,,errors=continue. Quota mode: writeback. [ 112.121839][ T26] audit: type=1326 audit(1793795963.913:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4646 comm="syz.0.100" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ea9504b19 code=0x7ffc0000 [ 112.271313][ T4677] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.279839][ T4677] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.299768][ T26] audit: type=1326 audit(1793795963.913:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4646 comm="syz.0.100" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f4ea9504b19 code=0x7ffc0000 [ 112.378511][ T26] audit: type=1326 audit(1793795963.913:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4646 comm="syz.0.100" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ea9504b19 code=0x7ffc0000 [ 112.427097][ T4681] vhci_hcd vhci_hcd.0: failed to lookup sock [ 113.882283][ T4688] loop2: detected capacity change from 0 to 128 [ 113.935972][ T4688] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 113.971591][ T4688] ext4 filesystem being mounted at /24/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 115.029304][ T4696] loop4: detected capacity change from 0 to 128 [ 115.459602][ T4688] EXT4-fs error (device loop2): __ext4_find_entry:1698: inode #2: comm syz.2.110: checksumming directory block 0 [ 117.258389][ T4717] loop2: detected capacity change from 0 to 1024 [ 117.553943][ T4726] autofs4:pid:4726:autofs_fill_super: called with bogus options [ 118.361195][ T4729] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 118.960668][ T4744] loop1: detected capacity change from 0 to 164 [ 120.829407][ T4747] xt_CT: You must specify a L4 protocol and not use inversions on it [ 120.951664][ T4744] rock: directory entry would overflow storage [ 120.958570][ T4744] rock: sig=0x5252, size=5, remaining=3 [ 120.964306][ T4744] isofs_fill_super: root inode is not a directory. Corrupted media? [ 121.339675][ T4756] device syzkaller0 entered promiscuous mode [ 121.679939][ T4770] autofs4:pid:4770:autofs_fill_super: called with bogus options [ 122.640384][ T4783] netlink: 16 bytes leftover after parsing attributes in process `syz.2.140'. [ 122.678482][ T4783] rxe_eth0 speed is unknown, defaulting to 1000 [ 122.706675][ T4783] netlink: 16 bytes leftover after parsing attributes in process `syz.2.140'. [ 122.765263][ T4791] netlink: 'syz.1.143': attribute type 1 has an invalid length. [ 122.810923][ T4791] netlink: 244 bytes leftover after parsing attributes in process `syz.1.143'. [ 122.884705][ T26] kauditd_printk_skb: 33 callbacks suppressed [ 122.884721][ T26] audit: type=1800 audit(1793795977.163:46): pid=4794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.145" name=08 dev="sda1" ino=2046 res=0 errno=0 [ 123.005345][ T4799] loop4: detected capacity change from 0 to 2048 [ 123.013292][ T4801] device syzkaller0 entered promiscuous mode [ 123.133118][ T4808] autofs4:pid:4808:autofs_fill_super: called with bogus options [ 123.451149][ T4799] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,jqfmt=vfsv1,errors=remount-ro,nodiscard,. Quota mode: none. [ 123.508253][ T4817] device ip6gretap0 entered promiscuous mode [ 123.721559][ T4833] netlink: 28 bytes leftover after parsing attributes in process `syz.0.157'. [ 123.873953][ T4830] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 123.899896][ T26] audit: type=1800 audit(1793795978.173:47): pid=4843 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.159" name=08 dev="sda1" ino=2046 res=0 errno=0 [ 123.983265][ T4847] device syzkaller0 entered promiscuous mode [ 124.103577][ T4855] netlink: 12 bytes leftover after parsing attributes in process `syz.1.165'. [ 124.210597][ T4863] ip_tables: iptables: counters copy to user failed while replacing table [ 124.256405][ T4863] Illegal XDP return value 4294967274, expect packet loss! [ 124.277390][ T4865] autofs4:pid:4865:autofs_fill_super: called with bogus options [ 125.128690][ T26] audit: type=1800 audit(1793795979.403:48): pid=4874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.173" name=08 dev="sda1" ino=2046 res=0 errno=0 [ 125.204301][ T4878] FAULT_INJECTION: forcing a failure. [ 125.204301][ T4878] name failslab, interval 1, probability 0, space 0, times 0 [ 125.235645][ T4878] CPU: 0 PID: 4878 Comm: syz.1.175 Not tainted syzkaller #0 [ 125.243016][ T4878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 125.253313][ T4878] Call Trace: [ 125.256922][ T4878] [ 125.259917][ T4878] dump_stack_lvl+0x188/0x250 [ 125.264658][ T4878] ? show_regs_print_info+0x20/0x20 [ 125.270086][ T4878] ? load_image+0x410/0x410 [ 125.274649][ T4878] ? __might_sleep+0xf0/0xf0 [ 125.279289][ T4878] ? __lock_acquire+0x7d40/0x7d40 [ 125.284499][ T4878] should_fail+0x383/0x4b0 [ 125.288968][ T4878] should_failslab+0x5/0x20 [ 125.293561][ T4878] slab_pre_alloc_hook+0x51/0xc0 [ 125.298548][ T4878] kmem_cache_alloc_trace+0x47/0x290 [ 125.303882][ T4878] ? newseg+0x240/0xbe0 [ 125.308092][ T4878] newseg+0x240/0xbe0 [ 125.312135][ T4878] ? ksys_shmget+0x140/0x140 [ 125.316865][ T4878] ipcget+0x8be/0xc50 [ 125.321006][ T4878] ? ipc_obtain_object_check+0x1a0/0x1a0 [ 125.326789][ T4878] ? __lock_acquire+0x7d40/0x7d40 [ 125.331867][ T4878] __x64_sys_shmget+0x13d/0x180 [ 125.336875][ T4878] ? lock_chain_count+0x20/0x20 [ 125.341773][ T4878] ? shm_more_checks+0x80/0x80 [ 125.346589][ T4878] ? lockdep_hardirqs_on+0x94/0x140 [ 125.351833][ T4878] do_syscall_64+0x4c/0xa0 [ 125.356289][ T4878] ? clear_bhb_loop+0x30/0x80 [ 125.361004][ T4878] ? clear_bhb_loop+0x30/0x80 [ 125.365735][ T4878] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 125.371698][ T4878] RIP: 0033:0x7f4b5d851b19 [ 125.376153][ T4878] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.396086][ T4878] RSP: 002b:00007f4b5baa8028 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 125.404563][ T4878] RAX: ffffffffffffffda RBX: 00007f4b5dad7fa0 RCX: 00007f4b5d851b19 [ 125.412599][ T4878] RDX: 0000000000000200 RSI: 0000000000003000 RDI: 00000000798dd819 [ 125.420616][ T4878] RBP: 00007f4b5d8e9b70 R08: 0000000000000000 R09: 0000000000000000 [ 125.428628][ T4878] R10: 0000200000ffd000 R11: 0000000000000246 R12: 0000000000000000 [ 125.436634][ T4878] R13: 00007f4b5dad8038 R14: 00007f4b5dad7fa0 R15: 00007ffd44fae798 [ 125.444671][ T4878] [ 125.536886][ T4886] device syzkaller0 entered promiscuous mode [ 125.638309][ T4895] netlink: 'syz.1.181': attribute type 12 has an invalid length. [ 125.646385][ T4495] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 125.660518][ T4896] tipc: Started in network mode [ 125.667255][ T4896] tipc: Node identity de64e2b66fe, cluster identity 4711 [ 125.677102][ T4896] tipc: Enabled bearer , priority 0 [ 125.685835][ T4895] netlink: 4 bytes leftover after parsing attributes in process `syz.1.181'. [ 125.802940][ T4901] autofs4:pid:4901:autofs_fill_super: called with bogus options [ 126.571972][ T4890] device syzkaller0 entered promiscuous mode [ 126.582509][ T4889] tipc: Resetting bearer [ 126.584067][ T4905] netlink: 76 bytes leftover after parsing attributes in process `syz.3.184'. [ 126.684120][ T4889] tipc: Disabling bearer [ 126.799908][ T4495] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 126.814589][ T4918] netlink: 20 bytes leftover after parsing attributes in process `syz.3.190'. [ 126.823835][ T4495] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 126.823942][ T4495] usb 3-1: New USB device found, idVendor=041e, idProduct=3010, bcdDevice= 1.00 [ 126.823975][ T4495] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.900542][ T4919] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 126.962240][ T4914] xt_hashlimit: size too large, truncated to 1048576 [ 127.147065][ T4495] usb 3-1: 0:1 : does not exist [ 127.204689][ T4495] usb 3-1: USB disconnect, device number 2 [ 127.494430][ T4934] autofs4:pid:4934:autofs_fill_super: called with bogus options [ 127.526780][ T4934] netlink: 48 bytes leftover after parsing attributes in process `syz.1.195'. [ 128.286515][ T4929] device syzkaller0 entered promiscuous mode [ 128.317002][ T4938] loop4: detected capacity change from 0 to 256 [ 128.422824][ T4938] FAT-fs (loop4): Directory bread(block 1285) failed [ 128.443834][ T4938] FAT-fs (loop4): Directory bread(block 1286) failed [ 128.461898][ T4938] FAT-fs (loop4): Directory bread(block 1287) failed [ 128.519931][ T4938] FAT-fs (loop4): Directory bread(block 1288) failed [ 128.586432][ T4938] FAT-fs (loop4): Directory bread(block 1285) failed [ 128.615829][ T4938] FAT-fs (loop4): Directory bread(block 1286) failed [ 128.634266][ T4938] FAT-fs (loop4): Directory bread(block 1287) failed [ 128.656824][ T4938] FAT-fs (loop4): Directory bread(block 1288) failed [ 130.003324][ T4938] FAT-fs (loop4): Directory bread(block 1285) failed [ 130.052939][ T4955] FAT-fs (loop4): FAT read failed (blocknr 1281) [ 130.076017][ T4958] netlink: 24 bytes leftover after parsing attributes in process `syz.2.204'. [ 130.085331][ T4958] netlink: 24 bytes leftover after parsing attributes in process `syz.2.204'. [ 130.557278][ T4976] device syzkaller0 entered promiscuous mode [ 132.092615][ T4986] device syzkaller0 entered promiscuous mode [ 133.008347][ T5010] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.015762][ T5010] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.642483][ T5003] Cannot find add_set index 0 as target [ 133.663879][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.679552][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.697494][ T5068] device syzkaller0 entered promiscuous mode [ 135.922859][ T5091] fuse: Unknown parameter '0000000000000000000000000000000000000000' [ 135.949083][ T26] audit: type=1326 audit(1793795990.213:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5088 comm="syz.1.232" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b5d851b19 code=0x7ffc0000 [ 136.414982][ T26] audit: type=1326 audit(1793795990.213:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5088 comm="syz.1.232" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f4b5d851b19 code=0x7ffc0000 [ 136.505778][ T26] audit: type=1326 audit(1793795990.213:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5088 comm="syz.1.232" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b5d851b19 code=0x7ffc0000 [ 136.590699][ T26] audit: type=1326 audit(1793795990.213:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5088 comm="syz.1.232" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f4b5d851b19 code=0x7ffc0000 [ 136.652405][ T5095] netlink: 'syz.2.234': attribute type 1 has an invalid length. [ 136.688034][ T26] audit: type=1326 audit(1793795990.223:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5088 comm="syz.1.232" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b5d851b19 code=0x7ffc0000 [ 136.745353][ T5095] 8021q: adding VLAN 0 to HW filter on device bond1 [ 136.787688][ T26] audit: type=1326 audit(1793795990.223:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5088 comm="syz.1.232" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f4b5d851b19 code=0x7ffc0000 [ 136.844114][ T26] audit: type=1326 audit(1793795990.223:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5088 comm="syz.1.232" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b5d851b19 code=0x7ffc0000 [ 136.882688][ T5100] bond1: (slave veth3): Enslaving as an active interface with a down link [ 136.906354][ T26] audit: type=1326 audit(1793795990.223:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5088 comm="syz.1.232" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b5d851b19 code=0x7ffc0000 [ 136.966395][ T5103] device wlan1 entered promiscuous mode [ 136.994512][ T5103] bond1: (slave wlan1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 137.128575][ T5110] netlink: 24 bytes leftover after parsing attributes in process `syz.4.237'. [ 137.791101][ T5119] netlink: 12 bytes leftover after parsing attributes in process `syz.2.240'. [ 140.662634][ T5161] netlink: 8 bytes leftover after parsing attributes in process `syz.4.254'. [ 140.679751][ T5161] netlink: 8 bytes leftover after parsing attributes in process `syz.4.254'. [ 140.766707][ T5166] netlink: 8 bytes leftover after parsing attributes in process `syz.2.256'. [ 140.827000][ T5171] netlink: 'syz.4.257': attribute type 5 has an invalid length. [ 142.391038][ T5226] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 142.720904][ T4464] Bluetooth: hci1: command 0x0409 tx timeout [ 143.977625][ T5259] IPVS: rr: UDP [fe80::aa]:8080 - no destination available [ 144.007653][ T5268] netlink: 16 bytes leftover after parsing attributes in process `syz.0.295'. [ 144.035043][ T5266] device batadv_slave_0 entered promiscuous mode [ 144.051683][ T5265] device batadv_slave_0 left promiscuous mode [ 145.402978][ T5309] tipc: Started in network mode [ 145.419765][ T5309] tipc: Node identity c6afdaa845fa, cluster identity 4711 [ 145.427064][ T5309] tipc: Enabled bearer , priority 0 [ 145.466277][ T5309] device syzkaller0 entered promiscuous mode [ 145.492796][ T5309] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 145.528137][ T5309] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 145.560166][ T5309] tipc: Resetting bearer [ 145.569827][ C0] [ 145.572685][ C0] ============================= [ 145.577596][ C0] WARNING: suspicious RCU usage [ 145.582531][ C0] syzkaller #0 Not tainted [ 145.586980][ C0] ----------------------------- [ 145.591906][ C0] net/sched/sch_api.c:304 suspicious rcu_dereference_protected() usage! [ 145.600316][ C0] [ 145.600316][ C0] other info that might help us debug this: [ 145.600316][ C0] [ 145.610617][ C0] [ 145.610617][ C0] rcu_scheduler_active = 2, debug_locks = 1 [ 145.618846][ C0] 11 locks held by syz.1.242/5131: [ 145.624023][ C0] #0: ffff88807b0a0460 (sb_writers#3){.+.+}-{0:0}, at: do_coredump+0x14c4/0x2a40 [ 145.633376][ C0] #1: ffff88807bb8a568 (&mm->mmap_lock){++++}-{3:3}, at: get_dump_page+0xee/0x670 [ 145.642812][ C0] #2: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 145.652609][ C0] #3: ffff88807d5e5198 (ptlock_ptr(page)#2){+.+.}-{2:2}, at: filemap_map_pages+0xbd4/0x1450 [ 145.662955][ C0] #4: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 145.672392][ C0] #5: ffffc90000007bc0 ((&d->timer)){+.-.}-{0:0}, at: call_timer_fn+0xca/0x540 [ 145.681570][ C0] #6: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 145.691129][ C0] #7: ffffffff8d11f000 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 145.700811][ C0] #8: ffff88805f861108 (&sch->q.lock){+.-.}-{2:2}, at: __dev_queue_xmit+0xa2b/0x2e50 [ 145.710506][ C0] #9: ffff88805f861148 (dev->qdisc_running_key ?: &qdisc_running_key){+...}-{0:0}, at: tipc_l2_send_msg+0x2eb/0x3a0 [ 145.723003][ C0] #10: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 145.732611][ C0] [ 145.732611][ C0] stack backtrace: [ 145.738537][ C0] CPU: 0 PID: 5131 Comm: syz.1.242 Not tainted syzkaller #0 [ 145.745873][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 145.756134][ C0] Call Trace: [ 145.759482][ C0] [ 145.762358][ C0] dump_stack_lvl+0x188/0x250 [ 145.767097][ C0] ? show_regs_print_info+0x20/0x20 [ 145.772354][ C0] ? lockdep_rcu_suspicious+0x110/0x180 [ 145.777944][ C0] qdisc_lookup+0xa6/0x640 [ 145.782405][ C0] qdisc_tree_reduce_backlog+0x188/0x480 [ 145.788085][ C0] netem_dequeue+0xe07/0x1410 [ 145.792807][ C0] ? ktime_get+0x7b/0x270 [ 145.797207][ C0] ? netem_enqueue+0x37f0/0x37f0 [ 145.802213][ C0] ? netem_enqueue+0x1763/0x37f0 [ 145.807199][ C0] qdisc_peek_dequeued+0x6e/0x1f0 [ 145.812265][ C0] tbf_dequeue+0x7b/0xcf0 [ 145.816705][ C0] __qdisc_run+0x22f/0x14b0 [ 145.821273][ C0] __dev_queue_xmit+0xdce/0x2e50 [ 145.826274][ C0] ? dev_queue_xmit+0x20/0x20 [ 145.831000][ C0] ? mark_lock+0x94/0x320 [ 145.835411][ C0] ? eth_header+0x117/0x200 [ 145.839964][ C0] ? memcpy+0x3c/0x60 [ 145.843989][ C0] ? eth_header+0x117/0x200 [ 145.848537][ C0] ? llc_sysctl_exit+0x60/0x60 [ 145.853350][ C0] tipc_l2_send_msg+0x2eb/0x3a0 [ 145.858276][ C0] tipc_bearer_xmit_skb+0x292/0x3c0 [ 145.863621][ C0] ? tipc_bearer_min_mtu+0x190/0x190 [ 145.868970][ C0] tipc_disc_timeout+0x5e1/0x740 [ 145.874256][ C0] ? tipc_disc_create+0x910/0x910 [ 145.879361][ C0] ? tipc_disc_create+0x910/0x910 [ 145.884442][ C0] call_timer_fn+0x17b/0x540 [ 145.889200][ C0] ? tipc_disc_create+0x910/0x910 [ 145.894365][ C0] ? __run_timers+0x810/0x810 [ 145.899280][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 145.904531][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 145.909798][ C0] ? tipc_disc_create+0x910/0x910 [ 145.914902][ C0] __run_timers+0x56c/0x810 [ 145.919470][ C0] ? detach_timer+0x2b0/0x2b0 [ 145.924182][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 145.930359][ C0] ? sched_clock_cpu+0x15/0x3c0 [ 145.935272][ C0] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 145.941574][ C0] run_timer_softirq+0x63/0xf0 [ 145.946478][ C0] handle_softirqs+0x336/0x830 [ 145.951474][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 145.956386][ C0] ? do_softirq+0x210/0x210 [ 145.960935][ C0] ? hrtimer_interrupt+0x6a2/0x8b0 [ 145.966138][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 145.971384][ C0] __irq_exit_rcu+0x13b/0x230 [ 145.976104][ C0] ? irq_exit_rcu+0x20/0x20 [ 145.980664][ C0] irq_exit_rcu+0x5/0x20 [ 145.984946][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 145.990623][ C0] [ 145.993588][ C0] [ 145.996554][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 146.002589][ C0] RIP: 0010:lock_page_memcg+0x240/0x440 [ 146.008185][ C0] Code: 00 00 9c 8f 44 24 40 f7 44 24 40 00 02 00 00 c6 44 01 04 f8 0f 85 ff 00 00 00 f7 c3 00 02 00 00 74 01 fb 4d 8d af 80 10 00 00 <4c> 89 ef be 04 00 00 00 e8 d3 8b fb ff 4c 89 e8 48 c1 e8 03 48 b9 [ 146.028198][ C0] RSP: 0018:ffffc900034deda0 EFLAGS: 00000206 [ 146.034321][ C0] RAX: dffffc0000000000 RBX: 0000000000000286 RCX: 1ffff9200069bdb8 [ 146.042335][ C0] RDX: dffffc0000000000 RSI: ffffffff8a2b2b60 RDI: ffffffff8a7a5100 [ 146.050369][ C0] RBP: ffffc900034dee78 R08: ffffffff910470c7 R09: 1ffffffff2208e18 [ 146.058385][ C0] R10: dffffc0000000000 R11: fffffbfff2208e19 R12: ffff88807b624670 [ 146.066418][ C0] R13: ffff88807b625080 R14: ffffea0001350138 R15: ffff88807b624000 [ 146.074459][ C0] ? mem_cgroup_get_oom_group+0x350/0x350 [ 146.080240][ C0] ? __lock_acquire+0x7d40/0x7d40 [ 146.085323][ C0] page_add_file_rmap+0x180/0x930 [ 146.090658][ C0] do_set_pte+0x3c9/0x530 [ 146.095034][ C0] filemap_map_pages+0xef4/0x1450 [ 146.100148][ C0] ? filemap_read_page+0x4b0/0x4b0 [ 146.105327][ C0] ? count_memcg_event_mm+0x324/0x370 [ 146.110746][ C0] ? follow_page_pte+0x320/0xc20 [ 146.115739][ C0] handle_mm_fault+0x25bb/0x4440 [ 146.120753][ C0] ? get_page+0xe0/0xe0 [ 146.124960][ C0] ? follow_page_mask+0xa51/0x12b0 [ 146.130130][ C0] __get_user_pages+0x952/0x11e0 [ 146.135131][ C0] ? read_lock_is_recursive+0x10/0x10 [ 146.140553][ C0] ? populate_vma_page_range+0x290/0x290 [ 146.146241][ C0] ? get_dump_page+0xee/0x670 [ 146.150975][ C0] ? down_read_killable+0x1ce/0x340 [ 146.156233][ C0] get_dump_page+0x18c/0x670 [ 146.160882][ C0] ? fault_in_readable+0x150/0x150 [ 146.166042][ C0] ? wait_for_dump_helpers+0x3e0/0x3e0 [ 146.171548][ C0] ? dump_emit+0x145/0x3d0 [ 146.176013][ C0] dump_user_range+0x54/0x340 [ 146.180744][ C0] elf_core_dump+0x2fe0/0x3530 [ 146.185578][ C0] ? load_elf_library+0x980/0x980 [ 146.190657][ C0] ? verify_lock_unused+0x140/0x140 [ 146.195914][ C0] ? dump_vma_snapshot+0xaf1/0xe40 [ 146.201403][ C0] ? rcu_read_lock_any_held+0xb0/0x130 [ 146.206922][ C0] ? getname_kernel+0x142/0x2e0 [ 146.211831][ C0] do_coredump+0x14e8/0x2a40 [ 146.216494][ C0] ? nfs_stat_to_errno+0x170/0x170 [ 146.221675][ C0] ? lock_chain_count+0x20/0x20 [ 146.226579][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 146.231822][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 146.237061][ C0] get_signal+0x531/0x12e0 [ 146.241547][ C0] arch_do_signal_or_restart+0xe6/0x12a0 [ 146.247231][ C0] ? _raw_spin_unlock+0x40/0x40 [ 146.252147][ C0] ? force_sig_info_to_task+0x318/0x3c0 [ 146.257929][ C0] ? get_sigframe_size+0x10/0x10 [ 146.262934][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 146.268973][ C0] ? exit_to_user_mode_loop+0x3b/0x130 [ 146.274476][ C0] exit_to_user_mode_loop+0x9e/0x130 [ 146.279785][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 146.285350][ C0] irqentry_exit_to_user_mode+0x5/0x30 [ 146.290838][ C0] exc_page_fault+0x88/0x100 [ 146.295443][ C0] asm_exc_page_fault+0x22/0x30 [ 146.300301][ C0] RIP: 0033:0x7f4b5d851b21 [ 146.304734][ C0] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 146.324362][ C0] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 146.330453][ C0] RAX: 0000000000000000 RBX: 00007f4b5dad8090 RCX: 00007f4b5d851b19 [ 146.338541][ C0] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 146.346518][ C0] RBP: 00007f4b5d8e9b70 R08: 0000000000000000 R09: 0000000000000000 [ 146.354493][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 146.362496][ C0] R13: 00007f4b5dad8128 R14: 00007f4b5dad8090 R15: 00007ffd44fae798 [ 146.370502][ C0] [ 146.971060][ T5307] tipc: Resetting bearer [ 147.022131][ T5307] tipc: Disabling bearer [ 147.063574][ T4319] tipc: Node number set to 2203441832