last executing test programs: 4.02165466s ago: executing program 2 (id=3): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x617a, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe0351244d391edad}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x17, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x4, 0x0, 0x0, 0x1000, {[@sack={0x5, 0x12, [0xd, 0x3, 0xb7800, 0x1]}]}}}}}}}, 0x0) 3.955838995s ago: executing program 2 (id=6): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sys_enter\x00', r0}, 0x65) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xd0100, 0xf4) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) 3.837789335s ago: executing program 2 (id=7): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000380)='kfree\x00', r0}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x25, &(0x7f0000000000)={0x1}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000380)={0x1, 0x0, 0x7}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000380)={0x1, 0x0, 0x103ff}) 2.583264765s ago: executing program 0 (id=1): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) 2.491246312s ago: executing program 1 (id=2): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0xa00, 0xb) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000280), 0x0, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380), 0x200, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48283, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0xb) ioctl$TUNSETTXFILTER(r1, 0x400454d1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x1000, 0x10, 0x1}, 0x20) ioctl$SNAPSHOT_SET_SWAP_AREA(r0, 0x400c330d, &(0x7f00000003c0)={0x867e, 0xfffffffa}) 2.274053659s ago: executing program 0 (id=8): openat(0xffffffffffffff9c, 0x0, 0x181242, 0x148) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x8, &(0x7f00000034c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a31"], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0) 2.177601397s ago: executing program 3 (id=4): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x50) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020100008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4, 0x0, 0xfffffffffffffffe}, 0x18) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r5) sendmsg$IEEE802154_ADD_IFACE(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r6, 0x201, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0201}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004010}, 0x0) 2.005554191s ago: executing program 0 (id=9): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x210816, &(0x7f0000000500)={[{@sysvgroups}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@dioread_lock}, {@user_xattr}, {@nogrpid}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@nojournal_checksum}]}, 0x5, 0x4fa, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r4, 0x80045400, &(0x7f00000002c0)) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) dup2(r7, r7) pipe(&(0x7f0000000500)={0xffffffffffffffff}) splice(r8, 0x0, r4, 0x0, 0xffffffffffff8000, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r9 = socket$nl_rdma(0x10, 0x3, 0x14) socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000340)='siw\x00') bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={@cgroup, 0xffffffffffffffff, 0xb, 0x4}, 0x20) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) pidfd_send_signal(r2, 0x0, &(0x7f0000000400)={0x10, 0x9, 0x2}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x18) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40086602, &(0x7f0000000080)={@id={0x2, 0x0, @d}}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40086602, &(0x7f0000000080)={@desc={0x84c00, 0x0, @desc2}}) r11 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r11, 0x6, 0x0, 0x0, 0x0) 2.003731131s ago: executing program 1 (id=10): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001b00)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}}, 0x0) 1.961443854s ago: executing program 4 (id=5): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x15, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r2, &(0x7f0000001300)="92", 0x1, 0x10, &(0x7f0000000240)={0xa, 0x4e1c, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001480)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xfff1, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x3, 0x7fff, 0x7, 0x1, 0xf, 0x4}}, {0x4}}]}, @TCA_RATE={0x6, 0x5, {0x9, 0x8}}]}, 0x5c}}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101900, 0x0) ioctl$PPPIOCGDEBUG(r11, 0x80047441, &(0x7f0000000000)) ioctl$PPPIOCNEWUNIT(r11, 0xc004743e, &(0x7f0000000080)) 1.749625331s ago: executing program 1 (id=11): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES64, @ANYRES16], 0x1, 0x36e, &(0x7f0000000c00)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_setup(0x7d, &(0x7f0000000600)=0x0) io_submit(r4, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000000)="96", 0xfffffe10, 0x0, 0x0, 0x0, r3}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, r2, 0x0, 0x0, 0xffffffffffffffff}]) 611.471302ms ago: executing program 2 (id=12): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000002c0)=@getchain={0x24, 0x66, 0xfcd66a900070b359, 0x1, 0x0, {0x0, 0x0, 0x81ff, r2, {0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) 527.907038ms ago: executing program 3 (id=13): syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) socket(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) io_uring_setup(0x5d99, &(0x7f0000000340)={0x0, 0x2537, 0x2, 0x3, 0x41}) syz_emit_ethernet(0x0, 0x0, 0x0) epoll_create1(0x80000) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x8401) ioctl$SG_BLKTRACETEARDOWN(r2, 0x1276, 0x0) 438.144385ms ago: executing program 2 (id=14): connect$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00'}, 0x18) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000400)={0xa}) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) 437.937735ms ago: executing program 1 (id=15): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0xfdfe, 0x7, @remote, 0x4}, 0x1c) connect$pppl2tp(r0, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x18) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 363.078512ms ago: executing program 4 (id=16): r0 = socket(0x1e, 0x4, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x401, 0xfffffffe, 0x0, 0xffffffff}, 0x10) close(r0) 194.002235ms ago: executing program 4 (id=17): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000030000000800000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)='%-010d \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x10034) syz_usb_disconnect(0xffffffffffffffff) 94.110713ms ago: executing program 1 (id=18): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in=@remote, 0x0, 0x400, 0x0, 0x0, 0xa, 0x60, 0x0, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff}, {0x3}, 0x6}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x158) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000fedbdf25fc000000000000000000000000000000ac1414bb00000000000000000000000000000400"], 0xb8}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x9}, {0x0, 0x0, 0x1}}}, 0xb8}}, 0x4000) 40.214307ms ago: executing program 3 (id=19): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@deltfilter={0x24, 0x2d, 0x200, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0x4, 0xe}, {0x4, 0x9}}}, 0x24}}, 0x14000000) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r2], 0xb4}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 0s ago: executing program 0 (id=20): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000940)={[{@barrier_val}, {@resuid}, {@block_validity}, {@errors_remount}]}, 0x1, 0x79b, &(0x7f0000000180)="$eJzs3c1rXFUbAPDnTpImTfu+zQsv2LppVloonbQ1tgqCERciWCjo2jZMpiFmkimZSWlCFhYRBBG0uBB049qPunMruvZvcCMiLVXTYsWFjNz5SKb5mHw0k2mb3w9ucs6dc+ecZ+7cc8/MPcwNYM8aTP9kIo5ExIdJxKH6+iQieqqp7oiRWrl7iwu5dEmiUnn996Ra5u7iQi6atkkdqGcOR8T370Ycz6yutzQ3PzlaKORn6vmh8tTlodLc/ImJqdHx/Hh++syp4eHTZ589e2bnYv3zx/mDtz565emvR/5+54kbH/yQxEgcrD/WHMdOGYzB+mvSk76E93l5pyvrsKTTDWBb0kOzq3aUx5E4FF3VFADwOEvP/xUAYI9JnP8BYI9pfA9wd3Eh11g6+43E7rr9UkT01eJvXN+sPdJdv2bXV70O2n83ie76FdHYwetdgxHx2bdvfpku0abrkABreftaRFwcGFzd/yer5ixs1clNlBlckdf/we75Lh3/PLfW+C+zNP6JpfHPst41jt3tGIzY15xfffxnbq654Ys7UHl9/PdCbW5bGmjT+G9p0tpAVz33nzRzNCImCvm0b/tvRByLnt5LE4X8qRZ1HLvzz531Hmse//1x/a0v0vrT/8slMje7e+/fZmy0PPogMTe7fS3iye7luX33VvX/fdWx7sr9n6473+qJjy4nX33+vU/XK5bGn8bbWFbH316VzyOeirXjb0hazk8cSnf/ydrftev45udP+terv3n/p0taf+OzwG5I939/6/gHkub5mqWdrX/j+Nd+/+9L3qimG53H1dFyeeZUxL7ktdXrTy9v28g3yqfx1yJdGX+m5fs//SR4cZMxdt/67avtx7+kLVMs0/jHtrT/t564cW+ya/vxp/t/uJo6Vl+zmf5vsw18kNcOAAAAAAAAAAAAAAAAAAAAAAAAADYrExEHI8lkl9KZTDZbu4f3/6M/UyiWyscvFWenx6J6r+yB6Mk0furyUC2fNH7/dKApf3pF/pmI+F9EfNy7v5rP5oqFsU4HDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB1B9a5/3/q195Otw4AaJu+DUvcyd+XrVQqlTa2BwBov43P/wDA46bF+X//brYDANg9Pv8DwN7j/A8Ae4/zPwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG12/ty5dKn8tbiQS/NjV+ZmJ4tXTozlS5PZqdlcNlecuZwdLxbHC/lsrji10fMVisXLwzE9e3WonC+Vh0pz8xemirPT5QsTU6Pj+Qv5nl2JCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2pjQ3PzlaKORnHovE+xHxEDSjHYkkHopmdCTxy4mfDrcqc32Dt/HIQxHFI5bodM8EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Gj4NwAA//8PbSWm") r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000000)={0x5, 0x8, 0x7}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.80' (ED25519) to the list of known hosts. [ 50.842814][ T4170] cgroup: Unknown subsys name 'net' [ 50.977886][ T4170] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 52.503736][ T4170] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 53.955558][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 53.995273][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 54.067584][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 54.088153][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 54.125108][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 54.168526][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.175947][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.184963][ T4186] device bridge_slave_0 entered promiscuous mode [ 54.197733][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.204907][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.213042][ T4186] device bridge_slave_1 entered promiscuous mode [ 54.295101][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.304577][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.311656][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.320050][ T4185] device bridge_slave_0 entered promiscuous mode [ 54.331126][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.338307][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.346521][ T4183] device bridge_slave_0 entered promiscuous mode [ 54.364576][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.378928][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.386255][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.394407][ T4185] device bridge_slave_1 entered promiscuous mode [ 54.401237][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.408407][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.416481][ T4183] device bridge_slave_1 entered promiscuous mode [ 54.424048][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.431122][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.439004][ T4184] device bridge_slave_0 entered promiscuous mode [ 54.460778][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.467931][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.476413][ T4192] device bridge_slave_0 entered promiscuous mode [ 54.504633][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.511715][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.520149][ T4184] device bridge_slave_1 entered promiscuous mode [ 54.527621][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.535262][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.543664][ T4192] device bridge_slave_1 entered promiscuous mode [ 54.553119][ T4186] team0: Port device team_slave_0 added [ 54.596427][ T4186] team0: Port device team_slave_1 added [ 54.604969][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.616021][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.642490][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.662270][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.672913][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.683815][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.696173][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.706644][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.716571][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.723837][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.749828][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.787594][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.795123][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.821637][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.870174][ T4192] team0: Port device team_slave_0 added [ 54.878340][ T4185] team0: Port device team_slave_0 added [ 54.887259][ T4183] team0: Port device team_slave_0 added [ 54.895648][ T4184] team0: Port device team_slave_0 added [ 54.903194][ T4192] team0: Port device team_slave_1 added [ 54.910066][ T4184] team0: Port device team_slave_1 added [ 54.926883][ T4185] team0: Port device team_slave_1 added [ 54.934412][ T4183] team0: Port device team_slave_1 added [ 54.987958][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.995344][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.021761][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.055466][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.062569][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.088679][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.100307][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.107449][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.133770][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.145461][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.152699][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.178665][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.193702][ T4186] device hsr_slave_0 entered promiscuous mode [ 55.200567][ T4186] device hsr_slave_1 entered promiscuous mode [ 55.208105][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.215269][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.241415][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.254149][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.261106][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.287104][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.299228][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.306306][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.332702][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.347295][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.354321][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.380633][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.467058][ T4185] device hsr_slave_0 entered promiscuous mode [ 55.474259][ T4185] device hsr_slave_1 entered promiscuous mode [ 55.480920][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.488774][ T4185] Cannot create hsr debugfs directory [ 55.506526][ T4192] device hsr_slave_0 entered promiscuous mode [ 55.513451][ T4192] device hsr_slave_1 entered promiscuous mode [ 55.519936][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.527883][ T4192] Cannot create hsr debugfs directory [ 55.552983][ T4184] device hsr_slave_0 entered promiscuous mode [ 55.559711][ T4184] device hsr_slave_1 entered promiscuous mode [ 55.566456][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.574051][ T4184] Cannot create hsr debugfs directory [ 55.602842][ T4174] Bluetooth: hci0: command 0x0409 tx timeout [ 55.602842][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 55.605759][ T4183] device hsr_slave_0 entered promiscuous mode [ 55.609050][ T4174] Bluetooth: hci2: command 0x0409 tx timeout [ 55.627599][ T4183] device hsr_slave_1 entered promiscuous mode [ 55.634454][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.642122][ T4183] Cannot create hsr debugfs directory [ 55.682253][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 55.687496][ T4174] Bluetooth: hci3: command 0x0409 tx timeout [ 55.948567][ T4186] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 55.962590][ T4186] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 55.975945][ T4186] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 55.990898][ T4186] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 56.025620][ T4185] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.034701][ T4185] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.054417][ T4185] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.080052][ T4185] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.095766][ T4184] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 56.108300][ T4184] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 56.133834][ T4184] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 56.167891][ T4184] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 56.201929][ T4183] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 56.215746][ T4183] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 56.232584][ T4183] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 56.254955][ T4183] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 56.308724][ T4192] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 56.323527][ T4192] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 56.347488][ T4192] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 56.362576][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.377412][ T4192] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 56.408610][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.421349][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.441009][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.483753][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.495351][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.504871][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.512105][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.520834][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.529747][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.538426][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.545522][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.554426][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.573479][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.584434][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.598490][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.624763][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.634142][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.644349][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.653256][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.680160][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.689235][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.698781][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.707647][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.724308][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.735289][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.746057][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.755513][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.764168][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.774506][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.786526][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.795915][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.805549][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.834586][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.858225][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.881123][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.895107][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.904536][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.913474][ T580] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.920549][ T580] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.929177][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.939844][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.949089][ T580] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.956310][ T580] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.965331][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.974421][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.984028][ T580] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.991109][ T580] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.998990][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.007934][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.016172][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.025258][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.033327][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.070066][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.080420][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.093830][ T580] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.100934][ T580] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.109074][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.118958][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.132981][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.141641][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.150748][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.159925][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.169080][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.179079][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.188143][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.197681][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.206992][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.215579][ T580] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.222683][ T580] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.230195][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.239131][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.247742][ T580] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.254868][ T580] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.262739][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.271234][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.280314][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.288696][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.297383][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.309657][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.318295][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.330017][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.340128][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.368183][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.380673][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.395499][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.407359][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.416293][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.426870][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.435860][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.445083][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.453966][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.463613][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.472152][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.480573][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.488986][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.497685][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.506799][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.514965][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.530931][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.545172][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.554128][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.571300][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.580841][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.606955][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.620689][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.632770][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.640282][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.650287][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.661706][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.670709][ T580] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.677822][ T580] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.685624][ T4261] Bluetooth: hci2: command 0x041b tx timeout [ 57.691936][ T4261] Bluetooth: hci0: command 0x041b tx timeout [ 57.696258][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.705811][ T4261] Bluetooth: hci1: command 0x041b tx timeout [ 57.728844][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.754300][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.772662][ T4261] Bluetooth: hci3: command 0x041b tx timeout [ 57.779363][ T4261] Bluetooth: hci4: command 0x041b tx timeout [ 57.788351][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.795516][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.850758][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.869654][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.880156][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.889559][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.898716][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.908726][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.918106][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.929064][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.938787][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.953864][ T4186] device veth0_vlan entered promiscuous mode [ 57.965196][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.980064][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.994309][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.010083][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.021098][ T4186] device veth1_vlan entered promiscuous mode [ 58.049496][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.065530][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.085388][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.101783][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.110958][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.119874][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.127778][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.136679][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.146666][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.171871][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.180478][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.211318][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.221235][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.238006][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.253107][ T4186] device veth0_macvtap entered promiscuous mode [ 58.264048][ T4186] device veth1_macvtap entered promiscuous mode [ 58.279037][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.299081][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.308086][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.317617][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.338263][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.363435][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.378622][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.433314][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.449112][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.467104][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.475844][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.497278][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.513825][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.521794][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.530563][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.540251][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.551800][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.560994][ T4185] device veth0_vlan entered promiscuous mode [ 58.574829][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.583997][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.596053][ T4186] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.605276][ T4186] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.614572][ T4186] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.623502][ T4186] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.637814][ T4183] device veth0_vlan entered promiscuous mode [ 58.657041][ T4185] device veth1_vlan entered promiscuous mode [ 58.679914][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.688260][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.697100][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.706320][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.714365][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.721785][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.730865][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.740093][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.748906][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.779805][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.790921][ T4183] device veth1_vlan entered promiscuous mode [ 58.822113][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.830401][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.846409][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.855618][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.864802][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.875017][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.884837][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.924471][ T4184] device veth0_vlan entered promiscuous mode [ 58.936032][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.946191][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.955357][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.965466][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.977661][ T4185] device veth0_macvtap entered promiscuous mode [ 59.009927][ T4276] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.014291][ T4185] device veth1_macvtap entered promiscuous mode [ 59.025874][ T4276] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.034406][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.046535][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.057323][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.067160][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.075684][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.086787][ T4184] device veth1_vlan entered promiscuous mode [ 59.106938][ T4192] device veth0_vlan entered promiscuous mode [ 59.113982][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.124499][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.133081][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.140934][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.149870][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.181502][ T4183] device veth0_macvtap entered promiscuous mode [ 59.196518][ T4192] device veth1_vlan entered promiscuous mode [ 59.215915][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.227699][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.240102][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.250597][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.261200][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.274045][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.292268][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.300407][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.310106][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.321096][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.331204][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.341892][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.342326][ T4183] device veth1_macvtap entered promiscuous mode [ 59.351597][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.364204][ T4185] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.364267][ T4185] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.388469][ T4185] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.397617][ T4185] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.416894][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.426167][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.435266][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.474977][ T4184] device veth0_macvtap entered promiscuous mode [ 59.493832][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.506621][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.522386][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.542119][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.554204][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.567149][ T4192] device veth0_macvtap entered promiscuous mode [ 59.579201][ T4184] device veth1_macvtap entered promiscuous mode [ 59.598596][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.613998][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.628285][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.638582][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.654016][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.669447][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.678344][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.704402][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.715132][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.727707][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.738760][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.757711][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.766357][ T4228] Bluetooth: hci2: command 0x040f tx timeout [ 59.773679][ T4261] Bluetooth: hci1: command 0x040f tx timeout [ 59.779789][ T4261] Bluetooth: hci0: command 0x040f tx timeout [ 59.785277][ T4192] device veth1_macvtap entered promiscuous mode [ 59.830112][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.844258][ T1108] Bluetooth: hci4: command 0x040f tx timeout [ 59.849851][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.860144][ T1108] Bluetooth: hci3: command 0x040f tx timeout [ 59.879928][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.902432][ T4183] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.911166][ T4183] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.929637][ T4183] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.939515][ T4183] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.992906][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.011163][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.021886][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.032831][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.043156][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.054137][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.067322][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.094422][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.108664][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.119664][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.130888][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.141281][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.152221][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.163249][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.181245][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.193059][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.200824][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.211434][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.229248][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.240546][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.267624][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.281371][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.298867][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.310631][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.321514][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.333058][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.345239][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.358754][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.376132][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.386495][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.398280][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.426564][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.440161][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.456521][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.468822][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.495014][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.515495][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.532882][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.548430][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.557505][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.577565][ T4276] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.583747][ T4184] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.594491][ T4276] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.604185][ T4184] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.619893][ T4184] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.630130][ T4184] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.653661][ T4192] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.668572][ T4192] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.677877][ T4192] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.687222][ T4192] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.713256][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.797631][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.808584][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.876099][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.898147][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.902443][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.950251][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.961709][ T1265] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.976949][ T1265] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.004554][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.038495][ T1265] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.092330][ T1265] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.132651][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.147760][ T1265] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.178586][ T1265] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.195127][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.210359][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.232995][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 61.246955][ T4299] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 61.267152][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.313439][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.386144][ T4302] tap0: tun_chr_ioctl cmd 1074025681 [ 61.394132][ T4276] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.410340][ T4276] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.459361][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.520489][ T4306] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8'. [ 61.695016][ T26] audit: type=1326 audit(1755480090.264:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4308 comm="syz.0.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf1b71cbe9 code=0x7ffc0000 [ 61.745277][ T4309] loop0: detected capacity change from 0 to 512 [ 61.788345][ T26] audit: type=1326 audit(1755480090.294:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4308 comm="syz.0.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fdf1b71cbe9 code=0x7ffc0000 [ 61.854528][ T1108] Bluetooth: hci0: command 0x0419 tx timeout [ 61.860755][ T1108] Bluetooth: hci1: command 0x0419 tx timeout [ 61.873963][ T26] audit: type=1326 audit(1755480090.294:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4308 comm="syz.0.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fdf1b71cc23 code=0x7ffc0000 [ 61.899141][ T1108] Bluetooth: hci2: command 0x0419 tx timeout [ 61.915142][ T26] audit: type=1326 audit(1755480090.294:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4308 comm="syz.0.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fdf1b71b69f code=0x7ffc0000 [ 61.937789][ T7] Bluetooth: hci3: command 0x0419 tx timeout [ 61.945469][ T7] Bluetooth: hci4: command 0x0419 tx timeout [ 61.973002][ T4317] loop1: detected capacity change from 0 to 128 [ 62.064957][ T26] audit: type=1326 audit(1755480090.314:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4308 comm="syz.0.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fdf1b71cc77 code=0x7ffc0000 [ 62.098818][ T26] audit: type=1326 audit(1755480090.314:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4308 comm="syz.0.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdf1b71b550 code=0x7ffc0000 [ 62.098855][ T26] audit: type=1326 audit(1755480090.314:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4308 comm="syz.0.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdf1b71c7eb code=0x7ffc0000 [ 62.098890][ T26] audit: type=1326 audit(1755480090.384:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4308 comm="syz.0.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fdf1b71b84a code=0x7ffc0000 [ 62.098920][ T26] audit: type=1326 audit(1755480090.384:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4308 comm="syz.0.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fdf1b71b84a code=0x7ffc0000 [ 62.098950][ T26] audit: type=1326 audit(1755480090.384:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4308 comm="syz.0.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fdf1b71b457 code=0x7ffc0000 [ 62.126492][ T4309] EXT4-fs (loop0): mounted filesystem without journal. Opts: sysvgroups,max_dir_size_kb=0x0000000000000001,dioread_lock,user_xattr,nogrpid,journal_ioprio=0x0000000000000004,nojournal_checksum,,errors=continue. Quota mode: writeback. [ 62.126622][ T4309] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.148734][ T4309] lo speed is unknown, defaulting to 1000 [ 63.186015][ T4309] lo speed is unknown, defaulting to 1000 [ 63.194857][ T4309] lo speed is unknown, defaulting to 1000 [ 63.209884][ T4309] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 63.227601][ T4309] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 63.305723][ T4309] lo speed is unknown, defaulting to 1000 [ 63.316781][ T4309] lo speed is unknown, defaulting to 1000 [ 63.350110][ T4309] lo speed is unknown, defaulting to 1000 [ 63.416912][ T4309] lo speed is unknown, defaulting to 1000 [ 63.435606][ T4309] lo speed is unknown, defaulting to 1000 [ 63.638839][ T4344] ================================================================== [ 63.647167][ T4344] BUG: KASAN: slab-out-of-bounds in xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 63.653308][ T4346] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19'. [ 63.656398][ T4344] Read of size 1 at addr ffff88807befb600 by task syz.1.18/4344 [ 63.671231][ T4346] Zero length message leads to an empty skb [ 63.672914][ T4344] [ 63.672925][ T4344] CPU: 1 PID: 4344 Comm: syz.1.18 Not tainted 5.15.189-syzkaller #0 [ 63.672948][ T4344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 63.672959][ T4344] Call Trace: [ 63.672967][ T4344] [ 63.705435][ T4344] dump_stack_lvl+0x168/0x230 [ 63.710120][ T4344] ? show_regs_print_info+0x20/0x20 [ 63.715316][ T4344] ? load_image+0x3b0/0x3b0 [ 63.719850][ T4344] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 63.725224][ T4344] ? xfrm_pol_bin_obj+0x140/0x140 [ 63.730267][ T4344] print_address_description+0x60/0x2d0 [ 63.735812][ T4344] ? xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 63.742444][ T4344] kasan_report+0xdf/0x130 [ 63.746886][ T4344] ? xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 63.753489][ T4344] xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 63.759853][ T4344] ? xfrm_policy_addr_delta+0x212/0x340 [ 63.765421][ T4344] xfrm_policy_inexact_insert_node+0x950/0xb60 [ 63.771686][ T4344] ? xfrm_policy_alloc+0x75/0x2b0 [ 63.776729][ T4344] xfrm_policy_inexact_alloc_chain+0x7cf/0xea0 [ 63.782895][ T4344] ? xfrm_policy_inexact_insert+0xe0/0x1460 [ 63.788808][ T4344] xfrm_policy_inexact_insert+0xe0/0x1460 [ 63.794542][ T4344] ? __get_hash_thresh+0x105/0x410 [ 63.799713][ T4344] ? policy_hash_bysel+0x10a/0x570 [ 63.804824][ T4344] xfrm_policy_insert+0x112/0x930 [ 63.809876][ T4344] xfrm_add_policy+0x4d6/0x860 [ 63.814646][ T4344] ? xfrm_dump_sa_done+0xc0/0xc0 [ 63.819595][ T4344] ? apparmor_capable+0x12c/0x190 [ 63.824615][ T4344] ? __nla_parse+0x3c/0x50 [ 63.829030][ T4344] xfrm_user_rcv_msg+0x58d/0x860 [ 63.834032][ T4344] ? xfrm_netlink_rcv+0x90/0x90 [ 63.838908][ T4344] ? xfrm_netlink_rcv+0x66/0x90 [ 63.843772][ T4344] ? xfrm_netlink_rcv+0x66/0x90 [ 63.848761][ T4344] ? xfrm_netlink_rcv+0x66/0x90 [ 63.853629][ T4344] ? __mutex_lock_common+0x431/0x2390 [ 63.859019][ T4344] ? __copy_skb_header+0x417/0x5a0 [ 63.864145][ T4344] ? rcu_read_unlock_special+0xee/0x480 [ 63.869763][ T4344] ? lockdep_hardirqs_off+0x70/0x100 [ 63.875059][ T4344] netlink_rcv_skb+0x1e0/0x430 [ 63.879821][ T4344] ? xfrm_netlink_rcv+0x90/0x90 [ 63.884864][ T4344] ? netlink_ack+0xb60/0xb60 [ 63.889464][ T4344] ? __lock_acquire+0x7c60/0x7c60 [ 63.894506][ T4344] xfrm_netlink_rcv+0x75/0x90 [ 63.899219][ T4344] netlink_unicast+0x774/0x920 [ 63.904052][ T4344] netlink_sendmsg+0x8ab/0xbc0 [ 63.908834][ T4344] ? netlink_getsockopt+0x560/0x560 [ 63.914156][ T4344] ? aa_sock_msg_perm+0x94/0x150 [ 63.919128][ T4344] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 63.924437][ T4344] ? security_socket_sendmsg+0x7c/0xa0 [ 63.929988][ T4344] ? netlink_getsockopt+0x560/0x560 [ 63.935206][ T4344] ____sys_sendmsg+0x5a2/0x8c0 [ 63.940008][ T4344] ? memset+0x1e/0x40 [ 63.944319][ T4344] ? __sys_sendmsg_sock+0x30/0x30 [ 63.949486][ T4344] ? import_iovec+0x6f/0xa0 [ 63.954025][ T4344] ___sys_sendmsg+0x1f0/0x260 [ 63.958731][ T4344] ? __sys_sendmsg+0x250/0x250 [ 63.963530][ T4344] ? percpu_counter_add_batch+0x13b/0x160 [ 63.969279][ T4344] ? __fdget+0x18b/0x210 [ 63.973630][ T4344] __se_sys_sendmsg+0x190/0x250 [ 63.978486][ T4344] ? __x64_sys_sendmsg+0x80/0x80 [ 63.983419][ T4344] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 63.989416][ T4344] ? lockdep_hardirqs_on+0x94/0x140 [ 63.994637][ T4344] do_syscall_64+0x4c/0xa0 [ 63.999085][ T4344] ? clear_bhb_loop+0x30/0x80 [ 64.003767][ T4344] ? clear_bhb_loop+0x30/0x80 [ 64.008461][ T4344] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 64.014355][ T4344] RIP: 0033:0x7f0b086b1be9 [ 64.018774][ T4344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.038442][ T4344] RSP: 002b:00007f0b06919038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 64.046889][ T4344] RAX: ffffffffffffffda RBX: 00007f0b088d8fa0 RCX: 00007f0b086b1be9 [ 64.054886][ T4344] RDX: 0000000000004000 RSI: 0000200000000580 RDI: 0000000000000004 [ 64.062860][ T4344] RBP: 00007f0b08734e19 R08: 0000000000000000 R09: 0000000000000000 [ 64.070918][ T4344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 64.078912][ T4344] R13: 00007f0b088d9038 R14: 00007f0b088d8fa0 R15: 00007fffe77aaa18 [ 64.087008][ T4344] [ 64.090048][ T4344] [ 64.092427][ T4344] Allocated by task 4344: [ 64.096761][ T4344] __kasan_kmalloc+0xb5/0xf0 [ 64.101366][ T4344] sk_prot_alloc+0xe7/0x210 [ 64.105876][ T4344] sk_alloc+0x2f/0x310 [ 64.109973][ T4344] pfkey_create+0xd8/0x560 [ 64.114390][ T4344] __sock_create+0x47b/0x900 [ 64.118978][ T4344] __sys_socket+0xe2/0x170 [ 64.123403][ T4344] __x64_sys_socket+0x76/0x80 [ 64.128176][ T4344] do_syscall_64+0x4c/0xa0 [ 64.132607][ T4344] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 64.138506][ T4344] [ 64.140850][ T4344] The buggy address belongs to the object at ffff88807befb000 [ 64.140850][ T4344] which belongs to the cache kmalloc-2k of size 2048 [ 64.154909][ T4344] The buggy address is located 1536 bytes inside of [ 64.154909][ T4344] 2048-byte region [ffff88807befb000, ffff88807befb800) [ 64.168436][ T4344] The buggy address belongs to the page: [ 64.174075][ T4344] page:ffffea0001efbe00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7bef8 [ 64.184225][ T4344] head:ffffea0001efbe00 order:3 compound_mapcount:0 compound_pincount:0 [ 64.192581][ T4344] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 64.200609][ T4344] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff888016842000 [ 64.209203][ T4344] raw: 0000000000000000 0000000080080008 00000001ffffffff 0000000000000000 [ 64.217776][ T4344] page dumped because: kasan: bad access detected [ 64.224180][ T4344] page_owner tracks the page as allocated [ 64.229887][ T4344] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 4344, ts 63625278572, free_ts 63607132556 [ 64.250463][ T4344] get_page_from_freelist+0x1b77/0x1c60 [ 64.256019][ T4344] __alloc_pages+0x1e1/0x470 [ 64.260617][ T4344] new_slab+0xc0/0x4b0 [ 64.264760][ T4344] ___slab_alloc+0x81e/0xdf0 [ 64.269343][ T4344] __kmalloc+0x1cd/0x330 [ 64.273579][ T4344] sk_prot_alloc+0xe7/0x210 [ 64.278074][ T4344] sk_alloc+0x2f/0x310 [ 64.282148][ T4344] __netlink_create+0x6b/0x2d0 [ 64.286937][ T4344] netlink_create+0x3a7/0x510 [ 64.291707][ T4344] __sock_create+0x47b/0x900 [ 64.296324][ T4344] __sys_socket+0xe2/0x170 [ 64.300739][ T4344] __x64_sys_socket+0x76/0x80 [ 64.305414][ T4344] do_syscall_64+0x4c/0xa0 [ 64.309833][ T4344] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 64.315822][ T4344] page last free stack trace: [ 64.320484][ T4344] free_unref_page_prepare+0x637/0x6c0 [ 64.325934][ T4344] free_unref_page+0x94/0x280 [ 64.330600][ T4344] __unfreeze_partials+0x1a5/0x200 [ 64.335710][ T4344] put_cpu_partial+0x12d/0x190 [ 64.340498][ T4344] qlist_free_all+0x35/0x90 [ 64.345019][ T4344] kasan_quarantine_reduce+0x150/0x160 [ 64.350483][ T4344] __kasan_slab_alloc+0x2f/0xd0 [ 64.355325][ T4344] slab_post_alloc_hook+0x4c/0x380 [ 64.360427][ T4344] kmem_cache_alloc+0x100/0x290 [ 64.365357][ T4344] getname_flags+0xb5/0x500 [ 64.369853][ T4344] do_sys_openat2+0xcf/0x4a0 [ 64.374451][ T4344] __x64_sys_openat+0x135/0x160 [ 64.379412][ T4344] do_syscall_64+0x4c/0xa0 [ 64.383822][ T4344] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 64.389811][ T4344] [ 64.392133][ T4344] Memory state around the buggy address: [ 64.397762][ T4344] ffff88807befb500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 64.405825][ T4344] ffff88807befb580: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc fc [ 64.413979][ T4344] >ffff88807befb600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 64.422056][ T4344] ^ [ 64.426127][ T4344] ffff88807befb680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 64.434282][ T4344] ffff88807befb700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 64.442364][ T4344] ================================================================== [ 64.450729][ T4344] Disabling lock debugging due to kernel taint [ 64.456981][ T4344] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 64.464194][ T4344] CPU: 1 PID: 4344 Comm: syz.1.18 Tainted: G B 5.15.189-syzkaller #0 [ 64.473599][ T4344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 64.483682][ T4344] Call Trace: [ 64.487049][ T4344] [ 64.489994][ T4344] dump_stack_lvl+0x168/0x230 [ 64.494665][ T4344] ? show_regs_print_info+0x20/0x20 [ 64.499871][ T4344] ? load_image+0x3b0/0x3b0 [ 64.504521][ T4344] panic+0x2c9/0x7f0 [ 64.508452][ T4344] ? bpf_jit_dump+0xd0/0xd0 [ 64.513173][ T4344] ? _raw_spin_unlock_irqrestore+0xa5/0x100 [ 64.519117][ T4344] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 64.525066][ T4344] ? _raw_spin_unlock+0x40/0x40 [ 64.529923][ T4344] ? xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 64.536421][ T4344] check_panic_on_warn+0x80/0xa0 [ 64.541357][ T4344] ? xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 64.547867][ T4344] end_report+0x6d/0xf0 [ 64.552031][ T4344] kasan_report+0x102/0x130 [ 64.556526][ T4344] ? xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 64.563025][ T4344] xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 64.569378][ T4344] ? xfrm_policy_addr_delta+0x212/0x340 [ 64.574939][ T4344] xfrm_policy_inexact_insert_node+0x950/0xb60 [ 64.581090][ T4344] ? xfrm_policy_alloc+0x75/0x2b0 [ 64.586144][ T4344] xfrm_policy_inexact_alloc_chain+0x7cf/0xea0 [ 64.592318][ T4344] ? xfrm_policy_inexact_insert+0xe0/0x1460 [ 64.598201][ T4344] xfrm_policy_inexact_insert+0xe0/0x1460 [ 64.603931][ T4344] ? __get_hash_thresh+0x105/0x410 [ 64.609063][ T4344] ? policy_hash_bysel+0x10a/0x570 [ 64.614177][ T4344] xfrm_policy_insert+0x112/0x930 [ 64.619220][ T4344] xfrm_add_policy+0x4d6/0x860 [ 64.623986][ T4344] ? xfrm_dump_sa_done+0xc0/0xc0 [ 64.628931][ T4344] ? apparmor_capable+0x12c/0x190 [ 64.633956][ T4344] ? __nla_parse+0x3c/0x50 [ 64.638474][ T4344] xfrm_user_rcv_msg+0x58d/0x860 [ 64.643426][ T4344] ? xfrm_netlink_rcv+0x90/0x90 [ 64.648291][ T4344] ? xfrm_netlink_rcv+0x66/0x90 [ 64.653156][ T4344] ? xfrm_netlink_rcv+0x66/0x90 [ 64.658271][ T4344] ? xfrm_netlink_rcv+0x66/0x90 [ 64.663121][ T4344] ? __mutex_lock_common+0x431/0x2390 [ 64.668648][ T4344] ? __copy_skb_header+0x417/0x5a0 [ 64.673843][ T4344] ? rcu_read_unlock_special+0xee/0x480 [ 64.679393][ T4344] ? lockdep_hardirqs_off+0x70/0x100 [ 64.684762][ T4344] netlink_rcv_skb+0x1e0/0x430 [ 64.689647][ T4344] ? xfrm_netlink_rcv+0x90/0x90 [ 64.694587][ T4344] ? netlink_ack+0xb60/0xb60 [ 64.699345][ T4344] ? __lock_acquire+0x7c60/0x7c60 [ 64.704463][ T4344] xfrm_netlink_rcv+0x75/0x90 [ 64.709160][ T4344] netlink_unicast+0x774/0x920 [ 64.713926][ T4344] netlink_sendmsg+0x8ab/0xbc0 [ 64.718687][ T4344] ? netlink_getsockopt+0x560/0x560 [ 64.723882][ T4344] ? aa_sock_msg_perm+0x94/0x150 [ 64.728824][ T4344] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 64.734100][ T4344] ? security_socket_sendmsg+0x7c/0xa0 [ 64.739556][ T4344] ? netlink_getsockopt+0x560/0x560 [ 64.744748][ T4344] ____sys_sendmsg+0x5a2/0x8c0 [ 64.749521][ T4344] ? memset+0x1e/0x40 [ 64.753493][ T4344] ? __sys_sendmsg_sock+0x30/0x30 [ 64.758508][ T4344] ? import_iovec+0x6f/0xa0 [ 64.763008][ T4344] ___sys_sendmsg+0x1f0/0x260 [ 64.767867][ T4344] ? __sys_sendmsg+0x250/0x250 [ 64.772635][ T4344] ? percpu_counter_add_batch+0x13b/0x160 [ 64.778371][ T4344] ? __fdget+0x18b/0x210 [ 64.782846][ T4344] __se_sys_sendmsg+0x190/0x250 [ 64.787737][ T4344] ? __x64_sys_sendmsg+0x80/0x80 [ 64.792697][ T4344] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 64.798704][ T4344] ? lockdep_hardirqs_on+0x94/0x140 [ 64.803913][ T4344] do_syscall_64+0x4c/0xa0 [ 64.808329][ T4344] ? clear_bhb_loop+0x30/0x80 [ 64.813002][ T4344] ? clear_bhb_loop+0x30/0x80 [ 64.817804][ T4344] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 64.823713][ T4344] RIP: 0033:0x7f0b086b1be9 [ 64.828124][ T4344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.847736][ T4344] RSP: 002b:00007f0b06919038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 64.856155][ T4344] RAX: ffffffffffffffda RBX: 00007f0b088d8fa0 RCX: 00007f0b086b1be9 [ 64.864125][ T4344] RDX: 0000000000004000 RSI: 0000200000000580 RDI: 0000000000000004 [ 64.872102][ T4344] RBP: 00007f0b08734e19 R08: 0000000000000000 R09: 0000000000000000 [ 64.880100][ T4344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 64.888074][ T4344] R13: 00007f0b088d9038 R14: 00007f0b088d8fa0 R15: 00007fffe77aaa18 [ 64.896054][ T4344] [ 64.899165][ T4344] Kernel Offset: disabled [ 64.903480][ T4344] Rebooting in 86400 seconds..