last executing test programs: 3.055209848s ago: executing program 1 (id=2): sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_TRANSLATE(r0, 0xc018ae85, &(0x7f0000001280)={0x0, 0xdddd0000, 0x2, 0x5, 0x50}) link(0x0, 0x0) open_by_handle_at(0xffffffffffffff9c, 0x0, 0x8e79f0352167ea94) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r2, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) mmap(&(0x7f00002b9000/0xf000)=nil, 0xf000, 0x0, 0x4008031, 0xffffffffffffffff, 0x4000) 2.977198612s ago: executing program 2 (id=3): syz_usb_connect(0x0, 0x3f, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r6) sendmsg$NL80211_CMD_GET_WIPHY(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x24, r7, 0x5707b563827c8365, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x74}, @val={0x8, 0x12a}, @void}}}, 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050000000000"], 0x24}}, 0x0) r8 = syz_io_uring_setup(0xf02, &(0x7f0000000340)={0x0, 0x18f1}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r11 = socket$kcm(0x10, 0x400000002, 0x0) syz_io_uring_submit(r9, r10, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x10, 0x0, r11, 0x0, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0, 0x61, 0x0, {0x3}}) io_uring_enter(r8, 0x2, 0x0, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ce6571404e3651"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000040) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)=ANY=[@ANYBLOB="480100001000010000000000000000000000000000000000000000000000000000000000f8ff0000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000001eb900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000004c00120073657169762863636d28626c6f77666973682d61736d29290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000c0008"], 0x148}}, 0x0) 2.236518884s ago: executing program 0 (id=1): chroot(&(0x7f0000000300)='.\x00') open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) socket$nl_route(0x10, 0x3, 0x0) mknod$loop(0x0, 0xfff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xf}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendto(r1, 0x0, 0x0, 0x24008804, 0x0, 0x0) r3 = socket(0xa, 0x5, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup(r4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r4, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r6 = dup(r4) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e24, 0x5, @loopback, 0x1}}, 0x4, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x8, 0x1b}, 0x9c) close_range(r3, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000400), 0x80800) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x40200, 0x0) ioctl$TIOCPKT(r7, 0x5420, &(0x7f00000000c0)=0x3ff) 2.174525426s ago: executing program 4 (id=5): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r1 = dup(r0) write$binfmt_script(r1, &(0x7f0000000100)={'#! ', './file0', [{0x20, '{.D\xdc\x7fs\x92\xc6)\xecX\xc7\x1e{\xbc\x1a\xb0=\x93\x93!\xc1\xe6q3\x17\\\xb0\x82\xcbIO\xab{Lv\x1bu\xc0*X\xf1y\xab\x18NW\xb7\x9c\xad \x15\x93\x9f\xb70\xf7jRF\x8cfB\xc6\x16\xad\x9f/\x8b\xc6B\x19\n\xf4\x99\xf2>\x8cm\xea\x91\xff\x97l\x13`M\x15l)d\f\x99\x8c\x90\xee\xb8\v\xb11\xde\xa8\xf2\xb0\xae\xd25\xf9\xfdimd\xac3\x9f\xf2+\xe1\xb7=\r\a/\x9fq\x96OYt\x9en\xab\xdc\r\x17\xd4\xc0V[\xb1\xfcSR\xcf\xc5\xb3\xca\xf5=\xe2(\x00\x00\x00\x00\x00'}]}, 0xa8) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/warn_count', 0x400, 0x48) ioctl$TIOCGSERIAL(r2, 0x541e, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/60}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000002540)={0x73622a85, 0x1114, 0x2}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000002580)=[@request_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="c4a29e3c17e70b22e276c2ba80a3c58db724244b0044962cf9ee2f3f13eff02bfad23cfb42fd0b1528ba6f2e6b21214360332d36997ff876fb1bf04106928b2d04b268b3d3bf16acc673a9469180bd25"}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000380)={0xc, 0x0, &(0x7f00000004c0)=[@dead_binder_done], 0x0, 0x0, 0x0}) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x8000, 0x8, 0x6, 0xffffffed, 0x0, "1332a5f12ce6252f255add7700"}) 1.973288925s ago: executing program 3 (id=4): syz_usb_connect(0x0, 0x3f, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r6) sendmsg$NL80211_CMD_GET_WIPHY(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x24, r7, 0x5707b563827c8365, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x74}, @val={0x8, 0x12a}, @void}}}, 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050000000000"], 0x24}}, 0x0) r8 = syz_io_uring_setup(0xf02, &(0x7f0000000340)={0x0, 0x18f1}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r11 = socket$kcm(0x10, 0x400000002, 0x0) syz_io_uring_submit(r9, r10, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x10, 0x0, r11, 0x0, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0, 0x61, 0x0, {0x3}}) io_uring_enter(r8, 0x2, 0x0, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ce6571404e3651"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000040) socket$nl_xfrm(0x10, 0x3, 0x6) 1.965548815s ago: executing program 1 (id=6): syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="040e04031a0c"], 0x7) 1.347957572s ago: executing program 1 (id=7): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc73}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0xffffffffffffffff, 0x6, 0x7, 0xfffffffffffffffe, 0x1, 0x0, 0x3, 0xfffffffffffff801, 0x3, 0x1, 0x0, 0xfffffffffffffffc, 0x3, 0x6, 0x1, 0x5], 0xeeef0000, 0x1640}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.275179755s ago: executing program 4 (id=8): r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020bfe050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d0a000500eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) 579.810315ms ago: executing program 4 (id=9): prctl$PR_SET_IO_FLUSHER(0x39, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) fchdir(0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x40, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) 565.254386ms ago: executing program 0 (id=10): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x25c, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000005c0)='kfree_skb\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000980)='kfree_skb\x00', r1}, 0x18) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, 0x0}, 0x0) 419.857192ms ago: executing program 1 (id=11): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x3) r1 = io_uring_setup(0x4385, &(0x7f0000000040)={0x0, 0xcc7e, 0x400, 0x2, 0x368}) close_range(r1, 0xffffffffffffffff, 0x0) accept4(r0, 0x0, 0x0, 0x0) 419.518472ms ago: executing program 0 (id=12): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) read$FUSE(r1, &(0x7f0000003800)={0x2020}, 0x2020) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000180)=ANY=[], 0x32) 297.021387ms ago: executing program 0 (id=13): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000006c0)={0x1, &(0x7f0000000500)=[{0x6, 0x43, 0x0, 0x7fff0000}]}) syz_mount_image$fuse(0x0, 0x0, 0x3000009, 0x0, 0x1, 0x0, 0x0) chdir(0x0) symlinkat(&(0x7f0000003200)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00') 244.001309ms ago: executing program 0 (id=14): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@rand_addr=0x64010102, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4e23, 0xfffc, 0x4e23, 0x3, 0xa, 0x80, 0x30}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x5, 0xffffffffffffffff, 0x6, 0x8, 0x800000000001}, {0x9, 0xfffffffffffffffe, 0x0, 0x9}, 0xd6, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x210000, 0x33}, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffb}}, 0xe8) getrandom(0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="040e1a000310"], 0xf) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$eJzs3E1rE10UwPGTNEnTlHayeHhEQXrRjW6GNu7FIC2IAUttxBcQp81EQ8akZEIlIrZduXEhfggXpcvuCtov0I07V27cdSO4sAtxJDOTl7aJrWnSWPv/QZlD7j0z9+Y24dyBzPbdN0/zWVvPGmUJRpUERER2ROISlJqAfwy6cUSaLcvl4W+fzt++d/9mMpWanFFqKjl7JaGUGh17/+zFkN9tY1C24g+3vya+bP2/dXb75+yTnK1ytioUy8pQc8XPZWPOMlUmZ+d1paYt07BNlSvYZslrd5ZELFNlreLCQkUZhcxIbKFk2rYyChWVNyuqXFTlUkUZj41cQem6rkZigoOkV2dmjGSHyfNdHgx6pFRKGgMiMrSvJb3alwEBAIC+8uv/erUfrJb0ndT/oZb1/9qFzfLwnfVRv/7fiFTrf5Gm+v9R41ymygTr9X9URBr1f9HbH3S7/t9fEZ1sr3cvjjhOPYy06n+k+h8nRLX+j/mfX9fKg7VxN6D+BwAAAAAAAAAAAAAAAAAAAADgJNhxHM1xHM07DvivOtqgiETdX5B47X0eJnpk9/o3/lj/06Hx4I7QqIj1ajG9mPaOfodNEbHElHHR5If7/+CrxpFl5XZSVXH5YC35+UuLae+7JJmVnJs/IZrE9+Y7ztSN1OSE8uzOD0usOT8hmvzXOj+xNz9cPUbk0sWmfF00+TgvRbEk4/8yrpb/ckKp67dSe64/5PYDAAAAAOBfoKu6+v59sLld39/u7Y+9dm9/HZLW9we8/fV4y/19SM6F+jVrAAAAAABOF7vyPG9YllnqUbAiIj2+RJugNsPDZtUekNumT0AC7Zq6ENQu3ll6dWxdG0/4UO9YsKOhjkX+cFFaBrXbRu36yHQnZ3Y0kaO+h2fevvv++z7enTGRw5zw6nr0gJl2GkQOmmn42L6AAAAAABybRtFfe+VafwcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMApdByP4uv3HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/xa8AAAD//46ZAFE=") 151.858463ms ago: executing program 4 (id=15): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x4, 0x0, 0x0, @msi={0x0, 0x6, 0x6, 0x6}}]}) 109.275575ms ago: executing program 4 (id=16): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./bus\x00', 0x3000408, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000b80), 0x204008, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 66.078587ms ago: executing program 0 (id=17): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in=@multicast1, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe}, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfc, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8, 0x4}, {0x0, 0x8}}}, 0xb8}}, 0x0) 0s ago: executing program 4 (id=18): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.12' (ED25519) to the list of known hosts. [ 41.951873][ T4168] cgroup: Unknown subsys name 'net' [ 42.065890][ T4168] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 43.335667][ T4168] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 45.312001][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 45.377957][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 45.412283][ T4195] chnl_net:caif_netlink_parms(): no params data found [ 45.435724][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 45.485689][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 45.508150][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.516004][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.524028][ T4183] device bridge_slave_0 entered promiscuous mode [ 45.553643][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.560706][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.569088][ T4183] device bridge_slave_1 entered promiscuous mode [ 45.639644][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.649639][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.656870][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.665585][ T4186] device bridge_slave_0 entered promiscuous mode [ 45.673091][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.680156][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.687899][ T4195] device bridge_slave_0 entered promiscuous mode [ 45.705831][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.715177][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.722711][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.730319][ T4186] device bridge_slave_1 entered promiscuous mode [ 45.737571][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.744841][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.752592][ T4195] device bridge_slave_1 entered promiscuous mode [ 45.791151][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.798215][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.806602][ T4188] device bridge_slave_0 entered promiscuous mode [ 45.839150][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.846307][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.854614][ T4188] device bridge_slave_1 entered promiscuous mode [ 45.868993][ T4183] team0: Port device team_slave_0 added [ 45.876758][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.887531][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.904298][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.911665][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.919586][ T4182] device bridge_slave_0 entered promiscuous mode [ 45.928353][ T4183] team0: Port device team_slave_1 added [ 45.935159][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.945720][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.960513][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.967822][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.975660][ T4182] device bridge_slave_1 entered promiscuous mode [ 46.015228][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.046339][ T4195] team0: Port device team_slave_0 added [ 46.053937][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.069222][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.076500][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.102515][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.116117][ T4186] team0: Port device team_slave_0 added [ 46.123225][ T4195] team0: Port device team_slave_1 added [ 46.129872][ T4186] team0: Port device team_slave_1 added [ 46.143622][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.153113][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.160048][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.186047][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.218223][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.253874][ T4188] team0: Port device team_slave_0 added [ 46.270033][ T4182] team0: Port device team_slave_0 added [ 46.276856][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.284593][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.310776][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.323318][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.330257][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.356416][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.368053][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.375115][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.401206][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.413321][ T4188] team0: Port device team_slave_1 added [ 46.419374][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.426385][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.452288][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.465590][ T4182] team0: Port device team_slave_1 added [ 46.527063][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.534226][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.560292][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.587777][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.594840][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.620809][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.633027][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.639976][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.665898][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.679106][ T4183] device hsr_slave_0 entered promiscuous mode [ 46.685844][ T4183] device hsr_slave_1 entered promiscuous mode [ 46.705363][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.712417][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.738447][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.764561][ T4195] device hsr_slave_0 entered promiscuous mode [ 46.771252][ T4195] device hsr_slave_1 entered promiscuous mode [ 46.777948][ T4195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.785903][ T4195] Cannot create hsr debugfs directory [ 46.818000][ T4186] device hsr_slave_0 entered promiscuous mode [ 46.824864][ T4186] device hsr_slave_1 entered promiscuous mode [ 46.831461][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.839008][ T4186] Cannot create hsr debugfs directory [ 46.854982][ T4188] device hsr_slave_0 entered promiscuous mode [ 46.861802][ T4188] device hsr_slave_1 entered promiscuous mode [ 46.868238][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.876366][ T4188] Cannot create hsr debugfs directory [ 46.927818][ T4182] device hsr_slave_0 entered promiscuous mode [ 46.934884][ T4182] device hsr_slave_1 entered promiscuous mode [ 46.941608][ T4182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.949157][ T4182] Cannot create hsr debugfs directory [ 47.021890][ T4173] Bluetooth: hci4: command 0x0409 tx timeout [ 47.021890][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 47.022395][ T21] Bluetooth: hci3: command 0x0409 tx timeout [ 47.028039][ T4173] Bluetooth: hci2: command 0x0409 tx timeout [ 47.034476][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 47.228296][ T4188] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 47.242060][ T4188] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 47.250826][ T4188] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 47.259438][ T4188] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 47.304051][ T4183] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 47.316143][ T4183] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 47.326733][ T4183] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 47.343911][ T4183] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 47.380581][ T4186] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 47.397117][ T4186] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 47.406314][ T4186] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 47.424150][ T4186] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 47.517706][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.550142][ T4182] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.560571][ T4182] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.569980][ T4182] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.588661][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.598899][ T4182] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 47.618423][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.627899][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.637843][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.673988][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.684006][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.690817][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.700590][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.708972][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.719651][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.750259][ T1541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.759553][ T1541] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.768766][ T1541] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.775992][ T1541] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.786641][ T1541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.796088][ T1541] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.805033][ T1541] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.812111][ T1541] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.819679][ T1541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.828942][ T1541] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.837654][ T1541] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.844746][ T1541] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.853126][ T4195] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 47.862813][ T4195] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 47.872125][ T4195] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 47.884672][ T4195] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 47.897487][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.906819][ T1541] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.915446][ T1541] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.923794][ T1541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 47.952363][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.961109][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.969766][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.976846][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.984827][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 47.994308][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.003010][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.012166][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.020431][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.029525][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.039239][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.047768][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.054828][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.063245][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.071119][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.079869][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 48.088727][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.119466][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.129212][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.137992][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 48.147490][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.157030][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.165869][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.174517][ T303] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.181599][ T303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.190275][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.198924][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.207455][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.215865][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.224154][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.233916][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.242373][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.250877][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.262958][ T1541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.271731][ T1541] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.282773][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.299664][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.309147][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.320126][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.334403][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.351882][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.360037][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 48.374719][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.409056][ T4186] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 48.424323][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.439607][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.449689][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.460028][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.469863][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.488443][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.505066][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.556130][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.586570][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.596724][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.606427][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.615488][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.626746][ T4264] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.633846][ T4264] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.642645][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.654681][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 48.662281][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 48.695369][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.705350][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.714121][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.721212][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.730620][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.740796][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 48.748455][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 48.755952][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.775498][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.783090][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.792507][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.800770][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 48.810110][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.820462][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.849079][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.856907][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 48.865587][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 48.873249][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.882301][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.890381][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.899013][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.911173][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.920809][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.931982][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.945482][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.960000][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.988754][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.996363][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 49.025905][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.043110][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 49.051989][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.084593][ T4188] device veth0_vlan entered promiscuous mode [ 49.094113][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.101840][ T4252] Bluetooth: hci3: command 0x041b tx timeout [ 49.101874][ T4245] Bluetooth: hci2: command 0x041b tx timeout [ 49.107858][ T4252] Bluetooth: hci4: command 0x041b tx timeout [ 49.114380][ T4245] Bluetooth: hci0: command 0x041b tx timeout [ 49.126622][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.140115][ T4252] Bluetooth: hci1: command 0x041b tx timeout [ 49.149911][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.171871][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.186200][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.193277][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.201663][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.210191][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.218624][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.225666][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.234431][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 49.243194][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 49.252342][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.261936][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 49.278114][ T4183] device veth0_vlan entered promiscuous mode [ 49.290560][ T4188] device veth1_vlan entered promiscuous mode [ 49.312045][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 49.327411][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 49.335883][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 49.352014][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 49.360189][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.368791][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 49.377354][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 49.385962][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 49.396335][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.404788][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.413468][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.424434][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.432845][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.440473][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 49.457646][ T4183] device veth1_vlan entered promiscuous mode [ 49.474317][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.486013][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 49.494328][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 49.503765][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 49.511574][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 49.518965][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.527862][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.538069][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 49.576604][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 49.587160][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.603474][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 49.617591][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.632520][ T4183] device veth0_macvtap entered promiscuous mode [ 49.652476][ T4183] device veth1_macvtap entered promiscuous mode [ 49.661780][ T4188] device veth0_macvtap entered promiscuous mode [ 49.673814][ T4188] device veth1_macvtap entered promiscuous mode [ 49.689802][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 49.698630][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 49.707831][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 49.717874][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 49.726287][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 49.735021][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.744117][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 49.752846][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.788504][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.809030][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.818690][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 49.827734][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.838179][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.847006][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.855977][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 49.863473][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 49.871212][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.878859][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.886717][ T4186] device veth0_vlan entered promiscuous mode [ 49.897429][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.908391][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.920218][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.935742][ T4182] device veth0_vlan entered promiscuous mode [ 49.945483][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.953821][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.962682][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.972032][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 49.980123][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.989099][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.997661][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.006633][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.014704][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.031650][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.042563][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.054479][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.071791][ T4183] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.080650][ T4183] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.089522][ T4183] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.098433][ T4183] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.110480][ T4186] device veth1_vlan entered promiscuous mode [ 50.122508][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 50.130484][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 50.139809][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.149454][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 50.158148][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.175821][ T4188] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.184909][ T4188] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.193951][ T4188] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.203156][ T4188] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.224318][ T4182] device veth1_vlan entered promiscuous mode [ 50.256067][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 50.264355][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 50.274603][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 50.283064][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 50.291444][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.299674][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.307666][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.316334][ T4195] device veth0_vlan entered promiscuous mode [ 50.349235][ T4195] device veth1_vlan entered promiscuous mode [ 50.384548][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 50.392728][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 50.400579][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 50.411725][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.423083][ T4182] device veth0_macvtap entered promiscuous mode [ 50.450099][ T4182] device veth1_macvtap entered promiscuous mode [ 50.486162][ T4186] device veth0_macvtap entered promiscuous mode [ 50.494414][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.503920][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.506580][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 50.521393][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 50.529437][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 50.538256][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.548185][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 50.560315][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 50.580200][ T4186] device veth1_macvtap entered promiscuous mode [ 50.592392][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.605372][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.615684][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.630624][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.642763][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.650537][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 50.659467][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.669214][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 50.678136][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.695638][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.705541][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.708441][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.725364][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.737698][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.748254][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.758161][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.768607][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.779506][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.788807][ T4195] device veth0_macvtap entered promiscuous mode [ 50.797931][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.809353][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.819388][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.829859][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.840835][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.849308][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 50.857626][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 50.866103][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 50.874915][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.884322][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 50.893071][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.908724][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.919725][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.935000][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.945696][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.957423][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.968059][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.978983][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.989173][ T4195] device veth1_macvtap entered promiscuous mode [ 50.998989][ T4182] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.008125][ T4182] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.017735][ T4182] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.026760][ T4182] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.040576][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 51.049549][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 51.058515][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.070116][ T4186] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.079355][ T4186] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.088472][ T4186] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.097441][ T4186] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.115514][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.126723][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.136584][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.147018][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.157063][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.167506][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.178114][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.188755][ T4288] Bluetooth: hci1: command 0x040f tx timeout [ 51.188825][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.194977][ T4288] Bluetooth: hci0: command 0x040f tx timeout [ 51.210686][ T4288] Bluetooth: hci4: command 0x040f tx timeout [ 51.211952][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.217340][ T4288] Bluetooth: hci2: command 0x040f tx timeout [ 51.230863][ T4288] Bluetooth: hci3: command 0x040f tx timeout [ 51.232349][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.251991][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 51.260566][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.270404][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.274161][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.288641][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.300779][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.311450][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.321357][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.331812][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.342144][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.352672][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.363521][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.387608][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 51.395821][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 51.405345][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.419296][ T4195] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.432794][ T4195] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.441765][ T4195] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.450470][ T4195] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.481983][ T303] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.505919][ T303] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.548031][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 51.578501][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.621252][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.647675][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 51.763498][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.764213][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.772619][ T4264] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.799499][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.802778][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.824908][ T4264] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.832621][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 51.840723][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 51.861199][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 51.941716][ T4293] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.950253][ T4293] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.961773][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 52.118614][ T4296] netlink: 'syz.2.3': attribute type 298 has an invalid length. [ 52.438329][ T4264] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.455711][ T4264] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.493513][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 53.271908][ T1111] Bluetooth: hci2: command 0x0419 tx timeout [ 53.337674][ T1111] Bluetooth: hci4: command 0x0419 tx timeout [ 53.345830][ T1111] Bluetooth: hci0: command 0x0419 tx timeout [ 53.352224][ T1111] Bluetooth: hci1: command 0x0419 tx timeout [ 53.356945][ T4313] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 53.486150][ T4315] netlink: 'syz.3.4': attribute type 298 has an invalid length. [ 54.022688][ T4325] netlink: 'syz.4.8': attribute type 5 has an invalid length. [ 54.319244][ T4327] mmap: syz.4.9 (4327) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 54.453043][ T4339] loop0: detected capacity change from 0 to 128 [ 54.683001][ T4348] ================================================================== [ 54.691255][ T4348] BUG: KASAN: slab-out-of-bounds in xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 54.700477][ T4348] Read of size 1 at addr ffff888147e35608 by task syz.0.17/4348 [ 54.708113][ T4348] [ 54.710451][ T4348] CPU: 0 PID: 4348 Comm: syz.0.17 Not tainted syzkaller #0 [ 54.717630][ T4348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 54.727679][ T4348] Call Trace: [ 54.730947][ T4348] [ 54.733871][ T4348] dump_stack_lvl+0x168/0x230 [ 54.738547][ T4348] ? show_regs_print_info+0x20/0x20 [ 54.743760][ T4348] ? load_image+0x3b0/0x3b0 [ 54.748273][ T4348] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 54.753638][ T4348] ? xfrm_pol_bin_obj+0x140/0x140 [ 54.758647][ T4348] print_address_description+0x60/0x2d0 [ 54.764186][ T4348] ? xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 54.770699][ T4348] kasan_report+0xdf/0x130 [ 54.775137][ T4348] ? xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 54.781652][ T4348] xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 54.788000][ T4348] xfrm_policy_inexact_insert_node+0x950/0xb60 [ 54.794171][ T4348] ? xfrm_policy_alloc+0x75/0x2b0 [ 54.799223][ T4348] xfrm_policy_inexact_alloc_chain+0x7cf/0xea0 [ 54.805389][ T4348] ? xfrm_policy_inexact_insert+0xe0/0x1460 [ 54.811318][ T4348] xfrm_policy_inexact_insert+0xe0/0x1460 [ 54.817059][ T4348] ? __get_hash_thresh+0x105/0x410 [ 54.822163][ T4348] ? policy_hash_bysel+0x10a/0x570 [ 54.827267][ T4348] xfrm_policy_insert+0x112/0x930 [ 54.832308][ T4348] xfrm_add_policy+0x4d6/0x860 [ 54.837088][ T4348] ? xfrm_dump_sa_done+0xc0/0xc0 [ 54.842280][ T4348] ? apparmor_capable+0x12c/0x190 [ 54.847325][ T4348] ? __nla_parse+0x3c/0x50 [ 54.851750][ T4348] xfrm_user_rcv_msg+0x58d/0x860 [ 54.856697][ T4348] ? xfrm_netlink_rcv+0x90/0x90 [ 54.861580][ T4348] ? xfrm_netlink_rcv+0x66/0x90 [ 54.866446][ T4348] ? xfrm_netlink_rcv+0x66/0x90 [ 54.871291][ T4348] ? xfrm_netlink_rcv+0x66/0x90 [ 54.876152][ T4348] ? __mutex_lock_common+0x431/0x2390 [ 54.881532][ T4348] ? __copy_skb_header+0x417/0x5a0 [ 54.886648][ T4348] ? __skb_clone+0x480/0x790 [ 54.891234][ T4348] netlink_rcv_skb+0x1e0/0x430 [ 54.896096][ T4348] ? xfrm_netlink_rcv+0x90/0x90 [ 54.900937][ T4348] ? netlink_ack+0xb60/0xb60 [ 54.905526][ T4348] ? __lock_acquire+0x7c60/0x7c60 [ 54.910542][ T4348] xfrm_netlink_rcv+0x75/0x90 [ 54.915214][ T4348] netlink_unicast+0x774/0x920 [ 54.919989][ T4348] netlink_sendmsg+0x8ab/0xbc0 [ 54.924741][ T4348] ? netlink_getsockopt+0x560/0x560 [ 54.929921][ T4348] ? aa_sock_msg_perm+0x94/0x150 [ 54.934848][ T4348] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 54.940147][ T4348] ? security_socket_sendmsg+0x7c/0xa0 [ 54.945592][ T4348] ? netlink_getsockopt+0x560/0x560 [ 54.950804][ T4348] ____sys_sendmsg+0x5a2/0x8c0 [ 54.951128][ T1108] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 54.955582][ T4348] ? memset+0x1e/0x40 [ 54.955627][ T4348] ? __sys_sendmsg_sock+0x30/0x30 [ 54.972208][ T4348] ? import_iovec+0x6f/0xa0 [ 54.976704][ T4348] ___sys_sendmsg+0x1f0/0x260 [ 54.981386][ T4348] ? __sys_sendmsg+0x250/0x250 [ 54.986162][ T4348] ? percpu_counter_add_batch+0x13b/0x160 [ 54.991914][ T4348] ? __fdget+0x18b/0x210 [ 54.996167][ T4348] __se_sys_sendmsg+0x190/0x250 [ 55.001009][ T4348] ? __x64_sys_sendmsg+0x80/0x80 [ 55.005947][ T4348] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 55.011940][ T4348] ? lockdep_hardirqs_on+0x94/0x140 [ 55.017124][ T4348] do_syscall_64+0x4c/0xa0 [ 55.021527][ T4348] ? clear_bhb_loop+0x30/0x80 [ 55.026204][ T4348] ? clear_bhb_loop+0x30/0x80 [ 55.030885][ T4348] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 55.036768][ T4348] RIP: 0033:0x7ff097096749 [ 55.041171][ T4348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.060780][ T4348] RSP: 002b:00007ff0952fd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 55.069185][ T4348] RAX: ffffffffffffffda RBX: 00007ff0972ecfa0 RCX: 00007ff097096749 [ 55.077167][ T4348] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000007 [ 55.085138][ T4348] RBP: 00007ff09711af91 R08: 0000000000000000 R09: 0000000000000000 [ 55.093124][ T4348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 55.101088][ T4348] R13: 00007ff0972ed038 R14: 00007ff0972ecfa0 R15: 00007ffdf4691c38 [ 55.109078][ T4348] [ 55.112090][ T4348] [ 55.114404][ T4348] Allocated by task 4348: [ 55.118707][ T4348] __kasan_kmalloc+0xb5/0xf0 [ 55.123288][ T4348] sk_prot_alloc+0xe7/0x210 [ 55.127796][ T4348] sk_alloc+0x2f/0x310 [ 55.131851][ T4348] pfkey_create+0xd8/0x560 [ 55.136278][ T4348] __sock_create+0x47b/0x900 [ 55.140868][ T4348] __sys_socket+0xe2/0x170 [ 55.145271][ T4348] __x64_sys_socket+0x76/0x80 [ 55.149953][ T4348] do_syscall_64+0x4c/0xa0 [ 55.154479][ T4348] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 55.160382][ T4348] [ 55.162692][ T4348] The buggy address belongs to the object at ffff888147e35000 [ 55.162692][ T4348] which belongs to the cache kmalloc-2k of size 2048 [ 55.176740][ T4348] The buggy address is located 1544 bytes inside of [ 55.176740][ T4348] 2048-byte region [ffff888147e35000, ffff888147e35800) [ 55.190175][ T4348] The buggy address belongs to the page: [ 55.195813][ T4348] page:ffffea00051f8c00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x147e30 [ 55.206036][ T4348] head:ffffea00051f8c00 order:3 compound_mapcount:0 compound_pincount:0 [ 55.214358][ T4348] flags: 0x57ff00000010200(slab|head|node=1|zone=2|lastcpupid=0x7ff) [ 55.222426][ T4348] raw: 057ff00000010200 dead000000000100 dead000000000122 ffff888016842000 [ 55.231025][ T4348] raw: 0000000000000000 0000000000080008 00000001ffffffff 0000000000000000 [ 55.239587][ T4348] page dumped because: kasan: bad access detected [ 55.245989][ T4348] page_owner tracks the page as allocated [ 55.251725][ T4348] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, ts 6343655697, free_ts 0 [ 55.269585][ T4348] get_page_from_freelist+0x1b77/0x1c60 [ 55.275120][ T4348] __alloc_pages+0x1e1/0x470 [ 55.279696][ T4348] alloc_page_interleave+0x24/0x1e0 [ 55.284886][ T4348] new_slab+0xc0/0x4b0 [ 55.288965][ T4348] ___slab_alloc+0x81e/0xdf0 [ 55.293549][ T4348] kmem_cache_alloc_trace+0x1a5/0x2a0 [ 55.298899][ T4348] device_create+0x12c/0x2e0 [ 55.303492][ T4348] bdi_register_va+0x93/0x6c0 [ 55.308177][ T4348] bdi_register+0xd1/0x120 [ 55.312575][ T4348] device_add_disk+0x83a/0xd40 [ 55.317334][ T4348] nbd_dev_add+0x757/0xb20 [ 55.321217][ T1108] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 55.321728][ T4348] nbd_init+0x21c/0x2d0 [ 55.321747][ T4348] do_one_initcall+0x1ee/0x680 [ 55.321768][ T4348] do_initcall_level+0x137/0x1f0 [ 55.335639][ T1108] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.339772][ T4348] do_initcalls+0x4b/0x90 [ 55.339795][ T4348] kernel_init_freeable+0x3ce/0x560 [ 55.339813][ T4348] page_owner free stack trace missing [ 55.339820][ T4348] [ 55.369836][ T4348] Memory state around the buggy address: [ 55.375474][ T4348] ffff888147e35500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 55.381208][ T1108] usb 5-1: config 0 descriptor?? [ 55.383532][ T4348] ffff888147e35580: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc [ 55.383547][ T4348] >ffff888147e35600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 55.383555][ T4348] ^ [ 55.383565][ T4348] ffff888147e35680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 55.383577][ T4348] ffff888147e35700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 55.383586][ T4348] ================================================================== [ 55.429477][ T1108] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 55.433103][ T4348] Disabling lock debugging due to kernel taint [ 55.433192][ T4348] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 55.433210][ T4348] CPU: 0 PID: 4348 Comm: syz.0.17 Tainted: G B syzkaller #0 [ 55.433228][ T4348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 55.433237][ T4348] Call Trace: [ 55.433243][ T4348] [ 55.477273][ T4348] dump_stack_lvl+0x168/0x230 [ 55.481959][ T4348] ? show_regs_print_info+0x20/0x20 [ 55.487165][ T4348] ? load_image+0x3b0/0x3b0 [ 55.491682][ T4348] panic+0x2c9/0x7f0 [ 55.495608][ T4348] ? bpf_jit_dump+0xd0/0xd0 [ 55.500092][ T4348] ? _raw_spin_unlock_irqrestore+0xa5/0x100 [ 55.505965][ T4348] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 55.511841][ T4348] ? _raw_spin_unlock+0x40/0x40 [ 55.516688][ T4348] ? xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 55.523166][ T4348] check_panic_on_warn+0x80/0xa0 [ 55.528085][ T4348] ? xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 55.534566][ T4348] end_report+0x6d/0xf0 [ 55.538707][ T4348] kasan_report+0x102/0x130 [ 55.543197][ T4348] ? xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 55.549684][ T4348] xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 55.556010][ T4348] xfrm_policy_inexact_insert_node+0x950/0xb60 [ 55.562162][ T4348] ? xfrm_policy_alloc+0x75/0x2b0 [ 55.567169][ T4348] xfrm_policy_inexact_alloc_chain+0x7cf/0xea0 [ 55.573301][ T4348] ? xfrm_policy_inexact_insert+0xe0/0x1460 [ 55.579173][ T4348] xfrm_policy_inexact_insert+0xe0/0x1460 [ 55.584875][ T4348] ? __get_hash_thresh+0x105/0x410 [ 55.589974][ T4348] ? policy_hash_bysel+0x10a/0x570 [ 55.595074][ T4348] xfrm_policy_insert+0x112/0x930 [ 55.600083][ T4348] xfrm_add_policy+0x4d6/0x860 [ 55.604829][ T4348] ? xfrm_dump_sa_done+0xc0/0xc0 [ 55.609748][ T4348] ? apparmor_capable+0x12c/0x190 [ 55.614754][ T4348] ? __nla_parse+0x3c/0x50 [ 55.619150][ T4348] xfrm_user_rcv_msg+0x58d/0x860 [ 55.624071][ T4348] ? xfrm_netlink_rcv+0x90/0x90 [ 55.628911][ T4348] ? xfrm_netlink_rcv+0x66/0x90 [ 55.633741][ T4348] ? xfrm_netlink_rcv+0x66/0x90 [ 55.638574][ T4348] ? xfrm_netlink_rcv+0x66/0x90 [ 55.643403][ T4348] ? __mutex_lock_common+0x431/0x2390 [ 55.648762][ T4348] ? __copy_skb_header+0x417/0x5a0 [ 55.653854][ T4348] ? __skb_clone+0x480/0x790 [ 55.658447][ T4348] netlink_rcv_skb+0x1e0/0x430 [ 55.663211][ T4348] ? xfrm_netlink_rcv+0x90/0x90 [ 55.668055][ T4348] ? netlink_ack+0xb60/0xb60 [ 55.672634][ T4348] ? __lock_acquire+0x7c60/0x7c60 [ 55.677656][ T4348] xfrm_netlink_rcv+0x75/0x90 [ 55.682320][ T4348] netlink_unicast+0x774/0x920 [ 55.687071][ T4348] netlink_sendmsg+0x8ab/0xbc0 [ 55.691816][ T4348] ? netlink_getsockopt+0x560/0x560 [ 55.696997][ T4348] ? aa_sock_msg_perm+0x94/0x150 [ 55.701916][ T4348] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 55.707185][ T4348] ? security_socket_sendmsg+0x7c/0xa0 [ 55.712627][ T4348] ? netlink_getsockopt+0x560/0x560 [ 55.717804][ T4348] ____sys_sendmsg+0x5a2/0x8c0 [ 55.722551][ T4348] ? memset+0x1e/0x40 [ 55.726515][ T4348] ? __sys_sendmsg_sock+0x30/0x30 [ 55.731522][ T4348] ? import_iovec+0x6f/0xa0 [ 55.736007][ T4348] ___sys_sendmsg+0x1f0/0x260 [ 55.740669][ T4348] ? __sys_sendmsg+0x250/0x250 [ 55.745416][ T4348] ? percpu_counter_add_batch+0x13b/0x160 [ 55.751127][ T4348] ? __fdget+0x18b/0x210 [ 55.755348][ T4348] __se_sys_sendmsg+0x190/0x250 [ 55.760183][ T4348] ? __x64_sys_sendmsg+0x80/0x80 [ 55.765099][ T4348] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 55.771066][ T4348] ? lockdep_hardirqs_on+0x94/0x140 [ 55.776247][ T4348] do_syscall_64+0x4c/0xa0 [ 55.780640][ T4348] ? clear_bhb_loop+0x30/0x80 [ 55.785297][ T4348] ? clear_bhb_loop+0x30/0x80 [ 55.789955][ T4348] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 55.795829][ T4348] RIP: 0033:0x7ff097096749 [ 55.800223][ T4348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.819805][ T4348] RSP: 002b:00007ff0952fd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 55.828195][ T4348] RAX: ffffffffffffffda RBX: 00007ff0972ecfa0 RCX: 00007ff097096749 [ 55.836144][ T4348] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000007 [ 55.844091][ T4348] RBP: 00007ff09711af91 R08: 0000000000000000 R09: 0000000000000000 [ 55.852038][ T4348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 55.859985][ T4348] R13: 00007ff0972ed038 R14: 00007ff0972ecfa0 R15: 00007ffdf4691c38 [ 55.867938][ T4348] [ 55.871125][ T4348] Kernel Offset: disabled [ 55.875442][ T4348] Rebooting in 86400 seconds..