last executing test programs: 17.923950383s ago: executing program 4 (id=7): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x77) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x19, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @cgroup_sockopt=0x16, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r3, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$netlink(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0x2, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r6, &(0x7f0000032680)=""/102392, 0x18ff8) r7 = syz_open_dev$sndctrl(&(0x7f0000000a80), 0xd4, 0x100) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r7, 0x81785501, 0x0) semop(0x0, &(0x7f00000000c0)=[{0x2}], 0x1f4) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f017a00bad104b000eeec360fc7310f1ad50f01c80f01c80f01c9f30faeeb0f0107", 0x22}], 0x1, 0x26, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) 17.832257218s ago: executing program 0 (id=1): r0 = creat(&(0x7f0000000080)='./file1\x00', 0x13e) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) iopl(0x3) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x3c) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x8002, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x6) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x2c, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x2c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000380)=@mgmt_frame=@probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x7}, @device_a, @broadcast, @random="d0291dc581e9", {0x8, 0x9}, @value=@ver_80211n={0x0, 0x1, 0x1, 0x3, 0x0, 0x2}}, @void, @val, @void, @val={0x2d, 0x1a, {0x2, 0x2, 0x2, 0x0, {0x5, 0x1ff1, 0x0, 0x9, 0x0, 0x0, 0x1, 0x2, 0x1}, 0x1, 0x2, 0x2}}, @val={0x72, 0x6}, [{0xdd, 0x3e, "d11954aea0b8bc708b033f4cfe1b613b6f2e8748ba5b3d7450bf3e514ff28cadff31894d33a26f0c4ff9fec31121a263d0981db612f6db6a85f7b06279a6"}, {0xdd, 0xa, "3c8295fec149cec496f3"}]}, 0x8e) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x35) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1}) close(r0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)) 15.939843489s ago: executing program 4 (id=9): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r4}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{}, {0x0, 0x0, 0x0, 0xa}, {0x0, 0x4, 0x10009, 0x1}], 0x10, 0xfffffff6}, 0x94) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030030000b12d25a80648c2594f90124fc60100c034002040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0xa}, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8) getsockname$packet(r8, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x24, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xa}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) 12.581905415s ago: executing program 3 (id=4): syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) syz_open_procfs$namespace(0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={0xffffffffffffffff, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r4, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) syz_open_dev$loop(&(0x7f0000000700), 0x10, 0x202a80) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001980)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6, 0xffffffffffffffff}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="7638300c000000000000e900feff", 0x0, 0x2f000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x200, 0x70bd28, 0x0, {0x60, 0x0, 0x0, 0x0, {0x5, 0x10}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}]}}]}, 0x44}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00"], 0x50}}, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) 10.139236301s ago: executing program 2 (id=15): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(0xffffffffffffffff, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) accept4(r0, &(0x7f0000000340)=@l2tp6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @loopback}}, 0x0, 0x80000) 9.985687987s ago: executing program 2 (id=16): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000300)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x4, 0x7}]}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_open_dev$video(0x0, 0x485, 0x40000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x40900, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xc8) syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x495, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x7, 0x288}, &(0x7f0000000340), 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/stat\x00', 0x0, 0x0) r4 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r4, 0x627, 0x4c1, 0x43, 0x0, 0x30) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) 9.151375604s ago: executing program 3 (id=18): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x3, 0x0, @random="a1fb75d10a28"}, 0x10) getsockname$llc(r0, 0x0, &(0x7f0000000400)) 8.442328724s ago: executing program 1 (id=19): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0xbd15, 0x0, 0x1, 0x103a6}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x201, 0x0, 0x0) recvfrom$inet(r4, 0x0, 0x0, 0x10600, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) ioctl$FAT_IOCTL_GET_VOLUME_ID(r4, 0x80047213, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000007040)={0x0, 0x0, 0x0}, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) socket$l2tp(0x2, 0x2, 0x73) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0, 0x20040000}) io_uring_enter(r1, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 7.548238243s ago: executing program 3 (id=20): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) unshare(0x6a040000) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x190, 0x0, 0x0, 0xdd9f86, 0x5, 0x2000009, 0x1, 0x5, 0x8, 0x722, 0x5, 0xb, 0x0, 0x3f, 0xb763599953cb091e, {0xf56, 0x6fd8e84b}, 0x3, 0xed}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4048894) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r3, 0x400, 0x1) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0xffffff1f}, 0x94) 7.350492842s ago: executing program 0 (id=21): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0xa002, 0x0) write$FUSE_INIT(r3, &(0x7f00000023c0)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x7, 0x0, 0x4, 0x3, 0x7, 0x5, 0x0, 0x0, 0x59, 0x9}}, 0x50) 5.912225804s ago: executing program 1 (id=22): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, &(0x7f00000002c0)={0x0, "fbd78df8363b88d9c3a4cae9b29b529de5e20000000000001400", 0x3}) 5.75414949s ago: executing program 1 (id=23): syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x8b, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x5, 0x8, 0x4, 0x3c5b, 0x10000001, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x134, 0x7ffe, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x312, 0x0, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0xa, 0x4, 0x9, 0x8, 0x801, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0xf38, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800006, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x4, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x9, 0xce7, 0x9ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x8, 0x200a620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x7, 0x5, 0xb1c, 0x1, 0x200, 0xffbf2441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 5.684519813s ago: executing program 0 (id=24): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r1 = epoll_create(0xf7f) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x2002}) 5.620096516s ago: executing program 4 (id=25): r0 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xff, 0x80, 0xc, [{{0x9, 0x4, 0x0, 0xfd, 0x1, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x4, 0x20, 0xb}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x80c}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) poll(&(0x7f0000000080)=[{r1, 0xc010}], 0x1, 0x4) 5.420111135s ago: executing program 1 (id=26): unshare(0x42000000) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000201c1b100c0000000000010902"], 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x4}, 0x68) 4.764994863s ago: executing program 2 (id=27): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x5, 0x9fd, 0x85, 0x41}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000180)="ff5fb99772024dca4128654351fb3280df659b977f16d875fcc707b3cbb7b7a9c1d65d36636748dffc9414d25c561e46fe57c40e41404929394b03cdee6a1b0981334afa94d03d91841c75a69c2069ba4bbee2bf537a1fc5b34c0c5058d862", 0x800, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r0}, 0x38) 4.519992034s ago: executing program 2 (id=28): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x800008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000400)=0x4000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) 4.042109135s ago: executing program 0 (id=29): timerfd_create(0x8, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x4000001) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x304e, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r1, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 3.063463247s ago: executing program 0 (id=30): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) close(0xffffffffffffffff) ptrace$peeksig(0x4209, r1, &(0x7f0000000100)={0x9}, 0x0) r4 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0}) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, 0x0) r5 = fsopen(&(0x7f00000000c0)='hfsplus\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000280)='uid', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x20, 0x61, 0x11, 0x8c}, [@call={0x85, 0x0, 0x0, 0xcc}]}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x41000}, 0x94) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c", 0x15) accept4(r0, 0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f00000002c0), 0x6, 0x0) migrate_pages(0x0, 0x71, 0x0, 0xffffffffffffffff) 2.948205642s ago: executing program 2 (id=31): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000003c0)=[@in={0x2, 0x4e24, @empty}], 0x10) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) sendmmsg$inet(r0, &(0x7f0000003400)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000100)="5e92", 0x2}], 0x1}}, {{&(0x7f0000000bc0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10, &(0x7f0000002080)=[{&(0x7f0000000c00)='J', 0x1}], 0x1}}], 0x2, 0x4008021) 2.809367108s ago: executing program 3 (id=32): syz_init_net_socket$llc(0x1a, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) setuid(0x0) sendmsg$IPSET_CMD_TYPE(r0, 0x0, 0x4000034) r6 = fsopen(&(0x7f0000000140)='f2fs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='test_dummy_encryption', 0x0, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r7, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000005000000000000000300000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005500181200"/60, @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001800000000000000000000003900000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000181400", @ANYRES32=r8, @ANYBLOB="000000000000000006f1020040000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r9 = syz_open_dev$loop(&(0x7f00000006c0), 0x6, 0x22002) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x4000) setresuid(0x0, 0x0, 0x0) ioctl$BLKBSZSET(r9, 0x40081271, 0x0) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x4b4b, &(0x7f0000000480)) 2.099805019s ago: executing program 1 (id=33): semop(0x0, &(0x7f00000000c0)=[{0x4, 0xb, 0x1000}], 0x1) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x2, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x34, r3, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000006000000140008"], 0x28}}, 0x8000) 1.991970304s ago: executing program 0 (id=34): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x237, &(0x7f0000000280)={0x0, 0x275, 0x400, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$rds(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x20000800}, 0x4000008) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x12, 0x0, 0x3}, 0x9c) ioctl$BLKRAGET(0xffffffffffffffff, 0x1263, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x38, 0x0, @fd=r2, 0x100000001, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) 1.815711001s ago: executing program 4 (id=35): r0 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x900f, 0x100, 0x4, 0x162}, &(0x7f0000000400), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000180)={0x39692fcc, r0, 0x50, {0x606, 0x100}, 0x4}, 0x1) 1.1490803s ago: executing program 3 (id=36): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @multicast2}}, 0x0, 0x0, 0x3fc, 0x0, 0x82}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bind$nfc_llcp(r5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) socket(0x10, 0x803, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 1.052061864s ago: executing program 1 (id=37): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000180), 0x0}, 0x1c) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) close(r4) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) r5 = openat$binfmt(0xffffffffffffff9c, r3, 0x2, 0x0) close(r5) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) execveat$binfmt(0xffffffffffffff9c, r3, &(0x7f00000004c0)={[&(0x7f0000000000)='\x00']}, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r7, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) syz_usb_connect(0x3, 0x4f, &(0x7f0000001b80)={{0x12, 0x1, 0x110, 0xc0, 0x98, 0xca, 0x10, 0x39c6, 0x8f68, 0xdd44, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3d, 0x1, 0x8, 0x8, 0x90, 0x0, [{{0x9, 0x4, 0x39, 0x5, 0x3, 0x1, 0x3, 0x75, 0x92, [@hid_hid={0x9, 0x21, 0x7, 0x0, 0x1, {0x22, 0xa4f}}], [{{0x9, 0x5, 0xb, 0x2, 0x200, 0x6, 0x8, 0xf3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xfc, 0x6}]}}, {{0x9, 0x5, 0x9, 0x9, 0x10, 0x0, 0x5, 0x48}}, {{0x9, 0x5, 0x6, 0xc, 0x3ff, 0x4, 0x3, 0x2}}]}}]}}]}}, 0x0) 1.051744424s ago: executing program 4 (id=38): add_key$user(&(0x7f00000003c0), &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000340)=']', 0x1, 0xfffffffffffffffa) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e24, 0x4, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000180)='veth0_macvtap\x00', 0x10) fallocate(0xffffffffffffffff, 0x50, 0x0, 0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x141102) writev(r0, &(0x7f0000000500)=[{&(0x7f0000000780)="4aa4b7c9bb37612c988ffa9071b1805c03a86557f838a6b409a0690c0e451098b6f3644275d01b10600d3d5f8202b1afb779e800059d10ae3177951bef2ad3425bb2c98d82d0a2aa7cb21cd0b9c1f5b534b2bbf202739eb77dd52f9918bc43afa8778cf4ebd694c870c0ebdff9693bf28308c13351e2ef4b8c02757bd5f7468ab78807605a7e85c8ef7cc8a65c2a45bdce5041d38f65b29c9768326a3fb0009fadae69cb0228b3745ac7c4564a792a7496f0b304fb1cddc4d27b20590399badcbed870b9cfa62636607fbed238862d698d72095eb8876bd0225d11bee69b5e4d4dac98b365d7049bd78d2ee47839434b08a7747ff969b17e002981ae8595505d1d2c7123218f7222a61c9ee6e782a2c87e10d5d573a2e05a4e7b1db4c71a6a14323555ac2ac0c1effebf5960452a19869055aed5d5587ce50f65c83b2a4988d97eefe04cde033a1f87d7e1776daa6f8c0a4095ee1b2f7de1e9065ab21819639e36002610b6df9804d1650f83ab0383c337dff82e0d467ea4650ce74203fa7740d6940b335e0f7bd2e69cc8fbe57800f3b44d91842027a42d271224ca796a4767b24b3209803b7d36cfa697797cf59df26d6132b01dab8ebc82628221df6f3ff12cfdf88b34fa387f86a3eead782f28875976118a44f55ac588c912485b44837f84ab51f786d3fa58ce235571c521daad93e10902899d29870422e670228ec41541ea03482c892e4d9f38afe916837c98353cd22b985d4ddec254656440d2cd026860ac8d448cff3ac9a8c62e77e7f7528f2f3b6e95793cde9d416787bf6dd544cec663e403a66edd2326b03c62f15f05e15b2c4b9c5686bb9ce5b505c6ad01b931c10a50257c5c1570e397cc63997667479b581f495d93a2a53a721dc9bc9b39b69c216dfe2957dfb1a26c6a45b4aa2ebabf9510d16fbeac4a7cb7b825b8bb5ca57eda1454c3d220df43e3de8c6f1f7b1a6e3d347d1ef3fb0cfe40af35c0a54669f9561e87b274fe7c6e417c8a1a62c3faed31496e2346c582fc1fc4a5bfb9df0f60d76b09cabe494151706f72a10152cfc57ee15c387092c1018d9521c5c1885cfcad0b2b3c12834ec97831ea4d025a06f5effe64094e00c9bf91b283d15f3a70a5f6a2d1be93ae5e81279dea6e3b5a7471be6414b05c2297da67adc9d63444ff28e3a1469915136bcc25e0c003b9deeb43455c4db4246e07a4d535d1b34e7c32537f4edb0e792dd83bcb9d8769767fc907977df206d6ab918e985ee6cdaea99c9c4782e00a4c9162fe9bb747e3422c8f6471f7c57b0e664579de97b3ce8e281e9b0c73140b8e45842cf325639545c59c3a6cf544d2a4bb273af6fbf8f00d567c417ef4131523c5611b82ecb2b983dc25612863640656d90b64b14577025a395706218f58e9f62d614af8043da5b36d2ca1e4f793adf7e55c661ce9daba09b49d01cffe1dda6e3f39587a0a8abfb82eea8eadcab7b9f895e6d1ea57a0293e2e58fe8023f99d89d5a4b86d0ae2ac59b8b1812f3b982b831c7770ca83e26eedc005c66945380f092b45ed4c2ccea484c726082a6c3f6f211936523c486e8419fbc9ef8b71e67b02c4a6b78eecb94d4b83b8057e17ac29ed3c823d9f0b6f546cdedf7695dc09f240a05457bc0f45de203dd8d80bddfc1ce8ead3c9865b251d2711f2f249749e3359318df6b5408812d470844ae6a8c99bc72b2a3a31bad2644f7787a68b9272a1e7159fbf065a956e5755f1d460c751a6b8c800d3384ca94ef33a7846cf278dbbe6077c77cff7fa213115f8ec17f2fe169640a919031ebdf80258eb07b639bb65ced7293f44a858fa362322db354c1d11d57a3d7908b0ca2f05222840ad357d2bb77503274d747202ec391b8a48ef4640620bd2c37c13ca9c8b691988ed38055675c56ee7df3d25e4c0bc8683a8c67ea9a1ca2cd3826ef18f2ce0c4d31356a952f36fe3ae83269570df20f1b8eef07b357ccc84386912be1888bb29aea750d63fd74bbdaadb8a79abafe14f9edba98d6614d77abb0586e57a222066bc7a5177113054b6f8a9475fdffc1354374f9629c3a261d6622c87f4d78e07c30399c1b743c9a066f6d7b92448e3197e1e247d98484c78a4381eed274318f3f1385740d29e381bc79c8b802fec7a829fea3e94a29b222b815a0e82c5884a4fb0055f2cfd8c5c1b6c9c3e66b303be9e9358fcfa0c6021f5121f3b3c986650b364a1d0496240d63696c066bb694e0c2a8351a4123bd305c2dab56dc476cc3c433f3c19a0d83d6dc456cac8bab87d0ab80afe8080e6fd3cd22b8bd1baf82e985ebe5581c6a0ede8da23a7de0c2daabe176f719ecb0fa1e7d940cd062450d39e381f71dce78e050a2084f2434cbe17d1393d58e9407b5a5c4ebb882dbef8676bb4a7b9e313b996915ac4c6e7d32b6a4149299029b9c1982a66a6f34018cc78dbc502e0a936122c874918654fe5d43f5b470c421a46eaa47f4bde0502470e9026c38f13fb2d70d8e8a1d0614763cc4881f1ccfc15535dba890be44df7b19e56fd6d75e85fdcc8fccdaf21379b97959af9ce9a97ad29c7c5b787559e5711cb027a45451feb6e9bf376c0b51979d0abefbb4187c56822f01a08d70acf0c0f095c888571537931ce21db813aa9ac67e6a7e23430572f18b76f7d16de59e886b2bad6f6c0c0383be5b4d5661270332ab42e52bb3af4a19ed7756826542b58a83b32cce7571ca61bf6c717eb018e4278273c0dbac267612328f110dde400050de84a80ebc12a91ef96f11fcb369bc553a2b924f137507f62bc5b61be2e4634d963584a051d3de7d20cb4070e152919d588ac99cc7ef1d1256b8ff80c8282770dfe5cfb84f6b492f085c1f03cf5ba907cf2bd7176616abd889384b0635cd5e72ddeee68e8ad464e8d648d0f3f048e9556909a6a52a5c47f889f6b5da4124dbe8f6f24a1bdd23358646c90651d7d2d577b59af1bf964699d83b7e86c1af8d306a114c4e3ad7adf053ac12836d073954f3bfb84df286fafe81ccdf04d5ddb492b71ef30f692398f832ca5138aeab31cc09c897159694ebdbb449b06a9e7854daccc9005e1b75c0a3d04dfaeacfee6bae6c1f7475d5039fb2fe2effb8af1a06e53b94563804df7dc083a6095b567a7adbabd8af2028bea42aa77ecd3c44b560756bd813b17e246b9161f4fa53585660c526283216fb977bb08f674f38d48db1c4d69a927e4b83e5ad85f2a76b07cfec5ce3524d09638dddff40e4ae210acc5237889e35d71192f457d771f25df752944a912971f389278d7000f258ff3b53245a661cf6b606d334efa91b527b47509613392cfca6badffec7a4309ebdc43238074650c8072aa0d5f970d5ca08a3d7b4036d2ea96b5b0aa903263f54a341a1e6a46ee92f9f15411ce8cb0189a9f6e9476e0c10ce9ff9029e7b84bf25d9adf890b2d8b9e03b79e89392b573811c75f00ff1d58bc4c47697cc52c2d1fe886b6cdf3c9ef1e80cccfa3b22dfd03cb7cc49a4cd539602797b1a426f5bfa9deac93c190336d7860e8c24b237d902cc139d6bb8a310aecd3f652d6e858ee95b7cc89b0beb58e954f09c6d61ed7febe8bdf8fd71d9474a6b6e1a7209f7d01503b53947d03d3b77fa5bb58636fcf8b006aae46488a761b42084ea96aaea73ad281e30dbb5e1e0c6be22555cf5fa90cc32c9d08df4c1a2f0e6837de5e04746520ad3337f8806e31efca4f616292dd0005f928d1fdb4fd66237ef6d415cae72b910d03e613626e14c1537e63f6f81d96f0058a38a9b3c1d789fc4b961890572b1c753fb1bc520650e5ada6d1c4824c25dc587b180de086873abafc1b0826bde340a52bc03207a1321ca0fac1488200ed5655b8f94c1d2ec573fea83c7f8bcefaed5028580dc6bec56a57bad14027539ad334c960b0822cbcdfd2ca377f07681996d6a9bf236856c210ce8b525c14ec379d42b5b3449780add6f29f42c20500c7fa487c7ffe2ad7dad72704d88428d9dd9605a3fa4138c15ea98230a69a0de7bc5fc4b5054d9e48f8565aea956280cef6e007064a190ec1a12eda9b9d11d7561dff517579252db6c456f221763837639edbd02a32fdc6b5920185032d4157a028e216a5edf5763de1c3949826199342075070822d2bbc750634fae5f73af6074326e3babd7d50159043e9697ee513220c53d1eb4813efe5d51a505ba5be3ec65510b89b9f9981469307ad65097b9f331a84cae3a70069da8bc8d250a4527be5f5388a70d663920bc0be6552b90a0b3ce6958dbfbdceee87caae6ae8e4b9f97345f86e14526bde0dcac096715471ab5ea12a5d35a9bf41c1120f5737071889410c2023f983a60e869e2da3c242f4ef020492770d17ccd36437026fd8a8ff79e783bb4399648b75a53abf92457bc9179e137e989a718f7fa935cc4dacc17ebb6f64aeac91b608cf9d56f137a171bbe8d615a8dfe04c97b9a25d7b389a4115b638b3d92f65a735d07d3537bddd679c10e2a193915cee786c917fe9123e02d5c1cd1488347e3e8c49c9e1e8594fb457e302ca70c3ec9a09988023f97ac8c782597943b98608e3c98121d4a06ab2bd389c3ecc4f388a995396e76912fe817ad462cac52788b0f60a6e7e9cde4635469c7011d5fac2c3198a256a95bd09fb6b4a6136585cd43f7c0fd43e6c78553cad66051e4f9d73872132f2654884bdb1797a2e8f9e46561e67b16073ddb30919808918779861d81c45a0d4d3fa9dd6df41cec2eaf055bbcf1bdd8b99ce8fbc4119d05213bab784a34ae6b732850c8ac9c583323034e92758bed9e641b90357a009d56bf30da7635fd64d887c734991796476bcafd05d255fde766e947a857f111e69ef93ceb97c29a7dff62f27b76864777583cd42664896aa8cc164e8dad3a8a083a4b8ae1b8e7e984c4deaf7bb83f6608bad01021ce53c11c7c05dd6161af101fee6f75414e3b905aa7f14235aa497f314d9c521e2f52680109077abfeaa249b0d166a1b36aab6dcb38075b296c43d6f3da3b337b9b57f416a9fb6ad7e2788e07f6c6e8a29471c526cf4aa59bdd3fafbec2d5b2f08391220a279856cf6eac72c19ad49146829fd1ed08bec3bb003ad6bfb6e0daf23d1af80d8ac95915ff090ea4c0aa87f7e15789e0a6556483978a0fa1343970b29cbd70e28f482f21b7dde3a71e1d35b921ed117ff9af951103b5eb89317771331a0e605e4d427aa160bd46d5479c142486b3c2bb2dba696ea5d27109751724f1253e1b51d8530eeb9fde32e8f13964bdb01b9252935f630368694265cf208665aad458667eaa3dc2e5df5b24862c2aae1fd32d3cb6a1dd80fb15c06b7369ad183798beed628b44ce1380b3404f77a58b33fe39eeca10f60be3cacf95ddb2af24fb4e842257c615d0ce5789453406e23fba64f89daeac3af2847ef0b39f8af2711322be5d48dc94ac46f9033972bf9ab6892d265b68ae3976b78649c8fe373709c1920088d4e27ca82e54a4adc0d440872e6eb39a64241539b5b5cda4c83620553bd91887348d2ce9d752607003292357fb0ed0a018e3d07afcdf7586901801ab2b08582787378ac5a29bce8d00aafd8eb4de587dab7cfc480f64ca2303e6916fd17871ab74caa35522b77f862ab0c2ad4b59dc86c4f0a3d7883c26660c047807233bf930b6beffa87d69069924f00afcab984930fe45ded6da8c16b6ff83320cf41dca9415fe4a25720cfc5f54b05544ead216ae505506cb445b080b8d139e0a149e97060508ae93467dd309d15894681ce4c359010741ce10346044254438b0938b8174937c1daca1948ee", 0x1000}, {&(0x7f0000000400)="c30bca37d664e8b024ee5c62a50c5d4ddba08e12e3f52e36e2428f1471b2faffa91a52f5d4880200bd8fc05588ee9045febef12856d95cefc07a233bdb46ba0d8c4d7010fd7c1da28f", 0x49}, {&(0x7f0000000480)="9b6e91d08f8386fb33f177f91006b215e944b0cf550d64af28af0895b857debad2aa9bcebe3470492fb410e098acd9bde72b76b6917f0e94e3aef3268a3bfab735f5abc4c6bcee4125bb57bd3448331bda9e444abf2e04bcff36e68f2381096231", 0x61}], 0x3) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, 0x0) close_range(r1, r1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000240)={0x578, 0x20, 0xf0, 0x640, 0x0, 0x1f, 0x32, 0x2, {0xfffffffe, 0x0, 0xfffffffc}, {0x0, 0x0, 0x1}, {0xfffffffc, 0x0, 0x200}, {}, 0x0, 0x40, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9, 0x4000, 0x0, 0x4007, 0x0, 0x8, 0x0, 0x2, 0x5}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f0000000600)={0x11, 0x10, 0xfa00, {0x0}}, 0x18) r3 = socket(0x11, 0xa, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000200)=@unlock_all, 0xb) bind$can_raw(r3, &(0x7f0000000000), 0x10) getsockname$packet(r3, 0x0, &(0x7f0000000080)) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0xc0686611, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000380)=0x14) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000700)={{0x1, 0x0, 0x0, 0x0, 0x0, 0xac, 0x9}, 0x4, 0x2, 0xd56, 0xfffffffffffffffe, 0x0, 0x0, 0x26}) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) socket$inet_mptcp(0x2, 0x1, 0x106) 309.295336ms ago: executing program 2 (id=39): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d4, 0x2b}, 0x0, @in=@empty}}, 0xe8) r5 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) fcntl$setlease(r5, 0x400, 0x0) fcntl$setown(r5, 0x8, 0x0) fcntl$setlease(r2, 0x400, 0x2) r6 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in=@multicast1, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe}, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="b80000001300e99900000000fcdbdf25fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00400000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000000000000000000a30a000000000000f8ffffffffffffff0400000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000c8b9767e9056b63fe112dfa532f1ce68ea55be191173718a23daefa10ca76c9677c80d711f87fb"], 0xb8}}, 0x0) syz_io_uring_setup(0x10b, &(0x7f00000003c0)={0x0, 0x334b, 0x80, 0x3, 0x805}, 0x0, 0x0) 230.17785ms ago: executing program 3 (id=40): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000002140)={0x8, 0x5, 0x1, 0x0, 0xfc}) 0s ago: executing program 4 (id=41): ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000002cc0)={0x1, [{0x0, 0x4d88, 0x6, &(0x7f0000000640)="7a650e526bd0998268bb5847d9beacc47a22df873eab4b8b91133675482eaa56ace8db59bed9aa07d4e390c7c9f98c462b55612196911e3c4e510ede3efde35eec990f22a76cf752e507c1e2de2920a9fc0790cc176bd2b901e4127b09835ae6d0d196048bb19a64d26f20a05b95c69f371882ef2e20c5606ed1b2ebcf09a4a333f6e1c3c4fb64d8182df4ab09d0a381d966977fc041cea9bdf0aa31fe51efe9211b9b8e6e4551b6438f8efcc41265574ff6504435eb22a678a99768f0327ded8fdcb41f27c2024d2b923f7dc5df5bf62af447b121dd9f94d766d6cebdeb02f611ab10e57af4b3268fb3f9777373bd5fd6b82f730e67c4eab113d8e65d7405be3e5d92dc5e7e85d34bb8b7c894cbed629ecc25c288b3d4556a85a1e2150cac5b686a8de29ab7c35040b77875bfa0e451dc0869cfe105bd115e7cf48f44dfdf26be65f3b727fd88d6395d051e49c060998e84b19377fcb20fe2eb392335e5a9d84555ef037aab37169ce761aa8a8ec08ea87e3a3b896f3d1b2380bc8256e0f7ea7dc488382e6112b53a7bb269d6261f87e0e0e0cef9152f8a67f412148f34880c970101fbd7b0e8fc49d6a5c87e487b7b175b15be26b6b8e1ed8527614dcefcfd80f8392560c8b706418b7de8fbb7a666a7e7f322dc70373606bf39efa04616cb99d662dfc591061bde5ed27a66aa7edbfec1eb0b1e843c372b84c3ed514a0aadf523b8669e526765d429824aeaa0a6f4c185754d437d977a1f586431dc256ce5aa7c25be259de3a0ae6e5bcdf56b4c7e8199fe6b461e78467cfac19de6956056ef57e93d3a7df8f646f4a9002b100edb0a6caa72b3f6eb29dc54de58120d27daff9cd61c64107e1bcb3b3212e1e2aa24fb24dc2dafc636c82ad25da9d934e46c7783d8f915337612feb348857ce2262240dfe51ec94d9d61074959f167b9840b20f003883bf167149228d7f03eafde851427cd1966a96aeae05b51ae4cd82f4b4dad60a070c01a8b500e2683f7136e331602e76845262825d7f3764cf1a05ad95d88aab71d41484f63fa6a43c044c7f03130552321933bc40b888fd0cc55939ff79a5059516f3b80c7ba8188ffb6a259a34567ee52c1f9df0f6c91737d688e36d076a49d1045cac30d5ed52a10381c96d9f22e469cc531bb06853d18b8f8625d2a917e795ffa4407fa75713510a3f5370e1ecbf7a5ff68a90a1eda077531cf4d399d4908f138c936e1931c72240070c6a6255f5fd03966e9a06c1d481e8e3d128e880776e572177780a3481c49bd86c174e152bafed245d58ef3428c645b08e48833960d1b5223d7be0c67a2b2c7531390d1837a84ed004a00cb4b0cd6e78824da032b48c49ec006d14206dc3d0c67d7ca87e9ea0faddc3e0b0c917c64eefeebf79e3a16c958db63a08a5d4d7210273aba3e56a4cd4cccb044750ff97749505ff1332b2dd30990849ab1500e1947d0abfb0c59760f0a502806ee1bce56fbb42251dd6ac8b709c73a6b8c548c2b23cf351dc498810e477bd082464e76702703b56d3cd2f3d8a2e00f19d8ffa3c236d3601f169c9dfe9c316f8cbe63c3801a51ea5ac785694a0c653cd28d68c5a81c2590d2aeea8c8688b2e88f46c4f99890e51b42cce485fcb4d91557fb3912b36b0dbeac8df44e945eb9937141402fb2aa1476185e1f8c37f6c98bc937f36d9c7237135132a54a03067b002b9c657ab0daa253af66eee78b0309cb8532dd2dee800c8349b731da0efa66ead82eebe0102279df5aa281fe1d86c0dbf154910d5e8a113ecbddbd046367b9e2acfa7cc406f61b472bbec6919534615ed81b664da956ce6586bf4c92d63ef371dfec5f9ce748931d585cadc9372a95a1372c7213e2c52fca253945afeee02e9f2de2d9452c85fd2dbdc87cb6c25697dfcbed8a0eba381835e6c360f3861367ec98a9a9ccf956d6cbfb706fee0d391cf82a0d4662792274f52fc2b5d72a43ec74a86400e62d3652f607774cfad1504bc0476570d532b527bf0d7012804b2e6fdf9a9414f10b16c9374f2b065348d865b309e37750d3a7e12394e356c48c9fa0d4a9a43f689f6cbf70b09a3b9782cc3d5d93480f8a7a21a049780fc6bf21f1eca938a37afcbb2b929a0c502e164d2571e78d214b359d97e3edc0ad5c7fd1625b4ece33e1f569676e9a7262ead857873f77ef149d2f8c5a09ab19ae384a7f957f612a24283c35327aa969b20711309644c5b3e6c89da94e1f5da54246bd771468a1adc8a8d601e0b12769604f0f07ca43ce2a8a2f4b5654c0b76b146c49038e07db54dae702580b97096911f034fc1797029de8b7c213c902d1d754e77ff85e6222e745db9d5d2d45c5d29a8b6de0f27e5701fdf12b09fd6c70baa0f85a424c21ce0796dbe1fd366b94fcdf64ea232b3e88b89a38d728de77e84decc804f07a48f2716ca6f76b24923cea1a4da0d1f1dc73611269e784c4fd921f9b26c11f35b5cda45842a81b603ce2155d95c273fa0743a571b52e68c9ea3f28009fc37406b9e329ce50fedfb20dfb4cdf3a94769aee2586c2a17e68a07abfcd18aceddfd3876b14558e4d092eadb9120796c44e89610494085117bc41b5c4619a8c160b97811df49fc7d9bf222d7a002640644337ef5af53ed50661131f7c042665b276c0adf0c9a74f3542729beb7632a6027e65eddff7bb27915826701ec9b6a4c672f08877eefd859e0aa6e75a2e841e1ea98dff994e5a58be628df86bff17497a4d0f92ab39db421eb1062a2a393656bbb1d92becbb91a59619156b51585cd2eafd8a18d6326166312efeaa7258bddad63e0c7372ffb7ce1f1adf1ac2ffa0f278e4be6684d762f8971ed7bb04096b96f8126bf5fd32142e745d421f495327dde0f1e2d9a1d8ba63c1453101396a2e54e89cdabac2c6a01f23a5c1d5a2dfa2a3c634176e97c9c62b41ea28102b5a08af2fba1d311bb323df086ea97726c9d8c7b7b53a3399a80f040d434fdcc2148fb1da3b7d7f0f3e3fd56471a310ee275da611c79f86be8ed6343f6ed0ad91dfeffebc3ab6389d0566d6db904c1db499ae7d2698fdc7170320f85cc3d3d0d9d0d0c7d45db7b53c5eb79a2fed2a048d9d74419532122fac62f6315a9e13b461cb4e26514491debd366927987271be963ea5805a49b8b480c6a393fda1b11fd5634890cf02948cb5bfea237afb30d081c7403cd334a02e5bb8db542c4d5fa5ec5c8a0dd36b62156881c98e01948b4775a502c5d8453439fd930df52caac9d71c28b712000b306b913c10918ca0bc194f2533334462e5cd2b2e6c978a4838febfbc2d4375b8108bd0aa32aeaf05e7ba30c781cace6470ead574f5cbfa68aa8c8d835e9b3ab2bd7dd90b5e3e6cd62d8e04c3b45326e1f560a8dd8f3db4177e9e5ccd61f21dacb5c40c8030559cdfe88f7aa98bdcde90c1214cf293b3df093d0630bc3073cbaffa025b1f5537b49d799731745de7d36cded4a9db25915a511ba505b4ddd885cd226c24ea37fd926dbd90b887"}, {0x3, 0x0, 0x41ff7484, 0x0}, {0x3, 0x0, 0x100d5b6, 0x0}, {0x2, 0x0, 0x4, 0x0}, {0x0, 0x0, 0x6, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x2, 0x0, 0xa2d, 0x0}, {0x1, 0x0, 0x1, 0x0}, {0x3, 0x0, 0xf3f, 0x0}, {0x4, 0x0, 0x1000, 0x0}, {0x3, 0x0, 0x6, 0x0}, {0x3, 0x0, 0x1000, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x1545, 0x0}, {0x2, 0x0, 0x6ba, 0x0}, {0x1, 0x0, 0x40007, 0x0}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x4, 0x1, 0x0, 0x2000, &(0x7f0000002000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.148' (ED25519) to the list of known hosts. [ 66.312988][ T4171] cgroup: Unknown subsys name 'net' [ 66.457161][ T4171] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.944927][ T4171] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 70.318335][ T4199] chnl_net:caif_netlink_parms(): no params data found [ 70.336490][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 70.389090][ T4181] chnl_net:caif_netlink_parms(): no params data found [ 70.460337][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 70.469892][ T4199] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.477219][ T4199] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.486054][ T4199] device bridge_slave_0 entered promiscuous mode [ 70.494802][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 70.523456][ T4199] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.530793][ T4199] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.538634][ T4199] device bridge_slave_1 entered promiscuous mode [ 70.618992][ T4199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.642305][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.649883][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.658534][ T4182] device bridge_slave_0 entered promiscuous mode [ 70.670676][ T4199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.691622][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.698735][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.707392][ T4182] device bridge_slave_1 entered promiscuous mode [ 70.733245][ T4181] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.740465][ T4181] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.748501][ T4181] device bridge_slave_0 entered promiscuous mode [ 70.786158][ T4181] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.793433][ T4181] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.801805][ T4181] device bridge_slave_1 entered promiscuous mode [ 70.827028][ T4199] team0: Port device team_slave_0 added [ 70.840974][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.848180][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.857168][ T4189] device bridge_slave_0 entered promiscuous mode [ 70.875274][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.886406][ T4199] team0: Port device team_slave_1 added [ 70.892818][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.900082][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.908368][ T4190] device bridge_slave_0 entered promiscuous mode [ 70.917303][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.924767][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.933255][ T4189] device bridge_slave_1 entered promiscuous mode [ 70.958149][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.983535][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.990950][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.999256][ T4190] device bridge_slave_1 entered promiscuous mode [ 71.016731][ T4181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.045353][ T4182] team0: Port device team_slave_0 added [ 71.061615][ T4181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.081428][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.091908][ T4199] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.098887][ T4199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.125031][ T4199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.138659][ T4182] team0: Port device team_slave_1 added [ 71.163967][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.178055][ T4199] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.185736][ T4199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.211998][ T4199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.241725][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.253409][ T4181] team0: Port device team_slave_0 added [ 71.261293][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.282752][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.289732][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.316609][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.329559][ T4181] team0: Port device team_slave_1 added [ 71.355084][ T4189] team0: Port device team_slave_0 added [ 71.362757][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.369734][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.396722][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.442389][ T4189] team0: Port device team_slave_1 added [ 71.462295][ T4190] team0: Port device team_slave_0 added [ 71.493004][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.500426][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.505752][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.534021][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.534749][ T4181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.554119][ T4190] team0: Port device team_slave_1 added [ 71.560810][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.568343][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.595929][ T4181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.613064][ T4199] device hsr_slave_0 entered promiscuous mode [ 71.620023][ T4199] device hsr_slave_1 entered promiscuous mode [ 71.656820][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.664381][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.691069][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.705439][ T4182] device hsr_slave_0 entered promiscuous mode [ 71.712422][ T4182] device hsr_slave_1 entered promiscuous mode [ 71.719260][ T4182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.728169][ T4182] Cannot create hsr debugfs directory [ 71.751539][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.758538][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.785794][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.802802][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.810243][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.837753][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.882971][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.890077][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.917028][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.917085][ T2303] Bluetooth: hci1: command 0x0409 tx timeout [ 71.970781][ T23] Bluetooth: hci4: command 0x0409 tx timeout [ 71.977670][ T23] Bluetooth: hci2: command 0x0409 tx timeout [ 71.980726][ T1107] Bluetooth: hci0: command 0x0409 tx timeout [ 71.990296][ T1107] Bluetooth: hci3: command 0x0409 tx timeout [ 72.004995][ T4181] device hsr_slave_0 entered promiscuous mode [ 72.011921][ T4181] device hsr_slave_1 entered promiscuous mode [ 72.023929][ T4181] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.031840][ T4181] Cannot create hsr debugfs directory [ 72.060215][ T4189] device hsr_slave_0 entered promiscuous mode [ 72.067156][ T4189] device hsr_slave_1 entered promiscuous mode [ 72.074693][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.082762][ T4189] Cannot create hsr debugfs directory [ 72.152710][ T4190] device hsr_slave_0 entered promiscuous mode [ 72.159590][ T4190] device hsr_slave_1 entered promiscuous mode [ 72.167054][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.175445][ T4190] Cannot create hsr debugfs directory [ 72.439368][ T4199] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 72.461160][ T4199] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 72.470406][ T4199] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 72.486647][ T4199] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 72.530303][ T4189] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.546346][ T4189] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.556304][ T4189] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.568456][ T4189] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.665741][ T4182] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.677295][ T4182] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.687409][ T4182] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.698604][ T4182] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.776678][ T4199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.788574][ T4181] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.805238][ T4181] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.816379][ T4181] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.851524][ T4181] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.863006][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.873663][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.885000][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.896339][ T4199] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.918623][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.940374][ T4190] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.952752][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.961552][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.969892][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.979500][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.992257][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.999574][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.008673][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.041290][ T4190] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.056072][ T4190] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.066133][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.076674][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.087803][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.095894][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.105171][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.115315][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.123975][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.131715][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.140019][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.150017][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.159058][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.166938][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.176179][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.201899][ T4190] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.216682][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.226675][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.236284][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.248067][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.267677][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.277608][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.286782][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.327479][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.339395][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.349074][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.359032][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.369503][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.379969][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.392041][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.404062][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.417583][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.452605][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.480354][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.493057][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.508133][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.516889][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.526369][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.534997][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.548557][ T4181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.561920][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.572419][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.581620][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.597247][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.606963][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.633962][ T4199] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.648309][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.658503][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.668059][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.675738][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.688015][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.704014][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.713482][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.720787][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.728764][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.739186][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.752702][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.793306][ T4181] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.815824][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.830063][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.843417][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.856103][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.865330][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.881609][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.920158][ T4182] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 73.933468][ T4182] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.949072][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.957923][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.967359][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.976403][ T21] Bluetooth: hci1: command 0x041b tx timeout [ 73.984496][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.994538][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.003777][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.010913][ T1159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.019122][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.028275][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.036950][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.045088][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.054324][ T4193] Bluetooth: hci3: command 0x041b tx timeout [ 74.060847][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.069967][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.078435][ T4193] Bluetooth: hci0: command 0x041b tx timeout [ 74.081087][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.085346][ T4193] Bluetooth: hci2: command 0x041b tx timeout [ 74.099520][ T4193] Bluetooth: hci4: command 0x041b tx timeout [ 74.101571][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.116118][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.137305][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.166211][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.174939][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.186237][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.218569][ T4199] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.236636][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.248998][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.264725][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.279325][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.292126][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.301842][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.310431][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.319109][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.327864][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.342055][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.358506][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.383256][ T4181] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.417272][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.427338][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.462569][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.503503][ T4189] device veth0_vlan entered promiscuous mode [ 74.513145][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.523166][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.550933][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.558910][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.569165][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.578827][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.594438][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.611232][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.624933][ T4189] device veth1_vlan entered promiscuous mode [ 74.639330][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.660233][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.716157][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.725802][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.734481][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.746691][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.756064][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.765442][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.775470][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.784214][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.792837][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.801322][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.822513][ T4199] device veth0_vlan entered promiscuous mode [ 74.848300][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.859885][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.876896][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.884066][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.892895][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.904639][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.913621][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.920844][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.928638][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.938023][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.947440][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.956614][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.974179][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.985766][ T4189] device veth0_macvtap entered promiscuous mode [ 75.017910][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.027534][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.038868][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.049108][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.060191][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.069043][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.078449][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.089292][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.099679][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.109510][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.118204][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.126704][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.136497][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.144638][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.159401][ T4182] device veth0_vlan entered promiscuous mode [ 75.174635][ T4189] device veth1_macvtap entered promiscuous mode [ 75.191471][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.202194][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.212601][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.228869][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.248814][ T4199] device veth1_vlan entered promiscuous mode [ 75.259971][ T4181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.284344][ T4182] device veth1_vlan entered promiscuous mode [ 75.312256][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.328507][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.341276][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.350154][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.366697][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.378297][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.401669][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.411747][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.426053][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.438516][ T4199] device veth0_macvtap entered promiscuous mode [ 75.453539][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.469126][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.479400][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.507106][ T4182] device veth0_macvtap entered promiscuous mode [ 75.527151][ T4199] device veth1_macvtap entered promiscuous mode [ 75.536637][ T4189] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.547940][ T4189] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.557012][ T4189] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.566096][ T4189] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.578020][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.587484][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.597410][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.606612][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.618468][ T4182] device veth1_macvtap entered promiscuous mode [ 75.637182][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.647008][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.658120][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.689551][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.701796][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.714412][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.749638][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.759303][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.768545][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.776454][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.791626][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.802597][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.814644][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.825394][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.837243][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.847331][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.858125][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.869788][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.886001][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.896647][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.912299][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.921203][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.930040][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.939245][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.948512][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.959801][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.973039][ T4199] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.983076][ T4199] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.992112][ T4199] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.001576][ T4199] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.015093][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.026895][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.037123][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.048600][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.061109][ T4261] Bluetooth: hci1: command 0x040f tx timeout [ 76.067762][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.082026][ T4181] device veth0_vlan entered promiscuous mode [ 76.093860][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.118432][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.127730][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.140301][ T4182] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.150670][ T4293] Bluetooth: hci4: command 0x040f tx timeout [ 76.156338][ T4182] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.165829][ T4293] Bluetooth: hci2: command 0x040f tx timeout [ 76.165981][ T4182] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.172949][ T4293] Bluetooth: hci0: command 0x040f tx timeout [ 76.188583][ T4293] Bluetooth: hci3: command 0x040f tx timeout [ 76.190063][ T4182] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.252148][ T4181] device veth1_vlan entered promiscuous mode [ 76.264033][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.287171][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.350987][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.362754][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.371470][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.379411][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.390292][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.437399][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.448506][ T4211] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.449612][ T4190] device veth0_vlan entered promiscuous mode [ 76.466683][ T4211] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.474382][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.486642][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.495790][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.504301][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.514603][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.533649][ T4190] device veth1_vlan entered promiscuous mode [ 76.560881][ T4181] device veth0_macvtap entered promiscuous mode [ 76.574306][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.583084][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.592026][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.600376][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.609843][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.636869][ T4181] device veth1_macvtap entered promiscuous mode [ 76.680173][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.690148][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.699260][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.715976][ T4190] device veth0_macvtap entered promiscuous mode [ 76.751359][ T4211] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.773101][ T4211] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.786798][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.799261][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.811923][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.819990][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.839996][ T4190] device veth1_macvtap entered promiscuous mode [ 76.856796][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.868166][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.880318][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.891935][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.905060][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.916023][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.933328][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.954101][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.973715][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.984269][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.999795][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.034809][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.073137][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.127957][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.145346][ T4211] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.156284][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.178068][ T4211] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.188126][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.210355][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.221090][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.240666][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.271119][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.296362][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.313104][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.392808][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.408753][ T4181] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.443775][ T4181] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.460757][ T4181] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.491137][ T4181] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.523269][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.571784][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.585221][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.597557][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.609290][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.620371][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.638887][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.690755][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.719510][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.016940][ T4211] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.046970][ T4211] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.095484][ T4211] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.108300][ T4211] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.498918][ T4293] Bluetooth: hci1: command 0x0419 tx timeout [ 79.514806][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 79.531425][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 79.540668][ T4293] Bluetooth: hci3: command 0x0419 tx timeout [ 79.546960][ T4293] Bluetooth: hci0: command 0x0419 tx timeout [ 79.555265][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.562755][ T4293] Bluetooth: hci2: command 0x0419 tx timeout [ 79.569186][ T4293] Bluetooth: hci4: command 0x0419 tx timeout [ 79.609308][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.609406][ T4311] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 79.642389][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.676825][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.691511][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.709678][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.737967][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.769362][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.826557][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.932036][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.003380][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.043164][ T4318] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 80.105412][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 80.137388][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 80.138346][ T4318] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 80.202938][ T4190] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.266591][ T4190] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.286280][ T4190] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.300294][ T4190] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.341832][ T4324] Zero length message leads to an empty skb [ 81.563289][ T26] audit: type=1326 audit(1764901358.180:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4326 comm="syz.1.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f1ff1749 code=0x7ffc0000 [ 81.635646][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.670699][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.767113][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 81.869546][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 82.002893][ T26] audit: type=1326 audit(1764901358.200:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4326 comm="syz.1.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f1ff1749 code=0x7ffc0000 [ 82.030072][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 82.133607][ T4332] netlink: 'syz.4.9': attribute type 3 has an invalid length. [ 82.142103][ T26] audit: type=1326 audit(1764901358.220:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4326 comm="syz.1.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f12f1ff1749 code=0x7ffc0000 [ 82.279110][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 82.381506][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 82.400536][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 82.409572][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 82.418642][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 82.427659][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 82.437413][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 82.447092][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 82.599280][ T4334] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.612776][ T4332] netlink: 'syz.4.9': attribute type 1 has an invalid length. [ 82.620655][ T4332] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.9'. [ 82.633296][ T26] audit: type=1326 audit(1764901358.240:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4326 comm="syz.1.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f1ff1749 code=0x7ffc0000 [ 82.657390][ T4336] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9'. [ 82.680800][ T4334] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.770295][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 82.822357][ T26] audit: type=1326 audit(1764901358.240:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4326 comm="syz.1.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f12f1ff1749 code=0x7ffc0000 [ 82.823514][ T4332] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9'. [ 82.867339][ T26] audit: type=1326 audit(1764901358.270:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4326 comm="syz.1.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f1ff1749 code=0x7ffc0000 [ 82.925661][ T26] audit: type=1326 audit(1764901358.270:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4326 comm="syz.1.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f12f1ff134b code=0x7ffc0000 [ 82.951435][ T26] audit: type=1326 audit(1764901358.270:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4326 comm="syz.1.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f12f1ff134b code=0x7ffc0000 [ 84.769921][ T26] audit: type=1326 audit(1764901358.270:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4326 comm="syz.1.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f12f1ff134b code=0x7ffc0000 [ 84.795862][ T26] audit: type=1326 audit(1764901358.270:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4326 comm="syz.1.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f12f1ff134b code=0x7ffc0000 [ 86.222094][ T4360] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13'. [ 87.274346][ T7] cfg80211: failed to load regulatory.db [ 87.410715][ T1107] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 87.680500][ C1] sched: RT throttling activated [ 87.690818][ T1107] usb 4-1: Using ep0 maxpacket: 32 [ 87.840792][ T1107] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 88.253018][ T1107] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 89.100693][ T1107] usb 4-1: string descriptor 0 read error: -71 [ 89.119515][ T1107] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 89.153160][ T1107] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 89.873652][ T1107] usb 4-1: config 0 descriptor?? [ 89.932904][ T1107] usb 4-1: can't set config #0, error -71 [ 90.069284][ T1107] usb 4-1: USB disconnect, device number 2 [ 92.240647][ T7] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 92.541060][ T1107] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 92.620976][ T7] usb 5-1: config 1 interface 0 has no altsetting 0 [ 92.780867][ T7] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 92.790622][ T1107] usb 2-1: Using ep0 maxpacket: 32 [ 92.799215][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.835969][ T7] usb 5-1: Product: syz [ 92.849975][ T7] usb 5-1: Manufacturer: syz [ 92.871598][ T7] usb 5-1: SerialNumber: syz [ 92.912275][ T1107] usb 2-1: config 0 has no interfaces? [ 92.933405][ T1107] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 92.970701][ T1107] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.006397][ T1107] usb 2-1: config 0 descriptor?? [ 94.355720][ T7] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 94.378969][ T1110] usb 2-1: USB disconnect, device number 2 [ 95.636127][ T4229] usb 5-1: USB disconnect, device number 2 [ 95.675226][ T4229] usblp0: removed [ 97.138827][ T4446] process 'syz.1.37' launched './file1' with NULL argv: empty string added [ 97.690928][ T4457] ================================================================== [ 97.699451][ T4457] BUG: KASAN: slab-out-of-bounds in xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 97.708728][ T4457] Read of size 1 at addr ffff88801f2e7608 by task syz.2.39/4457 [ 97.716401][ T4457] [ 97.718754][ T4457] CPU: 0 PID: 4457 Comm: syz.2.39 Not tainted syzkaller #0 [ 97.725978][ T4457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 97.736699][ T4457] Call Trace: [ 97.740737][ T4457] [ 97.743792][ T4457] dump_stack_lvl+0x168/0x230 [ 97.749091][ T4457] ? show_regs_print_info+0x20/0x20 [ 97.754428][ T4457] ? load_image+0x3b0/0x3b0 [ 97.758973][ T4457] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 97.764460][ T4457] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 97.771033][ T4457] ? xfrm_pol_bin_obj+0x140/0x140 [ 97.776180][ T4457] print_address_description+0x60/0x2d0 [ 97.781759][ T4457] ? xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 97.788803][ T4457] kasan_report+0xdf/0x130 [ 97.793294][ T4457] ? xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 97.800704][ T4457] xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 97.808280][ T4457] xfrm_policy_inexact_insert_node+0x950/0xb60 [ 97.815313][ T4457] xfrm_policy_inexact_alloc_chain+0x7cf/0xea0 [ 97.823226][ T4457] ? xfrm_policy_inexact_insert+0xe0/0x1460 [ 97.831652][ T4457] xfrm_policy_inexact_insert+0xe0/0x1460 [ 97.838114][ T4457] ? __get_hash_thresh+0x105/0x410 [ 97.844953][ T4457] ? policy_hash_bysel+0x10a/0x570 [ 97.850531][ T4457] xfrm_policy_insert+0x112/0x930 [ 97.855825][ T4457] xfrm_add_policy+0x4d6/0x860 [ 97.860965][ T4457] ? xfrm_dump_sa_done+0xc0/0xc0 [ 97.866054][ T4457] ? apparmor_capable+0x12c/0x190 [ 97.871264][ T4457] ? __nla_parse+0x3c/0x50 [ 97.875959][ T4457] xfrm_user_rcv_msg+0x58d/0x860 [ 97.881045][ T4457] ? xfrm_netlink_rcv+0x90/0x90 [ 97.885974][ T4457] ? xfrm_netlink_rcv+0x66/0x90 [ 97.890968][ T4457] ? xfrm_netlink_rcv+0x66/0x90 [ 97.895966][ T4457] ? xfrm_netlink_rcv+0x66/0x90 [ 97.900899][ T4457] ? __mutex_lock_common+0x431/0x2390 [ 97.906396][ T4457] ? __copy_skb_header+0x417/0x5a0 [ 97.911907][ T4457] ? __skb_clone+0x480/0x790 [ 97.916535][ T4457] netlink_rcv_skb+0x1e0/0x430 [ 97.921486][ T4457] ? xfrm_netlink_rcv+0x90/0x90 [ 97.926483][ T4457] ? netlink_ack+0xb60/0xb60 [ 97.931159][ T4457] ? __lock_acquire+0x7c60/0x7c60 [ 97.936994][ T4457] xfrm_netlink_rcv+0x75/0x90 [ 97.941850][ T4457] netlink_unicast+0x774/0x920 [ 97.946666][ T4457] netlink_sendmsg+0x8ab/0xbc0 [ 97.951487][ T4457] ? netlink_getsockopt+0x560/0x560 [ 97.956931][ T4457] ? preempt_schedule_irq+0xd0/0x150 [ 97.962357][ T4457] ? aa_sock_msg_perm+0x94/0x150 [ 97.967333][ T4457] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 97.972837][ T4457] ? security_socket_sendmsg+0x7c/0xa0 [ 97.978701][ T4457] ? netlink_getsockopt+0x560/0x560 [ 97.984117][ T4457] ____sys_sendmsg+0x5a2/0x8c0 [ 97.989304][ T4457] ? memset+0x1e/0x40 [ 97.993432][ T4457] ? __sys_sendmsg_sock+0x30/0x30 [ 97.998682][ T4457] ? import_iovec+0x6f/0xa0 [ 98.003335][ T4457] ___sys_sendmsg+0x1f0/0x260 [ 98.008415][ T4457] ? __sys_sendmsg+0x250/0x250 [ 98.013799][ T4457] ? preempt_schedule_irq+0xd0/0x150 [ 98.019363][ T4457] ? __fdget+0x18b/0x210 [ 98.023673][ T4457] __se_sys_sendmsg+0x190/0x250 [ 98.028564][ T4457] ? __x64_sys_sendmsg+0x80/0x80 [ 98.033715][ T4457] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 98.039838][ T4457] ? lockdep_hardirqs_on+0x94/0x140 [ 98.045264][ T4457] do_syscall_64+0x4c/0xa0 [ 98.049736][ T4457] ? clear_bhb_loop+0x30/0x80 [ 98.054545][ T4457] ? clear_bhb_loop+0x30/0x80 [ 98.059378][ T4457] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 98.065425][ T4457] RIP: 0033:0x7ff43232b749 [ 98.070046][ T4457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.090141][ T4457] RSP: 002b:00007ff430550038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 98.098746][ T4457] RAX: ffffffffffffffda RBX: 00007ff432582180 RCX: 00007ff43232b749 [ 98.106918][ T4457] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 000000000000000a [ 98.115310][ T4457] RBP: 00007ff4323aff91 R08: 0000000000000000 R09: 0000000000000000 [ 98.123473][ T4457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.131457][ T4457] R13: 00007ff432582218 R14: 00007ff432582180 R15: 00007ffee27d1738 [ 98.139485][ T4457] [ 98.142517][ T4457] [ 98.144990][ T4457] Allocated by task 4457: [ 98.149499][ T4457] __kasan_kmalloc+0xb5/0xf0 [ 98.154191][ T4457] sk_prot_alloc+0xe7/0x210 [ 98.158703][ T4457] sk_alloc+0x2f/0x310 [ 98.163023][ T4457] pfkey_create+0xd8/0x560 [ 98.167483][ T4457] __sock_create+0x47b/0x900 [ 98.172174][ T4457] __sys_socket+0xe2/0x170 [ 98.176900][ T4457] __x64_sys_socket+0x76/0x80 [ 98.182113][ T4457] do_syscall_64+0x4c/0xa0 [ 98.186540][ T4457] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 98.192736][ T4457] [ 98.195151][ T4457] Last potentially related work creation: [ 98.200866][ T4457] kasan_save_stack+0x35/0x60 [ 98.205687][ T4457] kasan_record_aux_stack+0xb8/0x100 [ 98.211183][ T4457] kvfree_call_rcu+0x10a/0x7c0 [ 98.216410][ T4457] drop_sysctl_table+0x2fa/0x430 [ 98.221380][ T4457] unregister_sysctl_table+0x87/0x130 [ 98.226877][ T4457] inetdev_event+0xce5/0x1360 [ 98.233184][ T4457] raw_notifier_call_chain+0xcb/0x160 [ 98.239563][ T4457] dev_change_name+0x671/0xbd0 [ 98.244628][ T4457] do_setlink+0x99d/0x3980 [ 98.249208][ T4457] rtnl_newlink+0x1419/0x17d0 [ 98.253920][ T4457] rtnetlink_rcv_msg+0x7ff/0xe90 [ 98.258981][ T4457] netlink_rcv_skb+0x1e0/0x430 [ 98.263757][ T4457] netlink_unicast+0x774/0x920 [ 98.268542][ T4457] netlink_sendmsg+0x8ab/0xbc0 [ 98.273327][ T4457] __sys_sendto+0x423/0x580 [ 98.277975][ T4457] __x64_sys_sendto+0xda/0xf0 [ 98.282795][ T4457] do_syscall_64+0x4c/0xa0 [ 98.287229][ T4457] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 98.293231][ T4457] [ 98.295648][ T4457] The buggy address belongs to the object at ffff88801f2e7000 [ 98.295648][ T4457] which belongs to the cache kmalloc-2k of size 2048 [ 98.309802][ T4457] The buggy address is located 1544 bytes inside of [ 98.309802][ T4457] 2048-byte region [ffff88801f2e7000, ffff88801f2e7800) [ 98.323473][ T4457] The buggy address belongs to the page: [ 98.329297][ T4457] page:ffffea00007cb800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1f2e0 [ 98.340153][ T4457] head:ffffea00007cb800 order:3 compound_mapcount:0 compound_pincount:0 [ 98.348727][ T4457] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 98.356842][ T4457] raw: 00fff00000010200 ffffea00007f0400 0000000300000003 ffff888016842000 [ 98.366009][ T4457] raw: 0000000000000000 0000000000080008 00000001ffffffff 0000000000000000 [ 98.375000][ T4457] page dumped because: kasan: bad access detected [ 98.381778][ T4457] page_owner tracks the page as allocated [ 98.388193][ T4457] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4189, ts 72826773720, free_ts 72784924681 [ 98.409545][ T4457] get_page_from_freelist+0x1b77/0x1c60 [ 98.415705][ T4457] __alloc_pages+0x1e1/0x470 [ 98.420507][ T4457] new_slab+0xc0/0x4b0 [ 98.424708][ T4457] ___slab_alloc+0x81e/0xdf0 [ 98.429481][ T4457] __kmalloc_node_track_caller+0x1fc/0x3a0 [ 98.436038][ T4457] pskb_expand_head+0x127/0x10f0 [ 98.441220][ T4457] netlink_trim+0x180/0x220 [ 98.446018][ T4457] netlink_broadcast_filtered+0x7c/0x1170 [ 98.451888][ T4457] nlmsg_notify+0xec/0x1a0 [ 98.456418][ T4457] rtnetlink_event+0x13a/0x1a0 [ 98.461203][ T4457] raw_notifier_call_chain+0xcb/0x160 [ 98.466779][ T4457] dev_set_mac_address+0x2c4/0x3d0 [ 98.471925][ T4457] dev_set_mac_address_user+0x2d/0x50 [ 98.477757][ T4457] do_setlink+0x80d/0x3980 [ 98.483034][ T4457] rtnl_newlink+0x1419/0x17d0 [ 98.487818][ T4457] rtnetlink_rcv_msg+0x7ff/0xe90 [ 98.493098][ T4457] page last free stack trace: [ 98.498602][ T4457] free_unref_page_prepare+0x637/0x6c0 [ 98.504657][ T4457] free_unref_page+0x94/0x280 [ 98.509362][ T4457] qlist_free_all+0x35/0x90 [ 98.514028][ T4457] kasan_quarantine_reduce+0x150/0x160 [ 98.519638][ T4457] __kasan_slab_alloc+0x2f/0xd0 [ 98.524615][ T4457] slab_post_alloc_hook+0x4c/0x380 [ 98.529740][ T4457] kmem_cache_alloc_node+0x12d/0x2d0 [ 98.535030][ T4457] __alloc_skb+0xf4/0x750 [ 98.539459][ T4457] netlink_ack+0x3a6/0xb60 [ 98.543883][ T4457] netlink_rcv_skb+0x265/0x430 [ 98.548742][ T4457] netlink_unicast+0x774/0x920 [ 98.553519][ T4457] netlink_sendmsg+0x8ab/0xbc0 [ 98.558294][ T4457] __sys_sendto+0x423/0x580 [ 98.562817][ T4457] __x64_sys_sendto+0xda/0xf0 [ 98.567504][ T4457] do_syscall_64+0x4c/0xa0 [ 98.572130][ T4457] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 98.578236][ T4457] [ 98.581016][ T4457] Memory state around the buggy address: [ 98.586855][ T4457] ffff88801f2e7500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 98.594935][ T4457] ffff88801f2e7580: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc [ 98.603004][ T4457] >ffff88801f2e7600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 98.611156][ T4457] ^ [ 98.615501][ T4457] ffff88801f2e7680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 98.623607][ T4457] ffff88801f2e7700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 98.631709][ T4457] ================================================================== [ 98.639902][ T4457] Disabling lock debugging due to kernel taint [ 98.646375][ T4457] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 98.653593][ T4457] CPU: 0 PID: 4457 Comm: syz.2.39 Tainted: G B syzkaller #0 [ 98.662201][ T4457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 98.672506][ T4457] Call Trace: [ 98.675790][ T4457] [ 98.678724][ T4457] dump_stack_lvl+0x168/0x230 [ 98.683420][ T4457] ? show_regs_print_info+0x20/0x20 [ 98.688747][ T4457] ? load_image+0x3b0/0x3b0 [ 98.693354][ T4457] panic+0x2c9/0x7f0 [ 98.697279][ T4457] ? bpf_jit_dump+0xd0/0xd0 [ 98.701822][ T4457] ? _raw_spin_unlock_irqrestore+0xa5/0x100 [ 98.707736][ T4457] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 98.713748][ T4457] ? _raw_spin_unlock+0x40/0x40 [ 98.718756][ T4457] ? xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 98.725294][ T4457] check_panic_on_warn+0x80/0xa0 [ 98.730388][ T4457] ? xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 98.736924][ T4457] end_report+0x6d/0xf0 [ 98.741277][ T4457] kasan_report+0x102/0x130 [ 98.745805][ T4457] ? xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 98.752844][ T4457] xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 98.759553][ T4457] xfrm_policy_inexact_insert_node+0x950/0xb60 [ 98.765715][ T4457] xfrm_policy_inexact_alloc_chain+0x7cf/0xea0 [ 98.771891][ T4457] ? xfrm_policy_inexact_insert+0xe0/0x1460 [ 98.777807][ T4457] xfrm_policy_inexact_insert+0xe0/0x1460 [ 98.783540][ T4457] ? __get_hash_thresh+0x105/0x410 [ 98.788706][ T4457] ? policy_hash_bysel+0x10a/0x570 [ 98.793917][ T4457] xfrm_policy_insert+0x112/0x930 [ 98.798990][ T4457] xfrm_add_policy+0x4d6/0x860 [ 98.803784][ T4457] ? xfrm_dump_sa_done+0xc0/0xc0 [ 98.808852][ T4457] ? apparmor_capable+0x12c/0x190 [ 98.814329][ T4457] ? __nla_parse+0x3c/0x50 [ 98.818754][ T4457] xfrm_user_rcv_msg+0x58d/0x860 [ 98.823704][ T4457] ? xfrm_netlink_rcv+0x90/0x90 [ 98.828571][ T4457] ? xfrm_netlink_rcv+0x66/0x90 [ 98.833453][ T4457] ? xfrm_netlink_rcv+0x66/0x90 [ 98.838318][ T4457] ? xfrm_netlink_rcv+0x66/0x90 [ 98.843274][ T4457] ? __mutex_lock_common+0x431/0x2390 [ 98.848651][ T4457] ? __copy_skb_header+0x417/0x5a0 [ 98.853775][ T4457] ? __skb_clone+0x480/0x790 [ 98.858371][ T4457] netlink_rcv_skb+0x1e0/0x430 [ 98.863231][ T4457] ? xfrm_netlink_rcv+0x90/0x90 [ 98.868105][ T4457] ? netlink_ack+0xb60/0xb60 [ 98.872709][ T4457] ? __lock_acquire+0x7c60/0x7c60 [ 98.877759][ T4457] xfrm_netlink_rcv+0x75/0x90 [ 98.882445][ T4457] netlink_unicast+0x774/0x920 [ 98.887218][ T4457] netlink_sendmsg+0x8ab/0xbc0 [ 98.892423][ T4457] ? netlink_getsockopt+0x560/0x560 [ 98.897809][ T4457] ? preempt_schedule_irq+0xd0/0x150 [ 98.903137][ T4457] ? aa_sock_msg_perm+0x94/0x150 [ 98.908307][ T4457] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 98.913604][ T4457] ? security_socket_sendmsg+0x7c/0xa0 [ 98.919075][ T4457] ? netlink_getsockopt+0x560/0x560 [ 98.924280][ T4457] ____sys_sendmsg+0x5a2/0x8c0 [ 98.929055][ T4457] ? memset+0x1e/0x40 [ 98.933299][ T4457] ? __sys_sendmsg_sock+0x30/0x30 [ 98.938877][ T4457] ? import_iovec+0x6f/0xa0 [ 98.943394][ T4457] ___sys_sendmsg+0x1f0/0x260 [ 98.948178][ T4457] ? __sys_sendmsg+0x250/0x250 [ 98.953071][ T4457] ? preempt_schedule_irq+0xd0/0x150 [ 98.958435][ T4457] ? __fdget+0x18b/0x210 [ 98.962701][ T4457] __se_sys_sendmsg+0x190/0x250 [ 98.967607][ T4457] ? __x64_sys_sendmsg+0x80/0x80 [ 98.972570][ T4457] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 98.978666][ T4457] ? lockdep_hardirqs_on+0x94/0x140 [ 98.983972][ T4457] do_syscall_64+0x4c/0xa0 [ 98.988394][ T4457] ? clear_bhb_loop+0x30/0x80 [ 98.993075][ T4457] ? clear_bhb_loop+0x30/0x80 [ 98.997811][ T4457] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 99.003738][ T4457] RIP: 0033:0x7ff43232b749 [ 99.008164][ T4457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.028056][ T4457] RSP: 002b:00007ff430550038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 99.036865][ T4457] RAX: ffffffffffffffda RBX: 00007ff432582180 RCX: 00007ff43232b749 [ 99.044948][ T4457] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 000000000000000a [ 99.053105][ T4457] RBP: 00007ff4323aff91 R08: 0000000000000000 R09: 0000000000000000 [ 99.061175][ T4457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.069163][ T4457] R13: 00007ff432582218 R14: 00007ff432582180 R15: 00007ffee27d1738 [ 99.077151][ T4457] [ 99.080374][ T4457] Kernel Offset: disabled [ 99.084719][ T4457] Rebooting in 86400 seconds..