last executing test programs: 24.814830226s ago: executing program 3 (id=108): r0 = timerfd_create(0x8, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3}) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 24.575842391s ago: executing program 3 (id=111): socket$kcm(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x3, 0x3c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000700)={0x20c, 0x0, 0x20, 0x70bd25, 0x25dfdbfc, {}, [{{0x8}, {0x1a8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xb}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x20c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x5000, 0x1, @remote, 0x5}, 0x1c) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000100000085000000ae000000850000000500000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r5, 0x0, 0x4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x0, &(0x7f00000001c0)}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES64], 0xf8) brk(0x3) semget$private(0x0, 0x207, 0x0) 12.840095125s ago: executing program 3 (id=131): socket$kcm(0x10, 0x5, 0x10) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) r3 = syz_io_uring_setup(0xa1, &(0x7f0000000640)={0x0, 0xe8ce, 0x8, 0x20, 0x40000313}, &(0x7f00000006c0)=0x0, &(0x7f00000020c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000100)=0xfffffffe, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6007, @fd=r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001800)=""/211, 0xd3}], 0x1}) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) 9.270148453s ago: executing program 2 (id=141): socket$inet_tcp(0x2, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000519000/0x1000)=nil, 0x1000, 0x66) keyctl$KEYCTL_MOVE(0x1d, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000200), 0x0, 0x0, 0x0, r4) syz_io_uring_setup(0x42e6, &(0x7f00000002c0)={0x0, 0x5eda, 0x10100, 0x2}, &(0x7f0000000040), 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x2c, r6, 0x1, 0x70bd27, 0x0, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x1}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x2c}}, 0x800) 8.098378715s ago: executing program 2 (id=142): socket$kcm(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x3, 0x3c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000700)={0x20c, 0x0, 0x20, 0x70bd25, 0x25dfdbfc, {}, [{{0x8}, {0x1a8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xb}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x20c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x5000, 0x1, @remote, 0x5}, 0x1c) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000100000085000000ae000000850000000500000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r5, 0x0, 0x4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x0, &(0x7f00000001c0)}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES64], 0xf8) brk(0x3) semget$private(0x0, 0x207, 0x0) 6.928224307s ago: executing program 0 (id=146): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY_END={0x4}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000805}, 0x8000) 6.330720959s ago: executing program 0 (id=147): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000180), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@volatile}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f00000004c0)={'#! ', './file0'}, 0xb) 6.255036001s ago: executing program 1 (id=148): socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_setup(0x18d6, 0x0, 0x0, 0x0) socket$inet(0x2, 0x3, 0xd) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000a40)='./file0\x00') syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$IPSET_CMD_TYPE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4008004}, 0x4) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r4}, 0x4) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) 6.014021445s ago: executing program 0 (id=149): sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000014}, 0x800) syz_open_procfs(0x0, &(0x7f0000000280)='net\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mincore(&(0x7f0000000000/0xc00000)=nil, 0xc00000, &(0x7f0000000140)=""/142) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) socket$nl_audit(0x10, 0x3, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4048aecb, 0x0) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0xff}, @IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5, 0xa, 0x1}]}}}]}, 0x44}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) 5.286334129s ago: executing program 1 (id=150): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b000000000000000000000000000400000000", @ANYBLOB="0000000000000000000000000000000000000000240ad85f5c252409d15420d46ad8a098ed554b33aab272b626b41537502f0b3dbde458e70ecc11b1ec56269ae84e5db65064b895cd0a4c24e4ba2f6dcf2dc83f250687574a7102528279fc172cccc4078ec6b87d498701e92ce702f58923176e78a58cf755a6037352", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x6, @local, 0x0, 0x0, 'none\x00', 0x29, 0x8, 0x11}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lblc\x00', 0x2a, 0x0, 0x7f}, 0x2c) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x400454da, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x3}) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) 4.775492189s ago: executing program 3 (id=152): syz_io_uring_setup(0x303b, &(0x7f0000000080)={0x0, 0x4f8, 0x200, 0x3}, &(0x7f0000000040)=0x0, &(0x7f0000001700)=0x0) syz_io_uring_submit(r0, r1, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE={0x7, 0x8}) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) syz_open_dev$vcsu(&(0x7f00000000c0), 0xb, 0x200) r5 = syz_io_uring_setup(0x110, &(0x7f00000008c0)={0x0, 0xfad8, 0x800, 0x1, 0x3}, &(0x7f00000000c0)=0x0, &(0x7f0000000940)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r5, 0x133d, 0x0, 0x8, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x8}, 0x0) socket(0x25, 0x3, 0x6) syz_open_dev$loop(0x0, 0x8, 0x30100) fanotify_init(0x200, 0x0) ioctl$VIDIOC_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000300)={0x5, 0x0, '\x00', {0x0, @reserved}}) mount(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='hfs\x00', 0x8000, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r8 = syz_open_dev$video4linux(&(0x7f0000000080), 0x200, 0x8000) ioctl$VIDIOC_ENUM_DV_TIMINGS(r8, 0xc0945662, &(0x7f0000000100)={0x3, 0x0, '\x00', {0x0, @bt={0x1, 0xfff, 0x0, 0x2, 0xed8, 0x8, 0x3, 0x3, 0x9, 0x6, 0x984, 0x3, 0x100, 0x9, 0x1, 0x2, {0x7ff, 0x6}, 0xd, 0x61}}}) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f00000001c0)=0x10001) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000040)=0x10000) read$dsp(r2, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f00000002c0)=0x1) 4.243041589s ago: executing program 1 (id=154): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) 3.860758056s ago: executing program 1 (id=155): r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xf, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f00002eb000/0x4000)=nil, 0x4000, 0x2000000, 0x2010, 0xffffffffffffffff, 0xc8cfe000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xeb10, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xffe0, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x2c, 0x2, [@TCA_CGROUP_EMATCHES={0x28, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x1000, 0x4, 0x51}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x292, 0x3}, {0xfffc, 0x81}}}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x40010) 3.857797207s ago: executing program 3 (id=156): sched_setscheduler(0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x38, &(0x7f00000002c0)=ANY=[@ANYBLOB="120110038121e940e60491553994010203010902260001000000000904000002e515bb0009050402090000000009058802"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) 3.780989928s ago: executing program 2 (id=157): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_setup(0x18d6, 0x0, 0x0, 0x0) socket$inet(0x2, 0x3, 0xd) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chroot(&(0x7f0000000a40)='./file0\x00') syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$IPSET_CMD_TYPE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4008004}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f00000003c0)=ANY=[], 0x0}, 0x94) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, 0x0, 0x0) 3.780245448s ago: executing program 4 (id=158): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000380)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="827d", 0x2}], 0x1}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000180)="6985bc3e5de8fe91a5ea835b02afb61ff0f347b176ad568e6e914a", 0x1b, 0x3b00, 0x0, 0x0) 3.526969223s ago: executing program 4 (id=159): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000200)={0xa, @capture={0x0, 0x0, {0x2, 0xc}, 0x40, 0x80000000}}) 3.526581822s ago: executing program 4 (id=160): socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_setup(0x18d6, 0x0, 0x0, 0x0) socket$inet(0x2, 0x3, 0xd) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000a40)='./file0\x00') syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$IPSET_CMD_TYPE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4008004}, 0x4) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r4}, 0x4) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) 3.092766601s ago: executing program 2 (id=161): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ptrace(0x10, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket(0x2, 0x3, 0xff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000c40)={0x0, 0xfe72}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, 0x0, 0x0) listen(r3, 0x0) connect$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) preadv(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f00000041c0)=""/4096, 0x1000}], 0x1, 0x22, 0x20704513) ioctl$MON_IOCX_GETX(r1, 0x80089203, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) 2.883693205s ago: executing program 3 (id=162): socket(0xa, 0x80002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x40000000c6302, 0x0) r3 = dup(r2) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0x2, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@private0={0xfc, 0x0, '\x00', 0x2}, 0x8000000, 0x0, 0x2, 0x8, 0x0, 0x2}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r3, 0x0) sendfile(r3, r3, 0x0, 0xffffffff) 2.371001685s ago: executing program 4 (id=163): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r1 = syz_io_uring_setup(0xa1, &(0x7f0000000640)={0x0, 0xe8ce, 0x8, 0x20, 0x40000313}, &(0x7f00000006c0)=0x0, &(0x7f00000020c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000100)=0xfffffffe, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6007, @fd=r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001800)=""/211, 0xd3}], 0x1}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000002800)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) 2.360508765s ago: executing program 0 (id=164): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b000000000000000000000000000400000000", @ANYBLOB="0000000000000000000000000000000000000000240ad85f5c252409d15420d46ad8a098ed554b33aab272b626b41537502f0b3dbde458e70ecc11b1ec56269ae84e5db65064b895cd0a4c24e4ba2f6dcf2dc83f250687574a7102528279fc172cccc4078ec6b87d498701e92ce702f58923176e78a58cf755a6037352", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x6, @local, 0x0, 0x0, 'none\x00', 0x29, 0x8, 0x11}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lblc\x00', 0x2a, 0x0, 0x7f}, 0x2c) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x400454da, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x3}) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) 2.11810305s ago: executing program 4 (id=165): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, 0x0, &(0x7f0000000100)) 2.030925901s ago: executing program 1 (id=166): syz_io_uring_setup(0x303b, &(0x7f0000000080)={0x0, 0x4f8, 0x200, 0x3}, &(0x7f0000000040)=0x0, &(0x7f0000001700)=0x0) syz_io_uring_submit(r0, r1, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE={0x7, 0x8}) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) syz_open_dev$vcsu(&(0x7f00000000c0), 0xb, 0x200) r5 = syz_io_uring_setup(0x110, &(0x7f00000008c0)={0x0, 0xfad8, 0x800, 0x1, 0x3}, &(0x7f00000000c0)=0x0, &(0x7f0000000940)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r5, 0x133d, 0x0, 0x8, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x8}, 0x0) socket(0x25, 0x3, 0x6) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fanotify_init(0x200, 0x0) ioctl$VIDIOC_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000300)={0x5, 0x0, '\x00', {0x0, @reserved}}) mount(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='hfs\x00', 0x8000, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r8 = syz_open_dev$video4linux(&(0x7f0000000080), 0x200, 0x8000) ioctl$VIDIOC_ENUM_DV_TIMINGS(r8, 0xc0945662, &(0x7f0000000100)={0x3, 0x0, '\x00', {0x0, @bt={0x1, 0xfff, 0x0, 0x2, 0xed8, 0x8, 0x3, 0x3, 0x9, 0x6, 0x984, 0x3, 0x100, 0x9, 0x1, 0x2, {0x7ff, 0x6}, 0xd, 0x61}}}) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f00000001c0)=0x10001) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000040)=0x10000) read$dsp(r2, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f00000002c0)=0x1) 1.964086453s ago: executing program 4 (id=167): socket$kcm(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x3, 0x3c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000700)={0x20c, 0x0, 0x20, 0x70bd25, 0x25dfdbfc, {}, [{{0x8}, {0x1a8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xb}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x20c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x5000, 0x1, @remote, 0x5}, 0x1c) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000100000085000000ae000000850000000500000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r5, 0x0, 0x4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x0, &(0x7f00000001c0)}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES64], 0xf8) brk(0x3) semget$private(0x0, 0x207, 0x0) 1.169477518s ago: executing program 0 (id=168): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$alg(r6, 0x0, 0x28000054) recvmmsg(r6, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000004c0)=""/232, 0xe8}, {&(0x7f00000006c0)=""/145, 0x91}, {0x0}], 0x3}, 0x1}], 0x2, 0x2023, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000000c0)={@in={{0x2, 0x4e22, @empty}}, 0x0, 0x0, 0x2, 0x0, "de2170420b42866d263a524b8f533db671e3fb462f6e152472578c7e9359d81409d1a02b9c2248e87414c4cfec9913387fd71cf21f357c8ca38ffddab5d147e98ea2b1cdfaf4e9530630c66996c4905b"}, 0xd8) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r4, &(0x7f00000002c0)="17e9479ef013fdc7c6652631ffffffffffffffe6f64f441045aa7b7142d35eaf0a5bacb0117d6acd78505400818770e31e5047f238b13e6eaa50f4591b3b95233115000954a3800597243bb2307400", 0xfffffffffffffd41, 0x800, 0x0, 0xfffffffffffffe75) 987.910961ms ago: executing program 2 (id=169): r0 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$alg(r0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, 0x1, 0x4, 0x801, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x8}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x80000001}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) 66.966479ms ago: executing program 0 (id=170): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) r1 = socket$key(0xf, 0x3, 0x2) openat$vcs(0xffffff9c, 0x0, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x4e21, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0xb}}}, 0xb8}}, 0x0) 50.224459ms ago: executing program 2 (id=171): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_setup(0x18d6, 0x0, 0x0, 0x0) socket$inet(0x2, 0x3, 0xd) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chroot(&(0x7f0000000a40)='./file0\x00') syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$IPSET_CMD_TYPE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4008004}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f00000003c0)=ANY=[], 0x0}, 0x94) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, 0x0, 0x0) 0s ago: executing program 1 (id=172): symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') lsetxattr$security_ima(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240), &(0x7f0000000400)=ANY=[@ANYBLOB="5457bff0"], 0x2, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.224' (ED25519) to the list of known hosts. [ 59.706914][ T4172] cgroup: Unknown subsys name 'net' [ 59.843368][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 61.327120][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 63.264855][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 63.417842][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 63.435541][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 63.496829][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 63.518843][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.526105][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.535880][ T4192] device bridge_slave_0 entered promiscuous mode [ 63.548515][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.556085][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.564250][ T4192] device bridge_slave_1 entered promiscuous mode [ 63.631762][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 63.641266][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.648843][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.656947][ T4189] device bridge_slave_0 entered promiscuous mode [ 63.667184][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.691923][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.699486][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.708039][ T4189] device bridge_slave_1 entered promiscuous mode [ 63.717482][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.798776][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.806088][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.814364][ T4191] device bridge_slave_0 entered promiscuous mode [ 63.835475][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.847679][ T4192] team0: Port device team_slave_0 added [ 63.854309][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.861511][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.869924][ T4191] device bridge_slave_1 entered promiscuous mode [ 63.877193][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.884392][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.893047][ T4183] device bridge_slave_0 entered promiscuous mode [ 63.905848][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.916970][ T4192] team0: Port device team_slave_1 added [ 63.938974][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.946665][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.955019][ T4183] device bridge_slave_1 entered promiscuous mode [ 64.012065][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.019150][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.045454][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.059893][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.086555][ T4189] team0: Port device team_slave_0 added [ 64.096266][ T4189] team0: Port device team_slave_1 added [ 64.103307][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.110831][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.137223][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.150229][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.162392][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.179594][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.187233][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.196334][ T4186] device bridge_slave_0 entered promiscuous mode [ 64.226916][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.244641][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.252040][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.260330][ T4186] device bridge_slave_1 entered promiscuous mode [ 64.278242][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.285480][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.312056][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.333535][ T4191] team0: Port device team_slave_0 added [ 64.349334][ T4183] team0: Port device team_slave_0 added [ 64.372030][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.379189][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.409498][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.422848][ T4191] team0: Port device team_slave_1 added [ 64.436909][ T4183] team0: Port device team_slave_1 added [ 64.452295][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.464196][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.532738][ T4192] device hsr_slave_0 entered promiscuous mode [ 64.539890][ T4192] device hsr_slave_1 entered promiscuous mode [ 64.566354][ T4186] team0: Port device team_slave_0 added [ 64.573309][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.580288][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.607053][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.619219][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.626333][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.653503][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.676175][ T4186] team0: Port device team_slave_1 added [ 64.691811][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.698946][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.725503][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.737404][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.744635][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.771349][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.794506][ T4189] device hsr_slave_0 entered promiscuous mode [ 64.801708][ T4189] device hsr_slave_1 entered promiscuous mode [ 64.808714][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.816853][ T4189] Cannot create hsr debugfs directory [ 64.867228][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.874354][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.900996][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.924542][ T4191] device hsr_slave_0 entered promiscuous mode [ 64.931638][ T4191] device hsr_slave_1 entered promiscuous mode [ 64.938332][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.946216][ T4191] Cannot create hsr debugfs directory [ 64.963718][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.970830][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.998513][ T2303] Bluetooth: hci0: command 0x0409 tx timeout [ 65.001942][ T23] Bluetooth: hci1: command 0x0409 tx timeout [ 65.005508][ T2303] Bluetooth: hci3: command 0x0409 tx timeout [ 65.017084][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.031722][ T2303] Bluetooth: hci2: command 0x0409 tx timeout [ 65.048213][ T2303] Bluetooth: hci4: command 0x0409 tx timeout [ 65.116173][ T4183] device hsr_slave_0 entered promiscuous mode [ 65.123134][ T4183] device hsr_slave_1 entered promiscuous mode [ 65.130080][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.138275][ T4183] Cannot create hsr debugfs directory [ 65.179620][ T4186] device hsr_slave_0 entered promiscuous mode [ 65.187425][ T4186] device hsr_slave_1 entered promiscuous mode [ 65.194475][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.202301][ T4186] Cannot create hsr debugfs directory [ 65.445408][ T4192] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.461047][ T4192] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.471897][ T4192] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.483455][ T4192] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.533951][ T4191] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 65.558255][ T4191] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 65.568741][ T4191] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 65.578346][ T4191] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 65.641078][ T4189] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 65.666503][ T4189] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 65.693297][ T4189] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 65.723809][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.733100][ T4189] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 65.744980][ T4183] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.767610][ T4183] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.795074][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.805004][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.817255][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.825397][ T4183] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 65.846549][ T4183] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 65.861048][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.870363][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.879886][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.887186][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.896042][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.932008][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.941011][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.950071][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.957237][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.966874][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.977772][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.004147][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.014650][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.026127][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.045112][ T4186] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 66.067583][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.077377][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.088140][ T4186] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 66.098652][ T4186] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 66.112851][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.135079][ T4186] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 66.145636][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.155689][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.165218][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.174435][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.197616][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.210487][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.218963][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.229275][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.255744][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.268494][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.280925][ T1274] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.288191][ T1274] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.303295][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.338813][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.351105][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.362212][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.369321][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.406708][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.437868][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.447736][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.455914][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.475795][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.489246][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.498624][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.508582][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.520085][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.528863][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.537017][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.555057][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.566487][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.576195][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.585668][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.595418][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.603788][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.617219][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.637723][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.655790][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.669023][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.677568][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.687291][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.700578][ T1279] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.708315][ T1279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.720642][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.729921][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.739070][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.751362][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.778114][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.788679][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.804520][ T1279] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.811718][ T1279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.824254][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.839535][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.857501][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.867441][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.894350][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.904560][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.914385][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.921627][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.929602][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.939070][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.948885][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.963965][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.973953][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.981285][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.989912][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.999614][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.009259][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.018743][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.028124][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.036792][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.064889][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.072533][ T4251] Bluetooth: hci4: command 0x041b tx timeout [ 67.079384][ T4251] Bluetooth: hci2: command 0x041b tx timeout [ 67.092755][ T4251] Bluetooth: hci3: command 0x041b tx timeout [ 67.094730][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.099000][ T4251] Bluetooth: hci1: command 0x041b tx timeout [ 67.108354][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.120200][ T4251] Bluetooth: hci0: command 0x041b tx timeout [ 67.121852][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.137387][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.146170][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.156863][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.166388][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.176517][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.185289][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.193013][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.222338][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.230916][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.246461][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.255504][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.264241][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.276462][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.285541][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.299669][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.310643][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.320232][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.337885][ T4192] device veth0_vlan entered promiscuous mode [ 67.365387][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.378958][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.389025][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.404556][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.414986][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.424424][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.433214][ T1279] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.440312][ T1279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.448409][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.458861][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.467970][ T1279] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.475133][ T1279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.485106][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.520164][ T4192] device veth1_vlan entered promiscuous mode [ 67.568538][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.578973][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.590184][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.601095][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.616960][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.626236][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.637653][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.707434][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.723343][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.733506][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.742521][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.751004][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.760178][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.769242][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.778980][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.788562][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.797885][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.808779][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.817595][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.829229][ T4191] device veth0_vlan entered promiscuous mode [ 67.840809][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.849102][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.861604][ T4192] device veth0_macvtap entered promiscuous mode [ 67.872251][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.894765][ T4191] device veth1_vlan entered promiscuous mode [ 67.905290][ T4192] device veth1_macvtap entered promiscuous mode [ 67.928747][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.981422][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.007998][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.029045][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.039872][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.055234][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.065229][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.073075][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.080563][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.089576][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.101912][ T4191] device veth0_macvtap entered promiscuous mode [ 68.127305][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.139689][ T4191] device veth1_macvtap entered promiscuous mode [ 68.166097][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.177941][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.190129][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.200093][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.215698][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.240929][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.266814][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.281180][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.301916][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.312109][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.321071][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.330371][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.340136][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.349262][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.363757][ T4192] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.379815][ T4192] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.390112][ T4192] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.404630][ T4192] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.433180][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.444541][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.459815][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.471306][ T4191] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.480224][ T4191] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.489881][ T4191] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.499114][ T4191] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.520903][ T4183] device veth0_vlan entered promiscuous mode [ 68.536313][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.545380][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.555127][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.564089][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.574454][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.584203][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.633243][ T4183] device veth1_vlan entered promiscuous mode [ 68.648111][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.656092][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.664092][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.674224][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.689971][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.723642][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.734258][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.744514][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.755195][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.764875][ T4189] device veth0_vlan entered promiscuous mode [ 68.819608][ T4189] device veth1_vlan entered promiscuous mode [ 68.859830][ T4183] device veth0_macvtap entered promiscuous mode [ 68.874601][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.883153][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.891297][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.900792][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.909661][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.920403][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.929431][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.980455][ T4183] device veth1_macvtap entered promiscuous mode [ 69.008176][ T4189] device veth0_macvtap entered promiscuous mode [ 69.017084][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.026085][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.035315][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.044487][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.054185][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.067124][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.076190][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.085411][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.095662][ T4186] device veth0_vlan entered promiscuous mode [ 69.102535][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.110823][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.122409][ T1279] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.124965][ T4189] device veth1_macvtap entered promiscuous mode [ 69.130533][ T1279] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.149144][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.162816][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.171049][ T2303] Bluetooth: hci0: command 0x040f tx timeout [ 69.182091][ T2303] Bluetooth: hci1: command 0x040f tx timeout [ 69.189896][ T2303] Bluetooth: hci3: command 0x040f tx timeout [ 69.193791][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.197747][ T2303] Bluetooth: hci2: command 0x040f tx timeout [ 69.212941][ T2303] Bluetooth: hci4: command 0x040f tx timeout [ 69.216645][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.230358][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.241426][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.253633][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.269824][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.281319][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.291788][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.304618][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.315444][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.326415][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.337806][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.351980][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.360641][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.370387][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.381421][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.390275][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.412014][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.430557][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.440877][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.452492][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.464335][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.477987][ T4186] device veth1_vlan entered promiscuous mode [ 69.488510][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.499136][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.509945][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.521007][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.531451][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.542692][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.555970][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.572770][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.581253][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.590443][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.599467][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.608559][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.620928][ T4189] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.629914][ T4189] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.646780][ T4189] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.658031][ T4189] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.670411][ T1279] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.682214][ T1279] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.691764][ T4183] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.700736][ T4183] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.709966][ T4183] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.720089][ T4183] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.748172][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.777109][ T1279] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.798907][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.809842][ T1279] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.828262][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.847816][ T4186] device veth0_macvtap entered promiscuous mode [ 69.875844][ T4186] device veth1_macvtap entered promiscuous mode [ 69.886404][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.895580][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.905360][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.060168][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.101702][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.120621][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.132765][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.143889][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.282262][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.297943][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.369598][ T4299] ======================================================= [ 70.369598][ T4299] WARNING: The mand mount option has been deprecated and [ 70.369598][ T4299] and is ignored by this kernel. Remove the mand [ 70.369598][ T4299] option from the mount to silence this warning. [ 70.369598][ T4299] ======================================================= [ 70.495730][ T4299] Zero length message leads to an empty skb [ 70.683249][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.852257][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.046333][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #100!!! [ 71.055496][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #102!!! [ 71.064965][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #102!!! [ 71.286020][ T2303] Bluetooth: hci4: command 0x0419 tx timeout [ 71.408749][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.445706][ T2303] Bluetooth: hci2: command 0x0419 tx timeout [ 71.512111][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.526154][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.526976][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.535441][ T2303] Bluetooth: hci3: command 0x0419 tx timeout [ 71.591654][ T2303] Bluetooth: hci1: command 0x0419 tx timeout [ 71.598172][ T2303] Bluetooth: hci0: command 0x0419 tx timeout [ 71.679789][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.696097][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.707161][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.724415][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.739212][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.761857][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.771890][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 71.795657][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.846461][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.865593][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 71.891634][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 71.900801][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 71.909848][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 71.919523][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 71.928489][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 72.433745][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.480105][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.487718][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.495737][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.508112][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.537214][ T4186] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.554864][ T4186] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.566017][ T4186] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.579816][ T4186] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.606626][ T4301] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.619547][ T4301] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.619826][ T4296] device syzkaller0 entered promiscuous mode [ 72.658083][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.696882][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.701733][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.709594][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.728798][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.793836][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.806438][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.837949][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.424352][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.658338][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.750321][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.796005][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.822686][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.854434][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.110393][ T4332] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 75.869811][ T4332] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.879164][ T4332] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.888085][ T4332] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.896872][ T4332] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.112221][ T4256] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 76.143597][ T4360] capability: warning: `syz.4.17' uses 32-bit capabilities (legacy support in use) [ 76.582143][ T4256] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 76.772669][ T4256] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 76.791855][ T4256] usb 2-1: New USB device strings: Mfr=180, Product=92, SerialNumber=0 [ 76.811718][ T4256] usb 2-1: Product: syz [ 76.829936][ T4256] usb 2-1: Manufacturer: syz [ 76.955994][ T4256] usb 2-1: config 0 descriptor?? [ 76.986585][ T4243] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 77.371467][ T4256] usb 2-1: USB disconnect, device number 2 [ 77.485735][ T4370] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 77.522179][ T4243] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 77.651296][ T4243] usb 1-1: config 0 has no interface number 0 [ 77.952101][ T4243] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 78.701498][ T4243] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.710688][ T4243] usb 1-1: Product: syz [ 78.715528][ T4243] usb 1-1: Manufacturer: syz [ 78.720163][ T4243] usb 1-1: SerialNumber: syz [ 78.728043][ T4243] usb 1-1: config 0 descriptor?? [ 78.981785][ T4243] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 79.032913][ T4243] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 79.092038][ T4243] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 79.121695][ T4243] usb 1-1: media controller created [ 79.183032][ T4243] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 80.542671][ T4243] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 80.714268][ T4243] usb 1-1: USB disconnect, device number 2 [ 81.807844][ T4411] loop4: detected capacity change from 0 to 40427 [ 81.961962][ T4411] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x7 [ 82.015744][ T4411] F2FS-fs (loop4): Unrecognized mount option "barrier" or missing value [ 86.932689][ T7] cfg80211: failed to load regulatory.db [ 88.801294][ T26] audit: type=1326 audit(1759457401.779:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4485 comm="syz.2.53" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3b9ebabec9 code=0x0 [ 91.564342][ T4528] device hsr0 entered promiscuous mode [ 91.601491][ T4528] netlink: 4 bytes leftover after parsing attributes in process `syz.2.63'. [ 91.653158][ T4528] device hsr_slave_0 left promiscuous mode [ 91.670008][ T4528] device hsr_slave_1 left promiscuous mode [ 92.022048][ T4256] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 92.342270][ T4256] usb 2-1: Using ep0 maxpacket: 32 [ 92.526076][ T4536] block device autoloading is deprecated and will be removed. [ 92.552085][ T4256] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 92.561678][ T4256] usb 2-1: config 0 has no interface number 0 [ 92.577951][ T4256] usb 2-1: config 0 interface 12 has no altsetting 0 [ 92.771757][ T4256] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 92.875318][ T4537] netlink: 14906 bytes leftover after parsing attributes in process `syz.4.66'. [ 92.876285][ T4256] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.892768][ T4256] usb 2-1: Product: syz [ 92.896958][ T4256] usb 2-1: Manufacturer: syz [ 92.901732][ T4256] usb 2-1: SerialNumber: syz [ 92.912519][ T4256] usb 2-1: config 0 descriptor?? [ 93.177044][ T4545] syz.4.70 uses obsolete (PF_INET,SOCK_PACKET) [ 93.264529][ T4551] loop2: detected capacity change from 0 to 128 [ 93.442064][ T4551] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 93.463527][ T4551] ext4 filesystem being mounted at /10/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 96.041556][ C1] sched: RT throttling activated [ 96.041619][ T23] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 96.244270][ T4256] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 96.253531][ T4256] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 96.261275][ T4256] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 96.275552][ T4256] f81534: probe of 2-1:0.12 failed with error -71 [ 96.296499][ T4256] usb 2-1: USB disconnect, device number 3 [ 96.492719][ T23] usb 5-1: Using ep0 maxpacket: 16 [ 96.642222][ T23] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.789840][ T23] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 97.026521][ T23] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 97.192731][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.230197][ T4587] netlink: 64 bytes leftover after parsing attributes in process `syz.2.81'. [ 97.433469][ T23] usb 5-1: config 0 descriptor?? [ 97.873341][ T4256] usb 5-1: USB disconnect, device number 2 [ 98.167123][ T4605] loop1: detected capacity change from 0 to 128 [ 98.402840][ T4605] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 99.607000][ T4605] ext4 filesystem being mounted at /19/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 103.959948][ T4663] tipc: Enabling of bearer rejected, failed to enable media [ 105.357402][ T4697] capability: warning: `syz.3.108' uses deprecated v2 capabilities in a way that may be insecure [ 109.913482][ T4735] crypto_alloc_aead failed rc=-2 [ 110.482697][ T4760] loop1: detected capacity change from 0 to 128 [ 110.625325][ T4760] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 110.697684][ T4760] ext4 filesystem being mounted at /27/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 117.549420][ T4810] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 121.514099][ T4840] netlink: 20 bytes leftover after parsing attributes in process `syz.0.140'. [ 123.752847][ T4854] overlayfs: missing 'lowerdir' [ 123.790883][ T4854] netlink: 'syz.4.144': attribute type 2 has an invalid length. [ 123.799231][ T4854] netlink: 'syz.4.144': attribute type 2 has an invalid length. [ 130.235538][ T4941] ================================================================== [ 130.244018][ T4941] BUG: KASAN: slab-out-of-bounds in xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 130.253361][ T4941] Read of size 1 at addr ffff888079e97608 by task syz.0.170/4941 [ 130.261450][ T4941] [ 130.263918][ T4941] CPU: 0 PID: 4941 Comm: syz.0.170 Not tainted syzkaller #0 [ 130.271570][ T4941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 130.281992][ T4941] Call Trace: [ 130.285586][ T4941] [ 130.288548][ T4941] dump_stack_lvl+0x168/0x230 [ 130.293271][ T4941] ? show_regs_print_info+0x20/0x20 [ 130.298795][ T4941] ? load_image+0x3b0/0x3b0 [ 130.303451][ T4941] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 130.308870][ T4941] ? xfrm_pol_bin_obj+0x140/0x140 [ 130.313995][ T4941] print_address_description+0x60/0x2d0 [ 130.319681][ T4941] ? xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 130.326323][ T4941] kasan_report+0xdf/0x130 [ 130.330782][ T4941] ? xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 130.337457][ T4941] xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 130.343815][ T4941] ? xfrm_policy_addr_delta+0x212/0x340 [ 130.349605][ T4941] xfrm_policy_inexact_insert_node+0x950/0xb60 [ 130.355903][ T4941] ? xfrm_policy_alloc+0x75/0x2b0 [ 130.361683][ T4941] xfrm_policy_inexact_alloc_chain+0x7cf/0xea0 [ 130.367922][ T4941] ? xfrm_policy_inexact_insert+0xe0/0x1460 [ 130.373999][ T4941] xfrm_policy_inexact_insert+0xe0/0x1460 [ 130.379761][ T4941] ? __get_hash_thresh+0x105/0x410 [ 130.384992][ T4941] ? policy_hash_bysel+0x10a/0x570 [ 130.390130][ T4941] xfrm_policy_insert+0x112/0x930 [ 130.395312][ T4941] xfrm_add_policy+0x4d6/0x860 [ 130.400230][ T4941] ? xfrm_dump_sa_done+0xc0/0xc0 [ 130.405200][ T4941] ? apparmor_capable+0x12c/0x190 [ 130.410374][ T4941] ? __nla_parse+0x3c/0x50 [ 130.414844][ T4941] xfrm_user_rcv_msg+0x58d/0x860 [ 130.419955][ T4941] ? xfrm_netlink_rcv+0x90/0x90 [ 130.424874][ T4941] ? xfrm_netlink_rcv+0x66/0x90 [ 130.429888][ T4941] ? xfrm_netlink_rcv+0x66/0x90 [ 130.434811][ T4941] ? xfrm_netlink_rcv+0x66/0x90 [ 130.439804][ T4941] ? __mutex_lock_common+0x431/0x2390 [ 130.445236][ T4941] ? __copy_skb_header+0x417/0x5a0 [ 130.450579][ T4941] ? __skb_clone+0x480/0x790 [ 130.455386][ T4941] netlink_rcv_skb+0x1e0/0x430 [ 130.460383][ T4941] ? xfrm_netlink_rcv+0x90/0x90 [ 130.466353][ T4941] ? netlink_ack+0xb60/0xb60 [ 130.471177][ T4941] ? __lock_acquire+0x7c60/0x7c60 [ 130.476449][ T4941] xfrm_netlink_rcv+0x75/0x90 [ 130.481196][ T4941] netlink_unicast+0x774/0x920 [ 130.486203][ T4941] netlink_sendmsg+0x8ab/0xbc0 [ 130.491013][ T4941] ? netlink_getsockopt+0x560/0x560 [ 130.496479][ T4941] ? aa_sock_msg_perm+0x94/0x150 [ 130.501642][ T4941] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 130.506956][ T4941] ? security_socket_sendmsg+0x7c/0xa0 [ 130.512441][ T4941] ? netlink_getsockopt+0x560/0x560 [ 130.517829][ T4941] ____sys_sendmsg+0x5a2/0x8c0 [ 130.522625][ T4941] ? memset+0x1e/0x40 [ 130.526652][ T4941] ? __sys_sendmsg_sock+0x30/0x30 [ 130.531725][ T4941] ? import_iovec+0x6f/0xa0 [ 130.536424][ T4941] ___sys_sendmsg+0x1f0/0x260 [ 130.541267][ T4941] ? __sys_sendmsg+0x250/0x250 [ 130.546209][ T4941] ? percpu_counter_add_batch+0x13b/0x160 [ 130.552117][ T4941] ? __fdget+0x18b/0x210 [ 130.556407][ T4941] __se_sys_sendmsg+0x190/0x250 [ 130.561294][ T4941] ? __x64_sys_sendmsg+0x80/0x80 [ 130.566455][ T4941] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 130.572471][ T4941] ? lockdep_hardirqs_on+0x94/0x140 [ 130.577691][ T4941] do_syscall_64+0x4c/0xa0 [ 130.582650][ T4941] ? clear_bhb_loop+0x30/0x80 [ 130.587464][ T4941] ? clear_bhb_loop+0x30/0x80 [ 130.592427][ T4941] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 130.598740][ T4941] RIP: 0033:0x7fdc2d494ec9 [ 130.603538][ T4941] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.623852][ T4941] RSP: 002b:00007fdc2b6fc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 130.632306][ T4941] RAX: ffffffffffffffda RBX: 00007fdc2d6ebfa0 RCX: 00007fdc2d494ec9 [ 130.640647][ T4941] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000006 [ 130.648708][ T4941] RBP: 00007fdc2d517f91 R08: 0000000000000000 R09: 0000000000000000 [ 130.657058][ T4941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.665084][ T4941] R13: 00007fdc2d6ec038 R14: 00007fdc2d6ebfa0 R15: 00007ffff029bb78 [ 130.673084][ T4941] [ 130.676161][ T4941] [ 130.678583][ T4941] Allocated by task 4941: [ 130.683195][ T4941] __kasan_kmalloc+0xb5/0xf0 [ 130.688078][ T4941] sk_prot_alloc+0xe7/0x210 [ 130.692709][ T4941] sk_alloc+0x2f/0x310 [ 130.696986][ T4941] pfkey_create+0xd8/0x560 [ 130.701589][ T4941] __sock_create+0x47b/0x900 [ 130.706201][ T4941] __sys_socket+0xe2/0x170 [ 130.710752][ T4941] __x64_sys_socket+0x76/0x80 [ 130.715443][ T4941] do_syscall_64+0x4c/0xa0 [ 130.719867][ T4941] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 130.725780][ T4941] [ 130.728110][ T4941] Last potentially related work creation: [ 130.733822][ T4941] kasan_save_stack+0x35/0x60 [ 130.738514][ T4941] kasan_record_aux_stack+0xb8/0x100 [ 130.743819][ T4941] call_rcu+0x182/0x930 [ 130.748228][ T4941] netlink_release+0x134f/0x1790 [ 130.753504][ T4941] sock_close+0xd5/0x240 [ 130.758151][ T4941] __fput+0x234/0x930 [ 130.762408][ T4941] task_work_run+0x125/0x1a0 [ 130.767471][ T4941] exit_to_user_mode_loop+0x10f/0x130 [ 130.772934][ T4941] exit_to_user_mode_prepare+0xee/0x180 [ 130.779041][ T4941] syscall_exit_to_user_mode+0x16/0x40 [ 130.785052][ T4941] do_syscall_64+0x58/0xa0 [ 130.789590][ T4941] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 130.795618][ T4941] [ 130.797947][ T4941] The buggy address belongs to the object at ffff888079e97000 [ 130.797947][ T4941] which belongs to the cache kmalloc-2k of size 2048 [ 130.812217][ T4941] The buggy address is located 1544 bytes inside of [ 130.812217][ T4941] 2048-byte region [ffff888079e97000, ffff888079e97800) [ 130.825783][ T4941] The buggy address belongs to the page: [ 130.831807][ T4941] page:ffffea0001e7a400 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888079e91000 pfn:0x79e90 [ 130.844046][ T4941] head:ffffea0001e7a400 order:3 compound_mapcount:0 compound_pincount:0 [ 130.852478][ T4941] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 130.860522][ T4941] raw: 00fff00000010200 0000000000000000 0000000100000001 ffff888016842000 [ 130.869383][ T4941] raw: ffff888079e91000 0000000080080007 00000001ffffffff 0000000000000000 [ 130.878208][ T4941] page dumped because: kasan: bad access detected [ 130.884643][ T4941] page_owner tracks the page as allocated [ 130.890449][ T4941] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 13, ts 76047307772, free_ts 75964056487 [ 130.911213][ T4941] get_page_from_freelist+0x1b77/0x1c60 [ 130.916976][ T4941] __alloc_pages+0x1e1/0x470 [ 130.921601][ T4941] new_slab+0xc0/0x4b0 [ 130.925880][ T4941] ___slab_alloc+0x81e/0xdf0 [ 130.930592][ T4941] __kmalloc_node_track_caller+0x1fc/0x3a0 [ 130.936643][ T4941] __alloc_skb+0x22c/0x750 [ 130.941209][ T4941] mld_newpack+0x12a/0xb90 [ 130.946089][ T4941] add_grhead+0x5a/0x240 [ 130.950441][ T4941] add_grec+0x1341/0x15d0 [ 130.955241][ T4941] mld_send_initial_cr+0xed/0x240 [ 130.960477][ T4941] ipv6_mc_dad_complete+0x84/0x210 [ 130.965816][ T4941] addrconf_dad_completed+0x6c7/0xca0 [ 130.971205][ T4941] addrconf_dad_work+0xc70/0x1520 [ 130.976328][ T4941] process_one_work+0x863/0x1000 [ 130.981554][ T4941] worker_thread+0xaa8/0x12a0 [ 130.986837][ T4941] kthread+0x436/0x520 [ 130.991423][ T4941] page last free stack trace: [ 130.996211][ T4941] free_unref_page_prepare+0x637/0x6c0 [ 131.002094][ T4941] free_unref_page+0x94/0x280 [ 131.006807][ T4941] __unfreeze_partials+0x1a5/0x200 [ 131.012340][ T4941] put_cpu_partial+0x12d/0x190 [ 131.017284][ T4941] qlist_free_all+0x35/0x90 [ 131.021995][ T4941] kasan_quarantine_reduce+0x150/0x160 [ 131.027588][ T4941] __kasan_slab_alloc+0x2f/0xd0 [ 131.032452][ T4941] slab_post_alloc_hook+0x4c/0x380 [ 131.037607][ T4941] __kmalloc+0x127/0x330 [ 131.041944][ T4941] tomoyo_realpath_from_path+0x118/0x610 [ 131.047613][ T4941] tomoyo_path_perm+0x1cd/0x510 [ 131.052736][ T4941] security_inode_getattr+0xcf/0x120 [ 131.058153][ T4941] vfs_getattr+0x26/0x3a0 [ 131.062622][ T4941] vfs_statx+0x149/0x4d0 [ 131.066886][ T4941] __x64_sys_newfstatat+0x12c/0x1b0 [ 131.072303][ T4941] do_syscall_64+0x4c/0xa0 [ 131.076852][ T4941] [ 131.079378][ T4941] Memory state around the buggy address: [ 131.085152][ T4941] ffff888079e97500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 131.093264][ T4941] ffff888079e97580: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc [ 131.101465][ T4941] >ffff888079e97600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 131.109648][ T4941] ^ [ 131.114003][ T4941] ffff888079e97680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 131.122256][ T4941] ffff888079e97700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 131.130436][ T4941] ================================================================== [ 131.138651][ T4941] Disabling lock debugging due to kernel taint [ 131.145047][ T4941] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 131.152559][ T4941] CPU: 0 PID: 4941 Comm: syz.0.170 Tainted: G B syzkaller #0 [ 131.161353][ T4941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 131.171432][ T4941] Call Trace: [ 131.174833][ T4941] [ 131.177768][ T4941] dump_stack_lvl+0x168/0x230 [ 131.182457][ T4941] ? show_regs_print_info+0x20/0x20 [ 131.187771][ T4941] ? load_image+0x3b0/0x3b0 [ 131.192401][ T4941] panic+0x2c9/0x7f0 [ 131.196322][ T4941] ? bpf_jit_dump+0xd0/0xd0 [ 131.201111][ T4941] ? _raw_spin_unlock_irqrestore+0xa5/0x100 [ 131.207021][ T4941] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 131.212926][ T4941] ? _raw_spin_unlock+0x40/0x40 [ 131.217996][ T4941] ? xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 131.224571][ T4941] check_panic_on_warn+0x80/0xa0 [ 131.229576][ T4941] ? xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 131.236487][ T4941] end_report+0x6d/0xf0 [ 131.240968][ T4941] kasan_report+0x102/0x130 [ 131.246249][ T4941] ? xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 131.253041][ T4941] xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 131.259791][ T4941] ? xfrm_policy_addr_delta+0x212/0x340 [ 131.265351][ T4941] xfrm_policy_inexact_insert_node+0x950/0xb60 [ 131.271523][ T4941] ? xfrm_policy_alloc+0x75/0x2b0 [ 131.277132][ T4941] xfrm_policy_inexact_alloc_chain+0x7cf/0xea0 [ 131.283515][ T4941] ? xfrm_policy_inexact_insert+0xe0/0x1460 [ 131.289447][ T4941] xfrm_policy_inexact_insert+0xe0/0x1460 [ 131.295366][ T4941] ? __get_hash_thresh+0x105/0x410 [ 131.300496][ T4941] ? policy_hash_bysel+0x10a/0x570 [ 131.305623][ T4941] xfrm_policy_insert+0x112/0x930 [ 131.310886][ T4941] xfrm_add_policy+0x4d6/0x860 [ 131.315876][ T4941] ? xfrm_dump_sa_done+0xc0/0xc0 [ 131.320922][ T4941] ? apparmor_capable+0x12c/0x190 [ 131.326056][ T4941] ? __nla_parse+0x3c/0x50 [ 131.330584][ T4941] xfrm_user_rcv_msg+0x58d/0x860 [ 131.335534][ T4941] ? xfrm_netlink_rcv+0x90/0x90 [ 131.340491][ T4941] ? xfrm_netlink_rcv+0x66/0x90 [ 131.345364][ T4941] ? xfrm_netlink_rcv+0x66/0x90 [ 131.350335][ T4941] ? xfrm_netlink_rcv+0x66/0x90 [ 131.355192][ T4941] ? __mutex_lock_common+0x431/0x2390 [ 131.360963][ T4941] ? __copy_skb_header+0x417/0x5a0 [ 131.366115][ T4941] ? __skb_clone+0x480/0x790 [ 131.370831][ T4941] netlink_rcv_skb+0x1e0/0x430 [ 131.375608][ T4941] ? xfrm_netlink_rcv+0x90/0x90 [ 131.380555][ T4941] ? netlink_ack+0xb60/0xb60 [ 131.385156][ T4941] ? __lock_acquire+0x7c60/0x7c60 [ 131.390210][ T4941] xfrm_netlink_rcv+0x75/0x90 [ 131.394912][ T4941] netlink_unicast+0x774/0x920 [ 131.399698][ T4941] netlink_sendmsg+0x8ab/0xbc0 [ 131.404491][ T4941] ? netlink_getsockopt+0x560/0x560 [ 131.409711][ T4941] ? aa_sock_msg_perm+0x94/0x150 [ 131.414754][ T4941] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 131.420061][ T4941] ? security_socket_sendmsg+0x7c/0xa0 [ 131.425831][ T4941] ? netlink_getsockopt+0x560/0x560 [ 131.431043][ T4941] ____sys_sendmsg+0x5a2/0x8c0 [ 131.435934][ T4941] ? memset+0x1e/0x40 [ 131.440043][ T4941] ? __sys_sendmsg_sock+0x30/0x30 [ 131.445168][ T4941] ? import_iovec+0x6f/0xa0 [ 131.449684][ T4941] ___sys_sendmsg+0x1f0/0x260 [ 131.454374][ T4941] ? __sys_sendmsg+0x250/0x250 [ 131.459240][ T4941] ? percpu_counter_add_batch+0x13b/0x160 [ 131.465279][ T4941] ? __fdget+0x18b/0x210 [ 131.469543][ T4941] __se_sys_sendmsg+0x190/0x250 [ 131.474526][ T4941] ? __x64_sys_sendmsg+0x80/0x80 [ 131.479879][ T4941] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 131.486168][ T4941] ? lockdep_hardirqs_on+0x94/0x140 [ 131.491505][ T4941] do_syscall_64+0x4c/0xa0 [ 131.496068][ T4941] ? clear_bhb_loop+0x30/0x80 [ 131.500777][ T4941] ? clear_bhb_loop+0x30/0x80 [ 131.505465][ T4941] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 131.511378][ T4941] RIP: 0033:0x7fdc2d494ec9 [ 131.516265][ T4941] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.536655][ T4941] RSP: 002b:00007fdc2b6fc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 131.545209][ T4941] RAX: ffffffffffffffda RBX: 00007fdc2d6ebfa0 RCX: 00007fdc2d494ec9 [ 131.553387][ T4941] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000006 [ 131.561890][ T4941] RBP: 00007fdc2d517f91 R08: 0000000000000000 R09: 0000000000000000 [ 131.569891][ T4941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.578153][ T4941] R13: 00007fdc2d6ec038 R14: 00007fdc2d6ebfa0 R15: 00007ffff029bb78 [ 131.586418][ T4941] [ 131.589864][ T4941] Kernel Offset: disabled [ 131.594639][ T4941] Rebooting in 86400 seconds..