last executing test programs: 40.942211002s ago: executing program 2 (id=392): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 39.590000604s ago: executing program 2 (id=398): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x2000000}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "0587a06a93f2aad4", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6d15608a32cbaa5bc", '\x00', "be0ea450d5a50003"}, 0x38) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 38.447235805s ago: executing program 2 (id=406): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 36.638414001s ago: executing program 2 (id=416): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x2d) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000080)=[{0x20, 0x0, 0x16, 0xfffff010}, {0x28, 0x0, 0x9, 0xfff7f038}, {0x6, 0x0, 0x0, 0x8}]}, 0x10) sendmmsg$unix(r1, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000800)="39b0e52f", 0xb039}], 0x1, 0x0, 0x0, 0x4000801}}], 0x1, 0x4002104) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000e00)=@newtfilter={0x444, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x414, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x100, 0x73d, 0x3509, 0x3, 0x10000, 0x7, 0x1000, 0x9, 0x3, 0x3, 0x882e, 0x8, 0x8, 0x2, 0x9, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x9, 0xffff, 0x7a, 0x5, 0x7, 0x7fff, 0xffffff40, 0x9, 0x6, 0x8, 0x2, 0x57, 0x0, 0x4, 0x7fff, 0x9, 0xfffffffb, 0x2, 0xcf9f, 0x0, 0x1, 0x8, 0x1, 0x5, 0xfffffff9, 0xd5, 0x80000001, 0x7fff, 0x4, 0x9, 0x8, 0x9, 0x5, 0x7, 0xc, 0x7, 0x4, 0x3, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x1, 0x1, 0x801e, 0x7, 0x4, 0x0, 0x8, 0x5, 0x8001, 0x4, 0x1, 0x1000, 0x9, 0x3, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0xe, 0x7fff, 0xfffffff8, 0x7, 0x0, 0xb1, 0x3, 0x0, 0x1, 0x8, 0xf, 0x6, 0x556, 0x1, 0x2c, 0x5, 0x80000001, 0x1, 0x0, 0xffffff00, 0x3, 0x2, 0x7, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8005, 0xbfffffff, 0x7, 0x80, 0x7, 0x0, 0x743, 0x5, 0x3, 0x7, 0x200, 0x5, 0x0, 0x8, 0x3, 0x100, 0x2, 0x8, 0x1, 0x1, 0x8, 0xe, 0x5, 0x6, 0x4, 0x7ff, 0x5, 0xfffffffe, 0x7, 0x2, 0x7, 0x5a, 0x2302, 0xffff, 0x3ff, 0x0, 0x5, 0x1, 0x6, 0x3, 0x401, 0x10001, 0x512d, 0x1, 0xe, 0x2, 0xa3c0, 0x4, 0x8000, 0x10001, 0x15a, 0x9, 0x120000, 0x6b2, 0x7fffffff, 0x7, 0x9, 0x80000004, 0x5, 0x7e9, 0x48, 0x9, 0x3, 0x0, 0x5, 0x6, 0xf, 0xff, 0xd, 0x6, 0x9, 0x0, 0x200, 0x9, 0xff, 0x4, 0x7, 0x7, 0x8, 0x4, 0x56, 0x4a82, 0xffff0000, 0x7ff, 0x3e1, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x6, 0x8, 0x48, 0x1a, 0x2000000, 0x1ff, 0x844, 0x6, 0x3ff, 0x5, 0x100, 0x6, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x4, 0x7, 0x3565, 0x2, 0x4, 0xebf, 0x9, 0x1000, 0x1, 0x71f, 0x2, 0x7, 0x6e8, 0x8, 0x0, 0x80000000, 0x6, 0x9, 0x2]}]}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x7}]}}]}, 0x444}, 0x1, 0x0, 0x0, 0x1}, 0x800) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x40080084) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r5, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000580), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000780)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r6, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000ac0)={0x20, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {}, [{{0x8, 0x1, r7}, {0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x40840}, 0x800) r8 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r8, &(0x7f0000000c00)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000200)="b1", 0x1}], 0x1}}], 0x1, 0x24040800) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f0000000580)={0x2, 0x201, 0xca25, 0x5, r10}, 0x10) r11 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmsg$NFT_MSG_GETRULE(r8, 0x0, 0x24040080) connect$llc(r11, 0x0, 0x0) recvmmsg(r11, 0x0, 0x0, 0x2, 0x0) sendmmsg(r11, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) 36.184830425s ago: executing program 2 (id=423): bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 34.509520319s ago: executing program 2 (id=429): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@perf_event={0x11}}, 0x18) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={r1, r2, 0x4}, 0x6) shutdown(r0, 0x1) unshare(0x6a040000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x5c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001d40)=""/4078, 0xfee}, {&(0x7f0000000340)=""/141, 0x8d}, {&(0x7f0000002d40)=""/4116, 0x1005}, {&(0x7f0000000400)=""/6, 0x6}, {&(0x7f0000000440)=""/231, 0xe7}], 0x5}}], 0x3ffffbd, 0x0, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x10000) 19.385526042s ago: executing program 32 (id=429): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@perf_event={0x11}}, 0x18) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={r1, r2, 0x4}, 0x6) shutdown(r0, 0x1) unshare(0x6a040000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x5c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001d40)=""/4078, 0xfee}, {&(0x7f0000000340)=""/141, 0x8d}, {&(0x7f0000002d40)=""/4116, 0x1005}, {&(0x7f0000000400)=""/6, 0x6}, {&(0x7f0000000440)=""/231, 0xe7}], 0x5}}], 0x3ffffbd, 0x0, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x10000) 6.302212226s ago: executing program 1 (id=625): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="700000001000010028bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="4cf2040000000000140003006e657464657673696d300000000000003400168030"], 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x40) 6.15345932s ago: executing program 1 (id=626): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000f40)=@newtfilter={0x24, 0x2c, 0x200, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x10}, {0xfff2, 0xa}, {0x5, 0x1c}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x20040000) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x800) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="0201"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 5.95849149s ago: executing program 1 (id=628): pipe(0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x161b01, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@empty, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in=@broadcast, {}, {}, {0x0, 0x0, 0xfffffffe}, 0x70bd26, 0x0, 0x2}}}, 0xf8}, 0x1, 0x0, 0x0, 0x840}, 0x0) 4.92983442s ago: executing program 1 (id=631): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES8=r0], 0x38}}, 0x50) 3.256399323s ago: executing program 4 (id=635): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)='\x00', 0x1, 0x41, &(0x7f0000000200)={0xa, 0x4e23, 0x10003, @loopback, 0x7}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x200002, 0x30}, 0xc) writev(r0, &(0x7f00000003c0), 0x0) 3.244173204s ago: executing program 1 (id=636): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x0) socket(0x11, 0x4, 0x9) bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x7, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x2000c094) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0, 0x5}, 0x94) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) connect$unix(r1, &(0x7f0000000100)=@abs={0x27, 0x0, 0x2}, 0x6e) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) syz_emit_ethernet(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000240)={0x1f, 0xffff, 0x2}, 0x6) recvmmsg(r2, &(0x7f0000000600), 0x204083acb88ff8b, 0x2, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) 3.0791914s ago: executing program 4 (id=640): r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000003f00070100000000fcdbdf25047c0000040000000c00018008000f"], 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r3, 0x4000000, 0x3c, 0x72, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000180)=""/114, 0x0, 0x0, 0xd8, 0x93, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b710e9246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f530", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb", 0x0, 0x8000}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newchain={0x54, 0x64, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xd}, {0xe, 0xd}, {0xa, 0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_ADDEND={0x8, 0x5, 0x5}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x8001}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1d04e}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x7}]}}]}, 0x54}}, 0x48010) r4 = accept$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000200)=0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0xb8, r9, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_MATCH={0x97, 0x5b, "f94775adc3a90e5ec4cea498d1937f8a8ec793fc85b1f16aae7ea50c6cd4a8f4a2087d3bd539a9cee6bdf220978bd3da0c73b65d9972d3abee87046a6acd554b1b72f5f1b4ed27ee2453a8bb9324835b11478f3a0240e39912d661348750c11c2bc9b53cf21a56e2ca6d45cd774a009249f547141bb212ceb5857824a4a74958629feabf8d9bc5069d2935d51882b078225f2b"}]}, 0xb8}}, 0x0) r12 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r12, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000180)={0x20, 0x14, 0x1, 0x0, 0x0, {0x28}, [@INET_DIAG_REQ_BYTECODE={0xb, 0x1, "dea1b9d9d6a871"}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000"], 0x3c}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) r14 = socket(0x10, 0x803, 0xe66) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r14, 0x89f8, &(0x7f0000000340)={'sit0\x00', 0xffffffffffffffff}) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r15 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x49, &(0x7f00000000c0)}) bind$bt_hci(r15, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r15, 0x0, 0x6) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f0000000280)={@ipv4={'\x00', '\xff\xff', @multicast1}, @private1, @mcast1, 0x7, 0xff41, 0x1, 0x100, 0x7fffffffffffffff, 0x50000, r13}) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) close(r0) 2.926413485s ago: executing program 0 (id=642): ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, &(0x7f00000001c0)={0x9, {0x2a, 0x6, 0x6fb9, 0x2, 0xff}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={0xfffffffffffffffc, &(0x7f00000001c0)}}, 0x40) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 2.925762305s ago: executing program 3 (id=643): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x6, 0x4, 0x4, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='\n\x00'], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r3}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r4, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="9a", 0x4e4}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000780)="da", 0x1}], 0x1}}], 0x2, 0x4000000) 2.862454051s ago: executing program 5 (id=644): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x4, 0x31, 0xffffffffffffffff, 0xe3572000) r0 = socket$rds(0x15, 0x5, 0x0) unshare(0x8040600) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10) 2.832716024s ago: executing program 4 (id=645): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r1, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400000200000200080001000300000005000200030000000500020008000000240003"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) 2.778077309s ago: executing program 0 (id=646): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x503, 0x70bd28, 0x100000, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}]}, 0x40}}, 0x0) 2.682679979s ago: executing program 3 (id=647): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000b40)=[{{&(0x7f00000001c0)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="38020000000000002900000036000000004300000000000004013f040100c910ff010000000000000000000000000001c910fc0000000000000000000000000000000001000740000000000e07010101000000010000000200000000000000000000000000000001000000010000002000000000000000ffffffff00000000ffffffffffffff7f06aeb07c1c192077cc9e7c45705803ad5588ca8b194d23f748fe792cfa3d32221f25d73b8ffe64a4ddda6efcfb7483b588194d29c7a04395d8500965a9a1d07879040c44db1d5d6f618d2ab920f0bf168ddc9acc6a51edd1230760d4ae8bf30f5f82a78e8114849ee8e37364560400000035bfa8197ef2ba99103ee5f5aae28ec5c8e2675db11530f5c466d55f2244d479dc653c854406155eada3eaeb90d39149b8d13bab75a9bd1452c8c76284b9ddfbeff41344e64f1771d78a706e1c5a6d63f1c954e24a1e73f75c26e9f09ec9b606cc3470f11c4842db651926bd2263a4a0a8fe80de8b2f9cb176e51819d5f4d10a5d1f0488d5e46953fbfd750f6137fbebe89a8d462158a87f9622355104b4f68d7a6d3ad85c373ea52a25afad37ffb743a5c361158087904b09fcc806d032bac00ee0e0251fc032446e45a3e12417ff4703526ffc45f71567857777927903799e0ba453334186009d22e38099c67b5350c7e82136bba947a18fb61d36fcba1f9efe3d79485d06252702833dc8ee417f40bb9064878fb89dd75a49135e5df148c4ad1e1d5626b44c8112d822f4c9a05e693fd5ae5595627f8684016b37a2bf6d0040030000000000002900000037000000006500000000000000fb1a63687c244e6df3aecb13d6eb957495b669cc032f6d0a11a5e16eed9937b046c9dc1a61dcf9754b767df4735c3f8c37b4d5cd15a99c5a19cc62c921ad4e90d6e3695ec1891223a53600d5031b5735acafb556e22279975f958ad437c76573e544506e58455772eb11493af933099a5dc7e9e0c8b907e68e23e59d7b94bc774309e2047132758b60955301f277a9032b0bc47e660b243e9e2126733f13ab99055a0999068ada35a38d105a5efe6c7115774effe28695ecae3944413b7764eefde26ed571d857b2cb2dd1b2a4a84c1fec0799cf90f57f7a6d35e2b60cd425b9372ae4a27f453e5d7da2eacd3b98cdb10cec9152d5829c2511eb0f9600a0cd280f3d08849b6cd43d25e3dcd62f7c7dee6123a2682daf4aa9a856b31e9204c5c2b80b84dbeec05d93a64a550f1ebc326488cd620c6fe1aa266a0ce5b24be03b5037786e037cc85ed61f362e081fb694e12e54fcb9eb0f86d6d91fd159023a073278f84d6ada8f9aa25ec223d268f3291b25392c941740932bd1a82f40a8fc586db23d2f6240ce883e3c1dc1e0d07fc3aa73a9ac82a1538d129c9e66cb6a8100abe95bc4064581e8c01ce65ba3ea751db5d8c0a1173fe62b2fd2d415042a97ade4d274a466b6d997eed6bf5d7a305ead804c36b9e1c314b26676ed83412417610d3cf4d07e5b24cf3de9c790ae93850e0f8bba047b710cf340c78a80cef5f6665a647681ff5f7b6ecce8ab65e26406b6a6e0e72ff8501c545bffc00f034dc3a5b251390ae68bb61d936dc9a24e6f66c72e7911c51c716dfd4304566fb32e6c2745d232f990d0bbe0ddf9dc58398dda292c07b16da766a37c60bd9993b4f21e641036a8afa2ccdb47d7990d5a007faccb2f86664179f2e229723bce870aec3f7f4e529c92add713590ce6c0ea1a0499fb76d32636cfd18b6b39fb48f1a6d46f6ae8f45c47ee8260f9531070d170ab92739be0bdf5b76f8a9b93a5e550dfecab79d2e46085a67024b6be883c79ade2873458fda5a7f4eb62b05634356ee3b45723f4cff19c654ad441ff5b8792df7f18d841c351e195151b1b3532e742a6525c86efdb29653f35ce8e0a41c8c6d39f39531e13aeb1172893eeedd83b6afb939f8e6abc5482696aa48918000000000000002900000037"], 0x590}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000300)="fae731c725a81ab0a2302e3be87d318c81f5", 0x12}], 0x1}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000580)="f7d0912b85f98ed59cbbe1eb97824e", 0xf}], 0x1}}], 0x3, 0x8008805) sendmmsg$inet6(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000480)="4a3fd5979a948158024fc167c4aa666342", 0x11}], 0x1}}], 0x1, 0x0) 2.636757233s ago: executing program 5 (id=648): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x20, 0x140e, 0x1, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_PDN={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x40000000) 2.587544528s ago: executing program 4 (id=649): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) close(r5) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x21, 0x0, 0x0) ioctl$TIOCMGET(r1, 0x541e, &(0x7f0000000040)) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1, 0x4, 0x101, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFULA_CFG_NLBUFSIZ={0x8}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_NLBUFSIZ={0x8}, @NFULA_CFG_MODE={0xa, 0x2, {0xb83, 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) 2.422606284s ago: executing program 0 (id=650): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'dummy0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000540)={@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r1}) 2.422266904s ago: executing program 5 (id=651): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_pktinfo(r1, 0x0, 0x8, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xffffffffeffffffd, 0x4, 0x0, 0x0, 0x100000}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 2.349436471s ago: executing program 0 (id=652): r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, 0x0, &(0x7f0000000080)='syzkaller\x00'}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000080)="0bc3ff", 0x3}, {0x0}], 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, 0x0) sendmmsg$unix(r3, &(0x7f0000000480), 0x0, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r5, &(0x7f0000004e80)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000240)=""/154, 0x9a}, {&(0x7f0000002d40)=""/4097, 0x1001}, {0x0}], 0x3}, 0x9}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/172, 0xac}, {&(0x7f0000000540)=""/237, 0xed}, {&(0x7f0000000140)=""/62, 0x3e}], 0x3}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x10}], 0x5, 0x12002, 0x0) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, r4}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000700fc000000080011000700000008000e00800000000800", @ANYRES16=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.302028366s ago: executing program 3 (id=653): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0x3}, 0x10, &(0x7f0000000000)=[{&(0x7f00000000c0)='`', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="10000000000000008400000008000022"], 0x10}}], 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000480)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r6, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000100)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x7e, &(0x7f00000006c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000700), &(0x7f0000000740), 0x8, 0x89, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) setsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000900)={r7, @multicast2, @remote}, 0xc) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x69801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendto$packet(r2, &(0x7f0000000280)="31bb6f", 0x3, 0x6040004, &(0x7f0000000200)={0x11, 0x88a8, r8, 0x1, 0x4, 0x6, @local}, 0x14) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x2a) write$tun(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="080008000700000000031400000045f0002c00000000002f9078ac1414bbffffffffa20022", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"], 0xfdef) 1.476585486s ago: executing program 4 (id=654): unshare(0x2c020400) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000040)={0x1, 'team_slave_0\x00', 0x3}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x44004) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000011c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) socket$alg(0x26, 0x5, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x12, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x2}, 0x50) r2 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000001180)=[{0x0}, {&(0x7f0000001040)="5f7c5e50893a0bac3656ad63ee84340677e64d27e4540a5324ef43bfaf1fb490f01964d1eeffada827c5180fd5641606cb59f91f3b69c71807f5fa65e8c04ed5c7be8190f4d826", 0x47}, {&(0x7f0000005300)="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", 0xff8}], 0x3, &(0x7f0000002540)=[{0xa0, 0x10e, 0xfffffffe, "9da4d4c9f9971887d314887b5720c3893a3407f1ba5c380bfe7e2e16c7fe33f9c3906da14d81e1a759697937e08f5b3cc97c89b02b55c2b425b6230d8d8b5b902170f394ff6df67eb41de3b45737d0008648ce2558b661342b49c17dd99552489c23b6649332e88f41aaa6a41070e6041e64636b55236d4550608db5f725c764b32a9a34e081182d2c64"}], 0xa0}, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r3, &(0x7f0000000140), 0x0}, 0x20) 1.374438566s ago: executing program 5 (id=655): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000025c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x1c, 0x6, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x1}}, @NFT_MSG_NEWSET={0x24, 0x9, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_SET_EXPRESSIONS={0x4}, @NFTA_SET_DESC={0x4}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x12}]}, @NFT_MSG_DELCHAIN={0xac, 0x5, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_CHAIN_HOOK={0x60, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'erspan0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_vlan\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x48337fa3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x59a9e12d}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xb6ae12d}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x101, 0x0, 0x0, {0x4}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWSET={0xac, 0x9, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_EXPRESSIONS={0x4}, @NFTA_SET_EXPRESSIONS={0x74, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0x50, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_OSF_TTL={0x5}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_TTL={0x5, 0x2, 0x9}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_TTL={0x5, 0x2, 0x8}, @NFTA_OSF_TTL={0x5, 0x2, 0xf}]}}}, {0x10, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x6}}}, 0x1f4}, 0x1, 0x0, 0x0, 0x800}, 0xc0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a000000000000000000000b02000000000000000300000d000000000300000003000000000000000300000004000000030000000300000000000005000000000000002e5f"], 0x0, 0x5e, 0x0, 0x1}, 0x20) 1.32997628s ago: executing program 5 (id=656): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a00000004000000e47f00000100000042"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="9a", 0x4e4}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000780)="da", 0x1}], 0x1}}], 0x2, 0x4000000) 1.306043313s ago: executing program 4 (id=657): syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ppoll(0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1200000004000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000000, 0x3, 0x4, 0xfffffffffffffffd, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7ffffffc}, 0x0, 0x0) connect$bt_rfcomm(r0, &(0x7f0000000300)={0x1f, @any, 0x64}, 0xa) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000700), 0x0) close(0x4) 1.198665293s ago: executing program 0 (id=658): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000140)="fae3", 0x2) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f00000000c0)=0x80004f, 0x4) 1.147165839s ago: executing program 5 (id=659): bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 825.48031ms ago: executing program 3 (id=660): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) unshare(0x68040200) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@ccm_128={{0x304}, "0300", "95670cff05e29ee8dcfc54e13b2dd711", "fdffb26f", "a2deb79f8c96bff4"}, 0x28) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8923, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) bpf$MAP_GET_NEXT_KEY(0x15, 0x0, 0x0) shutdown(r2, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@map, 0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x11c, 0x3, 0x0, &(0x7f0000000100)) write(r0, &(0x7f00000006c0)="91", 0x1) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000880)=0x3, 0x4) 765.314725ms ago: executing program 0 (id=661): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, 0x0, 0x0, 0x8040) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x1843}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000007540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000007640)={0x0, 0x0, &(0x7f0000007600)={&(0x7f0000007580)={0x34, r5, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x1}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}]}, 0x34}}, 0x4000854) 292.587252ms ago: executing program 3 (id=662): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="611572000000000061134c0000000000bfa00000000000000705000008004ef02d3501000000000095000000000000006916000000000000bf67000000000000350605000fff07206706000004000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9d0cc7d3b4814261bdb94a050000a28a404be266df76965947c73c00c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b540dcfc7ad0500c4063b3b8754c0686cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e567238809000000000000000ae2fb494059bba8e3b680324a188090eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb40000000000000000000000000040007abf9c20d89cbc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eb29000000000000003cc3aa39ee4b1386bab561cda886fa64ffffff7f473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59801fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d4"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0], 0x34}}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="4600010002"], 0x8) 87.853852ms ago: executing program 3 (id=663): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r2, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, 0x0, 0x0) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) r4 = socket(0x11, 0x800000003, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x0, 0x0, 0x10], 0x0, [0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1010]}}}}]}, 0x88}}, 0x20040800) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) 0s ago: executing program 1 (id=664): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000f00)={'dummy0\x00', &(0x7f0000000040)=@ethtool_perm_addr={0x4b, 0x39, "43720702ca0917b3352050360ad4bc4c3f954c58e8fe0252c0c4397d2471951bdd25f0d2b690ad5e137cee16de02d40b4fcdf2227f128a8dd1"}}) sendmsg$key(0xffffffffffffffff, 0x0, 0x40044) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000800000000000061"], 0x0, 0x28}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@alu={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0xb, r3, 0x8, 0x0, 0x0, 0x14, 0x0, 0x14}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x12, 0x2, 0x4, 0x2, 0x210, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r4}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r2}, 0x20) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r6, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) syz_emit_ethernet(0x3e, &(0x7f00000003c0)=ANY=[], 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="00000000140000002400128009000100626f6e6400000000140002800500130d0000000008001e"], 0x44}, 0x1, 0x2000000000000000}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r1) r7 = socket$nl_rdma(0x10, 0x3, 0x14) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000005000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x48002) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="440000001a00010000000000fdffd8029b740462", @ANYRES32=0x0, @ANYBLOB="0000990014000300070000000000000200000000fdff070014000100fc00"/44], 0x44}}, 0xd0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r10, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000000)={0x14, 0x21, 0xa, 0x401}, 0x14}}, 0x0) bind$netlink(r10, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x10000000}, 0xc) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0xb0, 0x1403, 0x1, 0x0, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bridge0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syzkaller1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'virt_wifi0\x00'}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x200c08a5}, 0x8000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.237' (ED25519) to the list of known hosts. [ 66.213576][ T4173] cgroup: Unknown subsys name 'net' [ 66.351581][ T4173] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.824796][ T4173] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 69.273591][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 69.322712][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 69.433864][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 69.462926][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.470903][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.480367][ T4183] device bridge_slave_0 entered promiscuous mode [ 69.493296][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.501092][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.509850][ T4183] device bridge_slave_1 entered promiscuous mode [ 69.550330][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.557773][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.565935][ T4184] device bridge_slave_0 entered promiscuous mode [ 69.588782][ T4196] chnl_net:caif_netlink_parms(): no params data found [ 69.605472][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.612618][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.621114][ T4184] device bridge_slave_1 entered promiscuous mode [ 69.640443][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 69.674364][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.702380][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.736120][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.781515][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.803084][ T4183] team0: Port device team_slave_0 added [ 69.809674][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.817021][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.825201][ T4191] device bridge_slave_0 entered promiscuous mode [ 69.860007][ T4184] team0: Port device team_slave_0 added [ 69.868199][ T4183] team0: Port device team_slave_1 added [ 69.874060][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.882262][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.890718][ T4191] device bridge_slave_1 entered promiscuous mode [ 69.897826][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.905051][ T4196] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.912952][ T4196] device bridge_slave_0 entered promiscuous mode [ 69.929632][ T4184] team0: Port device team_slave_1 added [ 69.957954][ T4196] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.965162][ T4196] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.973118][ T4196] device bridge_slave_1 entered promiscuous mode [ 70.008800][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.016167][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.024090][ T4188] device bridge_slave_0 entered promiscuous mode [ 70.041476][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.048589][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.074858][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.087058][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.094034][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.120270][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.133567][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.143024][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.150386][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.158460][ T4188] device bridge_slave_1 entered promiscuous mode [ 70.173683][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.180910][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.207210][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.218881][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.226130][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.252166][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.265026][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.288511][ T4196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.334337][ T4196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.378511][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.390145][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.409999][ T4196] team0: Port device team_slave_0 added [ 70.418982][ T4196] team0: Port device team_slave_1 added [ 70.430808][ T4191] team0: Port device team_slave_0 added [ 70.441845][ T4183] device hsr_slave_0 entered promiscuous mode [ 70.449125][ T4183] device hsr_slave_1 entered promiscuous mode [ 70.481186][ T4191] team0: Port device team_slave_1 added [ 70.534637][ T4188] team0: Port device team_slave_0 added [ 70.543858][ T4184] device hsr_slave_0 entered promiscuous mode [ 70.551133][ T4184] device hsr_slave_1 entered promiscuous mode [ 70.557978][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.566255][ T4184] Cannot create hsr debugfs directory [ 70.572267][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.579759][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.605987][ T4196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.618939][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.626039][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.651985][ T4196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.671365][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.678740][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.705098][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.717817][ T4188] team0: Port device team_slave_1 added [ 70.724135][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.731191][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.757221][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.848469][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.855816][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.881978][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.907974][ T4191] device hsr_slave_0 entered promiscuous mode [ 70.914911][ T4191] device hsr_slave_1 entered promiscuous mode [ 70.921821][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.929704][ T4191] Cannot create hsr debugfs directory [ 70.948007][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.955517][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.987293][ T1107] Bluetooth: hci2: command 0x0409 tx timeout [ 70.994036][ T1107] Bluetooth: hci4: command 0x0409 tx timeout [ 70.994254][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.001191][ T1107] Bluetooth: hci3: command 0x0409 tx timeout [ 71.014922][ T4202] Bluetooth: hci1: command 0x0409 tx timeout [ 71.017573][ T1107] Bluetooth: hci0: command 0x0409 tx timeout [ 71.034544][ T4196] device hsr_slave_0 entered promiscuous mode [ 71.041924][ T4196] device hsr_slave_1 entered promiscuous mode [ 71.048931][ T4196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.057048][ T4196] Cannot create hsr debugfs directory [ 71.226895][ T4188] device hsr_slave_0 entered promiscuous mode [ 71.233936][ T4188] device hsr_slave_1 entered promiscuous mode [ 71.241847][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.249665][ T4188] Cannot create hsr debugfs directory [ 71.389278][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.396156][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.420443][ T4183] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.433192][ T4183] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.442832][ T4183] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.456689][ T4183] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.498677][ T4184] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 71.509612][ T4184] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.519972][ T4184] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.531073][ T4184] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 71.624233][ T4191] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.653701][ T4191] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.667947][ T4191] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.680446][ T4191] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.725291][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.749095][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.786087][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.803399][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.812429][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.824354][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.832692][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.840959][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.851046][ T4196] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.881488][ T4196] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.893369][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.904139][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.913307][ T1173] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.920891][ T1173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.931445][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.941853][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.951204][ T1173] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.958360][ T1173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.967013][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.975536][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.997293][ T1288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.008750][ T1288] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.018743][ T1288] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.025883][ T1288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.035421][ T1288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.044450][ T4196] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.066551][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.079682][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.088301][ T1173] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.095584][ T1173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.103303][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.113704][ T4196] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.143170][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.153531][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.163337][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.172822][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.183119][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.192398][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.202203][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.211342][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.220691][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.229187][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.250078][ T1288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.259346][ T1288] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.274113][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.298646][ T4188] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.310271][ T4188] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.320495][ T4188] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.332263][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.342509][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.351471][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.361039][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.371003][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.379935][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.393255][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.406858][ T4188] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.418689][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.429195][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.439665][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.449744][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.458629][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.473015][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.482527][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.491197][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.498301][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.509733][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.542593][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.573158][ T1288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.582956][ T1288] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.592482][ T1288] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.599663][ T1288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.608432][ T1288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.619007][ T1288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.628157][ T1288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.637858][ T1288] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.648506][ T1288] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.671621][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.681472][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.717457][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.738102][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.756371][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.766170][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.787669][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.849507][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.874069][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.893491][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.924352][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.944456][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.968981][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.000305][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.022941][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.048705][ T4196] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.065290][ T7] Bluetooth: hci0: command 0x041b tx timeout [ 73.065498][ T23] Bluetooth: hci1: command 0x041b tx timeout [ 73.084271][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.085168][ T23] Bluetooth: hci3: command 0x041b tx timeout [ 73.095831][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.104238][ T23] Bluetooth: hci4: command 0x041b tx timeout [ 73.111848][ T23] Bluetooth: hci2: command 0x041b tx timeout [ 73.128981][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.144301][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.155381][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.162492][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.171878][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.180889][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.194368][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.201636][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.209984][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.219096][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.228853][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.237696][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.244928][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.277376][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.290466][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.301175][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.318078][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.332319][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.339484][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.348564][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.356153][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.363709][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.373624][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.383369][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.393262][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.401918][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.411065][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.420749][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.432934][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.441538][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.464404][ T4188] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 73.475573][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.509561][ T1248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.518324][ T1248] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.529340][ T1248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.538449][ T1248] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.552141][ T1248] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.560123][ T1248] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.568183][ T1248] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.578769][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.606427][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.620287][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.631743][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.647030][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.689961][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.698369][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.709761][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.718981][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.730238][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.739739][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.749321][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.774512][ T4196] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.792802][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.819061][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.828849][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.838959][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.847979][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.857269][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.866743][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.875331][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.883265][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.891835][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.900372][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.920714][ T4184] device veth0_vlan entered promiscuous mode [ 73.938537][ T4191] device veth0_vlan entered promiscuous mode [ 73.952177][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.963630][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.988613][ T4184] device veth1_vlan entered promiscuous mode [ 74.001135][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.011965][ T4191] device veth1_vlan entered promiscuous mode [ 74.020802][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.030921][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.039822][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.047705][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.092607][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.101705][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.111039][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.120574][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.130065][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.139308][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.169442][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.181528][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.193582][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.206122][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.219863][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.233574][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.247129][ T4184] device veth0_macvtap entered promiscuous mode [ 74.261224][ T4183] device veth0_vlan entered promiscuous mode [ 74.268626][ T1248] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.278197][ T1248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.287927][ T1248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.299490][ T1248] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.307583][ T1248] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.318192][ T4191] device veth0_macvtap entered promiscuous mode [ 74.327790][ T4188] device veth0_vlan entered promiscuous mode [ 74.341083][ T4183] device veth1_vlan entered promiscuous mode [ 74.359289][ T4184] device veth1_macvtap entered promiscuous mode [ 74.371113][ T4191] device veth1_macvtap entered promiscuous mode [ 74.381496][ T1248] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.390371][ T1248] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.400455][ T1248] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.409066][ T1248] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.418303][ T1248] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.427526][ T1248] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.441641][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.458730][ T1248] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.474888][ T4188] device veth1_vlan entered promiscuous mode [ 74.491274][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.521522][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.531705][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.551434][ T4188] device veth0_macvtap entered promiscuous mode [ 74.563414][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.575045][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.586931][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.599510][ T4183] device veth0_macvtap entered promiscuous mode [ 74.612959][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.622891][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.631794][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.640499][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.649723][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.658599][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.667663][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.677361][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.686873][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.695464][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.706305][ T4188] device veth1_macvtap entered promiscuous mode [ 74.716953][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.731272][ T4183] device veth1_macvtap entered promiscuous mode [ 74.740448][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.751895][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.763319][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.771975][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.780821][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.789317][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.798241][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.807435][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.816549][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.840361][ T4191] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.850358][ T4191] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.859491][ T4191] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.869565][ T4191] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.884395][ T4184] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.894179][ T4184] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.903849][ T4184] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.912931][ T4184] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.931925][ T4196] device veth0_vlan entered promiscuous mode [ 74.940268][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.950956][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.962651][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.973443][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.984622][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.019923][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.029460][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.038586][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.048817][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.057731][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.067670][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.087983][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.098661][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.109248][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.120240][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.130745][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.141348][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.145591][ T4244] Bluetooth: hci0: command 0x040f tx timeout [ 75.152241][ T4254] Bluetooth: hci2: command 0x040f tx timeout [ 75.165185][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.174514][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.186170][ T4254] Bluetooth: hci4: command 0x040f tx timeout [ 75.192283][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.202249][ T4254] Bluetooth: hci3: command 0x040f tx timeout [ 75.202592][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.208395][ T4254] Bluetooth: hci1: command 0x040f tx timeout [ 75.226606][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.238037][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.250334][ T4188] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.259739][ T4188] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.268650][ T4188] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.277412][ T4188] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.288080][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.298271][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.308807][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.318230][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.335679][ T4196] device veth1_vlan entered promiscuous mode [ 75.389523][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.401065][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.411361][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.422563][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.433069][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.443956][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.455949][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.467677][ T4183] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.476548][ T4183] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.485680][ T4183] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.494398][ T4183] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.524870][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.533714][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.543509][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.621247][ T1173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.654937][ T1173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.674369][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.683877][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.694109][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.715793][ T4196] device veth0_macvtap entered promiscuous mode [ 75.745148][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.753197][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.773749][ T4196] device veth1_macvtap entered promiscuous mode [ 75.823278][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.826472][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.840120][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.841828][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.857348][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.866440][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.875129][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.892398][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.892943][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.907165][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.920717][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.932387][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.943847][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.955537][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.966701][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.977221][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.988600][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.002969][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.012576][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.023961][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.036805][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.049374][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.063413][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.077358][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.091009][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.102689][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.114205][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.125099][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.136296][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.146443][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.158191][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.170644][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.196889][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.210930][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.283582][ T1173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.306197][ T1173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.333673][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.407256][ T4196] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.417673][ T4196] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.428060][ T4196] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.436911][ T4196] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.457594][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.489685][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.308986][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.417759][ T4237] Bluetooth: hci1: command 0x0419 tx timeout [ 77.424027][ T4237] Bluetooth: hci3: command 0x0419 tx timeout [ 77.430398][ T4237] Bluetooth: hci4: command 0x0419 tx timeout [ 77.436835][ T4237] Bluetooth: hci2: command 0x0419 tx timeout [ 77.442914][ T4237] Bluetooth: hci0: command 0x0419 tx timeout [ 78.717933][ T4262] hid-generic 0003:0003:0000.0001: unknown main item tag 0x0 [ 78.751493][ T4262] hid-generic 0003:0003:0000.0001: unknown main item tag 0x0 [ 78.983654][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.984739][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.000462][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.008218][ T4262] hid-generic 0003:0003:0000.0001: unknown main item tag 0x0 [ 79.010583][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.021373][ T4262] hid-generic 0003:0003:0000.0001: unknown main item tag 0x0 [ 79.638363][ T4262] hid-generic 0003:0003:0000.0001: unknown main item tag 0x0 [ 79.736184][ T4262] hid-generic 0003:0003:0000.0001: unknown main item tag 0x0 [ 79.743653][ T4262] hid-generic 0003:0003:0000.0001: unknown main item tag 0x0 [ 79.751699][ T4262] hid-generic 0003:0003:0000.0001: unknown main item tag 0x0 [ 79.760256][ T4262] hid-generic 0003:0003:0000.0001: unknown main item tag 0x0 [ 79.768077][ T4262] hid-generic 0003:0003:0000.0001: unknown main item tag 0x0 [ 79.776939][ T4262] hid-generic 0003:0003:0000.0001: unknown main item tag 0x0 [ 79.784597][ T4262] hid-generic 0003:0003:0000.0001: unknown main item tag 0x0 [ 79.792751][ T4262] hid-generic 0003:0003:0000.0001: unknown main item tag 0x0 [ 79.800635][ T4262] hid-generic 0003:0003:0000.0001: unknown main item tag 0x0 [ 79.808439][ T4262] hid-generic 0003:0003:0000.0001: unknown main item tag 0x0 [ 79.817650][ T4262] hid-generic 0003:0003:0000.0001: unknown main item tag 0x0 [ 79.825537][ T4262] hid-generic 0003:0003:0000.0001: unknown main item tag 0x0 [ 79.833162][ T4262] hid-generic 0003:0003:0000.0001: unknown main item tag 0x0 [ 79.860484][ T4262] hid-generic 0003:0003:0000.0001: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 79.918282][ T1288] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.958175][ T1288] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 81.010446][ T4340] fido_id[4340]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 82.234683][ C0] sched: RT throttling activated [ 82.601231][ T1173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.611767][ T1173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.650848][ T4361] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 82.668596][ T1248] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.289571][ T4395] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 86.301780][ T4395] FAT-fs (loop1): unable to read boot sector [ 87.936792][ T1110] cfg80211: failed to load regulatory.db [ 90.816139][ T4415] sctp: failed to load transform for md5: -2 [ 91.225392][ T4443] ksmbd: Unknown IPC event: 6, ignore. [ 94.515450][ T4474] process 'syz.2.46' launched './file0' with NULL argv: empty string added [ 94.771266][ T4487] loop8: detected capacity change from 0 to 8 [ 94.802921][ T4487] Dev loop8: unable to read RDB block 8 [ 94.808977][ T4487] loop8: unable to read partition table [ 94.823207][ T4487] loop8: partition table beyond EOD, truncated [ 94.841456][ T4487] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 94.945045][ T4237] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 95.398563][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 95.408222][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 95.500971][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 95.510756][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 95.603339][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 95.706614][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 95.976329][ T4498] netlink: 4 bytes leftover after parsing attributes in process `syz.2.54'. [ 96.010378][ T4500] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 96.184947][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 96.193992][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 96.202953][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 96.211995][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 96.334852][ T13] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 98.205514][ T4237] usb 4-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 98.996719][ T4237] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.542786][ T4237] usb 4-1: config 0 descriptor?? [ 99.930014][ T13] usb 1-1: device not accepting address 2, error -71 [ 100.015916][ T4237] usb 4-1: can't set config #0, error -71 [ 100.162343][ T4237] usb 4-1: USB disconnect, device number 2 [ 102.970982][ T4189] Bluetooth: hci3: hardware error 0xa5 [ 103.156338][ T4580] netlink: 4 bytes leftover after parsing attributes in process `syz.1.82'. [ 104.425128][ T4580] team0: Port device team_slave_1 removed [ 104.964759][ T4254] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 106.241544][ T4254] usb 3-1: unable to get BOS descriptor or descriptor too short [ 106.284989][ T4254] usb 3-1: not running at top speed; connect to a high speed hub [ 106.365489][ T4254] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 106.403281][ T4254] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 106.653562][ T4633] loop7: detected capacity change from 0 to 16384 [ 106.835055][ T4254] usb 3-1: string descriptor 0 read error: -22 [ 106.957060][ T4254] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 107.181650][ T4254] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.505630][ T4638] loop_set_status: loop7 () has still dirty pages (nrpages=18) [ 107.599628][ T4254] usb 3-1: 0:2 : does not exist [ 107.845486][ T4254] usb 3-1: 5:0: cannot get min/max values for control 2 (id 5) [ 108.077742][ T4254] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 109.644982][ T4254] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 112.239461][ T4695] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 112.424865][ T4254] usb 3-1: 5:0: cannot get min/max values for control 2 (id 5) [ 112.480618][ T4254] usb 3-1: USB disconnect, device number 2 [ 113.753409][ T4299] udevd[4299]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 114.067607][ T4725] binder: 4717:4725 ioctl 0 200000000040 returned -22 [ 125.675639][ T4835] netlink: 14436 bytes leftover after parsing attributes in process `syz.1.158'. [ 132.829366][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.836040][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.289431][ T4933] bond1 (unregistering): Released all slaves [ 138.294805][ T4189] Bluetooth: hci0: Dropping invalid advertising data [ 138.301894][ T4189] Bluetooth: hci0: Malicious advertising data. [ 145.084846][ T1110] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 145.324745][ T1110] usb 3-1: Using ep0 maxpacket: 16 [ 145.449408][ T1110] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 145.634988][ T1110] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 146.144733][ T1110] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.152788][ T1110] usb 3-1: Product: syz [ 146.157563][ T1110] usb 3-1: Manufacturer: syz [ 146.162191][ T1110] usb 3-1: SerialNumber: syz [ 146.169733][ T1110] usb 3-1: config 0 descriptor?? [ 146.200993][ T5060] netlink: 2980 bytes leftover after parsing attributes in process `syz.1.223'. [ 147.938495][ T4298] usb 3-1: USB disconnect, device number 3 [ 148.281149][ T5086] netlink: 176 bytes leftover after parsing attributes in process `syz.2.231'. [ 148.616612][ T5095] overlayfs: missing 'lowerdir' [ 155.852714][ T5183] capability: warning: `syz.2.261' uses 32-bit capabilities (legacy support in use) [ 156.351805][ T5201] netlink: 20 bytes leftover after parsing attributes in process `syz.2.265'. [ 157.756448][ T5213] netlink: 40 bytes leftover after parsing attributes in process `syz.0.270'. [ 158.464445][ T4262] Bluetooth: hci4: command 0x0405 tx timeout [ 160.298962][ T4296] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 161.015906][ T4296] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 161.075090][ T4296] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.108179][ T4296] usb 5-1: config 0 descriptor?? [ 161.145055][ T4202] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 161.167691][ T5254] kernel profiling enabled (shift: 9) [ 162.262413][ T4202] usb 1-1: Using ep0 maxpacket: 32 [ 162.405183][ T4202] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.453360][ T4202] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.594922][ T4262] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 162.604481][ T4202] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 162.613691][ T4202] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.624546][ T4202] usb 1-1: config 0 descriptor?? [ 162.636550][ T4193] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 163.180261][ T4202] koneplus 0003:1E7D:2D51.0002: invalid report_count -851608744 [ 163.237129][ T4202] koneplus 0003:1E7D:2D51.0002: item 0 4 1 9 parsing failed [ 163.284091][ T4202] koneplus 0003:1E7D:2D51.0002: parse failed [ 163.393691][ T4202] koneplus: probe of 0003:1E7D:2D51.0002 failed with error -22 [ 163.440424][ T4296] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 163.466931][ T4296] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 163.493129][ T4296] asix: probe of 5-1:0.0 failed with error -71 [ 163.539665][ T4296] usb 5-1: USB disconnect, device number 2 [ 163.988183][ T4262] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 163.988246][ T4262] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.016492][ T4262] usb 2-1: config 0 descriptor?? [ 164.135097][ T4193] usb 3-1: unable to get BOS descriptor or descriptor too short [ 164.200794][ T4193] usb 3-1: not running at top speed; connect to a high speed hub [ 164.315059][ T4193] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 164.332401][ T4193] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 165.060002][ T4202] usb 1-1: USB disconnect, device number 4 [ 165.186455][ T4193] usb 3-1: string descriptor 0 read error: -22 [ 165.192860][ T4193] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 165.202093][ T4193] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.289038][ T4193] usb 3-1: 0:2 : does not exist [ 166.622753][ T5311] 9pnet_virtio: no channels available for device syz [ 167.817615][ T4193] usb 3-1: 5:0: cannot get min/max values for control 2 (id 5) [ 167.952794][ T4262] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 167.991375][ T4262] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 168.834969][ T4193] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 168.867847][ T4262] asix: probe of 2-1:0.0 failed with error -71 [ 168.932153][ T4262] usb 2-1: USB disconnect, device number 2 [ 169.958806][ T5338] netlink: 20 bytes leftover after parsing attributes in process `syz.0.306'. [ 170.004927][ T4193] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 170.287700][ T13] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 170.874881][ T4193] usb 3-1: 5:0: cannot get min/max values for control 2 (id 5) [ 170.910359][ T4193] usb 3-1: USB disconnect, device number 4 [ 171.115934][ T13] usb 4-1: device descriptor read/all, error -71 [ 171.231685][ T26] audit: type=1326 audit(1760815533.404:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5350 comm="syz.0.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6854350fc9 code=0x7ffc0000 [ 171.724349][ T26] audit: type=1326 audit(1760815533.444:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5350 comm="syz.0.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6854350fc9 code=0x7ffc0000 [ 171.746525][ C1] vkms_vblank_simulate: vblank timer overrun [ 171.758371][ T26] audit: type=1326 audit(1760815533.864:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5350 comm="syz.0.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f6854350fc9 code=0x7ffc0000 [ 172.239685][ T26] audit: type=1326 audit(1760815533.864:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5350 comm="syz.0.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6854350fc9 code=0x7ffc0000 [ 172.261714][ C1] vkms_vblank_simulate: vblank timer overrun [ 172.286829][ T5359] input: syz1 as /devices/virtual/input/input5 [ 172.449584][ T5365] hub 2-0:1.0: USB hub found [ 172.457848][ T5365] hub 2-0:1.0: 1 port detected [ 173.499674][ T26] audit: type=1326 audit(1760815533.864:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5350 comm="syz.0.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6854350fc9 code=0x7ffc0000 [ 173.522258][ T26] audit: type=1326 audit(1760815533.864:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5350 comm="syz.0.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f6854350fc9 code=0x7ffc0000 [ 173.545628][ T26] audit: type=1326 audit(1760815533.864:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5350 comm="syz.0.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6854350fc9 code=0x7ffc0000 [ 173.596318][ T26] audit: type=1326 audit(1760815533.864:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5350 comm="syz.0.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6854350fc9 code=0x7ffc0000 [ 173.619403][ T26] audit: type=1326 audit(1760815533.874:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5350 comm="syz.0.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f6854350fc9 code=0x7ffc0000 [ 173.652920][ T26] audit: type=1326 audit(1760815533.884:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5350 comm="syz.0.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6854350fc9 code=0x7ffc0000 [ 174.922940][ T5392] device wireguard0 entered promiscuous mode [ 177.031935][ T5414] loop8: detected capacity change from 0 to 8 [ 177.068144][ T4299] Dev loop8: unable to read RDB block 8 [ 177.074062][ T4299] loop8: unable to read partition table [ 177.098519][ T4299] loop8: partition table beyond EOD, truncated [ 177.235560][ T5414] Dev loop8: unable to read RDB block 8 [ 177.248321][ T5414] loop8: unable to read partition table [ 177.288210][ T5414] loop8: partition table beyond EOD, truncated [ 177.294522][ T5414] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 181.025636][ T5463] netlink: 2 bytes leftover after parsing attributes in process `syz.4.340'. [ 182.019642][ T5471] device veth0_to_team entered promiscuous mode [ 182.078219][ T5471] bridge0: port 3(veth0_to_team) entered blocking state [ 182.114229][ T5471] bridge0: port 3(veth0_to_team) entered disabled state [ 182.126281][ T5471] bridge0: port 3(veth0_to_team) entered blocking state [ 182.133753][ T5471] bridge0: port 3(veth0_to_team) entered forwarding state [ 182.147218][ T5480] bridge_slave_0: default FDB implementation only supports local addresses [ 182.292191][ T5487] netlink: 12 bytes leftover after parsing attributes in process `syz.0.353'. [ 182.330176][ T5487] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.340444][ T5487] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.349737][ T5487] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.358526][ T5487] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.427569][ T5487] netlink: 12 bytes leftover after parsing attributes in process `syz.0.353'. [ 182.508715][ T5487] Zero length message leads to an empty skb [ 182.629492][ T5500] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 182.646414][ T5503] netlink: 24 bytes leftover after parsing attributes in process `syz.2.358'. [ 183.322565][ T5514] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 183.497761][ T5523] netlink: 4 bytes leftover after parsing attributes in process `syz.3.361'. [ 183.911122][ T5535] netlink: 14212 bytes leftover after parsing attributes in process `syz.2.365'. [ 184.059239][ T5546] ksmbd: Unknown IPC event: 6, ignore. [ 184.457566][ T5559] input: syz1 as /devices/virtual/input/input7 [ 186.808679][ T5573] netlink: 'syz.0.381': attribute type 2 has an invalid length. [ 187.242493][ T5591] netlink: 12 bytes leftover after parsing attributes in process `syz.3.386'. [ 187.257727][ T5591] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.266767][ T5591] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.275582][ T5591] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.284324][ T5591] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.756800][ T5591] netlink: 12 bytes leftover after parsing attributes in process `syz.3.386'. [ 188.204208][ T5602] netlink: 24 bytes leftover after parsing attributes in process `syz.3.390'. [ 188.221952][ T5602] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 189.635551][ T5630] netlink: 4 bytes leftover after parsing attributes in process `syz.3.399'. [ 190.854552][ T5655] tipc: Started in network mode [ 190.875456][ T5655] tipc: Node identity 1e6fb96c5ce5, cluster identity 4711 [ 190.882971][ T5655] tipc: Enabled bearer , priority 0 [ 190.898578][ T5647] device syzkaller0 entered promiscuous mode [ 190.916662][ T5662] 8021q: VLANs not supported on hsr0 [ 190.947986][ T5647] tipc: Resetting bearer [ 191.016575][ T5646] tipc: Resetting bearer [ 192.023250][ T4314] Bluetooth: hci1: command 0x0406 tx timeout [ 192.259715][ T7] Bluetooth: hci2: command 0x0406 tx timeout [ 192.275480][ T5646] tipc: Disabling bearer [ 192.282582][ T7] tipc: Node number set to 1116387692 [ 192.487221][ T5684] netlink: 8 bytes leftover after parsing attributes in process `syz.2.416'. [ 192.573479][ T5684] bridge0: port 3(veth0_to_team) entered disabled state [ 192.580731][ T5684] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.589425][ T5684] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.667114][ T5702] netlink: 44 bytes leftover after parsing attributes in process `syz.4.424'. [ 193.676287][ T5702] netlink: 40 bytes leftover after parsing attributes in process `syz.4.424'. [ 193.711998][ T5702] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.475232][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.481694][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.449704][ T5726] netlink: 'syz.1.433': attribute type 5 has an invalid length. [ 195.773418][ T5751] device syzkaller0 entered promiscuous mode [ 195.883775][ T5755] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 196.040247][ T5758] tipc: Started in network mode [ 196.054775][ T5758] tipc: Node identity 4ab09d2ec1e4, cluster identity 4711 [ 196.067683][ T5758] tipc: Enabled bearer , priority 0 [ 196.085128][ T5758] device syzkaller0 entered promiscuous mode [ 196.151452][ T5758] tipc: Resetting bearer [ 196.214828][ T5756] tipc: Resetting bearer [ 196.235323][ T5756] tipc: Disabling bearer [ 196.581905][ T5775] netlink: 4 bytes leftover after parsing attributes in process `syz.3.449'. [ 196.966525][ T5787] device bond0 entered promiscuous mode [ 196.972141][ T5787] device bond_slave_0 entered promiscuous mode [ 197.009832][ T5787] device bond_slave_1 entered promiscuous mode [ 197.058147][ T5787] device batadv0 entered promiscuous mode [ 197.100303][ T5792] netlink: 44 bytes leftover after parsing attributes in process `syz.1.455'. [ 197.105541][ T5787] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 197.293373][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 197.494797][ T5799] netlink: 'syz.0.458': attribute type 21 has an invalid length. [ 197.502821][ T5799] netlink: 4 bytes leftover after parsing attributes in process `syz.0.458'. [ 197.562263][ T5799] netlink: 'syz.0.458': attribute type 21 has an invalid length. [ 197.674861][ T5799] netlink: 4 bytes leftover after parsing attributes in process `syz.0.458'. [ 198.688698][ T5828] netlink: 'syz.1.471': attribute type 1 has an invalid length. [ 198.721199][ T5828] netlink: 'syz.1.471': attribute type 2 has an invalid length. [ 198.805566][ T5832] netlink: 'syz.1.471': attribute type 1 has an invalid length. [ 198.860169][ T5832] netlink: 'syz.1.471': attribute type 2 has an invalid length. [ 198.903098][ T5837] netlink: 8 bytes leftover after parsing attributes in process `syz.3.472'. [ 198.971104][ T5837] netlink: 8 bytes leftover after parsing attributes in process `syz.3.472'. [ 202.863112][ T5889] netlink: 40 bytes leftover after parsing attributes in process `syz.1.493'. [ 205.990792][ T5928] device batadv1 entered promiscuous mode [ 206.665032][ T5939] RDS: rds_bind could not find a transport for fc01::1, load rds_tcp or rds_rdma? [ 206.858629][ T5943] device syzkaller1 entered promiscuous mode [ 207.568706][ T5960] netlink: 20 bytes leftover after parsing attributes in process `syz.3.521'. [ 208.576825][ T5985] netlink: 8 bytes leftover after parsing attributes in process `syz.3.527'. [ 210.158926][ T6014] netlink: 4 bytes leftover after parsing attributes in process `syz.3.538'. [ 210.956678][ T6018] chnl_net:caif_netlink_parms(): no params data found [ 211.225435][ T6018] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.244575][ T6018] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.297350][ T6018] device bridge_slave_0 entered promiscuous mode [ 211.352967][ T6018] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.396902][ T6018] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.442779][ T6018] device bridge_slave_1 entered promiscuous mode [ 211.658399][ T6018] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.747724][ T6018] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.933410][ T6018] team0: Port device team_slave_0 added [ 211.973482][ T6018] team0: Port device team_slave_1 added [ 212.111548][ T6018] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.167924][ T6018] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.229884][ T6061] netlink: 16 bytes leftover after parsing attributes in process `syz.4.554'. [ 212.270452][ T6018] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.384121][ T6018] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.392058][ T6018] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.418013][ C0] vkms_vblank_simulate: vblank timer overrun [ 212.425787][ T6018] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.512314][ T4262] Bluetooth: hci5: command 0x0409 tx timeout [ 212.601707][ T6070] syz.4.558 uses obsolete (PF_INET,SOCK_PACKET) [ 212.629481][ T6018] device hsr_slave_0 entered promiscuous mode [ 212.636999][ T6070] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 212.693244][ T6018] device hsr_slave_1 entered promiscuous mode [ 212.701088][ T6018] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 212.828677][ T6018] Cannot create hsr debugfs directory [ 213.361342][ T6018] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 213.415024][ T6018] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 213.438619][ T6018] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 213.457819][ T6018] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 213.840144][ T6018] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.915031][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 213.923452][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 213.986218][ T6018] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.039652][ T1288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 214.056954][ T1288] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 214.091418][ T1288] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.098631][ T1288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.116142][ T1288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 214.132036][ T1288] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 214.140879][ T1288] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.148039][ T1288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.165099][ T1288] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 214.177693][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 214.348916][ T6102] device syzkaller0 entered promiscuous mode [ 214.380305][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 214.405062][ T6106] netlink: 8 bytes leftover after parsing attributes in process `syz.3.569'. [ 214.438309][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 214.490900][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 214.518522][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 214.584937][ T4298] Bluetooth: hci5: command 0x041b tx timeout [ 214.677921][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 214.701743][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 214.726467][ T6112] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.795336][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 214.815954][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 214.878599][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 214.903832][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 214.960357][ T6018] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 216.492367][ T6147] netlink: 12 bytes leftover after parsing attributes in process `syz.3.578'. [ 216.575145][ T6149] netlink: 16 bytes leftover after parsing attributes in process `syz.4.579'. [ 216.643344][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 216.664743][ T4262] Bluetooth: hci5: command 0x040f tx timeout [ 216.671085][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 216.702790][ T6018] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.792998][ T6158] device syzkaller0 entered promiscuous mode [ 216.834865][ T6161] netlink: 8 bytes leftover after parsing attributes in process `syz.4.583'. [ 218.884728][ T7] Bluetooth: hci5: command 0x0419 tx timeout [ 219.249704][ T4331] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.324147][ T6207] af_packet: tpacket_rcv: packet too big, clamped from 36 to 4294967272. macoff=96 [ 219.467403][ T1288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 219.508922][ T1288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 219.576318][ T4331] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.610795][ T6018] device veth0_vlan entered promiscuous mode [ 219.640788][ T1288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 219.656690][ T1288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 219.683732][ T4331] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.706668][ T1288] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 219.716051][ T1288] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 219.737666][ T6018] device veth1_vlan entered promiscuous mode [ 219.753603][ T4331] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.823844][ T1288] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 219.840666][ T1288] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 219.882174][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 219.896299][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 219.920659][ T6018] device veth0_macvtap entered promiscuous mode [ 219.959482][ T6018] device veth1_macvtap entered promiscuous mode [ 220.156687][ T6018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.171885][ T6018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.187501][ T6018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.199185][ T6018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.210292][ T6018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.221652][ T6018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.234116][ T6018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.246160][ T6018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.258389][ T6018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.270007][ T6018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.290461][ T6018] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.314241][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 220.342531][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 220.369015][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 220.404527][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 220.433458][ T6018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.472310][ T6018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.502955][ T6018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.543038][ T6018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.579588][ T6018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.624801][ T6018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.662755][ T6018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.680936][ T6018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.691204][ T6018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.715047][ T6018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.773003][ T6018] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.833310][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 220.852599][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 220.875564][ T4331] tipc: Left network mode [ 220.877791][ T6018] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.896595][ T6018] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.910325][ T4193] Bluetooth: hci5: command 0x0411 tx timeout [ 220.931832][ T6018] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.958813][ T6018] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.364051][ T1288] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.403810][ T1288] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.486862][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 221.495276][ T1288] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.504899][ T1288] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.592355][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 221.611014][ T6263] netlink: 40 bytes leftover after parsing attributes in process `syz.4.614'. [ 222.226002][ T6291] tipc: Enabled bearer , priority 0 [ 222.287121][ T6293] device syzkaller0 entered promiscuous mode [ 222.385538][ T6291] tipc: Resetting bearer [ 222.412201][ T6290] tipc: Resetting bearer [ 222.441900][ T6290] tipc: Disabling bearer [ 222.825873][ T6305] netlink: 8 bytes leftover after parsing attributes in process `syz.1.625'. [ 222.911885][ T6286] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 223.031676][ T6309] netlink: 'syz.5.618': attribute type 5 has an invalid length. [ 223.134863][ T6310] netlink: 'syz.3.623': attribute type 12 has an invalid length. [ 223.254008][ T4331] device hsr_slave_0 left promiscuous mode [ 223.288051][ T4331] device hsr_slave_1 left promiscuous mode [ 223.313941][ T4331] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.333232][ T4331] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 223.360796][ T4331] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 223.384143][ T4331] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 223.417685][ T4331] bridge0: port 3(veth0_to_team) entered disabled state [ 223.479924][ T4331] device bridge_slave_1 left promiscuous mode [ 223.534933][ T4331] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.611410][ T4331] device bridge_slave_0 left promiscuous mode [ 223.622374][ T4331] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.682515][ T6319] Set syz1 is full, maxelem 6117 reached [ 223.713554][ T4331] device veth1_macvtap left promiscuous mode [ 223.730750][ T4331] device veth0_macvtap left promiscuous mode [ 223.741961][ T4331] device veth1_vlan left promiscuous mode [ 223.757334][ T4331] device veth0_vlan left promiscuous mode [ 224.062293][ T4331] team0 (unregistering): Port device team_slave_1 removed [ 224.088465][ T4331] team0 (unregistering): Port device team_slave_0 removed [ 224.106104][ T4331] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 224.123955][ T4331] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 224.261634][ T4331] bond0 (unregistering): Released all slaves [ 224.304433][ T6323] netlink: 'syz.0.627': attribute type 13 has an invalid length. [ 224.667176][ T6323] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.674699][ T6323] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.180636][ T6323] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.234430][ T6323] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.432191][ T6323] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.441727][ T6323] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.451955][ T6323] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.462230][ T6323] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.670153][ T6323] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 225.679361][ T6323] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 225.688316][ T6323] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 225.697238][ T6323] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 226.020537][ T6360] netlink: 28 bytes leftover after parsing attributes in process `syz.5.638'. [ 226.507159][ T6381] device ip6gretap1 entered promiscuous mode [ 227.597153][ T6402] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma? [ 228.919735][ T6440] Bluetooth: hci1: too big key_count value 29096 [ 229.239094][ T6451] [ 229.241481][ T6451] ====================================================== [ 229.248524][ T6451] WARNING: possible circular locking dependency detected [ 229.255571][ T6451] syzkaller #0 Not tainted [ 229.260008][ T6451] ------------------------------------------------------ [ 229.267053][ T6451] syz.3.663/6451 is trying to acquire lock: [ 229.272973][ T6451] ffff888073da9120 (sk_lock-AF_AX25){+.+.}-{0:0}, at: ax25_device_event+0x217/0x4f0 [ 229.282431][ T6451] [ 229.282431][ T6451] but task is already holding lock: [ 229.289808][ T6451] ffffffff8d238308 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x54e/0xe50 [ 229.298132][ T6451] [ 229.298132][ T6451] which lock already depends on the new lock. [ 229.298132][ T6451] [ 229.308654][ T6451] [ 229.308654][ T6451] the existing dependency chain (in reverse order) is: [ 229.317691][ T6451] [ 229.317691][ T6451] -> #1 (rtnl_mutex){+.+.}-{3:3}: [ 229.324957][ T6451] __mutex_lock_common+0x1eb/0x2390 [ 229.330716][ T6451] mutex_lock_nested+0x17/0x20 [ 229.336178][ T6451] ax25_setsockopt+0x830/0xa40 [ 229.341496][ T6451] __sys_setsockopt+0x2bf/0x3d0 [ 229.346899][ T6451] __x64_sys_setsockopt+0xb1/0xc0 [ 229.352564][ T6451] do_syscall_64+0x4c/0xa0 [ 229.357527][ T6451] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 229.364021][ T6451] [ 229.364021][ T6451] -> #0 (sk_lock-AF_AX25){+.+.}-{0:0}: [ 229.371728][ T6451] __lock_acquire+0x2c33/0x7c60 [ 229.377140][ T6451] lock_acquire+0x197/0x3f0 [ 229.382193][ T6451] lock_sock_nested+0x44/0x100 [ 229.387506][ T6451] ax25_device_event+0x217/0x4f0 [ 229.392993][ T6451] raw_notifier_call_chain+0xcb/0x160 [ 229.398913][ T6451] __dev_notify_flags+0x178/0x2d0 [ 229.404487][ T6451] dev_change_flags+0xe3/0x1a0 [ 229.409789][ T6451] dev_ifsioc+0x147/0xe70 [ 229.414670][ T6451] dev_ioctl+0x55f/0xe50 [ 229.419450][ T6451] sock_do_ioctl+0x222/0x2f0 [ 229.424567][ T6451] sock_ioctl+0x4ed/0x6e0 [ 229.429422][ T6451] __se_sys_ioctl+0xfa/0x170 [ 229.434541][ T6451] do_syscall_64+0x4c/0xa0 [ 229.439478][ T6451] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 229.445894][ T6451] [ 229.445894][ T6451] other info that might help us debug this: [ 229.445894][ T6451] [ 229.456123][ T6451] Possible unsafe locking scenario: [ 229.456123][ T6451] [ 229.463574][ T6451] CPU0 CPU1 [ 229.468940][ T6451] ---- ---- [ 229.474433][ T6451] lock(rtnl_mutex); [ 229.478436][ T6451] lock(sk_lock-AF_AX25); [ 229.485490][ T6451] lock(rtnl_mutex); [ 229.492000][ T6451] lock(sk_lock-AF_AX25); [ 229.496504][ T6451] [ 229.496504][ T6451] *** DEADLOCK *** [ 229.496504][ T6451] [ 229.504644][ T6451] 1 lock held by syz.3.663/6451: [ 229.509578][ T6451] #0: ffffffff8d238308 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x54e/0xe50 [ 229.518296][ T6451] [ 229.518296][ T6451] stack backtrace: [ 229.524200][ T6451] CPU: 1 PID: 6451 Comm: syz.3.663 Not tainted syzkaller #0 [ 229.531489][ T6451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 229.541566][ T6451] Call Trace: [ 229.544853][ T6451] [ 229.547795][ T6451] dump_stack_lvl+0x168/0x230 [ 229.552492][ T6451] ? load_image+0x3b0/0x3b0 [ 229.556999][ T6451] ? show_regs_print_info+0x20/0x20 [ 229.562208][ T6451] ? print_circular_bug+0x12b/0x1a0 [ 229.567415][ T6451] check_noncircular+0x274/0x310 [ 229.572365][ T6451] ? add_chain_block+0x940/0x940 [ 229.577299][ T6451] ? lockdep_lock+0xdc/0x1e0 [ 229.581951][ T6451] ? lockdep_unlock+0x134/0x2d0 [ 229.586809][ T6451] ? mark_lock+0x94/0x320 [ 229.591169][ T6451] __lock_acquire+0x2c33/0x7c60 [ 229.596035][ T6451] ? lock_chain_count+0x20/0x20 [ 229.600890][ T6451] ? mark_lock+0x94/0x320 [ 229.605226][ T6451] ? verify_lock_unused+0x140/0x140 [ 229.610427][ T6451] ? verify_lock_unused+0x140/0x140 [ 229.615626][ T6451] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 229.621634][ T6451] ? lockdep_hardirqs_on_prepare+0x760/0x760 [ 229.627621][ T6451] ? __local_bh_enable_ip+0x12a/0x1b0 [ 229.633009][ T6451] ? mark_lock+0x94/0x320 [ 229.637343][ T6451] lock_acquire+0x197/0x3f0 [ 229.641861][ T6451] ? ax25_device_event+0x217/0x4f0 [ 229.646993][ T6451] ? lock_chain_count+0x20/0x20 [ 229.651855][ T6451] ? read_lock_is_recursive+0x10/0x10 [ 229.657232][ T6451] ? __local_bh_enable_ip+0x12a/0x1b0 [ 229.662614][ T6451] ? lockdep_hardirqs_on+0x94/0x140 [ 229.667817][ T6451] ? __local_bh_enable_ip+0x12a/0x1b0 [ 229.673193][ T6451] ? _local_bh_enable+0xa0/0xa0 [ 229.678162][ T6451] lock_sock_nested+0x44/0x100 [ 229.682935][ T6451] ? ax25_device_event+0x217/0x4f0 [ 229.688050][ T6451] ax25_device_event+0x217/0x4f0 [ 229.693024][ T6451] raw_notifier_call_chain+0xcb/0x160 [ 229.698421][ T6451] __dev_notify_flags+0x178/0x2d0 [ 229.703455][ T6451] ? __dev_change_flags+0x6a0/0x6a0 [ 229.708659][ T6451] ? __dev_change_flags+0x4bb/0x6a0 [ 229.713871][ T6451] ? dev_get_flags+0x1c0/0x1c0 [ 229.718648][ T6451] ? dev_ioctl+0x54e/0xe50 [ 229.723070][ T6451] ? dev_ioctl+0x54e/0xe50 [ 229.727502][ T6451] dev_change_flags+0xe3/0x1a0 [ 229.732275][ T6451] dev_ifsioc+0x147/0xe70 [ 229.736615][ T6451] ? dev_ioctl+0xe50/0xe50 [ 229.741055][ T6451] ? apparmor_capable+0x12c/0x190 [ 229.746095][ T6451] ? full_name_hash+0x8e/0xe0 [ 229.750791][ T6451] dev_ioctl+0x55f/0xe50 [ 229.755045][ T6451] ? _copy_from_user+0x111/0x170 [ 229.759993][ T6451] sock_do_ioctl+0x222/0x2f0 [ 229.764598][ T6451] ? sock_show_fdinfo+0xb0/0xb0 [ 229.769465][ T6451] sock_ioctl+0x4ed/0x6e0 [ 229.773801][ T6451] ? sock_poll+0x3f0/0x3f0 [ 229.778260][ T6451] ? bpf_lsm_file_ioctl+0x5/0x10 [ 229.783202][ T6451] ? security_file_ioctl+0x7c/0xa0 [ 229.788318][ T6451] ? sock_poll+0x3f0/0x3f0 [ 229.792756][ T6451] __se_sys_ioctl+0xfa/0x170 [ 229.797375][ T6451] do_syscall_64+0x4c/0xa0 [ 229.802057][ T6451] ? clear_bhb_loop+0x30/0x80 [ 229.806736][ T6451] ? clear_bhb_loop+0x30/0x80 [ 229.811427][ T6451] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 229.817371][ T6451] RIP: 0033:0x7fea49026fc9 [ 229.821790][ T6451] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 229.841403][ T6451] RSP: 002b:00007fea4726d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 229.849820][ T6451] RAX: ffffffffffffffda RBX: 00007fea4927e090 RCX: 00007fea49026fc9 [ 229.857798][ T6451] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000004 [ 229.865776][ T6451] RBP: 00007fea490a9f91 R08: 0000000000000000 R09: 0000000000000000 [ 229.873748][ T6451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 229.881721][ T6451] R13: 00007fea4927e128 R14: 00007fea4927e090 R15: 00007ffd17c800a8 [ 229.889735][ T6451] [ 229.920469][ T6451] ================================================================== [ 229.928587][ T6451] BUG: KASAN: use-after-free in ax25_dev_device_down+0x35e/0x520 [ 229.936438][ T6451] Write of size 4 at addr ffff88802187c9b8 by task syz.3.663/6451 [ 229.944241][ T6451] [ 229.946566][ T6451] CPU: 0 PID: 6451 Comm: syz.3.663 Not tainted syzkaller #0 [ 229.953881][ T6451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 229.963979][ T6451] Call Trace: [ 229.967289][ T6451] [ 229.970227][ T6451] dump_stack_lvl+0x168/0x230 [ 229.974919][ T6451] ? show_regs_print_info+0x20/0x20 [ 229.980130][ T6451] ? load_image+0x3b0/0x3b0 [ 229.984812][ T6451] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 229.990191][ T6451] print_address_description+0x60/0x2d0 [ 229.995743][ T6451] ? ax25_dev_device_down+0x35e/0x520 [ 230.001123][ T6451] kasan_report+0xdf/0x130 [ 230.005555][ T6451] ? ax25_dev_device_down+0x35e/0x520 [ 230.010933][ T6451] ? kfree+0xef/0x2a0 [ 230.014918][ T6451] kasan_check_range+0x27b/0x290 [ 230.019882][ T6451] ax25_dev_device_down+0x35e/0x520 [ 230.025174][ T6451] ax25_device_event+0x4b4/0x4f0 [ 230.030120][ T6451] raw_notifier_call_chain+0xcb/0x160 [ 230.035500][ T6451] __dev_notify_flags+0x178/0x2d0 [ 230.040633][ T6451] ? __dev_change_flags+0x6a0/0x6a0 [ 230.045854][ T6451] ? __dev_change_flags+0x4bb/0x6a0 [ 230.051061][ T6451] ? dev_get_flags+0x1c0/0x1c0 [ 230.055827][ T6451] ? dev_ioctl+0x54e/0xe50 [ 230.060260][ T6451] ? dev_ioctl+0x54e/0xe50 [ 230.064679][ T6451] dev_change_flags+0xe3/0x1a0 [ 230.069543][ T6451] dev_ifsioc+0x147/0xe70 [ 230.073881][ T6451] ? dev_ioctl+0xe50/0xe50 [ 230.078306][ T6451] ? apparmor_capable+0x12c/0x190 [ 230.083332][ T6451] ? full_name_hash+0x8e/0xe0 [ 230.088025][ T6451] dev_ioctl+0x55f/0xe50 [ 230.092287][ T6451] ? _copy_from_user+0x111/0x170 [ 230.097314][ T6451] sock_do_ioctl+0x222/0x2f0 [ 230.101917][ T6451] ? sock_show_fdinfo+0xb0/0xb0 [ 230.106809][ T6451] sock_ioctl+0x4ed/0x6e0 [ 230.111148][ T6451] ? sock_poll+0x3f0/0x3f0 [ 230.115577][ T6451] ? bpf_lsm_file_ioctl+0x5/0x10 [ 230.120620][ T6451] ? security_file_ioctl+0x7c/0xa0 [ 230.125829][ T6451] ? sock_poll+0x3f0/0x3f0 [ 230.130250][ T6451] __se_sys_ioctl+0xfa/0x170 [ 230.134860][ T6451] do_syscall_64+0x4c/0xa0 [ 230.139298][ T6451] ? clear_bhb_loop+0x30/0x80 [ 230.143979][ T6451] ? clear_bhb_loop+0x30/0x80 [ 230.148662][ T6451] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 230.154574][ T6451] RIP: 0033:0x7fea49026fc9 [ 230.159103][ T6451] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 230.178836][ T6451] RSP: 002b:00007fea4726d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 230.187265][ T6451] RAX: ffffffffffffffda RBX: 00007fea4927e090 RCX: 00007fea49026fc9 [ 230.195247][ T6451] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000004 [ 230.203222][ T6451] RBP: 00007fea490a9f91 R08: 0000000000000000 R09: 0000000000000000 [ 230.211198][ T6451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 230.219345][ T6451] R13: 00007fea4927e128 R14: 00007fea4927e090 R15: 00007ffd17c800a8 [ 230.227330][ T6451] [ 230.230352][ T6451] [ 230.232671][ T6451] Allocated by task 5500: [ 230.236997][ T6451] __kasan_kmalloc+0xb5/0xf0 [ 230.241605][ T6451] ax25_dev_device_up+0x50/0x580 [ 230.246553][ T6451] ax25_device_event+0x483/0x4f0 [ 230.251495][ T6451] raw_notifier_call_chain+0xcb/0x160 [ 230.256898][ T6451] __dev_notify_flags+0x178/0x2d0 [ 230.262035][ T6451] dev_change_flags+0xe3/0x1a0 [ 230.266828][ T6451] dev_ifsioc+0x147/0xe70 [ 230.271166][ T6451] dev_ioctl+0x55f/0xe50 [ 230.275411][ T6451] sock_do_ioctl+0x222/0x2f0 [ 230.280009][ T6451] sock_ioctl+0x4ed/0x6e0 [ 230.284346][ T6451] __se_sys_ioctl+0xfa/0x170 [ 230.288944][ T6451] do_syscall_64+0x4c/0xa0 [ 230.293360][ T6451] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 230.299257][ T6451] [ 230.301583][ T6451] Freed by task 6451: [ 230.305558][ T6451] kasan_set_track+0x4b/0x70 [ 230.310180][ T6451] kasan_set_free_info+0x1f/0x40 [ 230.315123][ T6451] ____kasan_slab_free+0xd5/0x110 [ 230.320151][ T6451] slab_free_freelist_hook+0xea/0x170 [ 230.325528][ T6451] kfree+0xef/0x2a0 [ 230.329338][ T6451] ax25_dev_device_down+0x1c0/0x520 [ 230.334540][ T6451] ax25_device_event+0x4b4/0x4f0 [ 230.339484][ T6451] raw_notifier_call_chain+0xcb/0x160 [ 230.344860][ T6451] __dev_notify_flags+0x178/0x2d0 [ 230.349914][ T6451] dev_change_flags+0xe3/0x1a0 [ 230.354679][ T6451] dev_ifsioc+0x147/0xe70 [ 230.359014][ T6451] dev_ioctl+0x55f/0xe50 [ 230.363269][ T6451] sock_do_ioctl+0x222/0x2f0 [ 230.367869][ T6451] sock_ioctl+0x4ed/0x6e0 [ 230.372210][ T6451] __se_sys_ioctl+0xfa/0x170 [ 230.376821][ T6451] do_syscall_64+0x4c/0xa0 [ 230.381238][ T6451] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 230.387144][ T6451] [ 230.389484][ T6451] Last potentially related work creation: [ 230.395802][ T6451] kasan_save_stack+0x35/0x60 [ 230.400606][ T6451] kasan_record_aux_stack+0xb8/0x100 [ 230.405897][ T6451] insert_work+0x54/0x3d0 [ 230.410230][ T6451] __queue_work+0x9c5/0xd50 [ 230.414737][ T6451] queue_work_on+0x11d/0x1d0 [ 230.419328][ T6451] netdevice_event+0x803/0x900 [ 230.424097][ T6451] raw_notifier_call_chain+0xcb/0x160 [ 230.429497][ T6451] call_netdevice_notifiers+0x85/0xc0 [ 230.434885][ T6451] bond_set_dev_addr+0x100/0x1b0 [ 230.439843][ T6451] bond_enslave+0x918/0x3a40 [ 230.444461][ T6451] do_setlink+0xd84/0x3980 [ 230.448908][ T6451] rtnl_newlink+0x1419/0x17d0 [ 230.453587][ T6451] rtnetlink_rcv_msg+0x9b9/0xe60 [ 230.458532][ T6451] netlink_rcv_skb+0x1e0/0x430 [ 230.463425][ T6451] netlink_unicast+0x774/0x920 [ 230.468239][ T6451] netlink_sendmsg+0x8ab/0xbc0 [ 230.473015][ T6451] __sys_sendto+0x423/0x580 [ 230.477523][ T6451] __x64_sys_sendto+0xda/0xf0 [ 230.482206][ T6451] do_syscall_64+0x4c/0xa0 [ 230.486623][ T6451] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 230.492529][ T6451] [ 230.494853][ T6451] Second to last potentially related work creation: [ 230.501431][ T6451] kasan_save_stack+0x35/0x60 [ 230.506114][ T6451] kasan_record_aux_stack+0xb8/0x100 [ 230.511407][ T6451] call_rcu+0x182/0x930 [ 230.515577][ T6451] blk_release_queue+0xda/0x290 [ 230.520433][ T6451] kobject_put+0x21d/0x460 [ 230.524850][ T6451] scsi_device_dev_release_usercontext+0x625/0xb40 [ 230.531387][ T6451] execute_in_process_context+0x11a/0x130 [ 230.537108][ T6451] device_release+0x92/0x1c0 [ 230.541824][ T6451] kobject_put+0x21d/0x460 [ 230.546357][ T6451] scsi_probe_and_add_lun+0x1484/0x3d00 [ 230.551946][ T6451] __scsi_scan_target+0x1d8/0x1010 [ 230.557188][ T6451] scsi_scan_host_selected+0x36e/0x690 [ 230.562681][ T6451] do_scan_async+0x11a/0x700 [ 230.567276][ T6451] async_run_entry_fn+0x9f/0x3e0 [ 230.572254][ T6451] process_one_work+0x863/0x1000 [ 230.577199][ T6451] worker_thread+0xaa8/0x12a0 [ 230.581905][ T6451] kthread+0x436/0x520 [ 230.585979][ T6451] ret_from_fork+0x1f/0x30 [ 230.590401][ T6451] [ 230.592726][ T6451] The buggy address belongs to the object at ffff88802187c900 [ 230.592726][ T6451] which belongs to the cache kmalloc-192 of size 192 [ 230.606777][ T6451] The buggy address is located 184 bytes inside of [ 230.606777][ T6451] 192-byte region [ffff88802187c900, ffff88802187c9c0) [ 230.620061][ T6451] The buggy address belongs to the page: [ 230.625717][ T6451] page:ffffea0000861f00 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88802187c000 pfn:0x2187c [ 230.637260][ T6451] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 230.644822][ T6451] raw: 00fff00000000200 ffffea0000a7e800 0000000500000005 ffff888016841a00 [ 230.653415][ T6451] raw: ffff88802187c000 000000008010000c 00000001ffffffff 0000000000000000 [ 230.661998][ T6451] page dumped because: kasan: bad access detected [ 230.668424][ T6451] page_owner tracks the page as allocated [ 230.674136][ T6451] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 144, ts 9122962706, free_ts 9122056148 [ 230.689944][ T6451] get_page_from_freelist+0x1b77/0x1c60 [ 230.695509][ T6451] __alloc_pages+0x1e1/0x470 [ 230.700115][ T6451] new_slab+0xc0/0x4b0 [ 230.704184][ T6451] ___slab_alloc+0x81e/0xdf0 [ 230.708783][ T6451] kmem_cache_alloc_trace+0x1a5/0x2a0 [ 230.714158][ T6451] blk_stat_alloc_callback+0x5c/0x210 [ 230.719531][ T6451] blk_mq_init_allocated_queue+0x7f/0x1790 [ 230.725431][ T6451] blk_mq_init_queue+0x68/0xd0 [ 230.730199][ T6451] scsi_alloc_sdev+0x6f2/0xab0 [ 230.734974][ T6451] scsi_probe_and_add_lun+0x1bf/0x3d00 [ 230.740439][ T6451] __scsi_scan_target+0x1d8/0x1010 [ 230.745570][ T6451] scsi_scan_host_selected+0x36e/0x690 [ 230.751384][ T6451] do_scan_async+0x11a/0x700 [ 230.755982][ T6451] async_run_entry_fn+0x9f/0x3e0 [ 230.760927][ T6451] process_one_work+0x863/0x1000 [ 230.765866][ T6451] worker_thread+0xaa8/0x12a0 [ 230.770650][ T6451] page last free stack trace: [ 230.775320][ T6451] free_unref_page_prepare+0x637/0x6c0 [ 230.780784][ T6451] free_unref_page+0x94/0x280 [ 230.785468][ T6451] __vunmap+0x8ab/0xa40 [ 230.789630][ T6451] free_work+0x56/0x80 [ 230.793700][ T6451] process_one_work+0x863/0x1000 [ 230.798647][ T6451] worker_thread+0xaa8/0x12a0 [ 230.803333][ T6451] kthread+0x436/0x520 [ 230.807419][ T6451] ret_from_fork+0x1f/0x30 [ 230.811938][ T6451] [ 230.814266][ T6451] Memory state around the buggy address: [ 230.819897][ T6451] ffff88802187c880: 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 230.827961][ T6451] ffff88802187c900: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 230.836025][ T6451] >ffff88802187c980: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 230.844088][ T6451] ^ [ 230.849986][ T6451] ffff88802187ca00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 230.858046][ T6451] ffff88802187ca80: 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc [ 230.866110][ T6451] ================================================================== [ 231.008934][ T6451] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 231.016200][ T6451] CPU: 1 PID: 6451 Comm: syz.3.663 Tainted: G B syzkaller #0 [ 231.024905][ T6451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 231.034993][ T6451] Call Trace: [ 231.038302][ T6451] [ 231.041252][ T6451] dump_stack_lvl+0x168/0x230 [ 231.045961][ T6451] ? show_regs_print_info+0x20/0x20 [ 231.051189][ T6451] ? load_image+0x3b0/0x3b0 [ 231.055732][ T6451] panic+0x2c9/0x7f0 [ 231.059669][ T6451] ? bpf_jit_dump+0xd0/0xd0 [ 231.064206][ T6451] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 231.070129][ T6451] ? _raw_spin_unlock+0x40/0x40 [ 231.075019][ T6451] ? ax25_dev_device_down+0x35e/0x520 [ 231.080421][ T6451] check_panic_on_warn+0x80/0xa0 [ 231.085391][ T6451] ? ax25_dev_device_down+0x35e/0x520 [ 231.090971][ T6451] end_report+0x6d/0xf0 [ 231.095159][ T6451] kasan_report+0x102/0x130 [ 231.099703][ T6451] ? ax25_dev_device_down+0x35e/0x520 [ 231.105112][ T6451] ? kfree+0xef/0x2a0 [ 231.109243][ T6451] kasan_check_range+0x27b/0x290 [ 231.114217][ T6451] ax25_dev_device_down+0x35e/0x520 [ 231.119453][ T6451] ax25_device_event+0x4b4/0x4f0 [ 231.124422][ T6451] raw_notifier_call_chain+0xcb/0x160 [ 231.129825][ T6451] __dev_notify_flags+0x178/0x2d0 [ 231.134882][ T6451] ? __dev_change_flags+0x6a0/0x6a0 [ 231.140103][ T6451] ? __dev_change_flags+0x4bb/0x6a0 [ 231.145386][ T6451] ? dev_get_flags+0x1c0/0x1c0 [ 231.150191][ T6451] ? dev_ioctl+0x54e/0xe50 [ 231.154645][ T6451] ? dev_ioctl+0x54e/0xe50 [ 231.159084][ T6451] dev_change_flags+0xe3/0x1a0 [ 231.163871][ T6451] dev_ifsioc+0x147/0xe70 [ 231.168227][ T6451] ? dev_ioctl+0xe50/0xe50 [ 231.172675][ T6451] ? apparmor_capable+0x12c/0x190 [ 231.177727][ T6451] ? full_name_hash+0x8e/0xe0 [ 231.182444][ T6451] dev_ioctl+0x55f/0xe50 [ 231.186799][ T6451] ? _copy_from_user+0x111/0x170 [ 231.191761][ T6451] sock_do_ioctl+0x222/0x2f0 [ 231.196385][ T6451] ? sock_show_fdinfo+0xb0/0xb0 [ 231.201281][ T6451] sock_ioctl+0x4ed/0x6e0 [ 231.205637][ T6451] ? sock_poll+0x3f0/0x3f0 [ 231.210092][ T6451] ? bpf_lsm_file_ioctl+0x5/0x10 [ 231.215053][ T6451] ? security_file_ioctl+0x7c/0xa0 [ 231.220188][ T6451] ? sock_poll+0x3f0/0x3f0 [ 231.224627][ T6451] __se_sys_ioctl+0xfa/0x170 [ 231.229361][ T6451] do_syscall_64+0x4c/0xa0 [ 231.233813][ T6451] ? clear_bhb_loop+0x30/0x80 [ 231.238520][ T6451] ? clear_bhb_loop+0x30/0x80 [ 231.243225][ T6451] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 231.249227][ T6451] RIP: 0033:0x7fea49026fc9 [ 231.253667][ T6451] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 231.273296][ T6451] RSP: 002b:00007fea4726d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 231.281835][ T6451] RAX: ffffffffffffffda RBX: 00007fea4927e090 RCX: 00007fea49026fc9 [ 231.289925][ T6451] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000004 [ 231.298012][ T6451] RBP: 00007fea490a9f91 R08: 0000000000000000 R09: 0000000000000000 [ 231.309766][ T6451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 231.317766][ T6451] R13: 00007fea4927e128 R14: 00007fea4927e090 R15: 00007ffd17c800a8 [ 231.325867][ T6451] [ 231.329112][ T6451] Kernel Offset: disabled [ 231.333475][ T6451] Rebooting in 86400 seconds..