last executing test programs: 4.067629374s ago: executing program 0 (id=109): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000300)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x3}}, 0x80, 0x0}, 0x800) 3.970150216s ago: executing program 0 (id=110): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$nl_route(0x10, 0x3, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) writev(r0, &(0x7f0000000880), 0x0) r1 = syz_io_uring_setup(0x416f, &(0x7f0000000780)={0x0, 0xfffffffd, 0x20, 0x0, 0x1}, 0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x567, 0x1000a387, 0x0, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10) recvmmsg(r5, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/80, 0x50}], 0x1}, 0x5}], 0x1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) 3.085411086s ago: executing program 0 (id=117): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) sendmmsg(r0, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="17aac42368b2ef1fb17e95ce83c1c2f222dcd7e05a988205a83b99b16cd1ec73d0759d0a11a5ebea86ad8634d007ce568d11883184645708f8ebe1cb8b43c713dee8161a029d1ff68b6ecf98321d4d6b0fd77583b704965196ee913b1417bbc3be78", 0x62}, {&(0x7f0000000400)="861e892d732b898eb9d4793fd9f45fd6b7accf086c04036701ff400b0a405119db2bffad4485d8acfbe629068b8641bc1f845d99e3b25ebb615b10a3a56d4bed3c4462eec0d02781c21124de42e7e3d18d327e37bf9d0c06ab781ea3", 0x5c}], 0x2}}], 0x1, 0x4008000) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 2.973666418s ago: executing program 0 (id=119): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x756, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x2000, 0x0, 0x0, r1}, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) syz_emit_ethernet(0x70, &(0x7f0000000440)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x3a, 0x3a, 0x0, @private2, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "5b29ab", 0x0, 0x11, 0x0, @private1, @mcast1, [], "fb36eeca6fad50b375a2"}}}}}}}, 0x0) pselect6(0x700, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x77359400}, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x3, 0x0, 0x0) 2.510722524s ago: executing program 1 (id=125): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) syz_emit_ethernet(0x326, &(0x7f00000000c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x2f0, 0x6, 0x0, @local, @local, {[], {{0xfffd, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xbc, 0xc2, 0xfff7, 0x0, 0x0, {[@mptcp=@remove_addr={0x1e, 0x2db, 0x4, 0x0, "35601d54dc4e0f181af0d1e769468048ee3cc5992e9d3e2407be6e684e488525dfcdf2aacf4472d2780bae7d6a87d597c41c50016912faa2460d22db27320450e693567cb01a785de442a77d68d00299548463761a1a3c11d9c2f46d1f9bcdf84c924ca0b0ba7fca7c07e19400a81745612eba1d64d64ef2a33458b22c6a10d3fbf183c42133ce7d5e59cf4f844af6a806a1eb4d95686c0cb04a19719e368debdbfd44ec134e5ba244e15a1f4802e954824fe33bdfaea929dc3b15a3a0fb0495cfa3bb96485a5617bc482d6461e9e3ee480b3e46151aa7886f2c435deaceb1368616b2d97ab534154a65a532a8814065ad2cfdf2f44c68a17324236369c86138916da575f1d80374f24ff27926434793d1a711eb036b665b5c7a020637278cef3326b86ac70e38efffb6aab65655a6a18bc3feeba7d7e5a04bc82db5c843d49727766dc24248280bc3695db043af3cc455d082bcd16501c1313588113083dc4af8f5541ddd19c26a710b07ea376e8e26d35f43c4e8186b1c3915f482831f7dd60612eee623e93e4875c4bf178d62c8a407751e6ca8a98f5d3fbf509829867edce0e9c30d0f17f480eb299baefb5c6b76a28da0f983210b35feb81081742661d524e79cf1f1e8f47b0ed2b9f81c3b64fbee551de4056bca4d2cf95a13f056c13f215913b91bba2ddf2e94af9b0259aca73018044e1e068a844fbf4eca28cef9a69cff77628f65b818d5d345637b77ee6af6d5919a7916e2a87f5b11d372617f6e8b74b919cfde1d97df07c727f3ee5a45eaa9fa4a3b2daae5d203cfe4f6f423f8e652e26266c68b7eb76a58039ba29589677aae24caba7abe2b551a4fbf324a722473245f0be07e1cb2021df257b0cccb87be8e82ba1c3eca28e0735632bc946df3c60a13085aeae327e7925e0959b641f3561357f81d8c8556979fe64991b3af375df1ce862107739fe73db9682b1fd260445fde284b28ce43df97ba49c855b709ee2e50b402eb883cdf4d10298b6bc303df0501c73fdb98"}]}}}}}}}}, 0x0) 2.370192686s ago: executing program 1 (id=128): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000180)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x5, 0xe4}]}, 0x8) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001280)="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", 0x290}], 0x1}}], 0x1, 0x40000d0) sendto$inet(r0, &(0x7f0000000300)="0906c422e0243219ff7b440e76a1b51b82ba23599f81b52c9d4db4486cec105e4b9f0f859f8a43eef6352f1e46e3145089b6a22f618ca14e288029b613a329c422481c6b7aff6806bce699cea461ecf591d9018b2a1d84e389a8d3127fd35913fe6975", 0x63, 0x40040011, 0x0, 0x0) 2.184251082s ago: executing program 1 (id=129): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_io_uring_setup(0x400000d2, &(0x7f0000000480)={0x0, 0x0, 0x400, 0xffffffff, 0x332}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000380)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000240)={r4, 0x0, r3}) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_OPENAT={0x12, 0x7c, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x148, 0x10000, 0x12345}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 2.001394242s ago: executing program 0 (id=131): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000003d80)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd27, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {}, {0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x16}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 1.868678809s ago: executing program 2 (id=132): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x1405, 0x8, 0x70bd27, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0xa011) 1.792223248s ago: executing program 2 (id=133): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x7f, 0x7, 0x10001, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0x3, 0x40000003, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x2, 0x80000001, 0x7, 0x9, 0xffff, 0x3c5b, 0x1, 0x24, 0x3, 0xfffffffe, 0x1f461e2c, 0x2, 0xfffffffa, 0x3, 0x3, 0x3, 0x7fff, 0x4c74, 0xf, 0x8001, 0x4, 0xa, 0x0, 0x80071, 0x5, 0xfffff000, 0x103, 0x0, 0x5, 0x3c, 0x4, 0x1, 0x1000, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x2, 0x5, 0xa, 0x8, 0x7, 0x1, 0xfffffffe], [0x10000007, 0xfffd, 0xfff, 0x8000, 0xc, 0xfffffff5, 0x129432e6, 0x3, 0x6, 0x0, 0x2bf, 0x8, 0x9, 0xffff7ffe, 0x3, 0x4002, 0x101, 0x5, 0x2f, 0xe, 0xfff, 0x78, 0x10000ea3, 0xa, 0xe, 0x0, 0x8000, 0xb, 0x400, 0x101, 0x0, 0xfffffffd, 0xff, 0x1005, 0x7ff, 0x5f31, 0xc, 0x6000000, 0x6, 0x2, 0xc, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x0, 0xffff, 0x2000002, 0x7f, 0xb, 0xfff, 0x1000, 0x4, 0x143, 0x7, 0xb, 0x9, 0x48c93690, 0x6, 0x3], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x5, 0x8d2, 0x9, 0x5, 0xfffffff7, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x2, 0x10000009, 0x3ea, 0xb, 0x5, 0x6, 0x2, 0xf, 0x88, 0x0, 0x5, 0x5, 0x3b, 0x3, 0x5, 0x80, 0x3, 0xfffffffe, 0x202, 0x0, 0xa2, 0x7, 0x53cf697b, 0x1, 0x6, 0x54fe12d2, 0xbf, 0x200, 0x0, 0x400002, 0x3, 0x4, 0x5, 0xf23, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0x7e06, 0x3, 0xb, 0x5, 0x938, 0x6, 0x3, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x5, 0x5, 0x0, 0x101, 0x10003, 0x2006, 0x7fff, 0x8ffff, 0xfffffffb, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0x400007, 0x2, 0x5, 0x735, 0x8, 0x3, 0x50fd, 0x10001, 0x3, 0x9, 0x54, 0x9602, 0xa, 0x2, 0x80000007, 0x6, 0x1, 0x10000, 0xfffffffe, 0x8, 0x2b94, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x2d513b50, 0x4, 0x5, 0x4b1c, 0x1, 0xa, 0xffff7441, 0xfff]}, 0x45c) r0 = syz_io_uring_setup(0x417a, &(0x7f0000000780)={0x0, 0x0, 0x10100, 0x2, 0x17b}, &(0x7f0000000000)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x567, 0x0, 0x0, 0x0, 0x0) 1.777088211s ago: executing program 0 (id=134): r0 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) bind$packet(r0, &(0x7f0000000380)={0x11, 0x4, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000100)='wg0\x00', 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wg0\x00', 0x0}) bind$xdp(r3, &(0x7f00000001c0)={0x2c, 0x4, r4}, 0x10) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) syz_usb_connect(0x2, 0x2d, &(0x7f0000000780)={{0x12, 0x1, 0x110, 0xec, 0x3, 0x7e, 0x8, 0x9fb, 0xebbe, 0xd48d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x7, 0x0, 0xf0, 0x9, [{{0x9, 0x4, 0xc0, 0x7, 0x1, 0x97, 0x78, 0x37, 0x3, [], [{{0x9, 0x5, 0x1, 0x2, 0x20, 0x80, 0x7, 0x2}}]}}]}}]}}, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000001780)=0x100000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r6, 0x0, r3}, 0x10) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f00000001c0)=0x304214, 0x4) syz_emit_ethernet(0x16, &(0x7f0000000b00)={@local, @local, @void, {@llc_tr={0x11, {@snap={0xaa, 0xa9, 'O', "82e871", 0x6001}}}}}, 0x0) 1.690268465s ago: executing program 2 (id=135): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000200)="f8", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @mss, @sack_perm, @timestamp, @timestamp, @mss, @timestamp, @sack_perm], 0x20000000000000ec) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="3ce2de4d8d957a8de4e490b6cd03b988d4edef164bd3377aa381b5f50b7ca414516489f78cd7208982e9bde22b2b7c1c", 0x30, 0x0, 0x0, 0x0) 1.556270822s ago: executing program 2 (id=136): socket(0x10, 0x2, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x0, 0x13100, 0x2, 0x2de}, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) openat$sndseq(0xffffff9c, &(0x7f0000000080), 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f0000000600)={0x11, 0xfffffffffffffffc, 0x0, 0x1, 0xfffffffffffffffe, 0x0, 0x4, 0x8}, 0x0, &(0x7f0000000680)={0x7fc, 0x7f, 0x800000, 0x3, 0x7, 0xc3ad, 0x4}, 0x0, 0x0) 1.432963637s ago: executing program 3 (id=138): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) syz_emit_ethernet(0x326, &(0x7f00000000c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x2f0, 0x6, 0x0, @local, @local, {[], {{0xfffd, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xbc, 0xc2, 0xfff7, 0x0, 0x0, {[@mptcp=@remove_addr={0x1e, 0x2db, 0x4, 0x0, "35601d54dc4e0f181af0d1e769468048ee3cc5992e9d3e2407be6e684e488525dfcdf2aacf4472d2780bae7d6a87d597c41c50016912faa2460d22db27320450e693567cb01a785de442a77d68d00299548463761a1a3c11d9c2f46d1f9bcdf84c924ca0b0ba7fca7c07e19400a81745612eba1d64d64ef2a33458b22c6a10d3fbf183c42133ce7d5e59cf4f844af6a806a1eb4d95686c0cb04a19719e368debdbfd44ec134e5ba244e15a1f4802e954824fe33bdfaea929dc3b15a3a0fb0495cfa3bb96485a5617bc482d6461e9e3ee480b3e46151aa7886f2c435deaceb1368616b2d97ab534154a65a532a8814065ad2cfdf2f44c68a17324236369c86138916da575f1d80374f24ff27926434793d1a711eb036b665b5c7a020637278cef3326b86ac70e38efffb6aab65655a6a18bc3feeba7d7e5a04bc82db5c843d49727766dc24248280bc3695db043af3cc455d082bcd16501c1313588113083dc4af8f5541ddd19c26a710b07ea376e8e26d35f43c4e8186b1c3915f482831f7dd60612eee623e93e4875c4bf178d62c8a407751e6ca8a98f5d3fbf509829867edce0e9c30d0f17f480eb299baefb5c6b76a28da0f983210b35feb81081742661d524e79cf1f1e8f47b0ed2b9f81c3b64fbee551de4056bca4d2cf95a13f056c13f215913b91bba2ddf2e94af9b0259aca73018044e1e068a844fbf4eca28cef9a69cff77628f65b818d5d345637b77ee6af6d5919a7916e2a87f5b11d372617f6e8b74b919cfde1d97df07c727f3ee5a45eaa9fa4a3b2daae5d203cfe4f6f423f8e652e26266c68b7eb76a58039ba29589677aae24caba7abe2b551a4fbf324a722473245f0be07e1cb2021df257b0cccb87be8e82ba1c3eca28e0735632bc946df3c60a13085aeae327e7925e0959b641f3561357f81d8c8556979fe64991b3af375df1ce862107739fe73db9682b1fd260445fde284b28ce43df97ba49c855b709ee2e50b402eb883cdf4d10298b6bc303df0501c73fdb98"}]}}}}}}}}, 0x0) 1.374052517s ago: executing program 3 (id=140): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0) r0 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100, 0x3}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r0, 0x48e9, 0x0, 0x2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$NL80211_CMD_DEL_KEY(r3, 0x0, 0x4000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000080)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000001880)={@mcast1, 0x8000000, 0x2, 0x2, 0x9, 0x4, 0xa4}, 0x20) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x28, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r5, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r7, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100000000}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010) 1.28403402s ago: executing program 4 (id=141): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x361082, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) ftruncate(0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = syz_io_uring_setup(0xa0, &(0x7f00000002c0)={0x0, 0x89b8, 0x8, 0x0, 0x207}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0xc000000, &(0x7f0000000000), 0x0, 0x12}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) 1.283478814s ago: executing program 3 (id=142): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0xa, 0x4e22, 0x80000, @mcast2, 0xfffffffd}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=[@tclass={{0x18, 0x11, 0x43, 0x1ff}}], 0x18}, 0x20040091) 1.257564541s ago: executing program 3 (id=143): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000280)={{0x87, @empty, 0x4e23, 0x2, 'nq\x00', 0x21, 0x4, 0x58}, {@multicast1, 0x4e21, 0x3, 0x0, 0x7, 0x5}}, 0x44) sendto$inet6(r0, &(0x7f00000004c0)='D', 0x1, 0x44, &(0x7f0000000040)={0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00', 0x8}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x20366080, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) 1.145975053s ago: executing program 1 (id=144): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180), 0xfefc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$poke(0x5, r1, &(0x7f0000000080), 0x0) 1.032137978s ago: executing program 1 (id=145): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x12) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x1412, 0x8, 0x70bd26, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x8851}, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023b0"], 0x0) 965.209453ms ago: executing program 3 (id=146): syz_usb_connect(0x0, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000022546940fa0ae803d099010203010902"], 0x0) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r1, 0x36}, 0x80, &(0x7f0000000140)=[{&(0x7f00000000c0)='O', 0x28}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) 890.661457ms ago: executing program 1 (id=147): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) ppoll(&(0x7f0000000100)=[{r1, 0xa0}], 0x1, 0x0, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000540)='!', 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2404c031) 639.773534ms ago: executing program 2 (id=148): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x38, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x926c}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x9}, @NL80211_MESHCONF_TTL={0x5, 0x6, 0x6}]}]}, 0x38}}, 0x0) 484.008193ms ago: executing program 2 (id=149): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000000)=0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000440)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000480)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) socket$packet(0x11, 0x2, 0x300) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "3d8b00", "d4cc4a4423daabeb8e7ba12fe6e1c742a683fa6e58757db76aae864d57fbaf37", "c3650f3f", "5e963dfa951f9b3d"}, 0x38) sendto$inet6(r3, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x40000000, 0x0, 0x81}, 0x4048884) recvmmsg(0xffffffffffffffff, &(0x7f00000066c0), 0x0, 0x0, 0x0) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) sendmsg$nl_route(r0, 0x0, 0x0) 349.056165ms ago: executing program 4 (id=150): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b21ac2fc7dff972d000200", "e9be1ea2", "bb10000000000001"}, 0x28) 192.286649ms ago: executing program 4 (id=151): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) syz_emit_ethernet(0x326, &(0x7f00000000c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x2f0, 0x6, 0x0, @local, @local, {[], {{0xfffd, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xbc, 0xc2, 0xfff7, 0x0, 0x0, {[@mptcp=@remove_addr={0x1e, 0x2db, 0x4, 0x0, "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"}]}}}}}}}}, 0x0) 155.88807ms ago: executing program 4 (id=152): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x29, 0x7, 0x3, 0x6f, 0x42, @ipv4={'\x00', '\xff\xff', @loopback}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7800, 0x20, 0x5, 0x2}}) 82.694982ms ago: executing program 4 (id=153): seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = memfd_secret(0x0) fchmod(r0, 0x134) 81.798423ms ago: executing program 3 (id=154): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xec}}, 0x0) 0s ago: executing program 4 (id=155): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80801) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000080)=0x4) fcntl$lock(r1, 0x24, &(0x7f00000000c0)={0x300, 0x1, 0x0, 0x4000007fffffff}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}}) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000004, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x91bf000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.96' (ED25519) to the list of known hosts. [ 34.427213][ T6477] cgroup: Unknown subsys name 'net' [ 34.642838][ T6477] cgroup: Unknown subsys name 'cpuset' [ 34.646586][ T6477] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 34.953446][ T6477] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 36.619808][ T6496] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 36.624254][ T6502] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 36.626272][ T6502] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 36.626561][ T6502] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 36.626936][ T6502] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 36.627567][ T6502] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 36.627864][ T6502] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 36.628230][ T6502] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 36.628601][ T6502] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 36.628894][ T6502] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 36.629143][ T6502] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 36.632142][ T6502] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 36.632407][ T6502] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 36.632711][ T6502] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 36.633189][ T6502] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 36.633679][ T6502] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 36.634128][ T6502] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 36.634613][ T6502] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 36.635081][ T6502] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 36.635476][ T6502] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 36.636328][ T6502] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 36.648026][ T6502] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 36.648174][ T6502] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 36.663674][ T6502] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 36.663782][ T6502] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 37.044157][ T6494] chnl_net:caif_netlink_parms(): no params data found [ 37.054000][ T6498] chnl_net:caif_netlink_parms(): no params data found [ 37.141123][ T6489] chnl_net:caif_netlink_parms(): no params data found [ 37.145861][ T6495] chnl_net:caif_netlink_parms(): no params data found [ 37.161393][ T6490] chnl_net:caif_netlink_parms(): no params data found [ 37.270414][ T6498] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.270547][ T6498] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.270685][ T6498] bridge_slave_0: entered allmulticast mode [ 37.271625][ T6498] bridge_slave_0: entered promiscuous mode [ 37.286916][ T6494] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.287006][ T6494] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.287166][ T6494] bridge_slave_0: entered allmulticast mode [ 37.288384][ T6494] bridge_slave_0: entered promiscuous mode [ 37.303456][ T6498] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.303529][ T6498] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.304006][ T6498] bridge_slave_1: entered allmulticast mode [ 37.305050][ T6498] bridge_slave_1: entered promiscuous mode [ 37.316118][ T6494] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.316200][ T6494] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.316299][ T6494] bridge_slave_1: entered allmulticast mode [ 37.317113][ T6494] bridge_slave_1: entered promiscuous mode [ 37.355795][ T6498] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.371347][ T6494] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.371544][ T6495] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.371614][ T6495] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.371714][ T6495] bridge_slave_0: entered allmulticast mode [ 37.373002][ T6495] bridge_slave_0: entered promiscuous mode [ 37.374317][ T6495] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.374361][ T6495] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.374461][ T6495] bridge_slave_1: entered allmulticast mode [ 37.375326][ T6495] bridge_slave_1: entered promiscuous mode [ 37.382986][ T6489] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.383035][ T6489] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.383173][ T6489] bridge_slave_0: entered allmulticast mode [ 37.384014][ T6489] bridge_slave_0: entered promiscuous mode [ 37.386050][ T6498] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.407804][ T6494] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.414713][ T6489] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.414824][ T6489] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.414919][ T6489] bridge_slave_1: entered allmulticast mode [ 37.415780][ T6489] bridge_slave_1: entered promiscuous mode [ 37.465525][ T6498] team0: Port device team_slave_0 added [ 37.466307][ T6490] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.466387][ T6490] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.466487][ T6490] bridge_slave_0: entered allmulticast mode [ 37.467299][ T6490] bridge_slave_0: entered promiscuous mode [ 37.469392][ T6494] team0: Port device team_slave_0 added [ 37.470529][ T6490] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.470572][ T6490] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.470673][ T6490] bridge_slave_1: entered allmulticast mode [ 37.473002][ T6490] bridge_slave_1: entered promiscuous mode [ 37.475785][ T6495] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.477689][ T6495] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.478780][ T6498] team0: Port device team_slave_1 added [ 37.494228][ T6494] team0: Port device team_slave_1 added [ 37.520555][ T6489] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.525083][ T6489] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.556742][ T6495] team0: Port device team_slave_0 added [ 37.558247][ T6495] team0: Port device team_slave_1 added [ 37.578922][ T6498] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.579005][ T6498] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.579048][ T6498] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.585883][ T6494] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.585915][ T6494] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.585952][ T6494] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.587137][ T6494] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.587170][ T6494] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.587201][ T6494] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.591376][ T6490] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.593588][ T6490] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.604740][ T6495] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.604773][ T6495] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.604814][ T6495] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.605544][ T6498] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.605567][ T6498] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.605598][ T6498] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.646639][ T6489] team0: Port device team_slave_0 added [ 37.649135][ T6489] team0: Port device team_slave_1 added [ 37.654859][ T6495] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.654913][ T6495] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.654964][ T6495] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.658460][ T6490] team0: Port device team_slave_0 added [ 37.683885][ T6490] team0: Port device team_slave_1 added [ 37.710298][ T6489] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.712413][ T6489] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.714823][ T6489] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.716749][ T6489] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.716776][ T6489] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.716811][ T6489] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.742952][ T6494] hsr_slave_0: entered promiscuous mode [ 37.745282][ T6494] hsr_slave_1: entered promiscuous mode [ 37.760294][ T6490] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.762278][ T6490] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.769637][ T6490] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.774335][ T6490] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.776432][ T6490] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.780294][ T6490] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.790999][ T6498] hsr_slave_0: entered promiscuous mode [ 37.793034][ T6498] hsr_slave_1: entered promiscuous mode [ 37.794989][ T6498] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.797226][ T6498] Cannot create hsr debugfs directory [ 37.821650][ T6495] hsr_slave_0: entered promiscuous mode [ 37.823810][ T6495] hsr_slave_1: entered promiscuous mode [ 37.825823][ T6495] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.826030][ T6495] Cannot create hsr debugfs directory [ 37.835469][ T6489] hsr_slave_0: entered promiscuous mode [ 37.836098][ T6489] hsr_slave_1: entered promiscuous mode [ 37.836440][ T6489] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.836470][ T6489] Cannot create hsr debugfs directory [ 37.915339][ T6490] hsr_slave_0: entered promiscuous mode [ 37.917575][ T6490] hsr_slave_1: entered promiscuous mode [ 37.919757][ T6490] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.922129][ T6490] Cannot create hsr debugfs directory [ 38.228443][ T6489] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 38.235125][ T6489] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 38.239464][ T6489] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 38.248870][ T6489] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 38.271523][ T6498] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 38.276035][ T6498] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 38.281297][ T6498] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 38.286048][ T6498] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 38.348546][ T6494] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.380255][ T6498] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.389328][ T6494] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.397731][ T6498] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.404326][ T6489] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.410402][ T6494] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.419012][ T6494] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.434933][ T6489] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.437188][ T6495] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 38.442445][ T6495] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 38.446389][ T6495] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 38.452915][ T179] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.453052][ T179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.454576][ T179] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.454626][ T179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.472139][ T6495] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 38.489427][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.489516][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.490735][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.490781][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.571932][ T6490] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 38.575708][ T6490] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 38.584727][ T6489] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.597449][ T6490] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 38.613016][ T6490] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 38.679317][ T6494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.697022][ T6495] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.704903][ T6495] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.711586][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.711664][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.716226][ T6493] Bluetooth: hci1: command tx timeout [ 38.716245][ T6501] Bluetooth: hci2: command tx timeout [ 38.716281][ T55] Bluetooth: hci4: command tx timeout [ 38.716461][ T6501] Bluetooth: hci0: command tx timeout [ 38.716603][ T55] Bluetooth: hci3: command tx timeout [ 38.736869][ T6498] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.743422][ T200] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.743507][ T200] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.747478][ T6494] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.753475][ T200] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.753582][ T200] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.786169][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.786249][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.807911][ T6489] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.855490][ T6489] veth0_vlan: entered promiscuous mode [ 38.866165][ T6489] veth1_vlan: entered promiscuous mode [ 38.878130][ T6498] veth0_vlan: entered promiscuous mode [ 38.892387][ T6498] veth1_vlan: entered promiscuous mode [ 38.907834][ T6494] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 38.913050][ T6494] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.947686][ T6490] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.954286][ T6489] veth0_macvtap: entered promiscuous mode [ 38.965171][ T6498] veth0_macvtap: entered promiscuous mode [ 38.967251][ T6498] veth1_macvtap: entered promiscuous mode [ 38.988595][ T6489] veth1_macvtap: entered promiscuous mode [ 39.026922][ T6498] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.032575][ T6490] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.036989][ T6489] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.038767][ T6498] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.041980][ T6498] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.042083][ T6498] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.042114][ T6498] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.042143][ T6498] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.058152][ T200] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.058252][ T200] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.059430][ T200] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.059479][ T200] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.067818][ T6495] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.085534][ T6489] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.112694][ T6489] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.112776][ T6489] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.112807][ T6489] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.112836][ T6489] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.132840][ T6494] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.145929][ T6495] veth0_vlan: entered promiscuous mode [ 39.179791][ T6495] veth1_vlan: entered promiscuous mode [ 39.224871][ T6494] veth0_vlan: entered promiscuous mode [ 39.272678][ T6494] veth1_vlan: entered promiscuous mode [ 39.301075][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.301160][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.306054][ T6495] veth0_macvtap: entered promiscuous mode [ 39.322996][ T309] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.323057][ T309] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.328439][ T6495] veth1_macvtap: entered promiscuous mode [ 39.332783][ T6490] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.364847][ T6494] veth0_macvtap: entered promiscuous mode [ 39.368438][ T6494] veth1_macvtap: entered promiscuous mode [ 39.383873][ T309] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.383933][ T309] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.391912][ T6494] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.395802][ T6494] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.405445][ T6495] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.411788][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.411850][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.428600][ T6494] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.438429][ T6494] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.441763][ T6494] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.441832][ T6494] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.449842][ T6495] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.456391][ T6495] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.459108][ T6495] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.461966][ T6495] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.464442][ T6495] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.567728][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.567791][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.577293][ T6498] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 39.669187][ T6490] veth0_vlan: entered promiscuous mode [ 39.686366][ T6490] veth1_vlan: entered promiscuous mode [ 39.774477][ T2133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.779569][ T2133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.799705][ T2133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.802654][ T2133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.813574][ T6490] veth0_macvtap: entered promiscuous mode [ 39.821738][ T6490] veth1_macvtap: entered promiscuous mode [ 39.916580][ T6490] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.918475][ T6490] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.931553][ T6490] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.931606][ T6490] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.933300][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.933338][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.933777][ T6490] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.933831][ T6490] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.972617][ T6587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.975479][ T6587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.086264][ T6591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.086596][ T6591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.363082][ T6595] netlink: 'syz.0.10': attribute type 1 has an invalid length. [ 40.409578][ T2133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.412475][ T2133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.433896][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.433977][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.529194][ T6598] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 40.790515][ T6502] Bluetooth: hci4: command tx timeout [ 40.790603][ T6502] Bluetooth: hci2: command tx timeout [ 40.790652][ T6502] Bluetooth: hci1: command tx timeout [ 40.790712][ T6502] Bluetooth: hci0: command tx timeout [ 40.797168][ T6493] Bluetooth: hci3: command tx timeout [ 40.803048][ T6605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.803348][ T6605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.854928][ T6608] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'. [ 40.857671][ T6608] gre0: entered promiscuous mode [ 40.859727][ T6608] gre0: entered allmulticast mode [ 40.865248][ T6608] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'. [ 40.908610][ T6611] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14'. [ 40.965895][ T6611] netlink: 'syz.4.14': attribute type 1 has an invalid length. [ 41.488280][ T6634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.488621][ T6634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.781263][ T6634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.781558][ T6634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.613587][ T6657] netlink: 5 bytes leftover after parsing attributes in process `syz.2.31'. [ 42.752571][ T6663] netlink: 'syz.4.35': attribute type 4 has an invalid length. [ 42.755605][ T6663] netlink: 17 bytes leftover after parsing attributes in process `syz.4.35'. [ 42.870380][ T6493] Bluetooth: hci3: command tx timeout [ 42.870411][ T6501] Bluetooth: hci0: command tx timeout [ 42.870487][ T6502] Bluetooth: hci1: command tx timeout [ 42.870546][ T6502] Bluetooth: hci2: command tx timeout [ 42.870579][ T6502] Bluetooth: hci4: command tx timeout [ 43.148384][ T6683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.148683][ T6683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.372535][ T6683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.372860][ T6683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.771888][ T6701] syz_tun: entered allmulticast mode [ 43.780405][ T6700] syz_tun: left allmulticast mode [ 43.947079][ T6710] netlink: 24 bytes leftover after parsing attributes in process `syz.0.55'. [ 44.002950][ T6709] af_packet: tpacket_rcv: packet too big, clamped from 42 to 4294967286. macoff=82 [ 44.172568][ T6726] netlink: 4 bytes leftover after parsing attributes in process `syz.1.61'. [ 44.231012][ T6729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.233807][ T6729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.427758][ T31] audit: type=1326 audit(44.010:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6688 comm="syz.2.46" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff8f5568bc code=0x7ffc0000 [ 44.436790][ T31] audit: type=1326 audit(44.010:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6688 comm="syz.2.46" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff8f5568bc code=0x7ffc0000 [ 44.445755][ T31] audit: type=1326 audit(44.010:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6688 comm="syz.2.46" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff8f5568bc code=0x7ffc0000 [ 44.445836][ T31] audit: type=1326 audit(44.020:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6688 comm="syz.2.46" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff8f5568bc code=0x7ffc0000 [ 44.445880][ T31] audit: type=1326 audit(44.020:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6688 comm="syz.2.46" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff8f5568bc code=0x7ffc0000 [ 44.445924][ T31] audit: type=1326 audit(44.020:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6688 comm="syz.2.46" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff8f5568bc code=0x7ffc0000 [ 44.445974][ T31] audit: type=1326 audit(44.020:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6688 comm="syz.2.46" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff8f5568bc code=0x7ffc0000 [ 44.446019][ T31] audit: type=1326 audit(44.020:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6688 comm="syz.2.46" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff8f5568bc code=0x7ffc0000 [ 44.446061][ T31] audit: type=1326 audit(44.020:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6688 comm="syz.2.46" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff8f5568bc code=0x7ffc0000 [ 44.446106][ T31] audit: type=1326 audit(44.020:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6688 comm="syz.2.46" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff8f5568bc code=0x7ffc0000 [ 44.651559][ T6742] netlink: 20 bytes leftover after parsing attributes in process `syz.0.66'. [ 44.950144][ T6501] Bluetooth: hci0: command tx timeout [ 44.950219][ T6501] Bluetooth: hci3: command tx timeout [ 44.950425][ T6501] Bluetooth: hci4: command tx timeout [ 44.950563][ T6501] Bluetooth: hci2: command tx timeout [ 44.950674][ T6501] Bluetooth: hci1: command tx timeout [ 44.970938][ T6726] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 44.974884][ T6726] team0 (unregistering): Port device team_slave_0 removed [ 44.986048][ T6726] team0 (unregistering): Failed to send options change via netlink (err -105) [ 44.989409][ T6726] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 44.994378][ T6726] team0 (unregistering): Port device team_slave_1 removed [ 45.066288][ T6750] IPv6: NLM_F_REPLACE set, but no existing node found! [ 45.286086][ T6782] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 45.286286][ T6782] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 45.451191][ T6791] usb usb8: usbfs: process 6791 (syz.0.80) did not claim interface 0 before use [ 46.381853][ T6827] batadv_slave_1: entered promiscuous mode [ 46.400985][ T6827] batadv_slave_1: left promiscuous mode [ 46.580128][ T6829] tipc: Started in network mode [ 46.580235][ T6829] tipc: Node identity ac14140f, cluster identity 4711 [ 46.580974][ T6829] tipc: New replicast peer: 255.255.255.255 [ 46.581724][ T6829] tipc: Enabled bearer , priority 10 [ 46.750751][ T6835] netlink: 312 bytes leftover after parsing attributes in process `syz.3.97'. [ 46.931575][ T6848] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 47.580659][ T1801] tipc: Node number set to 2886997007 [ 49.019502][ T6849] hsr0: entered promiscuous mode [ 49.021338][ T6849] hsr0: entered allmulticast mode [ 49.023167][ T6849] hsr_slave_0: entered allmulticast mode [ 49.025157][ T6849] hsr_slave_1: entered allmulticast mode [ 49.189739][ T6889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.194296][ T6889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.618005][ T6897] netlink: 'syz.1.116': attribute type 4 has an invalid length. [ 49.640394][ T6897] netlink: 'syz.1.116': attribute type 4 has an invalid length. [ 49.721072][ T6901] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.721775][ T6901] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.753112][ T6901] bridge0: entered promiscuous mode [ 49.753201][ T6901] bridge0: entered allmulticast mode [ 50.040324][ T6915] 8021q: VLANs not supported on ip6gre0 [ 50.739470][ T6934] vlan3: entered promiscuous mode [ 50.744690][ T6934] vlan2: entered promiscuous mode [ 50.746325][ T6934] gretap0: entered promiscuous mode [ 51.282192][ T1801] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 51.376467][ T6957] tipc: Enabling of bearer rejected, already enabled [ 51.445687][ T1801] usb 1-1: config 7 has an invalid interface number: 192 but max is 0 [ 51.448227][ T1801] usb 1-1: config 7 has no interface number 0 [ 51.450340][ T1801] usb 1-1: config 7 interface 192 has no altsetting 0 [ 51.454865][ T1801] usb 1-1: New USB device found, idVendor=09fb, idProduct=ebbe, bcdDevice=d4.8d [ 51.457565][ T1801] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.460629][ T1801] usb 1-1: Product: syz [ 51.461982][ T1801] usb 1-1: Manufacturer: syz [ 51.462035][ T1801] usb 1-1: SerialNumber: syz [ 51.956176][ T1801] usb 1-1: USB disconnect, device number 2 [ 52.002734][ T6979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.005626][ T6979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.370396][ T6986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.370712][ T6986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.435230][ T6988] Zero length message leads to an empty skb [ 52.473388][ T6989] tls_set_device_offload_rx: netdev not found [ 52.703995][ T6999] ------------[ cut here ]------------ [ 52.704090][ T6999] WARNING: CPU: 1 PID: 6999 at mm/vma.c:1240 vms_complete_munmap_vmas+0x694/0x7e4 [ 52.708308][ T6999] Modules linked in: [ 52.709405][ T6999] CPU: 1 UID: 0 PID: 6999 Comm: syz.4.155 Not tainted 6.15.0-rc7-syzkaller-gd7fa1af5b33e #0 PREEMPT [ 52.712408][ T6999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 52.715220][ T6999] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 52.717296][ T6999] pc : vms_complete_munmap_vmas+0x694/0x7e4 [ 52.718936][ T6999] lr : vms_complete_munmap_vmas+0x694/0x7e4 [ 52.720562][ T6999] sp : ffff8000a1be7510 [ 52.721670][ T6999] x29: ffff8000a1be7560 x28: ffff0000c71f4400 x27: 0000000000000600 [ 52.723922][ T6999] x26: ffff0000c71f4678 x25: ffff8000a1be77a0 x24: ffff0000c71f4670 [ 52.726121][ T6999] x23: ffff8000a1be7798 x22: 0000000000000021 x21: 0000000000006337 [ 52.728342][ T6999] x20: 1ffff0001437cef0 x19: dfff800000000000 x18: 00000000ffffffff [ 52.730535][ T6999] x17: ffff800080a5ed84 x16: ffff80008adbe9e4 x15: 0000000000000001 [ 52.732742][ T6999] x14: 0000000000000002 x13: 0000000000000003 x12: 0000000000ff0100 [ 52.734907][ T6999] x11: 0000000000080000 x10: 000000000000565d x9 : ffff8000a50fd000 [ 52.737176][ T6999] x8 : 000000000000565e x7 : ffff80008022b53c x6 : ffff80008022b738 [ 52.739389][ T6999] x5 : ffff0000f07735a8 x4 : ffff8000a1be6bc8 x3 : 0000000000000000 [ 52.741572][ T6999] x2 : 0000000000000001 x1 : 0000000000000021 x0 : 0000000000000600 [ 52.743807][ T6999] Call trace: [ 52.744691][ T6999] vms_complete_munmap_vmas+0x694/0x7e4 (P) [ 52.746348][ T6999] mmap_region+0x674/0x1a24 [ 52.747585][ T6999] do_mmap+0x968/0xf78 [ 52.748700][ T6999] vm_mmap_pgoff+0x2b8/0x43c [ 52.750012][ T6999] ksys_mmap_pgoff+0x400/0x5b8 [ 52.751377][ T6999] __arm64_sys_mmap+0xf8/0x110 [ 52.752668][ T6999] invoke_syscall+0x98/0x2b8 [ 52.753895][ T6999] el0_svc_common+0x130/0x23c [ 52.755200][ T6999] do_el0_svc+0x48/0x58 [ 52.756382][ T6999] el0_svc+0x58/0x17c [ 52.757515][ T6999] el0t_64_sync_handler+0x78/0x108 [ 52.758901][ T6999] el0t_64_sync+0x198/0x19c [ 52.760158][ T6999] irq event stamp: 912 [ 52.761260][ T6999] hardirqs last enabled at (911): [] call_rcu+0x650/0x96c [ 52.763701][ T6999] hardirqs last disabled at (912): [] el1_dbg+0x24/0x80 [ 52.766086][ T6999] softirqs last enabled at (772): [] local_bh_enable+0x10/0x34 [ 52.768778][ T6999] softirqs last disabled at (770): [] local_bh_disable+0x10/0x34 [ 52.771417][ T6999] ---[ end trace 0000000000000000 ]---