last executing test programs: 13.246677991s ago: executing program 0 (id=212): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@mss, @sack_perm, @timestamp, @sack_perm, @window={0x3, 0x0, 0xfffc}, @window={0x3, 0x0, 0x3ff}, @timestamp, @timestamp], 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='westwood\x00', 0x9) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 12.332831791s ago: executing program 0 (id=241): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r0, 0x0, 0xfe29) write$ppp(r0, &(0x7f0000000200)="bc72", 0x2) 12.018241241s ago: executing program 0 (id=251): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x5) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1) 11.859786916s ago: executing program 2 (id=255): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd020f4c0c8c56147d66527da307bf731fef97861750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3665f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447c2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0000000000000003629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d7b90dfae158b94f50adab988dd8e12b1b56073d0d10f7067c881434af5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf77bfc95769a9294df517d90bdc01e73835efd98ad5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b31592479ecf2392548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbe1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5646ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4766e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec859c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f250057931d828ec78e116ae46c4897e2795b6ff92e9a1f63a6ed8fb4f8f3a6ec4e76f8621e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403f02734137ff47257f164391c673b6071b6ad0f05eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb79f5589829b6b0679b5d65a81826fc9b38f791c8f1892b51ad65a89bc84646ebf78f5d5d4804d9abb071fd711b5e7cc163b42a6510b8f5ee6747df0b560eabe0499bf1fef7c18bb9f55effa018679845c6598fb78bf1b8d9d9f04a5f6062c2bbb91952755b3f7c948268cb647d0a0bb1286480615941154a01d23734bcafe3b164474e2f2efa77850686ee4541f3e79efa63545a7ae53d5f0c40cc86473f7eb093980bd0d97bb4750128d9c519984c5f731ea259e71b2f12d67ce12e52c283e74594dfc933e625737ed231d61263721d46daf093f770357cd78fe1431aef52b4a0a933f1a5334ad03f3876fc8a8e187f80318427b4c922075cf829e3cc49d71d52137b48e1fb6b05dd1c7b251a7059f0a4b4f3431f67fc65b75c202e43816e34ff41db85bacd77b25242830b788ae1e00"/2566], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) 11.746502315s ago: executing program 2 (id=258): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)={0x10, 0x2d, 0x1}, 0x10}], 0x1}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) 11.690806314s ago: executing program 1 (id=260): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0xfffffffc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x28, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x10) socket(0x23, 0x6, 0x10) bind$inet6(r0, 0x0, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$kcm(0xa, 0x3, 0x3a) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, 0x0, 0x0) 11.690633925s ago: executing program 2 (id=261): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}}}, 0x108) close(r0) 11.642649757s ago: executing program 3 (id=262): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) sendto$inet6(r1, &(0x7f0000000080)="85", 0x1, 0x890, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x4}, 0x8) 11.600586813s ago: executing program 3 (id=263): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) sendmmsg(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24008080) 11.569004851s ago: executing program 1 (id=264): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c000000330007ff7f0000000000000003"], 0x2c}, 0x1, 0x0, 0x0, 0x28000}, 0x0) 11.534366721s ago: executing program 1 (id=265): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000004c0)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x1d, 0x0, @local, @dev}}}}}}, 0x0) 11.5327855s ago: executing program 4 (id=266): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a010200"], 0x14}}, 0x0) 11.531864571s ago: executing program 3 (id=267): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000780)={0x0, 0xefb, "e721bc", 0x2, 0x1}) 11.486677063s ago: executing program 2 (id=268): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC(r0, 0x0, 0xcd, &(0x7f0000000000)={@dev={0xac, 0x14, 0x14, 0x43}, @dev={0xac, 0x14, 0x14, 0x44}, 0x4, "957b0a386101819797d7c1bd75f5fe54f049ddca5f0c5c9bc539d170cf2e21f5", 0xfd0, 0x3504, 0x4, 0x9}, 0x3c) 11.460346309s ago: executing program 4 (id=269): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080)={r2, 0x8001}, 0x8) getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) 11.459453536s ago: executing program 2 (id=270): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, 0x0, &(0x7f00000000c0)}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'macvlan1\x00'}) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f00000000c0)="17000000020001000003be8c5ee17688a2003308030300ecff3f0200000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59", 0x4f) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x143082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000d00)=[{&(0x7f0000000100)="89e7ee2c7cdad9b4b47380c988ca", 0x280}], 0x1) 11.390597052s ago: executing program 1 (id=271): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001300)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x1c0, 0xc8, 0x8, 0x1c0, 0x5803, 0x340, 0x2e8, 0x2e8, 0x340, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @local, [0xffffffff], [0x0, 0x0, 0x0, 0xffffff00], 'vlan0\x00', 'geneve1\x00', {}, {}, 0x33, 0x0, 0x6}, 0x0, 0x190, 0x1c0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x2, {0xfffffffffffffffe}}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x98, 0x5df5, 0x800}}}, {{@ipv6={@mcast2, @private0, [0x0, 0x0, 0xff], [], 'batadv_slave_1\x00', 'bridge_slave_0\x00', {}, {}, 0x0, 0x0, 0x0, 0xc}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x1ff, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5], 0xff}}, @inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x6, 0x6, 0x1, 0x9, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470) syz_emit_ethernet(0x196, &(0x7f0000001680)=ANY=[@ANYBLOB="0180c2000000ece65fbcee5586dd6001010001603a00fe8000000000000000000000000000bbfe8000000000000000000000000000aa"], 0x0) 11.356728407s ago: executing program 1 (id=272): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="1c0000f500000200000000000000fc778f76"], 0x66) 11.145071309s ago: executing program 0 (id=273): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e22, @loopback}}, 0x0, 0x0, 0x2f, 0x0, "aeac5a3c68f42c3bc2588786923fbd2ca19a1928c0f8ecb022866e4fd294eebb0f48e5abbf19f4406208696ae22f3efaa63ffe0b405d6573074243645a51a1654405b6b275875942f5b94b0469a22208"}, 0xd8) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) 10.622613754s ago: executing program 3 (id=274): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fddbdf252100000008000300", @ANYRES32=r2, @ANYBLOB="14002c8008ee00"], 0x30}, 0x1, 0x0, 0x0, 0x20000010}, 0x40000) 10.573971508s ago: executing program 4 (id=275): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="840000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03010000a12001001400128009000100626f6e6400000000040002803c001280110001006272696467655f736c6176650000000024000580050019000300000005001c000100000005000800000000000800030002b56800140003006272696467655f736c6176655f300000"], 0x84}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 10.278230868s ago: executing program 0 (id=276): r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)={0x28, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) 141.447715ms ago: executing program 3 (id=277): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100), 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e24, 0x0, @private1={0xfc, 0x1, '\x00', 0xfe}, 0x2}}, 0x0, 0x0, 0x4, 0x0, "a1c1dd75a6843e10951cd4b347113e55eb499519becf7542c90bc21470e441225642855b5f2faed4a18d67efd5f2fdf98328de94410300"}, 0xd8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x1, @mcast2, 0x4}}, 0x0, 0x0, 0x11, 0x0, "2b20a9a47cddc63b223be606d7fa19f22a369ae751de81ca4d11e10450d766feb63b382d54ba4bb57a219cad5ddfc1e4fe760a1ce2ca64196953e92a07b3937730a33b6deca160d8c2fbff48eb964283"}, 0xd8) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 139.760117ms ago: executing program 4 (id=278): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv4_newrule={0x1c, 0x20, 0x301}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x3, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[], 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r0, &(0x7f00000000c0)="8f2a0a65bd8c022b0304000e0580a7b6070d63e286a5cefe", 0x5ac) 54.712508ms ago: executing program 2 (id=279): unshare(0x42000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0xa, 0x2, 0x3a) 54.521741ms ago: executing program 4 (id=280): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@delchain={0x3c, 0x64, 0xf31, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x6}, {0x10, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_FLAGS_MASK={0x8, 0x30, 0xa56}]}}]}, 0x3c}}, 0x1000000) 48.818469ms ago: executing program 3 (id=281): socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000140)={0xfffffffd, 0x20000}, 0x8) close(r1) 47.6042ms ago: executing program 1 (id=282): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) syz_emit_ethernet(0x5c, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x26, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc, 0x6, 0x1, 0x4, 0xe, 0x6}]}}, {"1ababf625d62"}}}}}}}, 0x0) 5.437591ms ago: executing program 4 (id=283): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x6f, &(0x7f0000000180)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x4d, 0x0, @wg=@data={0x4, 0x2, 0x3, "fbd7a51dff1cb991842d8a7886b1407c60d1f72567f10b9d8e3c769754d8438a006e85f30c0c1e05862815b74ce3526e9916d4f62c"}}}}}}, 0x0) 0s ago: executing program 0 (id=284): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@dev}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x0}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x4400046, r3}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000540)={@empty, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r5}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.3' (ED25519) to the list of known hosts. [ 32.308454][ T6428] cgroup: Unknown subsys name 'net' [ 32.550860][ T6428] cgroup: Unknown subsys name 'cpuset' [ 32.554561][ T6428] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 32.878429][ T6428] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 34.329119][ T6445] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 34.333764][ T6451] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 34.335736][ T6451] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 34.338088][ T6451] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 34.340033][ T6451] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 34.350577][ T6452] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 34.353252][ T6454] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 34.355075][ T6454] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 34.357712][ T6454] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 34.360289][ T6452] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 34.360301][ T6454] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 34.361893][ T6452] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 34.364443][ T6454] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 34.365525][ T6452] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 34.369041][ T6454] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 34.369585][ T6452] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 34.371444][ T6454] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 34.373742][ T6452] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 34.374335][ T6454] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 34.375889][ T6452] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 34.378298][ T6454] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 34.379576][ T6452] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 34.381527][ T6454] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 34.384445][ T6456] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 34.386111][ T6456] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 34.387162][ T6452] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 34.391197][ T6452] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 34.393280][ T6452] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 34.396093][ T6458] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 34.399110][ T6448] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 34.690221][ T6443] chnl_net:caif_netlink_parms(): no params data found [ 34.694060][ T6453] chnl_net:caif_netlink_parms(): no params data found [ 34.720903][ T6442] chnl_net:caif_netlink_parms(): no params data found [ 34.724496][ T6440] chnl_net:caif_netlink_parms(): no params data found [ 34.812854][ T6441] chnl_net:caif_netlink_parms(): no params data found [ 34.855930][ T6443] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.858340][ T6443] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.860165][ T6443] bridge_slave_0: entered allmulticast mode [ 34.862245][ T6443] bridge_slave_0: entered promiscuous mode [ 34.890767][ T6443] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.892587][ T6443] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.894379][ T6443] bridge_slave_1: entered allmulticast mode [ 34.896252][ T6443] bridge_slave_1: entered promiscuous mode [ 34.926012][ T6453] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.927964][ T6453] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.929755][ T6453] bridge_slave_0: entered allmulticast mode [ 34.931716][ T6453] bridge_slave_0: entered promiscuous mode [ 34.950296][ T6443] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.957137][ T6453] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.959408][ T6453] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.961299][ T6453] bridge_slave_1: entered allmulticast mode [ 34.963273][ T6453] bridge_slave_1: entered promiscuous mode [ 34.980167][ T6440] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.982057][ T6440] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.983931][ T6440] bridge_slave_0: entered allmulticast mode [ 34.985939][ T6440] bridge_slave_0: entered promiscuous mode [ 34.993809][ T6441] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.995617][ T6441] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.998009][ T6441] bridge_slave_0: entered allmulticast mode [ 35.000242][ T6441] bridge_slave_0: entered promiscuous mode [ 35.003826][ T6443] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.006224][ T6441] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.008556][ T6441] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.010468][ T6441] bridge_slave_1: entered allmulticast mode [ 35.012459][ T6441] bridge_slave_1: entered promiscuous mode [ 35.014467][ T6442] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.016257][ T6442] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.018329][ T6442] bridge_slave_0: entered allmulticast mode [ 35.020213][ T6442] bridge_slave_0: entered promiscuous mode [ 35.022914][ T6442] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.024765][ T6442] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.026693][ T6442] bridge_slave_1: entered allmulticast mode [ 35.029177][ T6442] bridge_slave_1: entered promiscuous mode [ 35.032456][ T6453] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.035180][ T6440] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.037165][ T6440] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.039763][ T6440] bridge_slave_1: entered allmulticast mode [ 35.042017][ T6440] bridge_slave_1: entered promiscuous mode [ 35.064053][ T6453] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.099334][ T6440] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.103535][ T6443] team0: Port device team_slave_0 added [ 35.106486][ T6440] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.111437][ T6441] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.114957][ T6442] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.119445][ T6441] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.123325][ T6453] team0: Port device team_slave_0 added [ 35.125758][ T6443] team0: Port device team_slave_1 added [ 35.133348][ T6442] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.145415][ T6453] team0: Port device team_slave_1 added [ 35.167342][ T6441] team0: Port device team_slave_0 added [ 35.170593][ T6441] team0: Port device team_slave_1 added [ 35.187411][ T6440] team0: Port device team_slave_0 added [ 35.191381][ T6440] team0: Port device team_slave_1 added [ 35.199253][ T6442] team0: Port device team_slave_0 added [ 35.205280][ T6443] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.207075][ T6443] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.215007][ T6443] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.219704][ T6443] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.221547][ T6443] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.228555][ T6443] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.232207][ T6453] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.233973][ T6453] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.240787][ T6453] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.244589][ T6442] team0: Port device team_slave_1 added [ 35.246589][ T6453] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.250097][ T6453] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.256814][ T6453] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.269426][ T6440] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.271346][ T6440] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.282316][ T6440] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.290705][ T6441] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.292740][ T6441] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.300309][ T6441] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.318715][ T6440] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.320516][ T6440] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.327021][ T6440] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.339684][ T6441] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.341503][ T6441] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.352552][ T6441] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.360515][ T6442] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.362480][ T6442] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.373690][ T6442] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.384795][ T6440] hsr_slave_0: entered promiscuous mode [ 35.386985][ T6440] hsr_slave_1: entered promiscuous mode [ 35.404109][ T6442] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.405958][ T6442] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.413217][ T6442] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.447744][ T6441] hsr_slave_0: entered promiscuous mode [ 35.449718][ T6441] hsr_slave_1: entered promiscuous mode [ 35.451684][ T6441] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 35.453769][ T6441] Cannot create hsr debugfs directory [ 35.464322][ T6443] hsr_slave_0: entered promiscuous mode [ 35.466217][ T6443] hsr_slave_1: entered promiscuous mode [ 35.472485][ T6443] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 35.474386][ T6443] Cannot create hsr debugfs directory [ 35.477957][ T6453] hsr_slave_0: entered promiscuous mode [ 35.480513][ T6453] hsr_slave_1: entered promiscuous mode [ 35.482223][ T6453] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 35.484012][ T6453] Cannot create hsr debugfs directory [ 35.519899][ T6442] hsr_slave_0: entered promiscuous mode [ 35.521828][ T6442] hsr_slave_1: entered promiscuous mode [ 35.523573][ T6442] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 35.525652][ T6442] Cannot create hsr debugfs directory [ 35.713827][ T6440] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 35.719063][ T6440] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 35.749126][ T6440] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 35.754746][ T6440] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 35.797180][ T6443] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 35.800963][ T6443] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 35.804816][ T6443] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 35.814631][ T6443] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 35.848385][ T6441] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 35.862251][ T6441] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 35.879503][ T6441] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 35.886059][ T6453] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 35.895204][ T6453] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 35.899931][ T6453] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 35.903887][ T6453] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 35.907429][ T6441] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 35.956718][ T6440] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.969026][ T6442] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 35.973575][ T6442] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 35.983012][ T6442] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 35.986470][ T6442] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 36.007237][ T6443] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.017102][ T6443] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.030360][ T336] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.032362][ T336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.042721][ T6440] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.050932][ T336] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.052769][ T336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.066192][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.068158][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.095572][ T336] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.097405][ T336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.177149][ T6453] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.195744][ T6453] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.222945][ T6441] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.243255][ T6443] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.254436][ T336] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.256240][ T336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.276579][ T4575] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.278439][ T4575] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.296244][ T6442] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.316070][ T6440] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.325153][ T6442] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.354616][ T4575] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.356475][ T4575] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.365255][ T4575] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.367137][ T4575] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.393486][ T6443] veth0_vlan: entered promiscuous mode [ 36.401535][ T6441] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.419350][ T6451] Bluetooth: hci0: command tx timeout [ 36.421059][ T6451] Bluetooth: hci3: command tx timeout [ 36.422569][ T6451] Bluetooth: hci2: command tx timeout [ 36.423000][ T6443] veth1_vlan: entered promiscuous mode [ 36.424187][ T6451] Bluetooth: hci1: command tx timeout [ 36.473021][ T6443] veth0_macvtap: entered promiscuous mode [ 36.477394][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.479266][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.498238][ T6458] Bluetooth: hci4: command tx timeout [ 36.499697][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.499753][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.520424][ T6441] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 36.545280][ T6443] veth1_macvtap: entered promiscuous mode [ 36.563876][ T6453] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.601793][ T6453] veth0_vlan: entered promiscuous mode [ 36.606800][ T6453] veth1_vlan: entered promiscuous mode [ 36.640776][ T6440] veth0_vlan: entered promiscuous mode [ 36.646073][ T6443] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.664284][ T6441] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.669434][ T6453] veth0_macvtap: entered promiscuous mode [ 36.674739][ T6453] veth1_macvtap: entered promiscuous mode [ 36.682129][ T6442] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.689069][ T6440] veth1_vlan: entered promiscuous mode [ 36.691898][ T6443] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.702676][ T6443] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.705103][ T6443] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.707302][ T6443] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.710567][ T6443] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.746811][ T6453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.751715][ T6453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.755419][ T6453] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.758821][ T6453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.761871][ T6453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.765051][ T6453] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.790439][ T6453] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.792732][ T6453] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.794958][ T6453] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.797149][ T6453] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.825836][ T6441] veth0_vlan: entered promiscuous mode [ 36.840185][ T6440] veth0_macvtap: entered promiscuous mode [ 36.843379][ T6441] veth1_vlan: entered promiscuous mode [ 36.845523][ T6440] veth1_macvtap: entered promiscuous mode [ 36.851743][ T6442] veth0_vlan: entered promiscuous mode [ 36.865315][ T6442] veth1_vlan: entered promiscuous mode [ 36.906984][ T6440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.910774][ T6440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.913172][ T6440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.915711][ T6440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.919554][ T6440] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.925204][ T6440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.928536][ T6440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.931052][ T6440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.933667][ T6440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.936725][ T6440] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.944394][ T336] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.946409][ T336] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.950459][ T6441] veth0_macvtap: entered promiscuous mode [ 36.954172][ T6441] veth1_macvtap: entered promiscuous mode [ 36.979085][ T6442] veth0_macvtap: entered promiscuous mode [ 36.982847][ T6442] veth1_macvtap: entered promiscuous mode [ 36.985048][ T6441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.989787][ T6441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.992402][ T6441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.995887][ T6441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.999261][ T6441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.001795][ T6441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.005002][ T6441] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.014933][ T1449] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.016929][ T1449] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.019652][ T336] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.021419][ T6441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.021616][ T336] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.024232][ T6441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.032128][ T6441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.035022][ T6441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.038456][ T6441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.041159][ T6441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.044316][ T6441] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.046642][ T6440] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.049491][ T6440] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.051641][ T6440] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.053811][ T6440] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.062554][ T6442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.065529][ T6442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.069087][ T6442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.071616][ T6442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.074536][ T6442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.077276][ T6442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.080361][ T6442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.083025][ T6442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.087158][ T6442] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.115688][ T6442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.119041][ T6442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.121608][ T6442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.124392][ T6442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.126783][ T6442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.133340][ T6442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.135805][ T6442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.140478][ T6442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.144044][ T6442] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.149081][ T6441] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.151408][ T6441] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.153547][ T6441] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.155819][ T6441] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.165735][ T336] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.169090][ T6443] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 37.177029][ T336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.203451][ T6442] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.205691][ T6442] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.219756][ T6442] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.222368][ T6442] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.384801][ T336] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.400776][ T336] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.418197][ T4529] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.420213][ T4529] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.034029][ T4575] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.036119][ T4575] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.107973][ T1449] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.110008][ T1449] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.156543][ T1449] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.162719][ T1449] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.230859][ T4575] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.240376][ T4575] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.498136][ T6458] Bluetooth: hci1: command tx timeout [ 38.499912][ T6458] Bluetooth: hci2: command tx timeout [ 38.501774][ T6458] Bluetooth: hci3: command tx timeout [ 38.503566][ T6458] Bluetooth: hci0: command tx timeout [ 38.578032][ T53] Bluetooth: hci4: command tx timeout [ 39.100571][ T6547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.102937][ T6547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.206568][ T6553] loop3: detected capacity change from 0 to 1024 [ 39.215376][ T6553] EXT4-fs: Ignoring removed nobh option [ 39.216881][ T6553] EXT4-fs: Ignoring removed nomblk_io_submit option [ 40.225026][ T6553] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.253494][ T53] Bluetooth: hci0: command tx timeout [ 41.254948][ T53] Bluetooth: hci3: command tx timeout [ 41.255152][ T6458] Bluetooth: hci2: command tx timeout [ 41.256363][ T53] Bluetooth: hci1: command tx timeout [ 41.257785][ T6451] Bluetooth: hci4: command tx timeout [ 41.331154][ T6572] loop4: detected capacity change from 0 to 512 [ 41.494630][ T6574] loop1: detected capacity change from 0 to 8 [ 42.247166][ T6574] SQUASHFS error: zlib decompression failed, data probably corrupt [ 42.249503][ T6574] SQUASHFS error: Failed to read block 0x9b: -5 [ 42.251079][ T6574] SQUASHFS error: Unable to read metadata cache entry [99] [ 42.252817][ T6574] SQUASHFS error: Unable to read inode 0x127 [ 42.348331][ T6443] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.606332][ T6572] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.620386][ T6585] loop3: detected capacity change from 0 to 512 [ 43.391262][ T6458] Bluetooth: hci2: command tx timeout [ 43.392471][ T6451] Bluetooth: hci4: command tx timeout [ 43.392773][ T6458] Bluetooth: hci1: command tx timeout [ 43.394112][ T6451] Bluetooth: hci3: command tx timeout [ 43.395394][ T6458] Bluetooth: hci0: command tx timeout [ 43.486705][ T6585] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.082146][ T6440] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.547949][ T6604] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 45.008200][ T6443] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.338092][ T6612] loop4: detected capacity change from 0 to 256 [ 45.587966][ T6615] Zero length message leads to an empty skb [ 45.858821][ T6611] loop1: detected capacity change from 0 to 256 [ 45.869725][ T6611] exfat: Bad value for 'fmask' [ 46.702283][ T6624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.706056][ T6624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.899725][ T6621] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20'. [ 46.909842][ T6621] vcan0: entered promiscuous mode [ 46.916031][ T6621] vcan0: entered allmulticast mode [ 47.935845][ T6638] Bluetooth: MGMT ver 1.23 [ 48.256028][ T6652] xt_hashlimit: max too large, truncated to 1048576 [ 48.259663][ T6652] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 48.797147][ T6651] loop2: detected capacity change from 0 to 512 [ 48.799329][ T6651] EXT4-fs: inline encryption not supported [ 48.822013][ T6651] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 48.832017][ T6651] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 48.834577][ T6651] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.27: Corrupt directory, running e2fsck is recommended [ 48.864921][ T6651] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 48.872784][ T6651] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.27: corrupted in-inode xattr: invalid ea_ino [ 48.877212][ T6651] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.27: couldn't read orphan inode 15 (err -117) [ 48.882149][ T6651] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.908219][ T6651] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 48.911296][ T6651] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 48.914000][ T6651] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.27: Corrupt directory, running e2fsck is recommended [ 48.958607][ T6663] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 49.002225][ T6663] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 49.004874][ T6663] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.27: Corrupt directory, running e2fsck is recommended [ 49.085550][ T6651] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 49.105750][ T6651] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 49.140270][ T6663] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 49.143154][ T6663] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 49.557560][ T6672] loop3: detected capacity change from 0 to 1024 [ 50.077616][ T6458] Bluetooth: hci0: command 0x0c1a tx timeout [ 50.079333][ T53] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 51.019419][ T6672] hfsplus: invalid extent max_key_len 0 [ 51.021363][ T6672] hfsplus: failed to load extents file [ 51.846489][ T6441] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.210292][ T6715] netlink: 4 bytes leftover after parsing attributes in process `syz.2.47'. [ 53.361143][ T6715] veth0: entered promiscuous mode [ 53.362641][ T6715] veth0: entered allmulticast mode [ 55.570071][ T6741] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 57.057743][ T6761] vlan2: entered promiscuous mode [ 57.059052][ T6761] veth1_to_batadv: entered promiscuous mode [ 57.070230][ T6761] veth1_to_batadv: left promiscuous mode [ 58.065546][ T6769] loop2: detected capacity change from 0 to 128 [ 58.253533][ T6771] loop1: detected capacity change from 0 to 512 [ 58.291243][ T6771] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 58.294692][ T6771] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 58.350882][ T6771] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2863: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 58.354667][ T6771] EXT4-fs (loop1): 1 truncate cleaned up [ 58.359695][ T6771] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.680267][ T6774] loop0: detected capacity change from 0 to 256 [ 58.682230][ T6774] ======================================================= [ 58.682230][ T6774] WARNING: The mand mount option has been deprecated and [ 58.682230][ T6774] and is ignored by this kernel. Remove the mand [ 58.682230][ T6774] option from the mount to silence this warning. [ 58.682230][ T6774] ======================================================= [ 58.697747][ T6774] msdos: Bad value for 'time_offset' [ 58.713687][ T6442] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.737767][ T6769] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 58.770319][ T6777] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 59.224319][ T6441] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 59.627920][ T6785] loop0: detected capacity change from 0 to 8 [ 59.699588][ T6788] warning: `syz.1.68' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 62.633116][ T6851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.649232][ T6851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.380429][ T53] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 63.543679][ T6872] netlink: 4 bytes leftover after parsing attributes in process `syz.4.90'. [ 64.076648][ T53] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 64.079466][ T53] Bluetooth: hci1: Injecting HCI hardware error event [ 64.082748][ T6458] Bluetooth: hci1: hardware error 0x00 [ 65.058489][ T2361] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.060428][ T2361] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.836808][ T6881] Illegal XDP return value 4294967294 on prog (id 4) dev N/A, expect packet loss! [ 66.305915][ T6887] process 'syz.2.94' launched '/dev/fd/7' with NULL argv: empty string added [ 67.075732][ T30] audit: type=1326 audit(67.050:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6900 comm="syz.1.103" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82b59a68 code=0x7ffc0000 [ 67.087438][ T30] audit: type=1326 audit(67.060:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6900 comm="syz.1.103" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=59 compat=0 ip=0xffff82b59a68 code=0x7ffc0000 [ 67.099711][ T30] audit: type=1326 audit(67.060:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6900 comm="syz.1.103" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82b59a68 code=0x7ffc0000 [ 67.111240][ T30] audit: type=1326 audit(67.060:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6900 comm="syz.1.103" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffff82b59a68 code=0x7ffc0000 [ 67.121657][ T30] audit: type=1326 audit(67.060:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6900 comm="syz.1.103" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82b59a68 code=0x7ffc0000 [ 67.132248][ T30] audit: type=1326 audit(67.060:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6900 comm="syz.1.103" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82b59a68 code=0x7ffc0000 [ 67.142461][ T30] audit: type=1326 audit(67.060:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6900 comm="syz.1.103" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=187 compat=0 ip=0xffff82b59a68 code=0x7ffc0000 [ 67.284401][ T30] audit: type=1326 audit(67.060:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6900 comm="syz.1.103" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82b59a68 code=0x7ffc0000 [ 67.290822][ T30] audit: type=1326 audit(67.250:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6904 comm="syz.4.105" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3f59a68 code=0x7ffc0000 [ 67.298438][ T6494] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 67.300608][ T30] audit: type=1326 audit(67.250:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6904 comm="syz.4.105" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3f59a68 code=0x7ffc0000 [ 67.661660][ T6494] usb 1-1: Using ep0 maxpacket: 32 [ 67.772576][ T6494] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 67.776927][ T6494] usb 1-1: config 0 has no interface number 0 [ 67.779687][ T6494] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 67.824920][ T6494] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 67.879955][ T6494] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.939222][ T6494] usb 1-1: Product: syz [ 67.951072][ T6494] usb 1-1: Manufacturer: syz [ 67.953501][ T6494] usb 1-1: SerialNumber: syz [ 68.007297][ T6494] usb 1-1: config 0 descriptor?? [ 68.025434][ T6494] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 68.028366][ T6494] em28xx 1-1:0.132: Video interface 132 found: [ 68.107725][ T6458] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 68.287369][ T6918] syz.1.108 uses obsolete (PF_INET,SOCK_PACKET) [ 68.290488][ T6918] syzkaller1: entered promiscuous mode [ 68.292024][ T6918] syzkaller1: entered allmulticast mode [ 68.349607][ T6458] Bluetooth: hci4: command 0x0405 tx timeout [ 68.433816][ T6494] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 69.827893][ T1780] cfg80211: failed to load regulatory.db [ 70.617592][ T6494] em28xx 1-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5) [ 70.619928][ T6494] em28xx 1-1:0.132: failed to read eeprom (err=-5) [ 70.621473][ T6494] em28xx 1-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 70.714731][ T6941] loop3: detected capacity change from 0 to 1024 [ 70.788413][ T6945] netlink: 12 bytes leftover after parsing attributes in process `syz.0.116'. [ 71.043864][ T6494] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 71.045913][ T6494] em28xx 1-1:0.132: analog set to bulk mode. [ 71.049811][ T1780] em28xx 1-1:0.132: Registering V4L2 extension [ 71.071011][ T6494] usb 1-1: USB disconnect, device number 2 [ 71.096577][ T6494] em28xx 1-1:0.132: Disconnecting em28xx [ 71.096673][ T6941] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.134218][ T6443] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.277779][ T1780] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 71.279743][ T1780] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 71.281551][ T1780] em28xx 1-1:0.132: No AC97 audio processor [ 71.301732][ T1780] usb 1-1: Decoder not found [ 71.302915][ T1780] em28xx 1-1:0.132: failed to create media graph [ 71.304593][ T1780] em28xx 1-1:0.132: V4L2 device video11 deregistered [ 71.332131][ T1780] em28xx 1-1:0.132: Remote control support is not available for this card. [ 71.334395][ T6494] em28xx 1-1:0.132: Closing input extension [ 71.343153][ T6494] em28xx 1-1:0.132: Freeing device [ 71.506561][ T6973] netlink: 4 bytes leftover after parsing attributes in process `syz.0.124'. [ 71.511437][ T6973] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.513302][ T6973] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 71.519403][ T6973] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.521288][ T6973] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 71.652507][ T6974] tipc: Started in network mode [ 71.653853][ T6974] tipc: Node identity ffffffff, cluster identity 4711 [ 71.655497][ T6974] tipc: Node number set to 4294967295 [ 72.435324][ T7017] netlink: 'syz.0.136': attribute type 12 has an invalid length. [ 72.437225][ T7017] netlink: 'syz.0.136': attribute type 29 has an invalid length. [ 72.465829][ T7017] netlink: 148 bytes leftover after parsing attributes in process `syz.0.136'. [ 72.477709][ T7017] netlink: 'syz.0.136': attribute type 2 has an invalid length. [ 72.479666][ T7017] netlink: 'syz.0.136': attribute type 3 has an invalid length. [ 72.481466][ T7017] netlink: 35 bytes leftover after parsing attributes in process `syz.0.136'. [ 72.723656][ T7038] vlan2: entered allmulticast mode [ 72.725054][ T7038] bond0: entered allmulticast mode [ 72.726294][ T7038] bond_slave_0: entered allmulticast mode [ 72.749584][ T7038] bond_slave_1: entered allmulticast mode [ 72.755046][ T7038] bridge0: port 3(vlan2) entered blocking state [ 72.756852][ T7038] bridge0: port 3(vlan2) entered disabled state [ 72.759967][ T7038] vlan2: entered promiscuous mode [ 72.761363][ T7038] bond0: entered promiscuous mode [ 72.762717][ T7038] bond_slave_0: entered promiscuous mode [ 72.764309][ T7038] bond_slave_1: entered promiscuous mode [ 72.766807][ T7038] bridge0: port 3(vlan2) entered blocking state [ 72.768740][ T7038] bridge0: port 3(vlan2) entered forwarding state [ 73.079596][ T7067] netlink: 'syz.0.153': attribute type 1 has an invalid length. [ 73.096225][ T7067] netlink: 224 bytes leftover after parsing attributes in process `syz.0.153'. [ 73.345161][ T7091] netlink: 8 bytes leftover after parsing attributes in process `syz.0.163'. [ 73.515029][ T7109] gtp0: entered promiscuous mode [ 74.396772][ T7189] sch_tbf: burst 6 is lower than device lo mtu (65550) ! [ 75.175729][ T7264] netlink: 12 bytes leftover after parsing attributes in process `syz.0.210'. [ 75.660623][ T7238] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 75.922429][ T7318] netlink: 12 bytes leftover after parsing attributes in process `syz.3.233'. [ 75.925163][ T7318] smc: net device bond0 applied user defined pnetid SY [ 76.897790][ T6458] Bluetooth: hci0: command 0x0c1a tx timeout [ 77.071637][ T7411] tipc: Started in network mode [ 77.073025][ T7411] tipc: Node identity fa77b8634bbb, cluster identity 4711 [ 77.074950][ T7411] tipc: Enabled bearer , priority 0 [ 77.099472][ T7411] syzkaller0: entered promiscuous mode [ 77.101486][ T7411] syzkaller0: entered allmulticast mode [ 77.106893][ T7411] tipc: Resetting bearer [ 77.116967][ T7409] tipc: Resetting bearer [ 77.778420][ T6458] Bluetooth: hci4: command 0x0405 tx timeout [ 77.809807][ T7402] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 78.109787][ T1722] tipc: Node number set to 2982983779 [ 79.058923][ T6458] Bluetooth: hci0: command 0x0c1a tx timeout [ 88.316016][ T7409] tipc: Disabling bearer [ 88.438263][ T7447] netlink: 40 bytes leftover after parsing attributes in process `syz.4.280'. [ 88.532421][ T7456] Unable to handle kernel paging request at virtual address dfff800000000003 [ 88.534734][ T7456] KASAN: null-ptr-deref in range [0x0000000000000018-0x000000000000001f] [ 88.536854][ T7456] Mem abort info: [ 88.537808][ T7456] ESR = 0x0000000096000005 [ 88.539026][ T7456] EC = 0x25: DABT (current EL), IL = 32 bits [ 88.540648][ T7456] SET = 0, FnV = 0 [ 88.541680][ T7456] EA = 0, S1PTW = 0 [ 88.542758][ T7456] FSC = 0x05: level 1 translation fault [ 88.544293][ T7456] Data abort info: [ 88.545294][ T7456] ISV = 0, ISS = 0x00000005, ISS2 = 0x00000000 [ 88.546976][ T7456] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 88.548641][ T7456] GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0 [ 88.550277][ T7456] [dfff800000000003] address between user and kernel address ranges [ 88.552218][ T7456] Internal error: Oops: 0000000096000005 [#1] PREEMPT SMP [ 88.553865][ T7456] Modules linked in: [ 88.554789][ T7456] CPU: 0 UID: 0 PID: 7456 Comm: syz.3.281 Not tainted 6.14.0-rc2-syzkaller-ga64dcfb451e2 #0 [ 88.557161][ T7456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 88.559503][ T7456] pstate: 804000c5 (Nzcv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 88.561317][ T7456] pc : __lock_acquire+0xfc/0x7904 [ 88.562508][ T7456] lr : lock_acquire+0x23c/0x724 [ 88.563648][ T7456] sp : ffff8000a35b7480 [ 88.564607][ T7456] x29: ffff8000a35b7740 x28: ffff80008043fdc0 x27: 0000000000000000 [ 88.566559][ T7456] x26: ffff0001b3790540 x25: 0000000000000000 x24: 0000000000000001 [ 88.568512][ T7456] x23: 0000000000000000 x22: 1ffff00011f760cb x21: 0000000000000018 [ 88.570439][ T7456] x20: 0000000000000001 x19: 0000000000000000 x18: ffff8000a35b7060 [ 88.572371][ T7456] x17: 0000000000028625 x16: ffff8000832b0650 x15: 0000000000000001 [ 88.574669][ T7456] x14: 1fffe000366f49d8 x13: dfff800000000000 x12: ffff7000146b6eb8 [ 88.576950][ T7456] x11: ffff80008046be64 x10: ffff80008fbb0658 x9 : 00000000000000f3 [ 88.579313][ T7456] x8 : 0000000000000003 x7 : ffff80008043fdc0 x6 : 0000000000000000 [ 88.581452][ T7456] x5 : 0000000000000001 x4 : 0000000000000001 x3 : 0000000000000000 [ 88.583657][ T7456] x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000018 [ 88.585966][ T7456] Call trace: [ 88.586844][ T7456] __lock_acquire+0xfc/0x7904 (P) [ 88.588197][ T7456] lock_acquire+0x23c/0x724 [ 88.589539][ T7456] _raw_spin_lock_irqsave+0x5c/0x7c [ 88.590974][ T7456] add_wait_queue+0x60/0x188 [ 88.592159][ T7456] virtio_transport_release+0x3c8/0xa64 [ 88.593655][ T7456] __vsock_release+0xe8/0x388 [ 88.594916][ T7456] vsock_release+0x98/0xfc [ 88.596044][ T7456] sock_close+0xa4/0x1e8 [ 88.597181][ T7456] __fput+0x340/0x760 [ 88.598209][ T7456] __fput_sync+0xc8/0x118 [ 88.599326][ T7456] __arm64_sys_close+0x80/0xd8 [ 88.600563][ T7456] invoke_syscall+0x98/0x2b8 [ 88.601753][ T7456] el0_svc_common+0x130/0x23c [ 88.602965][ T7456] do_el0_svc+0x48/0x58 [ 88.604084][ T7456] el0_svc+0x54/0x168 [ 88.605151][ T7456] el0t_64_sync_handler+0x84/0x108 [ 88.606480][ T7456] el0t_64_sync+0x198/0x19c [ 88.607638][ T7456] Code: b007ba28 b9465908 340090a8 d343fea8 (386d6908) [ 88.609589][ T7456] ---[ end trace 0000000000000000 ]--- [ 88.966580][ T7456] Kernel panic - not syncing: Oops: Fatal exception [ 88.968360][ T7456] SMP: stopping secondary CPUs [ 88.969670][ T7456] Kernel Offset: disabled [ 88.970760][ T7456] CPU features: 0x200,00002070,00800250,82017203 [ 88.972489][ T7456] Memory Limit: none [ 89.311803][ T7456] Rebooting in 86400 seconds..