last executing test programs: 11.356032592s ago: executing program 0 (id=218): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006140)=[{{0x0, 0x0, &(0x7f0000000340)=[{0x0}], 0x1}, 0x62}], 0x1, 0x40010001, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x1000400121bf, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$sock(r0, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) 11.13466102s ago: executing program 0 (id=221): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(0x0, r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x154bc346}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xc, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7f, 0x0, 0x5, 0x1, 0xc}, 0xb, 0x0, 0x8, 0x5, 0x5f82, 0x2, 0x9, 0xd, 0x8, 0x1, {0xffff1c72, 0x3, 0xb, 0x101, 0x2, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 9.517876431s ago: executing program 0 (id=228): connect$unix(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = socket$kcm(0x21, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r5, 0x0, 0x40) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000100000051d833483cc75dd6900000000000000004000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319e2e66d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0xff4c) close_range(r0, 0xffffffffffffffff, 0x0) 8.494378243s ago: executing program 0 (id=229): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r1, 0xc0389424, &(0x7f0000000080)={0xb, 0x0, '\x00', 0x1, 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x4, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) syz_emit_ethernet(0x7e, &(0x7f0000000140)={@local, @random="c6eb8947e4e4", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0xe0dbf46ca9d044ba, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @multicast1, {[@cipso={0x86, 0x2a, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @multicast1, @multicast2]}]}}}}}}}, 0x0) 8.228422305s ago: executing program 3 (id=234): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, 0x0, 0x28a02, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000519000/0x1000)=nil, 0x1000, 0x66) socket(0x2000000000000021, 0x2, 0x2) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000080)=@v={0x93, 0x0, 0xa0, 0x16, @generic=0x4, 0x6}) 6.795236191s ago: executing program 3 (id=238): socket$netlink(0x10, 0x3, 0x9) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000014000100000080000000000007000080080002"], 0x1c}], 0x1}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1}, @ldst={0x2, 0x0, 0x3, 0x0, 0x0, 0x2}]}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}, 0x94) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x58) accept4(r6, 0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}, @TCA_NETEM_RATE64={0xc, 0x8, 0x4526dd370cbcddac}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r9, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r10 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r10, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r10, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) 4.315542251s ago: executing program 2 (id=242): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1840}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)={0xffef, 0x2d, 0x1, 0x0, 0x0, "", [@generic="cbeb79edefe46b544992b8ea0a680c922274cdcb028cc866b389d999d2bbc7d7504754d211d9f8253f4038bd56f8ba763bdf7c4c669bf6b11d5d54f53d4aa49775b85b29e0b2170957e5585c69f1562de1d413f06d92095123d06e2a714877e7cfc5b9502e394fcc58f487e6bcf4ddcb4508b3024a84f499af148eedd26e747bdd1bd1b4230e7e2e02803eab5bbd9ff686b55f390906b3c2b454a29590f5b29e508cb4438d28f7cb87d78c40dd00e04f950aa7d208441a87f897ad28fb771764877ab5e30cefbe6f808d002ef9791634c3d1a52632aa026058305f323102d77727d0784d440af500"/246, @generic="29fdfc7aba74c571311f65f29db4bb461f5dd242b23e0968dc120ee9f55fcb569b2ef5a2162f11c95d727ed64b8f533df9b5108f7d184e4c13f78acb86f8f0df2eb1e0a6346352f4b8e32c9f233d1e7a3a94ba17306b41d218dd007b4935013811149fe91eb6b6f19b5a7c9365b0ad794ae8c92328e193b598adb6dbf1b5bd0eece997", @nested={0x0, 0x4e}, @nested={0x0, 0xae, 0x0, 0x1, [@typed={0x0, 0x9b, 0x0, 0x0, @str='^,#&)^\x00'}]}, @typed={0x0, 0x11b, 0x0, 0x0, @str=')-/@){$::)%\'\\-.((\x00'}, @typed={0x0, 0x113, 0x0, 0x0, @fd=r0}]}, 0x4c}], 0x1}, 0x300) 4.065578311s ago: executing program 0 (id=243): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x24, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0xc9100120, 0x0, 0x0) 3.943959981s ago: executing program 3 (id=244): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1c0d}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @empty}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x12) 3.943390811s ago: executing program 1 (id=245): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xa, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r2, &(0x7f00000001c0), 0x0}, 0x20) 3.868585487s ago: executing program 2 (id=247): socket$inet6(0xa, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, 0x0, {}, {0x2, 0xb}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xffffffffffffff95, 0x2, {0x1, 0x5}}}]}, 0x3c}}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3.802620333s ago: executing program 3 (id=248): socket$nl_route(0x10, 0x3, 0x0) openat$snapshot(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002340)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000004000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$key(0xf, 0x3, 0x2) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) sched_setaffinity(0x0, 0xfffffffffffffdc5, &(0x7f00000002c0)=0x800002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, &(0x7f0000000080)={[{@usrquota_inode_hardlimit={'usrquota_inode_hardlimit', 0x3d, [0x37]}}]}) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r5, &(0x7f0000000300)={0x2020}, 0x2020) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000005c0)={r4, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) r6 = syz_open_dev$loop(&(0x7f00000001c0), 0x5, 0x88000) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000001280)={r3, 0x200, {0x2a12, 0x80010000, 0x0, 0x2, 0x4, 0x0, 0x0, 0x3, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9603dda1af1ea80000000000000000000000deff00000000000000000000000014a2648f00", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x800]}}) 3.802306363s ago: executing program 1 (id=249): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0x22367a57, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYBLOB="010000000000000000003b000000", @ANYRES32, @ANYBLOB="1f003300d0000000080211000001080211000000505050505050"], 0x3c}}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000005cc0)={0x0, 0x0, &(0x7f0000005c80)={&(0x7f0000005c00)={0x68, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x2, @media='ib\x00'}}}}, 0x7f}, 0x1, 0x0, 0x0, 0x4849}, 0x20000000) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r6, &(0x7f00000000c0)={0x1d, r7}, 0x10) sendmsg$can_bcm(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r5, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) 3.046755884s ago: executing program 1 (id=251): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000001a00)=""/4099, 0x1003}], 0x1}}], 0x1003, 0x10122, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@private0, 0x0, 0x0, 0x4e20, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0xc03, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xf6}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x70}}, 0x4000) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x4040) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x14, 0x6, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x2}}}}}}}, 0x0) close(r2) 3.006144917s ago: executing program 2 (id=252): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x2}, {}, {0xfff1, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000810}, 0x20084894) 3.005698257s ago: executing program 0 (id=253): socket$netlink(0x10, 0x3, 0x9) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000014000100000080000000000007000080080002"], 0x1c}], 0x1}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a80)=@bpf_tracing={0x1a, 0x22, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xe2bd}, [@exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @exit, @alu={0x7, 0x0, 0xb, 0x5, 0x8, 0xffffffffffffffff, 0xffffffffffffffff}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x3}, @jmp={0x5, 0x1, 0x0, 0x9, 0x3, 0x30, 0xffffffffffffffff}, @tail_call, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000580)='syzkaller\x00', 0x48980000, 0x98, &(0x7f0000000780)=""/152, 0x40f00, 0x12, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000940)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000980)={0x0, 0x10, 0x48, 0xaa00}, 0x10, 0x28c21, r1, 0x6, &(0x7f00000009c0)=[r0, 0xffffffffffffffff, 0xffffffffffffffff, r1, r1, r1], &(0x7f0000000a00)=[{0x3, 0x2, 0x9, 0xc}, {0x1, 0x5, 0x2, 0x9}, {0x2, 0x1, 0xc, 0xc}, {0x2, 0x5, 0xe, 0x8}, {0x3, 0x2, 0xb, 0x2}, {0x3, 0x3, 0xb, 0x1}], 0x10, 0xffffffff}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r9}, 0x18) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={r8, 0x0, 0x0}, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}, @TCA_NETEM_RATE64={0xc, 0x8, 0x4526dd370cbcddac}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r11 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r11, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r12 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r12, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r12, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x34}, 0x0, 0x1, 0x0, 0x4, 0xfa, 0x9b0}, 0x20) 779.456127ms ago: executing program 1 (id=254): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, r0) sendmsg$TIPC_NL_NET_GET(r0, 0x0, 0x40c0) r1 = socket$qrtr(0x2a, 0x2, 0x0) writev(r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x8004) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa1000000"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000033"], 0xfdef) 645.324588ms ago: executing program 4 (id=255): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) r0 = socket(0x10, 0x803, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x365}, {&(0x7f0000000280)=""/76, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/92, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 634.263048ms ago: executing program 2 (id=256): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x280480, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x80002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 545.302886ms ago: executing program 3 (id=257): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(0x0, r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x8001}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 478.656501ms ago: executing program 1 (id=258): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1840}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 462.686382ms ago: executing program 4 (id=259): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x10, &(0x7f0000000300)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0x7}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) 393.711898ms ago: executing program 4 (id=260): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000}, 0x27) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x49, &(0x7f00000000c0)}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000140)="ddac4a45", 0x4}], 0x1) socket$kcm(0x10, 0x3, 0x10) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0), 0x4) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x17, &(0x7f0000000080)=0x1, 0x4) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)='9\x00\x00\x00', 0x4}], 0x1}, 0x0) 332.634063ms ago: executing program 4 (id=261): socket$netlink(0x10, 0x3, 0x9) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000014000100000080000000000007000080080002"], 0x1c}], 0x1}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a80)=@bpf_tracing={0x1a, 0x22, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xe2bd}, [@exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @exit, @alu={0x7, 0x0, 0xb, 0x5, 0x8, 0xffffffffffffffff, 0xffffffffffffffff}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x3}, @jmp={0x5, 0x1, 0x0, 0x9, 0x3, 0x30, 0xffffffffffffffff}, @tail_call, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000580)='syzkaller\x00', 0x48980000, 0x98, &(0x7f0000000780)=""/152, 0x40f00, 0x12, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000940)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000980)={0x0, 0x10, 0x48, 0xaa00}, 0x10, 0x28c21, r1, 0x6, &(0x7f00000009c0)=[r0, 0xffffffffffffffff, 0xffffffffffffffff, r1, r1, r1], &(0x7f0000000a00)=[{0x3, 0x2, 0x9, 0xc}, {0x1, 0x5, 0x2, 0x9}, {0x2, 0x1, 0xc, 0xc}, {0x2, 0x5, 0xe, 0x8}, {0x3, 0x2, 0xb, 0x2}, {0x3, 0x3, 0xb, 0x1}], 0x10, 0xffffffff}, 0x94) ioctl$SIOCSIFHWADDR(r1, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r8}, 0x18) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={r7, 0x0, 0x0}, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}, @TCA_NETEM_RATE64={0xc, 0x8, 0x4526dd370cbcddac}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r10 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r10, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r11 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r11, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r11, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x34}, 0x0, 0x1, 0x0, 0x4, 0xfa, 0x9b0}, 0x20) 259.792449ms ago: executing program 1 (id=262): socket$inet6(0xa, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, 0x0, {}, {0x2, 0xb}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xffffffffffffff95, 0x2, {0x1, 0x5}}}]}, 0x3c}}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 154.757687ms ago: executing program 2 (id=263): unshare(0x400) r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x8, &(0x7f00000000c0), &(0x7f0000002140)=0x4) 141.119459ms ago: executing program 2 (id=264): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0xfffffffc) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x10, 0x3, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000500)='westwood\x00', 0x9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x1}]}}]}, 0x3c}}, 0x40005) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd2c, 0x25dfdbf7, {0x0, 0x0, 0x0, r7, {0xb, 0x19}, {0x0, 0xfff1}, {0xe, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) 121.12967ms ago: executing program 3 (id=265): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0/file0\x00') r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0xfc, 0x0}, 0x800, 0x0, 0x3, 0x1, 0x0, 0x4}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="050000000700000007"], 0x48) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x924400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x9, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4002}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f00000001c0)={0x0, 'veth0\x00', 0x3}, 0x18) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x380000, @rand_addr=' \x01\x00'}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000300)={@dev={0xfe, 0x80, '\x00', 0x28}, 0x0, 0x0, 0x3, 0x0, 0x0, 0xa4}, &(0x7f0000000040)=0x20) write$FUSE_INIT(r0, &(0x7f0000001240)={0x50, 0x0, 0x0, {0x7, 0x2b, 0xfff, 0x83120, 0x3, 0x7, 0x1ff, 0x9, 0x0, 0x0, 0x10, 0x8}}, 0x50) 113.387071ms ago: executing program 4 (id=266): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2}, 0x200088d0) 0s ago: executing program 4 (id=267): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) vmsplice(r0, &(0x7f0000002440)=[{&(0x7f00000002c0)="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", 0x302}], 0x1, 0x9) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCBRADDBR(r3, 0x89a0, &(0x7f00000002c0)='ip6_vti0\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x9}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000050) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.40' (ED25519) to the list of known hosts. [ 82.209590][ T4176] cgroup: Unknown subsys name 'net' [ 82.348823][ T4176] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.994100][ T4176] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 86.354804][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 86.394005][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 86.485483][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 86.509092][ T4195] chnl_net:caif_netlink_parms(): no params data found [ 86.569995][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 86.658624][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.667061][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.677694][ T4191] device bridge_slave_0 entered promiscuous mode [ 86.720560][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.730697][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.739722][ T4191] device bridge_slave_1 entered promiscuous mode [ 86.748101][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.757901][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.769382][ T4187] device bridge_slave_0 entered promiscuous mode [ 86.806996][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.815053][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.826572][ T4187] device bridge_slave_1 entered promiscuous mode [ 86.836854][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.845506][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.855019][ T4186] device bridge_slave_0 entered promiscuous mode [ 86.907354][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.915975][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.927031][ T4186] device bridge_slave_1 entered promiscuous mode [ 86.935202][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.946425][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.956881][ T4195] device bridge_slave_0 entered promiscuous mode [ 86.978232][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.991700][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.019391][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.028823][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.038133][ T4195] device bridge_slave_1 entered promiscuous mode [ 87.046144][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.054434][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.064847][ T4188] device bridge_slave_0 entered promiscuous mode [ 87.084958][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.112794][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.120951][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.130887][ T4188] device bridge_slave_1 entered promiscuous mode [ 87.150672][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.164134][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.199628][ T4191] team0: Port device team_slave_0 added [ 87.218262][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.232209][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.255919][ T4191] team0: Port device team_slave_1 added [ 87.293644][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.305943][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.319407][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.340326][ T4187] team0: Port device team_slave_0 added [ 87.375044][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.383607][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.415415][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.429641][ T4187] team0: Port device team_slave_1 added [ 87.438524][ T4186] team0: Port device team_slave_0 added [ 87.461557][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.468647][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.505477][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.532884][ T4186] team0: Port device team_slave_1 added [ 87.541489][ T4195] team0: Port device team_slave_0 added [ 87.550854][ T4188] team0: Port device team_slave_0 added [ 87.568480][ T4188] team0: Port device team_slave_1 added [ 87.594922][ T4195] team0: Port device team_slave_1 added [ 87.610127][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.620680][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.652528][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.667834][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.676892][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.722191][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.748680][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.757573][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.791896][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.839178][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.847129][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.885564][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.909861][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.918498][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.956411][ T1108] Bluetooth: hci2: command 0x0409 tx timeout [ 87.961537][ T4202] Bluetooth: hci3: command 0x0409 tx timeout [ 87.965248][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.984316][ T1108] Bluetooth: hci4: command 0x0409 tx timeout [ 87.986872][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.999760][ T1108] Bluetooth: hci1: command 0x0409 tx timeout [ 87.999835][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.007699][ T1108] Bluetooth: hci0: command 0x0409 tx timeout [ 88.050429][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.072547][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.082672][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.122898][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.160956][ T4191] device hsr_slave_0 entered promiscuous mode [ 88.170227][ T4191] device hsr_slave_1 entered promiscuous mode [ 88.191610][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.203169][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.240913][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.315645][ T4195] device hsr_slave_0 entered promiscuous mode [ 88.327268][ T4195] device hsr_slave_1 entered promiscuous mode [ 88.339498][ T4195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.350836][ T4195] Cannot create hsr debugfs directory [ 88.372396][ T4186] device hsr_slave_0 entered promiscuous mode [ 88.382442][ T4186] device hsr_slave_1 entered promiscuous mode [ 88.393359][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.405392][ T4186] Cannot create hsr debugfs directory [ 88.460046][ T4188] device hsr_slave_0 entered promiscuous mode [ 88.469164][ T4188] device hsr_slave_1 entered promiscuous mode [ 88.479772][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.490571][ T4188] Cannot create hsr debugfs directory [ 88.502709][ T4187] device hsr_slave_0 entered promiscuous mode [ 88.513092][ T4187] device hsr_slave_1 entered promiscuous mode [ 88.521756][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.532438][ T4187] Cannot create hsr debugfs directory [ 88.958880][ T4191] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.974300][ T4191] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.987592][ T4191] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.003257][ T4191] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.074874][ T4188] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 89.095783][ T4188] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 89.109500][ T4188] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 89.143501][ T4188] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 89.191756][ T4195] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.205991][ T4195] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.234079][ T4195] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.260022][ T4195] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.296564][ T4187] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.350252][ T4187] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.365572][ T4187] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.380116][ T4187] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.445624][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.498960][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 89.510557][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 89.525515][ T4186] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.545010][ T4186] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.567367][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.592430][ T4186] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.614538][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.645328][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 89.659451][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 89.675110][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.685993][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.698341][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 89.710802][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 89.722065][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.731361][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.743282][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 89.755631][ T4186] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.793458][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 89.807343][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 89.816121][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 89.825041][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 89.838221][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 89.850415][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 89.863290][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 89.874932][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 89.885426][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 89.900948][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.925606][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.947137][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 89.959548][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 89.969698][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 89.980550][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 89.990470][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 89.998766][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 90.013053][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 90.032318][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.041357][ T4238] Bluetooth: hci0: command 0x041b tx timeout [ 90.041692][ T4245] Bluetooth: hci4: command 0x041b tx timeout [ 90.055613][ T4238] Bluetooth: hci1: command 0x041b tx timeout [ 90.064714][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 90.071332][ T4245] Bluetooth: hci2: command 0x041b tx timeout [ 90.076742][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 90.082948][ T4245] Bluetooth: hci3: command 0x041b tx timeout [ 90.092102][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.102284][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.134042][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 90.143852][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 90.159782][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 90.170782][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.178943][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.187997][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 90.199927][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 90.209472][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.217664][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.248134][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 90.257996][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 90.269358][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 90.280423][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.289374][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.301336][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 90.311799][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 90.354580][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.386497][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 90.396479][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 90.415428][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 90.427945][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 90.439712][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 90.454288][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 90.464524][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 90.474329][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 90.483477][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 90.494455][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 90.509103][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 90.529470][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 90.540951][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 90.550557][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 90.561004][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 90.570134][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 90.592556][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 90.603563][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 90.628638][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 90.639883][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 90.672353][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.700827][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.711663][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.727171][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 90.736419][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 90.747769][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 90.764400][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 90.777103][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 90.794531][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.824471][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 90.848825][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 90.867518][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.875742][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.891959][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 90.904113][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 90.914844][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.923927][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.937013][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 90.947391][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 90.957086][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 90.973863][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.006675][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 91.024108][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 91.042825][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 91.059020][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 91.073600][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 91.102690][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 91.113866][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 91.125552][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.134041][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.145313][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 91.159187][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 91.180044][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.206439][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 91.218835][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 91.236523][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 91.257243][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 91.267675][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 91.277561][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 91.288325][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 91.302770][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.311447][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.320335][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 91.330988][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 91.348404][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 91.359583][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 91.399661][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 91.417020][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 91.432542][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 91.448530][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 91.463811][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 91.484875][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 91.494543][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 91.512055][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 91.522504][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 91.550357][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.592855][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 91.606808][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 91.623263][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 91.635556][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 91.646213][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 91.659140][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 91.670230][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 91.680847][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 91.692445][ T4191] device veth0_vlan entered promiscuous mode [ 91.732092][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 91.744859][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 91.762533][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 91.787664][ T4195] device veth0_vlan entered promiscuous mode [ 91.798538][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 91.834770][ T4191] device veth1_vlan entered promiscuous mode [ 91.847435][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 91.860993][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 91.870735][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 91.889083][ T4195] device veth1_vlan entered promiscuous mode [ 91.917084][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 91.937724][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 91.947531][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 91.965568][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 92.027315][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 92.048877][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 92.059937][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 92.087091][ T4191] device veth0_macvtap entered promiscuous mode [ 92.100330][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.117487][ T4274] Bluetooth: hci3: command 0x040f tx timeout [ 92.125529][ T4274] Bluetooth: hci2: command 0x040f tx timeout [ 92.133848][ T4274] Bluetooth: hci1: command 0x040f tx timeout [ 92.142153][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 92.151268][ T4274] Bluetooth: hci4: command 0x040f tx timeout [ 92.158648][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 92.168116][ T4274] Bluetooth: hci0: command 0x040f tx timeout [ 92.169692][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 92.188919][ T4191] device veth1_macvtap entered promiscuous mode [ 92.233002][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 92.243936][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 92.255422][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 92.266640][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 92.275632][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 92.300604][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.312551][ T4195] device veth0_macvtap entered promiscuous mode [ 92.330222][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 92.339603][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 92.350484][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 92.386118][ T4195] device veth1_macvtap entered promiscuous mode [ 92.398369][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.414002][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.427697][ T4191] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.438530][ T4191] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.450987][ T4191] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.461877][ T4191] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.501588][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 92.510336][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 92.526728][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 92.540985][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 92.553931][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 92.565157][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 92.576350][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 92.588186][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 92.602129][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 92.618569][ T4187] device veth0_vlan entered promiscuous mode [ 92.649324][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.663391][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.679264][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.694253][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 92.706318][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 92.718768][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 92.728743][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 92.758302][ T4187] device veth1_vlan entered promiscuous mode [ 92.780050][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.793348][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.807546][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.822683][ T4186] device veth0_vlan entered promiscuous mode [ 92.831760][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 92.844145][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 92.855718][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 92.866605][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 92.876055][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 92.887360][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 92.899387][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 92.909628][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 92.918764][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 92.949623][ T4188] device veth0_vlan entered promiscuous mode [ 92.969655][ T4195] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.983199][ T4195] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.995361][ T4195] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.005835][ T4195] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.019529][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 93.029747][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 93.038527][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 93.048018][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 93.057295][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 93.090943][ T4188] device veth1_vlan entered promiscuous mode [ 93.133312][ T4186] device veth1_vlan entered promiscuous mode [ 93.150466][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 93.160183][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 93.172547][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 93.181877][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 93.191056][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 93.217479][ T4187] device veth0_macvtap entered promiscuous mode [ 93.231964][ T4187] device veth1_macvtap entered promiscuous mode [ 93.246853][ T140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.262162][ T140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.276702][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 93.290467][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 93.300232][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 93.310913][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 93.357389][ T4291] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.371321][ T4291] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.385238][ T4188] device veth0_macvtap entered promiscuous mode [ 93.407632][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 93.419641][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 93.429940][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 93.443699][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 93.455362][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 93.465898][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 93.482251][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.498602][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.510219][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.525417][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.546573][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.572179][ T4188] device veth1_macvtap entered promiscuous mode [ 93.592666][ T4186] device veth0_macvtap entered promiscuous mode [ 93.607537][ T4186] device veth1_macvtap entered promiscuous mode [ 93.623962][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 93.634176][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 93.644914][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 93.653918][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 93.665929][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 93.688815][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.702479][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.718803][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.736325][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.751251][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.812531][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 93.844170][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 93.861010][ T4291] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.865569][ T4187] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.886991][ T4291] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.903977][ T4187] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.916226][ T4187] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.926118][ T4187] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.956013][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.974985][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.990576][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.009105][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.020758][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.038646][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.064555][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.080043][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 94.096704][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 94.107652][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 94.139650][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.159164][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.179559][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.191854][ T7] Bluetooth: hci0: command 0x0419 tx timeout [ 94.195450][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.211775][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.218770][ T7] Bluetooth: hci4: command 0x0419 tx timeout [ 94.224324][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.230818][ T7] Bluetooth: hci1: command 0x0419 tx timeout [ 94.251258][ T7] Bluetooth: hci2: command 0x0419 tx timeout [ 94.253195][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.264036][ T7] Bluetooth: hci3: command 0x0419 tx timeout [ 94.273627][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.295360][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.317679][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.339237][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.359866][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.384931][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.399304][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.417940][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.438201][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.449837][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 94.463416][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 94.487237][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 94.513949][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 94.535165][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.554231][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.568831][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.585126][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.598091][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.614401][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.629267][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.647176][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.661480][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.673782][ T4188] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.685164][ T4188] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.697120][ T4188] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.707203][ T4188] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.737737][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.738774][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 94.748231][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.765265][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 94.783375][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 94.795878][ T4186] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.814380][ T4186] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.826451][ T4186] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.847637][ T4186] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.070479][ T4291] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.105920][ T4291] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.154483][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.177474][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.215451][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 95.232052][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 95.247600][ T140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.267340][ T140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.300010][ T4291] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.327463][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 95.338917][ T4291] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.358587][ T4316] device bpq0 entered promiscuous mode [ 95.370535][ T1230] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.374716][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 95.387374][ T1230] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.452645][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 95.517147][ T4318] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8'. [ 95.597071][ T4291] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.648709][ T4291] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.714317][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 95.824962][ T4327] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9'. [ 95.840133][ T4327] netlink: set zone limit has 8 unknown bytes [ 96.164694][ T4333] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 96.217048][ T4333] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2'. [ 96.249085][ T4333] netlink: 'syz.1.2': attribute type 20 has an invalid length. [ 96.280211][ T4333] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.290857][ T4333] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.300135][ T4333] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.309936][ T4333] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.336007][ T4333] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 96.348507][ T4333] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2'. [ 96.358826][ T4333] netlink: 'syz.1.2': attribute type 20 has an invalid length. [ 96.381750][ T4333] Zero length message leads to an empty skb [ 96.397802][ T4342] tipc: Started in network mode [ 96.404054][ T4342] tipc: Node identity 3e9dfeb89ad5, cluster identity 4711 [ 96.412905][ T4342] tipc: Enabled bearer , priority 0 [ 96.448752][ T4339] device syzkaller0 entered promiscuous mode [ 96.524894][ T4339] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 96.564687][ T4339] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12'. [ 96.591986][ T13] Bluetooth: hci3: command 0x0405 tx timeout [ 96.624887][ T4339] tipc: Resetting bearer [ 96.674886][ T4336] tipc: Resetting bearer [ 96.827755][ T4336] tipc: Disabling bearer [ 96.921520][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 96.957212][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 96.969544][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #240!!! [ 97.059613][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 97.161976][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 97.174364][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 97.264339][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 97.366777][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 97.476572][ T23] cfg80211: failed to load regulatory.db [ 97.651014][ T4354] device bpq0 left promiscuous mode [ 97.687752][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 97.744785][ T4361] syz.3.18 uses obsolete (PF_INET,SOCK_PACKET) [ 97.816599][ T4358] tipc: Started in network mode [ 97.851373][ T4358] tipc: Node identity e2941b9259c6, cluster identity 4711 [ 97.885090][ T4358] tipc: Enabled bearer , priority 0 [ 97.976575][ T4365] device syzkaller0 entered promiscuous mode [ 98.167821][ T4358] tipc: Resetting bearer [ 98.224711][ T4379] tipc: Enabling of bearer rejected, failed to enable media [ 98.340088][ T4357] tipc: Resetting bearer [ 98.424500][ T4357] tipc: Disabling bearer [ 98.598161][ T4374] device syzkaller0 entered promiscuous mode [ 98.801941][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #142!!! [ 99.641893][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 100.007006][ T4419] tipc: Started in network mode [ 100.047230][ T4419] tipc: Node identity 22aace8a4b68, cluster identity 4711 [ 100.115426][ T4419] tipc: Enabled bearer , priority 0 [ 100.353840][ T4425] device syzkaller0 entered promiscuous mode [ 101.074471][ T4452] tipc: Enabling of bearer rejected, failed to enable media [ 101.243202][ T21] tipc: Node number set to 1774374538 [ 101.621850][ T4415] tipc: Resetting bearer [ 102.454494][ T4415] tipc: Disabling bearer [ 102.641202][ T4477] device batadv_slave_1 entered promiscuous mode [ 102.659233][ T4480] netlink: 'syz.2.44': attribute type 1 has an invalid length. [ 102.686582][ T4476] device batadv_slave_1 left promiscuous mode [ 102.715116][ T4480] device veth1_to_team entered promiscuous mode [ 102.906560][ T4480] bond1 (unregistering): Released all slaves [ 103.531726][ T4502] netlink: 36 bytes leftover after parsing attributes in process `syz.2.48'. [ 103.622068][ T4503] ieee802154 phy0 wpan0: encryption failed: -22 [ 103.843339][ T4502] netlink: 36 bytes leftover after parsing attributes in process `syz.2.48'. [ 104.116496][ T4502] netlink: 36 bytes leftover after parsing attributes in process `syz.2.48'. [ 104.398947][ T4517] tipc: Enabled bearer , priority 0 [ 104.443268][ T4517] device syzkaller0 entered promiscuous mode [ 104.490246][ T4517] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 104.553862][ T4516] tipc: Resetting bearer [ 104.652811][ T4516] tipc: Disabling bearer [ 104.758574][ T4522] netlink: 12 bytes leftover after parsing attributes in process `syz.0.54'. [ 106.025287][ T4544] netlink: 12 bytes leftover after parsing attributes in process `syz.1.60'. [ 106.092192][ T4544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.151187][ T4544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.201929][ T4544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.233399][ T4544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.268236][ T4544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.291360][ T23] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 106.314823][ T4544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.350902][ T4544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.377858][ T4544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.390522][ T4544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.417314][ T4544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.918541][ T4562] ieee802154 phy0 wpan0: encryption failed: -22 [ 107.451502][ T23] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 107.471204][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.520006][ T23] usb 4-1: Product: syz [ 107.557603][ T23] usb 4-1: Manufacturer: syz [ 107.581198][ T23] usb 4-1: SerialNumber: syz [ 107.942966][ T23] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 107.985274][ T23] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 108.231277][ T23] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 108.261415][ T23] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 108.306190][ T23] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 108.344315][ T4580] netlink: 40 bytes leftover after parsing attributes in process `syz.2.70'. [ 108.707925][ T23] lan78xx: probe of 4-1:1.0 failed with error -71 [ 109.251383][ T23] usb 4-1: USB disconnect, device number 2 [ 110.910236][ T4608] netlink: set zone limit has 8 unknown bytes [ 111.090373][ T4608] netlink: 788 bytes leftover after parsing attributes in process `syz.2.81'. [ 111.121249][ T23] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 111.389398][ T4616] netlink: 'syz.3.83': attribute type 1 has an invalid length. [ 111.681496][ T23] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 111.710216][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.745368][ T23] usb 1-1: Product: syz [ 111.761318][ T23] usb 1-1: Manufacturer: syz [ 111.778350][ T23] usb 1-1: SerialNumber: syz [ 112.051355][ T23] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 112.091436][ T23] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 112.131299][ T23] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 112.168245][ T23] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 112.199565][ T23] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 112.227909][ T23] lan78xx: probe of 1-1:1.0 failed with error -71 [ 112.255872][ T23] usb 1-1: USB disconnect, device number 2 [ 114.344648][ T4659] device syzkaller0 entered promiscuous mode [ 114.567042][ T4673] netlink: 8 bytes leftover after parsing attributes in process `syz.1.102'. [ 114.872087][ T4687] netlink: 8 bytes leftover after parsing attributes in process `syz.2.108'. [ 114.918106][ T13] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 115.551493][ T13] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 115.566793][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.433151][ T13] usb 4-1: Product: syz [ 116.437715][ T13] usb 4-1: Manufacturer: syz [ 116.444409][ T13] usb 4-1: SerialNumber: syz [ 116.731444][ T13] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 116.791470][ T13] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 116.799577][ T4715] tipc: Enabled bearer , priority 0 [ 116.831269][ T13] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 116.832030][ T4715] device syzkaller0 entered promiscuous mode [ 116.869167][ T13] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 116.900950][ T4715] tipc: Resetting bearer [ 116.900952][ T13] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 116.922525][ T4714] tipc: Resetting bearer [ 116.950537][ T13] lan78xx: probe of 4-1:1.0 failed with error -71 [ 116.977707][ T4714] tipc: Disabling bearer [ 116.987545][ T13] usb 4-1: USB disconnect, device number 3 [ 118.336840][ T4748] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.552263][ T4759] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 118.605341][ T4758] sctp: [Deprecated]: syz.3.124 (pid 4758) Use of int in maxseg socket option. [ 118.605341][ T4758] Use struct sctp_assoc_value instead [ 119.245147][ T1108] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 119.926350][ T1108] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 120.658234][ T1108] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.667523][ T1108] usb 3-1: Product: syz [ 120.672648][ T1108] usb 3-1: Manufacturer: syz [ 120.677285][ T1108] usb 3-1: SerialNumber: syz [ 120.926528][ T4799] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 120.961305][ T1108] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 121.001248][ T1108] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 121.061356][ T1108] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 121.104800][ T1108] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 121.117701][ T1108] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 121.130105][ T1108] lan78xx: probe of 3-1:1.0 failed with error -71 [ 121.157345][ T1108] usb 3-1: USB disconnect, device number 2 [ 121.597643][ T4782] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.605557][ T4782] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.907753][ T4782] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.979132][ T4782] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.640177][ T4782] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.651507][ T4782] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.661827][ T4782] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.672839][ T4782] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.877142][ T4786] device bpq0 entered promiscuous mode [ 124.136474][ T4820] tipc: Enabling of bearer rejected, failed to enable media [ 124.359799][ T4823] device syzkaller0 entered promiscuous mode [ 126.086908][ T4859] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 126.720788][ T4864] netlink: 24 bytes leftover after parsing attributes in process `syz.1.151'. [ 126.908566][ T4864] device bond1 entered promiscuous mode [ 127.088950][ T4864] 8021q: adding VLAN 0 to HW filter on device bond1 [ 127.140951][ T4864] bond1 (unregistering): Released all slaves [ 128.546592][ T4891] tipc: Started in network mode [ 128.581676][ T4891] tipc: Node identity 4a6c3d8df0ea, cluster identity 4711 [ 128.656107][ T4891] tipc: Enabled bearer , priority 0 [ 128.886990][ T4895] device syzkaller0 entered promiscuous mode [ 129.590945][ T4912] tipc: Enabled bearer , priority 0 [ 129.650374][ T4911] tipc: Resetting bearer [ 129.690258][ T4911] tipc: Disabling bearer [ 129.885486][ T4915] tipc: Disabling bearer [ 130.521587][ T23] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 131.241356][ T23] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 131.251405][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.259779][ T23] usb 5-1: Product: syz [ 131.278515][ T23] usb 5-1: Manufacturer: syz [ 131.285960][ T23] usb 5-1: SerialNumber: syz [ 131.781749][ T23] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 132.203033][ T23] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 132.252851][ T23] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 132.296574][ T23] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 132.341346][ T23] lan78xx: probe of 5-1:1.0 failed with error -71 [ 132.388512][ T23] usb 5-1: USB disconnect, device number 2 [ 132.527355][ T4957] tipc: Enabled bearer , priority 0 [ 132.571715][ T4957] device syzkaller0 entered promiscuous mode [ 132.617331][ T4957] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 132.659490][ T4957] netlink: 12 bytes leftover after parsing attributes in process `syz.4.180'. [ 132.690705][ T4961] tipc: Enabled bearer , priority 0 [ 132.711920][ T4955] tipc: Resetting bearer [ 132.748199][ T4955] tipc: Disabling bearer [ 132.777296][ T4961] tipc: Resetting bearer [ 132.793306][ T4960] tipc: Disabling bearer [ 134.381187][ T4311] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 134.690968][ T5005] tipc: Enabled bearer , priority 0 [ 134.724371][ T5005] device syzkaller0 entered promiscuous mode [ 134.754416][ T5005] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 134.881428][ T5010] tipc: Resetting bearer [ 134.916017][ T5004] tipc: Resetting bearer [ 134.959672][ T5004] tipc: Disabling bearer [ 135.001323][ T4311] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 135.018131][ T4311] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.049185][ T4311] usb 5-1: Product: syz [ 135.062847][ T4311] usb 5-1: Manufacturer: syz [ 135.069002][ T4311] usb 5-1: SerialNumber: syz [ 135.611332][ T4311] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 135.741596][ T4311] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 135.763327][ T4311] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 135.795081][ T4311] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 135.816574][ T4311] lan78xx: probe of 5-1:1.0 failed with error -71 [ 135.981481][ T4311] usb 5-1: USB disconnect, device number 3 [ 137.042326][ T5043] netlink: 7 bytes leftover after parsing attributes in process `syz.4.208'. [ 137.441384][ T5049] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 137.474407][ T5049] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 138.253511][ T5049] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 138.331964][ T5049] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 138.364591][ T5049] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 138.405476][ T5049] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 138.441624][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.448860][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.456869][ T5061] netlink: 16 bytes leftover after parsing attributes in process `syz.0.215'. [ 138.479892][ T5049] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 138.496029][ T5059] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 138.547146][ T5061] netlink: 16 bytes leftover after parsing attributes in process `syz.0.215'. [ 138.813460][ T146] Bluetooth: hci3: link tx timeout [ 138.820603][ T146] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 138.841499][ T146] Bluetooth: hci3: link tx timeout [ 138.847188][ T146] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 138.855668][ T146] Bluetooth: hci3: link tx timeout [ 138.860835][ T146] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 139.735202][ T5084] netlink: 4 bytes leftover after parsing attributes in process `syz.3.222'. [ 140.904648][ T5098] netlink: 40 bytes leftover after parsing attributes in process `syz.4.226'. [ 140.959579][ T1325] Bluetooth: hci3: command 0x0406 tx timeout [ 141.701776][ T5101] netlink: 'syz.0.229': attribute type 13 has an invalid length. [ 144.450524][ T5101] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.458083][ T5101] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.161539][ T5101] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.226894][ T5101] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.811273][ T5101] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.820626][ T5101] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.830209][ T5101] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.839535][ T5101] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.997974][ T5128] device bpq0 left promiscuous mode [ 146.003996][ T5128] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 146.067819][ T5145] device syzkaller0 entered promiscuous mode [ 146.314849][ T5163] tipc: Enabled bearer , priority 0 [ 146.332888][ T5163] device syzkaller0 entered promiscuous mode [ 146.394871][ T5163] netlink: 12 bytes leftover after parsing attributes in process `syz.2.247'. [ 146.458263][ T5163] tipc: Resetting bearer [ 146.485034][ T5162] tipc: Resetting bearer [ 146.526818][ T5162] tipc: Disabling bearer [ 149.644844][ T5192] device syzkaller0 entered promiscuous mode [ 149.791019][ T5196] device syzkaller0 entered promiscuous mode [ 149.806811][ T5205] device bpq0 entered promiscuous mode [ 149.889468][ T5207] tipc: Enabled bearer , priority 0 [ 149.929617][ T5207] device syzkaller0 entered promiscuous mode [ 149.940560][ T5207] netlink: 12 bytes leftover after parsing attributes in process `syz.1.262'. [ 149.997487][ T5207] tipc: Resetting bearer [ 150.038110][ T5206] tipc: Resetting bearer [ 150.085798][ T5206] tipc: Disabling bearer [ 150.090082][ T5219] netlink: 32 bytes leftover after parsing attributes in process `syz.4.267'. [ 150.107728][ T5219] netlink: set zone limit has 8 unknown bytes [ 150.118885][ T5185] ================================================================== [ 150.127501][ T5185] BUG: KASAN: use-after-free in rose_transmit_link+0x5b0/0x730 [ 150.135206][ T5185] Read of size 1 at addr ffff88802a32c832 by task syz.0.253/5185 [ 150.142946][ T5185] [ 150.145329][ T5185] CPU: 1 PID: 5185 Comm: syz.0.253 Not tainted 5.15.189-syzkaller #0 [ 150.153420][ T5185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 150.163630][ T5185] Call Trace: [ 150.166929][ T5185] [ 150.169877][ T5185] dump_stack_lvl+0x168/0x230 [ 150.174630][ T5185] ? show_regs_print_info+0x20/0x20 [ 150.179840][ T5185] ? _printk+0xcc/0x110 [ 150.184004][ T5185] ? rose_transmit_link+0x5b0/0x730 [ 150.189217][ T5185] ? load_image+0x3b0/0x3b0 [ 150.193728][ T5185] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 150.199120][ T5185] print_address_description+0x60/0x2d0 [ 150.204693][ T5185] ? rose_transmit_link+0x5b0/0x730 [ 150.209936][ T5185] kasan_report+0xdf/0x130 [ 150.214473][ T5185] ? rose_transmit_link+0x5b0/0x730 [ 150.219701][ T5185] ? __phys_addr+0xb6/0x170 [ 150.224696][ T5185] rose_transmit_link+0x5b0/0x730 [ 150.229855][ T5185] ? skb_put+0x117/0x210 [ 150.234289][ T5185] rose_write_internal+0x673/0x1e80 [ 150.239818][ T5185] ? rose_validate_nr+0x120/0x120 [ 150.244853][ T5185] ? del_timer+0x11a/0x1b0 [ 150.249276][ T5185] ? skb_queue_purge+0x62/0x290 [ 150.254163][ T5185] rose_release+0x22a/0x4e0 [ 150.258766][ T5185] sock_close+0xd5/0x240 [ 150.263017][ T5185] ? sock_mmap+0x90/0x90 [ 150.267428][ T5185] __fput+0x234/0x930 [ 150.271554][ T5185] task_work_run+0x125/0x1a0 [ 150.276265][ T5185] get_signal+0x1222/0x12c0 [ 150.280902][ T5185] arch_do_signal_or_restart+0xc1/0x1300 [ 150.286585][ T5185] ? kick_process+0xd4/0x140 [ 150.291298][ T5185] ? task_work_add+0x1a7/0x1d0 [ 150.296106][ T5185] ? get_sigframe_size+0x10/0x10 [ 150.301155][ T5185] ? __sys_connect+0x239/0x410 [ 150.305956][ T5185] ? exit_to_user_mode_loop+0x3b/0x130 [ 150.311430][ T5185] exit_to_user_mode_loop+0x9e/0x130 [ 150.316809][ T5185] exit_to_user_mode_prepare+0xb1/0x140 [ 150.322398][ T5185] syscall_exit_to_user_mode+0x16/0x40 [ 150.327880][ T5185] do_syscall_64+0x58/0xa0 [ 150.332328][ T5185] ? clear_bhb_loop+0x30/0x80 [ 150.337055][ T5185] ? clear_bhb_loop+0x30/0x80 [ 150.341767][ T5185] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 150.347722][ T5185] RIP: 0033:0x7f173d60ebe9 [ 150.352152][ T5185] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.371886][ T5185] RSP: 002b:00007f173b876038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 150.380364][ T5185] RAX: fffffffffffffe00 RBX: 00007f173d835fa0 RCX: 00007f173d60ebe9 [ 150.388590][ T5185] RDX: 0000000000000040 RSI: 0000200000000100 RDI: 0000000000000010 [ 150.396672][ T5185] RBP: 00007f173d691e19 R08: 0000000000000000 R09: 0000000000000000 [ 150.404673][ T5185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 150.412746][ T5185] R13: 00007f173d836038 R14: 00007f173d835fa0 R15: 00007ffe62578bd8 [ 150.420745][ T5185] [ 150.423782][ T5185] [ 150.426109][ T5185] Allocated by task 5185: [ 150.430434][ T5185] __kasan_kmalloc+0xb5/0xf0 [ 150.435035][ T5185] rose_add_node+0x227/0xdb0 [ 150.439628][ T5185] rose_rt_ioctl+0x9db/0xe20 [ 150.444224][ T5185] rose_ioctl+0x27a/0x790 [ 150.448673][ T5185] sock_do_ioctl+0xd3/0x2f0 [ 150.453489][ T5185] sock_ioctl+0x4ed/0x6e0 [ 150.457939][ T5185] __se_sys_ioctl+0xfa/0x170 [ 150.462858][ T5185] do_syscall_64+0x4c/0xa0 [ 150.467284][ T5185] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 150.473340][ T5185] [ 150.475748][ T5185] Freed by task 5205: [ 150.479912][ T5185] kasan_set_track+0x4b/0x70 [ 150.484627][ T5185] kasan_set_free_info+0x1f/0x40 [ 150.489676][ T5185] ____kasan_slab_free+0xd5/0x110 [ 150.494711][ T5185] slab_free_freelist_hook+0xea/0x170 [ 150.500095][ T5185] kfree+0xef/0x2a0 [ 150.503948][ T5185] rose_rt_device_down+0x4e2/0x530 [ 150.509175][ T5185] rose_device_event+0x5ec/0x680 [ 150.514122][ T5185] raw_notifier_call_chain+0xcb/0x160 [ 150.519538][ T5185] __dev_notify_flags+0x178/0x2d0 [ 150.524570][ T5185] dev_change_flags+0xe3/0x1a0 [ 150.529341][ T5185] dev_ifsioc+0x147/0xe70 [ 150.533684][ T5185] dev_ioctl+0x55f/0xe50 [ 150.537945][ T5185] sock_do_ioctl+0x222/0x2f0 [ 150.542561][ T5185] sock_ioctl+0x4ed/0x6e0 [ 150.546901][ T5185] __se_sys_ioctl+0xfa/0x170 [ 150.551502][ T5185] do_syscall_64+0x4c/0xa0 [ 150.555931][ T5185] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 150.561842][ T5185] [ 150.564171][ T5185] Last potentially related work creation: [ 150.569886][ T5185] kasan_save_stack+0x35/0x60 [ 150.574630][ T5185] kasan_record_aux_stack+0xb8/0x100 [ 150.580010][ T5185] insert_work+0x54/0x3d0 [ 150.584343][ T5185] __queue_work+0x9c5/0xd50 [ 150.588850][ T5185] call_timer_fn+0x16c/0x530 [ 150.593450][ T5185] __run_timers+0x550/0x7c0 [ 150.597965][ T5185] run_timer_softirq+0x63/0xf0 [ 150.602735][ T5185] handle_softirqs+0x328/0x820 [ 150.607504][ T5185] __irq_exit_rcu+0x12f/0x220 [ 150.612187][ T5185] irq_exit_rcu+0x5/0x20 [ 150.616434][ T5185] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 150.622187][ T5185] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 150.628173][ T5185] [ 150.630524][ T5185] The buggy address belongs to the object at ffff88802a32c800 [ 150.630524][ T5185] which belongs to the cache kmalloc-512 of size 512 [ 150.644714][ T5185] The buggy address is located 50 bytes inside of [ 150.644714][ T5185] 512-byte region [ffff88802a32c800, ffff88802a32ca00) [ 150.658067][ T5185] The buggy address belongs to the page: [ 150.663809][ T5185] page:ffffea0000a8cb00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2a32c [ 150.674223][ T5185] head:ffffea0000a8cb00 order:2 compound_mapcount:0 compound_pincount:0 [ 150.682741][ T5185] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 150.690837][ T5185] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888016841c80 [ 150.699740][ T5185] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 150.708350][ T5185] page dumped because: kasan: bad access detected [ 150.715050][ T5185] page_owner tracks the page as allocated [ 150.720902][ T5185] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 2966, ts 31424098783, free_ts 31420331846 [ 150.740369][ T5185] get_page_from_freelist+0x1b77/0x1c60 [ 150.746151][ T5185] __alloc_pages+0x1e1/0x470 [ 150.750754][ T5185] new_slab+0xc0/0x4b0 [ 150.754829][ T5185] ___slab_alloc+0x81e/0xdf0 [ 150.759431][ T5185] kmem_cache_alloc_trace+0x1a5/0x2a0 [ 150.764814][ T5185] alloc_bprm+0x56/0x6a0 [ 150.769066][ T5185] kernel_execve+0x49/0x900 [ 150.773575][ T5185] call_usermodehelper_exec_async+0x207/0x350 [ 150.779655][ T5185] ret_from_fork+0x1f/0x30 [ 150.784083][ T5185] page last free stack trace: [ 150.788752][ T5185] free_unref_page_prepare+0x637/0x6c0 [ 150.794225][ T5185] free_unref_page+0x94/0x280 [ 150.799031][ T5185] stack_depot_save+0x418/0x440 [ 150.804014][ T5185] __kasan_slab_alloc+0xb3/0xd0 [ 150.808965][ T5185] slab_post_alloc_hook+0x4c/0x380 [ 150.814108][ T5185] kmem_cache_alloc+0x100/0x290 [ 150.818978][ T5185] __debug_object_init+0x657/0xa40 [ 150.824114][ T5185] debug_init+0x23/0x1d0 [ 150.828390][ T5185] hrtimer_init+0x2f/0x220 [ 150.832815][ T5185] copy_signal+0x361/0x640 [ 150.837242][ T5185] copy_process+0x1761/0x3e00 [ 150.842012][ T5185] kernel_clone+0x219/0x930 [ 150.846632][ T5185] kernel_thread+0xc8/0x120 [ 150.851170][ T5185] call_usermodehelper_exec_work+0x93/0x220 [ 150.857282][ T5185] process_one_work+0x863/0x1000 [ 150.862239][ T5185] worker_thread+0xaa8/0x12a0 [ 150.866932][ T5185] [ 150.869260][ T5185] Memory state around the buggy address: [ 150.874978][ T5185] ffff88802a32c700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 150.883129][ T5185] ffff88802a32c780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 150.891194][ T5185] >ffff88802a32c800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 150.899261][ T5185] ^ [ 150.904917][ T5185] ffff88802a32c880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 150.913189][ T5185] ffff88802a32c900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 150.921260][ T5185] ================================================================== [ 150.929327][ T5185] Disabling lock debugging due to kernel taint [ 150.971201][ T5185] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 150.978566][ T5185] CPU: 1 PID: 5185 Comm: syz.0.253 Tainted: G B 5.15.189-syzkaller #0 [ 150.988064][ T5185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 150.998147][ T5185] Call Trace: [ 151.001454][ T5185] [ 151.004410][ T5185] dump_stack_lvl+0x168/0x230 [ 151.009122][ T5185] ? show_regs_print_info+0x20/0x20 [ 151.014350][ T5185] ? load_image+0x3b0/0x3b0 [ 151.018885][ T5185] panic+0x2c9/0x7f0 [ 151.022811][ T5185] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 151.028996][ T5185] ? bpf_jit_dump+0xd0/0xd0 [ 151.033533][ T5185] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 151.039468][ T5185] ? _raw_spin_unlock+0x40/0x40 [ 151.044451][ T5185] ? rose_transmit_link+0x5b0/0x730 [ 151.049766][ T5185] check_panic_on_warn+0x80/0xa0 [ 151.054749][ T5185] ? rose_transmit_link+0x5b0/0x730 [ 151.060011][ T5185] end_report+0x6d/0xf0 [ 151.064293][ T5185] kasan_report+0x102/0x130 [ 151.069090][ T5185] ? rose_transmit_link+0x5b0/0x730 [ 151.074318][ T5185] ? __phys_addr+0xb6/0x170 [ 151.078854][ T5185] rose_transmit_link+0x5b0/0x730 [ 151.083915][ T5185] ? skb_put+0x117/0x210 [ 151.088201][ T5185] rose_write_internal+0x673/0x1e80 [ 151.093516][ T5185] ? rose_validate_nr+0x120/0x120 [ 151.098568][ T5185] ? del_timer+0x11a/0x1b0 [ 151.103020][ T5185] ? skb_queue_purge+0x62/0x290 [ 151.107963][ T5185] rose_release+0x22a/0x4e0 [ 151.112488][ T5185] sock_close+0xd5/0x240 [ 151.116756][ T5185] ? sock_mmap+0x90/0x90 [ 151.121199][ T5185] __fput+0x234/0x930 [ 151.125308][ T5185] task_work_run+0x125/0x1a0 [ 151.130196][ T5185] get_signal+0x1222/0x12c0 [ 151.134732][ T5185] arch_do_signal_or_restart+0xc1/0x1300 [ 151.140396][ T5185] ? kick_process+0xd4/0x140 [ 151.145011][ T5185] ? task_work_add+0x1a7/0x1d0 [ 151.149805][ T5185] ? get_sigframe_size+0x10/0x10 [ 151.154880][ T5185] ? __sys_connect+0x239/0x410 [ 151.159671][ T5185] ? exit_to_user_mode_loop+0x3b/0x130 [ 151.165294][ T5185] exit_to_user_mode_loop+0x9e/0x130 [ 151.170712][ T5185] exit_to_user_mode_prepare+0xb1/0x140 [ 151.176298][ T5185] syscall_exit_to_user_mode+0x16/0x40 [ 151.181868][ T5185] do_syscall_64+0x58/0xa0 [ 151.186743][ T5185] ? clear_bhb_loop+0x30/0x80 [ 151.191438][ T5185] ? clear_bhb_loop+0x30/0x80 [ 151.196182][ T5185] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 151.202168][ T5185] RIP: 0033:0x7f173d60ebe9 [ 151.206785][ T5185] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.226503][ T5185] RSP: 002b:00007f173b876038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 151.234955][ T5185] RAX: fffffffffffffe00 RBX: 00007f173d835fa0 RCX: 00007f173d60ebe9 [ 151.242958][ T5185] RDX: 0000000000000040 RSI: 0000200000000100 RDI: 0000000000000010 [ 151.251055][ T5185] RBP: 00007f173d691e19 R08: 0000000000000000 R09: 0000000000000000 [ 151.259148][ T5185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 151.267171][ T5185] R13: 00007f173d836038 R14: 00007f173d835fa0 R15: 00007ffe62578bd8 [ 151.275174][ T5185] [ 151.278566][ T5185] Kernel Offset: disabled [ 151.283332][ T5185] Rebooting in 86400 seconds..