last executing test programs: 2.08642772s ago: executing program 3 (id=12): syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f0000000040)=@data_frame={@a_msdu=@type11={{}, {}, @device_a, @device_a, @random="fec988780198", {}, @device_b}}, 0x1e) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x80, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x54, 0x3, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x45, 0x1, "1abe5b9ca92688a7373186bdf3022392603d7a067ce054e64a3606c34c7d2720184810d1a30d4a1a4111ae9a2233c4b47ff281010aea66e7c32751aa20d1dd77e9"}]}]}]}]}, @NFT_MSG_DELCHAIN={0x22c, 0x5, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_CHAIN_USERDATA={0x6a, 0xc, "189affe83feab56ebc43d2fadd350083f1b09f77bef0fb12010cec9572486214aa14a6a4aa38ba625dfdd5232fbba9a3ca85bfe4c0fd3a4141aa6a55f885898f7900cb2a2bead60dd7fa0e41ccef7e15bd3b4191ed8c697ba33ce3b41289663c7892fcb4f3d0"}, @NFTA_CHAIN_USERDATA={0x1d, 0xc, "be791c6dd0e6eea6a44077f0bd33a94f029e7c4bc1f5a33b7f"}, @NFTA_CHAIN_USERDATA={0x11, 0xc, "dce39b771e8bce820018efd89f"}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3f}]}, @NFTA_CHAIN_HOOK={0x1c, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5c63b78c}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_USERDATA={0xcd, 0xc, "4a28b6d3d932a5ff8dcb9def27b3179d96075b168c27208c277c9ef7949db49a83768d9b24837eaddfe50249bd5310a1264ad69f21733a40cc8f470c3b7bf8256cd083877545caaa0246fe16bf597a7881bcc8cf258db7420dbd1c2f22c17c8cf84ea5288ced02c12d53912ebb0f560d57b238d2b551f5961a367acb5ecf087dd2fd2a034147419d164ddd5039448668bad538545de61636bd338ce90eb6d8a7acd2b282cf3d4a513acf079a8389cabc9f28aa5cff81a0af23298c1282f24996596d9da6a3128694c3"}, @NFTA_CHAIN_HOOK={0x48, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x57291635}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_virt_wifi\x00'}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x23515dbf}]}, @NFTA_CHAIN_HOOK={0x34, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7ac7f35c}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x330}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$netlink(r5, &(0x7f0000002a00)={0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000000040)={0x10}, 0x10}, {&(0x7f0000000300)={0x10, 0x1029}, 0x10}], 0x2}, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r7], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f3100000a000100be"], 0x40}}, 0x0) 1.688028882s ago: executing program 0 (id=1): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000000040)) 1.586315533s ago: executing program 0 (id=13): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40345410, 0x0) 1.534771213s ago: executing program 0 (id=14): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000120008000000000000000a48000000060a09040000000000000000020000001c000480180001800d00010073796e70726f787900000000040002800900010073797a30000000000900020073797a320000000014000000110001"], 0x70}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.456817543s ago: executing program 0 (id=15): r0 = socket(0x1d, 0x2, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000020ac050f02220001828301090224000101000000090400000203010200092100050001220000090581"], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.12772005s ago: executing program 1 (id=17): openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x700000000000000) r1 = socket(0xa, 0x3, 0x3a) getsockopt(r1, 0x3fe, 0x20, &(0x7f0000000080)=""/26, 0x0) r2 = socket(0xa, 0x3, 0x3a) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, &(0x7f0000000100)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000000500)=0x28) connect$inet(r2, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000380), 0x10) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000007a40)={@in={{0x2, 0x4e22, @multicast1}}, 0x0, 0x0, 0x0, 0x0, "dd724386a329927d75811377c508ae8196c0c53ab3678696bfadbe713db8164570eda0f7186e713ee6c197f6a7a50f4112b825f336e5672855d95d2de1806ee78184d5c9445cfe0c8a27bf6ee483f4b4"}, 0xd8) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000600)={0x2, [0x0, 0x0]}, &(0x7f0000000640)=0xc) close(r3) 1.076114802s ago: executing program 3 (id=18): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@mp_join={0x1e, 0x3}]}}}}}}}}, 0x0) 958.385353ms ago: executing program 1 (id=19): r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x3, 0x4, 0x8}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000280)=r2, 0x4) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033"], 0xfe33) 868.434546ms ago: executing program 3 (id=20): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000000040)) 762.579512ms ago: executing program 1 (id=21): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x88}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) 762.028645ms ago: executing program 3 (id=22): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40345410, 0x0) 613.59962ms ago: executing program 1 (id=23): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000120008000000000000000a48000000060a09040000000000000000020000001c000480180001800d00010073796e70726f787900000000040002800900010073797a30000000000900020073797a320000000014000000110001"], 0x70}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 561.598762ms ago: executing program 3 (id=24): r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x0, 0x2}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @local}, 0x2) 512.209192ms ago: executing program 2 (id=3): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002380)={0x14, 0x33, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 421.678489ms ago: executing program 4 (id=5): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x21ae, 0x4) sendmmsg$inet(r0, &(0x7f0000001980)=[{{&(0x7f00000002c0)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}], 0x1, 0x240080e4) write(r0, &(0x7f0000003000)='\t', 0x1) recvmmsg(r0, &(0x7f0000006600)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000300)=""/4096, 0x1000}], 0x1}}], 0x1, 0x2000, 0x0) 306.639054ms ago: executing program 1 (id=25): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@bridge_dellink={0x34, 0x11, 0x5, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0x6, 0x0, 0x1, [{0x8}]}}]}]}, 0x34}}, 0x0) 301.446512ms ago: executing program 3 (id=26): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x0, @val=@tcx}, 0x40) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000400)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cache_fscache}]}}) syz_emit_ethernet(0xfdef, &(0x7f0000000000)={@local, @empty, @val, {@ipv4}}, 0x0) 188.336464ms ago: executing program 2 (id=27): openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x700000000000000) r1 = socket(0xa, 0x3, 0x3a) getsockopt(r1, 0x3fe, 0x20, &(0x7f0000000080)=""/26, 0x0) r2 = socket(0xa, 0x3, 0x3a) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, &(0x7f0000000100)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000000500)=0x28) connect$inet(r2, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000380), 0x10) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000007a40)={@in={{0x2, 0x4e22, @multicast1}}, 0x0, 0x0, 0x0, 0x0, "dd724386a329927d75811377c508ae8196c0c53ab3678696bfadbe713db8164570eda0f7186e713ee6c197f6a7a50f4112b825f336e5672855d95d2de1806ee78184d5c9445cfe0c8a27bf6ee483f4b4"}, 0xd8) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000600)={0x2, [0x0, 0x0]}, &(0x7f0000000640)=0xc) close(r3) 126.389705ms ago: executing program 4 (id=28): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r1, r2, 0x0) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000180)={0x60, 0x1, &(0x7f00005b9000/0x3000)=nil, &(0x7f00008b3000/0x4000)=nil, 0x0, 0x0}) 0s ago: executing program 1 (id=29): r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x3, 0x4, 0x8}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000280)=r2, 0x4) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033"], 0xfe33) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.16' (ED25519) to the list of known hosts. [ 62.575538][ T5083] cgroup: Unknown subsys name 'net' [ 62.750738][ T5083] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 64.411839][ T5083] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 65.154562][ T5096] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 65.163524][ T5096] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 65.163598][ T5100] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 65.171345][ T5096] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 65.179933][ T5100] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 65.186073][ T5096] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 65.199609][ T5098] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 65.200455][ T5102] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 65.208191][ T5098] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 65.214119][ T5102] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 65.222265][ T5098] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 65.235563][ T5098] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 65.253595][ T5098] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 65.256301][ T5102] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 65.262409][ T5098] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 65.276437][ T5098] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 65.285096][ T5098] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 65.288270][ T4490] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 65.293750][ T5098] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 65.301404][ T4490] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 65.313512][ T5096] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 65.325647][ T5107] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 65.344687][ T5096] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 65.353473][ T4490] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 65.361342][ T4490] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 65.368527][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 65.369863][ T4490] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 65.376309][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 65.383515][ T4490] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 65.398054][ T4490] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 66.049015][ T5093] chnl_net:caif_netlink_parms(): no params data found [ 66.145438][ T5099] chnl_net:caif_netlink_parms(): no params data found [ 66.168635][ T5092] chnl_net:caif_netlink_parms(): no params data found [ 66.233084][ T5103] chnl_net:caif_netlink_parms(): no params data found [ 66.260497][ T5095] chnl_net:caif_netlink_parms(): no params data found [ 66.352175][ T5093] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.362918][ T5093] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.371390][ T5093] bridge_slave_0: entered allmulticast mode [ 66.378613][ T5093] bridge_slave_0: entered promiscuous mode [ 66.425368][ T5093] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.432623][ T5093] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.443501][ T5093] bridge_slave_1: entered allmulticast mode [ 66.450924][ T5093] bridge_slave_1: entered promiscuous mode [ 66.538417][ T5092] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.546035][ T5092] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.553547][ T5092] bridge_slave_0: entered allmulticast mode [ 66.562165][ T5092] bridge_slave_0: entered promiscuous mode [ 66.570551][ T5092] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.577736][ T5092] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.586357][ T5092] bridge_slave_1: entered allmulticast mode [ 66.594292][ T5092] bridge_slave_1: entered promiscuous mode [ 66.601752][ T5099] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.609689][ T5099] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.616871][ T5099] bridge_slave_0: entered allmulticast mode [ 66.624205][ T5099] bridge_slave_0: entered promiscuous mode [ 66.654995][ T5093] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.683786][ T5099] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.691526][ T5099] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.698706][ T5099] bridge_slave_1: entered allmulticast mode [ 66.706539][ T5099] bridge_slave_1: entered promiscuous mode [ 66.729310][ T5093] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.827474][ T5092] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.849837][ T5103] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.857070][ T5103] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.865087][ T5103] bridge_slave_0: entered allmulticast mode [ 66.872916][ T5103] bridge_slave_0: entered promiscuous mode [ 66.884277][ T5093] team0: Port device team_slave_0 added [ 66.890983][ T5095] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.898620][ T5095] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.905898][ T5095] bridge_slave_0: entered allmulticast mode [ 66.912995][ T5095] bridge_slave_0: entered promiscuous mode [ 66.922461][ T5095] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.929775][ T5095] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.936952][ T5095] bridge_slave_1: entered allmulticast mode [ 66.944442][ T5095] bridge_slave_1: entered promiscuous mode [ 66.954023][ T5092] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.966101][ T5099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.978275][ T5103] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.985573][ T5103] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.992988][ T5103] bridge_slave_1: entered allmulticast mode [ 67.000738][ T5103] bridge_slave_1: entered promiscuous mode [ 67.011557][ T5093] team0: Port device team_slave_1 added [ 67.060458][ T5099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.107726][ T5095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.150154][ T5103] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.180481][ T5095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.193356][ T5092] team0: Port device team_slave_0 added [ 67.214290][ T5103] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.225038][ T5093] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.234611][ T5093] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.264003][ T5093] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.291178][ T5092] team0: Port device team_slave_1 added [ 67.302096][ T5099] team0: Port device team_slave_0 added [ 67.330214][ T54] Bluetooth: hci1: command tx timeout [ 67.332873][ T5102] Bluetooth: hci0: command tx timeout [ 67.343760][ T5093] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.354653][ T5093] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.381190][ T5093] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.409078][ T5102] Bluetooth: hci2: command tx timeout [ 67.438352][ T5099] team0: Port device team_slave_1 added [ 67.460355][ T5103] team0: Port device team_slave_0 added [ 67.477890][ T5095] team0: Port device team_slave_0 added [ 67.484898][ T5092] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.493040][ T5092] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.519441][ T5102] Bluetooth: hci3: command tx timeout [ 67.525266][ T5102] Bluetooth: hci4: command tx timeout [ 67.531417][ T5092] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.543877][ T5092] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.550933][ T5092] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.577030][ T5092] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.603132][ T5103] team0: Port device team_slave_1 added [ 67.625191][ T5095] team0: Port device team_slave_1 added [ 67.654952][ T5099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.662097][ T5099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.688365][ T5099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.713559][ T5103] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.721144][ T5103] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.747774][ T5103] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.786511][ T5099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.793719][ T5099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.820209][ T5099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.837990][ T5103] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.845581][ T5103] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.872606][ T5103] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.902712][ T5095] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.910985][ T5095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.937069][ T5095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.982384][ T5093] hsr_slave_0: entered promiscuous mode [ 67.989016][ T5093] hsr_slave_1: entered promiscuous mode [ 67.997662][ T5095] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.004771][ T5095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.031672][ T5095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.055339][ T5092] hsr_slave_0: entered promiscuous mode [ 68.062419][ T5092] hsr_slave_1: entered promiscuous mode [ 68.068649][ T5092] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.077083][ T5092] Cannot create hsr debugfs directory [ 68.143482][ T5099] hsr_slave_0: entered promiscuous mode [ 68.150367][ T5099] hsr_slave_1: entered promiscuous mode [ 68.156959][ T5099] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.164929][ T5099] Cannot create hsr debugfs directory [ 68.203946][ T5103] hsr_slave_0: entered promiscuous mode [ 68.210642][ T5103] hsr_slave_1: entered promiscuous mode [ 68.216780][ T5103] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.224831][ T5103] Cannot create hsr debugfs directory [ 68.306427][ T5095] hsr_slave_0: entered promiscuous mode [ 68.313958][ T5095] hsr_slave_1: entered promiscuous mode [ 68.320760][ T5095] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.328316][ T5095] Cannot create hsr debugfs directory [ 68.911217][ T5093] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 68.933183][ T5093] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 68.943390][ T5093] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 68.957907][ T5093] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.019844][ T5092] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.044108][ T5092] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.058321][ T5092] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.081099][ T5092] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.158395][ T5103] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 69.183350][ T5103] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 69.194303][ T5103] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 69.221865][ T5103] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 69.312900][ T5099] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.323270][ T5099] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.347885][ T5099] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.378244][ T5099] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.410196][ T5102] Bluetooth: hci0: command tx timeout [ 69.415369][ T54] Bluetooth: hci1: command tx timeout [ 69.471948][ T5095] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.483308][ T5095] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.490154][ T54] Bluetooth: hci2: command tx timeout [ 69.525677][ T5095] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.551947][ T5095] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.569082][ T54] Bluetooth: hci4: command tx timeout [ 69.569670][ T5102] Bluetooth: hci3: command tx timeout [ 69.641732][ T5093] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.712478][ T5093] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.738384][ T5145] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.745827][ T5145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.791600][ T5145] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.798969][ T5145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.916221][ T5092] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.978605][ T5103] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.027837][ T5092] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.040489][ T5099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.096742][ T5147] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.104006][ T5147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.145498][ T5103] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.170539][ T5147] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.177728][ T5147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.198023][ T5099] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.235720][ T5146] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.242987][ T5146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.289500][ T5146] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.296688][ T5146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.307866][ T5146] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.315019][ T5146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.333557][ T5095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.361117][ T5146] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.368262][ T5146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.458121][ T5095] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.512043][ T5093] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.537487][ T5149] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.544649][ T5149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.569901][ T5149] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.577037][ T5149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.896552][ T5093] veth0_vlan: entered promiscuous mode [ 70.983340][ T5092] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.026625][ T5093] veth1_vlan: entered promiscuous mode [ 71.142674][ T5099] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.172934][ T5103] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.254997][ T5093] veth0_macvtap: entered promiscuous mode [ 71.307579][ T5093] veth1_macvtap: entered promiscuous mode [ 71.326910][ T5092] veth0_vlan: entered promiscuous mode [ 71.414986][ T5095] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.447414][ T5092] veth1_vlan: entered promiscuous mode [ 71.464415][ T5093] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.489525][ T5102] Bluetooth: hci1: command tx timeout [ 71.490472][ T54] Bluetooth: hci0: command tx timeout [ 71.517098][ T5093] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.545595][ T5093] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.556384][ T5093] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.568048][ T5093] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.579582][ T54] Bluetooth: hci2: command tx timeout [ 71.585626][ T5093] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.615468][ T5099] veth0_vlan: entered promiscuous mode [ 71.649622][ T54] Bluetooth: hci4: command tx timeout [ 71.653768][ T5102] Bluetooth: hci3: command tx timeout [ 71.656516][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.669603][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.726069][ T5099] veth1_vlan: entered promiscuous mode [ 71.788432][ T5092] veth0_macvtap: entered promiscuous mode [ 71.855040][ T5092] veth1_macvtap: entered promiscuous mode [ 71.868637][ T5095] veth0_vlan: entered promiscuous mode [ 71.894741][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.915266][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.948672][ T5095] veth1_vlan: entered promiscuous mode [ 71.968443][ T5103] veth0_vlan: entered promiscuous mode [ 71.997181][ T5092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.010333][ T5092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.022687][ T5092] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.034808][ T5099] veth0_macvtap: entered promiscuous mode [ 72.046842][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.067302][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.076303][ T5092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.086990][ T5092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.099812][ T5092] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.124193][ T5099] veth1_macvtap: entered promiscuous mode [ 72.136668][ T5092] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.147249][ T5092] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.157404][ T5092] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.166418][ T5092] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.184685][ T5103] veth1_vlan: entered promiscuous mode [ 72.302290][ T5099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.314066][ T5099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.324157][ T5099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.334903][ T5099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.347321][ T5099] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.365097][ T5095] veth0_macvtap: entered promiscuous mode [ 72.399966][ T5099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.415899][ T5099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.434611][ T5099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.445359][ T5099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.473481][ T5099] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.540035][ T5099] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.559947][ T5099] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.570514][ T5183] loop3: detected capacity change from 0 to 64 [ 72.580992][ T5099] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.591160][ T5099] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.608301][ T5095] veth1_macvtap: entered promiscuous mode [ 72.652222][ T5103] veth0_macvtap: entered promiscuous mode [ 72.742522][ T2409] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.764755][ T2409] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.775834][ T5103] veth1_macvtap: entered promiscuous mode [ 72.846740][ T5095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.861120][ T5095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.872949][ T5095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.883546][ T5095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.903907][ T5095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.925856][ T5095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.938032][ T5095] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.016184][ T5095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.036023][ T5191] input: syz0 as /devices/virtual/input/input5 [ 73.058982][ T5095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.081775][ T5095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.094382][ T5095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.104688][ T5095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.115482][ T5095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.129172][ T5095] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.190065][ T2890] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.205709][ T2890] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.217162][ T5103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.230003][ T5103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.244506][ T5103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.246436][ T5194] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 73.262120][ T5103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.277772][ T5103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.288635][ T5103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.299961][ T5103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.310659][ T5103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.322450][ T5103] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.355674][ T5095] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.364622][ T5095] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.375355][ T5095] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.385859][ T5095] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.404930][ T5194] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12'. [ 73.428188][ T5103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.444257][ T5103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.454631][ T5103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.466298][ T5103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.476220][ T5103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.486694][ T5103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.496796][ T5103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.507326][ T5103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.519405][ T5103] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.528033][ T959] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.537313][ T959] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.550076][ T5194] bridge_slave_1: left allmulticast mode [ 73.555775][ T5194] bridge_slave_1: left promiscuous mode [ 73.562722][ T5194] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.576322][ T5102] Bluetooth: hci1: command tx timeout [ 73.578971][ T54] Bluetooth: hci0: command tx timeout [ 73.658959][ T54] Bluetooth: hci2: command tx timeout [ 73.673946][ T5103] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.685900][ T5103] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.721702][ T5103] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.730603][ T54] Bluetooth: hci3: command tx timeout [ 73.739357][ T54] Bluetooth: hci4: command tx timeout [ 73.767093][ T5103] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.878677][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.886877][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.103912][ T5207] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 74.124643][ T2409] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.135597][ T2409] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.159947][ T25] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 74.255334][ T2890] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.271346][ T2890] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.292647][ T5211] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 74.369217][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 74.403900][ T25] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 74.427147][ T25] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 74.447159][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.459340][ T25] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 74.479564][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.497715][ T25] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 74.528526][ T25] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 74.550258][ T25] usb 1-1: Product: syz [ 74.576086][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.578532][ T25] usb 1-1: Manufacturer: syz [ 74.597623][ T25] usb 1-1: SerialNumber: syz [ 74.627275][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.635500][ T5203] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 74.679890][ T25] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input6 [ 74.746234][ C1] appletouch 1-1:1.0: atp_complete: usb_submit_urb failed with result -1 [ 75.164471][ C0] appletouch 1-1:1.0: atp_complete: usb_submit_urb failed with result -1 [ 75.168653][ T25] usb 1-1: USB disconnect, device number 2 [ 75.239858][ T5235] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 75.302470][ T25] appletouch 1-1:1.0: input: appletouch disconnected [ 75.323089][ T5232] Oops: stack segment: 0000 [#1] PREEMPT SMP KASAN PTI [ 75.323128][ T5232] CPU: 0 UID: 0 PID: 5232 Comm: syz.3.26 Not tainted 6.10.0-rc5-next-20240628-syzkaller #0 [ 75.323154][ T5232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 75.323168][ T5232] RIP: 0010:dev_hash_map_redirect+0x64/0x620 [ 75.323220][ T5232] Code: 00 48 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 af a2 3d 00 48 8b 03 48 89 44 24 08 48 8d 58 38 48 89 dd 48 c1 ed 03 <42> 0f b6 44 3d 00 84 c0 0f 85 f5 03 00 00 44 8b 33 44 89 f6 83 e6 [ 75.323242][ T5232] RSP: 0018:ffffc900044e76e0 EFLAGS: 00010202 [ 75.323262][ T5232] RAX: 0000000000000000 RBX: 0000000000000038 RCX: 0000000000040000 [ 75.323277][ T5232] RDX: ffffc90009b8b000 RSI: 0000000000001cd1 RDI: 0000000000001cd2 [ 75.323303][ T5232] RBP: 0000000000000007 R08: 0000000000000007 R09: ffffffff81b5e91f [ 75.323317][ T5232] R10: 0000000000000004 R11: ffff888046a65a00 R12: 0000000000000008 [ 75.323330][ T5232] R13: 00000000044e7738 R14: 0000000000000000 R15: dffffc0000000000 [ 75.323345][ T5232] FS: 00007f7fc41a26c0(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 75.323363][ T5232] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 75.323377][ T5232] CR2: 000000002000f000 CR3: 000000007ab3c000 CR4: 00000000003526f0 [ 75.323394][ T5232] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 75.323407][ T5232] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 75.323420][ T5232] Call Trace: [ 75.323428][ T5232] [ 75.323436][ T5232] ? __die_body+0x88/0xe0 [ 75.323469][ T5232] ? die+0xcf/0x110 [ 75.323500][ T5232] ? do_trap+0x15a/0x3a0 [ 75.323530][ T5232] ? do_error_trap+0x1dc/0x2c0 [ 75.323561][ T5232] ? __pfx_do_error_trap+0x10/0x10 [ 75.323589][ T5232] ? __pfx_lock_release+0x10/0x10 [ 75.323618][ T5232] ? rcu_is_watching+0x15/0xb0 [ 75.323650][ T5232] ? exc_stack_segment+0x38/0x50 [ 75.323688][ T5232] ? asm_exc_stack_segment+0x26/0x30 [ 75.323730][ T5232] ? bpf_ringbuf_query+0x4f/0x150 [ 75.323759][ T5232] ? dev_hash_map_redirect+0x64/0x620 [ 75.323791][ T5232] bpf_prog_ec9efaa32d58ce69+0x56/0x5a [ 75.323815][ T5232] bpf_prog_run_generic_xdp+0x679/0x14c0 [ 75.323858][ T5232] do_xdp_generic+0x673/0xb90 [ 75.323886][ T5232] ? __pfx_do_xdp_generic+0x10/0x10 [ 75.323908][ T5232] ? tun_get_user+0x26c8/0x4560 [ 75.323952][ T5232] ? tun_get_user+0x26c8/0x4560 [ 75.323981][ T5232] tun_get_user+0x2805/0x4560 [ 75.324025][ T5232] ? __pfx_tun_get_user+0x10/0x10 [ 75.324059][ T5232] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 75.324092][ T5232] ? tun_get+0x1e/0x2f0 [ 75.324131][ T5232] ? tun_get+0x1e/0x2f0 [ 75.324160][ T5232] ? tun_get+0x27d/0x2f0 [ 75.324190][ T5232] tun_chr_write_iter+0x113/0x1f0 [ 75.324223][ T5232] vfs_write+0xa72/0xc90 [ 75.324257][ T5232] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 75.324289][ T5232] ? __pfx_vfs_write+0x10/0x10 [ 75.324320][ T5232] ? do_futex+0x33b/0x560 [ 75.324358][ T5232] ksys_write+0x1a0/0x2c0 [ 75.324380][ T5232] ? __pfx_ksys_write+0x10/0x10 [ 75.324400][ T5232] ? do_syscall_64+0x100/0x230 [ 75.324429][ T5232] ? do_syscall_64+0xb6/0x230 [ 75.324457][ T5232] do_syscall_64+0xf3/0x230 [ 75.324484][ T5232] ? clear_bhb_loop+0x35/0x90 [ 75.324506][ T5232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.324540][ T5232] RIP: 0033:0x7f7fc337471f [ 75.324562][ T5232] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 29 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 7c 8c 02 00 48 [ 75.324580][ T5232] RSP: 002b:00007f7fc41a2010 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 75.324602][ T5232] RAX: ffffffffffffffda RBX: 00007f7fc3503fa0 RCX: 00007f7fc337471f [ 75.324618][ T5232] RDX: 000000000000fdef RSI: 0000000020000000 RDI: 00000000000000c8 [ 75.324631][ T5232] RBP: 00007f7fc33f677e R08: 0000000000000000 R09: 0000000000000000 [ 75.324644][ T5232] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000000 [ 75.324657][ T5232] R13: 000000000000000b R14: 00007f7fc3503fa0 R15: 00007ffea44fd308 [ 75.324682][ T5232] [ 75.324689][ T5232] Modules linked in: [ 75.324754][ T5232] ---[ end trace 0000000000000000 ]--- [ 75.725087][ T5232] RIP: 0010:dev_hash_map_redirect+0x64/0x620 [ 75.731104][ T5232] Code: 00 48 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 af a2 3d 00 48 8b 03 48 89 44 24 08 48 8d 58 38 48 89 dd 48 c1 ed 03 <42> 0f b6 44 3d 00 84 c0 0f 85 f5 03 00 00 44 8b 33 44 89 f6 83 e6 [ 75.750761][ T5232] RSP: 0018:ffffc900044e76e0 EFLAGS: 00010202 [ 75.756868][ T5232] RAX: 0000000000000000 RBX: 0000000000000038 RCX: 0000000000040000 [ 75.764943][ T5232] RDX: ffffc90009b8b000 RSI: 0000000000001cd1 RDI: 0000000000001cd2 [ 75.772978][ T5232] RBP: 0000000000000007 R08: 0000000000000007 R09: ffffffff81b5e91f [ 75.781021][ T5232] R10: 0000000000000004 R11: ffff888046a65a00 R12: 0000000000000008 [ 75.789051][ T5232] R13: 00000000044e7738 R14: 0000000000000000 R15: dffffc0000000000 [ 75.797044][ T5232] FS: 00007f7fc41a26c0(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 75.806041][ T5232] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 75.812664][ T5232] CR2: 000000002000f000 CR3: 000000007ab3c000 CR4: 00000000003526f0 [ 75.820702][ T5232] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 75.828825][ T5232] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 75.836848][ T5232] Kernel panic - not syncing: Fatal exception in interrupt [ 75.844467][ T5232] Kernel Offset: disabled [ 75.848798][ T5232] Rebooting in 86400 seconds..