last executing test programs: 16.635552552s ago: executing program 3 (id=60): syz_init_net_socket$x25(0x9, 0x5, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) io_setup(0x4, &(0x7f0000000080)=0x0) io_getevents(r0, 0xfffffffd, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x80, 0x22) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1f, 0x7, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="500100001a000100000000000200000002001c1f0000c8"], 0x150}, 0x1, 0x0, 0x0, 0x2000c094}, 0x4040084) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x18) copy_file_range(r1, 0xffffffffffffffff, r1, 0x0, 0x0, 0x0) ioctl$TIOCSERGETLSR(r1, 0x5459, &(0x7f0000000100)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) chdir(0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000040000000600000006", @ANYRES8=r3], 0x66) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r6}, 0x38) 13.436736639s ago: executing program 1 (id=66): syz_clone3(0x0, 0x0) syz_open_dev$evdev(&(0x7f00000002c0), 0x1, 0xa00) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89b0, &(0x7f0000000140)={'vlan1\x00', &(0x7f0000000080)=@ethtool_cmd={0x0, 0x0, 0x0, 0xfff6, 0x0, 0x0, 0x0, 0xf, 0x6, 0x1, 0x0, 0x0, 0x2, 0x0, 0x44, 0x0, [0x0, 0x1]}}) 12.431830476s ago: executing program 1 (id=69): r0 = syz_open_dev$vim2m(0x0, 0x20007, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x58}}, 0x0) geteuid() ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0xc04c561a, &(0x7f0000000180)) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) io_uring_setup(0x6e8, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r2, 0xfffffffc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r5, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x1802, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r7, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7", 0xf) r8 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r8, 0x0, 0x0, 0x4040810) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r8, 0x84, 0x1e, &(0x7f0000000000)=0x8000, 0x4) 12.049489462s ago: executing program 2 (id=72): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000440)=0x7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xf9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000200)) 11.898509727s ago: executing program 1 (id=73): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getrusage(0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffc000/0x3000)=nil) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000007000000080000002220000000000000", @ANYRES32, @ANYBLOB="01000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='O', 0x1, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) sendmmsg$inet(r3, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee3c0cb001829a8681ed391da1a71d8d", 0x63}], 0x1}}], 0x1, 0x20008000) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r5, &(0x7f0000000000)='\"', 0x1) bind$bt_hci(r6, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r6, &(0x7f0000000000), 0xd) syz_open_dev$tty1(0xc, 0x4, 0x2) 11.86300768s ago: executing program 3 (id=74): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x200, 0x0) close(r1) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r2, 0x0, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x60b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0xa, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0xf}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000040}, 0x4008000) r5 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r5, 0x0, 0x0, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r4, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) 9.951116124s ago: executing program 2 (id=78): r0 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000580)='\xc1J\xaf\xfd,\x86\xbc\xa9\x02\xf2\xf6\xe2\xcd\x9f\xf6\x83\xeb\xba_6\xfdR\xd0\x8d\xc1\xf6.$w\xab|*`\x11H+^\xbb\x8ar\xb1\x8ec\xec,\xd5\xfd,\xce`\x9f\x92\xb4\xbe\x06?\xaa\x16Q\x94\x15\xbe\x80E\x9c\x93Hq?<(+\xceb0\xcc\xad\xdd\x1c\xee\x19\x1b\x91Z\x85\xb7\x04\xe7\xaf\xe0W,G\xc8\xc0\xbcR\x90\x17\x19@m\xa5\x19\x16i\xc8\x99)\xa5\xb0\xba\xbc\xe0rV\x06\xd0B\x0f\xcdF\xbc\x8e\x8a^%8k\x849S\x15=kxS\x1c\xc1\xdaT\x9c\b\xb6\xd8\xa0st~\xf1\x93\xb8\xba\xa5gV\x18F\x8f\xe4b\xdc\x19_P\x81\xa4\xc3\\g\x11\xd1\xc8 U\xba\x03\xc9\xf17\x88\r\xb99]\xdfM\xc8AQB\xc3\xf0\xf7t\xee\x95&w\xc3;', 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000780)='{:\'@-\x00\x9dF\x15\x86!\xa0\x85\xb9\x1f\xed\xb7X\x80\nQ\xf8\xc9\xf9|o3 S\xf7\x1eQr\xb1\xea\xe4\x16\xd8\x1c\\]\xb9\t\x92\xb0\x17\xdc*\xcd*\xc7:%\\LG\xa1\xd5c\x05T;\x99k\xe8\\\x8d5\x1c\xb2\x9e\x8eFV\x0e_gw\xc9^\xd8\xc6\t\xf5\xb1!\x97\x97x\x14:\x1e\x16\x0f&Tk.\xae6\'+\xcf\a\xe1\x87(l\xe0\x00|\n?u\xb8\xd3H\vt\xcc\xa1\x85\xf0\xd7\xd6wzx\xb9\x1c\xc9i\x9fc[u$$\a\xff2\x06\x03|(\xbc\xf4il@OA\f*\xd2', 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000a40)='^,/\x00', &(0x7f0000000a80)='fuseblk\x00', 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0xffffffffffffffa9, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x9, 0x2012, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r3, &(0x7f00000004c0)={0x293, 0x7d, 0x0, {{0x500, 0xf0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1f, ' nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x232) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) keyctl$read(0xb, 0x0, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) r5 = dup(r2) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x103, 0x100, 0x551}}) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x107, 0x100, 0x100, 0x1, 0x4000}}) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYRES64=r5], 0x0, 0x37, 0x0, 0x1, 0x7, 0x10000, @value=r5}, 0x28) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000004440)=ANY=[@ANYBLOB="0e00000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="020000000100"/28], 0x50) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x4, 0x8040000000000000}) close_range(r7, 0xffffffffffffffff, 0x0) 9.870416172s ago: executing program 3 (id=79): syz_clone3(0x0, 0x0) syz_open_dev$evdev(&(0x7f00000002c0), 0x1, 0xa00) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89b0, &(0x7f0000000140)={'vlan1\x00', &(0x7f0000000080)=@ethtool_cmd={0x0, 0x0, 0x0, 0xfff6, 0x0, 0x0, 0x0, 0xf, 0x6, 0x1, 0x0, 0x0, 0x2, 0x0, 0x44, 0x0, [0x0, 0x1]}}) 7.431850066s ago: executing program 3 (id=80): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = syz_io_uring_setup(0x49a, &(0x7f0000000200)={0x0, 0xbe5b, 0x10, 0x2, 0x40288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) socket$can_j1939(0x1d, 0x2, 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, 0x0, &(0x7f00000000c0)='affs\x00', 0xa08410, 0x0) io_uring_setup(0x3eb1, &(0x7f0000000080)={0x0, 0x8003fde, 0x800, 0x2, 0x184}) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) socket$key(0xf, 0x3, 0x2) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7f) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000000c0)={0x9, 0x0, 0x0, 0x6}, 0x10) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x40000120, 0x4aa52520f215cfe4, {0x2}}) io_uring_enter(r2, 0x154e, 0x0, 0x41, 0x0, 0x0) 7.400959129s ago: executing program 2 (id=81): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0xa, 0x3, 0x3a) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x80042, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0xfce1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/236) 6.386605346s ago: executing program 2 (id=84): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x1000, 0x25dfdbfe, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xffffffff, 0x11e41e7a, 0x8, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x8000, 0x0, 0xfffffffc}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x14, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r3, 0x0, 0x480, &(0x7f0000000340), &(0x7f00000003c0)=0x40) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) getresuid(&(0x7f0000000100)=0x0, 0x0, &(0x7f0000000200)) fstat(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000040)='./file1\x00', r4, r5) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) lsetxattr$security_capability(0x0, 0x0, &(0x7f0000000600)=@v3={0x3000000, [{0x9, 0x7}, {0x200, 0x9}]}, 0x18, 0x1) r6 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) mknodat$loop(r6, &(0x7f0000001600)='./file1\x00', 0x200, 0x0) link(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffff9c, 0x0, 0x121840, 0xa) 5.868700446s ago: executing program 4 (id=87): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48c00, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(r1, &(0x7f0000000500)=[{{&(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0xbf, 0x0}}], 0x73d, 0x0, 0x0) 5.72403527s ago: executing program 0 (id=88): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff14) 5.547606367s ago: executing program 4 (id=89): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x200, 0x0) close(r1) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r2, 0x0, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x9d49}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x60b926, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xffff, 0xb}, {0xa, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0xf}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000040}, 0x4008000) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, 0x0, 0x0, 0x40, &(0x7f00000001c0)={0x11, 0x8100, 0x0, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) 5.466439355s ago: executing program 0 (id=90): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89b0, &(0x7f0000000140)={'vlan1\x00', &(0x7f0000000080)=@ethtool_cmd={0x0, 0x0, 0x0, 0xfff6, 0x0, 0x0, 0x0, 0xf, 0x6, 0x1, 0x0, 0x0, 0x2, 0x0, 0x44, 0x0, [0x0, 0x1]}}) 5.337920177s ago: executing program 0 (id=91): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3f) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002a80)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x2, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x4000}, {0x0, 0x2, 0x1, 0x1, 0x0, 0x9}, 0x0, 0x0, 0xf1e}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xc79753c9f991ecb1}, @TCA_TBF_PBURST={0x8, 0x7, 0x1231}]}}]}, 0x6c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d}, 0x94) openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x0, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x5) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001b700)=""/102392, 0x18ff8) fsopen(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_setup(0x3ab, &(0x7f0000000140)={0x0, 0x587f, 0x24400, 0x1, 0xfffffdfc}, &(0x7f0000000040)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ACCEPT={0xd, 0xab, 0x3, 0xffffffffffffffff, &(0x7f00000000c0)=0x80, &(0x7f0000000380)=@l2={0x1f, 0x0, @none}, 0x0, 0x800, 0x1}) syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r6, r5, &(0x7f00000000c0)=0x58, 0x8) 4.698473039s ago: executing program 4 (id=92): r0 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000300)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff30, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x60, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan0\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_create_resource$binfmt(&(0x7f0000000180)='./file1\x00') rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) ioctl$VIDIOC_DQEVENT(r0, 0x80785659, &(0x7f0000000440)={0x0, @frame_sync}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000350001002bbd7004fedbdb250400000008000400020000000c0005"], 0x28}, 0x1, 0x0, 0x0, 0x20040050}, 0x24000080) 4.697483519s ago: executing program 1 (id=93): ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @ioapic={0x8000000, 0x5, 0x6, 0x100, 0x0, [{0x8, 0xb, 0xb, '\x00', 0x9}, {0x1, 0x1, 0x1, '\x00', 0x7}, {0x8, 0x5, 0x0, '\x00', 0x10}, {0x6, 0x9, 0x9, '\x00', 0x5}, {0x5, 0x5, 0x2, '\x00', 0x9}, {0x3e, 0x2c, 0x6, '\x00', 0x1}, {0x1, 0x5, 0xc, '\x00', 0x77}, {0x74, 0x7, 0x4, '\x00', 0xe}, {0xfc, 0xb}, {0x3, 0x0, 0x4, '\x00', 0x7}, {0x7, 0xa, 0x5, '\x00', 0x3}, {0x5, 0x6, 0x8, '\x00', 0x40}, {0x2, 0xd, 0x7, '\x00', 0x40}, {0x7, 0x7, 0x5, '\x00', 0x2}, {0xfe, 0xd0, 0xfa, '\x00', 0x2}, {0x2, 0x9, 0x3, '\x00', 0x5}, {0xa, 0xf, 0x7, '\x00', 0x4}, {0xe, 0x1, 0x67}, {0x7, 0x3, 0x6, '\x00', 0x4}, {0x8, 0xff, 0x4, '\x00', 0xd1}, {0x2, 0x7, 0x1, '\x00', 0x5}, {0x4, 0x1, 0x5, '\x00', 0xe5}, {0x5, 0x85, 0xc, '\x00', 0x1}, {0x3, 0xf7, 0x9, '\x00', 0x6b}]}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x82042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000000000071000040"]) 3.43994896s ago: executing program 4 (id=94): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0xa, 0x3, 0x3a) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x80042, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0xfce1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/236) 3.412400582s ago: executing program 1 (id=95): syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setattr(r0, &(0x7f0000000000)={0x38, 0x5, 0x18, 0x3, 0x1, 0x3, 0x605, 0x1, 0x6, 0x9}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0xfffffffffffffeef, &(0x7f0000000240)=0x2) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 3.33321693s ago: executing program 4 (id=96): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='nv', 0x2) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @sack_perm, @mss={0x2, 0x7}, @window={0x3, 0x3, 0x401}, @window], 0x21) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r0, &(0x7f0000000100)=""/24, 0xfffffffffffffd5b, 0xc9100120, 0x0, 0xfffffffffffffd25) 3.115959761s ago: executing program 0 (id=97): r0 = syz_open_dev$dri(0x0, 0x1, 0x400000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = gettid() sched_setscheduler(r1, 0x6, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0xa00, 0x0) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000017c0), 0x44003, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r3, 0x18, &(0x7f00000000c0)={0xf, r0, 0x10, {0xc4, 0x1}, 0x83}, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r7, 0x4048ae9b, &(0x7f0000000080)={0xe0003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x83, 0xffffffffefffff15, 0x3, 0x4, 0x4, 0x3]}}) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_IDLE(r8, 0x103, 0x7, 0x0, &(0x7f0000000040)) ioctl$KVM_RUN(r7, 0xae80, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) close_range(r4, r2, 0x2) r9 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r10, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) bind$inet(r9, 0x0, 0x0) epoll_create1(0x0) epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) 2.80997028s ago: executing program 0 (id=98): bind$inet(0xffffffffffffffff, &(0x7f0000000c80)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) keyctl$session_to_parent(0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x6, &(0x7f0000000fc0)=ANY=[@ANYBLOB="8d1000000400000018", @ANYRES32], &(0x7f00000003c0)='GPL\x00'}, 0x94) keyctl$session_to_parent(0x12) 2.679522603s ago: executing program 0 (id=99): bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x8, 0x395, 0x5, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x2, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) write$tun(r1, &(0x7f0000000180)={@void, @void, @arp=@generic={0xfffe, 0x88be, 0x6, 0x0, 0xa, @multicast, "", @broadcast}}, 0x14) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000300)={0x0, 0x0}) sched_setscheduler(r2, 0x1, &(0x7f0000000280)=0x3) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = io_uring_setup(0x332, &(0x7f0000000080)={0x0, 0x21e, 0x10}) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) statx(r0, &(0x7f0000000180)='\x00', 0x1000, 0x310, &(0x7f00000004c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x28c81, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r8, 0x3304) open(&(0x7f0000000000)='\x00', 0x40440, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8b04, &(0x7f0000000100)={'wlan1\x00', @random='\n\x00'}) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) tkill(r3, 0xd) 2.627907748s ago: executing program 2 (id=100): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QUERYBUF(r3, 0xc044560f, &(0x7f0000000080)=@mmap={0x0, 0x2, 0x4, 0x0, 0x7, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "10110401"}}) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)}], 0x1}, 0x4048043) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4804) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 1.154299879s ago: executing program 3 (id=101): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff14) 398.541942ms ago: executing program 3 (id=102): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x200, 0x0) close(r1) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r2, 0x0, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x9d49}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x60b926, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xffff, 0xb}, {0xa, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0xf}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000040}, 0x4008000) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, 0x0, 0x0, 0x40, &(0x7f00000001c0)={0x11, 0x8100, 0x0, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) 171.959994ms ago: executing program 1 (id=103): r0 = socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) r2 = accept4$vsock_stream(r0, &(0x7f0000000100)={0x28, 0x0, 0x2711, @my=0x1}, 0x10, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x88031, r2, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket(0x18, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x8046) r7 = accept4$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14, 0x80000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f627269646765001400010077673200000000"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0300000000000000000002000002300003802c000380140001006475"], 0x84}}, 0x20008040) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, 0x0, 0x0) r9 = socket(0x10, 0x3, 0x0) ptrace(0x4207, 0x0) write(r9, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) 2.26845ms ago: executing program 2 (id=104): bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000200)=0x4) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close(r0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x4e21, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0xb}}}, 0xb8}}, 0x0) 0s ago: executing program 4 (id=105): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000300)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff30, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) dup(0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x14) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000440)={r4, 0x2000, {0x0, 0x0, 0x0, 0x8, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x1c, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03741250ceaac50104000041dd17c18e8438ef2a565ef1e833236500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a5e77a68e174f000300ffffffffff0fe200"}}) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r4) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000500)=ANY=[@ANYBLOB="600000000314010000000000000000000900020073797a3000000000080041007369770014003300766c616e3100000000000000000000000900020073797a32000000000800410072786500140033006970766c616e300000000000000000008ae72ba8724be28929561418ee1192dc0fcc0d2a096a5736397cca91da60e7167c4dd93530df5b3715c21678d22e214ae67632ac360a8726400246360be3dcff0af0f418ce9a57cbe1eef829be55a55efa3f7a232412ce2879ef5a3123cb06b15fa7cbd4315835888c11be1279b77acf67ecde54a09b1b76a62d4b70dcc60618e7ee117d"], 0x60}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_create_resource$binfmt(&(0x7f0000000180)='./file1\x00') rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) io_setup(0x8, &(0x7f0000002740)=0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) io_submit(r6, 0x1, &(0x7f0000000480)=[&(0x7f0000000880)={0x0, 0x0, 0x0, 0x7, 0x8, r7, 0x0, 0x0, 0x6}]) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.168' (ED25519) to the list of known hosts. [ 49.163722][ T4172] cgroup: Unknown subsys name 'net' [ 49.311192][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 50.551581][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 51.962099][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 51.989958][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 52.046686][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 52.065071][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 52.118525][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 52.184894][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.193097][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.201405][ T4194] device bridge_slave_0 entered promiscuous mode [ 52.215682][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.222985][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.230845][ T4192] device bridge_slave_0 entered promiscuous mode [ 52.241702][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.249062][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.257049][ T4192] device bridge_slave_1 entered promiscuous mode [ 52.274955][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.282194][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.292788][ T4194] device bridge_slave_1 entered promiscuous mode [ 52.300045][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.307844][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.315918][ T4187] device bridge_slave_0 entered promiscuous mode [ 52.347868][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.355000][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.362845][ T4187] device bridge_slave_1 entered promiscuous mode [ 52.402852][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.410138][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.418291][ T4183] device bridge_slave_0 entered promiscuous mode [ 52.435037][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.446736][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.461820][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.469461][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.477816][ T4183] device bridge_slave_1 entered promiscuous mode [ 52.484818][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.492080][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.500390][ T4184] device bridge_slave_0 entered promiscuous mode [ 52.509354][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.520156][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.542553][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.559646][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.567034][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.575180][ T4184] device bridge_slave_1 entered promiscuous mode [ 52.592840][ T4194] team0: Port device team_slave_0 added [ 52.600431][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.633331][ T4194] team0: Port device team_slave_1 added [ 52.648372][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.665270][ T4192] team0: Port device team_slave_0 added [ 52.687668][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.698776][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.710076][ T4192] team0: Port device team_slave_1 added [ 52.724617][ T4187] team0: Port device team_slave_0 added [ 52.739795][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.758146][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.765590][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.792143][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.805006][ T4187] team0: Port device team_slave_1 added [ 52.832891][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.840111][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.866506][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.887276][ T4183] team0: Port device team_slave_0 added [ 52.903708][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.912185][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.939216][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.970587][ T4183] team0: Port device team_slave_1 added [ 52.978453][ T4184] team0: Port device team_slave_0 added [ 52.990708][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.998043][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.024270][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.042783][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.049806][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.076017][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.088607][ T4184] team0: Port device team_slave_1 added [ 53.094808][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.101895][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.133934][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.177109][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.184071][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.210335][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.223086][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.230118][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.256152][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.291758][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.298824][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.325093][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.340125][ T4194] device hsr_slave_0 entered promiscuous mode [ 53.347036][ T4194] device hsr_slave_1 entered promiscuous mode [ 53.357312][ T4192] device hsr_slave_0 entered promiscuous mode [ 53.364021][ T4192] device hsr_slave_1 entered promiscuous mode [ 53.370765][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.379006][ T4192] Cannot create hsr debugfs directory [ 53.387219][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.394165][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.420376][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.475049][ T4187] device hsr_slave_0 entered promiscuous mode [ 53.481932][ T4187] device hsr_slave_1 entered promiscuous mode [ 53.488791][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.496497][ T4187] Cannot create hsr debugfs directory [ 53.542985][ T4183] device hsr_slave_0 entered promiscuous mode [ 53.549745][ T4183] device hsr_slave_1 entered promiscuous mode [ 53.556649][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.564225][ T4183] Cannot create hsr debugfs directory [ 53.590696][ T4184] device hsr_slave_0 entered promiscuous mode [ 53.596839][ T23] Bluetooth: hci4: command 0x0409 tx timeout [ 53.597112][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 53.611130][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 53.611482][ T4184] device hsr_slave_1 entered promiscuous mode [ 53.617588][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 53.629895][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 53.631413][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.644307][ T4184] Cannot create hsr debugfs directory [ 53.897301][ T4192] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 53.908523][ T4192] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 53.919062][ T4192] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 53.928895][ T4192] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 53.990952][ T4194] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 54.013246][ T4194] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 54.030888][ T4194] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 54.049643][ T4194] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 54.102233][ T4184] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.123891][ T4184] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 54.134525][ T4184] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 54.152187][ T4184] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 54.173265][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.195097][ T4187] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.229149][ T4187] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.249960][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.263594][ T4187] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.273119][ T4187] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.283048][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.293184][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.320044][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.331688][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.341984][ T1278] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.349268][ T1278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.364155][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.373579][ T4183] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 54.386190][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.394697][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.404549][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.413345][ T1278] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.420470][ T1278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.438568][ T4183] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 54.447622][ T4183] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 54.459289][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.481529][ T4183] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 54.501063][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.511153][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.520501][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.553151][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.563202][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.573466][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.582800][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.589896][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.598839][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.608114][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.617501][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.626413][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.634771][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.643519][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.652709][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.661396][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.684652][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.694164][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.703733][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.712363][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.719718][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.729634][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.738253][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.747577][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.760600][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.779616][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.789468][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.798626][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.815541][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.838281][ T4194] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 54.853869][ T4194] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.869429][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.883061][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.893728][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.902086][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.911238][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.919884][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.928634][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.938399][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.947606][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.956360][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.991313][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.002160][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.027145][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.034334][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.042806][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.066927][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.075455][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.082833][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.110164][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.119742][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.135643][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.159172][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.185015][ T4184] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 55.197703][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.209666][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.219178][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.230360][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.239198][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.248165][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.256709][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.265226][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.273996][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.282672][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.291941][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.299962][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.308194][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.324755][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.344600][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.353568][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.362795][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.371305][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.379835][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.400219][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.420797][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.430251][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.439984][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.447120][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.455484][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.466898][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.476411][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.499776][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.525690][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.535086][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.550107][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.560344][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.569235][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.576340][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.584116][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.593833][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.604260][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.613297][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.622167][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.644899][ T4192] device veth0_vlan entered promiscuous mode [ 55.668889][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.676853][ T4240] Bluetooth: hci4: command 0x041b tx timeout [ 55.680391][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.691145][ T4252] Bluetooth: hci3: command 0x041b tx timeout [ 55.697085][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.702279][ T4252] Bluetooth: hci1: command 0x041b tx timeout [ 55.705700][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.712325][ T4252] Bluetooth: hci2: command 0x041b tx timeout [ 55.720274][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.729180][ T4252] Bluetooth: hci0: command 0x041b tx timeout [ 55.734196][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.748053][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.757905][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.766978][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.774504][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.782647][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.791173][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.799737][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.808250][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.816219][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.823920][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.845122][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.853167][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.864449][ T4194] device veth0_vlan entered promiscuous mode [ 55.873769][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.887651][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.895446][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.912305][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.926662][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.935198][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.942332][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.966652][ T4192] device veth1_vlan entered promiscuous mode [ 55.978038][ T4194] device veth1_vlan entered promiscuous mode [ 55.990481][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.999131][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.008676][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.017014][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.025494][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.034250][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.041360][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.051000][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.061339][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.070589][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.127624][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.135708][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.144416][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.154870][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.164150][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.188578][ T4192] device veth0_macvtap entered promiscuous mode [ 56.204880][ T4184] device veth0_vlan entered promiscuous mode [ 56.213527][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.222185][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.231300][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.243917][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.253010][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.261672][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.271294][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.282165][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.290146][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.298321][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.312925][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.320853][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.331790][ T4192] device veth1_macvtap entered promiscuous mode [ 56.341888][ T4194] device veth0_macvtap entered promiscuous mode [ 56.356821][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.365069][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.373995][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.388653][ T4194] device veth1_macvtap entered promiscuous mode [ 56.399121][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.407069][ T4184] device veth1_vlan entered promiscuous mode [ 56.423094][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.431343][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.440059][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.448802][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.462723][ T4183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.474573][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.493716][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.504267][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.512853][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.521595][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.531637][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.540704][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.550545][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.572763][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.591403][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.603854][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.617330][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.638304][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.650913][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.660366][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.670708][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.679586][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.688998][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.698375][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.712783][ T4194] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.723233][ T4194] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.732484][ T4194] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.741304][ T4194] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.767886][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.776930][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.786660][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.798152][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.810058][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.819053][ T4184] device veth0_macvtap entered promiscuous mode [ 56.838465][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.847086][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.854793][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.862774][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.871999][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.886362][ T4192] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.895080][ T4192] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.904483][ T4192] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.913518][ T4192] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.932737][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.941455][ T4187] device veth0_vlan entered promiscuous mode [ 56.975970][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.983494][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.006918][ T4184] device veth1_macvtap entered promiscuous mode [ 57.023126][ T4187] device veth1_vlan entered promiscuous mode [ 57.054095][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.078786][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.091120][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.105708][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.119135][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.160687][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.169735][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.178937][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.188268][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.197951][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.209702][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.220836][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.230994][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.242040][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.253753][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.276419][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.293341][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.308382][ T4184] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.318787][ T4184] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.328628][ T4184] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.337721][ T4184] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.366608][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.374713][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.393630][ T4187] device veth0_macvtap entered promiscuous mode [ 57.401970][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.418038][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.433133][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.443497][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.453369][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.462213][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.471098][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.480073][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.490251][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.500946][ T4187] device veth1_macvtap entered promiscuous mode [ 57.551178][ T385] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.556193][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.564420][ T385] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.570379][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.588904][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.593207][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.608688][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.619399][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.629481][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.640375][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.651556][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.663443][ T4183] device veth0_vlan entered promiscuous mode [ 57.676357][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.684486][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.697322][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.705319][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.714156][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.723773][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.732248][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.740543][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.749088][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.756415][ T1325] Bluetooth: hci0: command 0x040f tx timeout [ 57.756460][ T1325] Bluetooth: hci2: command 0x040f tx timeout [ 57.756482][ T1325] Bluetooth: hci1: command 0x040f tx timeout [ 57.756505][ T1325] Bluetooth: hci3: command 0x040f tx timeout [ 57.756535][ T1325] Bluetooth: hci4: command 0x040f tx timeout [ 57.793500][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.809115][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.819230][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.829948][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.840080][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.850774][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.862885][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.881717][ T4187] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.890889][ T4187] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.900335][ T4187] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.910004][ T4187] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.934968][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.944041][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.958225][ T4183] device veth1_vlan entered promiscuous mode [ 57.995399][ T385] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.040456][ T385] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.092536][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.121856][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.138968][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.152411][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.162631][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.193207][ T4183] device veth0_macvtap entered promiscuous mode [ 58.217418][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.232573][ T4183] device veth1_macvtap entered promiscuous mode [ 58.261417][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.286503][ T4293] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.294923][ T4293] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.302924][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.313171][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.354650][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.388929][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.397292][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.410686][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.427782][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.440713][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.451764][ T4303] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 58.471182][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.490791][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.501796][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.512712][ T4290] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 58.520688][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.560060][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.571486][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.592922][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.611122][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.632102][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.662219][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.676401][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.689234][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.700015][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.710969][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.725182][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.738439][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.766672][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.794787][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.807302][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.829703][ T4183] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.859326][ T4183] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.882377][ T4183] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.901236][ T4183] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.966856][ T4290] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.993127][ T4290] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 59.022248][ T4290] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 59.054784][ T4290] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 59.065335][ T1278] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.082439][ T1278] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.096807][ T4290] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.121025][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.142891][ T4290] usb 3-1: config 0 descriptor?? [ 59.149991][ T4293] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.166526][ T4293] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.224333][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.540223][ T4318] loop1: detected capacity change from 0 to 32768 [ 59.542531][ T9] Bluetooth: hci5: Frame reassembly failed (-84) [ 59.558668][ T4329] 9pnet: Insufficient options for proto=fd [ 59.581817][ T4329] Bluetooth: hci5: Frame reassembly failed (-84) [ 59.838021][ T23] Bluetooth: hci4: command 0x0419 tx timeout [ 59.845736][ T23] Bluetooth: hci3: command 0x0419 tx timeout [ 59.884935][ T23] Bluetooth: hci1: command 0x0419 tx timeout [ 59.916957][ T4290] usbhid 3-1:0.0: can't add hid device: -71 [ 59.923181][ T4290] usbhid: probe of 3-1:0.0 failed with error -71 [ 59.946856][ T4290] usb 3-1: USB disconnect, device number 2 [ 59.974519][ T23] Bluetooth: hci2: command 0x0419 tx timeout [ 60.003414][ T23] Bluetooth: hci0: command 0x0419 tx timeout [ 60.411113][ T4232] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 60.548969][ T4341] 8021q: adding VLAN 0 to HW filter on device bond1 [ 60.613425][ T4341] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 60.666779][ T4232] usb 1-1: Using ep0 maxpacket: 8 [ 60.677566][ T4293] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 60.691657][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 60.786188][ T4232] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 60.807089][ T4232] usb 1-1: config 0 has no interface number 0 [ 60.827335][ T4232] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 60.849314][ T4232] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 60.866635][ T385] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 60.886643][ T4232] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 60.953801][ T4232] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 60.965586][ T4356] netlink: 28 bytes leftover after parsing attributes in process `syz.2.21'. [ 60.984644][ T4232] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.009547][ T4232] usb 1-1: config 0 descriptor?? [ 61.080575][ T4232] ldusb 1-1:0.55: Interrupt in endpoint not found [ 61.314553][ T4247] usb 1-1: USB disconnect, device number 2 [ 61.356539][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 61.597826][ T23] Bluetooth: hci5: command 0xfc11 tx timeout [ 61.604010][ T4193] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 61.823408][ T4363] device syzkaller0 entered promiscuous mode [ 63.206146][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 63.216151][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 63.225188][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 63.234258][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 63.243309][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 63.252329][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 63.261896][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 63.271002][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 63.280123][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 63.825982][ T7] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 64.166069][ T7] usb 5-1: Using ep0 maxpacket: 16 [ 64.220035][ T4376] loop3: detected capacity change from 0 to 32768 [ 64.293591][ T4386] genirq: Flags mismatch irq 12. 00000000 (pcl812) vs. 00000080 (i8042) [ 64.305999][ T7] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 64.314299][ T7] usb 5-1: config 0 has no interface number 0 [ 65.086251][ T7] usb 5-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 65.984230][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.992452][ T7] usb 5-1: Product: syz [ 65.996937][ T7] usb 5-1: Manufacturer: syz [ 66.006522][ T7] usb 5-1: SerialNumber: syz [ 66.013919][ T7] usb 5-1: config 0 descriptor?? [ 66.057286][ T7] hub 5-1:0.132: bad descriptor, ignoring hub [ 66.064831][ T7] hub: probe of 5-1:0.132 failed with error -5 [ 66.076078][ T7] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.132/input/input5 [ 68.790846][ T4357] usb 5-1: USB disconnect, device number 2 [ 69.334535][ T4417] netlink: 'syz.0.40': attribute type 2 has an invalid length. [ 69.343977][ T4417] netlink: 'syz.0.40': attribute type 1 has an invalid length. [ 69.373322][ T4415] serio: Serial port ptm0 [ 69.378663][ T4419] device syzkaller0 entered promiscuous mode [ 69.652927][ T4429] lo speed is unknown, defaulting to 1000 [ 69.653575][ T4429] lo speed is unknown, defaulting to 1000 [ 69.661577][ T4429] lo speed is unknown, defaulting to 1000 [ 69.674261][ T4429] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 69.693029][ T4429] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 70.044217][ T4429] lo speed is unknown, defaulting to 1000 [ 70.054583][ T4429] lo speed is unknown, defaulting to 1000 [ 70.065213][ T4429] lo speed is unknown, defaulting to 1000 [ 70.075950][ T4429] lo speed is unknown, defaulting to 1000 [ 70.086618][ T4429] lo speed is unknown, defaulting to 1000 [ 71.294309][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.301071][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.444015][ T4444] loop2: detected capacity change from 0 to 32768 [ 74.700973][ T4448] ODEBUG: Out of memory. ODEBUG disabled [ 76.397144][ T1110] cfg80211: failed to load regulatory.db [ 76.684580][ T4491] device syzkaller0 entered promiscuous mode [ 78.495465][ T4499] netlink: 12 bytes leftover after parsing attributes in process `syz.0.61'. [ 78.554181][ T4501] netlink: 12 bytes leftover after parsing attributes in process `syz.2.62'. [ 80.337791][ T4518] overlayfs: overlapping lowerdir path [ 80.393214][ T4523] netlink: 60 bytes leftover after parsing attributes in process `syz.1.69'. [ 80.479445][ T26] audit: type=1326 audit(1761521358.110:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4519 comm="syz.1.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f3ce5afc9 code=0x7ffc0000 [ 80.546654][ T26] audit: type=1326 audit(1761521358.160:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4519 comm="syz.1.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f9f3ce5afc9 code=0x7ffc0000 [ 80.647926][ T4511] loop0: detected capacity change from 0 to 32768 [ 80.653505][ T26] audit: type=1326 audit(1761521358.160:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4519 comm="syz.1.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f3ce5afc9 code=0x7ffc0000 [ 80.788327][ T26] audit: type=1326 audit(1761521358.160:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4519 comm="syz.1.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9f3ce5afc9 code=0x7ffc0000 [ 80.869835][ T4528] sp0: Synchronizing with TNC [ 80.882397][ T26] audit: type=1326 audit(1761521358.160:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4519 comm="syz.1.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f3ce5afc9 code=0x7ffc0000 [ 80.890679][ T4539] device syzkaller0 entered promiscuous mode [ 82.387552][ T26] audit: type=1326 audit(1761521358.160:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4519 comm="syz.1.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f9f3ce5afc9 code=0x7ffc0000 [ 82.409794][ T26] audit: type=1326 audit(1761521358.160:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4519 comm="syz.1.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f3ce5afc9 code=0x7ffc0000 [ 82.435085][ T26] audit: type=1326 audit(1761521358.160:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4519 comm="syz.1.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f9f3ce5afc9 code=0x7ffc0000 [ 82.505015][ T26] audit: type=1326 audit(1761521358.160:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4519 comm="syz.1.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f3ce5afc9 code=0x7ffc0000 [ 82.532223][ T26] audit: type=1326 audit(1761521358.160:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4519 comm="syz.1.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9f3ce5afc9 code=0x7ffc0000 [ 85.127160][ T4193] Bluetooth: Wrong link type (-57) [ 86.160991][ T4576] 9pnet_virtio: no channels available for device syz [ 86.559124][ T4589] overlayfs: missing 'lowerdir' [ 87.043995][ T4598] netlink: 64 bytes leftover after parsing attributes in process `syz.3.80'. [ 87.266911][ T4603] device syzkaller0 entered promiscuous mode [ 87.360673][ T4607] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 87.937620][ T4612] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 90.367363][ T4653] device syzkaller0 entered promiscuous mode [ 91.825836][ C0] sched: RT throttling activated [ 92.685179][ T4675] ================================================================== [ 92.693621][ T4675] BUG: KASAN: slab-out-of-bounds in xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 92.702857][ T4675] Read of size 1 at addr ffff88807b311608 by task syz.2.104/4675 [ 92.710789][ T4675] [ 92.713138][ T4675] CPU: 0 PID: 4675 Comm: syz.2.104 Not tainted syzkaller #0 [ 92.720450][ T4675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 92.730543][ T4675] Call Trace: [ 92.733981][ T4675] [ 92.736938][ T4675] dump_stack_lvl+0x168/0x230 [ 92.741661][ T4675] ? show_regs_print_info+0x20/0x20 [ 92.747051][ T4675] ? load_image+0x3b0/0x3b0 [ 92.751579][ T4675] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 92.756970][ T4675] ? xfrm_pol_bin_obj+0x140/0x140 [ 92.762008][ T4675] print_address_description+0x60/0x2d0 [ 92.767726][ T4675] ? xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 92.774288][ T4675] kasan_report+0xdf/0x130 [ 92.778744][ T4675] ? xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 92.785461][ T4675] xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 92.791907][ T4675] ? xfrm_policy_addr_delta+0x212/0x340 [ 92.797587][ T4675] xfrm_policy_inexact_insert_node+0x950/0xb60 [ 92.803975][ T4675] ? __kasan_kmalloc+0xb5/0xf0 [ 92.808765][ T4675] ? xfrm_policy_alloc+0x75/0x2b0 [ 92.813909][ T4675] xfrm_policy_inexact_alloc_chain+0x7cf/0xea0 [ 92.820078][ T4675] ? xfrm_policy_inexact_insert+0xe0/0x1460 [ 92.826087][ T4675] xfrm_policy_inexact_insert+0xe0/0x1460 [ 92.831840][ T4675] ? __get_hash_thresh+0x105/0x410 [ 92.836971][ T4675] ? policy_hash_bysel+0x10a/0x570 [ 92.842106][ T4675] xfrm_policy_insert+0x112/0x930 [ 92.847237][ T4675] xfrm_add_policy+0x4d6/0x860 [ 92.852021][ T4675] ? xfrm_dump_sa_done+0xc0/0xc0 [ 92.856965][ T4675] ? apparmor_capable+0x12c/0x190 [ 92.861999][ T4675] ? __nla_parse+0x3c/0x50 [ 92.866619][ T4675] xfrm_user_rcv_msg+0x58d/0x860 [ 92.871574][ T4675] ? xfrm_netlink_rcv+0x90/0x90 [ 92.876459][ T4675] ? xfrm_netlink_rcv+0x66/0x90 [ 92.881332][ T4675] ? xfrm_netlink_rcv+0x66/0x90 [ 92.886203][ T4675] ? xfrm_netlink_rcv+0x66/0x90 [ 92.891061][ T4675] ? __mutex_lock_common+0x431/0x2390 [ 92.896463][ T4675] ? __copy_skb_header+0x417/0x5a0 [ 92.901596][ T4675] ? __skb_clone+0x480/0x790 [ 92.906204][ T4675] netlink_rcv_skb+0x1e0/0x430 [ 92.910985][ T4675] ? xfrm_netlink_rcv+0x90/0x90 [ 92.915856][ T4675] ? netlink_ack+0xb60/0xb60 [ 92.920458][ T4675] ? __lock_acquire+0x7c60/0x7c60 [ 92.925500][ T4675] xfrm_netlink_rcv+0x75/0x90 [ 92.930192][ T4675] netlink_unicast+0x774/0x920 [ 92.934984][ T4675] netlink_sendmsg+0x8ab/0xbc0 [ 92.939945][ T4675] ? netlink_getsockopt+0x560/0x560 [ 92.945162][ T4675] ? aa_sock_msg_perm+0x94/0x150 [ 92.950127][ T4675] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 92.955529][ T4675] ? security_socket_sendmsg+0x7c/0xa0 [ 92.961007][ T4675] ? netlink_getsockopt+0x560/0x560 [ 92.966263][ T4675] ____sys_sendmsg+0x5a2/0x8c0 [ 92.971068][ T4675] ? memset+0x1e/0x40 [ 92.975062][ T4675] ? __sys_sendmsg_sock+0x30/0x30 [ 92.980132][ T4675] ? import_iovec+0x6f/0xa0 [ 92.984660][ T4675] ___sys_sendmsg+0x1f0/0x260 [ 92.989363][ T4675] ? __sys_sendmsg+0x250/0x250 [ 92.994185][ T4675] ? percpu_counter_add_batch+0x13b/0x160 [ 92.999957][ T4675] ? __fdget+0x18b/0x210 [ 93.004265][ T4675] __se_sys_sendmsg+0x190/0x250 [ 93.009150][ T4675] ? __x64_sys_sendmsg+0x80/0x80 [ 93.014108][ T4675] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 93.020142][ T4675] ? lockdep_hardirqs_on+0x94/0x140 [ 93.025461][ T4675] do_syscall_64+0x4c/0xa0 [ 93.029902][ T4675] ? clear_bhb_loop+0x30/0x80 [ 93.034611][ T4675] ? clear_bhb_loop+0x30/0x80 [ 93.039318][ T4675] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 93.045260][ T4675] RIP: 0033:0x7f22765acfc9 [ 93.049705][ T4675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.069509][ T4675] RSP: 002b:00007f2274814038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 93.077943][ T4675] RAX: ffffffffffffffda RBX: 00007f2276803fa0 RCX: 00007f22765acfc9 [ 93.086289][ T4675] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000006 [ 93.094401][ T4675] RBP: 00007f227662ff91 R08: 0000000000000000 R09: 0000000000000000 [ 93.102393][ T4675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.110517][ T4675] R13: 00007f2276804038 R14: 00007f2276803fa0 R15: 00007ffd779fb288 [ 93.118520][ T4675] [ 93.121552][ T4675] [ 93.123890][ T4675] Allocated by task 4675: [ 93.128221][ T4675] __kasan_kmalloc+0xb5/0xf0 [ 93.132834][ T4675] sk_prot_alloc+0xe7/0x210 [ 93.137357][ T4675] sk_alloc+0x2f/0x310 [ 93.141461][ T4675] pfkey_create+0xd8/0x560 [ 93.145893][ T4675] __sock_create+0x47b/0x900 [ 93.150494][ T4675] __sys_socket+0xe2/0x170 [ 93.154963][ T4675] __x64_sys_socket+0x76/0x80 [ 93.159759][ T4675] do_syscall_64+0x4c/0xa0 [ 93.164277][ T4675] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 93.170197][ T4675] [ 93.172533][ T4675] The buggy address belongs to the object at ffff88807b311000 [ 93.172533][ T4675] which belongs to the cache kmalloc-2k of size 2048 [ 93.186606][ T4675] The buggy address is located 1544 bytes inside of [ 93.186606][ T4675] 2048-byte region [ffff88807b311000, ffff88807b311800) [ 93.200160][ T4675] The buggy address belongs to the page: [ 93.205814][ T4675] page:ffffea0001ecc400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7b310 [ 93.216538][ T4675] head:ffffea0001ecc400 order:3 compound_mapcount:0 compound_pincount:0 [ 93.224874][ T4675] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 93.232874][ T4675] raw: 00fff00000010200 0000000000000000 0000000500000001 ffff888016842000 [ 93.241462][ T4675] raw: 0000000000000000 0000000000080008 00000001ffffffff 0000000000000000 [ 93.241510][ T4675] page dumped because: kasan: bad access detected [ 93.241530][ T4675] page_owner tracks the page as allocated [ 93.241537][ T4675] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4187, ts 52541673414, free_ts 51285726117 [ 93.241570][ T4675] get_page_from_freelist+0x1b77/0x1c60 [ 93.288022][ T4675] __alloc_pages+0x1e1/0x470 [ 93.292718][ T4675] new_slab+0xc0/0x4b0 [ 93.296798][ T4675] ___slab_alloc+0x81e/0xdf0 [ 93.301412][ T4675] __kmalloc_node_track_caller+0x1fc/0x3a0 [ 93.307240][ T4675] pskb_expand_head+0x127/0x10f0 [ 93.312204][ T4675] netlink_trim+0x180/0x220 [ 93.316820][ T4675] netlink_broadcast_filtered+0x7c/0x1170 [ 93.322596][ T4675] nlmsg_notify+0xec/0x1a0 [ 93.327031][ T4675] dev_open+0xd9/0x170 [ 93.331213][ T4675] bond_enslave+0x1095/0x3a40 [ 93.335905][ T4675] do_setlink+0xd84/0x3980 [ 93.340351][ T4675] rtnl_newlink+0x1419/0x17d0 [ 93.345049][ T4675] rtnetlink_rcv_msg+0x9b9/0xe60 [ 93.350095][ T4675] netlink_rcv_skb+0x1e0/0x430 [ 93.354892][ T4675] netlink_unicast+0x774/0x920 [ 93.359674][ T4675] page last free stack trace: [ 93.364349][ T4675] free_unref_page_prepare+0x637/0x6c0 [ 93.369823][ T4675] free_unref_page+0x94/0x280 [ 93.374516][ T4675] skb_release_data+0x3fa/0x850 [ 93.379477][ T4675] __kfree_skb+0x4c/0x60 [ 93.383748][ T4675] tcp_recvmsg_locked+0x14d5/0x2760 [ 93.388966][ T4675] tcp_recvmsg+0x350/0x710 [ 93.393398][ T4675] inet_recvmsg+0x136/0x1e0 [ 93.397919][ T4675] sock_read_iter+0x2a2/0x340 [ 93.402616][ T4675] vfs_read+0x725/0xcf0 [ 93.406808][ T4675] ksys_read+0x14d/0x250 [ 93.411186][ T4675] do_syscall_64+0x4c/0xa0 [ 93.415624][ T4675] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 93.421541][ T4675] [ 93.423869][ T4675] Memory state around the buggy address: [ 93.429597][ T4675] ffff88807b311500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 93.437760][ T4675] ffff88807b311580: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc [ 93.445831][ T4675] >ffff88807b311600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 93.453896][ T4675] ^ [ 93.458236][ T4675] ffff88807b311680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 93.466489][ T4675] ffff88807b311700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 93.474567][ T4675] ================================================================== [ 93.482724][ T4675] Disabling lock debugging due to kernel taint [ 93.489115][ T4675] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 93.496333][ T4675] CPU: 0 PID: 4675 Comm: syz.2.104 Tainted: G B syzkaller #0 [ 93.505103][ T4675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 93.515440][ T4675] Call Trace: [ 93.518735][ T4675] [ 93.521780][ T4675] dump_stack_lvl+0x168/0x230 [ 93.526478][ T4675] ? show_regs_print_info+0x20/0x20 [ 93.531865][ T4675] ? load_image+0x3b0/0x3b0 [ 93.536393][ T4675] panic+0x2c9/0x7f0 [ 93.540316][ T4675] ? bpf_jit_dump+0xd0/0xd0 [ 93.544838][ T4675] ? _raw_spin_unlock_irqrestore+0xa5/0x100 [ 93.549926][ T4654] PM: hibernation: Basic memory bitmaps freed [ 93.550834][ T4675] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 93.550860][ T4675] ? _raw_spin_unlock+0x40/0x40 [ 93.567624][ T4675] ? xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 93.574138][ T4675] check_panic_on_warn+0x80/0xa0 [ 93.579091][ T4675] ? xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 93.585639][ T4675] end_report+0x6d/0xf0 [ 93.589815][ T4675] kasan_report+0x102/0x130 [ 93.594512][ T4675] ? xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 93.601031][ T4675] xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 93.607558][ T4675] ? xfrm_policy_addr_delta+0x212/0x340 [ 93.613247][ T4675] xfrm_policy_inexact_insert_node+0x950/0xb60 [ 93.619429][ T4675] ? __kasan_kmalloc+0xb5/0xf0 [ 93.624313][ T4675] ? xfrm_policy_alloc+0x75/0x2b0 [ 93.629358][ T4675] xfrm_policy_inexact_alloc_chain+0x7cf/0xea0 [ 93.635538][ T4675] ? xfrm_policy_inexact_insert+0xe0/0x1460 [ 93.641454][ T4675] xfrm_policy_inexact_insert+0xe0/0x1460 [ 93.647206][ T4675] ? __get_hash_thresh+0x105/0x410 [ 93.652423][ T4675] ? policy_hash_bysel+0x10a/0x570 [ 93.657567][ T4675] xfrm_policy_insert+0x112/0x930 [ 93.662617][ T4675] xfrm_add_policy+0x4d6/0x860 [ 93.667901][ T4675] ? xfrm_dump_sa_done+0xc0/0xc0 [ 93.673076][ T4675] ? apparmor_capable+0x12c/0x190 [ 93.678743][ T4675] ? __nla_parse+0x3c/0x50 [ 93.683185][ T4675] xfrm_user_rcv_msg+0x58d/0x860 [ 93.688147][ T4675] ? xfrm_netlink_rcv+0x90/0x90 [ 93.693024][ T4675] ? xfrm_netlink_rcv+0x66/0x90 [ 93.697989][ T4675] ? xfrm_netlink_rcv+0x66/0x90 [ 93.702857][ T4675] ? xfrm_netlink_rcv+0x66/0x90 [ 93.707722][ T4675] ? __mutex_lock_common+0x431/0x2390 [ 93.713538][ T4675] ? __copy_skb_header+0x417/0x5a0 [ 93.719721][ T4675] ? __skb_clone+0x480/0x790 [ 93.724336][ T4675] netlink_rcv_skb+0x1e0/0x430 [ 93.729206][ T4675] ? xfrm_netlink_rcv+0x90/0x90 [ 93.734099][ T4675] ? netlink_ack+0xb60/0xb60 [ 93.738712][ T4675] ? __lock_acquire+0x7c60/0x7c60 [ 93.743846][ T4675] xfrm_netlink_rcv+0x75/0x90 [ 93.748723][ T4675] netlink_unicast+0x774/0x920 [ 93.753518][ T4675] netlink_sendmsg+0x8ab/0xbc0 [ 93.758488][ T4675] ? netlink_getsockopt+0x560/0x560 [ 93.763716][ T4675] ? aa_sock_msg_perm+0x94/0x150 [ 93.768673][ T4675] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 93.773973][ T4675] ? security_socket_sendmsg+0x7c/0xa0 [ 93.779441][ T4675] ? netlink_getsockopt+0x560/0x560 [ 93.784653][ T4675] ____sys_sendmsg+0x5a2/0x8c0 [ 93.789446][ T4675] ? memset+0x1e/0x40 [ 93.793796][ T4675] ? __sys_sendmsg_sock+0x30/0x30 [ 93.798855][ T4675] ? import_iovec+0x6f/0xa0 [ 93.803377][ T4675] ___sys_sendmsg+0x1f0/0x260 [ 93.809168][ T4675] ? __sys_sendmsg+0x250/0x250 [ 93.813965][ T4675] ? percpu_counter_add_batch+0x13b/0x160 [ 93.819723][ T4675] ? __fdget+0x18b/0x210 [ 93.824090][ T4675] __se_sys_sendmsg+0x190/0x250 [ 93.828962][ T4675] ? __x64_sys_sendmsg+0x80/0x80 [ 93.834008][ T4675] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 93.840030][ T4675] ? lockdep_hardirqs_on+0x94/0x140 [ 93.845250][ T4675] do_syscall_64+0x4c/0xa0 [ 93.849686][ T4675] ? clear_bhb_loop+0x30/0x80 [ 93.854354][ T4675] ? clear_bhb_loop+0x30/0x80 [ 93.859045][ T4675] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 93.864927][ T4675] RIP: 0033:0x7f22765acfc9 [ 93.869351][ T4675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.888955][ T4675] RSP: 002b:00007f2274814038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 93.897444][ T4675] RAX: ffffffffffffffda RBX: 00007f2276803fa0 RCX: 00007f22765acfc9 [ 93.905399][ T4675] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000006 [ 93.913356][ T4675] RBP: 00007f227662ff91 R08: 0000000000000000 R09: 0000000000000000 [ 93.921336][ T4675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.929296][ T4675] R13: 00007f2276804038 R14: 00007f2276803fa0 R15: 00007ffd779fb288 [ 93.937261][ T4675] [ 93.940537][ T4675] Kernel Offset: disabled [ 93.944850][ T4675] Rebooting in 86400 seconds..