last executing test programs: 2m28.375278236s ago: executing program 2 (id=8): r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) mq_open(&(0x7f0000000040)='a\x7f\x00\xca\x06x\a\x00\x00\x00\x00\x00g\xd4\xb8\xcd\x18\xbb', 0xc3, 0x48, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000340)={0x0, 0x80000}) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r3, 0x114, 0x1d, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @extended_inquiry_info={{0x2f, 0xff}, {0x1, [{@any, 0x3, 0xa, "6a0711", 0xfff1, 0x4, "5298ad306a4ac4f7e7ef6b90101d1b1148200cadbbc91a07f9c87cfa6154913de2a8f21b46bab47ed7fdf81d7870c14a32990d1e45f46f4634000d8859c3061a2f601340216973dc138dc9550568638d4a05abf0bbc688eeea2b8b642e0ba842b8abe0fea184dc1029e4576008e5aa5dd0e5e5f31dc7542442e3840aef22e80f9e25b3e67506d5edaeaf23dd8044b3460fe7a3a7b8b02d3cbcdece1d214469edf59c83fe65c10ff2c575e2d93a605b9ae9c1473e08ba38314788005ba452db71a4b375614ecb0fce957ff32c6dcd6d8e03f296a4902d3e85435a3129470784348c10ad6c5c4a5ec3194afd05a401341e"}]}}}, 0x102) 2m26.065371151s ago: executing program 2 (id=11): socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x14, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_TX_POWER(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8014}, 0x40000) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x6) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e23, 0x3, 'rr\x00', 0x1, 0x80005, 0x70}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0xe20, 0x0, 0x8d, 0x2}}, 0x44) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, 0x0, 0x0) 2m25.041699812s ago: executing program 2 (id=13): syz_mount_image$minix(&(0x7f0000002580), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f00000025c0)=ANY=[], 0x6, 0x236, &(0x7f0000000800)="$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") truncate(&(0x7f0000000080)='./file2\x00', 0x1fff) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) io_setup(0x4, 0x0) r2 = open(&(0x7f0000000240)='./file1\x00', 0x14d142, 0x0) ftruncate(r2, 0x2007ffc) openat$dsp(0xffffffffffffff9c, 0x0, 0x200, 0x0) eventfd(0x3) sched_setscheduler(0x0, 0x2, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) 2m22.412029119s ago: executing program 2 (id=17): syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x15, 0x80005, 0x0) getsockopt(r0, 0x200000000114, 0x271a, 0xffffffffffffffff, &(0x7f0000000000)=0x7ffff000) unshare(0x8000400) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newsa={0xf0, 0x27, 0x1, 0x70bd2d, 0x0, {{@in=@private=0xa010100, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, {@in6=@loopback, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x2c}, {0x40000000000, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x10000, 0x8000000, 0x200}, {0x0, 0x0, 0x2}, 0x70bd22, 0x0, 0x2, 0x1, 0x0, 0xcd}}, 0xf0}}, 0x0) 2m22.0370673s ago: executing program 2 (id=19): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xd, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x70bd2b, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r5}]}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYRESOCT=r4, @ANYRES8=r2], 0x38}, 0x1, 0x0, 0x0, 0x4048018}, 0x4000080) preadv(0xffffffffffffffff, 0x0, 0x0, 0x1a, 0x20f5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x192}}, 0x20}}, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) 2m21.132535404s ago: executing program 2 (id=23): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) 2m5.589041173s ago: executing program 32 (id=23): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) 13.562361426s ago: executing program 4 (id=330): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() close(0xffffffffffffffff) socket$phonet_pipe(0x23, 0x5, 0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r3 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f0000000100)=0x9) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) close(r3) 12.902437095s ago: executing program 3 (id=331): socket$nl_netfilter(0x10, 0x3, 0xc) eventfd2(0x7fffffff, 0x800) socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x10b701) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), 0x0, 0x0, 0x1}) 12.738907825s ago: executing program 3 (id=334): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/time_for_children\x00') r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8001}, 0x8) getsockopt$bt_hci(r3, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) 11.994830068s ago: executing program 5 (id=335): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$evdev(0x0, 0x40002, 0xa69c0) io_uring_setup(0x2eff, &(0x7f0000000340)={0x0, 0xe8e5, 0x2, 0xfffffffd, 0x290}) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r4, &(0x7f0000000980)={0x2020}, 0x2020) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) 11.823047216s ago: executing program 3 (id=336): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000005a40)=@id={0x1e, 0x3, 0x0, {0x4e20, 0x2}}, 0x10) r2 = socket(0x1e, 0x1, 0x0) connect$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) r3 = socket(0x1e, 0x1, 0x0) sendmmsg$sock(r3, &(0x7f0000000600)=[{{&(0x7f0000000000)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000}}, {{&(0x7f0000000080)=@tipc=@name={0x1e, 0x2, 0x1}, 0x80, 0x0}}], 0x2, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000740)="120000001200", 0x6, 0x0, 0x0, 0x0) recvmmsg(r5, 0x0, 0x0, 0x2100, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, 0x0) 10.724007394s ago: executing program 5 (id=337): sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) kcmp(r1, r2, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) 9.333590278s ago: executing program 0 (id=339): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, 0x0, 0x0) r4 = syz_open_dev$vim2m(0x0, 0x7ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0x1, 0xfffff109, 0x3132564e, 0x1, 0xc, [{0x27b, 0x1}, {0x7, 0xffffff65}, {0x3ff, 0x7f}, {0x7, 0xa}, {0x0, 0x10001}, {0x8da, 0x2}, {0xbbf3, 0x80000001}, {0x4b82}], 0xd2, 0x7, 0x9, 0x1, 0x2}}) 8.058937404s ago: executing program 0 (id=340): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003d80)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 7.738094875s ago: executing program 0 (id=342): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = creat(0x0, 0x0) close(r1) socket$phonet_pipe(0x23, 0x5, 0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r2 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0x9) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) 7.714754171s ago: executing program 1 (id=343): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], 0x17c}, 0x1, 0x0, 0x0, 0x24008004}, 0x40044) gettid() socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) unshare(0x22020600) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000300)={[0xfffffffffffffff2]}, 0x8, 0x80800) socketpair$unix(0x1, 0x2, 0x0, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, 0x0, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000700)={0x2, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x108) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000580)=""/118, 0x76}], 0x1, 0x9, 0x100) unshare(0x2a020600) r5 = syz_open_dev$video(&(0x7f0000000040), 0x101, 0xab02) ioctl$VIDIOC_S_CROP(r5, 0x4014563c, &(0x7f0000000100)={0x9, {0x9, 0x9, 0x8, 0xb}}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 6.906963482s ago: executing program 1 (id=344): socket$nl_netfilter(0x10, 0x3, 0xc) eventfd2(0x7fffffff, 0x800) socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x10b701) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), 0x0, 0x0, 0x1}) 6.817971495s ago: executing program 5 (id=345): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x1e, 0x1, 0x0) r2 = socket(0x1e, 0x1, 0x0) sendmmsg$sock(r2, &(0x7f0000000600)=[{{&(0x7f0000000000)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000}}, {{&(0x7f0000000080)=@tipc=@name={0x1e, 0x2, 0x1}, 0x80, 0x0}}], 0x2, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740)="120000001200", 0x6, 0x0, 0x0, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2100, 0x0) 6.750695373s ago: executing program 1 (id=346): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/time_for_children\x00') r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8001}, 0x8) getsockopt$bt_hci(r3, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) 6.304304751s ago: executing program 0 (id=347): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$evdev(0x0, 0x40002, 0xa69c0) io_uring_setup(0x2eff, &(0x7f0000000340)={0x0, 0xe8e5, 0x2, 0xfffffffd, 0x290}) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r4, &(0x7f0000000980)={0x2020}, 0x2020) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r5) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x4, 0x0, 0xe2, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev, 0x80, 0x0, 0xffffffff, 0x1}}) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) 6.038939232s ago: executing program 1 (id=348): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) bind$ax25(r0, &(0x7f0000000280)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @bcast, @null]}, 0x48) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0xf32f, 0xfe000000}, &(0x7f00000000c0)=0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1e000000000000002200000009", @ANYRES16=r0, @ANYRES32=r0, @ANYRESHEX=r0], 0x33) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="0008000000000000400034801400350076657468315f766c616e0000000000001400350076657468305f746f5f7465616d00000014003500776c616e"], 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x20004010) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x6400c095}, 0x8010) socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x4008080) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r5, 0x890b, &(0x7f00000007c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) connect$rose(r5, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) connect$rose(r5, &(0x7f0000000240)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) connect$ax25(r0, &(0x7f0000000180)={{0x3, @bcast, 0x5}, [@bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) socket$can_bcm(0x1d, 0x2, 0x2) 5.650618051s ago: executing program 0 (id=349): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) fchdir(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x40001f9, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000880), 0x1, 0x46b, &(0x7f0000000bc0)="$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") ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) readv(r0, &(0x7f0000000200)=[{&(0x7f0000001380)=""/4087, 0xff7}], 0x1) 4.498033508s ago: executing program 3 (id=350): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x24000040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x40000000015, 0x5, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r3}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x6, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5c298795369ca04f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.393438769s ago: executing program 0 (id=351): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, 0x0, 0x0) r4 = syz_open_dev$vim2m(0x0, 0x7ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0x1, 0xfffff109, 0x3132564e, 0x1, 0xc, [{0x27b, 0x1}, {0x7, 0xffffff65}, {0x3ff, 0x7f}, {0x7, 0xa}, {0x0, 0x10001}, {0x8da, 0x2}, {0xbbf3, 0x80000001}, {0x4b82}], 0xd2, 0x7, 0x9, 0x1, 0x2}}) 3.460557847s ago: executing program 3 (id=352): bpf$MAP_CREATE(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) fcntl$setlease(r1, 0x400, 0x2) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) setreuid(0xee00, 0x0) keyctl$session_to_parent(0x12) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) r3 = socket$kcm(0x21, 0x2, 0x2) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) 3.395050376s ago: executing program 1 (id=353): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003d80)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 3.263173271s ago: executing program 1 (id=354): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], 0x17c}, 0x1, 0x0, 0x0, 0x24008004}, 0x40044) gettid() socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000600)="a361719f50d51ccbc842bd9b09317208a4802325cb48780df8a19d4961c578b80d5b7d20b73a068ed966e806f913998f83f5742d808f2653973d38cc88dccf31832c5d5318388c642472595064dd2d5499eee19b1e2e5dbe00e37f4e6ed4b15ac778a4f54a2d87ed2b1edfca784cb452d67270ef792dc71af7b81149f8fc938c61e03a340b36c94a0656bde901b7376cefa02c9e3d5db26ce13e0f3f8b5a2807cf42098f399ab957621ae45a63e0", 0xae}, {&(0x7f0000000500)="7f59646f9852", 0x6}], 0x2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) unshare(0x22020600) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000300)={[0xfffffffffffffff2]}, 0x8, 0x80800) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, 0x0, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000700)={0x2, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x108) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000580)=""/118, 0x76}], 0x1, 0x9, 0x100) unshare(0x2a020600) r4 = syz_open_dev$video(&(0x7f0000000040), 0x101, 0xab02) ioctl$VIDIOC_S_CROP(r4, 0x4014563c, &(0x7f0000000100)={0x9, {0x9, 0x9, 0x8, 0xb}}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 3.153582871s ago: executing program 4 (id=355): sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) kcmp(r1, r2, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) 2.141897395s ago: executing program 4 (id=356): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000b80)=@raw={'raw\x00', 0x8, 0x3, 0x230, 0xe8, 0x8, 0xfa04, 0x0, 0x6c02, 0x198, 0x194, 0x194, 0x198, 0x194, 0x3, 0x0, {[{{@ip={@empty, @broadcast, 0xff000000, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {0xff}, {0xff}, 0x6, 0x2, 0x4}, 0x0, 0xa0, 0xe8, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x30}, {[0x3], [], 0x0, 0x8, 0x8, 0xb}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x5, 0x170, 0x10000, 'pptp\x00', {0x2}}}}, {{@ip={@initdev={0xac, 0x1e, 0xfc, 0x0}, @multicast1, 0xffffffff, 0xff000000, 'pim6reg1\x00', 'ipvlan0\x00', {}, {0xff}, 0x1, 0x0, 0x23}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x8, 0xd5, {0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x290) 2.080964424s ago: executing program 5 (id=357): socket$nl_netfilter(0x10, 0x3, 0xc) eventfd2(0x7fffffff, 0x800) socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x10b701) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), 0x0, 0x0, 0x1}) 1.90067682s ago: executing program 5 (id=358): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/time_for_children\x00') r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8001}, 0x8) getsockopt$bt_hci(r1, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) 1.866657094s ago: executing program 4 (id=359): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$evdev(0x0, 0x40002, 0xa69c0) io_uring_setup(0x2eff, &(0x7f0000000340)={0x0, 0xe8e5, 0x2, 0xfffffffd, 0x290}) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r4, &(0x7f0000000980)={0x2020}, 0x2020) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r5) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x4, 0x0, 0xe2, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev, 0x80, 0x0, 0xffffffff, 0x1}}) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) 1.690918292s ago: executing program 5 (id=360): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000005a40)=@id={0x1e, 0x3, 0x0, {0x4e20, 0x2}}, 0x10) r2 = socket(0x1e, 0x1, 0x0) connect$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) r3 = socket(0x1e, 0x1, 0x0) sendmmsg$sock(r3, &(0x7f0000000600)=[{{&(0x7f0000000000)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000}}, {{&(0x7f0000000080)=@tipc=@name={0x1e, 0x2, 0x1}, 0x80, 0x0}}], 0x2, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000740)="120000001200", 0x6, 0x0, 0x0, 0x0) recvmmsg(r5, 0x0, 0x0, 0x2100, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, 0x0) 80.628734ms ago: executing program 4 (id=361): madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) 44.031107ms ago: executing program 3 (id=362): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x24000040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x40000000015, 0x5, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r3}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x6, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5c298795369ca04f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 4 (id=363): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$evdev(0x0, 0x40002, 0xa69c0) io_uring_setup(0x2eff, &(0x7f0000000340)={0x0, 0xe8e5, 0x2, 0xfffffffd, 0x290}) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r5, 0x4, 0x4, 0x0, 0xe2, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev, 0x80, 0x0, 0xffffffff, 0x1}}) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.251' (ED25519) to the list of known hosts. [ 48.970648][ T4172] cgroup: Unknown subsys name 'net' [ 49.128822][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 50.360222][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 51.674129][ T4195] chnl_net:caif_netlink_parms(): no params data found [ 51.756970][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 51.828218][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.835459][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.843524][ T4195] device bridge_slave_0 entered promiscuous mode [ 51.855818][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.862927][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.870716][ T4195] device bridge_slave_1 entered promiscuous mode [ 51.887208][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 51.912279][ T4196] chnl_net:caif_netlink_parms(): no params data found [ 51.926442][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 51.940266][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.970359][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.017377][ T4195] team0: Port device team_slave_0 added [ 52.025189][ T4195] team0: Port device team_slave_1 added [ 52.038793][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.046066][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.054391][ T4190] device bridge_slave_0 entered promiscuous mode [ 52.079725][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.086914][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.095357][ T4190] device bridge_slave_1 entered promiscuous mode [ 52.143071][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.150046][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.176266][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.195051][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.202189][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.210174][ T4186] device bridge_slave_0 entered promiscuous mode [ 52.228148][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.235317][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.262140][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.273655][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.280707][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.288515][ T4185] device bridge_slave_0 entered promiscuous mode [ 52.296917][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.304108][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.311871][ T4185] device bridge_slave_1 entered promiscuous mode [ 52.319186][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.326323][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.334552][ T4186] device bridge_slave_1 entered promiscuous mode [ 52.347440][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.359653][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.384678][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.391743][ T4196] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.400085][ T4196] device bridge_slave_0 entered promiscuous mode [ 52.427285][ T4190] team0: Port device team_slave_0 added [ 52.441142][ T4196] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.449006][ T4196] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.457280][ T4196] device bridge_slave_1 entered promiscuous mode [ 52.465873][ T4190] team0: Port device team_slave_1 added [ 52.485171][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.496473][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.507515][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.544883][ T4195] device hsr_slave_0 entered promiscuous mode [ 52.552204][ T4195] device hsr_slave_1 entered promiscuous mode [ 52.560521][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.576701][ T4196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.593997][ T4196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.615894][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.622915][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.648883][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.662109][ T4185] team0: Port device team_slave_0 added [ 52.670007][ T4185] team0: Port device team_slave_1 added [ 52.700440][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.707633][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.733791][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.762695][ T4196] team0: Port device team_slave_0 added [ 52.770545][ T4196] team0: Port device team_slave_1 added [ 52.780462][ T4186] team0: Port device team_slave_0 added [ 52.795098][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.802049][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.828073][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.856130][ T4186] team0: Port device team_slave_1 added [ 52.872769][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.879880][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.906131][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.924947][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.931946][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.959067][ T4196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.991271][ T4190] device hsr_slave_0 entered promiscuous mode [ 52.998864][ T4190] device hsr_slave_1 entered promiscuous mode [ 53.006089][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.014019][ T4190] Cannot create hsr debugfs directory [ 53.023917][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.030884][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.056839][ T4196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.075797][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.082766][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.109475][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.122131][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.129378][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.155421][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.211556][ T4185] device hsr_slave_0 entered promiscuous mode [ 53.218709][ T4185] device hsr_slave_1 entered promiscuous mode [ 53.225608][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.233225][ T4185] Cannot create hsr debugfs directory [ 53.304215][ T4196] device hsr_slave_0 entered promiscuous mode [ 53.310907][ T4196] device hsr_slave_1 entered promiscuous mode [ 53.317883][ T4196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.325623][ T4196] Cannot create hsr debugfs directory [ 53.359192][ T4186] device hsr_slave_0 entered promiscuous mode [ 53.366397][ T4186] device hsr_slave_1 entered promiscuous mode [ 53.373736][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.381304][ T4186] Cannot create hsr debugfs directory [ 53.413873][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 53.423297][ T4174] Bluetooth: hci3: command 0x0409 tx timeout [ 53.429702][ T4174] Bluetooth: hci4: command 0x0409 tx timeout [ 53.436070][ T4174] Bluetooth: hci0: command 0x0409 tx timeout [ 53.442188][ T4174] Bluetooth: hci1: command 0x0409 tx timeout [ 53.601723][ T4195] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 53.625534][ T4195] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 53.634991][ T4195] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 53.644899][ T4195] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 53.688405][ T4190] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 53.700952][ T4190] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 53.723969][ T4190] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 53.743692][ T4190] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 53.800409][ T4185] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 53.832064][ T4185] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 53.848201][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.865816][ T4185] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 53.875958][ T4185] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 53.884741][ T4196] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 53.912502][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.924556][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.932434][ T4196] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 53.942654][ T4196] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 53.953974][ T4196] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 53.971073][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.002751][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.011713][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.022704][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.030009][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.039259][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.059559][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.068526][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.077541][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.084695][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.095146][ T4186] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.107678][ T4186] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 54.117974][ T4186] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 54.129229][ T4186] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 54.139397][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.201577][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.212651][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.230778][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.246421][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.256202][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.264731][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.274082][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.282424][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.308666][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.321511][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.330547][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.339506][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.348963][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.357165][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.365398][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.373894][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.382219][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.391122][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.399947][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.408699][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.415809][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.429345][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.440338][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.451052][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.460597][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.470429][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.477570][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.495736][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.504801][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.548904][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.558796][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.571311][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.582655][ T3064] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.589771][ T3064] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.598626][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.607287][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.616215][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.627624][ T4196] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.645078][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.654120][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.664452][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.676254][ T3064] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.683401][ T3064] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.691853][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.707941][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.717009][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.726242][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.735481][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.750762][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.762455][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.771355][ T3064] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.778508][ T3064] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.789970][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.810699][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.819486][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.828205][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.837206][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.846916][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.854125][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.861908][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.870986][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.879819][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.894008][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.907968][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.919977][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.955053][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.965095][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.974955][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.984560][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.993402][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.001773][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.010887][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.020135][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.029438][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.038230][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.046892][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.056163][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.065571][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.073895][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.082284][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.091102][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.099276][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.118642][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.139113][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.151922][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.161218][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.172719][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.182146][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.190283][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.199964][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.222394][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.241624][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.250214][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.285919][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.314335][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.321821][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.347814][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.384819][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.394737][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.412493][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.429206][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.440899][ T3064] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.448049][ T3064] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.462225][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.471897][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.480864][ T3064] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.487967][ T3064] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.496089][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.497118][ T4229] Bluetooth: hci1: command 0x041b tx timeout [ 55.508440][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.510907][ T4229] Bluetooth: hci0: command 0x041b tx timeout [ 55.537978][ T4229] Bluetooth: hci4: command 0x041b tx timeout [ 55.547817][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.563352][ T4229] Bluetooth: hci3: command 0x041b tx timeout [ 55.569500][ T4229] Bluetooth: hci2: command 0x041b tx timeout [ 55.580025][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.599078][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.609292][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.624069][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.632572][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.642603][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.651541][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.661427][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.670758][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.679429][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.688362][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.698644][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.706884][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.718283][ T4195] device veth0_vlan entered promiscuous mode [ 55.734757][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.750118][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.763149][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.786044][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.814511][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.822022][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.852735][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.888515][ T4195] device veth1_vlan entered promiscuous mode [ 55.909820][ T1594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.920763][ T1594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.948579][ T4196] device veth0_vlan entered promiscuous mode [ 55.961747][ T1594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.971458][ T1594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.987311][ T1594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.996657][ T1594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.006690][ T1594] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.014675][ T1594] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.059082][ T4190] device veth0_vlan entered promiscuous mode [ 56.065885][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.075478][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.085202][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.094084][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.102732][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.110562][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.118528][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.126530][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.148444][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.159108][ T4196] device veth1_vlan entered promiscuous mode [ 56.170401][ T4185] device veth0_vlan entered promiscuous mode [ 56.177409][ T1594] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.186659][ T1594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.195397][ T1594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.204233][ T1594] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.211923][ T1594] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.238396][ T4195] device veth0_macvtap entered promiscuous mode [ 56.251218][ T4195] device veth1_macvtap entered promiscuous mode [ 56.262098][ T4185] device veth1_vlan entered promiscuous mode [ 56.269760][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.278261][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.286685][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.296893][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.305857][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.325661][ T4190] device veth1_vlan entered promiscuous mode [ 56.339346][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.347683][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.356117][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.365907][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.408680][ T4185] device veth0_macvtap entered promiscuous mode [ 56.421810][ T4185] device veth1_macvtap entered promiscuous mode [ 56.429256][ T1594] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.437360][ T1594] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.446921][ T1594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.456068][ T1594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.465106][ T1594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.474391][ T1594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.482747][ T1594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.492077][ T1594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.500950][ T1594] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.510384][ T4186] device veth0_vlan entered promiscuous mode [ 56.519153][ T4196] device veth0_macvtap entered promiscuous mode [ 56.531046][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.543426][ T1594] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.551412][ T1594] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.559564][ T1594] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.567948][ T1594] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.576968][ T1594] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.585807][ T1594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.600451][ T4186] device veth1_vlan entered promiscuous mode [ 56.613787][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.628745][ T4196] device veth1_macvtap entered promiscuous mode [ 56.636169][ T1594] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.645513][ T1594] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.653821][ T1594] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.661697][ T1594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.670464][ T1594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.679002][ T1594] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.687916][ T1594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.712792][ T1594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.722733][ T1594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.732804][ T4195] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.743125][ T4195] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.751856][ T4195] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.761389][ T4195] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.774913][ T4190] device veth0_macvtap entered promiscuous mode [ 56.788696][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.799617][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.811114][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.819549][ T1594] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.828188][ T1594] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.836970][ T1594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.869971][ T4190] device veth1_macvtap entered promiscuous mode [ 56.882214][ T4186] device veth0_macvtap entered promiscuous mode [ 56.892310][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.902960][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.912768][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.924345][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.939191][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.954914][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.968672][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.980721][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.998148][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.006912][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.017589][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.027471][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.043731][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.055047][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.066891][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.077569][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.088755][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.122196][ T4185] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.131729][ T4185] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.141640][ T4185] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.153265][ T4185] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.165526][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.174586][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.185997][ T4196] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.194912][ T4196] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.204255][ T4196] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.213724][ T4196] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.224477][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.234999][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.245428][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.256694][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.266760][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.277446][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.288885][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.297444][ T4186] device veth1_macvtap entered promiscuous mode [ 57.328504][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.340964][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.364567][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.372579][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.374861][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.392462][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.404974][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.416959][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.426885][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.437803][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.447635][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.458160][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.469316][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.478537][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.489629][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.499796][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.510495][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.520914][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.532313][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.544612][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.566485][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.574835][ T21] Bluetooth: hci3: command 0x040f tx timeout [ 57.577301][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.581097][ T21] Bluetooth: hci4: command 0x040f tx timeout [ 57.592670][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.595486][ T21] Bluetooth: hci0: command 0x040f tx timeout [ 57.609226][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.609696][ T21] Bluetooth: hci1: command 0x040f tx timeout [ 57.618059][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.635876][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.648010][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.658711][ T4229] Bluetooth: hci2: command 0x040f tx timeout [ 57.665858][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.676701][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.686904][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.697360][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.707426][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.718144][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.729266][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.741227][ T4190] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.750201][ T4190] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.759202][ T4190] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.768202][ T4190] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.790588][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.804802][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.815864][ T4186] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.825570][ T4186] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.834534][ T4186] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.843529][ T4186] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.880339][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.890207][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.903155][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.965497][ T508] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.976790][ T508] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.004655][ T508] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.028121][ T508] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.047160][ T508] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.070124][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.104746][ T508] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.117533][ T508] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.149396][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.149781][ T1594] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.179197][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.184409][ T1594] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.198990][ T1594] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.212237][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.222493][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.395342][ T4264] loop3: detected capacity change from 0 to 1024 [ 58.455781][ T4264] ======================================================= [ 58.455781][ T4264] WARNING: The mand mount option has been deprecated and [ 58.455781][ T4264] and is ignored by this kernel. Remove the mand [ 58.455781][ T4264] option from the mount to silence this warning. [ 58.455781][ T4264] ======================================================= [ 58.497448][ T4264] hfsplus: unable to parse mount options [ 58.742093][ T1594] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.824006][ T1594] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.842564][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10!!! [ 58.994530][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.211678][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.365802][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.428202][ T4277] loop3: detected capacity change from 0 to 4096 [ 59.496774][ T4277] ntfs3: Unknown parameter '01777777777777777777777' [ 59.762287][ T4230] Bluetooth: hci1: command 0x0419 tx timeout [ 59.781270][ T4230] Bluetooth: hci0: command 0x0419 tx timeout [ 59.918677][ T4230] Bluetooth: hci4: command 0x0419 tx timeout [ 59.991330][ T4278] netlink: 220 bytes leftover after parsing attributes in process `syz.2.3'. [ 60.002678][ T4278] unsupported nlmsg_type 40 [ 60.013046][ T4230] Bluetooth: hci3: command 0x0419 tx timeout [ 60.023218][ T4230] Bluetooth: hci2: command 0x0419 tx timeout [ 60.035694][ T508] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.080332][ T508] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.104150][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.142370][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.229067][ T4283] loop4: detected capacity change from 0 to 4096 [ 60.293274][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 60.335982][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #302!!! [ 60.756099][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #302!!! [ 60.756521][ T4287] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 60.756521][ T4287] program syz.3.7 not setting count and/or reply_len properly [ 60.852895][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #212!!! [ 60.862129][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #212!!! [ 60.871819][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #212!!! [ 60.881949][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #292!!! [ 61.360267][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 61.422941][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 61.594610][ T4299] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 62.445223][ T4303] loop0: detected capacity change from 0 to 256 [ 62.554433][ T4300] loop3: detected capacity change from 0 to 512 [ 62.559257][ T26] audit: type=1800 audit(1773276632.837:2): pid=4283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 62.730448][ T4300] EXT4-fs (loop3): 1 orphan inode deleted [ 63.420474][ T4300] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 63.520748][ T4303] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 63.576679][ T4311] loop2: detected capacity change from 0 to 64 [ 66.107627][ T4311] minix_free_block (loop2:21): bit already cleared [ 66.129769][ T4311] Trying to free block not in datazone [ 66.149040][ T26] audit: type=1800 audit(1773276636.427:3): pid=4311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.13" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 66.215832][ T26] audit: type=1326 audit(1773276636.487:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4326 comm="syz.1.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51fc170799 code=0x7ffc0000 [ 66.402381][ T26] audit: type=1326 audit(1773276636.497:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4326 comm="syz.1.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f51fc170799 code=0x7ffc0000 [ 66.455112][ T4330] netlink: 220 bytes leftover after parsing attributes in process `syz.2.17'. [ 66.496321][ T26] audit: type=1326 audit(1773276636.497:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4326 comm="syz.1.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51fc170799 code=0x7ffc0000 [ 66.584121][ T4331] loop1: detected capacity change from 0 to 4096 [ 66.597526][ T4331] ntfs3: Unknown parameter '01777777777777777777777' [ 66.778597][ T4324] Zero length message leads to an empty skb [ 66.793528][ T23] cfg80211: failed to load regulatory.db [ 67.598251][ T4345] syz.4.22 sent an empty control message without MSG_MORE. [ 68.133628][ T4351] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 69.599071][ T4363] Cannot find add_set index 0 as target [ 69.690314][ T4366] netlink: 220 bytes leftover after parsing attributes in process `syz.4.29'. [ 69.836319][ T4371] loop4: detected capacity change from 0 to 4096 [ 70.016661][ T4371] ntfs3: Unknown parameter '01777777777777777777777' [ 71.339091][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.345645][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 74.084644][ T4405] netlink: 220 bytes leftover after parsing attributes in process `syz.0.41'. [ 74.180981][ T4410] loop3: detected capacity change from 0 to 16 [ 74.357995][ T4410] erofs: (device loop3): mounted with root inode @ nid 36. [ 77.227750][ T4431] loop4: detected capacity change from 0 to 512 [ 79.202870][ C0] sched: RT throttling activated [ 81.683798][ T4450] loop3: detected capacity change from 0 to 2048 [ 81.787533][ T4450] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 83.060237][ T4441] loop0: detected capacity change from 0 to 32768 [ 83.129174][ T4441] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.51 (4441) [ 83.176919][ T4458] loop1: detected capacity change from 0 to 2048 [ 83.233990][ T4457] loop3: detected capacity change from 0 to 16 [ 83.259011][ T4441] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 83.282906][ T4458] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 83.317484][ T4457] erofs: (device loop3): mounted with root inode @ nid 36. [ 83.366228][ T4441] BTRFS info (device loop0): use no compression [ 83.403977][ T4441] BTRFS info (device loop0): force zlib compression, level 3 [ 83.443432][ T4441] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 83.531124][ T4441] BTRFS info (device loop0): use lzo compression, level 0 [ 83.552951][ T4441] BTRFS info (device loop0): turning on flush-on-commit [ 83.623556][ T4441] BTRFS info (device loop0): enabling auto defrag [ 83.636422][ T4441] BTRFS info (device loop0): using free space tree [ 83.672293][ T4441] BTRFS info (device loop0): has skinny extents [ 83.910883][ T4441] BTRFS error (device loop0): open_ctree failed: -12 [ 84.165754][ T4488] Cannot find add_set index 0 as target [ 85.915672][ T4261] Bluetooth: hci5: command 0x0409 tx timeout [ 86.048137][ T4464] chnl_net:caif_netlink_parms(): no params data found [ 87.720604][ T4464] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.727901][ T4464] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.736311][ T4464] device bridge_slave_0 entered promiscuous mode [ 87.748708][ T4464] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.758369][ T4464] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.767931][ T4464] device bridge_slave_1 entered promiscuous mode [ 87.944443][ T4464] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.974447][ T23] Bluetooth: hci5: command 0x041b tx timeout [ 87.996106][ T4464] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.099979][ T4464] team0: Port device team_slave_0 added [ 88.656315][ T4464] team0: Port device team_slave_1 added [ 88.827248][ T4464] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.834540][ T4464] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.863075][ T4464] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.923982][ T4464] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.930957][ T4464] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.083569][ T4464] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.086590][ T23] Bluetooth: hci5: command 0x040f tx timeout [ 91.885464][ T4564] loop3: detected capacity change from 0 to 16 [ 93.203376][ T4261] Bluetooth: hci5: command 0x0419 tx timeout [ 93.214632][ T4564] erofs: (device loop3): mounted with root inode @ nid 36. [ 93.223128][ T4564] xt_TPROXY: Can be used only with -p tcp or -p udp [ 93.239773][ T4464] device hsr_slave_0 entered promiscuous mode [ 94.232615][ T4464] device hsr_slave_1 entered promiscuous mode [ 95.230776][ T4464] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.238583][ T4464] Cannot create hsr debugfs directory [ 97.948924][ T4464] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 98.923693][ T4464] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 98.943484][ T4464] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 99.081807][ T4464] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 99.410398][ T4610] loop1: detected capacity change from 0 to 512 [ 99.781907][ T4610] EXT4-fs (loop1): 1 orphan inode deleted [ 99.788023][ T4610] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 101.448590][ T4270] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.592817][ T4624] netlink: 'syz.1.93': attribute type 1 has an invalid length. [ 101.723191][ T4625] bond1: (slave gretap1): making interface the new active one [ 101.750187][ T4625] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 101.935176][ T4270] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.090069][ T4635] Cannot find add_set index 0 as target [ 102.836216][ T4270] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.009791][ T4464] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.208009][ T4270] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.258001][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 104.281335][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 104.315618][ T4464] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.383653][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 104.404652][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 104.436231][ T3064] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.443361][ T3064] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.567232][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 104.581668][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 104.756691][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 104.780664][ T3064] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.787789][ T3064] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.865289][ T4661] loop4: detected capacity change from 0 to 512 [ 107.610352][ T4661] EXT4-fs: error -4 creating inode table initialization thread [ 107.618586][ T4661] EXT4-fs (loop4): mount failed [ 107.766703][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 107.825508][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 107.876625][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 107.907812][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 107.931488][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 108.130631][ T4670] netlink: 'syz.1.107': attribute type 1 has an invalid length. [ 108.193056][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 108.212572][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 109.210058][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 109.219416][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 109.228143][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 109.448643][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 110.709984][ T4698] loop0: detected capacity change from 0 to 2048 [ 111.104613][ T4698] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 111.645260][ T4706] Cannot find add_set index 0 as target [ 111.891650][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 111.907631][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 111.968982][ T4464] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.540008][ T4729] loop1: detected capacity change from 0 to 16 [ 115.216362][ T4729] erofs: (device loop1): mounted with root inode @ nid 36. [ 115.225279][ T4729] xt_TPROXY: Can be used only with -p tcp or -p udp [ 115.565081][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 115.789368][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 117.630465][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 117.640669][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 118.690751][ T4270] device hsr_slave_0 left promiscuous mode [ 118.732032][ T4270] device hsr_slave_1 left promiscuous mode [ 118.785673][ T4270] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.857296][ T4270] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.729349][ T4270] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.766144][ T4270] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.814142][ T4270] device bridge_slave_1 left promiscuous mode [ 119.821785][ T4270] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.081128][ T4270] device bridge_slave_0 left promiscuous mode [ 120.099276][ T4270] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.136448][ T4270] device veth1_macvtap left promiscuous mode [ 121.142800][ T4270] device veth0_macvtap left promiscuous mode [ 121.179664][ T4270] device veth1_vlan left promiscuous mode [ 121.186736][ T4817] Cannot find add_set index 0 as target [ 121.201453][ T4270] device veth0_vlan left promiscuous mode [ 121.975193][ T4270] team0 (unregistering): Port device team_slave_1 removed [ 122.030333][ T4270] team0 (unregistering): Port device team_slave_0 removed [ 122.093212][ T4270] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 122.255396][ T4270] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 123.717205][ T4270] bond0 (unregistering): Released all slaves [ 123.839204][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 123.862372][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 123.997171][ T4464] device veth0_vlan entered promiscuous mode [ 124.027647][ T4464] device veth1_vlan entered promiscuous mode [ 125.002472][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 125.987888][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 125.999182][ T4464] device veth0_macvtap entered promiscuous mode [ 126.029493][ T4699] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 126.069893][ T4464] device veth1_macvtap entered promiscuous mode [ 126.460164][ T4464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.895581][ T4464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.907384][ T4464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.937162][ T4464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.201088][ T4464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.488976][ T4464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.226487][ T4464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.318330][ T4464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.489063][ T4464] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 128.623221][ T4464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.733402][ T4464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.820959][ T4464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.897866][ T4464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.958099][ T4464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.969184][ T4464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.991864][ T4464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.023050][ T4464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.041798][ T4464] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 129.079621][ T1594] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 129.098590][ T1594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 129.252215][ T1594] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 129.319665][ T1594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 129.344907][ T4464] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.354639][ T4464] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.398168][ T4464] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.162532][ T4464] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.541201][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.556483][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.573230][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 131.612650][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.624054][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.662805][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 132.775344][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.781690][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.201498][ T4949] xt_TPROXY: Can be used only with -p tcp or -p udp [ 134.328482][ T4952] loop5: detected capacity change from 0 to 2048 [ 134.356750][ T4952] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 136.208112][ T4960] netlink: 'syz.4.168': attribute type 1 has an invalid length. [ 137.050879][ T4978] loop5: detected capacity change from 0 to 16 [ 137.683548][ T4978] erofs: (device loop5): mounted with root inode @ nid 36. [ 137.707530][ T4978] xt_TPROXY: Can be used only with -p tcp or -p udp [ 138.028252][ T4981] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 138.184062][ T4984] ax25_connect(): syz.4.171 uses autobind, please contact jreuter@yaina.de [ 138.969171][ T4994] loop4: detected capacity change from 0 to 512 [ 141.656668][ T4994] EXT4-fs: failed to create workqueue [ 141.662082][ T4994] EXT4-fs (loop4): mount failed [ 144.034810][ T5031] netlink: 'syz.4.181': attribute type 1 has an invalid length. [ 144.522382][ T5037] bond2: (slave gretap1): making interface the new active one [ 144.547386][ T5037] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 148.373913][ T5113] loop0: detected capacity change from 0 to 512 [ 148.684693][ T5113] EXT4-fs (loop0): 1 orphan inode deleted [ 148.690555][ T5113] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 149.892636][ T5123] netlink: 'syz.1.197': attribute type 1 has an invalid length. [ 150.101331][ T5128] device macvlan2 entered promiscuous mode [ 150.229911][ T5128] bond3: (slave macvlan2): Opening slave failed [ 152.953931][ T5179] Cannot find add_set index 0 as target [ 154.400993][ T5201] loop0: detected capacity change from 0 to 512 [ 156.225149][ T5203] netlink: 'syz.5.215': attribute type 1 has an invalid length. [ 156.588821][ T5201] EXT4-fs (loop0): 1 orphan inode deleted [ 156.595518][ T5201] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 157.104613][ T5208] device macvlan2 entered promiscuous mode [ 160.827215][ T5259] loop4: detected capacity change from 0 to 512 [ 160.928548][ T5259] EXT4-fs (loop4): 1 orphan inode deleted [ 160.935130][ T5259] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 161.038140][ T5269] netlink: 'syz.1.228': attribute type 1 has an invalid length. [ 161.071769][ T5269] device macvlan2 entered promiscuous mode [ 161.079357][ T5269] bond4: (slave macvlan2): Opening slave failed [ 166.593393][ T5358] loop5: detected capacity change from 0 to 512 [ 167.506660][ T5358] EXT4-fs (loop5): 1 orphan inode deleted [ 167.512489][ T5358] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 168.907336][ T5390] Cannot find add_set index 0 as target [ 172.741639][ T5464] loop0: detected capacity change from 0 to 512 [ 172.798818][ T5464] EXT4-fs (loop0): 1 orphan inode deleted [ 172.804693][ T5464] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 175.813025][ T4229] Bluetooth: hci0: command 0x0406 tx timeout [ 175.819109][ T4229] Bluetooth: hci2: command 0x0406 tx timeout [ 175.848976][ T4229] Bluetooth: hci4: command 0x0406 tx timeout [ 175.992956][ T13] Bluetooth: hci1: command 0x0406 tx timeout [ 177.582366][ T5542] loop0: detected capacity change from 0 to 512 [ 177.697839][ T5542] EXT4-fs (loop0): 1 orphan inode deleted [ 177.703709][ T5542] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 177.737147][ T5543] Cannot find add_set index 0 as target [ 183.159888][ T5617] loop5: detected capacity change from 0 to 512 [ 183.354498][ T5617] EXT4-fs (loop5): 1 orphan inode deleted [ 183.360281][ T5617] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 189.314543][ T5698] Cannot find add_set index 0 as target [ 190.905034][ T5712] loop0: detected capacity change from 0 to 512 [ 191.045242][ T5712] EXT4-fs (loop0): 1 orphan inode deleted [ 191.051022][ T5712] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 194.313227][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.323732][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.932182][ T5770] loop0: detected capacity change from 0 to 512 [ 197.894804][ T5770] EXT4-fs (loop0): 1 orphan inode deleted [ 197.900589][ T5770] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 203.072044][ T5837] loop0: detected capacity change from 0 to 512 [ 203.955908][ T5837] EXT4-fs (loop0): 1 orphan inode deleted [ 203.961691][ T5837] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 208.199477][ T4231] Bluetooth: hci5: command 0x0406 tx timeout [ 208.693094][ C1] ================================================================== [ 208.701506][ C1] BUG: KASAN: use-after-free in ax25_heartbeat_expiry+0x10c/0x130 [ 208.709353][ C1] Read of size 4 at addr ffff88805fed0f50 by task syz-executor/4185 [ 208.717350][ C1] [ 208.719705][ C1] CPU: 1 PID: 4185 Comm: syz-executor Not tainted syzkaller #0 [ 208.727255][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 208.737324][ C1] Call Trace: [ 208.740588][ C1] [ 208.743413][ C1] dump_stack_lvl+0x188/0x250 [ 208.748079][ C1] ? show_regs_print_info+0x20/0x20 [ 208.753264][ C1] ? _printk+0xda/0x130 [ 208.757399][ C1] ? ax25_heartbeat_expiry+0x10c/0x130 [ 208.762841][ C1] ? load_image+0x400/0x400 [ 208.767328][ C1] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 208.772779][ C1] print_address_description+0x60/0x2d0 [ 208.778336][ C1] ? ax25_heartbeat_expiry+0x10c/0x130 [ 208.783788][ C1] kasan_report+0xdf/0x130 [ 208.788203][ C1] ? ax25_heartbeat_expiry+0x10c/0x130 [ 208.793651][ C1] ? ax25_setup_timers+0xc0/0xc0 [ 208.798591][ C1] ax25_heartbeat_expiry+0x10c/0x130 [ 208.803862][ C1] call_timer_fn+0x17b/0x540 [ 208.808448][ C1] ? ax25_setup_timers+0xc0/0xc0 [ 208.813367][ C1] ? __run_timers+0x800/0x800 [ 208.818038][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 208.823228][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 208.828470][ C1] ? ax25_setup_timers+0xc0/0xc0 [ 208.833407][ C1] __run_timers+0x53e/0x800 [ 208.837918][ C1] ? detach_timer+0x2b0/0x2b0 [ 208.842591][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 208.848568][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 208.853404][ C1] ? ktime_get_real_ts64+0x440/0x440 [ 208.858681][ C1] run_timer_softirq+0x63/0xf0 [ 208.863558][ C1] handle_softirqs+0x339/0x830 [ 208.868335][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 208.873180][ C1] ? do_softirq+0x210/0x210 [ 208.877674][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 208.882858][ C1] __irq_exit_rcu+0x13b/0x230 [ 208.887524][ C1] ? irq_exit_rcu+0x20/0x20 [ 208.892018][ C1] irq_exit_rcu+0x5/0x20 [ 208.896251][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 208.901875][ C1] [ 208.904801][ C1] [ 208.907715][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 208.913696][ C1] RIP: 0010:__sanitizer_cov_trace_const_cmp8+0x4/0x80 [ 208.920450][ C1] Code: 77 22 89 ff 89 f6 4a c7 44 02 08 05 00 00 00 4a 89 7c 02 10 4a 89 74 02 18 4a 89 44 02 20 48 ff c1 48 89 0a c3 90 48 8b 04 24 <65> 48 8b 0d c4 4a 89 7e 65 8b 15 c5 4a 89 7e 81 e2 00 01 ff 00 74 [ 208.940047][ C1] RSP: 0018:ffffc90002e2f698 EFLAGS: 00000246 [ 208.946115][ C1] RAX: ffffffff81ad5b32 RBX: 0000000000000000 RCX: ffff88807ca63b80 [ 208.954166][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 208.962123][ C1] RBP: ffffc90002e2f950 R08: ffffea0001a42cb3 R09: 1ffffd4000348596 [ 208.970081][ C1] R10: dffffc0000000000 R11: fffff94000348597 R12: 00007ff147a79000 [ 208.978044][ C1] R13: 1ffffd4000348591 R14: 00fff00000000000 R15: 0000000000000000 [ 208.986010][ C1] ? copy_page_range+0x1752/0x3230 [ 208.991135][ C1] copy_page_range+0x1752/0x3230 [ 208.996072][ C1] ? copy_process+0x17eb/0x3e20 [ 209.001080][ C1] ? kernel_clone+0x23f/0x990 [ 209.005892][ C1] ? pfn_valid+0x380/0x380 [ 209.010594][ C1] ? validate_mm_rb+0x1fd/0x230 [ 209.015449][ C1] ? validate_mm_rb+0x230/0x230 [ 209.020297][ C1] copy_mm+0xc86/0x13f0 [ 209.024448][ C1] ? copy_signal+0x640/0x640 [ 209.029038][ C1] ? __init_rwsem+0x11e/0x160 [ 209.033702][ C1] ? copy_signal+0x537/0x640 [ 209.038278][ C1] copy_process+0x17eb/0x3e20 [ 209.042984][ C1] ? __pidfd_prepare+0x140/0x140 [ 209.047921][ C1] kernel_clone+0x23f/0x990 [ 209.052424][ C1] ? create_io_thread+0x180/0x180 [ 209.057449][ C1] __x64_sys_clone+0x19a/0x210 [ 209.062204][ C1] ? __ia32_sys_vfork+0x130/0x130 [ 209.067235][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 209.072416][ C1] do_syscall_64+0x4c/0xa0 [ 209.076815][ C1] ? clear_bhb_loop+0x30/0x80 [ 209.081482][ C1] ? clear_bhb_loop+0x30/0x80 [ 209.086139][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 209.092019][ C1] RIP: 0033:0x7ff14879e212 [ 209.096419][ C1] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 209.116021][ C1] RSP: 002b:00007ffc30baa310 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 209.124443][ C1] RAX: ffffffffffffffda RBX: 00007ffc30baa310 RCX: 00007ff14879e212 [ 209.132423][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 209.140470][ C1] RBP: 00007ffc30baa49c R08: 0000000000000000 R09: 0000000000000001 [ 209.148432][ C1] R10: 000055556777c7d0 R11: 0000000000000246 R12: 0000000000000001 [ 209.156397][ C1] R13: 00000000000927c0 R14: 0000000000032e7b R15: 00007ffc30baa4f0 [ 209.164368][ C1] [ 209.167370][ C1] [ 209.169674][ C1] Allocated by task 4981: [ 209.173980][ C1] __kasan_kmalloc+0xb5/0xf0 [ 209.178550][ C1] ax25_dev_device_up+0x50/0x580 [ 209.183466][ C1] ax25_device_event+0x483/0x4f0 [ 209.188392][ C1] raw_notifier_call_chain+0xcb/0x160 [ 209.193755][ C1] __dev_notify_flags+0x194/0x300 [ 209.198764][ C1] dev_change_flags+0xe3/0x1a0 [ 209.203510][ C1] dev_ifsioc+0x130/0xd50 [ 209.207819][ C1] dev_ioctl+0x545/0xe30 [ 209.212039][ C1] sock_do_ioctl+0x245/0x320 [ 209.216615][ C1] sock_ioctl+0x4d2/0x710 [ 209.220921][ C1] __se_sys_ioctl+0xfa/0x170 [ 209.225496][ C1] do_syscall_64+0x4c/0xa0 [ 209.229908][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 209.235785][ C1] [ 209.238089][ C1] Freed by task 5846: [ 209.242048][ C1] kasan_set_track+0x4b/0x70 [ 209.246619][ C1] kasan_set_free_info+0x1f/0x40 [ 209.251540][ C1] ____kasan_slab_free+0xd5/0x110 [ 209.256550][ C1] slab_free_freelist_hook+0xea/0x170 [ 209.261908][ C1] kfree+0xef/0x2a0 [ 209.265695][ C1] ax25_release+0x661/0x870 [ 209.270179][ C1] sock_close+0xd5/0x240 [ 209.274403][ C1] __fput+0x234/0x930 [ 209.278379][ C1] task_work_run+0x125/0x1a0 [ 209.282947][ C1] do_exit+0x626/0x20c0 [ 209.287081][ C1] do_group_exit+0x12e/0x300 [ 209.291645][ C1] get_signal+0x6ca/0x12c0 [ 209.296035][ C1] arch_do_signal_or_restart+0xe7/0x12c0 [ 209.301648][ C1] exit_to_user_mode_loop+0x9e/0x130 [ 209.306931][ C1] exit_to_user_mode_prepare+0xee/0x180 [ 209.312472][ C1] syscall_exit_to_user_mode+0x16/0x40 [ 209.317910][ C1] do_syscall_64+0x58/0xa0 [ 209.322300][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 209.328176][ C1] [ 209.330619][ C1] Last potentially related work creation: [ 209.336328][ C1] kasan_save_stack+0x35/0x60 [ 209.341086][ C1] kasan_record_aux_stack+0xb8/0x100 [ 209.346361][ C1] call_rcu+0x189/0x950 [ 209.350502][ C1] __nf_register_net_hook+0x6fe/0x850 [ 209.355868][ C1] nf_register_net_hook+0xae/0x190 [ 209.360956][ C1] nf_register_net_hooks+0x40/0x1a0 [ 209.366139][ C1] ip6t_register_table+0x551/0x810 [ 209.371233][ C1] ip6table_raw_table_init+0x50/0x70 [ 209.376500][ C1] xt_find_table_lock+0x220/0x360 [ 209.381506][ C1] xt_request_find_table_lock+0x22/0x100 [ 209.387122][ C1] do_ip6t_get_ctl+0x5e8/0x1120 [ 209.391952][ C1] nf_getsockopt+0x25e/0x280 [ 209.396543][ C1] ipv6_getsockopt+0x473/0x2470 [ 209.401377][ C1] tcp_getsockopt+0x200/0x25a0 [ 209.406118][ C1] __sys_getsockopt+0x1b0/0x230 [ 209.410955][ C1] __x64_sys_getsockopt+0xb1/0xc0 [ 209.415969][ C1] do_syscall_64+0x4c/0xa0 [ 209.420365][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 209.426232][ C1] [ 209.428535][ C1] The buggy address belongs to the object at ffff88805fed0f00 [ 209.428535][ C1] which belongs to the cache kmalloc-192 of size 192 [ 209.442565][ C1] The buggy address is located 80 bytes inside of [ 209.442565][ C1] 192-byte region [ffff88805fed0f00, ffff88805fed0fc0) [ 209.455737][ C1] The buggy address belongs to the page: [ 209.461359][ C1] page:ffffea00017fb400 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88805fed0700 pfn:0x5fed0 [ 209.472787][ C1] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 209.480341][ C1] raw: 00fff00000000200 ffffea00008828c8 ffffea00008aed88 ffff888016c41a00 [ 209.488922][ C1] raw: ffff88805fed0700 000000000010000b 00000001ffffffff 0000000000000000 [ 209.497589][ C1] page dumped because: kasan: bad access detected [ 209.504007][ C1] page_owner tracks the page as allocated [ 209.509707][ C1] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 4190, ts 59167104698, free_ts 59163754432 [ 209.525661][ C1] get_page_from_freelist+0x1bbd/0x1ca0 [ 209.531201][ C1] __alloc_pages+0x1ee/0x480 [ 209.535769][ C1] new_slab+0xc0/0x4b0 [ 209.539817][ C1] ___slab_alloc+0x80a/0xdd0 [ 209.544380][ C1] kmem_cache_alloc_trace+0x1a5/0x2a0 [ 209.549728][ C1] kset_create_and_add+0x56/0x160 [ 209.554726][ C1] netdev_register_kobject+0x1ae/0x320 [ 209.560158][ C1] register_netdevice+0x1042/0x1710 [ 209.565330][ C1] cfg80211_register_netdevice+0x155/0x2f0 [ 209.571109][ C1] ieee80211_if_add+0x1022/0x1dc0 [ 209.576110][ C1] ieee80211_register_hw+0x2bde/0x3af0 [ 209.581545][ C1] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 209.587239][ C1] hwsim_new_radio_nl+0xa6f/0xc40 [ 209.592239][ C1] genl_rcv_msg+0xcea/0xf90 [ 209.596716][ C1] netlink_rcv_skb+0x1f5/0x440 [ 209.601487][ C1] genl_rcv+0x24/0x40 [ 209.605442][ C1] page last free stack trace: [ 209.610086][ C1] free_unref_page_prepare+0x637/0x6c0 [ 209.615519][ C1] free_unref_page+0x8f/0x2a0 [ 209.620170][ C1] __mmdrop+0xaa/0x3e0 [ 209.624211][ C1] exit_mm+0x588/0x6e0 [ 209.628256][ C1] do_exit+0x5a9/0x20c0 [ 209.632384][ C1] do_group_exit+0x12e/0x300 [ 209.636973][ C1] __x64_sys_exit_group+0x3b/0x40 [ 209.641975][ C1] do_syscall_64+0x4c/0xa0 [ 209.646368][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 209.652238][ C1] [ 209.654537][ C1] Memory state around the buggy address: [ 209.660139][ C1] ffff88805fed0e00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 209.668174][ C1] ffff88805fed0e80: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 209.676230][ C1] >ffff88805fed0f00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 209.684264][ C1] ^ [ 209.690918][ C1] ffff88805fed0f80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 209.698953][ C1] ffff88805fed1000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 209.706995][ C1] ================================================================== [ 209.715030][ C1] Disabling lock debugging due to kernel taint [ 209.721243][ C1] vkms_vblank_simulate: vblank timer overrun [ 209.727287][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 209.734654][ C1] CPU: 1 PID: 4185 Comm: syz-executor Tainted: G B syzkaller #0 [ 209.743568][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 209.753609][ C1] Call Trace: [ 209.756868][ C1] [ 209.759687][ C1] dump_stack_lvl+0x188/0x250 [ 209.764430][ C1] ? show_regs_print_info+0x20/0x20 [ 209.769603][ C1] ? load_image+0x400/0x400 [ 209.774079][ C1] panic+0x2e5/0x810 [ 209.777949][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 209.784080][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 209.788564][ C1] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 209.794437][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 209.800302][ C1] ? _raw_spin_unlock+0x40/0x40 [ 209.805126][ C1] ? ax25_heartbeat_expiry+0x10c/0x130 [ 209.810580][ C1] check_panic_on_warn+0x80/0xa0 [ 209.815498][ C1] ? ax25_heartbeat_expiry+0x10c/0x130 [ 209.820933][ C1] end_report+0x6d/0xf0 [ 209.825062][ C1] kasan_report+0x102/0x130 [ 209.829541][ C1] ? ax25_heartbeat_expiry+0x10c/0x130 [ 209.834985][ C1] ? ax25_setup_timers+0xc0/0xc0 [ 209.840194][ C1] ax25_heartbeat_expiry+0x10c/0x130 [ 209.845492][ C1] call_timer_fn+0x17b/0x540 [ 209.850090][ C1] ? ax25_setup_timers+0xc0/0xc0 [ 209.855037][ C1] ? __run_timers+0x800/0x800 [ 209.859717][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 209.864894][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 209.870077][ C1] ? ax25_setup_timers+0xc0/0xc0 [ 209.874996][ C1] __run_timers+0x53e/0x800 [ 209.879482][ C1] ? detach_timer+0x2b0/0x2b0 [ 209.884138][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 209.890098][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 209.894926][ C1] ? ktime_get_real_ts64+0x440/0x440 [ 209.900189][ C1] run_timer_softirq+0x63/0xf0 [ 209.904937][ C1] handle_softirqs+0x339/0x830 [ 209.909682][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 209.914512][ C1] ? do_softirq+0x210/0x210 [ 209.918992][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 209.924169][ C1] __irq_exit_rcu+0x13b/0x230 [ 209.928825][ C1] ? irq_exit_rcu+0x20/0x20 [ 209.933312][ C1] irq_exit_rcu+0x5/0x20 [ 209.937532][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 209.943236][ C1] [ 209.946153][ C1] [ 209.949093][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 209.955057][ C1] RIP: 0010:__sanitizer_cov_trace_const_cmp8+0x4/0x80 [ 209.961803][ C1] Code: 77 22 89 ff 89 f6 4a c7 44 02 08 05 00 00 00 4a 89 7c 02 10 4a 89 74 02 18 4a 89 44 02 20 48 ff c1 48 89 0a c3 90 48 8b 04 24 <65> 48 8b 0d c4 4a 89 7e 65 8b 15 c5 4a 89 7e 81 e2 00 01 ff 00 74 [ 209.981391][ C1] RSP: 0018:ffffc90002e2f698 EFLAGS: 00000246 [ 209.987447][ C1] RAX: ffffffff81ad5b32 RBX: 0000000000000000 RCX: ffff88807ca63b80 [ 209.995426][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 210.003392][ C1] RBP: ffffc90002e2f950 R08: ffffea0001a42cb3 R09: 1ffffd4000348596 [ 210.011352][ C1] R10: dffffc0000000000 R11: fffff94000348597 R12: 00007ff147a79000 [ 210.019418][ C1] R13: 1ffffd4000348591 R14: 00fff00000000000 R15: 0000000000000000 [ 210.027384][ C1] ? copy_page_range+0x1752/0x3230 [ 210.032496][ C1] copy_page_range+0x1752/0x3230 [ 210.037418][ C1] ? copy_process+0x17eb/0x3e20 [ 210.042256][ C1] ? kernel_clone+0x23f/0x990 [ 210.046926][ C1] ? pfn_valid+0x380/0x380 [ 210.051324][ C1] ? validate_mm_rb+0x1fd/0x230 [ 210.056157][ C1] ? validate_mm_rb+0x230/0x230 [ 210.060987][ C1] copy_mm+0xc86/0x13f0 [ 210.065129][ C1] ? copy_signal+0x640/0x640 [ 210.069699][ C1] ? __init_rwsem+0x11e/0x160 [ 210.074370][ C1] ? copy_signal+0x537/0x640 [ 210.078949][ C1] copy_process+0x17eb/0x3e20 [ 210.083614][ C1] ? __pidfd_prepare+0x140/0x140 [ 210.088544][ C1] kernel_clone+0x23f/0x990 [ 210.093035][ C1] ? create_io_thread+0x180/0x180 [ 210.098169][ C1] __x64_sys_clone+0x19a/0x210 [ 210.102926][ C1] ? __ia32_sys_vfork+0x130/0x130 [ 210.107934][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 210.113130][ C1] do_syscall_64+0x4c/0xa0 [ 210.117531][ C1] ? clear_bhb_loop+0x30/0x80 [ 210.122187][ C1] ? clear_bhb_loop+0x30/0x80 [ 210.126845][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 210.132723][ C1] RIP: 0033:0x7ff14879e212 [ 210.137142][ C1] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 210.156759][ C1] RSP: 002b:00007ffc30baa310 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 210.165184][ C1] RAX: ffffffffffffffda RBX: 00007ffc30baa310 RCX: 00007ff14879e212 [ 210.173148][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 210.181102][ C1] RBP: 00007ffc30baa49c R08: 0000000000000000 R09: 0000000000000001 [ 210.189057][ C1] R10: 000055556777c7d0 R11: 0000000000000246 R12: 0000000000000001 [ 210.197013][ C1] R13: 00000000000927c0 R14: 0000000000032e7b R15: 00007ffc30baa4f0 [ 210.204976][ C1] [ 210.208291][ C1] Kernel Offset: disabled [ 210.212603][ C1] Rebooting in 86400 seconds..