last executing test programs: 10.051581524s ago: executing program 4 (id=49): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r3, 0x0, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r4 = fsopen(&(0x7f00000001c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', 0x0, 0x0) gettid() fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = syz_open_pts(0xffffffffffffffff, 0x101300) ioctl$TIOCSCTTY(r5, 0x540e, 0x3f) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000040)) open$dir(&(0x7f0000000000)='./file0\x00', 0x4000, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000080)={0x8, 0x8169, 0x8000}) 9.996118109s ago: executing program 2 (id=50): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) keyctl$reject(0x13, 0x0, 0x400, 0x8000000000000204, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) syz_emit_ethernet(0x52, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88, 0x9, @private, @local, {[@cipso={0x86, 0x6}, @timestamp={0x44, 0xc, 0x56, 0x0, 0x0, [0x0, 0x0]}]}}}}}}}, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x6, 0x4000) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) 7.366783743s ago: executing program 2 (id=52): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) syz_open_pts(0xffffffffffffffff, 0x101000) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xa, 0xf, &(0x7f00000003c0)=ANY=[@ANYRES32=r2, @ANYBLOB], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) socket$netlink(0x10, 0x3, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x3, 0x0, 0x0}, 0x94) r3 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x39, 0x0, 0x0, 0x62, 0x86cc4097e8288a3a, 0x0, 0x0, 0x0, 0x34, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64]}, &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff}, 0x80) syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x80000c, &(0x7f0000000f40)=ANY=[@ANYBLOB="63726561746f723d7fcbf4272c6e6c733d63703934392c626172726965722c747970653d65f173442c756d61736b3d30303030303030303030303030303030303030303030312c756d61736b3d30303030303030303030303030303030303030303031312c666f7263652c666f7263652c6769643d", @ANYRESHEX=0x0, @ANYBLOB='\x00\x00'], 0x2, 0x6da, &(0x7f0000000580)="$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") lstat(&(0x7f0000003340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000033c0)) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r5, 0x1d) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0xfeffffffffffff) 7.267375012s ago: executing program 4 (id=53): r0 = syz_open_dev$vcsn(&(0x7f00000003c0), 0x7, 0x40d40) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_open_dev$dri(0x0, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x2400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0), 0x0, 0x0}) mount$tmpfs(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000340)={0x0, 0x3, 0x7, 0x0, 0x0, [0x0], [0x0, 0x7, 0x0, 0xfffffffa], [0x0, 0x80000002, 0x2], [0x0, 0x0, 0x1, 0x3]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000080)={r5}) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000180)=0x4000000) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f00000003c0)=0x6506304) preadv(r6, &(0x7f0000000400)=[{&(0x7f0000000140)=""/176, 0xb0}], 0x1, 0x6, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000700)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xffff, 0x10}, {0x9, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000051}, 0x2400c002) r8 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x1000400) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r9, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010000081000418e00000004fcff", 0x58}], 0x1) inotify_rm_watch(r0, r8) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000100)=0x20, 0x4) 7.265574393s ago: executing program 3 (id=55): socket(0x2b, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r0, 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_open_dev$sndpcmc(&(0x7f0000000180), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r4, 0xc2604110, &(0x7f0000000680)={0x3, [[0x7fff], [0x0, 0x100000], [0x100091]], '\x00', [{0x0, 0x102}], '\x00', 0x300}) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000200)={0x7, 0x2, 0x4}) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r5, 0xc01c64a3, &(0x7f0000000180)={0x3, r7, 0xfffff26a, 0x4, 0xb, 0x1fd, 0x1}) 5.906763294s ago: executing program 1 (id=56): open(&(0x7f0000000140)='./file1\x00', 0x60142, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x1030002}}, 0x50) read$FUSE(r0, &(0x7f00000065c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r2}, 0x10) r3 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x20080, 0x0) dup3(r3, r0, 0x0) close(0x3) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r4, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}]) 4.71258973s ago: executing program 4 (id=57): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r4, r0}}, 0x18) 4.646269386s ago: executing program 0 (id=58): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) syz_open_pts(0xffffffffffffffff, 0x101000) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xa, 0xf, &(0x7f00000003c0)=ANY=[@ANYRES32=r2, @ANYBLOB], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) socket$netlink(0x10, 0x3, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x3, 0x0, 0x0}, 0x94) r3 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x39, 0x0, 0x0, 0x62, 0x86cc4097e8288a3a, 0x0, 0x0, 0x0, 0x34, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64]}, &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff}, 0x80) syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x80000c, &(0x7f0000000f40)=ANY=[@ANYBLOB="63726561746f723d7fcbf4272c6e6c733d63703934392c626172726965722c747970653d65f173442c756d61736b3d30303030303030303030303030303030303030303030312c756d61736b3d30303030303030303030303030303030303030303031312c666f7263652c666f7263652c6769643d", @ANYRESHEX=0x0, @ANYBLOB='\x00\x00'], 0x2, 0x6da, &(0x7f0000000580)="$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") lstat(&(0x7f0000003340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000033c0)) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r5, 0x1d) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0xfeffffffffffff) 3.661682884s ago: executing program 2 (id=59): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, 0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0x101000) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xa, 0xf, &(0x7f00000003c0)=ANY=[@ANYRES32=r2, @ANYBLOB], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) socket$netlink(0x10, 0x3, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x3, 0x0, 0x0}, 0x94) r3 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x39, 0x0, 0x0, 0x62, 0x86cc4097e8288a3a, 0x0, 0x0, 0x0, 0x34, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64]}, &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff}, 0x80) syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x80000c, &(0x7f0000000f40)=ANY=[@ANYBLOB="63726561746f723d7fcbf4272c6e6c733d63703934392c626172726965722c747970653d65f173442c756d61736b3d30303030303030303030303030303030303030303030312c756d61736b3d30303030303030303030303030303030303030303031312c666f7263652c666f7263652c6769643d", @ANYRESHEX=0x0, @ANYBLOB='\x00\x00'], 0x2, 0x6da, &(0x7f0000000580)="$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") lstat(&(0x7f0000003340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000033c0)) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r5, 0x1d) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0xfeffffffffffff) 3.650655075s ago: executing program 4 (id=60): socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x26c, &(0x7f0000000840)="$eJzs3U9rU1kYB+A3bTpJC0OyGCgzDMwdZjOr0HaYfcrQgWECipKFriw2RWlqoYWCLtruit9Bv4Iu3QouxK1fQASpghvrqgshEm//JDWJjZpG7PNs+nLu++Ock17upYueXPl1eWlhZW1xd3cn8vlMZMtRjr1MFGMkRiO1FQDA92Sv0Yg3jdSw1wIAnA7vfwA4e3q9/zNbh2PnT39lAMCgfNHf/yMDWRIAMGAXL13+f7ZSmbuQJPmI5e316no1/Zlen12M61GPWkxFId5FNA6l9b//VeamkqaXxcgvb46k+c316mh7fjoKUeycn05SUW3mDvJjMbGffzYRtZiJQvzUOT/TMf9D/PlHy/ylKMTTq7ES9ViIZjbN5yJiYzpJ/jlXOZbPfegDAAAAAAAAAAAAAAAAAAAAAIBBKCWHiu3n36Tn95RK3a6n+dbzgcZ7nQ/U2Dx2vk42fskOd+8AAAAAAAAAAAAAAAAAAADwrVi7eWtpvl6vrfYqbjy592gnlwY+2dy7yOzP219qu2fP+Ml2caz48fcXdzpdykWu38/n84qxiGgdSfanfPjbACf9WsXjnWs//7U2+Xe3nsi2jtxubrWtp8uNlB3UB/66ENG1J9/3Ddla3D8oym8/6jm4lWqr48P+xU3eLc8/2Hj+6qSpHg+NxuggHkUAAAAAAAAAAAAAAAAAAHDmHf3T77BXAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADDc/T9//0WuWgbyXdt3hr2HgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4H0AAAD//7qXlSU=") socket$inet(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.events.local\x00', 0x26e1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x143042, 0x0) 3.535879385s ago: executing program 3 (id=61): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) keyctl$reject(0x13, 0x0, 0x400, 0x8000000000000204, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) syz_emit_ethernet(0x4e, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88, 0x9, @private, @local, {[@cipso={0x86, 0x6}, @timestamp={0x44, 0x8, 0x56, 0x0, 0x0, [0x0]}]}}}}}}}, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) syz_open_dev$sndctrl(&(0x7f0000000000), 0x6, 0x4000) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) 1.768479183s ago: executing program 0 (id=62): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='htcp', 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) 1.712488278s ago: executing program 1 (id=63): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r3) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff5644d, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r8, {}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x808, 0x205, 0x1, 0xc}, 0xb, 0x6, 0x32, 0x5, 0xa, 0x2, 0x9, 0xd, 0x1, 0x1, {0xffff1c72, 0x23, 0x7, 0xc, 0xfffffffe, 0x7583}}}}]}, 0x78}}, 0x8000) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 1.250117909s ago: executing program 4 (id=64): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYRESOCT, @ANYRESHEX=r0, @ANYBLOB="00100000196163766c616e0044000280080009000800000009000700d1ae000008000100020000000800030002000300"/58], 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="40000000100001001000", @ANYRES32, @ANYBLOB="dc02000011000400140012800b0001006d61637365630000040002800a0001"], 0x40}}, 0x800) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000240)={0x0, 0x6d, "8396c5e7f31df8f5c87f33591f90b4d4a8500f293b093eb662d8b48a4ea21f94528f877c5bf05d810e4a9db7034dce95e84ccc088416671354b32f0ca11c26dee2b5606f99313c42ace7e5d6fef8ab2cc78167216f6378fe42cd9deee8a884a35c512e322779f138f8b6ba7494"}, &(0x7f00000001c0)=0x75) shutdown(r2, 0x1) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x10, 0x80003, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) setsockopt$sock_int(r4, 0x1, 0x21, &(0x7f0000000180)=0x1ffff, 0x4) sendto$inet(r4, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r4, &(0x7f0000000440)=""/125, 0x7d, 0x734, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'lo\x00'}) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="ad00"/16, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) 1.178998265s ago: executing program 0 (id=65): socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) close(r0) recvfrom(r2, 0x0, 0x0, 0x40002062, 0x0, 0x0) 1.051583457s ago: executing program 2 (id=66): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 697.729248ms ago: executing program 3 (id=67): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000ff0d0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000bd000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r0, r2, 0x25, 0x0, @val=@tcx}, 0x1c) syz_emit_ethernet(0xfdef, &(0x7f0000000400)=ANY=[], 0x0) 614.715056ms ago: executing program 2 (id=68): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x8881) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x110}, 0x2}, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r4, 0x401, 0x70bd26, 0x25dfdbf8, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x1c}}, 0x8d0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xffffff07}, @generic={0x0, 0x2, "d588380003c1"}]}}}}}}, 0xfd6c) 599.548857ms ago: executing program 1 (id=69): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000300012800b00010067656e657665000020000280140007000000000000000000000000000000000105fc0c000100000008000a00", @ANYRES32=r2], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 508.258825ms ago: executing program 3 (id=70): r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) connect$pppl2tp(r0, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x4, 0x1, 0x1, {0xa, 0x4e22, 0xf, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffff8}}}, 0x32) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e", 0x19}], 0x1}, 0x4) socket$kcm(0x10, 0x400000002, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="12000000ec0000000800000002000000000000005e938d1108f0d9ba12c696e369d5f13ed8d7ba3833b41e7efe8ed230da25f22dccbae7da", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, &(0x7f0000000480), &(0x7f0000000280)=@udp=r2, 0x1}, 0x20) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) socket(0x10, 0x80002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) write(r0, &(0x7f0000000000)='\"', 0x1) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x1d) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56", 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000f000000050030000000000005002f000000000008000300", @ANYRES32=r8], 0x2c}}, 0x4000000) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@mpls_getroute={0xc0, 0x1a, 0x20, 0x70bd2a, 0x25dfdbfd, {0x1c, 0x80, 0x0, 0x9, 0xfc, 0x2, 0xff, 0x1, 0x2500}, [@RTA_DST={0x8, 0x1, {0x3}}, @RTA_NEWDST={0x84, 0x13, [{0x7, 0x0, 0x1}, {0x81}, {0x6}, {0xfff81}, {0x6}, {0x2}, {0x2}, {0x400, 0x0, 0x1}, {0x3}, {0x7, 0x0, 0x1}, {0xffff7, 0x0, 0x1}, {0x3b}, {0xb}, {0x2, 0x0, 0x1}, {0x9d9, 0x0, 0x1}, {0x2}, {0x1}, {0x2}, {0x6}, {0x9}, {0x1, 0x0, 0x1}, {0x3}, {0x4, 0x0, 0x1}, {0xdfa8c}, {0x5}, {0x2, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0xe, 0x0, 0x1}, {0xcc04, 0x0, 0x1}, {0x4fa, 0x0, 0x1}, {0x6}, {0x2}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x9}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xf}, @RTA_DST={0x8, 0x1, {0x1000, 0x0, 0x1}}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000881}, 0x8090) 359.801848ms ago: executing program 1 (id=71): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000020000000000000008000400", @ANYRES32=r0, @ANYBLOB="06001500070000000c0016"], 0x38}}, 0x10) 277.688546ms ago: executing program 0 (id=72): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x20000050) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010202001400020077673200000000000000000000000000090001"], 0x4c}, 0x1, 0x40030000000000, 0x0, 0x40084}, 0x0) 192.494193ms ago: executing program 3 (id=73): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfff7e002, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}, {0x6, 0xc}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x0, 0x1, 0x29}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x3, 0x2}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x7}}, @TCA_U32_SEL={0x24, 0x5, {0xc, 0x6, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0xebd, 0x1, 0x206, 0x7}]}}]}}]}, 0x5c}}, 0x24040084) 166.076335ms ago: executing program 1 (id=74): r0 = socket$l2tp6(0xa, 0x2, 0x73) close(0x3) socket$kcm(0xa, 0x3, 0x87) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) 133.710528ms ago: executing program 0 (id=75): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [], {{0x6, 0x1, 0x5, 0x2}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 114.46548ms ago: executing program 3 (id=76): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r2, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={'rose', 0x0}, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) syz_genetlink_get_family_id$nl80211(&(0x7f0000003340), r2) 20.504119ms ago: executing program 2 (id=77): unshare(0x20000400) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_attach_bpf(r0, 0x1, 0x50, &(0x7f0000000100), 0x4) 20.278899ms ago: executing program 1 (id=78): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfd, 0x2ffffffff}, 0xc) connect$pppl2tp(r1, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x1, @remote}, 0xa}}, 0x26) sendmmsg$inet(r1, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)}}], 0x1a000, 0x8040) r2 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}]}, 0x2c}}, 0x44) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) close(0x3) 1.95533ms ago: executing program 4 (id=79): ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000200)=@ethtool_channels={0x3d, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0x81, 0x1}}) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000200)=ANY=[@ANYRES32, @ANYRESOCT, @ANYRESDEC], 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d05cd4b92ea54c7be", 0x10) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x7, r3}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r3, &(0x7f0000001600), &(0x7f0000001680)=""/227}, 0x20) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, 0x0) unshare(0x6a040000) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet(r4, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000180)=0x5a4f, 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) 0s ago: executing program 0 (id=80): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f00000000c0)=0x5, 0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.146' (ED25519) to the list of known hosts. [ 47.743849][ T4171] cgroup: Unknown subsys name 'net' [ 47.879433][ T4171] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 49.123449][ T4171] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 50.427444][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 50.492372][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 50.523308][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 50.557189][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 50.602399][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 50.612276][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.620267][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.628435][ T4194] device bridge_slave_0 entered promiscuous mode [ 50.657052][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.665832][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.674741][ T4194] device bridge_slave_1 entered promiscuous mode [ 50.715055][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.759131][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.775899][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.784209][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.792826][ T4184] device bridge_slave_0 entered promiscuous mode [ 50.801835][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.810047][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.818950][ T4186] device bridge_slave_0 entered promiscuous mode [ 50.841872][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.850088][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.858660][ T4184] device bridge_slave_1 entered promiscuous mode [ 50.867212][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.875205][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.883704][ T4186] device bridge_slave_1 entered promiscuous mode [ 50.906101][ T4194] team0: Port device team_slave_0 added [ 50.939762][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.947239][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.955618][ T4185] device bridge_slave_0 entered promiscuous mode [ 50.966119][ T4194] team0: Port device team_slave_1 added [ 50.980514][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.993521][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.009342][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.016953][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.025677][ T4185] device bridge_slave_1 entered promiscuous mode [ 51.046576][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.058531][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.073059][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.080980][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.089190][ T4187] device bridge_slave_0 entered promiscuous mode [ 51.103291][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.110699][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.119086][ T4187] device bridge_slave_1 entered promiscuous mode [ 51.152469][ T4186] team0: Port device team_slave_0 added [ 51.160511][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.168640][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.196447][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.215376][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.227498][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.240123][ T4184] team0: Port device team_slave_0 added [ 51.247895][ T4186] team0: Port device team_slave_1 added [ 51.254586][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.261810][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.290217][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.318836][ T4184] team0: Port device team_slave_1 added [ 51.332364][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.350540][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.374780][ T4185] team0: Port device team_slave_0 added [ 51.403548][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.411064][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.440454][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.453553][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.460966][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.488745][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.502040][ T4185] team0: Port device team_slave_1 added [ 51.518006][ T4187] team0: Port device team_slave_0 added [ 51.531663][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.538937][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.566011][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.599611][ T4187] team0: Port device team_slave_1 added [ 51.610618][ T4194] device hsr_slave_0 entered promiscuous mode [ 51.618780][ T4194] device hsr_slave_1 entered promiscuous mode [ 51.627157][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.634436][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.661490][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.677622][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.684716][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.714552][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.754560][ T4186] device hsr_slave_0 entered promiscuous mode [ 51.761307][ T4186] device hsr_slave_1 entered promiscuous mode [ 51.768884][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 51.777305][ T4186] Cannot create hsr debugfs directory [ 51.784503][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.791856][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.819945][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.865425][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.872749][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.899886][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.912647][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.920400][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.947143][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.980995][ T4184] device hsr_slave_0 entered promiscuous mode [ 51.988264][ T4184] device hsr_slave_1 entered promiscuous mode [ 51.996438][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.004635][ T4184] Cannot create hsr debugfs directory [ 52.088825][ T4185] device hsr_slave_0 entered promiscuous mode [ 52.096471][ T4185] device hsr_slave_1 entered promiscuous mode [ 52.103499][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.111842][ T4185] Cannot create hsr debugfs directory [ 52.121171][ T4187] device hsr_slave_0 entered promiscuous mode [ 52.128413][ T4191] Bluetooth: hci1: command 0x0409 tx timeout [ 52.136474][ T4191] Bluetooth: hci2: command 0x0409 tx timeout [ 52.139157][ T4187] device hsr_slave_1 entered promiscuous mode [ 52.142683][ T4191] Bluetooth: hci0: command 0x0409 tx timeout [ 52.156046][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.164495][ T4187] Cannot create hsr debugfs directory [ 52.214109][ T4198] Bluetooth: hci4: command 0x0409 tx timeout [ 52.223071][ T4198] Bluetooth: hci3: command 0x0409 tx timeout [ 52.415990][ T4194] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 52.428910][ T4194] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 52.441185][ T4194] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 52.454086][ T4194] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 52.491722][ T4186] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 52.501933][ T4186] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 52.512267][ T4186] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 52.524834][ T4186] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 52.567149][ T4187] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 52.579824][ T4187] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 52.600784][ T4187] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 52.611766][ T4187] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 52.671243][ T4184] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 52.686481][ T4184] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 52.709419][ T4184] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 52.720555][ T4184] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 52.739842][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.773764][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.811641][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.823452][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.833781][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.842142][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.851571][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.862060][ T4185] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 52.872132][ T4185] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 52.882190][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.900352][ T4185] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 52.910202][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.921149][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.931785][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.939522][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.948916][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.958786][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.967733][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.975145][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.983458][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.994387][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.003390][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.011120][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.049640][ T4185] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 53.067163][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.076299][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.085938][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.096556][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.106412][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.113780][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.123393][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.132357][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.142297][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.153388][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.163116][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.172335][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.205359][ T1506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.215919][ T1506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.227241][ T1506] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.236974][ T1506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.246759][ T1506] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.256697][ T1506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.266327][ T1506] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.278592][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.286727][ T1506] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.313442][ T4186] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 53.326887][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.342739][ T1506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.352427][ T1506] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.362307][ T1506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.372435][ T1506] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.381714][ T1506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.390263][ T1506] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.399214][ T1506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.408513][ T1506] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.417762][ T1506] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.428152][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.437532][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.447451][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.484772][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.498262][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.522717][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.538844][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.551346][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.559483][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.581776][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.598336][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.612173][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.621785][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.636949][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.644094][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.660341][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.671744][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.683452][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.691815][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.702002][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.710816][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.718316][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.727394][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.753020][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.773489][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.786235][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.795468][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.805842][ T4274] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.813470][ T4274] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.821392][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.830620][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.839314][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.869687][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.882445][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 53.892126][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 53.902627][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 53.910762][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 53.921418][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.930825][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.940604][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.949462][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.958963][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.967938][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.978232][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.987178][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.996738][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.005867][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.013187][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.021766][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.031717][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.040810][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.050049][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.059240][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.070365][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.092559][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.106105][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.122617][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.134417][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.149281][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.158565][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.173303][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.181896][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.190989][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.200050][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.207232][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.216210][ T4260] Bluetooth: hci0: command 0x041b tx timeout [ 54.221318][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.222536][ T4260] Bluetooth: hci2: command 0x041b tx timeout [ 54.232058][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.238024][ T4260] Bluetooth: hci1: command 0x041b tx timeout [ 54.269413][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.284603][ T4267] Bluetooth: hci3: command 0x041b tx timeout [ 54.286873][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.291034][ T4267] Bluetooth: hci4: command 0x041b tx timeout [ 54.327572][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.337784][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.348975][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.361997][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.371804][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.381358][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.393776][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.403989][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.413148][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.423188][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.432250][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.442438][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.451521][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.461117][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.481241][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.493402][ T1506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.507526][ T1506] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.545671][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.583407][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.593245][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.609978][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.618992][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.633820][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.644166][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.675400][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.683648][ T4194] device veth0_vlan entered promiscuous mode [ 54.715364][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.740117][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.765195][ T4186] device veth0_vlan entered promiscuous mode [ 54.791865][ T4194] device veth1_vlan entered promiscuous mode [ 54.819091][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 54.829152][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.841076][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.855679][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.865812][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.879682][ T4186] device veth1_vlan entered promiscuous mode [ 54.892094][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.910502][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.918996][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.959972][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.983510][ T4186] device veth0_macvtap entered promiscuous mode [ 54.993780][ T1506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.012946][ T1506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.022316][ T1506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.031617][ T1506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.041108][ T1506] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.066263][ T4186] device veth1_macvtap entered promiscuous mode [ 55.079149][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.089888][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.099057][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.109300][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.120907][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.131197][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.140769][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.150679][ T4184] device veth0_vlan entered promiscuous mode [ 55.181816][ T4194] device veth0_macvtap entered promiscuous mode [ 55.199998][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.208674][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.220943][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.230509][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.240439][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.251533][ T4194] device veth1_macvtap entered promiscuous mode [ 55.266505][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.285832][ T1506] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.296156][ T1506] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.305314][ T1506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.316258][ T4184] device veth1_vlan entered promiscuous mode [ 55.330115][ T4187] device veth0_vlan entered promiscuous mode [ 55.340943][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.358935][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.367815][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.380299][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.390508][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.401492][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.412345][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.422674][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.432160][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.440761][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.449649][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.457703][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.469469][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.480879][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.495224][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.509400][ T4186] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.520892][ T4186] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.530946][ T4186] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.540191][ T4186] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.566197][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.577762][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.587735][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.598118][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.608541][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.619767][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.631675][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.643585][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.654321][ T4187] device veth1_vlan entered promiscuous mode [ 55.670242][ T1506] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.678845][ T1506] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.688052][ T1506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.699873][ T4194] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.710033][ T4194] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.719619][ T4194] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.730365][ T4194] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.741786][ T4185] device veth0_vlan entered promiscuous mode [ 55.755425][ T4184] device veth0_macvtap entered promiscuous mode [ 55.786760][ T4185] device veth1_vlan entered promiscuous mode [ 55.840566][ T4184] device veth1_macvtap entered promiscuous mode [ 55.880551][ T1506] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.890432][ T1506] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.899665][ T1506] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.909283][ T1506] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.918048][ T1506] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.926229][ T1506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.935829][ T1506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.956032][ T4187] device veth0_macvtap entered promiscuous mode [ 55.968867][ T4187] device veth1_macvtap entered promiscuous mode [ 55.986673][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.995542][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.005293][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.040807][ T4274] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.048834][ T4185] device veth0_macvtap entered promiscuous mode [ 56.060993][ T4274] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.071309][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.080724][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.089493][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.101253][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.111410][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.122394][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.136093][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.151801][ T4185] device veth1_macvtap entered promiscuous mode [ 56.163825][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.173328][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.182236][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.200822][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.212525][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.227503][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.238898][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.251365][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.259409][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.270853][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.281872][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.293645][ T4253] Bluetooth: hci1: command 0x040f tx timeout [ 56.294387][ T21] Bluetooth: hci0: command 0x040f tx timeout [ 56.300301][ T4253] Bluetooth: hci2: command 0x040f tx timeout [ 56.311632][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.323711][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.335869][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.348232][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.374509][ T4253] Bluetooth: hci4: command 0x040f tx timeout [ 56.377722][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.384695][ T4253] Bluetooth: hci3: command 0x040f tx timeout [ 56.395618][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.406939][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.416567][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.428710][ T4187] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.439866][ T4187] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.449770][ T4187] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.459167][ T4187] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.487860][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.498959][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.509989][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.521981][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.533079][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.544338][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.556181][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.565927][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.571929][ T4184] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.583333][ T4184] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.583394][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.597520][ T4184] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.611886][ T4184] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.633706][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.645735][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.656558][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.670178][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.682430][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.694307][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.705257][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.717292][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.729990][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.748903][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.758372][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.776238][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.784426][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.793642][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.829104][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.846705][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.862870][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.875038][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.887116][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.898783][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.909569][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.922543][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.937011][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.955477][ T1506] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.963765][ T1506] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.993167][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.012120][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.028468][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.066906][ T4185] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.076413][ T4185] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.089206][ T4185] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.099497][ T4185] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.123711][ T4300] device syzkaller0 entered promiscuous mode [ 57.160728][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.170739][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.216227][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.266862][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.298156][ T4274] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.307311][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.316437][ T4274] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.325578][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.336791][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.348105][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.362642][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.371853][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.451039][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.454449][ T4303] device syzkaller0 entered promiscuous mode [ 57.466291][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.493225][ T4274] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.510550][ T4274] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.542026][ T1506] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.554914][ T1506] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.594191][ T4309] device syzkaller0 entered promiscuous mode [ 57.653141][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.668160][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.761368][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.881587][ T4316] device syzkaller0 entered promiscuous mode [ 58.173290][ T4322] loop0: detected capacity change from 0 to 40427 [ 58.221508][ T4322] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 58.230437][ T4322] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 58.243554][ T4322] F2FS-fs (loop0): invalid crc value [ 58.270146][ T4322] F2FS-fs (loop0): Found nat_bits in checkpoint [ 58.319496][ T4322] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 58.327803][ T4322] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 58.364700][ T4246] Bluetooth: hci2: command 0x0419 tx timeout [ 58.364871][ T4301] Bluetooth: hci0: command 0x0419 tx timeout [ 58.374097][ T4246] Bluetooth: hci1: command 0x0419 tx timeout [ 58.576817][ T4239] Bluetooth: hci3: command 0x0419 tx timeout [ 58.592470][ T4239] Bluetooth: hci4: command 0x0419 tx timeout [ 58.870035][ T4341] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13'. [ 59.215105][ T4349] netlink: 'syz.3.16': attribute type 21 has an invalid length. [ 59.255764][ T4352] smc: net device wlan0 applied user defined pnetid SYZ0 [ 59.419281][ T4358] netlink: 48 bytes leftover after parsing attributes in process `syz.3.19'. [ 60.189217][ T4374] lo speed is unknown, defaulting to 1000 [ 60.235363][ T4374] lo speed is unknown, defaulting to 1000 [ 60.266665][ T4374] lo speed is unknown, defaulting to 1000 [ 60.309863][ T4379] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 60.342735][ T4374] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 60.366191][ T4359] netlink: 'syz.1.20': attribute type 5 has an invalid length. [ 60.389447][ T4374] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 60.480532][ T4374] lo speed is unknown, defaulting to 1000 [ 60.510571][ T4374] lo speed is unknown, defaulting to 1000 [ 60.555749][ T4374] lo speed is unknown, defaulting to 1000 [ 60.562678][ T4374] lo speed is unknown, defaulting to 1000 [ 60.650069][ T4374] lo speed is unknown, defaulting to 1000 [ 61.332226][ T4410] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 61.377813][ T4412] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 61.545338][ T4425] kvm [4424]: vcpu3, guest rIP: 0xfff0 vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x3, nop [ 61.998912][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 62.049228][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 62.284926][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 62.294171][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 62.303632][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 62.312958][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 62.322671][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 62.332023][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 62.341348][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 62.350812][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 64.514586][ T4301] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 64.874334][ T4301] usb 4-1: Using ep0 maxpacket: 16 [ 65.045458][ T4301] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.284757][ T4301] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.170080][ T4301] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 66.184317][ T4301] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 66.194193][ T4301] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.286408][ T4301] usb 4-1: config 0 descriptor?? [ 66.598057][ T4469] tmpfs: Bad value for 'nr_blocks' [ 69.254109][ T4301] usbhid 4-1:0.0: can't add hid device: -71 [ 71.490911][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.498042][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.649819][ T4301] usbhid: probe of 4-1:0.0 failed with error -71 [ 71.692841][ T4301] usb 4-1: USB disconnect, device number 2 [ 71.706175][ T4489] loop2: detected capacity change from 0 to 1024 [ 72.084790][ T26] audit: type=1804 audit(1771515293.423:2): pid=4505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.56" name="/newroot/9/file1" dev="fuse" ino=1 res=1 errno=0 [ 72.827105][ T1506] hfsplus: b-tree write err: -5, ino 4 [ 72.888697][ T4514] loop4: detected capacity change from 0 to 256 [ 72.900328][ T4510] loop0: detected capacity change from 0 to 1024 [ 73.096041][ T4519] loop2: detected capacity change from 0 to 1024 [ 74.703863][ T4521] hfsplus: b-tree write err: -5, ino 4 [ 75.168948][ T4528] device syzkaller0 entered promiscuous mode [ 75.305298][ T4528] tipc: Started in network mode [ 75.360668][ T4528] tipc: Node identity 6ea226722478, cluster identity 4711 [ 75.422254][ T4528] tipc: Enabled bearer , priority 0 [ 75.436142][ T1506] hfsplus: b-tree write err: -5, ino 4 [ 75.444627][ T4532] netlink: 32 bytes leftover after parsing attributes in process `syz.4.64'. [ 75.477374][ T4527] tipc: Resetting bearer [ 75.498456][ T4532] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 75.673491][ T4527] tipc: Disabling bearer [ 75.909301][ T4542] syz.2.68 uses obsolete (PF_INET,SOCK_PACKET) [ 75.942267][ T4544] netlink: 'syz.1.69': attribute type 1 has an invalid length. [ 75.972925][ T4544] netlink: 8 bytes leftover after parsing attributes in process `syz.1.69'. [ 76.180910][ T4561] IPv6: NLM_F_CREATE should be specified when creating new route [ 76.211378][ T4561] netlink: 8 bytes leftover after parsing attributes in process `syz.1.71'. [ 76.236878][ T4564] netlink: 24 bytes leftover after parsing attributes in process `syz.0.72'. [ 76.418153][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 76.481255][ T4573] [ 76.483648][ T4573] ====================================================== [ 76.490896][ T4573] WARNING: possible circular locking dependency detected [ 76.498320][ T4573] syzkaller #0 Not tainted [ 76.502916][ T4573] ------------------------------------------------------ [ 76.510368][ T4573] syz.3.76/4573 is trying to acquire lock: [ 76.516789][ T4573] ffff88806280f120 (sk_lock-AF_AX25){+.+.}-{0:0}, at: ax25_device_event+0x217/0x4f0 [ 76.526956][ T4573] [ 76.526956][ T4573] but task is already holding lock: [ 76.534495][ T4573] ffffffff8d43c748 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x534/0xe30 [ 76.538002][ T4583] ------------[ cut here ]------------ [ 76.543038][ T4573] [ 76.543038][ T4573] which lock already depends on the new lock. [ 76.543038][ T4573] [ 76.543050][ T4573] [ 76.543050][ T4573] the existing dependency chain (in reverse order) is: [ 76.543055][ T4573] [ 76.543055][ T4573] -> #1 (rtnl_mutex){+.+.}-{3:3}: [ 76.543083][ T4573] __mutex_lock_common+0x1e3/0x2400 [ 76.543107][ T4573] mutex_lock_nested+0x17/0x20 [ 76.543120][ T4573] ax25_setsockopt+0x859/0xa60 [ 76.543134][ T4573] __sys_setsockopt+0x2bf/0x3d0 [ 76.543158][ T4573] __x64_sys_setsockopt+0xb1/0xc0 [ 76.543178][ T4573] do_syscall_64+0x4c/0xa0 [ 76.543191][ T4573] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 76.543206][ T4573] [ 76.543206][ T4573] -> #0 (sk_lock-AF_AX25){+.+.}-{0:0}: [ 76.543229][ T4573] __lock_acquire+0x2c42/0x7d10 [ 76.543246][ T4573] lock_acquire+0x19e/0x400 [ 76.543261][ T4573] lock_sock_nested+0x44/0x100 [ 76.543275][ T4573] ax25_device_event+0x217/0x4f0 [ 76.543294][ T4573] raw_notifier_call_chain+0xcb/0x160 [ 76.543310][ T4573] __dev_notify_flags+0x158/0x300 [ 76.543326][ T4573] dev_change_flags+0xe3/0x1a0 [ 76.543341][ T4573] dev_ifsioc+0x130/0xd50 [ 76.543354][ T4573] dev_ioctl+0x545/0xe30 [ 76.543365][ T4573] sock_do_ioctl+0x245/0x320 [ 76.543377][ T4573] sock_ioctl+0x4d2/0x710 [ 76.543392][ T4573] __se_sys_ioctl+0xfa/0x170 [ 76.543405][ T4573] do_syscall_64+0x4c/0xa0 [ 76.543417][ T4573] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 76.543430][ T4573] [ 76.543430][ T4573] other info that might help us debug this: [ 76.543430][ T4573] [ 76.560733][ T4583] trace type BPF program uses run-time allocation [ 76.570220][ T4573] Possible unsafe locking scenario: [ 76.570220][ T4573] [ 76.570231][ T4573] CPU0 CPU1 [ 76.570234][ T4573] ---- ---- [ 76.570238][ T4573] lock(rtnl_mutex); [ 76.570252][ T4573] lock(sk_lock-AF_AX25); [ 76.570261][ T4573] lock(rtnl_mutex); [ 76.570271][ T4573] lock(sk_lock-AF_AX25); [ 76.570279][ T4573] [ 76.570279][ T4573] *** DEADLOCK *** [ 76.570279][ T4573] [ 76.570282][ T4573] 1 lock held by syz.3.76/4573: [ 76.570292][ T4573] #0: ffffffff8d43c748 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x534/0xe30 [ 76.570335][ T4573] [ 76.570335][ T4573] stack backtrace: [ 76.590076][ T4583] WARNING: CPU: 0 PID: 4583 at kernel/bpf/verifier.c:11750 check_map_prog_compatibility+0x6cf/0x870 [ 76.594389][ T4573] CPU: 1 PID: 4573 Comm: syz.3.76 Not tainted syzkaller #0 [ 76.594405][ T4573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 76.594417][ T4573] Call Trace: [ 76.594424][ T4573] [ 76.594430][ T4573] dump_stack_lvl+0x188/0x250 [ 76.600592][ T4583] Modules linked in: [ 76.605426][ T4573] ? load_image+0x400/0x400 [ 76.605457][ T4573] ? show_regs_print_info+0x20/0x20 [ 76.605476][ T4573] ? print_circular_bug+0x12b/0x1a0 [ 76.605491][ T4573] check_noncircular+0x296/0x330 [ 76.605505][ T4573] ? stack_trace_snprint+0xf0/0xf0 [ 76.611959][ T4583] [ 76.618248][ T4573] ? add_chain_block+0x940/0x940 [ 76.618271][ T4573] ? lockdep_lock+0xf1/0x1f0 [ 76.618289][ T4573] ? mark_lock+0x94/0x320 [ 76.618302][ T4573] __lock_acquire+0x2c42/0x7d10 [ 76.627218][ T1334] cfg80211: failed to load regulatory.db [ 76.631869][ T4573] ? mark_lock+0x94/0x320 [ 76.631890][ T4573] ? verify_lock_unused+0x140/0x140 [ 76.648610][ T4583] CPU: 0 PID: 4583 Comm: syz.2.82 Not tainted syzkaller #0 [ 76.648764][ T4573] ? verify_lock_unused+0x140/0x140 [ 76.663012][ T4583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 76.666908][ T4573] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 76.666944][ T4573] ? lockdep_hardirqs_on_prepare+0x770/0x770 [ 76.666962][ T4573] ? mark_lock+0x94/0x320 [ 76.666975][ T4573] lock_acquire+0x19e/0x400 [ 76.682317][ T4583] RIP: 0010:check_map_prog_compatibility+0x6cf/0x870 [ 76.687219][ T4573] ? ax25_device_event+0x217/0x4f0 [ 76.687239][ T4573] ? lock_chain_count+0x20/0x20 [ 76.687258][ T4573] ? read_lock_is_recursive+0x10/0x10 [ 76.687272][ T4573] ? __local_bh_enable_ip+0x136/0x1c0 [ 76.687287][ T4573] ? lockdep_hardirqs_on+0x94/0x140 [ 76.711504][ T4583] Code: ff e8 d5 b6 ef ff 48 c7 c6 20 42 31 8a e9 0d fd ff ff e8 c4 b6 ef ff c6 05 92 c7 ec 0b 01 48 c7 c7 80 3e 31 8a e8 d1 bd 27 08 <0f> 0b e9 9f fb ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c a5 f9 [ 76.714480][ T4573] ? __local_bh_enable_ip+0x136/0x1c0 [ 76.714504][ T4573] ? _local_bh_enable+0xa0/0xa0 [ 76.714518][ T4573] lock_sock_nested+0x44/0x100 [ 76.714534][ T4573] ? ax25_device_event+0x217/0x4f0 [ 76.714550][ T4573] ax25_device_event+0x217/0x4f0 [ 76.714566][ T4573] raw_notifier_call_chain+0xcb/0x160 [ 76.722466][ T4583] RSP: 0018:ffffc9000563f450 EFLAGS: 00010246 [ 76.729482][ T4573] __dev_notify_flags+0x158/0x300 [ 76.729507][ T4573] ? __dev_change_flags+0x6a0/0x6a0 [ 76.729521][ T4573] ? __dev_change_flags+0x4d0/0x6a0 [ 76.729536][ T4573] ? dev_get_flags+0x1c0/0x1c0 [ 76.729551][ T4573] ? __mutex_lock_common+0x465/0x2400 [ 76.729568][ T4573] dev_change_flags+0xe3/0x1a0 [ 76.729585][ T4573] dev_ifsioc+0x130/0xd50 [ 76.729598][ T4573] ? dev_ioctl+0xe30/0xe30 [ 76.729611][ T4573] ? apparmor_capable+0x12c/0x190 [ 76.729626][ T4573] ? full_name_hash+0x8e/0xe0 [ 76.729646][ T4573] dev_ioctl+0x545/0xe30 [ 76.729659][ T4573] ? _copy_from_user+0x111/0x170 [ 76.729674][ T4573] sock_do_ioctl+0x245/0x320 [ 76.729688][ T4573] ? sock_show_fdinfo+0xb0/0xb0 [ 76.729704][ T4573] sock_ioctl+0x4d2/0x710 [ 76.729720][ T4573] ? sock_poll+0x410/0x410 [ 76.740108][ T4583] [ 76.740695][ T4573] ? bpf_lsm_file_ioctl+0x5/0x10 [ 76.745916][ T4583] RAX: 5610ae9e9657e200 RBX: 0000000000000001 RCX: 0000000000080000 [ 76.752317][ T4573] ? security_file_ioctl+0x7c/0xa0 [ 76.752343][ T4573] ? sock_poll+0x410/0x410 [ 76.752360][ T4573] __se_sys_ioctl+0xfa/0x170 [ 76.752376][ T4573] do_syscall_64+0x4c/0xa0 [ 76.759796][ T4583] RDX: ffffc900045a5000 RSI: 000000000007f313 RDI: 000000000007f314 [ 76.764139][ T4573] ? clear_bhb_loop+0x30/0x80 [ 76.764165][ T4573] ? clear_bhb_loop+0x30/0x80 [ 76.764179][ T4573] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 76.764194][ T4573] RIP: 0033:0x7f75c7a7b629 [ 76.764208][ T4573] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.773425][ T4583] RBP: ffff88807e26c000 R08: ffff8880b9033d7f R09: 1ffff110172067af [ 76.777788][ T4573] RSP: 002b:00007f75c5cd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 76.777812][ T4573] RAX: ffffffffffffffda RBX: 00007f75c7cf4fa0 RCX: 00007f75c7a7b629 [ 76.777822][ T4573] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000004 [ 76.777831][ T4573] RBP: 00007f75c7b11b39 R08: 0000000000000000 R09: 0000000000000000 [ 76.777840][ T4573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.777849][ T4573] R13: 00007f75c7cf5038 R14: 00007f75c7cf4fa0 R15: 00007ffd81a60518 [ 76.777864][ T4573] [ 76.930275][ T4573] ================================================================== [ 76.944402][ T4583] R10: dffffc0000000000 R11: ffffed10172067b0 R12: ffffc90005623038 [ 76.948665][ T4573] BUG: KASAN: use-after-free in ax25_dev_device_down+0x35e/0x520 [ 76.954227][ T4583] R13: 0000000000000011 R14: dffffc0000000000 R15: 1ffff92000ac4607 [ 76.960551][ T4573] Write of size 4 at addr ffff88801d56b8b8 by task syz.3.76/4573 [ 76.960574][ T4573] [ 76.960579][ T4573] CPU: 1 PID: 4573 Comm: syz.3.76 Not tainted syzkaller #0 [ 76.960593][ T4573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 76.960602][ T4573] Call Trace: [ 76.960610][ T4573] [ 76.966068][ T4583] FS: 00007f38755f16c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 76.970902][ T4573] dump_stack_lvl+0x188/0x250 [ 76.976453][ T4583] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 76.981793][ T4573] ? show_regs_print_info+0x20/0x20 [ 76.991681][ T4583] CR2: 00007fb9ab643bd0 CR3: 0000000078fb1000 CR4: 00000000003506f0 [ 77.007191][ T4573] ? _printk+0xda/0x130 [ 77.007216][ T4573] ? ax25_dev_device_down+0x35e/0x520 [ 77.007236][ T4573] ? load_image+0x400/0x400 [ 77.023978][ T4583] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 77.028729][ T4573] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 77.033777][ T4583] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 77.039413][ T4573] print_address_description+0x60/0x2d0 [ 77.039433][ T4573] ? ax25_dev_device_down+0x35e/0x520 [ 77.039449][ T4573] kasan_report+0xdf/0x130 [ 77.039465][ T4573] ? ax25_dev_device_down+0x35e/0x520 [ 77.039481][ T4573] kasan_check_range+0x235/0x290 [ 77.039505][ T4573] ax25_dev_device_down+0x35e/0x520 [ 77.039521][ T4573] ax25_device_event+0x4b4/0x4f0 [ 77.039538][ T4573] raw_notifier_call_chain+0xcb/0x160 [ 77.039557][ T4573] __dev_notify_flags+0x158/0x300 [ 77.039575][ T4573] ? __dev_change_flags+0x6a0/0x6a0 [ 77.039589][ T4573] ? __dev_change_flags+0x4d0/0x6a0 [ 77.039604][ T4573] ? dev_get_flags+0x1c0/0x1c0 [ 77.039618][ T4573] ? __mutex_lock_common+0x465/0x2400 [ 77.039635][ T4573] dev_change_flags+0xe3/0x1a0 [ 77.039652][ T4573] dev_ifsioc+0x130/0xd50 [ 77.492306][ T4573] ? dev_ioctl+0xe30/0xe30 [ 77.496841][ T4573] ? apparmor_capable+0x12c/0x190 [ 77.501851][ T4573] ? full_name_hash+0x8e/0xe0 [ 77.506518][ T4573] dev_ioctl+0x545/0xe30 [ 77.510921][ T4573] ? _copy_from_user+0x111/0x170 [ 77.515839][ T4573] sock_do_ioctl+0x245/0x320 [ 77.520425][ T4573] ? sock_show_fdinfo+0xb0/0xb0 [ 77.525883][ T4573] sock_ioctl+0x4d2/0x710 [ 77.530200][ T4573] ? sock_poll+0x410/0x410 [ 77.534609][ T4573] ? bpf_lsm_file_ioctl+0x5/0x10 [ 77.539703][ T4573] ? security_file_ioctl+0x7c/0xa0 [ 77.545325][ T4573] ? sock_poll+0x410/0x410 [ 77.549821][ T4573] __se_sys_ioctl+0xfa/0x170 [ 77.554490][ T4573] do_syscall_64+0x4c/0xa0 [ 77.559067][ T4573] ? clear_bhb_loop+0x30/0x80 [ 77.563821][ T4573] ? clear_bhb_loop+0x30/0x80 [ 77.568626][ T4573] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 77.574816][ T4573] RIP: 0033:0x7f75c7a7b629 [ 77.579493][ T4573] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.599784][ T4573] RSP: 002b:00007f75c5cd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 77.608197][ T4573] RAX: ffffffffffffffda RBX: 00007f75c7cf4fa0 RCX: 00007f75c7a7b629 [ 77.616331][ T4573] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000004 [ 77.624543][ T4573] RBP: 00007f75c7b11b39 R08: 0000000000000000 R09: 0000000000000000 [ 77.632852][ T4573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.640820][ T4573] R13: 00007f75c7cf5038 R14: 00007f75c7cf4fa0 R15: 00007ffd81a60518 [ 77.649153][ T4573] [ 77.652248][ T4573] [ 77.654639][ T4573] Allocated by task 4573: [ 77.659027][ T4573] __kasan_kmalloc+0xb5/0xf0 [ 77.663842][ T4573] ax25_dev_device_up+0x50/0x580 [ 77.669326][ T4573] ax25_device_event+0x483/0x4f0 [ 77.674332][ T4573] raw_notifier_call_chain+0xcb/0x160 [ 77.679856][ T4573] __dev_notify_flags+0x194/0x300 [ 77.685032][ T4573] dev_change_flags+0xe3/0x1a0 [ 77.689874][ T4573] dev_ifsioc+0x130/0xd50 [ 77.694363][ T4573] dev_ioctl+0x545/0xe30 [ 77.698612][ T4573] sock_do_ioctl+0x245/0x320 [ 77.703375][ T4573] sock_ioctl+0x4d2/0x710 [ 77.707988][ T4573] __se_sys_ioctl+0xfa/0x170 [ 77.712841][ T4573] do_syscall_64+0x4c/0xa0 [ 77.717335][ T4573] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 77.723473][ T4573] [ 77.725872][ T4573] Freed by task 4573: [ 77.729969][ T4573] kasan_set_track+0x4b/0x70 [ 77.734859][ T4573] kasan_set_free_info+0x1f/0x40 [ 77.740071][ T4573] ____kasan_slab_free+0xd5/0x110 [ 77.745761][ T4573] slab_free_freelist_hook+0xea/0x170 [ 77.751306][ T4573] kfree+0xef/0x2a0 [ 77.755292][ T4573] ax25_dev_device_down+0x1c0/0x520 [ 77.761137][ T4573] ax25_device_event+0x4b4/0x4f0 [ 77.767003][ T4573] raw_notifier_call_chain+0xcb/0x160 [ 77.773114][ T4573] __dev_notify_flags+0x158/0x300 [ 77.778125][ T4573] dev_change_flags+0xe3/0x1a0 [ 77.783058][ T4573] dev_ifsioc+0x130/0xd50 [ 77.787905][ T4573] dev_ioctl+0x545/0xe30 [ 77.792494][ T4573] sock_do_ioctl+0x245/0x320 [ 77.797254][ T4573] sock_ioctl+0x4d2/0x710 [ 77.801596][ T4573] __se_sys_ioctl+0xfa/0x170 [ 77.806774][ T4573] do_syscall_64+0x4c/0xa0 [ 77.811635][ T4573] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 77.818356][ T4573] [ 77.821135][ T4573] Last potentially related work creation: [ 77.827726][ T4573] kasan_save_stack+0x35/0x60 [ 77.835742][ T4573] kasan_record_aux_stack+0xb8/0x100 [ 77.841409][ T4573] insert_work+0x54/0x3d0 [ 77.846457][ T4573] __queue_work+0x9c5/0xd50 [ 77.852019][ T4573] queue_work_on+0x124/0x1f0 [ 77.856875][ T4573] netdevice_event+0x803/0x900 [ 77.861761][ T4573] raw_notifier_call_chain+0xcb/0x160 [ 77.867234][ T4573] register_netdevice+0x12a6/0x1710 [ 77.873302][ T4573] veth_newlink+0x6bc/0xe30 [ 77.877813][ T4573] rtnl_newlink+0x1359/0x1a50 [ 77.882776][ T4573] rtnetlink_rcv_msg+0x844/0xf30 [ 77.887895][ T4573] netlink_rcv_skb+0x1f5/0x440 [ 77.893001][ T4573] netlink_unicast+0x774/0x920 [ 77.897837][ T4573] netlink_sendmsg+0x8ba/0xbe0 [ 77.902600][ T4573] __sys_sendto+0x46d/0x620 [ 77.907257][ T4573] __x64_sys_sendto+0xda/0xf0 [ 77.912009][ T4573] do_syscall_64+0x4c/0xa0 [ 77.916674][ T4573] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 77.922762][ T4573] [ 77.925414][ T4573] Second to last potentially related work creation: [ 77.932504][ T4573] kasan_save_stack+0x35/0x60 [ 77.937338][ T4573] kasan_record_aux_stack+0xb8/0x100 [ 77.942916][ T4573] insert_work+0x54/0x3d0 [ 77.947255][ T4573] __queue_work+0x9c5/0xd50 [ 77.951926][ T4573] queue_work_on+0x124/0x1f0 [ 77.956949][ T4573] call_usermodehelper_exec+0x2e3/0x520 [ 77.962652][ T4573] kobject_uevent_env+0x681/0x890 [ 77.967823][ T4573] nfs_net_init+0x1d4/0x280 [ 77.973118][ T4573] ops_init+0x357/0x600 [ 77.977912][ T4573] register_pernet_operations+0x2af/0x610 [ 77.983794][ T4573] register_pernet_subsys+0x24/0x40 [ 77.989238][ T4573] init_nfs_fs+0x29/0x1f0 [ 77.993967][ T4573] do_one_initcall+0x272/0x730 [ 77.999145][ T4573] do_initcall_level+0x137/0x1f0 [ 78.004099][ T4573] do_initcalls+0x4b/0x90 [ 78.008919][ T4573] kernel_init_freeable+0x3e9/0x570 [ 78.014574][ T4573] kernel_init+0x19/0x1b0 [ 78.019436][ T4573] ret_from_fork+0x1f/0x30 [ 78.023941][ T4573] [ 78.026373][ T4573] The buggy address belongs to the object at ffff88801d56b800 [ 78.026373][ T4573] which belongs to the cache kmalloc-192 of size 192 [ 78.040848][ T4573] The buggy address is located 184 bytes inside of [ 78.040848][ T4573] 192-byte region [ffff88801d56b800, ffff88801d56b8c0) [ 78.054453][ T4573] The buggy address belongs to the page: [ 78.060720][ T4573] page:ffffea0000755ac0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1d56b [ 78.071222][ T4573] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 78.079125][ T4573] raw: 00fff00000000200 ffffea00005ead80 0000000200000002 ffff888016c41a00 [ 78.088170][ T4573] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 78.097357][ T4573] page dumped because: kasan: bad access detected [ 78.104020][ T4573] page_owner tracks the page as allocated [ 78.109808][ T4573] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 1, ts 4217090576, free_ts 0 [ 78.126180][ T4573] get_page_from_freelist+0x1bbd/0x1ca0 [ 78.132035][ T4573] __alloc_pages+0x1ee/0x480 [ 78.137604][ T4573] alloc_page_interleave+0x24/0x1e0 [ 78.143623][ T4573] new_slab+0xc0/0x4b0 [ 78.148090][ T4573] ___slab_alloc+0x80a/0xdd0 [ 78.152943][ T4573] kmem_cache_alloc_trace+0x1a5/0x2a0 [ 78.158560][ T4573] kset_create_and_add+0x56/0x160 [ 78.163899][ T4573] bus_register+0x363/0x6c0 [ 78.168792][ T4573] tb_domain_init+0x38/0x70 [ 78.173656][ T4573] nhi_init+0xc/0x60 [ 78.178215][ T4573] do_one_initcall+0x272/0x730 [ 78.183387][ T4573] do_initcall_level+0x137/0x1f0 [ 78.188798][ T4573] do_initcalls+0x4b/0x90 [ 78.193210][ T4573] kernel_init_freeable+0x3e9/0x570 [ 78.198473][ T4573] kernel_init+0x19/0x1b0 [ 78.202981][ T4573] ret_from_fork+0x1f/0x30 [ 78.208546][ T4573] page_owner free stack trace missing [ 78.214868][ T4573] [ 78.217544][ T4573] Memory state around the buggy address: [ 78.224184][ T4573] ffff88801d56b780: 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc [ 78.232920][ T4573] ffff88801d56b800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 78.241244][ T4573] >ffff88801d56b880: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 78.249934][ T4573] ^ [ 78.256097][ T4573] ffff88801d56b900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 78.264640][ T4573] ffff88801d56b980: 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc [ 78.273667][ T4573] ================================================================== [ 78.302774][ T4583] Call Trace: [ 78.308144][ T4573] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 78.308709][ T4583] [ 78.315992][ T4573] CPU: 1 PID: 4573 Comm: syz.3.76 Tainted: G B syzkaller #0 [ 78.316016][ T4573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 78.316024][ T4573] Call Trace: [ 78.316032][ T4573] [ 78.316038][ T4573] dump_stack_lvl+0x188/0x250 [ 78.316062][ T4573] ? show_regs_print_info+0x20/0x20 [ 78.316077][ T4573] ? load_image+0x400/0x400 [ 78.316096][ T4573] panic+0x2e5/0x810 [ 78.316109][ T4573] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 78.316128][ T4573] ? bpf_jit_dump+0xd0/0xd0 [ 78.316145][ T4573] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 78.316160][ T4573] ? _raw_spin_unlock+0x40/0x40 [ 78.316174][ T4573] ? ax25_dev_device_down+0x35e/0x520 [ 78.316192][ T4573] check_panic_on_warn+0x80/0xa0 [ 78.316209][ T4573] ? ax25_dev_device_down+0x35e/0x520 [ 78.316225][ T4573] end_report+0x6d/0xf0 [ 78.319512][ T4583] resolve_pseudo_ldimm64+0x681/0x1040 [ 78.327949][ T4573] kasan_report+0x102/0x130 [ 78.327968][ T4573] ? ax25_dev_device_down+0x35e/0x520 [ 78.327987][ T4573] kasan_check_range+0x235/0x290 [ 78.338659][ T4583] ? check_attach_btf_id+0xe70/0xe70 [ 78.341983][ T4573] ax25_dev_device_down+0x35e/0x520 [ 78.342007][ T4573] ax25_device_event+0x4b4/0x4f0 [ 78.345104][ T4583] ? __mark_reg_known+0x1a0/0x1a0 [ 78.349905][ T4573] raw_notifier_call_chain+0xcb/0x160 [ 78.349925][ T4573] __dev_notify_flags+0x158/0x300 [ 78.349942][ T4573] ? __dev_change_flags+0x6a0/0x6a0 [ 78.357424][ T4583] bpf_check+0x4e00/0xf270 [ 78.360122][ T4573] ? __dev_change_flags+0x4d0/0x6a0 [ 78.360145][ T4573] ? dev_get_flags+0x1c0/0x1c0 [ 78.364202][ T4583] ? read_lock_is_recursive+0x10/0x10 [ 78.370623][ T4573] ? __mutex_lock_common+0x465/0x2400 [ 78.370643][ T4573] dev_change_flags+0xe3/0x1a0 [ 78.370661][ T4573] dev_ifsioc+0x130/0xd50 [ 78.375383][ T4583] ? __lock_acquire+0x7d10/0x7d10 [ 78.381677][ T4573] ? dev_ioctl+0xe30/0xe30 [ 78.381697][ T4573] ? apparmor_capable+0x12c/0x190 [ 78.388221][ T4583] ? deref_stack_reg+0xd0/0x120 [ 78.393197][ T4573] ? full_name_hash+0x8e/0xe0 [ 78.393219][ T4573] dev_ioctl+0x545/0xe30 [ 78.398502][ T4583] ? bpf_get_btf_vmlinux+0x10/0x10 [ 78.404025][ T4573] ? _copy_from_user+0x111/0x170 [ 78.404043][ T4573] sock_do_ioctl+0x245/0x320 [ 78.404058][ T4573] ? sock_show_fdinfo+0xb0/0xb0 [ 78.404074][ T4573] sock_ioctl+0x4d2/0x710 [ 78.404091][ T4573] ? sock_poll+0x410/0x410 [ 78.404107][ T4573] ? bpf_lsm_file_ioctl+0x5/0x10 [ 78.404122][ T4573] ? security_file_ioctl+0x7c/0xa0 [ 78.404139][ T4573] ? sock_poll+0x410/0x410 [ 78.404156][ T4573] __se_sys_ioctl+0xfa/0x170 [ 78.404171][ T4573] do_syscall_64+0x4c/0xa0 [ 78.404187][ T4573] ? clear_bhb_loop+0x30/0x80 [ 78.404201][ T4573] ? clear_bhb_loop+0x30/0x80 [ 78.404214][ T4573] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 78.411218][ T4583] ? is_bpf_text_address+0x254/0x270 [ 78.414814][ T4573] RIP: 0033:0x7f75c7a7b629 [ 78.414838][ T4573] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.414849][ T4573] RSP: 002b:00007f75c5cd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 78.414866][ T4573] RAX: ffffffffffffffda RBX: 00007f75c7cf4fa0 RCX: 00007f75c7a7b629 [ 78.414877][ T4573] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000004 [ 78.420036][ T4583] ? rcu_is_watching+0x11/0xa0 [ 78.426035][ T4573] RBP: 00007f75c7b11b39 R08: 0000000000000000 R09: 0000000000000000 [ 78.426054][ T4573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 78.426062][ T4573] R13: 00007f75c7cf5038 R14: 00007f75c7cf4fa0 R15: 00007ffd81a60518 [ 78.426077][ T4573] [ 78.426544][ T4573] Kernel Offset: disabled [ 78.703258][ T4573] Rebooting in 86400 seconds..