last executing test programs: 11.781216501s ago: executing program 0 (id=64): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000180)={0x3, {{0xa, 0x4e20, 0xa3f, @mcast2, 0xbfd}}, {{0xa, 0x4e24, 0x20, @loopback, 0xfffffe01}}}, 0x108) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000180)=""/214, &(0x7f0000000080)=0xd6) 11.742284635s ago: executing program 0 (id=56): bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xf, 0x4, 0x4, 0x12, 0x824, 0xffffffffffffffff, 0x400, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000580), 0x100007, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc044560f, &(0x7f0000000380)=@mmap={0x0, 0x1, 0x4, 0x2, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "37bb54f0"}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000540)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x18, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2002) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(0xffffffffffffffff, &(0x7f00000004c0)={0x2, 0x4e24, @multicast2}, 0x10) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000100)=0x1) r5 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) 10.862616195s ago: executing program 0 (id=61): r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xf0f071, 0x19}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00014004fcff", 0x58}], 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001bc0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_open_dev$rtc(&(0x7f0000000080), 0x99, 0x40200) ioctl$RTC_AIE_ON(r3, 0x7001) r4 = socket(0x40000000015, 0x5, 0x0) bind$inet(r4, &(0x7f0000000340)={0xa, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r5, 0x0, 0x0}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000540)=ANY=[@ANYBLOB="183a2ce2896b7100000002000300000000000000000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000950000000000000018560000020000000000000000000000bf91000000000000b7020000020000008500002085000000b7000000000000009500000000000000", @ANYRESHEX, @ANYRESHEX=0x0, @ANYRES8=r0], &(0x7f0000000280)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0xffffffff, 0x5}, 0x8, 0x10, &(0x7f00000001c0)={0x4, 0x2, 0x8, 0x7fff}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000280), &(0x7f00000002c0)=[{0x0, 0x5, 0x7, 0x9}, {0x4, 0x1, 0xd, 0xc}, {0x0, 0x4, 0x9, 0xa}, {0x1, 0x4, 0xb, 0x8}, {0x4, 0x3, 0xd, 0xb}, {0x0, 0x3, 0x3, 0xa}, {0x2, 0x5, 0x5, 0x3}, {0x4, 0x4, 0x5, 0x6}, {0x5, 0x5, 0x1, 0x7}, {0x5, 0x5, 0xc, 0xb}], 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000000)='afs_server\x00', r6}, 0x18) 10.784180982s ago: executing program 0 (id=63): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0xffe6, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4.616855029s ago: executing program 3 (id=116): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r1, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 3.941723243s ago: executing program 0 (id=132): syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0x7) read$char_usb(r1, &(0x7f00000002c0)=""/151, 0x97) 3.72430652s ago: executing program 3 (id=133): bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xf, 0x4, 0x4, 0x12, 0x824, 0xffffffffffffffff, 0x400, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000580), 0x100007, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc044560f, &(0x7f0000000380)=@mmap={0x0, 0x1, 0x4, 0x2, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "37bb54f0"}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000540)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x18, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2002) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(0xffffffffffffffff, &(0x7f00000004c0)={0x2, 0x4e24, @multicast2}, 0x10) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000100)=0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0x847ba, 0x0, 0xe, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) 3.156286146s ago: executing program 4 (id=137): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x900}, {0x85, 0x0, 0x0, 0x86}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000680)='syzkaller\x00', 0xa, 0x1009, &(0x7f0000001cc0)=""/4105, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 3.117599689s ago: executing program 1 (id=139): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(r5, &(0x7f0000000880)={0x2020}, 0x2020) 3.048505475s ago: executing program 2 (id=140): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcmmio\x00', [0x4f27, 0x4, 0x10000, 0x4, 0x5, 0x5, 0x4, 0x7, 0x54c6cff3, 0xfd, 0x2, 0x1, 0x1, 0x1, 0x6, 0x101, 0x0, 0x7f, 0x3, 0x40000003, 0x89, 0xcaa3, 0x0, 0x20001e58, 0x3, 0xe66, 0x3, 0x8, 0x4086, 0x0, 0xfffffff8]}) 3.048355875s ago: executing program 2 (id=141): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x34, r1, 0x211, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x34}}, 0x0) 3.038700646s ago: executing program 2 (id=142): r0 = syz_open_procfs(0x0, &(0x7f00000190c0)='net/ip_vs_stats_percpu\x00') pread64(r0, &(0x7f0000000080)=""/102356, 0x18fd4, 0x3) 2.673078815s ago: executing program 3 (id=143): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r1, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 2.61513s ago: executing program 2 (id=144): socket$kcm(0x10, 0x2, 0x4) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000240)={r3, @in6={{0xa, 0x4e21, 0xfffffff5, @empty, 0x9}}, 0x3, 0x7}, &(0x7f0000000000)=0x90) bind$inet6(r0, 0x0, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x29, 0x1f, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000500)=ANY=[@ANYBLOB="4d000000bcc81727a12d923d1a09c04327cb6d4ab4e0ff8cc2bc96baa264db011ae4630c7a060b784e1229bb8d5f24c8f9e90a1069f74301d9d82adb3ef38e5339384900459c53ac866a5b1616cd122add5131775268c6780aa7684c38f7fe50787f6d1b2cca756abcf8ff4316f0af60079a84f1071ccbdd2831c4f5634a142d454c64f019fa0ca639fba9dc968f8efbfa9c49f2df01efc294ccb20afe91"], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x240008c0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r8, &(0x7f0000000480)={0x2020}, 0x2020) 2.296841306s ago: executing program 4 (id=145): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) socket$netlink(0x10, 0x3, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) socket$igmp6(0xa, 0x3, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0xa000, 0x1da) socket$inet_smc(0x2b, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) pselect6(0x40, &(0x7f0000000100)={0x3, 0x0, 0x0, 0xfffffffffffffffd, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4}, 0x0, 0x0) 2.267530658s ago: executing program 4 (id=146): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fanotify_init(0x200, 0x40000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 2.176527995s ago: executing program 1 (id=147): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 1.99222859s ago: executing program 1 (id=148): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r0) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4008000) syz_genetlink_get_family_id$nbd(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x8000) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000810}, 0x20008884) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) r1 = syz_io_uring_setup(0x88f, &(0x7f00000001c0)={0x0, 0xb661, 0x8000, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, 0x0, 0x0, 0x4) io_uring_enter(r1, 0x47f6, 0x0, 0x4, 0x0, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f00000000c0)={0x100001, 0x9, 0x5, 0x981, 0x45, "0441920887e8d2b791f19dd001006d7fcb3678", 0x41}) 1.842672612s ago: executing program 0 (id=149): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) getpgid(0xffffffffffffffff) 1.822357724s ago: executing program 1 (id=150): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800"/15], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1, 0x0, 0x4100000000}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3}, 0x48) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000040)={r4, 0x0}, 0x20) socket(0x10, 0x803, 0x2) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000090601080000000000000000050000000900020073797a310000000005f30000070000002c000780060004404e21000005000700e30000000c00018008000140850101010c00028084fa27a44a6f2fda72c5ebcf9276e6df92c5be50c03b9c1cfd4b6e0608f07c4b7afb8698d9daa42dfb3cb96b19175aaca2fcefa552b4f90465223cf9bff02bbc9e5cb190a698fa328c78d770f17586f83b2d7e72bdf81a7ace6dc99f31a59b2d143368bbda3940a0d762459dbff721decba49aa7082bc312cfd0"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 1.821976944s ago: executing program 4 (id=151): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x262200, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448ca, &(0x7f0000000100)) close(r0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8040, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x0, 0x0, "ff00f7000000000000000000af88008300"}) r6 = syz_open_pts(r5, 0x141601) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x77359400}}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) write(r6, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TCSETSF(r6, 0x5404, &(0x7f0000000080)={0x8, 0x20000000, 0xfffffffc, 0x7fffffd, 0x5, "682341f2fd71a6a76177920ea7e60c0ac7a4a5"}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r8}, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc01cf509, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000140)=0x6) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000), 0x0}, 0x1c) sendmsg$NBD_CMD_CONNECT(r3, 0x0, 0x20000000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xd) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x3) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r9, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) 1.821640664s ago: executing program 3 (id=152): syz_80211_inject_frame(0x0, 0x0, 0x21) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="30003300c0000000ffffffffffff0802111f00"], 0x4c}}, 0x0) 1.813895394s ago: executing program 2 (id=153): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x161141) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xf691, 0x10100, 0x0, 0x356}, &(0x7f00000008c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x41}, 0x1}) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r2, r3, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r4, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "cfc85eb51b0ace6a", "4617a9f6040839230fb7fead776dd8dc", "3f4051c4", "a44a889722b66244"}, 0x28) recvmmsg(r4, &(0x7f0000003d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000400)=""/247, 0xf7}], 0x1}, 0x3}], 0x1, 0x40010020, 0x0) r5 = syz_io_uring_setup(0x1ed3, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x5, 0x279}, 0x0, &(0x7f0000000140)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) io_uring_enter(r5, 0x2d3e, 0x0, 0x0, 0x0, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000100)={0x1d, r7, 0x0, {0x2, 0x0, 0x4}}, 0x18) connect$can_j1939(r6, &(0x7f0000000080)={0x1d, r7, 0x0, {0x0, 0xf0, 0x2}, 0x1}, 0x18) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) 1.712354803s ago: executing program 1 (id=154): bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xf, 0x4, 0x4, 0x12, 0x824, 0xffffffffffffffff, 0x400, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000580), 0x100007, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc044560f, &(0x7f0000000380)=@mmap={0x0, 0x1, 0x4, 0x2, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "37bb54f0"}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000540)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x18, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2002) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(0xffffffffffffffff, &(0x7f00000004c0)={0x2, 0x4e24, @multicast2}, 0x10) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000100)=0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0x847ba, 0x0, 0xe, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) 1.251553389s ago: executing program 4 (id=155): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={0x14, 0x19, 0xa, 0x201}, 0x14}}, 0x0) 1.232494761s ago: executing program 4 (id=156): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000140), 0x80401, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x6}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000001c0), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000000c0)={0x2, 0xfa}, 0x2) 928.420745ms ago: executing program 3 (id=157): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f00000002c0)=0x1) ppoll(&(0x7f0000000080), 0x0, &(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e78, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0x3, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x7c}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x40010) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket(0x2c, 0x4, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0xfffff, 0xffffffffffffffff) dup(r1) 869.848491ms ago: executing program 2 (id=158): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0xfffffffd, {}, [{0x90, 0x1, [@m_ct={0x44, 0x5, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x0, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x3, 0x0, 0x20000000}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20004011}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="000100dc04b3e2ff0000040000000000", @ANYRES32=0x0, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRESHEX=r3, @ANYRESHEX=r0], 0x50) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000340)=0xffffffffffff0001, 0xd, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000280)=0x1, r4, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @mcast1, 0x3}, r4, 0x7}}, 0x48) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000100)=0x1, r6, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x6, @loopback, 0x3}, r6}}, 0x30) write$RDMA_USER_CM_CMD_QUERY(r5, &(0x7f0000000240)={0x13, 0x10, 0xfa00, {&(0x7f0000000580), r6}}, 0x18) 863.541941ms ago: executing program 1 (id=159): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x801}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) unshare(0x2c020400) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185100}) io_uring_enter(r2, 0x7277, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 3 (id=160): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r2, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc) setsockopt$ax25_SO_BINDTODEVICE(r4, 0x101, 0x19, &(0x7f00000001c0)=@bpq0, 0x10) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8f}, 0x19) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x60880, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0x0, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000740)={@map=r6, 0x13, 0x1, 0x2, &(0x7f0000000500)=[0x0, 0x0], 0x2, 0x0, &(0x7f00000004c0), 0x0, &(0x7f0000000700), 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES64=r8], 0x20) r9 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r9, &(0x7f0000000140)="c2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) sendmmsg$inet6(r9, &(0x7f0000000e80)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f0000000880)=[{&(0x7f00000003c0)="e3", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r9, 0x84, 0xb, &(0x7f0000000040)={0x7, 0x7, 0xc, 0x9, 0x0, 0xc, 0x4, 0x6, 0x8, 0x2, 0xa1, 0x4, 0x3, 0x80}, 0xe) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000540)={@map=r6, 0xffffffffffffffff, 0xc, 0x0, 0x0, @void, @value, @void, @void, r8}, 0x20) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.185' (ED25519) to the list of known hosts. [ 32.093572][ T4032] cgroup: Unknown subsys name 'net' [ 32.346161][ T4032] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 32.607271][ T4032] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 33.425843][ T4047] chnl_net:caif_netlink_parms(): no params data found [ 33.427912][ T4042] chnl_net:caif_netlink_parms(): no params data found [ 33.447431][ T4048] chnl_net:caif_netlink_parms(): no params data found [ 33.469075][ T4049] chnl_net:caif_netlink_parms(): no params data found [ 33.483145][ T4046] chnl_net:caif_netlink_parms(): no params data found [ 33.492024][ T4047] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.493095][ T4047] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.495282][ T4047] device bridge_slave_0 entered promiscuous mode [ 33.498357][ T4047] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.499444][ T4047] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.500920][ T4047] device bridge_slave_1 entered promiscuous mode [ 33.516433][ T4042] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.517675][ T4042] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.519166][ T4042] device bridge_slave_0 entered promiscuous mode [ 33.530870][ T4042] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.532125][ T4042] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.534362][ T4042] device bridge_slave_1 entered promiscuous mode [ 33.537952][ T4047] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.540660][ T4048] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.541734][ T4048] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.543207][ T4048] device bridge_slave_0 entered promiscuous mode [ 33.549995][ T4047] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.555248][ T4048] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.556374][ T4048] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.557688][ T4048] device bridge_slave_1 entered promiscuous mode [ 33.576216][ T4049] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.577384][ T4049] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.578835][ T4049] device bridge_slave_0 entered promiscuous mode [ 33.581187][ T4042] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.582720][ T4046] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.584241][ T4046] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.585678][ T4046] device bridge_slave_0 entered promiscuous mode [ 33.590513][ T4047] team0: Port device team_slave_0 added [ 33.591658][ T4049] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.592781][ T4049] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.596673][ T4049] device bridge_slave_1 entered promiscuous mode [ 33.598759][ T4042] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.600251][ T4046] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.601278][ T4046] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.602658][ T4046] device bridge_slave_1 entered promiscuous mode [ 33.605383][ T4048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.607388][ T4047] team0: Port device team_slave_1 added [ 33.621234][ T4048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.626580][ T4049] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.629016][ T4042] team0: Port device team_slave_0 added [ 33.640497][ T4049] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.642299][ T4042] team0: Port device team_slave_1 added [ 33.644691][ T4046] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.648684][ T4047] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.649790][ T4047] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.653972][ T4047] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.656238][ T4047] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.657191][ T4047] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.661169][ T4047] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.669137][ T4046] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.671473][ T4048] team0: Port device team_slave_0 added [ 33.679254][ T4042] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.680393][ T4042] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.684904][ T4042] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.689591][ T4048] team0: Port device team_slave_1 added [ 33.695765][ T4049] team0: Port device team_slave_0 added [ 33.697505][ T4049] team0: Port device team_slave_1 added [ 33.698680][ T4042] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.699670][ T4042] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.705369][ T4042] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.712462][ T4048] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.714884][ T4048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.718880][ T4048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.725136][ T4046] team0: Port device team_slave_0 added [ 33.774645][ T4047] device hsr_slave_0 entered promiscuous mode [ 33.823645][ T4047] device hsr_slave_1 entered promiscuous mode [ 33.866872][ T4048] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.867997][ T4048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.871815][ T4048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.877179][ T4046] team0: Port device team_slave_1 added [ 33.880061][ T4049] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.881092][ T4049] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.885117][ T4049] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.893281][ T4049] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.894484][ T4049] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.898205][ T4049] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.911667][ T4046] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.912791][ T4046] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.916765][ T4046] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.954546][ T4042] device hsr_slave_0 entered promiscuous mode [ 33.993615][ T4042] device hsr_slave_1 entered promiscuous mode [ 34.033538][ T4042] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 34.034751][ T4042] Cannot create hsr debugfs directory [ 34.042820][ T4046] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.043989][ T4046] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.047582][ T4046] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.084404][ T4048] device hsr_slave_0 entered promiscuous mode [ 34.123632][ T4048] device hsr_slave_1 entered promiscuous mode [ 34.163494][ T4048] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 34.164559][ T4048] Cannot create hsr debugfs directory [ 34.224497][ T4049] device hsr_slave_0 entered promiscuous mode [ 34.263686][ T4049] device hsr_slave_1 entered promiscuous mode [ 34.303515][ T4049] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 34.304616][ T4049] Cannot create hsr debugfs directory [ 34.374463][ T4046] device hsr_slave_0 entered promiscuous mode [ 34.413755][ T4046] device hsr_slave_1 entered promiscuous mode [ 34.453525][ T4046] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 34.454660][ T4046] Cannot create hsr debugfs directory [ 34.555168][ T4047] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 34.585093][ T4047] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 34.634779][ T4047] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 34.684672][ T4047] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 34.758088][ T4042] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 34.806927][ T4042] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 34.848150][ T4042] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 34.884544][ T4042] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 34.955754][ T4049] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 34.997785][ T4049] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 35.056868][ T4049] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 35.087363][ T4049] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 35.136100][ T4048] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 35.175982][ T4047] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.179545][ T4048] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 35.227878][ T4048] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 35.268526][ T4048] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 35.293810][ T25] Bluetooth: hci3: command 0x0409 tx timeout [ 35.296767][ T25] Bluetooth: hci0: command 0x0409 tx timeout [ 35.328257][ T4047] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.330499][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 35.332298][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.340017][ T4042] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.350803][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 35.352322][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.356290][ T4042] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.365456][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 35.366954][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 35.368434][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.369510][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.370712][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 35.372021][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.373345][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.373673][ T25] Bluetooth: hci2: command 0x0409 tx timeout [ 35.374494][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.375610][ T25] Bluetooth: hci1: command 0x0409 tx timeout [ 35.377859][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 35.380387][ T25] Bluetooth: hci4: command 0x0409 tx timeout [ 35.385786][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 35.387359][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 35.388818][ T1605] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.389805][ T1605] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.392045][ T4046] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 35.434541][ T4046] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 35.464947][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 35.468319][ T4046] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 35.505108][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 35.506524][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.507926][ T4111] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.508962][ T4111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.510276][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 35.513935][ T4046] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 35.576000][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 35.577531][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 35.582230][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 35.594006][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 35.596071][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 35.597685][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 35.603383][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 35.605173][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 35.606577][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 35.614029][ T4042] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 35.615574][ T4042] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.617961][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 35.619519][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 35.621110][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 35.622491][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 35.624787][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 35.626303][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.628013][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 35.629520][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.631404][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 35.639427][ T4048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.644377][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 35.645825][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.651287][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 35.652800][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.656140][ T4047] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 35.669006][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 35.670390][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.675836][ T4049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.679483][ T4048] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.690651][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 35.692030][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 35.693328][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.694513][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.696690][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 35.701517][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 35.702825][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.708343][ T4049] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.711022][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 35.712398][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 35.714673][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.715745][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.717816][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 35.728203][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 35.729620][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.731007][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.732027][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.733276][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 35.736000][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 35.737648][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 35.739176][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 35.740625][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 35.742116][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 35.744137][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 35.745413][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 35.746623][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 35.748103][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.749550][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 35.750919][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.752251][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.753360][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.756501][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 35.764203][ T4042] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.765662][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 35.766761][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 35.767956][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 35.773138][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 35.774899][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.778749][ T4047] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.781253][ T4046] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.784753][ T4048] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 35.788345][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 35.790013][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 35.791580][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 35.793389][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 35.803146][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 35.805078][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 35.809539][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.811099][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.820240][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 35.821688][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.823056][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.825162][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.829204][ T4046] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.831701][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 35.833107][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.835126][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 35.836594][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.842745][ T4049] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 35.849603][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 35.850953][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 35.852252][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.853294][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.855254][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.856821][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.865463][ T4048] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.867899][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 35.869445][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.870681][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.871944][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 35.873346][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.876726][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.877773][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.879081][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 35.880108][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 35.882118][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.884182][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.886944][ T4047] device veth0_vlan entered promiscuous mode [ 35.890280][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.891678][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.895297][ T4047] device veth1_vlan entered promiscuous mode [ 35.902729][ T4046] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 35.908521][ T4046] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.912540][ T4042] device veth0_vlan entered promiscuous mode [ 35.914016][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.915489][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.916797][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 35.918307][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 35.919908][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 35.921466][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 35.922932][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 35.929296][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 35.930910][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 35.932559][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.934828][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 35.936226][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.937599][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.939006][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.940456][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 35.941818][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 35.958601][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.960089][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.961615][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.963233][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.968035][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.969384][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.973003][ T4047] device veth0_macvtap entered promiscuous mode [ 35.976227][ T4047] device veth1_macvtap entered promiscuous mode [ 35.978518][ T4048] device veth0_vlan entered promiscuous mode [ 35.981250][ T4042] device veth1_vlan entered promiscuous mode [ 35.988194][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.989647][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.990977][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.992381][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.994659][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 35.995969][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 35.999384][ T4049] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.002093][ T4048] device veth1_vlan entered promiscuous mode [ 36.008824][ T4047] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.011090][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 36.012594][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 36.014760][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 36.017620][ T4047] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.021722][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 36.023256][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 36.026074][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 36.027325][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 36.034264][ T4047] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.035661][ T4047] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.036895][ T4047] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.038143][ T4047] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.040532][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 36.041946][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 36.043384][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 36.047696][ T4046] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.054203][ T4042] device veth0_macvtap entered promiscuous mode [ 36.060835][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 36.062180][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 36.068027][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 36.075071][ T4042] device veth1_macvtap entered promiscuous mode [ 36.076455][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 36.077953][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 36.079504][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 36.081701][ T4048] device veth0_macvtap entered promiscuous mode [ 36.088207][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 36.089582][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 36.091033][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 36.095081][ T4048] device veth1_macvtap entered promiscuous mode [ 36.096997][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 36.098324][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 36.099574][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 36.109685][ T4048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.111427][ T4048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.114471][ T4048] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.115702][ T4049] device veth0_vlan entered promiscuous mode [ 36.120590][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 36.122233][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 36.125852][ T4048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.127431][ T4048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.129465][ T4048] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.130602][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 36.132242][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 36.145602][ T4048] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.147012][ T4048] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.148434][ T4048] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.149796][ T4048] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.152664][ T4042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.154842][ T4042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.156393][ T4042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.157914][ T4042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.160225][ T4042] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.161808][ T4049] device veth1_vlan entered promiscuous mode [ 36.168434][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 36.169880][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 36.171342][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 36.183202][ T4111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.184534][ T4111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.186884][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 36.188357][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 36.198380][ T4042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.199883][ T4042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.201482][ T4042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.203202][ T4042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.206135][ T4042] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.207274][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 36.208726][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 36.210180][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 36.211593][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 36.225747][ T4111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.226884][ T4111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.228219][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 36.230047][ T4042] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.231477][ T4042] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.232782][ T4042] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.235135][ T4042] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.247600][ T4049] device veth0_macvtap entered promiscuous mode [ 36.258211][ T4111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.259510][ T4111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.261526][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 36.263520][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 36.265049][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 36.266580][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 36.270299][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 36.271737][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 36.276345][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 36.277776][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 36.288828][ T4049] device veth1_macvtap entered promiscuous mode [ 36.291897][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 36.296056][ T4046] device veth0_vlan entered promiscuous mode [ 36.314187][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.315527][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.319246][ T4049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.320901][ T4049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.322343][ T4049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.325075][ T4049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.326803][ T4049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.328311][ T4049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.330474][ T4049] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.332276][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 36.334318][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 36.335995][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 36.356396][ T1605] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.357685][ T1605] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.360048][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 36.367219][ T4046] device veth1_vlan entered promiscuous mode [ 36.370629][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.371897][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.376760][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 36.378300][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 36.379789][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 36.418655][ T4049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.422653][ T4049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.429500][ T4049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.431854][ T4049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.433350][ T4049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.448132][ T4049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.455784][ T4049] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.462708][ T4046] device veth0_macvtap entered promiscuous mode [ 36.467254][ T4046] device veth1_macvtap entered promiscuous mode [ 36.475115][ T4046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.476708][ T4046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.478095][ T4046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.479570][ T4046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.481004][ T4046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.482624][ T4046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.495543][ T4046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.497057][ T4046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.505779][ T4046] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.508143][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 36.509740][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 36.511249][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 36.512766][ T4161] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5'. [ 36.512786][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 36.520795][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 36.522419][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 36.524773][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 36.530087][ T4049] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.531337][ T4049] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.532585][ T4049] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.538537][ T4049] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.554509][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 36.888898][ T4046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.899804][ T4046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.901390][ T4046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.902934][ T4046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.905643][ T4046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.907193][ T4046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.909383][ T4046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.911230][ T4046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.916673][ T4046] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.924683][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 36.927276][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 36.948615][ T4046] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.952568][ T4046] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.954123][ T4046] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.955601][ T4046] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.985213][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.987261][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.990490][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 37.014997][ T4111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.017379][ T4111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.020272][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 37.031990][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.035568][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.038251][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 37.070770][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.072209][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.075776][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 37.115106][ T4168] udc-core: couldn't find an available UDC or it's busy [ 37.116378][ T4168] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 37.196970][ T26] audit: type=1326 audit(37.180:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4167 comm="syz.4.6" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa071f0a8 code=0x7ffc0000 [ 37.202249][ T26] audit: type=1326 audit(37.180:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4167 comm="syz.4.6" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffa071f0a8 code=0x7ffc0000 [ 37.211758][ T26] audit: type=1326 audit(37.190:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4167 comm="syz.4.6" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa071f0a8 code=0x7ffc0000 [ 37.222431][ T26] audit: type=1326 audit(37.190:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4167 comm="syz.4.6" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=243 compat=0 ip=0xffffa071f0a8 code=0x7ffc0000 [ 37.234288][ T26] audit: type=1326 audit(37.190:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4167 comm="syz.4.6" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa071f0a8 code=0x7ffc0000 [ 37.240782][ T26] audit: type=1326 audit(37.190:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4167 comm="syz.4.6" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=208 compat=0 ip=0xffffa071f0a8 code=0x7ffc0000 [ 37.251983][ T26] audit: type=1326 audit(37.190:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4167 comm="syz.4.6" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa071f0a8 code=0x7ffc0000 [ 37.312438][ T4172] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8'. [ 37.317459][ T26] audit: type=1326 audit(37.190:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4167 comm="syz.4.6" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa071f0a8 code=0x7ffc0000 [ 37.329091][ T26] audit: type=1326 audit(37.190:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4167 comm="syz.4.6" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa071f0a8 code=0x7ffc0000 [ 37.369422][ T26] audit: type=1326 audit(37.200:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4167 comm="syz.4.6" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa071f0a8 code=0x7ffc0000 [ 37.380830][ T4088] Bluetooth: hci0: command 0x041b tx timeout [ 37.381860][ T4088] Bluetooth: hci3: command 0x041b tx timeout [ 37.412761][ T4176] binder: 4175:4176 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 37.420995][ T4176] binder: 4176 RLIMIT_NICE not set [ 37.453586][ T4088] Bluetooth: hci4: command 0x041b tx timeout [ 37.457214][ T4088] Bluetooth: hci1: command 0x041b tx timeout [ 37.458114][ T4088] Bluetooth: hci2: command 0x041b tx timeout [ 37.464971][ T4178] binder: 4175:4178 tried to acquire reference to desc 0, got 1 instead [ 37.467092][ T4178] binder: 4175 invalid dec weak, ref 4 desc 1 s 1 w 0 [ 37.468805][ T4088] binder: undelivered TRANSACTION_COMPLETE [ 38.332757][ T4201] udc-core: couldn't find an available UDC or it's busy [ 38.334402][ T4201] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 39.417203][ T4216] block device autoloading is deprecated and will be removed. [ 39.463764][ T4088] Bluetooth: hci3: command 0x040f tx timeout [ 39.464899][ T4088] Bluetooth: hci0: command 0x040f tx timeout [ 39.533734][ T21] Bluetooth: hci2: command 0x040f tx timeout [ 39.534903][ T21] Bluetooth: hci1: command 0x040f tx timeout [ 39.536042][ T21] Bluetooth: hci4: command 0x040f tx timeout [ 39.581398][ T4231] device sit0 entered promiscuous mode [ 39.596831][ T4231] netlink: 'syz.1.30': attribute type 1 has an invalid length. [ 39.598027][ T4231] netlink: 1 bytes leftover after parsing attributes in process `syz.1.30'. [ 39.641460][ T4233] mkiss: ax0: crc mode is auto. [ 39.755554][ T4088] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 40.034403][ T4088] usb 1-1: Using ep0 maxpacket: 8 [ 40.285797][ T4088] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 40.287635][ T4088] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 40.289241][ T4088] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 40.290771][ T4088] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 40.292716][ T4088] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 40.295033][ T4088] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.320344][ T4272] udc-core: couldn't find an available UDC or it's busy [ 40.321401][ T4272] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 40.750368][ T4088] usb 1-1: GET_CAPABILITIES returned 0 [ 40.751345][ T4088] usbtmc 1-1:16.0: can't read capabilities [ 40.760926][ T4278] udc-core: couldn't find an available UDC or it's busy [ 40.767541][ T4278] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 40.793461][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 40.794987][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 40.796277][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 40.797557][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 40.799069][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 40.800425][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 40.801813][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 40.803133][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 40.804638][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 40.806021][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 40.807336][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 40.808708][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 40.810084][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 40.811394][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 40.812869][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 40.814222][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 40.922657][ T4288] binder: 4287:4288 tried to acquire reference to desc 0, got 1 instead [ 40.924913][ T4288] binder: 4287:4288 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 40.926941][ T4288] binder: 4288 RLIMIT_NICE not set [ 40.927689][ T4288] binder: 4288 RLIMIT_NICE not set [ 40.928864][ T3623] binder: release 4287:4288 transaction 10 out, still active [ 40.930028][ T3623] binder: undelivered TRANSACTION_COMPLETE [ 40.936551][ T4254] binder: release 4287:4288 transaction 10 in, still active [ 40.937851][ T4254] binder: send failed reply for transaction 10, target dead [ 40.950123][ T4290] netlink: 4 bytes leftover after parsing attributes in process `syz.1.41'. [ 40.994548][ T4254] usb 1-1: USB disconnect, device number 2 [ 41.534107][ T4254] Bluetooth: hci0: command 0x0419 tx timeout [ 41.535627][ T4254] Bluetooth: hci3: command 0x0419 tx timeout [ 41.613994][ T4299] Bluetooth: hci4: command 0x0419 tx timeout [ 41.616941][ T4299] Bluetooth: hci1: command 0x0419 tx timeout [ 41.618025][ T4299] Bluetooth: hci2: command 0x0419 tx timeout [ 42.561104][ T4307] devpts: called with bogus options [ 42.648781][ T4309] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.670665][ T4317] netlink: 'syz.3.48': attribute type 1 has an invalid length. [ 42.687622][ T4312] Zero length message leads to an empty skb [ 42.745940][ T4309] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.873380][ T4309] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.890190][ T4323] binder: BINDER_SET_CONTEXT_MGR already set [ 42.898415][ T4323] binder: 4321:4323 ioctl 4018620d 20004a80 returned -16 [ 42.903415][ T4323] binder: 4321:4323 got transaction to invalid handle, 1 [ 42.911970][ T4323] binder: 4321:4323 transaction failed 29201/-22, size 0-0 line 2917 [ 42.916792][ T4323] binder: 4321:4323 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 42.918920][ T4323] binder: 4323 RLIMIT_NICE not set [ 42.937883][ T4309] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.097655][ T4309] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.101318][ T4309] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.105783][ T4309] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.109751][ T4309] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.144362][ T4331] IPv6: NLM_F_CREATE should be specified when creating new route [ 43.256776][ T4335] udc-core: couldn't find an available UDC or it's busy [ 43.258493][ T4335] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 43.806940][ T7] binder: undelivered TRANSACTION_ERROR: 29201 [ 43.816670][ T21] Bluetooth: hci1: command 0x0c0d tx timeout [ 43.844281][ T4347] udc-core: couldn't find an available UDC or it's busy [ 43.845279][ T4347] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 43.845637][ T4348] binder: 4345:4348 tried to acquire reference to desc 0, got 1 instead [ 43.849092][ T4348] binder: 4345:4348 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 43.851176][ T4348] binder: 4348 RLIMIT_NICE not set [ 43.851931][ T4348] binder: 4348 RLIMIT_NICE not set [ 43.853140][ T21] binder: release 4345:4348 transaction 18 out, still active [ 43.854567][ T21] binder: undelivered TRANSACTION_COMPLETE [ 43.862163][ T21] binder: release 4345:4348 transaction 18 in, still active [ 43.863378][ T21] binder: send failed reply for transaction 18, target dead [ 44.139991][ T4354] udc-core: couldn't find an available UDC or it's busy [ 44.188446][ T4354] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 44.267555][ T4361] tipc: Started in network mode [ 44.270752][ T4361] tipc: Node identity 02cf5b950d88, cluster identity 4711 [ 44.272752][ T4361] tipc: Enabled bearer , priority 0 [ 44.275477][ T4361] device syzkaller0 entered promiscuous mode [ 44.281475][ T4360] tipc: Resetting bearer [ 44.294950][ T4360] tipc: Disabling bearer [ 44.382535][ T4051] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0 [ 44.386242][ T4051] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0 [ 44.388531][ T4051] hid-generic 0005:16BF:5505.0001: unknown main item tag 0xe [ 44.390992][ T4051] hid-generic 0005:16BF:5505.0001: item fetching failed at offset 16/18 [ 44.397408][ T4051] hid-generic: probe of 0005:16BF:5505.0001 failed with error -22 [ 45.008298][ T4374] binder: 4373:4374 tried to acquire reference to desc 0, got 1 instead [ 45.010578][ T4051] binder: release 4373:4374 transaction 23 out, still active [ 45.011767][ T4051] binder: undelivered TRANSACTION_COMPLETE [ 45.020181][ T4051] binder: send failed reply for transaction 23, target dead [ 45.048496][ T4376] 9pnet: Insufficient options for proto=fd [ 45.158744][ T4381] netlink: 'syz.4.72': attribute type 10 has an invalid length. [ 45.159984][ T4381] netlink: 40 bytes leftover after parsing attributes in process `syz.4.72'. [ 45.161359][ T4381] device dummy0 entered promiscuous mode [ 45.162895][ T4381] bridge0: port 3(dummy0) entered blocking state [ 45.164032][ T4381] bridge0: port 3(dummy0) entered disabled state [ 45.166635][ T4381] bridge0: port 3(dummy0) entered blocking state [ 45.167583][ T4381] bridge0: port 3(dummy0) entered forwarding state [ 45.256534][ C1] vcan0: j1939_tp_rxtimer: 0x000000006613f58e: rx timeout, send abort [ 45.258458][ C1] vcan0: j1939_tp_rxtimer: 0x000000008ac98ceb: rx timeout, send abort [ 45.259751][ C1] vcan0: j1939_xtp_rx_abort_one: 0x000000006613f58e: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 45.261974][ C1] vcan0: j1939_xtp_rx_abort_one: 0x000000008ac98ceb: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 45.620719][ T4387] netlink: 4 bytes leftover after parsing attributes in process `syz.3.74'. [ 45.784604][ T4397] udc-core: couldn't find an available UDC or it's busy [ 45.793144][ T4397] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 46.726772][ T4410] syz.1.81 uses obsolete (PF_INET,SOCK_PACKET) [ 47.143321][ T4418] binder: 4417:4418 tried to acquire reference to desc 0, got 1 instead [ 47.146392][ T4051] binder: release 4417:4418 transaction 28 out, still active [ 47.147663][ T4051] binder: undelivered TRANSACTION_COMPLETE [ 47.152613][ T3624] binder: send failed reply for transaction 28, target dead [ 47.174715][ T4403] block nbd2: shutting down sockets [ 47.192467][ T4423] udc-core: couldn't find an available UDC or it's busy [ 47.196707][ T4423] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 48.105081][ T4447] device pim6reg1 entered promiscuous mode [ 48.113248][ T4449] binder: 4448:4449 tried to acquire reference to desc 0, got 1 instead [ 48.115669][ T7] binder: release 4448:4449 transaction 33 out, still active [ 48.116824][ T7] binder: undelivered TRANSACTION_COMPLETE [ 48.132380][ T7] binder: send failed reply for transaction 33, target dead [ 49.050245][ T4474] 9pnet_virtio: no channels available for device syz [ 49.129601][ T4476] binder: 4475:4476 tried to acquire reference to desc 0, got 1 instead [ 49.142649][ T4476] binder: 4475:4476 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 49.152438][ T4476] binder: 4476 RLIMIT_NICE not set [ 50.635324][ T4518] tipc: Started in network mode [ 50.636122][ T4518] tipc: Node identity 96fc7d4a083e, cluster identity 4711 [ 50.637272][ T4518] tipc: Enabled bearer , priority 0 [ 50.638740][ T4518] device syzkaller0 entered promiscuous mode [ 50.648929][ T4518] tipc: Resetting bearer [ 50.650881][ T4517] tipc: Resetting bearer [ 50.660796][ T4517] tipc: Disabling bearer [ 50.689509][ T4520] binder: 4519:4520 tried to acquire reference to desc 0, got 1 instead [ 50.691067][ T4520] binder: 4519:4520 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 50.692996][ T4520] binder: 4520 RLIMIT_NICE not set [ 50.833183][ T4532] binder_alloc: binder_alloc_mmap_handler: 4531 20ffd000-20ffe000 already mapped failed -16 [ 51.393585][ T4102] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 51.953699][ T4102] usb 1-1: Using ep0 maxpacket: 8 [ 52.383718][ T4574] binder: 4573:4574 tried to acquire reference to desc 0, got 1 instead [ 52.385455][ T4574] binder: 4573:4574 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 52.387404][ T4574] binder: 4574 RLIMIT_NICE not set [ 52.417317][ T4102] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 52.418857][ T4102] usb 1-1: config 0 has no interface number 0 [ 52.420107][ T4102] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 52.421924][ T4102] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 52.423416][ T4102] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 52.425330][ T4102] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 52.426586][ T4102] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.428987][ T4102] usb 1-1: config 0 descriptor?? [ 52.468285][ T4102] ldusb 1-1:0.55: Interrupt in endpoint not found [ 52.672102][ T21] usb 1-1: USB disconnect, device number 3 [ 53.126612][ T4586] syz.4.146 (4586): drop_caches: 2 [ 53.241830][ T4600] netlink: 52 bytes leftover after parsing attributes in process `syz.1.150'. [ 53.257351][ T4594] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 55.028320][ T4630] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 55.040602][ T4629] ================================================================== [ 55.041912][ T4629] BUG: KASAN: use-after-free in ax25_release+0x4c8/0x814 [ 55.042912][ T4629] Read of size 8 at addr ffff0000d101d008 by task syz.3.160/4629 [ 55.043989][ T4629] [ 55.044307][ T4629] CPU: 0 PID: 4629 Comm: syz.3.160 Not tainted 5.15.189-syzkaller #0 [ 55.045412][ T4629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 55.046817][ T4629] Call trace: [ 55.047248][ T4629] dump_backtrace+0x0/0x43c [ 55.047870][ T4629] show_stack+0x2c/0x3c [ 55.048465][ T4629] __dump_stack+0x30/0x40 [ 55.049074][ T4629] dump_stack_lvl+0xf8/0x160 [ 55.049790][ T4629] print_address_description+0x78/0x30c [ 55.050602][ T4629] kasan_report+0xec/0x15c [ 55.051215][ T4629] __asan_report_load8_noabort+0x44/0x50 [ 55.052119][ T4629] ax25_release+0x4c8/0x814 [ 55.052787][ T4629] sock_close+0xb4/0x1f8 [ 55.053386][ T4629] __fput+0x1c0/0x7f8 [ 55.053940][ T4629] ____fput+0x20/0x30 [ 55.054534][ T4629] task_work_run+0x12c/0x1e0 [ 55.055216][ T4629] do_notify_resume+0x24b4/0x3128 [ 55.056061][ T4629] el0_svc+0xf0/0x1e0 [ 55.056749][ T4629] el0t_64_sync_handler+0xcc/0xe4 [ 55.057612][ T4629] el0t_64_sync+0x1a0/0x1a4 [ 55.058295][ T4629] [ 55.058665][ T4629] Allocated by task 4630: [ 55.059362][ T4629] __kasan_kmalloc+0xb0/0xf0 [ 55.060038][ T4629] kmem_cache_alloc_trace+0x274/0x3fc [ 55.060832][ T4629] ax25_dev_device_up+0x5c/0x540 [ 55.061512][ T4629] ax25_device_event+0x504/0x590 [ 55.062216][ T4629] raw_notifier_call_chain+0xd4/0x164 [ 55.062996][ T4629] __dev_notify_flags+0x250/0x46c [ 55.063710][ T4629] dev_change_flags+0xc8/0x154 [ 55.064383][ T4629] dev_ifsioc+0x504/0xef4 [ 55.064972][ T4629] dev_ioctl+0x4d0/0xc94 [ 55.065564][ T4629] sock_do_ioctl+0x18c/0x240 [ 55.066195][ T4629] sock_ioctl+0x5c8/0x87c [ 55.066791][ T4629] __arm64_sys_ioctl+0x14c/0x1c8 [ 55.067471][ T4629] invoke_syscall+0x98/0x2b8 [ 55.068201][ T4629] el0_svc_common+0x138/0x258 [ 55.068885][ T4629] do_el0_svc+0x58/0x14c [ 55.069527][ T4629] el0_svc+0x78/0x1e0 [ 55.070066][ T4629] el0t_64_sync_handler+0xcc/0xe4 [ 55.070765][ T4629] el0t_64_sync+0x1a0/0x1a4 [ 55.071420][ T4629] [ 55.071721][ T4629] Freed by task 4630: [ 55.072332][ T4629] kasan_set_track+0x4c/0x84 [ 55.073040][ T4629] kasan_set_free_info+0x28/0x4c [ 55.073786][ T4629] ____kasan_slab_free+0x118/0x164 [ 55.074589][ T4629] __kasan_slab_free+0x18/0x28 [ 55.075271][ T4629] slab_free_freelist_hook+0x128/0x1e8 [ 55.076072][ T4629] kfree+0x170/0x40c [ 55.076622][ T4629] ax25_dev_device_down+0x468/0x67c [ 55.077384][ T4629] ax25_device_event+0x538/0x590 [ 55.078042][ T4629] raw_notifier_call_chain+0xd4/0x164 [ 55.078835][ T4629] __dev_notify_flags+0x250/0x46c [ 55.079625][ T4629] dev_change_flags+0xc8/0x154 [ 55.080342][ T4629] dev_ifsioc+0x504/0xef4 [ 55.080982][ T4629] dev_ioctl+0x4d0/0xc94 [ 55.081654][ T4629] sock_do_ioctl+0x18c/0x240 [ 55.082358][ T4629] sock_ioctl+0x5c8/0x87c [ 55.083013][ T4629] __arm64_sys_ioctl+0x14c/0x1c8 [ 55.083739][ T4629] invoke_syscall+0x98/0x2b8 [ 55.084410][ T4629] el0_svc_common+0x138/0x258 [ 55.085136][ T4629] do_el0_svc+0x58/0x14c [ 55.085805][ T4629] el0_svc+0x78/0x1e0 [ 55.086394][ T4629] el0t_64_sync_handler+0xcc/0xe4 [ 55.087086][ T4629] el0t_64_sync+0x1a0/0x1a4 [ 55.087714][ T4629] [ 55.088049][ T4629] Last potentially related work creation: [ 55.088855][ T4629] kasan_save_stack+0x38/0x68 [ 55.089472][ T4629] kasan_record_aux_stack+0xcc/0x114 [ 55.090276][ T4629] call_rcu+0x114/0x8fc [ 55.090868][ T4629] replace+0x20c/0x52c [ 55.091474][ T4629] resize+0xe04/0x2350 [ 55.092133][ T4629] fib_insert_alias+0xae0/0xedc [ 55.092837][ T4629] fib_table_insert+0x4c4/0x13d0 [ 55.093538][ T4629] fib_magic+0x250/0x31c [ 55.094147][ T4629] fib_add_ifaddr+0x118/0x4f8 [ 55.094808][ T4629] fib_inetaddr_event+0x130/0x220 [ 55.095518][ T4629] blocking_notifier_call_chain+0xf0/0x198 [ 55.096389][ T4629] __inet_insert_ifa+0x888/0xa4c [ 55.097043][ T4629] inet_rtm_newaddr+0xd44/0x1540 [ 55.097741][ T4629] rtnetlink_rcv_msg+0x9d4/0xd04 [ 55.098443][ T4629] netlink_rcv_skb+0x208/0x3c4 [ 55.099070][ T4629] rtnetlink_rcv+0x28/0x38 [ 55.099767][ T4629] netlink_unicast+0x624/0x8b0 [ 55.100451][ T4629] netlink_sendmsg+0x6e8/0x9cc [ 55.101093][ T4629] __sys_sendto+0x2e8/0x3d8 [ 55.101700][ T4629] __arm64_sys_sendto+0xd8/0xf8 [ 55.102396][ T4629] invoke_syscall+0x98/0x2b8 [ 55.103058][ T4629] el0_svc_common+0x138/0x258 [ 55.103702][ T4629] do_el0_svc+0x58/0x14c [ 55.104327][ T4629] el0_svc+0x78/0x1e0 [ 55.104906][ T4629] el0t_64_sync_handler+0xcc/0xe4 [ 55.105688][ T4629] el0t_64_sync+0x1a0/0x1a4 [ 55.106382][ T4629] [ 55.106714][ T4629] Second to last potentially related work creation: [ 55.107630][ T4629] kasan_save_stack+0x38/0x68 [ 55.108380][ T4629] kasan_record_aux_stack+0xcc/0x114 [ 55.109094][ T4629] insert_work+0x64/0x388 [ 55.109751][ T4629] __queue_work+0xb30/0x1054 [ 55.110420][ T4629] queue_work_on+0xc4/0x17c [ 55.111050][ T4629] call_usermodehelper_exec+0x22c/0x478 [ 55.111831][ T4629] kobject_uevent_env+0x670/0x888 [ 55.112534][ T4629] kobject_uevent+0x2c/0x3c [ 55.113143][ T4629] driver_register+0x29c/0x374 [ 55.113844][ T4629] __fsl_mc_driver_register+0x158/0x1bc [ 55.114671][ T4629] dpaa2_caam_driver_init+0x20/0x2c [ 55.115400][ T4629] do_one_initcall+0x228/0x8b0 [ 55.116077][ T4629] do_initcall_level+0x154/0x214 [ 55.116761][ T4629] do_initcalls+0x58/0xac [ 55.117345][ T4629] do_basic_setup+0x8c/0xa0 [ 55.117930][ T4629] kernel_init_freeable+0x404/0x5fc [ 55.118685][ T4629] kernel_init+0x24/0x1d0 [ 55.119282][ T4629] ret_from_fork+0x10/0x20 [ 55.119905][ T4629] [ 55.120222][ T4629] The buggy address belongs to the object at ffff0000d101d000 [ 55.120222][ T4629] which belongs to the cache kmalloc-256 of size 256 [ 55.122409][ T4629] The buggy address is located 8 bytes inside of [ 55.122409][ T4629] 256-byte region [ffff0000d101d000, ffff0000d101d100) [ 55.124296][ T4629] The buggy address belongs to the page: [ 55.125154][ T4629] page:000000006ba559d3 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11101c [ 55.126735][ T4629] head:000000006ba559d3 order:1 compound_mapcount:0 [ 55.127659][ T4629] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 55.128968][ T4629] raw: 05ffc00000010200 fffffc0003440680 0000000900000008 ffff0000c0002480 [ 55.130229][ T4629] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 55.131442][ T4629] page dumped because: kasan: bad access detected [ 55.132429][ T4629] [ 55.132817][ T4629] Memory state around the buggy address: [ 55.133706][ T4629] ffff0000d101cf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 55.134848][ T4629] ffff0000d101cf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 55.135972][ T4629] >ffff0000d101d000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 55.137129][ T4629] ^ [ 55.137792][ T4629] ffff0000d101d080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 55.138938][ T4629] ffff0000d101d100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 55.140077][ T4629] ================================================================== [ 55.141193][ T4629] Disabling lock debugging due to kernel taint [ 55.259143][ T4629] Unable to handle kernel paging request at virtual address f38002ea000017be [ 55.262804][ T4629] Mem abort info: [ 55.263365][ T4629] ESR = 0x0000000096000021 [ 55.265812][ T4629] EC = 0x25: DABT (current EL), IL = 32 bits [ 55.266641][ T4629] SET = 0, FnV = 0 [ 55.268435][ T4629] EA = 0, S1PTW = 0 [ 55.269080][ T4629] FSC = 0x21: alignment fault [ 55.271797][ T4629] Data abort info: [ 55.272468][ T4629] ISV = 0, ISS = 0x00000021 [ 55.273191][ T4629] CM = 0, WnR = 0 [ 55.274247][ T4629] [f38002ea000017be] address between user and kernel address ranges [ 55.275474][ T4629] Internal error: Oops: 0000000096000021 [#1] PREEMPT SMP [ 55.276540][ T4629] Modules linked in: [ 55.277071][ T4629] CPU: 0 PID: 4629 Comm: syz.3.160 Tainted: G B 5.15.189-syzkaller #0 [ 55.278651][ T4629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 55.280354][ T4629] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 55.281553][ T4629] pc : ax25_release+0x4f4/0x814 [ 55.282243][ T4629] lr : ax25_release+0x4ec/0x814 [ 55.283049][ T4629] sp : ffff800020167a00 [ 55.283698][ T4629] x29: ffff800020167a20 x28: dfff800000000000 x27: ffff0000ce378080 [ 55.285012][ T4629] x26: ffff0000d4a89828 x25: 0000000000000002 x24: 00000000ffffffff [ 55.286243][ T4629] x23: f38002ea000017be x22: ffff0000d101d000 x21: ffff0000deb4e018 [ 55.287483][ T4629] x20: ffff0000ce378000 x19: 1fffe0001a951305 x18: 0000000000000002 [ 55.288668][ T4629] x17: 0000000040000002 x16: ffff8000082d6448 x15: 0000000000000002 [ 55.289920][ T4629] x14: 0000000000ff0100 x13: ffffffffffffffff x12: 0000000000ff0100 [ 55.291105][ T4629] x11: 0000000000000000 x10: 0000000000000000 x9 : ffff80001045ef30 [ 55.292285][ T4629] x8 : ffff0000edee8000 x7 : 0000000000000000 x6 : ffff80000824599c [ 55.293501][ T4629] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80001045ef24 [ 55.294695][ T4629] x2 : 0000000000000001 x1 : 0000000000000004 x0 : 0000000000000001 [ 55.295975][ T4629] Call trace: [ 55.296479][ T4629] ax25_release+0x4f4/0x814 [ 55.297171][ T4629] sock_close+0xb4/0x1f8 [ 55.297741][ T4629] __fput+0x1c0/0x7f8 [ 55.298335][ T4629] ____fput+0x20/0x30 [ 55.298909][ T4629] task_work_run+0x12c/0x1e0 [ 55.299564][ T4629] do_notify_resume+0x24b4/0x3128 [ 55.300319][ T4629] el0_svc+0xf0/0x1e0 [ 55.300902][ T4629] el0t_64_sync_handler+0xcc/0xe4 [ 55.301598][ T4629] el0t_64_sync+0x1a0/0x1a4 [ 55.302204][ T4629] Code: d503201f 96006935 52800038 4b1803f8 (b87802f8) [ 55.303298][ T4629] ---[ end trace 9e1aaf15e063f74f ]--- [ 55.503614][ T4629] Kernel panic - not syncing: Oops: Fatal exception [ 55.504540][ T4629] SMP: stopping secondary CPUs [ 55.505228][ T4629] Kernel Offset: disabled [ 55.505805][ T4629] CPU features: 0x8,000003c1,7d33ffd9 [ 55.506553][ T4629] Memory Limit: none [ 55.700336][ T4629] Rebooting in 86400 seconds..