last executing test programs: 5.8104818s ago: executing program 1 (id=6): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002b00)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f00000027c0)=';', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002740)=[{&(0x7f0000000140)='W', 0x1}], 0x1}}], 0x2, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000200)) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000500)='htcp\x00', 0x5) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000180)={0x9, 0x3, 0x4, 0x2}, 0x10) shutdown(r0, 0x2) 5.632904846s ago: executing program 1 (id=7): socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000080)='hybla\x00', 0x6) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) sendto(0xffffffffffffffff, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback, 0x10}, 0x1c) listen(r0, 0x20000005) r1 = socket$inet6(0xa, 0x6, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) getsockopt$sock_buf(r3, 0x1, 0x1a, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r4) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000011c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000000600)={0x5c, r5, 0x1, 0xffffffff, 0x0, {}, [@TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x3, 0xffffffff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x2, @private1, 0x1}}}}]}]}, 0x5c}}, 0x800) socket$isdn_base(0x22, 0x3, 0x26) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='wg0\x00', 0x10) r6 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_GET(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={0x0}}, 0x0) 5.361184731s ago: executing program 1 (id=8): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r1, 0x10c, 0x2, &(0x7f0000000040), &(0x7f0000001880)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8000f28, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0xb}}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x8}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x20008010) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000240)={0x0, 0x2, 0x18}, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x1, 0x7, 0x2261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r8, 0x0) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x8, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @call={0x85, 0x0, 0x0, 0x9f}]}, &(0x7f00000002c0)='syzkaller\x00', 0x10000, 0xd6, &(0x7f0000000300)=""/214, 0x41000, 0x5c, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000400)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x5, 0x5, 0x1}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000500)=[r9, 0x1, r10], &(0x7f0000000540)=[{0x2, 0x1, 0x6, 0x4}, {0x5, 0x1, 0xf, 0x3}, {0x4, 0x3, 0xe, 0x5}], 0x10, 0x6, @void, @value}, 0x94) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000038000180060001000200000008000500000000000c00070000000000000000000800090000000000080008000000000008000600736970003014402c88e1c0f9"], 0x4c}}, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r11, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) 5.106857724s ago: executing program 1 (id=10): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000001580)="dca116fc", 0x4}], 0x1, 0x0, 0x0, 0x4000}, 0x48c5) 4.976365846s ago: executing program 0 (id=12): r0 = openat$dlm_control(0xffffff9c, &(0x7f00000032c0), 0xe0e00, 0x0) read$usbfs(r0, 0x0, 0x0) 4.906707063s ago: executing program 0 (id=13): unshare(0x60600) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100), 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = socket(0x1a, 0x1, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x1e, 0x305, 0x0, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @pid}, @typed={0x8, 0x9, 0x0, 0x0, @fd}]}, 0x24}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="7c000000010405000000000000000000000000000600064000000000080005400000000005000100010000000a0002000000000000000000080003400000c018060006400000000008000440000000000a000200190ab2ca6d"], 0x7c}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000d00)={r1}, 0x4) 4.895484663s ago: executing program 1 (id=14): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount$afs(&(0x7f0000000140)=ANY=[@ANYBLOB='%\\'], &(0x7f00000001c0)='./file0\x00', 0x0, 0x1401, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x8, 0xbf22, 0x1541, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000180)='./file1\x00', 0x4080, &(0x7f0000000040)=ANY=[], 0x3, 0x7c4, &(0x7f00000006c0)="$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") io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) rt_sigaction(0x40, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) writev(r3, &(0x7f0000000580)=[{&(0x7f0000000080)='&', 0x1}], 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_clone3(0x0, 0x0) 4.754448806s ago: executing program 0 (id=15): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0x6c846d5b3dfaa9fb, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}}, 0x0) 4.675949614s ago: executing program 0 (id=16): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x400e, &(0x7f0000000180)={[{@data_journal}, {@jqfmt_vfsv0}, {@errors_continue}, {@nodelalloc}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@acl}]}, 0x1, 0x42f, &(0x7f0000000280)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(r0, 0x0, 0x0, 0x4, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$FUSE_BMAP(r1, &(0x7f0000000240)={0x18}, 0x18) write$binfmt_script(r5, &(0x7f0000000140), 0xfcb8) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, 0x0) 3.857503508s ago: executing program 3 (id=4): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x1000003, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r0, &(0x7f0000000500)="8f2a0a653d8c00000304000e0580a7b6075b067d7ca5cefe", 0x18) 3.83681593s ago: executing program 1 (id=17): syz_emit_ethernet(0x36, &(0x7f0000000440)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x28, 0x28, 0x0, 0x0, 0x0, 0x88, 0x0, @empty, @broadcast}, @timestamp_reply={0xe, 0x0, 0x0, 0x0, 0xfff7}}}}}, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x208080, &(0x7f00000000c0), 0x1, 0x598, &(0x7f0000000800)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="f481186abed6ced367ce6f22f601"], 0x1, 0x1f2, &(0x7f00000002c0)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x3ffffffffffffda, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000002040)='./file0\x00', 0x12d) dup(0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b04, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000940)={0x0, 0xfffffff0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) 3.701973502s ago: executing program 2 (id=3): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0x0, 0x24, 0x0, 0x0, 0x1, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x0, &(0x7f0000000380)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000100)=[0x0], 0x1}, 0x58) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3e) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000040)={{0x2, 0x0, @multicast2}, {}, 0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'ip6gre0\x00'}) 3.478460053s ago: executing program 3 (id=18): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0xa6, &(0x7f00000003c0)=""/166, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r2, r1, 0x7, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendto$inet6(r0, &(0x7f0000000040)="0b118f2b", 0x4, 0x0, 0x0, 0x0) 2.41032294s ago: executing program 0 (id=19): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r6 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$sock_ax25_SIOCDELRT(r6, 0x890c, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x34, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x34}}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x0) fcntl$lock(r8, 0x7, &(0x7f0000000140)={0x0, 0x0, 0x8}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x6, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x3, 0x2}]}, @func={0x6}]}, {0x0, [0x2e, 0x2e, 0x0, 0x5f]}}, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) fcntl$lock(r7, 0x25, &(0x7f0000000040)={0x0, 0x2, 0x2000000000000, 0xa21}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) fcntl$lock(r9, 0x6, &(0x7f0000000100)={0x0, 0x0, 0x100, 0x1, 0xffffffffffffffff}) fcntl$lock(r9, 0x7, &(0x7f0000000080)={0x2, 0x2, 0x11, 0x4}) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)={0x14, r1, 0x73976972ba3f4b55, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) 2.281497502s ago: executing program 4 (id=5): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002940)="99d6", 0x2}, {&(0x7f0000002980)="f555c15b70122cd0c98a5b39d97524", 0xf}], 0x2}}], 0x1, 0x0) 2.219154158s ago: executing program 3 (id=20): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = syz_io_uring_setup(0x5914, &(0x7f0000000440)={0x0, 0x1434, 0x4, 0x2, 0x2f6}, &(0x7f0000000000)=0x0, &(0x7f0000000500)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000340)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x9}}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r4, 0xd) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/power/sync_on_suspend', 0x161242, 0x0) write$cgroup_int(r5, &(0x7f0000000040), 0x12) syz_emit_ethernet(0xb3, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00e002", 0x7d, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@eol]}}, {"39e6d0233774dbeede7c05d82ccf2011146b2e7caf57afb55b3e691969bf643710d906545c0a231a3f12e98a04505908c1a288a57375d2d16eded504760d993dff510345588b074f235ba8c719e18d32534d994559ee77463ed500"/101}}}}}}}, 0x0) syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f0000000a80)='./file0\x00', 0x10, &(0x7f0000000080)=ANY=[@ANYRES32=0x0], 0x1, 0xa0e, &(0x7f0000000ac0)="$eJzs3V2IXNUdAPBzZ3c2JlEzsUndatS0ttV+uOvGpNVaTcRAKYXgs+mLxJiGxLQ0IlV8SH3qiyiIeY6lL31R2lLUlxJ8KFJQSqEIfbLSt5KC0Ici6JbdPWd29p8Z7sxmd2dn5/eDs2fOPWfmnDt7587cj3NOAsZWY/HvwYPTVUqvvfPq0dtef+/lhSWH2yVai38nO1LNlFKV05Ph9T6aWIo/++SFE93iKh1Y/FvS6diV9nN3ppQupP3pcmqll45fnPzwrWMfvJHOPPvY0fffXp+1X1atdwUAALAJ/PvGT4/v/edfb9396Zu3H0nb2svL7/Prc7rKv/uPVMvp1D5+WE5XHaHTVCg3mUMjlJvoUq6znmYoN9mj/qnwus0e5bbV1D/RsazbesMoK9txK1WNmRXpRmNmZumYPC0e109VM+dOn33q/JAaCqy5/96RUtovCMI4hvldw94DASyJ1wuvcmFtr9S1X22yv/qvPNLo/nxYAxu9/at/tOr/zS/tcVg7W3VrKusVr2PE6wjx/qVBP//l9eL1iGaf7ex1HWFUri/0aufEBrdjtXq1P24XW9VDOS7vw8Mhv/PzE/+no/I/Brr7n/P/gjC2YX7YOyBg04r3zc1nJT/e1xfzt9XkX1eTv70mf0dN/s6afBhnf3jm5fRKtXycH4/pBz0fVs6z3ZDjGwdsTzwfOWj98b7fQV1r/fF+YtjUdv754v1PPv63pfv/q/b2/3ne3vfndCt/ti7nAuV8YTyv3r73v7WymkaPcjeF5tzQpfzi4z0ry1V7ll8ndexnrmrH9Mrn7epVbt/Kcq1QbnsO14X2xt8nO8Lzyu+Psl8t79dkWN9mWI+p0I6yX9md49gOWI2yPfa6/79sn9OpWT11+uzJe3O6bKfvTTS3LSyf2+B2A9eu3/4/02ll/5/r28ubjc79wq7l5VXnfqEVlh/osfy+nC7fcz+Z2L64fObET88+udYrD2Pu/HPPn3ni7NmTP/fAAw88aD8Y9p4JWG+zzzz9s9nzzz1/z+mnnzh18tTJc3OH5u5/4NDc3HcemF38XT/b+ese2EqWv/SH3RIAAAAAAAAAAACgX6c+nr3093e/+4+l/v/L/f9K//9y52/p//+r0P8/9pMv/eBLP8DdXfIXy4QBVqdCuWYOXwjt3RPq2Rue98Uct+fxy/3/S3VxXNfSnpvD8jh+bykXhhO4aryUqTAGSZwv8Cs5fjHHv04wRNX27otzXDe+ddnWy/gUxqUYTeX/VraGMo5J6f/da1ynsv/fvQFtZO1tRHfCYa8j0N1/jP8tCGMb5ufN4gFsDkObfy+f2CjnPUt87k8/vG4hlGJXHlm5v4zjl8K12OzzT6p/a83/2Z7/ru/9X5gxr7W6eh988Uf/6qg23dJv/XH9yzjQewar//u5/rI2d6X+6p9/PdQfLwj16aFQ/44+679q/fetrv6Hc/3lbbv7zn7rX2px1VjZjnjeuFz/i+eNi8Nh/cvYngOv/yonajyS64dxNirzzA5qVOb/7SXeh3Eop8uOsNznEOc7GbT95f6K8j2wN7x+VfP9Zv7f0fa9HNd9Hsr8v2V7bHVJNzrSzS7v7Vbd18Co+sj1P0EY2zA/P7++J7RqDLVyhv7+D/s4Ydj1D/v9rxPn/42/4eP8vzE/zv8b8+P8vzE/zq8X8+P8v/H9jPP/xvybw+vG+YGna/K/VJN/S03+rTX5+2ryb6vJ/3JN/u01+XfU5N9Uk39nTf5Xa/K/VpP/9Zr8u2vyv1GTv9WV/ijjuv4wzmL/PJ9/GB/l+k+vz/+emnxgdF18c+7Rx3//49ZS//+p9vmQch3vSE4387HzL3I6XvdOHemFvHdz+uOQv9nPd8A4ieNnxO/3u2rygdFV7vPy+YYxVHUfsaffcat6/c5ntHwzx9/K8bdzfE+OZ3I8m+O5HB/YoPaxPh793R8ffKVaPt7fFfL7vZ889geK40Td12d74vmBQe9nj+P4Depa619ldzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIChaSz+PXhwukrptXdePXrpLz/47cKSw+0SrcW/kx2pZvt5Kd2b44kcX8oPPvvkhROd8ec5rtKBVKWqvTwdu9KuaWdK6ULany6nVnrp+MXJD9869sEb6cyzjx19/+31eweWHFnvCgAAAGCI/h8AAP//ZfgHNg==") r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r6, &(0x7f0000000180)={0x24, @short}, 0x14) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002300)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f00000001c0), 0x4) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r8 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x80044941, 0xfffffffffffffffe) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x3000002, 0x12, r6, 0x0) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) r10 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendfile(r10, r9, 0x0, 0x2) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x2a00881, 0x0, 0x2, 0x0, &(0x7f00000000c0)) 2.208223038s ago: executing program 2 (id=21): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$udf(&(0x7f0000000500), &(0x7f0000000ac0)='./file0\x00', 0x4018, &(0x7f0000000380)=ANY=[@ANYBLOB="d3328f4e006dfd392324e8d30df77c1651deb24db47427fe2e3bb638d0ee7768e8d4a72bb93203001112b36ee482cc25c8a2e5939b1c238fa20364f839c4f8a3b1079f1ccaa0c4169c4a2dd6c95fb51981cdb5253cb9c0bf2b290f3bf7d8a8ce1347db9a7ac40aaa0a761136aece4ec577bff5f07308eed5aa07497ac17b1cd1bc1640ec81ea472c1173c547ca58ff1a0748ddd787b2a491688830ae8d237556ab3497fa3a06b237329269188d07ad124c72f50a1496b2de51d7196775dc9594783a77b3efed1c03a7942e95d22b28ad29773537988800406dc49caee12d0430a28c31a66f964201ee6e81b48a99dc50c556e72f7b805645d6fec9c2d27388bf5ec8e96958839764bbd86f8523190b95b150086d76278dca13f7ebd43f5d6e961144b61e45df201e5e88e76f79fccb273c09a159981e221af29a49f76a86ec3ad215490cb72871ac182f33ec2628092708ee80ce334d339e6b921f46a14b4c521bf7e8"], 0xfe, 0x4f5, &(0x7f00000005c0)="$eJzs3F1oJVcdAPD/mb03e5Mu7e3XdrUFgyIbW7sk2bS7GpGmXWOFoGCagj4oaT7W0HwsSSpN8aMgiqAg+KAFn/vQIrKKoPTJJx98VhH6Ij74KEEKPogoM5n7kextE3tzk83m94Pknjvzn7kzw/2fOefcmQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIOLpz0wMj6Tj3goA4Ch9fvqLw6PO/wBwqjyn/w8AAKdFiiw+ESnG/7adLhbvd9SmllZfennm2mTnxfpTseSZIj7/q42MXh574skrVxuv7738YftAfGH6uYnBZ9ZWbqwvbGwszA/OrC7Nrc0vHHgN3S6/16PFARhcefGl+cXFjcHRS5d3zX65/vezd52vj18de2KuETtzbXJyui2mUn3fn34LPTw66YssfhUpXvvkL9JQRGTRfS7sU3f0Wn9U8vwrdmLm2mSxI8tLs6ub+czUSITK7pzoa+TIEeRiV4YiHs+3tU9G071qZDERKT4U2+ljEXGmkQePFT8M7r+CyhFsZAf5dl6JiGfjBOQs3KbORha/jRQr99Ti0eNLZ+AYVCKL70eKi5/eTo8V7YH8fJo3m6eeH/zc6uJaW2xK5Rn1pPcPjpK2CbexWmQxVLT4t9PHj3tjgCPVH1l8OVL8+U9fL8aVohiXvmf86lefGm4fYXpon/XksZciYvSAffJqY6wxXzY73H0CAAAAAAAAAACAO10tZfHzSPHNh2vF+2ebF8j/7r+FY94+oIdSFv+JFM//cru4Nb79uRRn2p7v0XTS7/3p7fb3155Zu7G1vnT9a5sd5w/UJl7Y2Fyfnes8O/qj1rouurDfcwygC9WUxYcjxcNTN1vfu3rKy+WtwK0v2uufan03a2nP3KLeuHvneTaNewi+MvnR9nLHr+z/cX9cvfxc9ygDQHdSyuIPkeKzL1wozqspBuKWNmgZdzZSvPOPR8q4rC8vNE7T9eJ/bXFpeWE4j/11pOj/XiM2itiBMvb+VuxIHvt0pPjxD3bH3lXGPtCKHc1jvxMpfv9a59gHW7GX89if5u2a6cFG7EBeeLCMPd+KvTS3tjzfswMMt7G8/f9GpFi+ezA1crnMl7KZfaYZ+/o3Wu39V/eu6F3a/N22/+tt014t66G8vlh860JR9xT1VaVzffWXSPGbfz9Sxu3UFX3l/HuL/6366s1I8cbbu2MbDwq5rxU7cuADCydAnv/nIsUft242c6PM/zID2/r/bfn/wbJ2aI0Z9Cb/722bVi8/9+zh7Dqcehtbr7w4u7y8sK6goKDQLBx3zQT0Wt7+fydS/Gz57WZ/t2z/n9t51+r//+tbrfb/+N4V9aj9f1/btPGyN1KtRNQ2V25UH4qobWy98vjSyuz1hesLq2PDI0+OjoyNjV6p9jU6961S18cK7jR5/n83Uqx96c3m+Pzu/n/n8b+BvSvqUf7f3zZtYFd/petdh1Mvz/+pSPGTf95s/o72XuN/jfG+oY/svDYfpt2j/H+gbVq9/Nxzh7PrAAAAAAAAAAAAcGJVUxY/ihR//WElNZ6NcZDrf295YEaPrv873zZt/ojuV+z6oAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8K6yyGItUrz11Hb6dj7hQsTF9lfgjvW/AAAA//8Qgywy") openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000080)={0x0, 0x0, {0x0, 0x0, 0x0, 0x20000006, 0x0, 0x800}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) socket$unix(0x1, 0x5, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) bind$unix(r4, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) bind$unix(r5, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "77746a315690a576", "07f217bd2e511e465bbbd5de32b495b2f9044677d4d588360663af84db44be59", "9bba8c07", "f37f20e2ff799aae"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000900)=0x2, 0x4) r7 = dup(r6) sendmsg$nl_route_sched(r7, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_script(r6, &(0x7f0000000240)={'#! ', './file0'}, 0xfc94) shutdown(r6, 0x1) 283.404814ms ago: executing program 0 (id=22): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000500)={'syztnl2\x00', &(0x7f0000000480)={'ip6gre0\x00', 0x0, 0x4, 0x4, 0x30, 0x2, 0x2, @private2, @dev={0xfe, 0x80, '\x00', 0x34}, 0x20, 0x80, 0x400, 0x2}}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x24000080) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="070000000400000000000200000014000180060001000200000008000300ac1414aae752df098ff9e4f517576d3c832d2b83a55673c349a16ee8fd20f6dcc6f9ff5d240e5a6c918ee53519a28642e82855711210c746f48ee38c1e36369a08353a19aa6252d64557805f75e62f24921f48750501"], 0x28}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB], 0x84}}, 0x0) accept4(r0, 0x0, 0x0, 0x80800) 154.304146ms ago: executing program 4 (id=23): setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000012c0), 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000003060500000000000000000800000000050001003e555deb"], 0x1c}}, 0x20004004) 0s ago: executing program 4 (id=24): r0 = memfd_create(&(0x7f00000005c0)=';e\x00\x00\xa4\xd8\xe0\x9c\x7f9\x8aZ]3N\xbb\xe1^\x9c\xe1\x9b6s$0Y\xf8\x90\x00\x00\x00\x00\xd2~l\xf6\x12\xde\xdd\xd5\x1d\x96\xb0a\xad\xcd\x16\xd8G\xae\xd9DZm\xabO\xad\x11%\x7f`@\x16c\xc0\xb6\x1f\xe3\x00\x1a_\xc7\xbf\xa7T\xbe\x13\x8b\xb3r\x8fL\xe6\xba\xe7\x18\xb4$BIj\xa3\xc9\xc6|\x9b\x88\xddPx\x02I\xde\xe8\xcd\x02\xc1\xedc2\x06\xcbM\xfb\x13jZ\x96\xeej\x9b\xe4XjN\xb9>\xdf3U\r \x8dh8T/h)\x90\xff\x99\xd9\x89\xab\xf8P\xacYt]\xa3\xed\xfa\xd2\n\x13\b\xce\xf8z\xed\xadnz\x96\xa3\x9a9R\xd9],t\'V|u\x86\x14s>p1\xcd\x1e\xe11We\xfe3\xe06\x1a^\x04^\xef\xa3\x0fU\x9b1\xc6J\x83\x9d[\\a\xf5\xdc\xa1\xcd\xbe\x9b\xc5z7\xe8VP\x89\x16MK`\xe5\x13\x02\b\x00\x00\x00\xd5\x01\xea\x98\xe6Z\x95j\xe3\x0ek>\x14\x80\rXS\xce\xf9\x0e\x89\xd6\xc6\x1bOm4Lla\r\xce\x17\xb5r&\xf3\x96\xbc\xc39\xa7\x95\xd9F\x17', 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x4, 0x81, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x6576, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000080)={r3}) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.246' (ED25519) to the list of known hosts. syzkaller login: [ 51.286558][ T3558] cgroup: Unknown subsys name 'net' [ 51.395538][ T3558] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 52.846061][ T3558] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 54.129606][ T3579] chnl_net:caif_netlink_parms(): no params data found [ 54.230449][ T3568] chnl_net:caif_netlink_parms(): no params data found [ 54.297738][ T3569] chnl_net:caif_netlink_parms(): no params data found [ 54.350905][ T3582] chnl_net:caif_netlink_parms(): no params data found [ 54.372815][ T3579] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.380760][ T3579] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.388983][ T3579] device bridge_slave_0 entered promiscuous mode [ 54.400576][ T3579] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.408096][ T3579] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.416758][ T3579] device bridge_slave_1 entered promiscuous mode [ 54.487080][ T3579] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.528902][ T3579] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.538636][ T3568] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.545888][ T3568] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.553775][ T3568] device bridge_slave_0 entered promiscuous mode [ 54.561768][ T3569] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.569161][ T3569] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.577739][ T3569] device bridge_slave_0 entered promiscuous mode [ 54.588428][ T3569] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.595674][ T3569] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.603454][ T3569] device bridge_slave_1 entered promiscuous mode [ 54.621533][ T3568] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.628849][ T3568] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.637025][ T3568] device bridge_slave_1 entered promiscuous mode [ 54.644436][ T3570] chnl_net:caif_netlink_parms(): no params data found [ 54.700981][ T3579] team0: Port device team_slave_0 added [ 54.712949][ T3579] team0: Port device team_slave_1 added [ 54.727534][ T3569] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.739145][ T3569] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.772528][ T3568] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.810064][ T3568] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.827932][ T3582] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.835013][ T3582] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.843335][ T3582] device bridge_slave_0 entered promiscuous mode [ 54.852240][ T3579] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.859504][ T3579] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.885622][ T3579] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.911501][ T3569] team0: Port device team_slave_0 added [ 54.917860][ T3582] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.924944][ T3582] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.933240][ T3582] device bridge_slave_1 entered promiscuous mode [ 54.940730][ T3579] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.947846][ T3579] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.973795][ T3579] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.998658][ T3569] team0: Port device team_slave_1 added [ 55.006746][ T3568] team0: Port device team_slave_0 added [ 55.041472][ T3568] team0: Port device team_slave_1 added [ 55.086621][ T3582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.098202][ T3582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.113943][ T3569] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.120965][ T3569] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.147112][ T3569] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.158580][ T3570] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.165765][ T3570] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.173903][ T3570] device bridge_slave_0 entered promiscuous mode [ 55.207736][ T3579] device hsr_slave_0 entered promiscuous mode [ 55.214427][ T3579] device hsr_slave_1 entered promiscuous mode [ 55.222484][ T3569] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.229575][ T3569] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.256245][ T3569] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.267568][ T3570] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.274626][ T3570] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.283026][ T3570] device bridge_slave_1 entered promiscuous mode [ 55.290402][ T3568] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.297500][ T3568] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.323506][ T3568] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.371574][ T3568] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.378866][ T3568] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.405200][ T3568] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.419382][ T3582] team0: Port device team_slave_0 added [ 55.427876][ T3582] team0: Port device team_slave_1 added [ 55.468658][ T3570] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.487472][ T3582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.494458][ T3582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.520935][ T3582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.547114][ T3570] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.563985][ T3582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.571217][ T3582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.597424][ T3582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.632841][ T3569] device hsr_slave_0 entered promiscuous mode [ 55.640383][ T3569] device hsr_slave_1 entered promiscuous mode [ 55.647197][ T3569] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.654953][ T3569] Cannot create hsr debugfs directory [ 55.672489][ T3568] device hsr_slave_0 entered promiscuous mode [ 55.679749][ T3568] device hsr_slave_1 entered promiscuous mode [ 55.686658][ T3568] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.694226][ T3568] Cannot create hsr debugfs directory [ 55.710446][ T3570] team0: Port device team_slave_0 added [ 55.721208][ T3570] team0: Port device team_slave_1 added [ 55.803260][ T3582] device hsr_slave_0 entered promiscuous mode [ 55.810036][ T3582] device hsr_slave_1 entered promiscuous mode [ 55.816225][ T1078] Bluetooth: hci1: command 0x0409 tx timeout [ 55.816929][ T1078] Bluetooth: hci0: command 0x0409 tx timeout [ 55.828886][ T1078] Bluetooth: hci2: command 0x0409 tx timeout [ 55.838452][ T3582] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.846132][ T3582] Cannot create hsr debugfs directory [ 55.863146][ T3570] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.870558][ T3570] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.897136][ T23] Bluetooth: hci3: command 0x0409 tx timeout [ 55.903178][ T3570] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.940041][ T3570] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.947371][ T3570] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.973451][ T3570] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.978992][ T1078] Bluetooth: hci4: command 0x0409 tx timeout [ 56.096486][ T3570] device hsr_slave_0 entered promiscuous mode [ 56.103288][ T3570] device hsr_slave_1 entered promiscuous mode [ 56.110024][ T3570] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.119388][ T3570] Cannot create hsr debugfs directory [ 56.247722][ T3579] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 56.258690][ T3579] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 56.280436][ T3579] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 56.294940][ T3579] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 56.361851][ T3569] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.371027][ T3569] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.380824][ T3569] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.394287][ T3569] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.464506][ T3568] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 56.474231][ T3568] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 56.492102][ T3568] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 56.505684][ T3568] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 56.576522][ T3582] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 56.592065][ T3582] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 56.602422][ T3582] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 56.624352][ T3582] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 56.656437][ T3569] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.692647][ T3579] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.711565][ T3569] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.734233][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.744029][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.753006][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.761103][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.773147][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.782347][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.791996][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.799311][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.810111][ T3579] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.842305][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.850778][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.860475][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.869407][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.876572][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.886338][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.894878][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.903371][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.910455][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.918397][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.929098][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.937831][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.944934][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.953194][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.962140][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.971588][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.980505][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.989353][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.998584][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.008736][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.017329][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.026222][ T3570] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 57.052104][ T3570] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 57.063436][ T1391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.073369][ T1391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.082555][ T1391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.091346][ T1391] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.108617][ T1391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.118622][ T1391] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.129180][ T1391] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.137868][ T3570] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 57.148887][ T3570] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 57.168186][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.178045][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.189616][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.198480][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.210895][ T3568] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.234737][ T3579] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 57.247210][ T3579] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.264089][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.273635][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.283568][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.293222][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.348223][ T3568] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.366002][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.374805][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.397017][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.443284][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.457450][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.469239][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.476404][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.484359][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.492648][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.503179][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.517883][ T3582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.528384][ T3579] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.546355][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.555022][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.563644][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.570729][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.582194][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.605619][ T3582] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.622110][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.631294][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.639480][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.647823][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.655422][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.664067][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.673472][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.682148][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.698790][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.708207][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.717257][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.728204][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.737193][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.744263][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.766606][ T3569] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.777129][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.788173][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.796892][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.806266][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.814883][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.841865][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.852347][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.860966][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.870363][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.880064][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.887190][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.894973][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.903195][ T3612] Bluetooth: hci2: command 0x041b tx timeout [ 57.904468][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.909651][ T3612] Bluetooth: hci0: command 0x041b tx timeout [ 57.923828][ T3612] Bluetooth: hci1: command 0x041b tx timeout [ 57.933117][ T3579] device veth0_vlan entered promiscuous mode [ 57.950937][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.960164][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.969305][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.977614][ T2071] Bluetooth: hci3: command 0x041b tx timeout [ 57.980454][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.993408][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.002262][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.014148][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.025147][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.034125][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.053811][ T3582] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 58.058101][ T3612] Bluetooth: hci4: command 0x041b tx timeout [ 58.071033][ T3582] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.092965][ T3570] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.102634][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.111451][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.120483][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.129988][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.138746][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.147774][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.157653][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.173703][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.188600][ T3579] device veth1_vlan entered promiscuous mode [ 58.222144][ T3570] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.238174][ T1391] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.254552][ T1391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.265343][ T1391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.273286][ T1391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.289589][ T1391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.306787][ T1391] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.314925][ T1391] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.322872][ T3569] device veth0_vlan entered promiscuous mode [ 58.355872][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.377269][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.386828][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.393911][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.404572][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.424628][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.436788][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.443877][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.451865][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.490381][ T3569] device veth1_vlan entered promiscuous mode [ 58.504587][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.516931][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.526802][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.539020][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.548314][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.572841][ T3570] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 58.583608][ T3570] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.609731][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.619548][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.628816][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.637516][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.647884][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.656484][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.664712][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.673744][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.683197][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.690741][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.698747][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.706793][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.714252][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.724291][ T3579] device veth0_macvtap entered promiscuous mode [ 58.754373][ T3568] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.772952][ T3582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.783145][ T3579] device veth1_macvtap entered promiscuous mode [ 58.792345][ T1391] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.806229][ T1391] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.814482][ T1391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.832552][ T1391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.855584][ T3569] device veth0_macvtap entered promiscuous mode [ 58.879014][ T3579] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.890931][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.899542][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.914176][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.926508][ T3569] device veth1_macvtap entered promiscuous mode [ 58.947681][ T3579] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.975223][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.983989][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.993519][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.003337][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.013213][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.027768][ T3570] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.037972][ T3579] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.047139][ T3579] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.056837][ T3579] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.065968][ T3579] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.091632][ T3569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.104480][ T3569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.118151][ T3569] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.151476][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.160446][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.173576][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.184475][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.201069][ T3569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.213049][ T3569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.224368][ T3569] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.250554][ T1391] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.262422][ T1391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.271853][ T1391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.281164][ T1391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.294425][ T3569] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.303640][ T3569] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.312683][ T3569] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.322001][ T3569] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.362270][ T1391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.381244][ T1391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.390863][ T1391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.399941][ T1391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.412951][ T1391] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.422072][ T1391] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.436583][ T3568] device veth0_vlan entered promiscuous mode [ 59.485038][ T3568] device veth1_vlan entered promiscuous mode [ 59.492862][ T1391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.512418][ T1391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.521982][ T1391] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.530156][ T1391] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.556540][ T3570] device veth0_vlan entered promiscuous mode [ 59.590424][ T1391] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.601043][ T1391] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.608561][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.619591][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.629039][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.637864][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.646895][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.656421][ T3582] device veth0_vlan entered promiscuous mode [ 59.669191][ T3570] device veth1_vlan entered promiscuous mode [ 59.720952][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.731421][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.740790][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.750753][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.763309][ T3568] device veth0_macvtap entered promiscuous mode [ 59.774741][ T3568] device veth1_macvtap entered promiscuous mode [ 59.801172][ T3582] device veth1_vlan entered promiscuous mode [ 59.814708][ T1391] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.823310][ T3570] device veth0_macvtap entered promiscuous mode [ 59.831709][ T1391] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.837901][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.855695][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.866233][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.869126][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.874633][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.891630][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.902057][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.910150][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.919330][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.932500][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.941685][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.952643][ T3570] device veth1_macvtap entered promiscuous mode [ 59.975649][ T3613] Bluetooth: hci1: command 0x040f tx timeout [ 59.982156][ T3613] Bluetooth: hci0: command 0x040f tx timeout [ 59.988763][ T3613] Bluetooth: hci2: command 0x040f tx timeout [ 60.021931][ T3570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.039706][ T3570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.051366][ T3570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.067126][ T3612] Bluetooth: hci3: command 0x040f tx timeout [ 60.070317][ T3570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.085997][ T3570] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.093730][ T3568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.104775][ T3568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.114734][ T3568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.126301][ T3568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.135508][ T3612] Bluetooth: hci4: command 0x040f tx timeout [ 60.139941][ T3568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.152666][ T3568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.164310][ T3568] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.185450][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.193551][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.202582][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.214670][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.223615][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.233328][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.244205][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.253151][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.262422][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.292807][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.306409][ T3570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.317282][ T3570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.327437][ T3570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.337963][ T3570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.358606][ T3570] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.371114][ T3570] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.381853][ T3570] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.390631][ T3570] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.399462][ T3570] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.413422][ T3582] device veth0_macvtap entered promiscuous mode [ 60.421974][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.433443][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.442950][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.458305][ T3568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.482502][ T3568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.504163][ T3568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.522251][ T3568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.532173][ T3568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.553502][ T3568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.567025][ T3568] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.589421][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.599893][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.611076][ T3582] device veth1_macvtap entered promiscuous mode [ 60.629861][ T3568] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.638811][ T3568] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.647969][ T3568] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.663281][ T3568] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.664987][ T3651] dccp_check_seqno: Step 6 failed for RESET packet, (LSWL(132032510468549) <= P.seqno(0) <= S.SWH(132032510468623)) and (P.ackno exists or LAWL(155294565565394) <= P.ackno(155294565565395) <= S.AWH(155294565565395), sending SYNC... [ 60.796463][ T3582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.813547][ T3582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.824852][ T3582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.841892][ T3582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.852473][ T3582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.863341][ T3582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.873413][ T3582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.885607][ T3582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.898008][ T3582] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.921918][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.936985][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.945046][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.948117][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.968443][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.975681][ T3657] IPVS: Scheduler module ip_vs_sip not found [ 60.995873][ T3655] IPVS: length: 8 != 15192 [ 61.014762][ T3582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.048886][ T3582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.064783][ T3582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.113625][ T3582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.143225][ T3582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.161891][ T3669] dlm: non-version read from control device 0 [ 61.173645][ T3582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.185867][ T3582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.198335][ T3582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.210099][ T3582] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.228951][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.257895][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.298532][ T3673] netlink: 32 bytes leftover after parsing attributes in process `syz.0.13'. [ 61.323530][ T3582] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.338343][ T3582] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.344564][ T3675] loop1: detected capacity change from 0 to 764 [ 61.353700][ T3582] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.369500][ T3582] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.407229][ T3675] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 61.453309][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.471168][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.578236][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.606537][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.629334][ T3679] loop0: detected capacity change from 0 to 512 [ 61.681005][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.689847][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.722504][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.792534][ T3679] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 61.880797][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.953537][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.021389][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.058262][ T3615] Bluetooth: hci1: command 0x0419 tx timeout [ 62.166907][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.174279][ T3679] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 62.228312][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.306103][ T3612] Bluetooth: hci2: command 0x0419 tx timeout [ 62.312187][ T3612] Bluetooth: hci0: command 0x0419 tx timeout [ 62.312676][ T3679] EXT4-fs (loop0): 1 truncate cleaned up [ 62.320298][ T3612] Bluetooth: hci3: command 0x0419 tx timeout [ 62.330783][ T3612] Bluetooth: hci4: command 0x0419 tx timeout [ 62.348432][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.353881][ T3679] EXT4-fs (loop0): mounted filesystem without journal. Opts: data=journal,jqfmt=vfsv0,errors=continue,nodelalloc,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 62.356933][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.393540][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.894935][ T3697] loop1: detected capacity change from 0 to 512 [ 64.054579][ T3702] loop3: detected capacity change from 0 to 2048 [ 64.063632][ T3697] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 64.075945][ T3697] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038 (0x7fffffff) [ 64.270306][ T3704] loop2: detected capacity change from 0 to 256 [ 64.308566][ T3704] UDF-fs: bad mount option "2N" or missing value [ 64.930480][ T3715] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17'. [ 65.819162][ T3715] EXT4-fs error (device loop1): ext4_add_entry:2484: inode #2: comm syz.1.17: Directory hole found for htree leaf block 0 [ 65.940145][ T3702] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 65.973280][ T3702] NILFS (loop3): mounting unchecked fs [ 66.031366][ T3560] udevd[3560]: incorrect nilfs2 checksum on /dev/loop3 [ 66.041090][ T3702] NILFS (loop3): invalid segment: Checksum error in segment payload [ 66.088767][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 66.094428][ T3702] NILFS (loop3): unable to fall back to spare super block [ 66.109383][ T3702] NILFS (loop3): error -22 while searching super root [ 66.734021][ T3722] ================================================================== [ 66.742358][ T3722] BUG: KASAN: use-after-free in mptcp_pm_nl_rm_addr_or_subflow+0x6b8/0xcf0 [ 66.750971][ T3722] Read of size 4 at addr ffff888017251850 by task syz.0.22/3722 [ 66.758606][ T3722] [ 66.760955][ T3722] CPU: 1 PID: 3722 Comm: syz.0.22 Not tainted 5.15.167-syzkaller #0 [ 66.768939][ T3722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 66.779003][ T3722] Call Trace: [ 66.782289][ T3722] [ 66.785222][ T3722] dump_stack_lvl+0x1e3/0x2d0 [ 66.789914][ T3722] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 66.795553][ T3722] ? _printk+0xd1/0x120 [ 66.799724][ T3722] ? __wake_up_klogd+0xcc/0x100 [ 66.804582][ T3722] ? panic+0x860/0x860 [ 66.808664][ T3722] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 66.814143][ T3722] print_address_description+0x63/0x3b0 [ 66.819695][ T3722] ? mptcp_pm_nl_rm_addr_or_subflow+0x6b8/0xcf0 [ 66.825947][ T3722] kasan_report+0x16b/0x1c0 [ 66.830483][ T3722] ? mptcp_pm_nl_rm_addr_or_subflow+0x6b8/0xcf0 [ 66.836743][ T3722] mptcp_pm_nl_rm_addr_or_subflow+0x6b8/0xcf0 [ 66.842849][ T3722] ? mptcp_pm_nl_rm_subflow_received+0x20/0x20 [ 66.849024][ T3722] ? mptcp_pm_remove_addr+0x84/0x140 [ 66.854344][ T3722] mptcp_nl_cmd_del_addr+0x85a/0x17e0 [ 66.859759][ T3722] ? mptcp_nl_cmd_add_addr+0xcb0/0xcb0 [ 66.865248][ T3722] ? __nla_validate+0x50/0x50 [ 66.869990][ T3722] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 66.876349][ T3722] genl_rcv_msg+0xfbd/0x14a0 [ 66.881002][ T3722] ? genl_bind+0x420/0x420 [ 66.885438][ T3722] ? local_bh_enable+0x5/0x20 [ 66.890139][ T3722] ? mark_lock+0x98/0x340 [ 66.894494][ T3722] ? __lock_acquire+0x1295/0x1ff0 [ 66.899553][ T3722] ? mptcp_nl_cmd_add_addr+0xcb0/0xcb0 [ 66.905049][ T3722] netlink_rcv_skb+0x1cf/0x410 [ 66.909837][ T3722] ? genl_bind+0x420/0x420 [ 66.914274][ T3722] ? netlink_ack+0xb10/0xb10 [ 66.918900][ T3722] ? down_read+0x1b3/0x2e0 [ 66.923333][ T3722] ? genl_rcv+0x9/0x40 [ 66.927419][ T3722] genl_rcv+0x24/0x40 [ 66.931419][ T3722] netlink_unicast+0x7b6/0x980 [ 66.936211][ T3722] ? netlink_detachskb+0x90/0x90 [ 66.941166][ T3722] ? __virt_addr_valid+0x3bb/0x460 [ 66.946295][ T3722] ? 0xffffffff81000000 [ 66.950462][ T3722] ? __check_object_size+0x300/0x410 [ 66.955762][ T3722] ? bpf_lsm_netlink_send+0x5/0x10 [ 66.960893][ T3722] netlink_sendmsg+0xa30/0xd60 [ 66.965692][ T3722] ? netlink_getsockopt+0x5b0/0x5b0 [ 66.970908][ T3722] ? futex_wait+0x634/0x740 [ 66.975437][ T3722] ? aa_sock_msg_perm+0x91/0x150 [ 66.980397][ T3722] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 66.985701][ T3722] ? security_socket_sendmsg+0x7d/0xa0 [ 66.991174][ T3722] ? netlink_getsockopt+0x5b0/0x5b0 [ 66.996413][ T3722] ____sys_sendmsg+0x59e/0x8f0 [ 67.001199][ T3722] ? iovec_from_user+0x300/0x390 [ 67.006257][ T3722] ? __sys_sendmsg_sock+0x30/0x30 [ 67.011323][ T3722] ___sys_sendmsg+0x252/0x2e0 [ 67.016031][ T3722] ? __sys_sendmsg+0x260/0x260 [ 67.020835][ T3722] ? __fdget+0x191/0x220 [ 67.025086][ T3722] __se_sys_sendmsg+0x19a/0x260 [ 67.029959][ T3722] ? __x64_sys_sendmsg+0x80/0x80 [ 67.034906][ T3722] ? syscall_enter_from_user_mode+0x2e/0x240 [ 67.040897][ T3722] ? lockdep_hardirqs_on+0x94/0x130 [ 67.046115][ T3722] ? syscall_enter_from_user_mode+0x2e/0x240 [ 67.052099][ T3722] do_syscall_64+0x3b/0xb0 [ 67.056529][ T3722] ? clear_bhb_loop+0x15/0x70 [ 67.061204][ T3722] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 67.067095][ T3722] RIP: 0033:0x7f6f2ae7eff9 [ 67.071508][ T3722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.091102][ T3722] RSP: 002b:00007f6f292f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 67.099600][ T3722] RAX: ffffffffffffffda RBX: 00007f6f2b036f80 RCX: 00007f6f2ae7eff9 [ 67.107570][ T3722] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000005 [ 67.115535][ T3722] RBP: 00007f6f2aef1296 R08: 0000000000000000 R09: 0000000000000000 [ 67.123492][ T3722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 67.131450][ T3722] R13: 0000000000000000 R14: 00007f6f2b036f80 R15: 00007ffd2335c908 [ 67.139433][ T3722] [ 67.142444][ T3722] [ 67.144757][ T3722] Allocated by task 3722: [ 67.149068][ T3722] ____kasan_kmalloc+0xba/0xf0 [ 67.153820][ T3722] kmem_cache_alloc_trace+0x143/0x290 [ 67.159189][ T3722] subflow_ulp_init+0x8f/0x470 [ 67.163947][ T3722] tcp_set_ulp+0x498/0x550 [ 67.168365][ T3722] mptcp_subflow_create_socket+0x64f/0xc10 [ 67.174168][ T3722] mptcp_init_sock+0x114/0x790 [ 67.178923][ T3722] inet_create+0xa35/0xd40 [ 67.183335][ T3722] __sock_create+0x460/0x8d0 [ 67.187930][ T3722] __sys_socket+0x132/0x370 [ 67.192429][ T3722] __x64_sys_socket+0x76/0x80 [ 67.197103][ T3722] do_syscall_64+0x3b/0xb0 [ 67.201717][ T3722] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 67.207646][ T3722] [ 67.209968][ T3722] Freed by task 3610: [ 67.213938][ T3722] kasan_set_track+0x4b/0x80 [ 67.218531][ T3722] kasan_set_free_info+0x1f/0x40 [ 67.223464][ T3722] ____kasan_slab_free+0xd8/0x120 [ 67.228480][ T3722] slab_free_freelist_hook+0xdd/0x160 [ 67.233851][ T3722] kmem_cache_free_bulk+0x28f/0x4c0 [ 67.239056][ T3722] kfree_rcu_work+0x332/0x7a0 [ 67.243732][ T3722] process_one_work+0x8a1/0x10c0 [ 67.248674][ T3722] worker_thread+0xaca/0x1280 [ 67.253358][ T3722] kthread+0x3f6/0x4f0 [ 67.257425][ T3722] ret_from_fork+0x1f/0x30 [ 67.261839][ T3722] [ 67.264170][ T3722] Last potentially related work creation: [ 67.269867][ T3722] kasan_save_stack+0x36/0x60 [ 67.274535][ T3722] kasan_record_aux_stack+0xba/0x100 [ 67.279809][ T3722] kvfree_call_rcu+0x118/0x8a0 [ 67.284562][ T3722] tcp_cleanup_ulp+0x6d/0xe0 [ 67.289146][ T3722] tcp_v4_destroy_sock+0x184/0x700 [ 67.294251][ T3722] inet_csk_destroy_sock+0x153/0x370 [ 67.299528][ T3722] __tcp_close+0x890/0xec0 [ 67.303939][ T3722] __mptcp_close_ssk+0x1ff/0x470 [ 67.308870][ T3722] mptcp_pm_nl_rm_addr_or_subflow+0x4b4/0xcf0 [ 67.315080][ T3722] mptcp_nl_cmd_del_addr+0x85a/0x17e0 [ 67.320471][ T3722] genl_rcv_msg+0xfbd/0x14a0 [ 67.325062][ T3722] netlink_rcv_skb+0x1cf/0x410 [ 67.329828][ T3722] genl_rcv+0x24/0x40 [ 67.333803][ T3722] netlink_unicast+0x7b6/0x980 [ 67.338561][ T3722] netlink_sendmsg+0xa30/0xd60 [ 67.343325][ T3722] ____sys_sendmsg+0x59e/0x8f0 [ 67.348081][ T3722] ___sys_sendmsg+0x252/0x2e0 [ 67.352757][ T3722] __se_sys_sendmsg+0x19a/0x260 [ 67.357604][ T3722] do_syscall_64+0x3b/0xb0 [ 67.362015][ T3722] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 67.367922][ T3722] [ 67.370237][ T3722] Second to last potentially related work creation: [ 67.376825][ T3722] kasan_save_stack+0x36/0x60 [ 67.381501][ T3722] kasan_record_aux_stack+0xba/0x100 [ 67.386777][ T3722] call_rcu+0x1c4/0xa70 [ 67.390922][ T3722] fib_create_info+0x190d/0x2570 [ 67.395857][ T3722] fib_table_insert+0x213/0x1f90 [ 67.400782][ T3722] fib_add_ifaddr+0xf4c/0x1730 [ 67.405540][ T3722] fib_inetaddr_event+0x12b/0x2b0 [ 67.410560][ T3722] blocking_notifier_call_chain+0x104/0x1b0 [ 67.416441][ T3722] __inet_insert_ifa+0x9f8/0xc10 [ 67.421372][ T3722] inet_rtm_newaddr+0x8ca/0x1840 [ 67.426302][ T3722] rtnetlink_rcv_msg+0x993/0xee0 [ 67.431232][ T3722] netlink_rcv_skb+0x1cf/0x410 [ 67.435989][ T3722] netlink_unicast+0x7b6/0x980 [ 67.440747][ T3722] netlink_sendmsg+0xa30/0xd60 [ 67.445529][ T3722] ____sys_sendmsg+0x59e/0x8f0 [ 67.450286][ T3722] ___sys_sendmsg+0x252/0x2e0 [ 67.454951][ T3722] __se_sys_sendmsg+0x19a/0x260 [ 67.459790][ T3722] do_syscall_64+0x3b/0xb0 [ 67.464199][ T3722] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 67.470082][ T3722] [ 67.472392][ T3722] The buggy address belongs to the object at ffff888017251800 [ 67.472392][ T3722] which belongs to the cache kmalloc-256 of size 256 [ 67.486434][ T3722] The buggy address is located 80 bytes inside of [ 67.486434][ T3722] 256-byte region [ffff888017251800, ffff888017251900) [ 67.499608][ T3722] The buggy address belongs to the page: [ 67.505234][ T3722] page:ffffea00005c9400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x17250 [ 67.515375][ T3722] head:ffffea00005c9400 order:1 compound_mapcount:0 [ 67.521947][ T3722] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 67.529929][ T3722] raw: 00fff00000010200 0000000000000000 0000000100000001 ffff888017041b40 [ 67.538665][ T3722] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 67.547236][ T3722] page dumped because: kasan: bad access detected [ 67.553638][ T3722] page_owner tracks the page as allocated [ 67.559338][ T3722] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, ts 2462683080, free_ts 0 [ 67.577217][ T3722] get_page_from_freelist+0x322a/0x33c0 [ 67.582758][ T3722] __alloc_pages+0x272/0x700 [ 67.587341][ T3722] alloc_page_interleave+0x22/0x1c0 [ 67.592539][ T3722] new_slab+0xbb/0x4b0 [ 67.596606][ T3722] ___slab_alloc+0x6f6/0xe10 [ 67.601190][ T3722] __kmalloc_track_caller+0x1c7/0x300 [ 67.606558][ T3722] krealloc+0x4b/0xc0 [ 67.610534][ T3722] add_sysfs_param+0xca/0x7f0 [ 67.615205][ T3722] kernel_add_sysfs_param+0xb0/0x130 [ 67.620486][ T3722] param_sysfs_builtin+0x16a/0x1f0 [ 67.625591][ T3722] param_sysfs_init+0x66/0x70 [ 67.630263][ T3722] do_one_initcall+0x22b/0x7a0 [ 67.635034][ T3722] do_initcall_level+0x157/0x210 [ 67.639964][ T3722] do_initcalls+0x49/0x90 [ 67.644285][ T3722] kernel_init_freeable+0x425/0x5c0 [ 67.649473][ T3722] kernel_init+0x19/0x290 [ 67.653795][ T3722] page_owner free stack trace missing [ 67.659160][ T3722] [ 67.661481][ T3722] Memory state around the buggy address: [ 67.667096][ T3722] ffff888017251700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 67.675144][ T3722] ffff888017251780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 67.683192][ T3722] >ffff888017251800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 67.691235][ T3722] ^ [ 67.697895][ T3722] ffff888017251880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 67.705945][ T3722] ffff888017251900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 67.713989][ T3722] ================================================================== [ 67.722037][ T3722] Disabling lock debugging due to kernel taint [ 67.728294][ T3722] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 67.735492][ T3722] CPU: 1 PID: 3722 Comm: syz.0.22 Tainted: G B 5.15.167-syzkaller #0 [ 67.744867][ T3722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 67.754952][ T3722] Call Trace: [ 67.758243][ T3722] [ 67.761187][ T3722] dump_stack_lvl+0x1e3/0x2d0 [ 67.765883][ T3722] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 67.771530][ T3722] ? panic+0x860/0x860 [ 67.775615][ T3722] ? rcu_is_watching+0x11/0xa0 [ 67.780410][ T3722] panic+0x318/0x860 [ 67.784326][ T3722] ? asm_common_interrupt+0x22/0x40 [ 67.789538][ T3722] ? check_panic_on_warn+0x1d/0xa0 [ 67.794657][ T3722] ? fb_is_primary_device+0xd0/0xd0 [ 67.799864][ T3722] ? _raw_spin_unlock_irqrestore+0xd4/0x130 [ 67.805774][ T3722] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 67.811706][ T3722] ? _raw_spin_unlock+0x40/0x40 [ 67.816591][ T3722] check_panic_on_warn+0x7e/0xa0 [ 67.821546][ T3722] ? mptcp_pm_nl_rm_addr_or_subflow+0x6b8/0xcf0 [ 67.827799][ T3722] end_report+0x6d/0xf0 [ 67.831970][ T3722] kasan_report+0x18e/0x1c0 [ 67.836496][ T3722] ? mptcp_pm_nl_rm_addr_or_subflow+0x6b8/0xcf0 [ 67.842761][ T3722] mptcp_pm_nl_rm_addr_or_subflow+0x6b8/0xcf0 [ 67.848861][ T3722] ? mptcp_pm_nl_rm_subflow_received+0x20/0x20 [ 67.855038][ T3722] ? mptcp_pm_remove_addr+0x84/0x140 [ 67.860347][ T3722] mptcp_nl_cmd_del_addr+0x85a/0x17e0 [ 67.865749][ T3722] ? mptcp_nl_cmd_add_addr+0xcb0/0xcb0 [ 67.871218][ T3722] ? __nla_validate+0x50/0x50 [ 67.875921][ T3722] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 67.882288][ T3722] genl_rcv_msg+0xfbd/0x14a0 [ 67.886887][ T3722] ? genl_bind+0x420/0x420 [ 67.891306][ T3722] ? local_bh_enable+0x5/0x20 [ 67.896002][ T3722] ? mark_lock+0x98/0x340 [ 67.900358][ T3722] ? __lock_acquire+0x1295/0x1ff0 [ 67.905401][ T3722] ? mptcp_nl_cmd_add_addr+0xcb0/0xcb0 [ 67.910870][ T3722] netlink_rcv_skb+0x1cf/0x410 [ 67.915639][ T3722] ? genl_bind+0x420/0x420 [ 67.920082][ T3722] ? netlink_ack+0xb10/0xb10 [ 67.924688][ T3722] ? down_read+0x1b3/0x2e0 [ 67.929115][ T3722] ? genl_rcv+0x9/0x40 [ 67.933191][ T3722] genl_rcv+0x24/0x40 [ 67.937176][ T3722] netlink_unicast+0x7b6/0x980 [ 67.941963][ T3722] ? netlink_detachskb+0x90/0x90 [ 67.946906][ T3722] ? __virt_addr_valid+0x3bb/0x460 [ 67.952039][ T3722] ? 0xffffffff81000000 [ 67.956203][ T3722] ? __check_object_size+0x300/0x410 [ 67.961502][ T3722] ? bpf_lsm_netlink_send+0x5/0x10 [ 67.966620][ T3722] netlink_sendmsg+0xa30/0xd60 [ 67.971402][ T3722] ? netlink_getsockopt+0x5b0/0x5b0 [ 67.976615][ T3722] ? futex_wait+0x634/0x740 [ 67.981133][ T3722] ? aa_sock_msg_perm+0x91/0x150 [ 67.986075][ T3722] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 67.991356][ T3722] ? security_socket_sendmsg+0x7d/0xa0 [ 67.996810][ T3722] ? netlink_getsockopt+0x5b0/0x5b0 [ 68.002008][ T3722] ____sys_sendmsg+0x59e/0x8f0 [ 68.006767][ T3722] ? iovec_from_user+0x300/0x390 [ 68.011697][ T3722] ? __sys_sendmsg_sock+0x30/0x30 [ 68.016714][ T3722] ___sys_sendmsg+0x252/0x2e0 [ 68.021403][ T3722] ? __sys_sendmsg+0x260/0x260 [ 68.026168][ T3722] ? __fdget+0x191/0x220 [ 68.030399][ T3722] __se_sys_sendmsg+0x19a/0x260 [ 68.035242][ T3722] ? __x64_sys_sendmsg+0x80/0x80 [ 68.040178][ T3722] ? syscall_enter_from_user_mode+0x2e/0x240 [ 68.046162][ T3722] ? lockdep_hardirqs_on+0x94/0x130 [ 68.051352][ T3722] ? syscall_enter_from_user_mode+0x2e/0x240 [ 68.057329][ T3722] do_syscall_64+0x3b/0xb0 [ 68.061745][ T3722] ? clear_bhb_loop+0x15/0x70 [ 68.066436][ T3722] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 68.072320][ T3722] RIP: 0033:0x7f6f2ae7eff9 [ 68.076729][ T3722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.096327][ T3722] RSP: 002b:00007f6f292f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 68.104736][ T3722] RAX: ffffffffffffffda RBX: 00007f6f2b036f80 RCX: 00007f6f2ae7eff9 [ 68.112701][ T3722] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000005 [ 68.120665][ T3722] RBP: 00007f6f2aef1296 R08: 0000000000000000 R09: 0000000000000000 [ 68.128626][ T3722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 68.136587][ T3722] R13: 0000000000000000 R14: 00007f6f2b036f80 R15: 00007ffd2335c908 [ 68.144570][ T3722] [ 68.147785][ T3722] Kernel Offset: disabled [ 68.152111][ T3722] Rebooting in 86400 seconds..