last executing test programs: 2.756091012s ago: executing program 1 (id=371): socket$kcm(0x2d, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000000)=ANY=[@ANYRES64=0x0], 0x10}, 0x1, 0x0, 0x0, 0xa0f0d2ee7e986339}, 0x81) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x80000, 0x3a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$IMDELTIMER(r4, 0x80044941, &(0x7f00000000c0)=0x2) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_open_dev$evdev(0x0, 0xa, 0x300) ioctl$EVIOCGEFFECTS(r6, 0x80044584, &(0x7f0000000200)=""/238) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000f40)=@raw={'raw\x00', 0x8, 0x3, 0x478, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3a8, 0xffffffff, 0xffffffff, 0x3a8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [0xff, 0x0, 0xff, 0xff], [0xffffffff, 0xff, 0xff], 'team_slave_0\x00', 'netdevsim0\x00', {}, {0xff}, 0x29, 0x3, 0x0, 0x60}, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x2, 0x24, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x1, 'syz0\x00', 0xfe}}, @common=@mh={{0x28}, {"b11c", 0x1}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0xffffffff80000402, 0xffffffffffffffff, 0x0) ioprio_set$pid(0x3, 0x0, 0x0) ioprio_get$uid(0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000003640)={0x0, 'hsr0\x00', {0x1}, 0x7}) r7 = open(&(0x7f00000003c0)='./file0\x00', 0x48040, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlinkprop={0x34, 0x6c, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x14091, 0x40}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x40000) finit_module(r7, 0x0, 0x2) 2.688578413s ago: executing program 2 (id=373): r0 = epoll_create1(0x80000) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, 0x0) 2.688475663s ago: executing program 2 (id=374): set_mempolicy(0x5, &(0x7f0000000000)=0x2, 0x6) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a010400000000000000000200000044000480400001800e000100627974656f726465720000002c000280080001400000000a08000240000000000800044000000002080003400000000008000540000000080900010073797a30000000000900020073797a32"], 0x98}}, 0x0) 2.585980299s ago: executing program 3 (id=378): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x90, 0x2c, 0xf35, 0x70bd23, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x2400}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_simple={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x100, 0xd, 0xa, 0xffff, 0x7ff}}, @TCA_DEF_DATA={0x6, 0x3, '\xff\xff'}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xff, 0xff}}]}, 0x90}, 0x1, 0x0, 0x0, 0x440}, 0x0) 2.550851406s ago: executing program 2 (id=379): r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/route\x00') preadv(r0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x80, 0x1) 2.504685063s ago: executing program 0 (id=380): openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x900, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x241, 0x1, 0x0, 0xdd9f83, 0x1, 0x9, 0x1, 0x0, 0x5, 0x20722, 0x53, 0x7, 0x7f, 0x2f, 0xb763599953cb0936, {0x3, 0x6fd8e84a}, 0xb, 0xed}}) 2.504513473s ago: executing program 2 (id=381): socket(0x400000000010, 0x3, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000738000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000530000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x400c804) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000004"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.504366813s ago: executing program 0 (id=382): r0 = socket$inet6(0xa, 0x2, 0x0) close(0x3) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r1, &(0x7f0000000000)={&(0x7f0000000180)={0xa, 0x4e24, 0x80000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@rthdr_2292={{0x18, 0x29, 0x39, {0x32, 0x0, 0x0, 0x8}}}], 0x18}, 0x4044860) 2.450478232s ago: executing program 0 (id=383): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x5, 0xfff3}, {0x10, 0xe}}}, 0x24}}, 0x24000810) 2.444392743s ago: executing program 2 (id=384): gettid() r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x4d, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a843500170600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50c2000012bab0da"], 0x0) 2.376738514s ago: executing program 3 (id=385): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) write$cgroup_pid(r1, &(0x7f0000000240), 0xfdef) 2.376583894s ago: executing program 0 (id=386): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2}, 0x18) connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r2, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r1, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000100), 0x1}}], 0x4000253, 0x44) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848160000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x80054) 2.359969537s ago: executing program 3 (id=387): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x7, 0xd, 0x7, 0xffdffffc, 0x6, "00001000"}) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x0, 0xfffffffd, 0x0, 0x6, 0x1, "e315bc1cc24ff7b7cdb242e1ff0aa6905446b3"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) read$FUSE(r2, &(0x7f0000003f80)={0x2020}, 0x2020) read$watch_queue(r2, &(0x7f0000000340)=""/133, 0x85) 1.928233457s ago: executing program 0 (id=393): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x0, 0x33}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x0, 0x200000000000000}, 0xfffffffc}}, 0xb8}, 0x1, 0x0, 0x0, 0x40800}, 0x2c040010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b800000019000100000000000000ca8fe000000200000000000000000000000000000000000000000000000000000006"], 0xb8}}, 0x2c000010) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$SW_SYNC_IOC_INC(r2, 0x40045701, &(0x7f00000000c0)=0x1) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={0x0}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/keys\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x0, 0x0, 0x0, 0x2000004, 0x0, 0x0, 0x1f00, 0x63, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0x8, 0x5, 0x20000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r4], 0x4c}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000010000108000000000000000002000000", @ANYRES32=0x0, @ANYBLOB="b40200000000000008001b"], 0x28}}, 0x0) 1.861105167s ago: executing program 4 (id=395): unshare(0x8040480) r0 = socket(0x1d, 0x2, 0x6) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x6a, 0x10, 0x0, 0x0) 1.756709584s ago: executing program 4 (id=396): unshare(0x22020400) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000c, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) 1.72161645s ago: executing program 4 (id=397): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x109202) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) gettid() sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x6, 0x9, 0xc2, 0x0, 0x2d83, 0x9, 0x100, 0x0, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) syz_open_dev$usbfs(0x0, 0x76, 0x101301) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0xea}) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) epoll_create1(0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x28}}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x402, 0x0) syz_io_uring_setup(0x186, &(0x7f0000000540)={0x0, 0x3416, 0x13100, 0x1}, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002000000000000060000000006001500010000001800168014000100000000000000000000003000000011"], 0x3c}}, 0x8000) getsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000600), 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000080)=0x2) close_range(r3, 0xffffffffffffffff, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x0, 0x5802, 0x294, 0x0, 0x294, 0x3b0, 0x325, 0x378, 0x3b0, 0x378, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @empty, [], [0x0, 0xffffffff], 'macvtap0\x00', 'macsec0\x00', {0xff}}, 0x0, 0x230, 0x278, 0x52020000, {}, [@common=@inet=@hashlimit2={{0x150}, {'gre0\x00', {0x0, 0x8000004, 0x0, 0x20, 0x2, 0x1, 0x7fbfffff, 0x0, 0x8}, {0x20000000000}}}, @common=@unspec=@quota={{0x38}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@remote, 'wg0\x00', {0x2}}}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x4, 0x1, 0x0, 'snmp_trap\x00', 'syz1\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0) ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, &(0x7f00000003c0)={0x0, "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"}) 1.572708734s ago: executing program 1 (id=398): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000000000000200000008000300", @ANYRES32=r1, @ANYBLOB="0c00990041000000600000000800a0007c030000080026009a03000008009f"], 0x40}}, 0x0) 1.428736638s ago: executing program 3 (id=399): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x6, 0x2d, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) 731.947611ms ago: executing program 4 (id=400): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x22180, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) close(r0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 706.977375ms ago: executing program 3 (id=401): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x48000, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=r0, @ANYBLOB="000900006440000008001b"], 0x30}}, 0x0) 500.712979ms ago: executing program 1 (id=402): r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x7fffffff, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x37, 0x2, 0x20, "d569e8e1dd2f1ae97ee8589301f453a0c04b1410b2eafa4496ba216b1e8ac11e"}) 500.390449ms ago: executing program 0 (id=403): open_tree(0xffffffffffffff9c, 0x0, 0x1803) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) sendmsg$inet(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x8084) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x100000001c3, 0x4ac00) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r5, 0x2) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), 0x0, 0x40, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESDEC, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRES8, @ANYRES8, @ANYRESDEC, @ANYBLOB=', '], 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 500.277689ms ago: executing program 3 (id=404): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$procfs(0xffffffffffffff9c, &(0x7f00000027c0)='/proc/asound/timers\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) 482.910712ms ago: executing program 4 (id=405): set_mempolicy(0x5, &(0x7f0000000000)=0x2, 0x6) fsopen(&(0x7f00000000c0)='ntfs3\x00', 0x0) 467.881794ms ago: executing program 1 (id=406): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0xfff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000002dc0)=@multiplanar_fd={0xde9, 0x1, 0x4, 0x80, 0xc, {0x0, 0x2710}, {0x2, 0x2, 0x8, 0x7, 0x0, 0x40, "cf3d67bf"}, 0x8, 0x4, {0x0}, 0x1}) 396.654056ms ago: executing program 4 (id=407): syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224"], 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0xe1, 0x0, 'queue1\x00', 0x10000080}) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000080)="268292", 0xfff6}], 0x1) 396.487246ms ago: executing program 1 (id=408): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'vlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x2004c000) 138.580708ms ago: executing program 1 (id=409): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="1400000016000b63d25a8064000000000124fc60", 0x14}], 0x1}, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x3, 0x3}, 0xfffffffd, 0x0, 'id0\x00', 'timer1\x00', 0x0, 0xd37, 0x4, 0x0, 0xfffffffb}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00e700000000000000000000000000000000000000000000000a00000000000000000000008040000000"], 0xfc}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') preadv(r7, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000780)=""/4096, 0x1000}], 0x2, 0x12c, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) bind$tipc(r2, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001f80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x3dc, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x3ac, 0x4, 0x0, 0x1, [{0x3a8, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x394, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x2f0, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x3c, 0x1, "529baf14ccf9291ac98a80cbabdedf745d80e35aeaaa60443996bd372d8b1a5b7365a8a240c1ccf58b00c9ae10531f3cea9ce156d0069ce7"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0x71, 0x1, "996381dff3aa8da14c445c818345c7a251f74e31a26f997eb09ff8de14fd81618e8befd5d2ddfb7935763b94b3ce0a2c927443630221891a86981fccab6b848b0822895d9c6621d0b71e593094f7b880c99e0787b5ce104d11cea0fc69b42be05188adcd0358d48ce69276b384"}, @NFTA_DATA_VALUE={0xcf, 0x1, "1c45bff14f572b6783bfca6d8f1f87f1ef73c5735d6417609a20db04604dc4380c1be69cb2d3cd73bd207145b50a699573c207ede4e14fe2338c8fe5750187087561d1488ca38458d20607b7e3410625bcb419624c08d2987efdc3e757a9f70b47901cc69662a65c09b782f19e2dab75197ea38b67a1025a39a2bb8b57d1fa97b4789e917cda2e2badf6458d869d0793668d51113e73a1166cae1fd83cdb69261fd896ddfb3d8becbd49866feff0e9a840e65dce9123601baae4c5601c6ea670089a804ef848bb3248fe1c"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0xb6, 0x1, "ffa056aa9430facab8f7946e9899abec8ab61e966d4435824a165a201a0451bc9391bbb90bd3d0e770174b87df933b1ef55d197dbb97ed6b0f51fc4f515da0b5d97d70208569f5f0402ab331e02539ff9c8f88ce407c29e2e20c08987c7f878726debdf7b6ce2172feba5532634eed34b4394476a2544d439f2678433fb397ff88a8806a48e88fb572ea8b0f86e94148d20bc888931aeeeafa7da69892fe326aeecb268bed98c276e8c379036f5237960300"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_IMMEDIATE_DATA={0xa0, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9b, 0x1, "8472d87f5dd1f696fa7d1daad157e6a5633826f9a7ba76b0e2bb2d67a0cfe72ce808631eedda326b1eaad1cfdbe27af65352682a727b3ff154824552bbfb850226369416340ed19141100b750ce53f09d09ceba3426461fcb3e509c3393fcc47cb86f386be78cd6ad879e38590a7e94e967bc384143db279595c955cf447fb10c07fe8296f69218f7bd5231c580ed22b74660e3de88547"}]}]}}}]}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}], {0x14}}, 0x404}}, 0x4) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r9, &(0x7f0000000080)={0xa, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f00000002c0), 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x0) setsockopt$inet6_tcp_TLS_TX(r9, 0x11a, 0x1, &(0x7f00000003c0)=@gcm_256={{0x304}, "b54b55c9b691706d", "b5421a989404d5c952ba74f879bed1a5bfadabb985e5681803932ccc7beb0f83", '@;6\x00', "ef3c6c588e3360e2"}, 0x38) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) 0s ago: executing program 2 (id=410): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0xd, 0xfffff034}, {0x50, 0x0, 0x5, 0xfffffffd}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd00001200010000009949e42b29000063d1"], 0x3e) 0s ago: executing program 4 (id=411): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r1) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600006fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xee19}], 0x1}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.156' (ED25519) to the list of known hosts. [ 28.885739][ T4309] cgroup: Unknown subsys name 'net' [ 29.178383][ T4309] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 29.449568][ T4309] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 30.157352][ T4325] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 30.159329][ T4325] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 30.172496][ T4333] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 30.173761][ T4333] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 30.175169][ T4333] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 30.176851][ T4334] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 30.178438][ T4334] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 30.180008][ T4334] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 30.181096][ T4337] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 30.181275][ T4334] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 30.182871][ T4337] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 30.183684][ T4334] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 30.184780][ T4337] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 30.186314][ T4334] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 30.187104][ T4337] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 30.188078][ T4334] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 30.189371][ T4337] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 30.190500][ T4334] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 30.191664][ T4337] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 30.193500][ T4334] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 30.196150][ T4338] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 30.196645][ T4334] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 30.197506][ T4338] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 30.198644][ T4336] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 30.206121][ T4336] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 30.208912][ T4336] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 30.217378][ T4329] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 30.222817][ T4323] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 30.227255][ T4323] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 30.228533][ T4323] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 30.345745][ T4321] chnl_net:caif_netlink_parms(): no params data found [ 30.369177][ T4326] chnl_net:caif_netlink_parms(): no params data found [ 30.396934][ T4327] chnl_net:caif_netlink_parms(): no params data found [ 30.404993][ T4322] chnl_net:caif_netlink_parms(): no params data found [ 30.426519][ T4321] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.427752][ T4321] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.429392][ T4321] device bridge_slave_0 entered promiscuous mode [ 30.431448][ T4326] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.432576][ T4326] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.434194][ T4326] device bridge_slave_0 entered promiscuous mode [ 30.446644][ T4321] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.447880][ T4321] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.449474][ T4321] device bridge_slave_1 entered promiscuous mode [ 30.451654][ T4326] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.452743][ T4326] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.454245][ T4326] device bridge_slave_1 entered promiscuous mode [ 30.457540][ T4330] chnl_net:caif_netlink_parms(): no params data found [ 30.468251][ T4327] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.469467][ T4327] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.471097][ T4327] device bridge_slave_0 entered promiscuous mode [ 30.487131][ T4327] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.488415][ T4327] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.490137][ T4327] device bridge_slave_1 entered promiscuous mode [ 30.494730][ T4326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.506775][ T4321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.511380][ T4326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.521033][ T4321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.523702][ T4327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.525468][ T4322] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.526650][ T4322] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.528100][ T4322] device bridge_slave_0 entered promiscuous mode [ 30.530805][ T4326] team0: Port device team_slave_0 added [ 30.539049][ T4327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.540459][ T4330] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.541663][ T4330] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.543200][ T4330] device bridge_slave_0 entered promiscuous mode [ 30.544930][ T4322] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.546246][ T4322] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.547720][ T4322] device bridge_slave_1 entered promiscuous mode [ 30.549461][ T4326] team0: Port device team_slave_1 added [ 30.551650][ T4321] team0: Port device team_slave_0 added [ 30.559186][ T4330] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.560420][ T4330] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.561925][ T4330] device bridge_slave_1 entered promiscuous mode [ 30.571281][ T4321] team0: Port device team_slave_1 added [ 30.575160][ T4327] team0: Port device team_slave_0 added [ 30.583803][ T4322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.590191][ T4327] team0: Port device team_slave_1 added [ 30.591566][ T4326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.592649][ T4326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.597509][ T4326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.600858][ T4322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.602536][ T4321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.603788][ T4321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.608014][ T4321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.611226][ T4330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.616892][ T4327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.617985][ T4327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.621900][ T4327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.624428][ T4327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.625767][ T4327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.629859][ T4327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.632001][ T4326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.633104][ T4326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.637424][ T4326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.641650][ T4321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.642741][ T4321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.646986][ T4321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.650400][ T4330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.663187][ T4330] team0: Port device team_slave_0 added [ 30.665197][ T4330] team0: Port device team_slave_1 added [ 30.667701][ T4322] team0: Port device team_slave_0 added [ 30.669360][ T4322] team0: Port device team_slave_1 added [ 30.736760][ T4327] device hsr_slave_0 entered promiscuous mode [ 30.785664][ T4327] device hsr_slave_1 entered promiscuous mode [ 30.866651][ T4321] device hsr_slave_0 entered promiscuous mode [ 30.905647][ T4321] device hsr_slave_1 entered promiscuous mode [ 30.945502][ T4321] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.946789][ T4321] Cannot create hsr debugfs directory [ 30.976742][ T4326] device hsr_slave_0 entered promiscuous mode [ 31.015642][ T4326] device hsr_slave_1 entered promiscuous mode [ 31.055535][ T4326] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.056706][ T4326] Cannot create hsr debugfs directory [ 31.057936][ T4330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.059099][ T4330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.063367][ T4330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.066274][ T4330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.067355][ T4330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.071313][ T4330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.073480][ T4322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.074625][ T4322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.079083][ T4322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.088528][ T4322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.089682][ T4322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.093862][ T4322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.166484][ T4330] device hsr_slave_0 entered promiscuous mode [ 31.205599][ T4330] device hsr_slave_1 entered promiscuous mode [ 31.255487][ T4330] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.256684][ T4330] Cannot create hsr debugfs directory [ 31.296562][ T4322] device hsr_slave_0 entered promiscuous mode [ 31.335661][ T4322] device hsr_slave_1 entered promiscuous mode [ 31.375805][ T4322] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.377046][ T4322] Cannot create hsr debugfs directory [ 31.487997][ T4326] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.539349][ T4326] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.566729][ T4326] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.607071][ T4321] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.664675][ T4326] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.696584][ T4321] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.736448][ T4321] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.777228][ T4327] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.817376][ T4322] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.859202][ T4321] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.896546][ T4327] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.937297][ T4327] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.977107][ T4322] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 32.026778][ T4322] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 32.066498][ T4322] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 32.108221][ T4327] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 32.183076][ T4330] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 32.211582][ T4330] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.247122][ T4330] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.265763][ T4323] Bluetooth: hci4: command 0x0409 tx timeout [ 32.266904][ T4323] Bluetooth: hci2: command 0x0409 tx timeout [ 32.267953][ T4323] Bluetooth: hci3: command 0x0409 tx timeout [ 32.268966][ T4323] Bluetooth: hci0: command 0x0409 tx timeout [ 32.275529][ T4333] Bluetooth: hci1: command 0x0409 tx timeout [ 32.287153][ T4330] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.366300][ T4326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.380989][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.383285][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.390674][ T4321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.393683][ T4326] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.399406][ T4327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.401711][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.403151][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.404882][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.406386][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.411435][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.416972][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.418775][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.420505][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.421620][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.431130][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.442281][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.443985][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.446453][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.447936][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.449422][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.453111][ T4321] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.454777][ T4327] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.460205][ T4322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.464676][ T4330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.466959][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.468815][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.470296][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.475476][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.477137][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.478501][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.479554][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.480888][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.482557][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.484440][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.491064][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.492686][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.494237][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.495421][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.497466][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.499610][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.501114][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.502721][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.504248][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.505487][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.508209][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.513415][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.515013][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.517663][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.519109][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.520502][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.521905][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.525321][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.527083][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.528507][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.529600][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.532706][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.536411][ T4330] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.539676][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.542865][ T4322] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.544861][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.546794][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.548381][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.549742][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.550801][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.553255][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.557484][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.559979][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.561786][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.563338][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.565518][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.567052][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.573972][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.576576][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.579287][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.581013][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.582910][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.592573][ T4322] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.594192][ T4322] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.600270][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.601807][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.603341][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.605090][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.606376][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.608551][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.610106][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.611643][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.612928][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.614308][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.617538][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.619531][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.621354][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.622906][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.624729][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.628155][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.629620][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.631501][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.632921][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.634436][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.636745][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.638240][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.639378][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.649648][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.651187][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.652645][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.654108][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.656608][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.658537][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.660272][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.662484][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.663947][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.665204][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.668786][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.670250][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.674289][ T4321] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.683677][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.688895][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.690527][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.691990][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.694327][ T1762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.696330][ T1762] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.698710][ T1762] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.701342][ T4326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.704211][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.714001][ T1762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.716535][ T1762] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.736540][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.738060][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.742704][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.744360][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.757170][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.762940][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.764550][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.778824][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.780146][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.783191][ T4322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.796425][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.798067][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.800794][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.804646][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.810965][ T4326] device veth0_vlan entered promiscuous mode [ 32.829241][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.831109][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.837899][ T4326] device veth1_vlan entered promiscuous mode [ 32.845227][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.847155][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.848557][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.849771][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.852104][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.853620][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.856044][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.857495][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.861301][ T4321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.863580][ T4322] device veth0_vlan entered promiscuous mode [ 32.883314][ T4326] device veth0_macvtap entered promiscuous mode [ 32.889828][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.891504][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.893014][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.894745][ T4322] device veth1_vlan entered promiscuous mode [ 32.900764][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.902217][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.903526][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.911396][ T1762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.912997][ T1762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.919678][ T4330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.922548][ T4327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.923940][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.925099][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.927437][ T4326] device veth1_macvtap entered promiscuous mode [ 32.944572][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.946617][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.948078][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.949739][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.951284][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.952829][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.959292][ T4322] device veth0_macvtap entered promiscuous mode [ 32.963607][ T4321] device veth0_vlan entered promiscuous mode [ 32.965862][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.967476][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.968959][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.971785][ T4326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.974273][ T4322] device veth1_macvtap entered promiscuous mode [ 32.977067][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.978522][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.980140][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.982946][ T4321] device veth1_vlan entered promiscuous mode [ 32.990434][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.991953][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.993645][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.002910][ T4326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.006249][ T1762] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.010347][ T1762] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.011960][ T1762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.013903][ T4322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.016639][ T4322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.019105][ T4322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.020327][ T1762] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.021964][ T1762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.028067][ T4327] device veth0_vlan entered promiscuous mode [ 33.031727][ T4327] device veth1_vlan entered promiscuous mode [ 33.034987][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.037019][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.038620][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.040144][ T4322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.041782][ T4322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.043834][ T4322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.048528][ T4326] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.049900][ T4326] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.051383][ T4326] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.052649][ T4326] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.054795][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.057140][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.058516][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.060076][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.064423][ T4321] device veth0_macvtap entered promiscuous mode [ 33.068265][ T4321] device veth1_macvtap entered promiscuous mode [ 33.070720][ T4322] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.072185][ T4322] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.073550][ T4322] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.075087][ T4322] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.079829][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.081404][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.082920][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.084499][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.087567][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.112383][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.114022][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.117759][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.119442][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.121879][ T4321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.125281][ T1762] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.127125][ T1762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.132875][ T4327] device veth0_macvtap entered promiscuous mode [ 33.137521][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.139617][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.141334][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.142948][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.145175][ T4321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.149289][ T4321] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.150694][ T4321] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.152155][ T4321] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.153589][ T4321] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.158689][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.160426][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.161835][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.163451][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.165013][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.174654][ T4327] device veth1_macvtap entered promiscuous mode [ 33.176642][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.177992][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.190471][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.192187][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.202729][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.204399][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.223462][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.225134][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.230229][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.231713][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.251181][ T4330] device veth0_vlan entered promiscuous mode [ 33.256386][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.257476][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.257550][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.259203][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.261739][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.263357][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.265021][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.267327][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.269736][ T4327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.273225][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.274613][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.275755][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.275930][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.277393][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.279963][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.288672][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.290397][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.291953][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.293575][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.295256][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.297589][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.299696][ T4327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.301278][ T4330] device veth1_vlan entered promiscuous mode [ 33.308951][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.310550][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.312023][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.316385][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.320273][ T4327] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.321706][ T4327] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.323177][ T4327] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.324728][ T4327] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.331172][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.332511][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.348299][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.354391][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.355858][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.357714][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.358885][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.363966][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.366408][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.372547][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.374192][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.385212][ T4330] device veth0_macvtap entered promiscuous mode [ 33.405877][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.407164][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.412252][ T1762] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.413758][ T1762] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.466527][ T4330] device veth1_macvtap entered promiscuous mode [ 33.471337][ T4409] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4'. [ 33.489984][ T4411] device ip6gretap0 entered promiscuous mode [ 33.496841][ T1762] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.498656][ T1762] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.502335][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.503868][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.518492][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.524705][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.528626][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.532115][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.533699][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.535298][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.544092][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.552301][ T1762] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.553798][ T1762] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.564233][ T1762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.607990][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.609756][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.611289][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.613155][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.614634][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.642097][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.643690][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.645571][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.647918][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.649292][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.650932][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.683564][ T4428] fuse: Unknown parameter '00000000000000000000' [ 33.684138][ T4330] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.691987][ T4330] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.693549][ T4330] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.694904][ T4330] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.758341][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.759655][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.761115][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.774836][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.776567][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.777923][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.966133][ T4369] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 34.183851][ T4369] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 34.185331][ T4369] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.191333][ T4369] usb 1-1: Product: syz [ 34.192015][ T4369] usb 1-1: Manufacturer: syz [ 34.192835][ T4369] usb 1-1: SerialNumber: syz [ 34.212684][ T4458] device syzkaller0 entered promiscuous mode [ 34.218884][ T4461] device syzkaller0 entered promiscuous mode [ 34.349323][ T4333] Bluetooth: hci1: command 0x041b tx timeout [ 34.349347][ T4323] Bluetooth: hci0: command 0x041b tx timeout [ 34.350255][ T4333] Bluetooth: hci3: command 0x041b tx timeout [ 34.351449][ T4323] Bluetooth: hci2: command 0x041b tx timeout [ 34.352291][ T4333] Bluetooth: hci4: command 0x041b tx timeout [ 34.408331][ T4369] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 34.411061][ T4369] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 34.418794][ T4369] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 34.420685][ T4369] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 34.426631][ T4369] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 34.438755][ T4369] lan78xx: probe of 1-1:1.0 failed with error -71 [ 34.449857][ T4369] usb 1-1: USB disconnect, device number 2 [ 35.134371][ T4493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.141807][ T4493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.055531][ T4514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.067700][ T4514] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.425514][ T4329] Bluetooth: hci4: command 0x040f tx timeout [ 36.426583][ T4329] Bluetooth: hci2: command 0x040f tx timeout [ 36.427544][ T4329] Bluetooth: hci3: command 0x040f tx timeout [ 36.428494][ T4329] Bluetooth: hci0: command 0x040f tx timeout [ 36.429530][ T4329] Bluetooth: hci1: command 0x040f tx timeout [ 36.599222][ T4541] device netdevsim0 entered promiscuous mode [ 36.672144][ T4548] netlink: 4 bytes leftover after parsing attributes in process `syz.4.61'. [ 37.016004][ T4578] netlink: 'syz.0.70': attribute type 3 has an invalid length. [ 37.298317][ T4585] mmap: syz.0.73 (4585) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 37.375512][ T14] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 37.378118][ T14] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 37.673804][ T4594] input: syz0 as /devices/virtual/input/input2 [ 38.021658][ T4600] device syzkaller0 entered promiscuous mode [ 38.038802][ T4602] netlink: 40 bytes leftover after parsing attributes in process `syz.1.79'. [ 38.040451][ T4602] netlink: 40 bytes leftover after parsing attributes in process `syz.1.79'. [ 38.045819][ T4602] netlink: 40 bytes leftover after parsing attributes in process `syz.1.79'. [ 38.147372][ T4605] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.149004][ T4605] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.370984][ T4615] device bridge0 entered promiscuous mode [ 38.394420][ T4615] device bridge0 left promiscuous mode [ 38.506213][ T4333] Bluetooth: hci1: command 0x0419 tx timeout [ 38.507170][ T4333] Bluetooth: hci0: command 0x0419 tx timeout [ 38.508619][ T4333] Bluetooth: hci3: command 0x0419 tx timeout [ 38.509687][ T4333] Bluetooth: hci2: command 0x0419 tx timeout [ 38.510742][ T4333] Bluetooth: hci4: command 0x0419 tx timeout [ 38.657057][ T4627] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 38.939723][ T4637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.951920][ T4637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.153910][ T4640] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.439810][ T4653] netlink: 8 bytes leftover after parsing attributes in process `syz.2.99'. [ 39.610846][ T4669] netlink: 12 bytes leftover after parsing attributes in process `syz.2.106'. [ 39.619414][ T4671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.621006][ T4671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.637388][ T4672] input: syz0 as /devices/virtual/input/input3 [ 39.661419][ T4674] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 39.819944][ T4685] netlink: 104 bytes leftover after parsing attributes in process `syz.2.113'. [ 40.009834][ T27] audit: type=1326 audit(39.980:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4692 comm="syz.4.117" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffba7771a8 code=0x0 [ 40.059169][ T4698] syz.2.119 uses obsolete (PF_INET,SOCK_PACKET) [ 40.246224][ T4710] netlink: 12 bytes leftover after parsing attributes in process `syz.3.125'. [ 40.438154][ T4726] netlink: 4 bytes leftover after parsing attributes in process `syz.3.131'. [ 40.495462][ T4370] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 40.584236][ T4734] loop5: detected capacity change from 0 to 7 [ 40.589786][ T4313] Dev loop5: unable to read RDB block 7 [ 40.590847][ T4313] loop5: AHDI p1 p2 p3 [ 40.591556][ T4313] loop5: partition table partially beyond EOD, truncated [ 40.593767][ T4313] loop5: p1 start 926365495 is beyond EOD, truncated [ 40.594817][ T4313] loop5: p2 start 1702059890 is beyond EOD, truncated [ 40.599174][ T4734] Dev loop5: unable to read RDB block 7 [ 40.600063][ T4734] loop5: AHDI p1 p2 p3 [ 40.600744][ T4734] loop5: partition table partially beyond EOD, truncated [ 40.601867][ T4734] loop5: p1 start 926365495 is beyond EOD, truncated [ 40.602933][ T4734] loop5: p2 start 1702059890 is beyond EOD, truncated [ 40.677450][ T4370] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 40.679357][ T4370] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 40.680872][ T4370] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 40.684718][ T4370] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 40.691407][ T4370] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 40.693848][ T4370] usb 1-1: Product: syz [ 40.694960][ T4370] usb 1-1: Manufacturer: syz [ 40.700428][ T4370] usb 1-1: SerialNumber: syz [ 40.910359][ T4370] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 41.077572][ T4754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.097913][ T4754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.620387][ T4374] usb 1-1: USB disconnect, device number 3 [ 41.623335][ T4374] usblp0: removed [ 41.803793][ T4803] netlink: 16 bytes leftover after parsing attributes in process `syz.4.164'. [ 41.830149][ T4805] netlink: 204 bytes leftover after parsing attributes in process `syz.0.163'. [ 41.852299][ T4805] syz.0.163 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 41.893013][ T4805] netlink: 84 bytes leftover after parsing attributes in process `syz.0.163'. [ 41.936243][ T4805] netlink: 64 bytes leftover after parsing attributes in process `syz.0.163'. [ 42.040799][ T4818] netlink: 'syz.2.170': attribute type 7 has an invalid length. [ 42.131525][ T4814] netlink: 'syz.4.169': attribute type 1 has an invalid length. [ 42.133151][ T4814] netlink: 'syz.4.169': attribute type 10 has an invalid length. [ 42.134457][ T4814] netlink: 4 bytes leftover after parsing attributes in process `syz.4.169'. [ 42.708189][ T4830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.710544][ T4830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.162708][ T4852] device syzkaller0 entered promiscuous mode [ 43.224892][ T27] audit: type=1326 audit(43.190:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4848 comm="syz.1.184" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff961771a8 code=0x7ffc0000 [ 43.279824][ T27] audit: type=1326 audit(43.250:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4848 comm="syz.1.184" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=59 compat=0 ip=0xffff961771a8 code=0x7ffc0000 [ 43.284432][ T27] audit: type=1326 audit(43.250:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4848 comm="syz.1.184" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff961771a8 code=0x7ffc0000 [ 43.295870][ T27] audit: type=1326 audit(43.270:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4848 comm="syz.1.184" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=194 compat=0 ip=0xffff961771a8 code=0x7ffc0000 [ 43.311319][ T27] audit: type=1326 audit(43.270:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4848 comm="syz.1.184" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff961771a8 code=0x7ffc0000 [ 43.321465][ T27] audit: type=1326 audit(43.270:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4848 comm="syz.1.184" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff961771a8 code=0x7ffc0000 [ 43.328530][ T27] audit: type=1326 audit(43.270:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4848 comm="syz.1.184" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff961771a8 code=0x7ffc0000 [ 43.341988][ T27] audit: type=1326 audit(43.270:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4848 comm="syz.1.184" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffff961771a8 code=0x7ffc0000 [ 43.349023][ T27] audit: type=1326 audit(43.270:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4848 comm="syz.1.184" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff961771a8 code=0x7ffc0000 [ 44.279860][ T4883] netlink: 'syz.0.196': attribute type 2 has an invalid length. [ 44.457494][ T4885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.459050][ T4885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.465875][ T4896] loop5: detected capacity change from 0 to 7 [ 44.470164][ T4896] Dev loop5: unable to read RDB block 7 [ 44.471164][ T4896] loop5: unable to read partition table [ 44.472102][ T4896] loop5: partition table beyond EOD, truncated [ 44.473081][ T4896] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 45.463515][ T4923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.465087][ T4923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.733675][ T4939] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 45.963578][ T4961] __nla_validate_parse: 1 callbacks suppressed [ 45.963590][ T4961] netlink: 52 bytes leftover after parsing attributes in process `syz.0.229'. [ 45.993527][ T4962] Zero length message leads to an empty skb [ 46.093836][ T4970] netlink: 8 bytes leftover after parsing attributes in process `syz.0.233'. [ 46.411443][ T4994] ptrace attach of "./syz-executor exec"[4327] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ fuse ./file0   h   \x07 &  ûÿÿs\x09 /dev/video# [ 46.582475][ T5010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.606071][ T5010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.853903][ T5017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.875332][ T5017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.210748][ T5028] netlink: 4 bytes leftover after parsing attributes in process `syz.1.254'. [ 47.780105][ T5050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.783012][ T5050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.046358][ T5056] device syzkaller1 entered promiscuous mode [ 48.353310][ T5068] netlink: 72 bytes leftover after parsing attributes in process `syz.4.270'. [ 48.623711][ T5083] netlink: 8 bytes leftover after parsing attributes in process `syz.4.275'. [ 48.888638][ T5099] netlink: 12 bytes leftover after parsing attributes in process `syz.3.278'. [ 48.917508][ T5103] netlink: 4 bytes leftover after parsing attributes in process `syz.3.280'. [ 49.319358][ T5124] netlink: 'syz.0.288': attribute type 10 has an invalid length. [ 49.330376][ T5124] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.333099][ T5124] bond0: (slave team0): Enslaving as an active interface with an up link [ 49.460381][ T5126] device syzkaller0 entered promiscuous mode [ 49.833835][ T5140] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 49.962832][ T5149] xt_hashlimit: size too large, truncated to 1048576 [ 50.150316][ T27] kauditd_printk_skb: 24 callbacks suppressed [ 50.150328][ T27] audit: type=1326 audit(50.120:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5158 comm="syz.3.303" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff973771a8 code=0x7ffc0000 [ 50.154821][ T27] audit: type=1326 audit(50.120:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5158 comm="syz.3.303" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=5 compat=0 ip=0xffff973771a8 code=0x7ffc0000 [ 50.168231][ T27] audit: type=1326 audit(50.120:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5158 comm="syz.3.303" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff973771a8 code=0x7ffc0000 [ 50.380670][ T5172] netlink: 4 bytes leftover after parsing attributes in process `syz.3.309'. [ 50.548627][ T5180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.550291][ T5180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.821308][ T5198] tipc: Started in network mode [ 50.822253][ T5198] tipc: Node identity e26399d91583, cluster identity 4711 [ 50.823363][ T5198] tipc: Enabled bearer , priority 0 [ 50.825038][ T5198] device syzkaller0 entered promiscuous mode [ 50.882844][ T27] audit: type=1326 audit(50.850:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5201 comm="syz.0.324" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff999771a8 code=0x7ffc0000 [ 50.887251][ T27] audit: type=1326 audit(50.860:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5201 comm="syz.0.324" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff999771a8 code=0x7ffc0000 [ 50.891512][ T5198] tipc: Resetting bearer [ 50.891969][ T27] audit: type=1326 audit(50.860:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5201 comm="syz.0.324" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=180 compat=0 ip=0xffff999771a8 code=0x7ffc0000 [ 50.897181][ T5197] tipc: Resetting bearer [ 50.908122][ T27] audit: type=1326 audit(50.860:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5201 comm="syz.0.324" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff999771a8 code=0x7ffc0000 [ 50.916068][ T27] audit: type=1326 audit(50.860:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5201 comm="syz.0.324" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff999771a8 code=0x7ffc0000 [ 50.987011][ T5197] tipc: Disabling bearer [ 51.103283][ T5215] netlink: 16 bytes leftover after parsing attributes in process `syz.3.329'. [ 51.260740][ T5225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.262283][ T5225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.276812][ T5225] xt_hashlimit: size too large, truncated to 1048576 [ 52.630606][ T5251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.634358][ T5251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.040213][ T5258] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 53.181699][ T5264] process 'syz.2.348' launched './file1' with NULL argv: empty string added [ 53.486097][ T5277] netlink: 32 bytes leftover after parsing attributes in process `syz.2.352'. [ 53.625545][ T5285] device syzkaller0 entered promiscuous mode [ 53.989611][ T5309] netlink: 'syz.1.366': attribute type 6 has an invalid length. [ 54.272486][ T5339] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 54.274941][ T5339] 8021q: VLANs not supported on hsr0 [ 54.430152][ T5354] xt_hashlimit: size too large, truncated to 1048576 [ 54.743765][ T5366] netlink: 'syz.0.386': attribute type 10 has an invalid length. [ 54.761876][ T5366] team0: Device vxcan1 is of different type [ 54.821338][ T5372] capability: warning: `syz.4.391' uses deprecated v2 capabilities in a way that may be insecure [ 55.083017][ T5376] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.084401][ T5376] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.397982][ T5390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.401729][ T5390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.555746][ T5376] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.572505][ T5376] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.962349][ T5376] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.963873][ T5376] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.969536][ T5376] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.971076][ T5376] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.285585][ T5394] netlink: 8 bytes leftover after parsing attributes in process `syz.3.401'. [ 56.423842][ T5409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.425349][ T5409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.447365][ T5411] netlink: 16 bytes leftover after parsing attributes in process `syz.1.408'. [ 56.497046][ T5411] device gretap0 entered promiscuous mode [ 56.556640][ T5411] device gretap0 left promiscuous mode [ 56.974682][ T5419] netlink: 68 bytes leftover after parsing attributes in process `syz.1.409'. [ 56.999499][ T5423] ================================================================== [ 57.000910][ T5423] BUG: KASAN: use-after-free in ieee80211_monitor_select_queue+0x20c/0x210 [ 57.002245][ T5423] Read of size 2 at addr ffff0000f18075fb by task syz.4.411/5423 [ 57.003590][ T5423] [ 57.004032][ T5423] CPU: 0 PID: 5423 Comm: syz.4.411 Not tainted syzkaller #0 [ 57.005240][ T5423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 57.006975][ T5423] Call trace: [ 57.007511][ T5423] dump_backtrace+0x1c0/0x1ec [ 57.008317][ T5423] show_stack+0x2c/0x3c [ 57.008993][ T5423] __dump_stack+0x30/0x40 [ 57.009743][ T5423] dump_stack_lvl+0xf4/0x15c [ 57.010561][ T5423] print_address_description+0x88/0x218 [ 57.011487][ T5423] print_report+0x50/0x68 [ 57.012314][ T5423] kasan_report+0xa8/0xfc [ 57.013064][ T5423] __asan_report_load2_noabort+0x2c/0x38 [ 57.013998][ T5423] ieee80211_monitor_select_queue+0x20c/0x210 [ 57.014963][ T5423] netdev_core_pick_tx+0x130/0x320 [ 57.015819][ T5423] __dev_queue_xmit+0x738/0x3118 [ 57.016667][ T5423] dev_queue_xmit+0x24/0x34 [ 57.017449][ T5423] packet_sendmsg+0x2f9c/0x3fd0 [ 57.018311][ T5423] ____sys_sendmsg+0x5c8/0x938 [ 57.019038][ T5423] __sys_sendmsg+0x288/0x374 [ 57.019801][ T5423] __arm64_sys_sendmsg+0x80/0x94 [ 57.020640][ T5423] invoke_syscall+0x98/0x2b4 [ 57.021488][ T5423] el0_svc_common+0x138/0x258 [ 57.022312][ T5423] do_el0_svc+0x58/0x130 [ 57.023054][ T5423] el0_svc+0x58/0x128 [ 57.023721][ T5423] el0t_64_sync_handler+0x84/0xf0 [ 57.024581][ T5423] el0t_64_sync+0x18c/0x190 [ 57.025382][ T5423] [ 57.025743][ T5423] Allocated by task 4371: [ 57.026418][ T5423] kasan_set_track+0x4c/0x80 [ 57.027228][ T5423] kasan_save_alloc_info+0x24/0x30 [ 57.028032][ T5423] __kasan_kmalloc+0xa0/0xb8 [ 57.028809][ T5423] __kmalloc_node_track_caller+0xe0/0x16c [ 57.029771][ T5423] __alloc_skb+0x264/0x714 [ 57.030503][ T5423] __neigh_notify+0x150/0x300 [ 57.031266][ T5423] neigh_cleanup_and_release+0x104/0x3b4 [ 57.032165][ T5423] neigh_remove_one+0x318/0x420 [ 57.032997][ T5423] ___neigh_create+0x450/0x2400 [ 57.033826][ T5423] __neigh_create+0x44/0x58 [ 57.034599][ T5423] ip6_finish_output2+0x1678/0x1840 [ 57.035451][ T5423] ip6_finish_output+0x594/0x92c [ 57.036251][ T5423] ip6_output+0x274/0x500 [ 57.036947][ T5423] ndisc_send_skb+0xc30/0x164c [ 57.037705][ T5423] ndisc_send_rs+0x37c/0x518 [ 57.038448][ T5423] addrconf_dad_completed+0x654/0xb28 [ 57.039289][ T5423] addrconf_dad_work+0x93c/0x10d4 [ 57.040053][ T5423] process_one_work+0x7f8/0x13a4 [ 57.040816][ T5423] worker_thread+0x8c4/0xfec [ 57.041533][ T5423] kthread+0x250/0x2d8 [ 57.042222][ T5423] ret_from_fork+0x10/0x20 [ 57.042969][ T5423] [ 57.043380][ T5423] The buggy address belongs to the object at ffff0000f1807400 [ 57.043380][ T5423] which belongs to the cache kmalloc-512 of size 512 [ 57.045767][ T5423] The buggy address is located 507 bytes inside of [ 57.045767][ T5423] 512-byte region [ffff0000f1807400, ffff0000f1807600) [ 57.047931][ T5423] [ 57.048307][ T5423] The buggy address belongs to the physical page: [ 57.049302][ T5423] page:00000000fb33cbe8 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff0000f1804000 pfn:0x131804 [ 57.051345][ T5423] head:00000000fb33cbe8 order:2 compound_mapcount:0 compound_pincount:0 [ 57.052697][ T5423] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 57.054130][ T5423] raw: 05ffc00000010200 fffffc000375de08 fffffc0003c60608 ffff0000c0002600 [ 57.055518][ T5423] raw: ffff0000f1804000 0000000000100003 00000001ffffffff 0000000000000000 [ 57.056917][ T5423] page dumped because: kasan: bad access detected [ 57.057871][ T5423] [ 57.058265][ T5423] Memory state around the buggy address: [ 57.059142][ T5423] ffff0000f1807480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 57.060391][ T5423] ffff0000f1807500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 57.061653][ T5423] >ffff0000f1807580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 57.062914][ T5423] ^ [ 57.064156][ T5423] ffff0000f1807600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 57.065370][ T5423] ffff0000f1807680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 57.066552][ T5423] ================================================================== [ 57.067735][ T5423] Disabling lock debugging due to kernel taint [ 57.105126][ T5419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.111984][ T5419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.385974][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 64.505866][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.506946][ T2062] ieee802154 phy1 wpan1: encryption failed: -22