last executing test programs: 9.128198441s ago: executing program 1 (id=88): socket$l2tp(0x2, 0x2, 0x73) r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r1, &(0x7f0000006800)="10", 0x20) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r2, 0xffffffffffffffff, 0x0) 8.238761569s ago: executing program 0 (id=91): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000e40)={0x30, r1, 0x5, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) fcntl$notify(r0, 0x402, 0x2e) sendmsg$NL80211_CMD_CONNECT(r0, 0x0, 0x24004055) 8.153845281s ago: executing program 0 (id=92): ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x7e, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa0086dd60f53a0400483a00fe8000000000000000000000000000bbff020000000000000000000000000001020090780000050060f19f0000000000fc010000000000001000000000000000fc0200000000000000000000000000003a0100000000000007080000000000008000000000000000"], 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x104, 0x4, 0x3c8, 0xe8, 0x1d0, 0x1d0, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@arp={@remote, @multicast2, 0x0, 0x0, 0x7, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x100}}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0xfc, {@empty, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@multicast, {[0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bond_slave_1\x00', 'ipvlan1\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'team_slave_1\x00', @random="01320136b1ff"}) clock_gettime(0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000200), 0x4) sendmsg$sock(r7, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0xd, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x10}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x2, '\x00', 0x0, @sock_ops}, 0x94) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000001200)='./file2\x00', 0x2800000, &(0x7f0000001240)={[{@test_dummy_encryption_v1}, {@nolazytime}]}, 0x1, 0xbd9, &(0x7f0000000400)="$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") open(&(0x7f0000000000)='./bus\x00', 0x1cd27e, 0x1f6) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 6.351917739s ago: executing program 1 (id=97): socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x4008005}, 0x4000000) read$FUSE(0xffffffffffffffff, &(0x7f0000001a00)={0x2020}, 0x2020) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB='\\\x00\x00\x00\n'], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 4.735665602s ago: executing program 4 (id=106): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) fcntl$lock(r1, 0x0, &(0x7f0000000000)={0x1, 0x4, 0x4, 0x800005fffffffff9}) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000009003940422c021664da010203010902120001000000040904"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x220c) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x9) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r10, 0x0) r11 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r11, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a06e7bc45ff810500000000000058000b480000945f64009400050028925a01000000000000008000f0fffeffa809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) 4.639449644s ago: executing program 0 (id=107): r0 = syz_open_dev$sg(0x0, 0xb, 0x181000) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, @buffer={0x0, 0xb6, &(0x7f0000000140)=""/182}, 0x0, 0x0, 0x10, 0x2d162d200ab291fc, 0x0, 0x0}) pselect6(0x0, 0x0, &(0x7f0000000340)={0x9, 0x3, 0x75677dd7, 0x9, 0x8, 0xa, 0x1, 0x1}, &(0x7f0000000380)={0x635000000, 0xd7, 0x1, 0x101, 0x8, 0x5, 0x2, 0xa}, &(0x7f0000000400), &(0x7f0000000480)={&(0x7f0000000440)={[0x2]}, 0x8}) socket(0x10, 0x3, 0x400000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x524, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0}) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r2, 0xfffffffc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 4.413861559s ago: executing program 0 (id=109): r0 = syz_open_dev$sg(0x0, 0xb, 0x181000) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, @buffer={0x0, 0xb6, &(0x7f0000000140)=""/182}, 0x0, 0x0, 0x10, 0x2d162d200ab291fc, 0x0, 0x0}) pselect6(0x0, 0x0, &(0x7f0000000340)={0x9, 0x3, 0x75677dd7, 0x9, 0x8, 0xa, 0x1, 0x1}, &(0x7f0000000380)={0x635000000, 0xd7, 0x1, 0x101, 0x8, 0x5, 0x2, 0xa}, &(0x7f0000000400), &(0x7f0000000480)={&(0x7f0000000440)={[0x2]}, 0x8}) socket(0x10, 0x3, 0x400000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x524, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0}) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r2, 0xfffffffc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 4.34528198s ago: executing program 1 (id=110): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000001080)=0x91b) read$dsp(r1, &(0x7f0000001300)=""/4096, 0x1000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x64a, &(0x7f0000000040)={0x0, 0x8835c, 0xc000, 0x20000a, 0x33c}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x4}, {0xe, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x24040005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) write$dsp(r0, &(0x7f00000012c0), 0x0) r4 = socket$kcm(0xa, 0x3, 0x73) sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xff, @local, 0x7, 0x2}, 0x80, 0x0}, 0x0) 4.316109131s ago: executing program 2 (id=111): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000280)={0x1, &(0x7f00000000c0)=[{0x6, 0x9, 0xc, 0xb6}]}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000300)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x1e}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x2, "d7e52daa2ec8f15dcc0a0e48faba015240ad121db4f43412d022b42d33f0e1e6", "0c8af8cf1598236341a0002ccc2303467f8a79288defb62d4e875117742daf95ed83a5366e70d1ce23bc6c432f7f69b1", "f25dd29449dc369226794bcabad36636b7437414a7be5a1307505315", {"4771cf0c88479fa000c36464af1462c1", "485b83f729a54530eba3b46ca252a7ac"}}}}}}}, 0x0) 4.315312311s ago: executing program 0 (id=112): pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x20, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050000006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000000000000000000000000000180000000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB]}, 0x14a) unshare(0x100000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000180)={0x7f6e}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000380)={0x300a, r2}, 0x0) fcntl$setpipe(r0, 0x8, 0x20000000010) ioctl$NBD_DISCONNECT(r0, 0xab08) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = fsopen(&(0x7f0000000000)='9p\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000080)='source', &(0x7f00000019c0)='//\xf2/\x06\b/?\\o\xdc\xea\x95\x9a)\x00bb\x8a\x80\x91\xdf\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6h\xd1\x1d\xac\xaa\xfb\xc7Y\xcd\xc5n\xeb\xab\xf70\x99\xef\x8b0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000e40)={0x30, r1, 0x5, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) fcntl$notify(r0, 0x402, 0x2e) sendmsg$NL80211_CMD_CONNECT(r0, 0x0, 0x24004055) 3.83949732s ago: executing program 3 (id=115): r0 = socket$netlink(0x10, 0x3, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) socket$pppoe(0x18, 0x1, 0x0) 3.571940546s ago: executing program 1 (id=116): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xfffffffb}, 0x5, 0x34, 0x91f}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0x16}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x18000, 0x0, 0x1, 0x5, 0xb, 0x1000}, [@TCA_NETEM_REORDER={0xc, 0x3, {0x7f}}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x3, 0x2, 0xffffff80}}]}]}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000b0}, 0xc0d0) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.931820199s ago: executing program 3 (id=117): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x891c, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffc}}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) socket$kcm(0x11, 0x3, 0x0) close(0xffffffffffffffff) socket$tipc(0x1e, 0x2, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@newtfilter={0xbc, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x80, 0x2, [@TCA_MATCHALL_ACT={0x7c, 0x2, [@m_tunnel_key={0x78, 0x1, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @local}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x0, 0x5, 0x7fff, 0x7}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x7, 0x3}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) 2.575467497s ago: executing program 4 (id=118): ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x7e, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa0086dd60f53a0400483a00fe8000000000000000000000000000bbff020000000000000000000000000001020090780000050060f19f0000000000fc010000000000001000000000000000fc0200000000000000000000000000003a0100000000000007080000000000008000000000000000"], 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x104, 0x4, 0x3c8, 0xe8, 0x1d0, 0x1d0, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@arp={@remote, @multicast2, 0x0, 0x0, 0x7, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x100}}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0xfc, {@empty, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@multicast, {[0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bond_slave_1\x00', 'ipvlan1\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'team_slave_1\x00', @random="01320136b1ff"}) clock_gettime(0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000200), 0x4) sendmsg$sock(r7, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0xd, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x10}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x2, '\x00', 0x0, @sock_ops}, 0x94) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000001200)='./file2\x00', 0x2800000, &(0x7f0000001240)={[{@test_dummy_encryption_v1}, {@nolazytime}]}, 0x1, 0xbd9, &(0x7f0000000400)="$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") open(&(0x7f0000000000)='./bus\x00', 0x1cd27e, 0x1f6) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 1.44907962s ago: executing program 2 (id=119): r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000002c0)={r0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[], 0x32600) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000f00)={'dummy0\x00', &(0x7f00000001c0)=@ethtool_eee={0x50, 0xc, 0x990c, 0x1, 0x8, 0x9, 0x80, 0x3, [0xfff, 0x7]}}) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x190) ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000002cc0)={0x0, [{0x0, 0x4d88, 0x6, &(0x7f0000000640)="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"}, {0x0, 0x0, 0x1ff, 0x0}, {0x3, 0x0, 0x100d5b6, 0x0}, {0x2, 0x0, 0xfffffff8, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x7, 0x0}, {0x2, 0x0, 0xa2d, 0x0}, {0x0, 0x0, 0x1, 0x0}, {0x1, 0x0, 0xf3f, 0x0}, {0x4, 0x0, 0x1000, 0x0}, {0x3, 0x0, 0x6, 0x0}, {0x3, 0x0, 0x1000, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x1545, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x40007, 0x0}]}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r5, 0x4068aea3, &(0x7f00000000c0)={0xdf, 0x0, 0x8000}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000040)={0x4, 0x1, 0x0, 0x2000, &(0x7f0000002000/0x2000)=nil}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000140)={'ip_vti0\x00', 0x1}) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r1) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) vmsplice(r7, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040)=[0x1], 0x0, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e3, &(0x7f0000000180)={r0}) 1.412278201s ago: executing program 0 (id=120): socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x4008005}, 0x4000000) read$FUSE(0xffffffffffffffff, &(0x7f0000001a00)={0x2020}, 0x2020) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB='\\\x00\x00\x00\n'], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 1.259995724s ago: executing program 3 (id=121): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x205, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}}, 0x0) 1.246471794s ago: executing program 1 (id=122): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) io_cancel(0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x3c, 0x4, @thr={&(0x7f0000000080)="6c65d0426381f80fedd857aaca64ad56aaccf78988605405e75189591706755f356cbe886660657251d98649", 0x0}}) 1.172103266s ago: executing program 1 (id=123): ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x7e, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa0086dd60f53a0400483a00fe8000000000000000000000000000bbff020000000000000000000000000001020090780000050060f19f0000000000fc010000000000001000000000000000fc0200000000000000000000000000003a0100000000000007080000000000008000000000000000"], 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x104, 0x4, 0x3c8, 0xe8, 0x1d0, 0x1d0, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@arp={@remote, @multicast2, 0x0, 0x0, 0x7, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x100}}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0xfc, {@empty, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@multicast, {[0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bond_slave_1\x00', 'ipvlan1\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'team_slave_1\x00', @random="01320136b1ff"}) clock_gettime(0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000200), 0x4) sendmsg$sock(r7, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0xd, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x10}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x2, '\x00', 0x0, @sock_ops}, 0x94) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000001200)='./file2\x00', 0x2800000, &(0x7f0000001240)={[{@test_dummy_encryption_v1}, {@nolazytime}]}, 0x1, 0xbd9, &(0x7f0000000400)="$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") open(&(0x7f0000000000)='./bus\x00', 0x1cd27e, 0x1f6) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 1.126869487s ago: executing program 3 (id=124): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x400c809) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) mlockall(0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r1, 0x1) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x4000042, 0x82, 0x1}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042, 0x3}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r4, &(0x7f0000002340)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10, 0x0}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r1, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24040015) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x150, 0x168, 0x9, 0x0, 0xb, 0x380, 0x250, 0x250, 0x380, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0x0, 0xff000000, 0xffffffff, 0xff000000], @ipv6=@private1, [0x0, 0x1fffffeff, 0xff000000, 0xffffff00], 0x4d6, 0x0, 0x0, 0x0, 0x10, 0x2}, {@ipv4=@remote, [0xff000000, 0xffffff00, 0xffffff00, 0xff], @ipv6=@local, [0x7f, 0xff000000, 0xffffff00, 0xff], 0x4d4, 0x34ff, 0x6c, 0x0, 0x12, 0x4}, {@ipv6=@mcast1, [0xffffffff, 0xffffffff, 0xffffffff, 0xff], @ipv6=@mcast2, [0xffffff00, 0x0, 0xffff00, 0xff000000], 0x4d2, 0x0, 0x0, 0x1, 0x0, 0xd}, {@ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}, [0xffffffff, 0xffffff00], @ipv4=@rand_addr=0x64010100, [0xffffffff, 0xffffff00, 0xffffffff], 0x4d4, 0x3502, 0x32, 0x0, 0x0, 0x6}], 0xa, 0x4}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) mmap(&(0x7f0000362000/0x4000)=nil, 0x4000, 0x1000003, 0x769f00b363895638, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000540)='/sys/power/pm_print_times', 0x2242, 0x114) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2001) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f00000037c0), r6) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000003880)={&(0x7f0000003780)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003840)={&(0x7f0000003800)=ANY=[@ANYBLOB="fa000000", @ANYRES16=r8, @ANYBLOB="08052abd7000fbdbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r7, 0x404c534a, &(0x7f0000000400)={0x0, 0x1, 0xbe}) close_range(r6, 0xffffffffffffffff, 0x0) socket(0x1d, 0x2, 0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc957, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7c, 0x6, 0x4d, 0x39cc191a, 0x59, 0x9, 0x3, 0x1, 0x0, 0x6, 0x3, 0x2, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x5, 0x1ff, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x4, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xa, 0x0, 0x171, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0xfffffffe, 0x20000000, 0x82, 0xa34d, 0x44a, 0x100007, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xfffe, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x7, 0xfffffffc, 0x0, 0x0, 0x7, 0x5, 0x32, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x7, 0xfffffffe, 0x9, 0x3fe, 0x401, 0xfc1, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x4, 0x1, 0x2, 0x2, 0x20009, 0x4, 0x9, 0x8, 0x9, 0x7, 0x81, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000000, 0x2, 0xff, 0x40000100, 0x8d2, 0x9, 0x5, 0x7fff, 0x8, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x4f78, 0x2, 0xcc52, 0xe, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10012, 0x403, 0x7ff, 0x2003, 0x0, 0x1, 0xffff, 0xf, 0x6, 0x1c, 0x120000, 0x9, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x0, 0xffffffff, 0x1, 0xfffffff7, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0xa, 0xc8, 0xee1, 0x0, 0x20004, 0x23, 0x7f, 0x100, 0x9602, 0x4, 0x4, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x5, 0x4, 0x28, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1.016168249s ago: executing program 2 (id=125): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x84, 0xe6}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000140)="0c0357", 0x3}], 0x1}}], 0x1, 0x40080) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x100080a2, 0x0, 0x0) 837.188903ms ago: executing program 3 (id=126): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="640000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e64000000003400028008000300810000000800050000000000080004"], 0x64}}, 0x0) 767.696184ms ago: executing program 2 (id=127): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x6, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x0, 0x6, 0x2, 0x7}, {0x1, 0x6, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x80000001, 0x8, 0x101, 0x3}, {0x3, 0x9, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x4, 0x9, 0x51, 0x8}, {0x3, 0x4, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0x0, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x4, 0x0, 0xffffffff}, {0x5, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x6}, {0xfffffffb, 0xffffffff, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0xffff997c, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x8, 0x87, 0x60}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x9}, {0x8, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x803, 0x3, 0x3}, {0x9, 0x1ff, 0x81, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x9, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff15, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0xa, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x0, 0x80000000, 0x1, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0x8, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0xffff8000, 0x2, 0x53ce, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x6, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x3ff, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x401, 0x2b00, 0x10000, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0x102, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0xfffffffd, 0x4}, {0xfff, 0x9, 0x5, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x7, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x8000, 0x7, 0x9}, {0xff, 0x7, 0x5, 0x10001, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x4, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x9, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x2, 0x9, 0x8, 0xa, 0x100}, {0x81, 0x4, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x8000007, 0x402c, 0xffff, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0x43}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x0, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x3, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x7, 0x7}, {0x20000006, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x10000, 0x78}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0xde3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x5, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x10, 0x5}, {0x4, 0x7, 0x104, 0x40078d, 0xffffcff9, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3}, {0x3}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4}, {0x4}, {0x5, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x4}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {}, {0x4}, {0x3}, {0x3}, {0x1}, {0x3}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r6, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r4, 0x10c}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)="da", 0x14}], 0x1}, 0x4000880) 761.625994ms ago: executing program 4 (id=128): syz_80211_join_ibss(&(0x7f0000000000)='wlan1\x00', &(0x7f0000000080)=@random="eff202", 0x3, 0x0) 563.542359ms ago: executing program 3 (id=129): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000180)='./bus\x00', 0x0, 0x0, &(0x7f0000000340)={[], [], 0x3a}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000e40)={0x30, r1, 0x5, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) fcntl$notify(r0, 0x402, 0x2e) sendmsg$NL80211_CMD_CONNECT(r0, 0x0, 0x24004055) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void}, 0x2e) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x60c01, 0x0) 420.020682ms ago: executing program 4 (id=130): set_mempolicy(0x3, &(0x7f0000000040)=0xef, 0xd) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) 280.020124ms ago: executing program 4 (id=131): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r2, {0x3, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 256.535725ms ago: executing program 2 (id=132): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendto$inet6(r1, &(0x7f00000004c0)="c8", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @loopback, 0x80000004}, 0x1c) gettid() getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000340), &(0x7f0000000440)=0x8) 0s ago: executing program 4 (id=133): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_audit(0x10, 0x3, 0x9) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x24, r3, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c000}, 0x200000d0) sendmsg$NL80211_CMD_JOIN_OCB(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x24, r3, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x44010) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.208' (ED25519) to the list of known hosts. syzkaller login: [ 66.064153][ T4178] cgroup: Unknown subsys name 'net' [ 66.188522][ T4178] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.661397][ T4178] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 69.224338][ T4195] chnl_net:caif_netlink_parms(): no params data found [ 69.292841][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 69.330274][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 69.358242][ T4199] chnl_net:caif_netlink_parms(): no params data found [ 69.419443][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.426771][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.435980][ T4195] device bridge_slave_0 entered promiscuous mode [ 69.455138][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.462265][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.470696][ T4195] device bridge_slave_1 entered promiscuous mode [ 69.487154][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 69.574458][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.581585][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.589860][ T4190] device bridge_slave_0 entered promiscuous mode [ 69.603461][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.622366][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.631708][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.639730][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.647964][ T4191] device bridge_slave_0 entered promiscuous mode [ 69.663976][ T4199] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.671182][ T4199] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.679914][ T4199] device bridge_slave_0 entered promiscuous mode [ 69.688404][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.697037][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.705855][ T4190] device bridge_slave_1 entered promiscuous mode [ 69.730787][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.738179][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.747033][ T4191] device bridge_slave_1 entered promiscuous mode [ 69.755671][ T4199] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.763073][ T4199] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.771458][ T4199] device bridge_slave_1 entered promiscuous mode [ 69.792330][ T4195] team0: Port device team_slave_0 added [ 69.822465][ T4195] team0: Port device team_slave_1 added [ 69.843794][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.861016][ T4199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.880105][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.891096][ T4199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.902797][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.934756][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.952587][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.959785][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.968712][ T4192] device bridge_slave_0 entered promiscuous mode [ 69.983539][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.990845][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.999863][ T4192] device bridge_slave_1 entered promiscuous mode [ 70.008372][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.015703][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.042769][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.078302][ T4190] team0: Port device team_slave_0 added [ 70.090880][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.098185][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.124916][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.139244][ T4199] team0: Port device team_slave_0 added [ 70.147706][ T4199] team0: Port device team_slave_1 added [ 70.156354][ T4191] team0: Port device team_slave_0 added [ 70.164146][ T4190] team0: Port device team_slave_1 added [ 70.196475][ T4191] team0: Port device team_slave_1 added [ 70.217029][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.228962][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.248156][ T4199] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.255231][ T4199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.282240][ T4199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.320549][ T4199] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.327692][ T4199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.355019][ T4199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.372562][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.379566][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.406572][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.419865][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.427147][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.453543][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.466213][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.473843][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.500357][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.518651][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.525770][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.552132][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.566106][ T4192] team0: Port device team_slave_0 added [ 70.575112][ T4192] team0: Port device team_slave_1 added [ 70.610228][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.617461][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.644558][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.658641][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.666185][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.692750][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.709343][ T4195] device hsr_slave_0 entered promiscuous mode [ 70.716682][ T4195] device hsr_slave_1 entered promiscuous mode [ 70.759077][ T4199] device hsr_slave_0 entered promiscuous mode [ 70.766925][ T4199] device hsr_slave_1 entered promiscuous mode [ 70.774158][ T4199] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.782487][ T4199] Cannot create hsr debugfs directory [ 70.806238][ T4191] device hsr_slave_0 entered promiscuous mode [ 70.813572][ T4191] device hsr_slave_1 entered promiscuous mode [ 70.820372][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.828157][ T4191] Cannot create hsr debugfs directory [ 70.847264][ T4190] device hsr_slave_0 entered promiscuous mode [ 70.854749][ T4190] device hsr_slave_1 entered promiscuous mode [ 70.861645][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.869494][ T4190] Cannot create hsr debugfs directory [ 70.902879][ T13] Bluetooth: hci1: command 0x0409 tx timeout [ 70.909753][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 70.912351][ T2288] Bluetooth: hci3: command 0x0409 tx timeout [ 70.917787][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 70.975289][ T4192] device hsr_slave_0 entered promiscuous mode [ 70.982103][ T2288] Bluetooth: hci4: command 0x0409 tx timeout [ 70.988752][ T4192] device hsr_slave_1 entered promiscuous mode [ 70.995597][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.003612][ T4192] Cannot create hsr debugfs directory [ 71.301595][ T4199] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.313603][ T4199] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.329206][ T4199] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.340013][ T4199] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.391523][ T4191] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.401374][ T4191] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.420476][ T4191] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.430354][ T4191] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.466396][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.473332][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.521141][ T4195] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 71.531702][ T4195] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.545006][ T4199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.558518][ T4195] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.589804][ T4195] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 71.614739][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.629788][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.650084][ T4199] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.664657][ T4192] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.685002][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.694779][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.705373][ T3094] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.712863][ T3094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.722566][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.738907][ T4192] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.775487][ T4192] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.792870][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.802726][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.813111][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.820202][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.828539][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.838863][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.864034][ T4192] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.907856][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.917302][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.926540][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.936521][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.947836][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.957706][ T4190] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.976584][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.987534][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.996988][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.006977][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.016502][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.025986][ T4190] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.040435][ T4199] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.053890][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.063050][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.075360][ T4190] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.091220][ T4190] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.103341][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.126024][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.140848][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.153378][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.169661][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.176916][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.193765][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.224990][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.237644][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.250225][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.257546][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.281398][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.309556][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.318953][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.328335][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.345432][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.367087][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.377458][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.386960][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.395948][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.403389][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.411460][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.435028][ T4199] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.456678][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.466095][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.477287][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.485978][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.494147][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.504054][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.513333][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.523225][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.531702][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.544168][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.556362][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.566145][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.573283][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.586153][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.598793][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.620323][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.629978][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.640299][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.648897][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.658118][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.677926][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.700159][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.709508][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.719475][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.729479][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.739288][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.753333][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.795852][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.809580][ T4195] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.822383][ T4195] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.840715][ T4199] device veth0_vlan entered promiscuous mode [ 72.850068][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.865684][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.878223][ T3094] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.885479][ T3094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.894253][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.906035][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.915467][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.925707][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.934511][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.944104][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.953476][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.962069][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.970700][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.979663][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.983095][ T4237] Bluetooth: hci3: command 0x041b tx timeout [ 72.989894][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.001116][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.010334][ T4237] Bluetooth: hci2: command 0x041b tx timeout [ 73.017123][ T4237] Bluetooth: hci0: command 0x041b tx timeout [ 73.029120][ T4237] Bluetooth: hci1: command 0x041b tx timeout [ 73.037647][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.054176][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.062936][ T4236] Bluetooth: hci4: command 0x041b tx timeout [ 73.070541][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.080557][ T3094] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.087704][ T3094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.096755][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.105485][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.113903][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.123285][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.132327][ T3094] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.139607][ T3094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.149785][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.179083][ T4199] device veth1_vlan entered promiscuous mode [ 73.194386][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.213287][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.223711][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.250491][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.261368][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.277040][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.288001][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.300311][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.308016][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.317461][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.370204][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.380520][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.390149][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.399687][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.409430][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.418785][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.427737][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.436601][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.450604][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.476204][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.488820][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.497004][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.504900][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.518518][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.538438][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.572395][ T634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.588867][ T634] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.600605][ T634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.610694][ T634] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.621839][ T634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.631036][ T634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.664040][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.683337][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.700416][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.710113][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.719521][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.731397][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.740975][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.764567][ T4199] device veth0_macvtap entered promiscuous mode [ 73.786004][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.799187][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.815930][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.844135][ T4199] device veth1_macvtap entered promiscuous mode [ 73.868630][ T4191] device veth0_vlan entered promiscuous mode [ 73.913086][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.932742][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.945835][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.955319][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.965197][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.980144][ T4191] device veth1_vlan entered promiscuous mode [ 74.000370][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.019714][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.031670][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.041509][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.053510][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.061469][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.105583][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.121539][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.137817][ T3048] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.151165][ T3048] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.163729][ T3048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.181781][ T4199] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.194788][ T4199] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.204805][ T4199] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.214456][ T4199] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.252341][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.260031][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.277490][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.290322][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.319919][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.330078][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.344483][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.363919][ T4191] device veth0_macvtap entered promiscuous mode [ 74.419923][ T4191] device veth1_macvtap entered promiscuous mode [ 74.450846][ T3048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.461123][ T3048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.483802][ T4192] device veth0_vlan entered promiscuous mode [ 74.495310][ T3048] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.510628][ T3048] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.521522][ T3048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.535654][ T3048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.545132][ T3048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.554753][ T3048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.597886][ T4192] device veth1_vlan entered promiscuous mode [ 74.615139][ T3048] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.625137][ T3048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.635109][ T3048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.645685][ T3048] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.653922][ T3048] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.678715][ T4195] device veth0_vlan entered promiscuous mode [ 74.697822][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.707981][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.717911][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.728349][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.738291][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.757008][ T4190] device veth0_vlan entered promiscuous mode [ 74.763994][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.776736][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.788450][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.796237][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.808385][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.835327][ T4195] device veth1_vlan entered promiscuous mode [ 74.844187][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.853736][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.863009][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.873214][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.882470][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.891519][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.904826][ T4192] device veth0_macvtap entered promiscuous mode [ 74.923630][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.936091][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.948061][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.966554][ T4190] device veth1_vlan entered promiscuous mode [ 74.975194][ T4192] device veth1_macvtap entered promiscuous mode [ 74.987882][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.996755][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.006360][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.015479][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.025469][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.035495][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.053067][ T4191] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.062856][ T4237] Bluetooth: hci1: command 0x040f tx timeout [ 75.068969][ T4237] Bluetooth: hci0: command 0x040f tx timeout [ 75.075289][ T4191] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.084269][ T4237] Bluetooth: hci2: command 0x040f tx timeout [ 75.087202][ T4191] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.090577][ T4237] Bluetooth: hci3: command 0x040f tx timeout [ 75.107286][ T4191] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.122958][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.131109][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.140557][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.150441][ T4237] Bluetooth: hci4: command 0x040f tx timeout [ 75.155072][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.201053][ T4195] device veth0_macvtap entered promiscuous mode [ 75.230312][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.246550][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.260419][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.275000][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.292031][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.300433][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.314169][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.333192][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.344262][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.353404][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.366211][ T4195] device veth1_macvtap entered promiscuous mode [ 75.379713][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.402520][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.413031][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.424196][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.435611][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.460855][ T3048] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.473780][ T3048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.484167][ T3048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.494023][ T3048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.519946][ T4192] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.535559][ T4192] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.550813][ T4192] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.566418][ T4192] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.587052][ T4190] device veth0_macvtap entered promiscuous mode [ 75.600682][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.613599][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.628708][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.646359][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.657524][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.668244][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.680648][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.698715][ T4190] device veth1_macvtap entered promiscuous mode [ 75.714778][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.728223][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.740206][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.755553][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.783344][ T3094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.791435][ T3094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.818737][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.840685][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.851331][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.864325][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.874577][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.886233][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.898472][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.913971][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.924065][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.934666][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.972181][ T4195] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.982898][ T4195] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.994213][ T4195] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.003889][ T4195] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.019975][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.035673][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.047198][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.058915][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.069078][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.089746][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.102679][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.119349][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.131771][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.170976][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.179397][ T3048] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.188314][ T3048] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.197772][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.210518][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.219397][ T4280] siw: device registration error -23 [ 76.252503][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.257022][ T4279] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 76.267896][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.288145][ T4279] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 76.294459][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.312817][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.324675][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.337009][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.347390][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.358392][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.389589][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.402869][ T4190] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.411709][ T4190] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.422755][ T4190] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.431552][ T4190] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.451013][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.461767][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.557915][ T3094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.590637][ T3094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.628033][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.649574][ T4283] loop0: detected capacity change from 0 to 512 [ 76.692975][ T4283] ======================================================= [ 76.692975][ T4283] WARNING: The mand mount option has been deprecated and [ 76.692975][ T4283] and is ignored by this kernel. Remove the mand [ 76.692975][ T4283] option from the mount to silence this warning. [ 76.692975][ T4283] ======================================================= [ 76.755052][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.756112][ T4257] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.774065][ T4257] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.789537][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.819067][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.829768][ T4257] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.864478][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.873622][ T4257] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.889608][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.990024][ T3094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.011407][ T3094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.022612][ T4286] bridge0: port 3(syz_tun) entered blocking state [ 77.036483][ T4286] bridge0: port 3(syz_tun) entered disabled state [ 77.047821][ T4286] device syz_tun entered promiscuous mode [ 77.059693][ T4286] bridge0: port 3(syz_tun) entered blocking state [ 77.066608][ T4286] bridge0: port 3(syz_tun) entered forwarding state [ 77.142407][ T4232] Bluetooth: hci3: command 0x0419 tx timeout [ 77.160071][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.173362][ T4287] 9pnet: Insufficient options for proto=fd [ 77.182263][ T4232] Bluetooth: hci2: command 0x0419 tx timeout [ 77.201065][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.234384][ T4232] Bluetooth: hci0: command 0x0419 tx timeout [ 77.243661][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.266568][ T4232] Bluetooth: hci1: command 0x0419 tx timeout [ 77.279271][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.306474][ T4237] Bluetooth: hci4: command 0x0419 tx timeout [ 77.623896][ T4304] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 77.855537][ T4303] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 77.868978][ T4300] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 77.893852][ T4300] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 78.102448][ T4234] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 78.356350][ T4293] loop1: detected capacity change from 0 to 32768 [ 78.382234][ T4234] usb 1-1: Using ep0 maxpacket: 32 [ 78.493154][ T4293] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.9 (4293) [ 78.524537][ T4234] usb 1-1: config 0 has an invalid interface number: 119 but max is 0 [ 78.553934][ T4234] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 78.591158][ T4234] usb 1-1: config 0 has no interface number 0 [ 78.618603][ T4234] usb 1-1: config 0 interface 119 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 78.690930][ T4293] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 78.712735][ T4293] BTRFS info (device loop1): force zlib compression, level 3 [ 78.720231][ T4293] BTRFS info (device loop1): force clearing of disk cache [ 78.747881][ T4293] BTRFS info (device loop1): setting nodatasum [ 78.755638][ T4323] loop2: detected capacity change from 0 to 4096 [ 78.784925][ T4293] BTRFS info (device loop1): use zlib compression, level 3 [ 78.822426][ T4234] usb 1-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 78.833530][ T4293] BTRFS info (device loop1): allowing degraded mounts [ 78.840373][ T4293] BTRFS info (device loop1): enabling disk space caching [ 78.867421][ T4234] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.891934][ T4234] usb 1-1: Product: syz [ 78.917711][ T4293] BTRFS info (device loop1): disk space caching is enabled [ 78.923065][ T4234] usb 1-1: Manufacturer: syz [ 78.929586][ T4234] usb 1-1: SerialNumber: syz [ 78.942833][ T4293] BTRFS info (device loop1): has skinny extents [ 78.955740][ T4327] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 79.015070][ T4234] usb 1-1: config 0 descriptor?? [ 79.074066][ T26] audit: type=1800 audit(1782982476.890:2): pid=4323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.12" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 79.101526][ T4234] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.119/input/input5 [ 79.285466][ T4293] BTRFS info (device loop1): enabling ssd optimizations [ 79.368504][ T4293] BTRFS info (device loop1): clearing free space tree [ 79.417213][ T4293] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 79.475734][ T4293] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 79.514356][ T4266] usb 1-1: USB disconnect, device number 2 [ 79.556748][ T1111] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 79.962256][ T1111] usb 3-1: unable to get BOS descriptor or descriptor too short [ 80.032164][ T1111] usb 3-1: no configurations [ 80.036916][ T1111] usb 3-1: can't read configurations, error -22 [ 80.819291][ T4358] loop4: detected capacity change from 0 to 32768 [ 80.986654][ T4358] JBD2: Ignoring recovery information on journal [ 81.154948][ T4358] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 81.441695][ T26] audit: type=1804 audit(1782982479.250:3): pid=4358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.14" name="/newroot/2/file1/bus" dev="loop4" ino=17058 res=1 errno=0 [ 81.512172][ T4403] Zero length message leads to an empty skb [ 81.679851][ T4195] ocfs2: Unmounting device (7,4) on (node local) [ 82.085544][ T4418] loop2: detected capacity change from 0 to 512 [ 82.381549][ T4424] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 82.427461][ T4424] loop4: detected capacity change from 0 to 4096 [ 82.447271][ T4425] 9pnet: Insufficient options for proto=fd [ 82.530393][ T4424] EXT4-fs (loop4): Test dummy encryption mode enabled [ 82.679528][ T4424] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption=v1,nolazytime,,errors=continue. Quota mode: writeback. [ 83.454141][ T4449] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 83.782302][ T4235] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 83.808880][ T4465] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.29'. [ 84.052004][ T4235] usb 5-1: Using ep0 maxpacket: 32 [ 84.192329][ T4235] usb 5-1: config 0 has an invalid interface number: 119 but max is 0 [ 84.200649][ T4235] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 84.214615][ T4235] usb 5-1: config 0 has no interface number 0 [ 84.251241][ T4235] usb 5-1: config 0 interface 119 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 84.300454][ T4478] loop0: detected capacity change from 0 to 512 [ 84.447471][ T4487] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 84.486122][ T4487] loop2: detected capacity change from 0 to 4096 [ 84.773234][ T4235] usb 5-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 84.819095][ T4490] 9pnet: Insufficient options for proto=fd [ 84.828789][ T4487] EXT4-fs (loop2): Test dummy encryption mode enabled [ 84.864955][ T4235] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.882967][ T4235] usb 5-1: Product: syz [ 84.894134][ T4235] usb 5-1: Manufacturer: syz [ 84.900549][ T4487] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption=v1,nolazytime,,errors=continue. Quota mode: writeback. [ 84.926426][ T4235] usb 5-1: SerialNumber: syz [ 84.939481][ T4235] usb 5-1: config 0 descriptor?? [ 84.994384][ T4235] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.119/input/input6 [ 85.304409][ T4388] usb 5-1: USB disconnect, device number 2 [ 85.493929][ T4503] netlink: 'syz.0.37': attribute type 21 has an invalid length. [ 85.507576][ T4503] netlink: 'syz.0.37': attribute type 6 has an invalid length. [ 85.516462][ T4503] netlink: 132 bytes leftover after parsing attributes in process `syz.0.37'. [ 85.632765][ T4509] netlink: 'syz.0.38': attribute type 10 has an invalid length. [ 85.669425][ T4509] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.689396][ T4509] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 85.719571][ T4509] syz.0.38 (4509) used greatest stack depth: 20976 bytes left [ 85.852857][ T4513] netlink: 'syz.0.41': attribute type 1 has an invalid length. [ 85.860641][ T4513] netlink: 'syz.0.41': attribute type 4 has an invalid length. [ 85.889822][ T4513] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.41'. [ 86.072486][ T4522] device bridge_slave_1 left promiscuous mode [ 86.080154][ T4522] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.159496][ T4294] Set syz1 is full, maxelem 65536 reached [ 86.196287][ T4522] device bridge_slave_0 left promiscuous mode [ 86.226751][ T4522] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.395319][ T4532] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 86.504400][ T4534] loop0: detected capacity change from 0 to 4096 [ 86.639402][ T4534] EXT4-fs (loop0): Test dummy encryption mode enabled [ 86.747324][ T4534] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption=v1,nolazytime,,errors=continue. Quota mode: writeback. [ 86.835749][ T7] cfg80211: failed to load regulatory.db [ 87.640562][ T4552] sctp: [Deprecated]: syz.0.49 (pid 4552) Use of struct sctp_assoc_value in delayed_ack socket option. [ 87.640562][ T4552] Use struct sctp_sack_info instead [ 87.838175][ T4562] netlink: 'syz.4.58': attribute type 2 has an invalid length. [ 87.871428][ T4562] netlink: 132 bytes leftover after parsing attributes in process `syz.4.58'. [ 87.891971][ T4235] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 88.142012][ T4235] usb 3-1: Using ep0 maxpacket: 32 [ 88.154089][ T4578] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 88.292095][ T4578] loop3: detected capacity change from 0 to 4096 [ 88.384662][ T4578] EXT4-fs (loop3): Test dummy encryption mode enabled [ 88.422359][ T4235] usb 3-1: config 0 has an invalid interface number: 119 but max is 0 [ 88.478238][ T4235] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 88.536650][ T4578] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,nolazytime,,errors=continue. Quota mode: writeback. [ 88.660703][ T4235] usb 3-1: config 0 has no interface number 0 [ 88.667400][ T4235] usb 3-1: config 0 interface 119 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 88.872241][ T4235] usb 3-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 88.894159][ T4235] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.922782][ T4235] usb 3-1: Product: syz [ 88.929941][ T4235] usb 3-1: Manufacturer: syz [ 88.957476][ T4592] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 88.991354][ T4235] usb 3-1: SerialNumber: syz [ 89.042347][ T4235] usb 3-1: config 0 descriptor?? [ 89.134012][ T4235] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.119/input/input7 [ 89.429813][ T4607] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 90.064071][ T4236] usb 3-1: USB disconnect, device number 4 [ 90.406076][ T26] audit: type=1326 audit(1782982488.230:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4615 comm="syz.3.71" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f52cb416e59 code=0x0 [ 90.682371][ T4628] netlink: 'syz.2.76': attribute type 10 has an invalid length. [ 90.719804][ T4628] netlink: 2 bytes leftover after parsing attributes in process `syz.2.76'. [ 90.730695][ T4628] device bond0 entered promiscuous mode [ 90.738769][ T4628] device bond_slave_0 entered promiscuous mode [ 90.745981][ T4628] device bond_slave_1 entered promiscuous mode [ 90.752894][ T4628] bridge0: port 3(bond0) entered blocking state [ 90.759413][ T4628] bridge0: port 3(bond0) entered disabled state [ 90.790167][ T4628] bridge0: port 3(bond0) entered blocking state [ 90.796592][ T4628] bridge0: port 3(bond0) entered forwarding state [ 90.829944][ T4634] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 90.855005][ T4635] netlink: 'syz.3.78': attribute type 10 has an invalid length. [ 90.871366][ T4635] bond0: (slave wlan1): Opening slave failed [ 91.128930][ T4603] ODEBUG: Out of memory. ODEBUG disabled [ 91.260839][ T4634] loop0: detected capacity change from 0 to 4096 [ 91.946008][ T4634] EXT4-fs (loop0): Test dummy encryption mode enabled [ 92.162844][ T4634] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption=v1,nolazytime,,errors=continue. Quota mode: writeback. [ 92.342087][ T4236] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 92.582035][ T4235] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 92.643684][ T4644] loop4: detected capacity change from 0 to 32768 [ 92.734430][ T4644] XFS (loop4): Mounting V5 Filesystem [ 92.852007][ T4384] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 92.862653][ T4236] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 92.872257][ T4236] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.880380][ T4236] usb 3-1: Product: syz [ 92.882051][ T4235] usb 4-1: Using ep0 maxpacket: 32 [ 92.884692][ T4236] usb 3-1: Manufacturer: syz [ 92.894864][ T4236] usb 3-1: SerialNumber: syz [ 92.897090][ T4644] XFS (loop4): Ending clean mount [ 92.904760][ T4236] usb 3-1: config 0 descriptor?? [ 93.042199][ T4235] usb 4-1: config 0 has an invalid interface number: 119 but max is 0 [ 93.057441][ T4235] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 93.068228][ T4235] usb 4-1: config 0 has no interface number 0 [ 93.090705][ T4235] usb 4-1: config 0 interface 119 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 93.092258][ T4384] usb 2-1: Using ep0 maxpacket: 32 [ 93.143734][ T4195] XFS (loop4): Unmounting Filesystem [ 93.164505][ T4677] device syzkaller0 entered promiscuous mode [ 93.170590][ T4236] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 93.191031][ T4677] tipc: Started in network mode [ 93.196261][ T4677] tipc: Node identity c6153f47191, cluster identity 4711 [ 93.204872][ T4677] tipc: Enabled bearer , priority 0 [ 93.220194][ T4676] tipc: Resetting bearer [ 93.242300][ T4384] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 93.266665][ T4384] usb 2-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 93.279096][ T4384] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 93.300145][ T4676] tipc: Disabling bearer [ 93.319689][ T4235] usb 4-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 93.330020][ T4235] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.343893][ T4235] usb 4-1: Product: syz [ 93.348111][ T4235] usb 4-1: Manufacturer: syz [ 93.353125][ T4235] usb 4-1: SerialNumber: syz [ 93.368523][ T4235] usb 4-1: config 0 descriptor?? [ 93.435310][ T4235] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.119/input/input8 [ 93.452288][ T4384] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 93.481842][ T4384] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.506988][ T4384] usb 2-1: Product: syz [ 93.519250][ T4384] usb 2-1: Manufacturer: syz [ 93.525955][ T4384] usb 2-1: SerialNumber: syz [ 93.574352][ T4384] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 93.586590][ T4384] imon 2-1:155.0: unable to initialize intf0, err -19 [ 93.602134][ T4384] imon:imon_probe: failed to initialize context! [ 93.618997][ T4384] imon 2-1:155.0: unable to register, err -19 [ 93.685515][ T4684] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 93.702136][ T7] usb 4-1: USB disconnect, device number 2 [ 93.831686][ T4686] loop8: detected capacity change from 0 to 7 [ 93.890424][ T4686] Dev loop8: unable to read RDB block 7 [ 93.901480][ T4686] loop8: unable to read partition table [ 93.914567][ T4684] loop0: detected capacity change from 0 to 4096 [ 93.921627][ T4686] loop8: partition table beyond EOD, truncated [ 93.928146][ T4686] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 93.998128][ T4684] EXT4-fs (loop0): Test dummy encryption mode enabled [ 94.200938][ T4684] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption=v1,nolazytime,,errors=continue. Quota mode: writeback. [ 94.382842][ T4693] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 94.877347][ T4651] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 95.224013][ T4235] usb 2-1: USB disconnect, device number 2 [ 95.232361][ T4236] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 95.242959][ T4700] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 95.283733][ T4236] usb 3-1: USB disconnect, device number 5 [ 95.333299][ T4700] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 95.646980][ T4722] loop3: detected capacity change from 0 to 512 [ 96.093906][ T4728] 9pnet: Insufficient options for proto=fd [ 97.522134][ T4236] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 97.844042][ T4751] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.851779][ T4751] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.894404][ T4236] usb 5-1: config 0 has an invalid interface number: 192 but max is 0 [ 97.910175][ T4236] usb 5-1: config 0 has no interface number 0 [ 98.082986][ T4236] usb 5-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 98.096439][ T4236] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.105232][ T4236] usb 5-1: Product: syz [ 98.111060][ T4236] usb 5-1: Manufacturer: syz [ 98.119160][ T4236] usb 5-1: SerialNumber: syz [ 98.131765][ T4236] usb 5-1: config 0 descriptor?? [ 98.473224][ T4236] hub 5-1:0.192: bad descriptor, ignoring hub [ 98.479992][ T4236] hub: probe of 5-1:0.192 failed with error -5 [ 98.507866][ T4236] f81232 5-1:0.192: f81534a converter detected [ 98.552114][ T4236] f81534a ttyUSB0: f81232_set_register failed status: -71 [ 98.562105][ T4236] f81534a: probe of ttyUSB0 failed with error -5 [ 98.602608][ T4236] usb 5-1: USB disconnect, device number 3 [ 98.612344][ T4236] f81232 5-1:0.192: device disconnected [ 98.830179][ T4751] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.871554][ T4751] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.222993][ T4779] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 99.423089][ T4780] loop4: detected capacity change from 0 to 4096 [ 99.482856][ T4780] EXT4-fs (loop4): Test dummy encryption mode enabled [ 99.540925][ T4780] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption=v1,nolazytime,,errors=continue. Quota mode: writeback. [ 99.924699][ T4780] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 99.976297][ T26] audit: type=1800 audit(1782982497.790:5): pid=4780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.118" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 100.001330][ T4751] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.011070][ T4751] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.020377][ T4751] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.029813][ T4751] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.158979][ T4765] device syzkaller0 entered promiscuous mode [ 100.247956][ T4751] syz.0.112 (4751) used greatest stack depth: 20928 bytes left [ 100.577315][ T4805] xt_policy: output policy not valid in PREROUTING and INPUT [ 100.713489][ T4809] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 100.886949][ T4814] netlink: 16 bytes leftover after parsing attributes in process `syz.3.126'. [ 100.918108][ T4814] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551615) [ 100.968616][ T4814] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 101.274813][ T4835] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.667567][ T4846] ------------[ cut here ]------------ [ 101.682155][ T4846] wlan1: Failed check-sdata-in-driver check, flags: 0x4 [ 101.690162][ T4846] WARNING: CPU: 1 PID: 4846 at net/mac80211/driver-ops.h:172 ieee80211_bss_info_change_notify+0x37b/0x550 [ 101.733781][ T4846] Modules linked in: [ 101.738426][ T4846] CPU: 1 PID: 4846 Comm: syz.4.133 Not tainted syzkaller #0 [ 101.746595][ T4846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 101.780558][ T4846] RIP: 0010:ieee80211_bss_info_change_notify+0x37b/0x550 [ 101.790125][ T4846] Code: 74 80 f8 49 8b 84 24 00 06 00 00 49 81 c4 20 06 00 00 48 85 c0 4c 0f 45 e0 48 c7 c7 a0 c5 38 8b 4c 89 e6 89 ea e8 15 4b 71 00 <0f> 0b e9 07 fd ff ff e8 d9 53 3b f8 0f 0b e9 b1 fe ff ff e8 cd 53 [ 101.820603][ T4846] RSP: 0018:ffffc9000325f4c0 EFLAGS: 00010246 [ 101.840867][ T4846] RAX: ade76984b0464400 RBX: 0000000000400000 RCX: 0000000000080000 [ 101.886805][ T4846] RDX: ffffc9000c2e1000 RSI: 0000000000004e7c RDI: 0000000000004e7d [ 101.922068][ T4846] RBP: 0000000000000004 R08: ffff8880b912795b R09: 1ffff11017224f2b [ 101.948472][ T4846] R10: dffffc0000000000 R11: ffffed1017224f2c R12: ffff88805e050000 [ 101.958970][ T4846] R13: ffff88805e051290 R14: ffff888026148e00 R15: ffff88805e052268 [ 101.967941][ T4846] FS: 00007fc426d566c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 101.977269][ T4846] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 101.985896][ T4846] CR2: 00007f52cb6662f8 CR3: 000000005a2e9000 CR4: 00000000003506e0 [ 101.994800][ T4846] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 102.003257][ T4846] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 102.011273][ T4846] Call Trace: [ 102.014955][ T4846] [ 102.017936][ T4846] ? netif_carrier_on+0x101/0x120 [ 102.023670][ T4846] ieee80211_ocb_leave+0x27f/0x320 [ 102.028934][ T4846] __cfg80211_leave_ocb+0x219/0x400 [ 102.034552][ T4846] cfg80211_leave_ocb+0x53/0x70 [ 102.039548][ T4846] cfg80211_change_iface+0x4ec/0xe10 [ 102.045401][ T4846] nl80211_set_interface+0x5b8/0x810 [ 102.051055][ T4846] ? nl80211_dump_interface+0x560/0x560 [ 102.057133][ T4846] ? mutex_lock_nested+0x17/0x20 [ 102.063660][ T4846] ? nl80211_pre_doit+0x27b/0x540 [ 102.068758][ T4846] genl_rcv_msg+0xd0b/0xfa0 [ 102.073927][ T4846] ? genl_bind+0x370/0x370 [ 102.078419][ T4846] ? __dev_queue_xmit+0x1b64/0x2e50 [ 102.084086][ T4846] ? verify_lock_unused+0x140/0x140 [ 102.089454][ T4846] ? dev_queue_xmit+0x20/0x20 [ 102.095416][ T4846] ? nl80211_dump_interface+0x560/0x560 [ 102.101841][ T4846] netlink_rcv_skb+0x1e9/0x430 [ 102.113098][ T4846] ? genl_bind+0x370/0x370 [ 102.119022][ T4846] ? netlink_ack+0xb10/0xb10 [ 102.128587][ T4846] ? down_read+0x1aa/0x2e0 [ 102.134550][ T4846] genl_rcv+0x24/0x40 [ 102.138760][ T4846] netlink_unicast+0x78f/0x940 [ 102.148583][ T4846] netlink_sendmsg+0x8ba/0xbe0 [ 102.154829][ T4846] ? netlink_getsockopt+0x570/0x570 [ 102.160785][ T4846] ? aa_sock_msg_perm+0x94/0x150 [ 102.171104][ T4846] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 102.177940][ T4846] ? security_socket_sendmsg+0x7c/0xa0 [ 102.191075][ T4846] __sys_sendto+0x46d/0x620 [ 102.202700][ T4846] ? __ia32_sys_getpeername+0x80/0x80 [ 102.208741][ T4846] ? lock_chain_count+0x20/0x20 [ 102.214178][ T4846] __x64_sys_sendto+0xda/0xf0 [ 102.219032][ T4846] do_syscall_64+0x4c/0xa0 [ 102.224335][ T4846] ? clear_bhb_loop+0x30/0x80 [ 102.229417][ T4846] ? clear_bhb_loop+0x30/0x80 [ 102.234700][ T4846] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 102.240822][ T4846] RIP: 0033:0x7fc428abe68e [ 102.245782][ T4846] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 102.265872][ T4846] RSP: 002b:00007fc426d54de8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 102.274962][ T4846] RAX: ffffffffffffffda RBX: 00007fc426d566c0 RCX: 00007fc428abe68e [ 102.283774][ T4846] RDX: 0000000000000024 RSI: 00007fc426d54fe0 RDI: 0000000000000006 [ 102.294022][ T4846] RBP: 0000000000000000 R08: 00007fc426d54e64 R09: 000000000000000c [ 102.303287][ T4846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 102.311760][ T4846] R13: 0000000000000000 R14: 00007fc426d54fe0 R15: 0000000000000000 [ 102.321116][ T4846] [ 102.324616][ T4846] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 102.332050][ T4846] CPU: 1 PID: 4846 Comm: syz.4.133 Not tainted syzkaller #0 [ 102.339366][ T4846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 102.349452][ T4846] Call Trace: [ 102.352782][ T4846] [ 102.355956][ T4846] dump_stack_lvl+0x188/0x250 [ 102.360670][ T4846] ? show_regs_print_info+0x20/0x20 [ 102.366013][ T4846] ? load_image+0x410/0x410 [ 102.370572][ T4846] panic+0x2f8/0x850 [ 102.374518][ T4846] ? bpf_jit_dump+0xd0/0xd0 [ 102.379603][ T4846] ? ieee80211_bss_info_change_notify+0x37b/0x550 [ 102.386153][ T4846] __warn+0x248/0x2b0 [ 102.390182][ T4846] ? ieee80211_bss_info_change_notify+0x37b/0x550 [ 102.396814][ T4846] report_bug+0x1b9/0x2e0 [ 102.401413][ T4846] handle_bug+0x3a/0x70 [ 102.405620][ T4846] exc_invalid_op+0x16/0x40 [ 102.410163][ T4846] asm_exc_invalid_op+0x16/0x20 [ 102.415669][ T4846] RIP: 0010:ieee80211_bss_info_change_notify+0x37b/0x550 [ 102.422833][ T4846] Code: 74 80 f8 49 8b 84 24 00 06 00 00 49 81 c4 20 06 00 00 48 85 c0 4c 0f 45 e0 48 c7 c7 a0 c5 38 8b 4c 89 e6 89 ea e8 15 4b 71 00 <0f> 0b e9 07 fd ff ff e8 d9 53 3b f8 0f 0b e9 b1 fe ff ff e8 cd 53 [ 102.442492][ T4846] RSP: 0018:ffffc9000325f4c0 EFLAGS: 00010246 [ 102.448865][ T4846] RAX: ade76984b0464400 RBX: 0000000000400000 RCX: 0000000000080000 [ 102.457012][ T4846] RDX: ffffc9000c2e1000 RSI: 0000000000004e7c RDI: 0000000000004e7d [ 102.465042][ T4846] RBP: 0000000000000004 R08: ffff8880b912795b R09: 1ffff11017224f2b [ 102.473453][ T4846] R10: dffffc0000000000 R11: ffffed1017224f2c R12: ffff88805e050000 [ 102.482009][ T4846] R13: ffff88805e051290 R14: ffff888026148e00 R15: ffff88805e052268 [ 102.490499][ T4846] ? netif_carrier_on+0x101/0x120 [ 102.495585][ T4846] ieee80211_ocb_leave+0x27f/0x320 [ 102.500777][ T4846] __cfg80211_leave_ocb+0x219/0x400 [ 102.506418][ T4846] cfg80211_leave_ocb+0x53/0x70 [ 102.511353][ T4846] cfg80211_change_iface+0x4ec/0xe10 [ 102.516935][ T4846] nl80211_set_interface+0x5b8/0x810 [ 102.522280][ T4846] ? nl80211_dump_interface+0x560/0x560 [ 102.527990][ T4846] ? mutex_lock_nested+0x17/0x20 [ 102.533602][ T4846] ? nl80211_pre_doit+0x27b/0x540 [ 102.538704][ T4846] genl_rcv_msg+0xd0b/0xfa0 [ 102.543304][ T4846] ? genl_bind+0x370/0x370 [ 102.547878][ T4846] ? __dev_queue_xmit+0x1b64/0x2e50 [ 102.553407][ T4846] ? verify_lock_unused+0x140/0x140 [ 102.558682][ T4846] ? dev_queue_xmit+0x20/0x20 [ 102.563492][ T4846] ? nl80211_dump_interface+0x560/0x560 [ 102.569720][ T4846] netlink_rcv_skb+0x1e9/0x430 [ 102.574723][ T4846] ? genl_bind+0x370/0x370 [ 102.579280][ T4846] ? netlink_ack+0xb10/0xb10 [ 102.583926][ T4846] ? down_read+0x1aa/0x2e0 [ 102.588568][ T4846] genl_rcv+0x24/0x40 [ 102.592731][ T4846] netlink_unicast+0x78f/0x940 [ 102.597707][ T4846] netlink_sendmsg+0x8ba/0xbe0 [ 102.602547][ T4846] ? netlink_getsockopt+0x570/0x570 [ 102.608827][ T4846] ? aa_sock_msg_perm+0x94/0x150 [ 102.614189][ T4846] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 102.619691][ T4846] ? security_socket_sendmsg+0x7c/0xa0 [ 102.625233][ T4846] __sys_sendto+0x46d/0x620 [ 102.629804][ T4846] ? __ia32_sys_getpeername+0x80/0x80 [ 102.635441][ T4846] ? lock_chain_count+0x20/0x20 [ 102.640917][ T4846] __x64_sys_sendto+0xda/0xf0 [ 102.645660][ T4846] do_syscall_64+0x4c/0xa0 [ 102.650124][ T4846] ? clear_bhb_loop+0x30/0x80 [ 102.654866][ T4846] ? clear_bhb_loop+0x30/0x80 [ 102.659640][ T4846] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 102.665718][ T4846] RIP: 0033:0x7fc428abe68e [ 102.670617][ T4846] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 102.691459][ T4846] RSP: 002b:00007fc426d54de8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 102.700019][ T4846] RAX: ffffffffffffffda RBX: 00007fc426d566c0 RCX: 00007fc428abe68e [ 102.708213][ T4846] RDX: 0000000000000024 RSI: 00007fc426d54fe0 RDI: 0000000000000006 [ 102.716374][ T4846] RBP: 0000000000000000 R08: 00007fc426d54e64 R09: 000000000000000c [ 102.724482][ T4846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 102.732784][ T4846] R13: 0000000000000000 R14: 00007fc426d54fe0 R15: 0000000000000000 [ 102.741024][ T4846] [ 102.744504][ T4846] Kernel Offset: disabled [ 102.749219][ T4846] Rebooting in 86400 seconds..