last executing test programs: 11.358599561s ago: executing program 4 (id=9): socket$nl_xfrm(0x10, 0x3, 0x6) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x80a, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="b4060000000000007111310000000000851000000200000085000000070000009500000000000000950000000000000059a30f4936e44feb8adb9474dd7d10406d8bb1f72366e95281c2c0be09e6af23f926d804488628cda2ad6fe64f"], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000580)="4f7393b0249442aa2ce63e5d2754928f30b8b2c42d57c869728d97a074a9bae511027dbf5d0fc980dba2f67684e1cc288a09445c5f73f0e62d47efd13d8c3a37d173d47493b7222bbc55e5", 0x4b}], 0x1}}], 0x1, 0x0) 9.910984485s ago: executing program 4 (id=11): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, 0x0, 0x0) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x4000) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)=0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000000)=0x3) 9.557077878s ago: executing program 4 (id=17): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) 8.658107425s ago: executing program 0 (id=18): io_pgetevents(0x0, 0x1, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x4fa, 0x0, 0x0) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r5 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x0, 0x0}) io_uring_enter(r5, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) dup3(r5, r0, 0x80000) 8.63260164s ago: executing program 4 (id=19): sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, 0x0, 0x400c4) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) mount$9p_rdma(&(0x7f00000000c0), &(0x7f0000000140)='.\x00', 0x0, 0x10000, &(0x7f0000000440)={'trans=rdma,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@rq={'rq', 0x3d, 0x9}}]}}) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000500), 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x40305828, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_open_dev$loop(0x0, 0xffffffff7ffffffd, 0x160862) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) 8.63195428s ago: executing program 3 (id=20): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000240)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x2d, 0x7fffffff, 0x1008004, 0x71a7, 0xfffb, 0x3800, 0x1d, 0x0, 0x0, 0x4, 0xfc21}}, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x4004041}, 0x20000000) r4 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000002940)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000800}], 0x492492492492515, 0x4054) recvmsg(r4, &(0x7f0000001580)={0x0, 0x0, 0x0}, 0x20f2) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuseblk(&(0x7f0000002440), &(0x7f0000000040)='./file0\x00', &(0x7f00000003c0), 0x200840d, 0x0) 6.533355679s ago: executing program 3 (id=22): socket$nl_xfrm(0x10, 0x3, 0x6) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x80a, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="b4060000000000007111310000000000851000000200000085000000070000009500000000000000950000000000000059a30f4936e44feb8adb9474dd7d10406d8bb1f72366e95281c2c0be09e6af23f926d804488628cda2ad6fe64f"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x70) socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$namespace(0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000580)="4f7393b0249442aa2ce63e5d2754928f30b8b2c42d57c869728d97a074a9bae511027dbf5d0fc980dba2f67684e1cc288a09445c5f73f0e62d47efd13d8c3a37d173d47493b7222bbc55e5", 0x4b}], 0x1}}], 0x1, 0x0) 6.351452125s ago: executing program 2 (id=24): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000001680)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c0000009500000000000000eb4779fcbb3e3bbff2971871b1b1c0b4f0fca28377f3aa77d6c8d949060c54"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') r0 = socket$kcm(0x29, 0x2, 0x0) r1 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r1, 0x0, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r1}) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$binfmt_format(0xffffff9c, 0x0, 0x2, 0x0) write$binfmt_format(r3, &(0x7f0000000100)='-1\x00', 0x2) close_range(r3, 0xffffffffffffffff, 0x0) 6.048526167s ago: executing program 1 (id=28): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff2}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) 5.899031958s ago: executing program 3 (id=29): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) 5.821177503s ago: executing program 1 (id=30): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0x0, 0x3}, [@TCA_NETEM_RATE={0x14, 0x6, {0x7, 0x55c, 0x1, 0x7}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b928, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x5, 0x7, 0x40, 0x1, 0x0, 0xa}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x0) 5.54423628s ago: executing program 0 (id=31): io_pgetevents(0x0, 0x1, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x4fa, 0x0, 0x0) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r5 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x0, 0x0}) io_uring_enter(r5, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) dup3(r5, r0, 0x80000) 4.888077965s ago: executing program 3 (id=32): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000240)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x2d, 0x7fffffff, 0x1008004, 0x71a7, 0xfffb, 0x3800, 0x1d, 0x0, 0x0, 0x4, 0xfc21}}, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x4004041}, 0x20000000) r4 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000002940)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000800}], 0x492492492492515, 0x4054) recvmsg(r4, &(0x7f0000001580)={0x0, 0x0, 0x0}, 0x20f2) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuseblk(&(0x7f0000002440), &(0x7f0000000040)='./file0\x00', &(0x7f00000003c0), 0x200840d, 0x0) 4.514909273s ago: executing program 1 (id=33): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) bind$ax25(r0, &(0x7f0000000280)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @bcast, @null]}, 0x48) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0xf32f, 0xfe000000}, &(0x7f00000000c0)=0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1e000000000000002200000009", @ANYRES16=r0, @ANYRES32=r0, @ANYRESHEX=r0], 0x33) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="0008000000000000400034801400350076657468315f766c616e0000000000001400350076657468305f746f5f7465616d00000014003500776c616e3000000000000000"], 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x20004010) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'tunl0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000100)={'wg1\x00'}) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x6400c095}, 0x8010) socket$inet_udp(0x2, 0x2, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r6, 0x8914, &(0x7f0000000000)) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, 0x0, 0x4008080) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r8, 0x890b, &(0x7f00000007c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) connect$rose(r8, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) connect$rose(r8, &(0x7f0000000240)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001100)={r2, 0x0, &(0x7f00000003c0)=""/61}, 0x20) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000100)={0x6, 0x810, 0x208, 0xe, 0x2, 0x3, 0x8, 0x9, r1}, 0x20) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) syz_emit_ethernet(0x80, &(0x7f0000000580)=ANY=[], 0x0) 3.484143926s ago: executing program 1 (id=34): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r9, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r8, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) sendto$packet(r9, &(0x7f0000000480)="c1858aec1d0a21756f66b4805f3a", 0xe, 0x40000, &(0x7f0000000240)={0x11, 0xf8, r8, 0x1, 0x5, 0x6, @random="24f51e8e0a5a"}, 0x14) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r12, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x6, 0x8d, 0x6, 0xd07f, 0xfff, 0x7, 0x10000, 0x5, 0x8, 0x8, 0x7fffffff, 0x5, 0x0, 0x10001, 0xb85, 0xd, 0x6, 0xbac07f81, 0x9, 0x0, 0x4, 0x200, 0xffffffff, 0xffffffff, 0x7, 0x648, 0x80000001, 0x9, 0x81, 0x8000, 0x10000, 0x9, 0x9, 0x1, 0x3, 0x5, 0x6, 0x10000, 0x5, 0x101, 0xb67d, 0x8e, 0x8, 0x6, 0xfffff801, 0x5, 0xfff, 0x6, 0x1, 0x400, 0x7, 0x10001, 0x80, 0x4, 0x2, 0x0, 0x9, 0x40, 0x4, 0x8878, 0x0, 0x8ce, 0x7b, 0x6, 0x100, 0x0, 0x1, 0x400, 0x2, 0x8, 0x2b, 0x7f, 0x5, 0xfc7, 0x0, 0x6, 0x7, 0x1, 0x0, 0x2, 0x3ff, 0x1, 0x8, 0x5, 0x2, 0x1, 0x1, 0x2, 0x2, 0x4, 0x7, 0x10000000, 0x2, 0xc, 0x8, 0x64e, 0x1, 0x4, 0x3, 0x4, 0x7f, 0x3ff, 0x1, 0x4, 0x1, 0x400, 0x9, 0xc4c, 0x8000, 0x12d170f1, 0x8, 0x7f, 0x2, 0x1, 0xa27a, 0x764, 0x0, 0xc, 0x2, 0x2, 0x7, 0x5, 0x1000, 0x0, 0x0, 0x3, 0xcc4a, 0x4, 0x40, 0x6, 0x9, 0xc, 0x3, 0x3, 0x5, 0x5, 0x6, 0xbf, 0xf, 0x312, 0x4, 0x6, 0x800, 0x9, 0x8f7, 0x7, 0xfffffffe, 0x1ff, 0xfff, 0x9, 0x1, 0x4, 0xf, 0x6b5, 0x0, 0x40, 0x7, 0xb, 0x7, 0xc4, 0x3, 0x5, 0x3, 0x6, 0x5, 0x100, 0x1d6, 0x3, 0x7f, 0x6d5, 0xb9de, 0x0, 0x7fffffff, 0x7, 0x8, 0x9, 0xc54, 0x8001, 0x4, 0x7fffffff, 0x8, 0x81, 0x1, 0x8, 0x6, 0x8, 0x5, 0xf3, 0x9, 0x81, 0x5, 0x10000, 0xfff, 0x64, 0x5, 0xf1f8, 0x0, 0xe, 0xfffff001, 0x8, 0x8001, 0x2b0000, 0x7f, 0x5, 0x6, 0xffffffff, 0xc7, 0x7ff00000, 0x9, 0x200, 0xb9c, 0x2, 0x4, 0x800, 0x7, 0x7f, 0x8, 0x20000, 0x7, 0xac6, 0x9, 0x9, 0xfffffce9, 0x1, 0x2, 0x80, 0x38, 0x16e1d229, 0x8, 0x9, 0x4, 0x6, 0x80000000, 0x4, 0x5, 0x3, 0xb3e1, 0x0, 0x100, 0x4, 0x7, 0x1, 0x8, 0x7fffffff, 0x2, 0x7fffffff, 0xe3, 0x7, 0x5, 0x9, 0x3, 0x2, 0x7ff, 0x8, 0x3, 0x30000000]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg(r0, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@ll={0x11, 0x17, r13, 0x1, 0x4}, 0x80, 0x0}}], 0x1, 0x40000) 3.104822264s ago: executing program 2 (id=35): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x480, @dev={0xac, 0x14, 0x14, 0x37}}}) 2.696294466s ago: executing program 3 (id=36): ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) socket(0x10, 0x803, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, 0x0, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x3e8, 0x400, 0x70bd2d, 0x25dfdbfd}, 0x10}}, 0x4000800) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)={0x84, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x84}, 0x1, 0x0, 0x0, 0x40010}, 0x4000) epoll_create1(0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {}, {0xffff, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x100, 0x73d, 0x3509, 0x3, 0x10000, 0x7, 0x1000, 0x9, 0x3, 0x3, 0x882e, 0x8, 0x8, 0x2, 0x9, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x3fd, 0x9, 0xffff, 0x7a, 0x6, 0x7, 0x7fff, 0xffffff40, 0x9, 0x6, 0x8, 0x2, 0x57, 0x0, 0x4, 0x80, 0x9, 0xfffffffb, 0x2, 0xcf9f, 0x0, 0x1, 0x8, 0x1, 0x5, 0xfffffff9, 0x8, 0x80000001, 0x8, 0x4, 0x9, 0x8, 0x10001, 0x15, 0x7, 0xc, 0x8, 0x4, 0x3, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x1, 0x1, 0x801e, 0x7, 0x4, 0x0, 0x8, 0x5, 0x48001, 0x5, 0x1, 0x1000, 0x9, 0x1, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0xe, 0x7fff, 0xfffffff8, 0x7, 0x0, 0xb1, 0x3, 0xffffff43, 0x1, 0x6ddd, 0xf, 0x6, 0x556, 0x1, 0x2c, 0x5, 0x80000001, 0x1, 0x0, 0x200, 0x3, 0x2, 0x6, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x80, 0xb, 0x0, 0x743, 0x5, 0x3, 0x0, 0x200, 0x5, 0x3, 0x8, 0x3, 0x100, 0x2, 0x8, 0xfffffffe, 0x6, 0x8, 0xe, 0x5, 0x6, 0x4, 0x7ff, 0x5, 0xfffffffe, 0x1c0, 0x0, 0x7, 0x116b, 0x2302, 0x9, 0x3ff, 0x8000, 0x5, 0x1, 0x6, 0x3, 0x4, 0x10001, 0x512d, 0x1, 0x5, 0x2, 0xa3c0, 0x4, 0x8000, 0x10001, 0x15a, 0x6, 0x120000, 0xb85, 0x9, 0x7, 0x9, 0x80000004, 0x5, 0x7e5, 0x48, 0x9, 0x7, 0x10, 0x5, 0x6, 0xf, 0xff, 0x11, 0x6, 0x9, 0x0, 0x200, 0x9, 0xff, 0x4, 0x7, 0x7, 0x8, 0x4, 0x56, 0x8, 0xffff0000, 0x7ff, 0x3e1, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x1000000a, 0x8, 0x48, 0x1a, 0x2000000, 0x1ff, 0x844, 0x6, 0x3ff, 0x2, 0x100, 0x6, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x4, 0x7, 0x3565, 0x2, 0x2, 0xebf, 0x3, 0x1000, 0x0, 0x71f, 0x2, 0xc59, 0x6e8, 0x8, 0x101, 0x80000000, 0x6, 0xc, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r4, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 2.420541543s ago: executing program 0 (id=37): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000002000000fe8000000000000000000000030000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000040000000000000000000000000000000000000000000000000000000000000002000000000000000100"/83], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000380)={0x0, 0x4}, &(0x7f0000000440)=0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x54, r2, 0x1, 0x0, 0x25dfdbfe, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x40000000) 2.400282229s ago: executing program 1 (id=38): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000002840)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0], 0x44}}, 0x0) 2.356911191s ago: executing program 2 (id=39): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 2.337989487s ago: executing program 2 (id=40): socket$nl_xfrm(0x10, 0x3, 0x6) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x80a, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="b4060000000000007111310000000000851000000200000085000000070000009500000000000000950000000000000059a30f4936e44feb8adb9474dd7d10406d8bb1f72366e95281c2c0be09e6af23f926d804488628cda2ad6fe64f"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x70) socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$namespace(0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000580)="4f7393b0249442aa2ce63e5d2754928f30b8b2c42d57c869728d97a074a9bae511027dbf5d0fc980dba2f67684e1cc288a09445c5f73f0e62d47efd13d8c3a37d173d47493b7222bbc55e5", 0x4b}], 0x1}}], 0x1, 0x0) 2.190242189s ago: executing program 1 (id=41): io_pgetevents(0x0, 0x1, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x4fa, 0x0, 0x0) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r5 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x0, 0x0}) io_uring_enter(r5, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) dup3(r5, r0, 0x80000) 2.139880639s ago: executing program 0 (id=42): openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff2}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) 1.996805822s ago: executing program 2 (id=43): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) 1.888637461s ago: executing program 4 (id=44): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0x0, 0x3}, [@TCA_NETEM_RATE={0x14, 0x6, {0x7, 0x55c, 0x1, 0x7}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b928, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x5, 0x7, 0x40, 0x1, 0x0, 0xa}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x0) 1.786914332s ago: executing program 3 (id=45): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000001680)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c0000009500000000000000eb4779fcbb3e3bbff2971871b1b1c0b4f0fca28377f3aa77d6c8d949060c54"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') r0 = socket$kcm(0x29, 0x2, 0x0) r1 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r1, 0x0, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r1}) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) write$binfmt_format(r3, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 1.61973113s ago: executing program 0 (id=46): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000240)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x2d, 0x7fffffff, 0x1008004, 0x71a7, 0xfffb, 0x3800, 0x1d, 0x0, 0x0, 0x4, 0xfc21}}, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x4004041}, 0x20000000) r4 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000002940)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000800}], 0x492492492492515, 0x4054) recvmsg(r4, &(0x7f0000001580)={0x0, 0x0, 0x0}, 0x20f2) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuseblk(&(0x7f0000002440), &(0x7f0000000040)='./file0\x00', &(0x7f00000003c0), 0x200840d, 0x0) 1.537941754s ago: executing program 2 (id=47): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) bind$ax25(r0, &(0x7f0000000280)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @bcast, @null]}, 0x48) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0xf32f, 0xfe000000}, &(0x7f00000000c0)=0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1e000000000000002200000009", @ANYRES16=r0, @ANYRES32=r0, @ANYRESHEX=r0], 0x33) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="0008000000000000400034801400350076657468315f766c616e0000000000001400350076657468305f746f5f7465616d00000014003500776c616e3000000000000000"], 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x20004010) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'tunl0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000100)={'wg1\x00'}) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x6400c095}, 0x8010) socket$inet_udp(0x2, 0x2, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r6, 0x8914, &(0x7f0000000000)) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, 0x0, 0x4008080) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r8, 0x890b, &(0x7f00000007c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) connect$rose(r8, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) connect$rose(r8, &(0x7f0000000240)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001100)={r2, 0x0, &(0x7f00000003c0)=""/61}, 0x20) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000100)={0x6, 0x810, 0x208, 0xe, 0x2, 0x3, 0x8, 0x9, r1}, 0x20) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) syz_emit_ethernet(0x80, &(0x7f0000000580)=ANY=[], 0x0) 39.736968ms ago: executing program 0 (id=48): io_pgetevents(0x0, 0x1, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x4fa, 0x0, 0x0) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r5 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x0, 0x0}) io_uring_enter(r5, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) dup3(r5, r0, 0x80000) 0s ago: executing program 4 (id=49): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r9, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r8, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) sendto$packet(r9, &(0x7f0000000480)="c1858aec1d0a21756f66b4805f3a", 0xe, 0x40000, &(0x7f0000000240)={0x11, 0xf8, r8, 0x1, 0x5, 0x6, @random="24f51e8e0a5a"}, 0x14) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r12, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x6, 0x8d, 0x6, 0xd07f, 0xfff, 0x7, 0x10000, 0x5, 0x8, 0x8, 0x7fffffff, 0x5, 0x0, 0x10001, 0xb85, 0xd, 0x6, 0xbac07f81, 0x9, 0x0, 0x4, 0x200, 0xffffffff, 0xffffffff, 0x7, 0x648, 0x80000001, 0x9, 0x81, 0x8000, 0x10000, 0x9, 0x9, 0x1, 0x3, 0x5, 0x6, 0x10000, 0x5, 0x101, 0xb67d, 0x8e, 0x8, 0x6, 0xfffff801, 0x5, 0xfff, 0x6, 0x1, 0x400, 0x7, 0x10001, 0x80, 0x4, 0x2, 0x0, 0x9, 0x40, 0x4, 0x8878, 0x0, 0x8ce, 0x7b, 0x6, 0x100, 0x0, 0x1, 0x400, 0x2, 0x8, 0x2b, 0x7f, 0x5, 0xfc7, 0x0, 0x6, 0x7, 0x1, 0x0, 0x2, 0x3ff, 0x1, 0x8, 0x5, 0x2, 0x1, 0x1, 0x2, 0x2, 0x4, 0x7, 0x10000000, 0x2, 0xc, 0x8, 0x64e, 0x1, 0x4, 0x3, 0x4, 0x7f, 0x3ff, 0x1, 0x4, 0x1, 0x400, 0x9, 0xc4c, 0x8000, 0x12d170f1, 0x8, 0x7f, 0x2, 0x1, 0xa27a, 0x764, 0x0, 0xc, 0x2, 0x2, 0x7, 0x5, 0x1000, 0x0, 0x0, 0x3, 0xcc4a, 0x4, 0x40, 0x6, 0x9, 0xc, 0x3, 0x3, 0x5, 0x5, 0x6, 0xbf, 0xf, 0x312, 0x4, 0x6, 0x800, 0x9, 0x8f7, 0x7, 0xfffffffe, 0x1ff, 0xfff, 0x9, 0x1, 0x4, 0xf, 0x6b5, 0x0, 0x40, 0x7, 0xb, 0x7, 0xc4, 0x3, 0x5, 0x3, 0x6, 0x5, 0x100, 0x1d6, 0x3, 0x7f, 0x6d5, 0xb9de, 0x0, 0x7fffffff, 0x7, 0x8, 0x9, 0xc54, 0x8001, 0x4, 0x7fffffff, 0x8, 0x81, 0x1, 0x8, 0x6, 0x8, 0x5, 0xf3, 0x9, 0x81, 0x5, 0x10000, 0xfff, 0x64, 0x5, 0xf1f8, 0x0, 0xe, 0xfffff001, 0x8, 0x8001, 0x2b0000, 0x7f, 0x5, 0x6, 0xffffffff, 0xc7, 0x7ff00000, 0x9, 0x200, 0xb9c, 0x2, 0x4, 0x800, 0x7, 0x7f, 0x8, 0x20000, 0x7, 0xac6, 0x9, 0x9, 0xfffffce9, 0x1, 0x2, 0x80, 0x38, 0x16e1d229, 0x8, 0x9, 0x4, 0x6, 0x80000000, 0x4, 0x5, 0x3, 0xb3e1, 0x0, 0x100, 0x4, 0x7, 0x1, 0x8, 0x7fffffff, 0x2, 0x7fffffff, 0xe3, 0x7, 0x5, 0x9, 0x3, 0x2, 0x7ff, 0x8, 0x3, 0x30000000]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg(r0, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@ll={0x11, 0x17, r13, 0x1, 0x4}, 0x80, 0x0}}], 0x1, 0x40000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.82' (ED25519) to the list of known hosts. [ 56.136970][ T4171] cgroup: Unknown subsys name 'net' [ 56.266930][ T4171] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 57.676194][ T4171] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 59.086832][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 59.100612][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 59.175213][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 59.184424][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 59.229131][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.236956][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.245413][ T4184] device bridge_slave_0 entered promiscuous mode [ 59.253737][ T4195] chnl_net:caif_netlink_parms(): no params data found [ 59.276450][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.283730][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.291774][ T4184] device bridge_slave_1 entered promiscuous mode [ 59.348311][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.355500][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.364066][ T4191] device bridge_slave_0 entered promiscuous mode [ 59.375368][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.382730][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.390678][ T4191] device bridge_slave_1 entered promiscuous mode [ 59.435999][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.464978][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.475845][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.514032][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.531981][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.539095][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.550431][ T4193] device bridge_slave_0 entered promiscuous mode [ 59.564661][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.571855][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.579492][ T4183] device bridge_slave_0 entered promiscuous mode [ 59.599900][ T4184] team0: Port device team_slave_0 added [ 59.608940][ T4191] team0: Port device team_slave_0 added [ 59.615006][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.622249][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.630073][ T4193] device bridge_slave_1 entered promiscuous mode [ 59.637396][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.644669][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.652669][ T4195] device bridge_slave_0 entered promiscuous mode [ 59.660080][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.667315][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.675435][ T4183] device bridge_slave_1 entered promiscuous mode [ 59.688838][ T4184] team0: Port device team_slave_1 added [ 59.695858][ T4191] team0: Port device team_slave_1 added [ 59.713807][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.721336][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.729163][ T4195] device bridge_slave_1 entered promiscuous mode [ 59.771519][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.778592][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.804848][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.817373][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.824591][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.850837][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.864197][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.875032][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.890873][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.897923][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.924056][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.936169][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.943529][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.969665][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.982826][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.993663][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.004812][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.047198][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.071433][ T4195] team0: Port device team_slave_0 added [ 60.086786][ T4183] team0: Port device team_slave_0 added [ 60.094654][ T4183] team0: Port device team_slave_1 added [ 60.102570][ T4195] team0: Port device team_slave_1 added [ 60.110403][ T4193] team0: Port device team_slave_0 added [ 60.148820][ T4193] team0: Port device team_slave_1 added [ 60.173511][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.180493][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.206455][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.233096][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.240067][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.266310][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.281691][ T4191] device hsr_slave_0 entered promiscuous mode [ 60.288671][ T4191] device hsr_slave_1 entered promiscuous mode [ 60.299334][ T4184] device hsr_slave_0 entered promiscuous mode [ 60.306716][ T4184] device hsr_slave_1 entered promiscuous mode [ 60.313821][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.322107][ T4184] Cannot create hsr debugfs directory [ 60.328036][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.335087][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.361119][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.372906][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.379865][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.405866][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.417926][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.425707][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.451682][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.481525][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.488485][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.514930][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.554343][ T4193] device hsr_slave_0 entered promiscuous mode [ 60.561877][ T4193] device hsr_slave_1 entered promiscuous mode [ 60.568617][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.576287][ T4193] Cannot create hsr debugfs directory [ 60.682572][ T4183] device hsr_slave_0 entered promiscuous mode [ 60.689672][ T4183] device hsr_slave_1 entered promiscuous mode [ 60.696224][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.704031][ T4183] Cannot create hsr debugfs directory [ 60.711957][ T23] Bluetooth: hci0: command 0x0409 tx timeout [ 60.714031][ T4195] device hsr_slave_0 entered promiscuous mode [ 60.724792][ T4195] device hsr_slave_1 entered promiscuous mode [ 60.731633][ T4195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.739207][ T4195] Cannot create hsr debugfs directory [ 60.791286][ T1324] Bluetooth: hci4: command 0x0409 tx timeout [ 60.797488][ T1324] Bluetooth: hci2: command 0x0409 tx timeout [ 60.801558][ T23] Bluetooth: hci3: command 0x0409 tx timeout [ 60.809507][ T23] Bluetooth: hci1: command 0x0409 tx timeout [ 61.028925][ T4184] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 61.047996][ T4184] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 61.064201][ T4191] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 61.073507][ T4184] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 61.083534][ T4191] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 61.093265][ T4184] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 61.102743][ T4191] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 61.113617][ T4191] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 61.186475][ T4193] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 61.196273][ T4193] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 61.208591][ T4193] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 61.218039][ T4193] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 61.267294][ T4195] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 61.277734][ T4195] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 61.310336][ T4195] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 61.322645][ T4195] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 61.379057][ T4183] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 61.388668][ T4183] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 61.398971][ T4183] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 61.420153][ T4183] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 61.440563][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.467481][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.521702][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.530632][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.539427][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.548734][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.576942][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.604155][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.611875][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.620636][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.630389][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.637660][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.647868][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.663081][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.686409][ T3050] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.695620][ T3050] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.704764][ T3050] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.711882][ T3050] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.719746][ T3050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.729310][ T3050] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.738316][ T3050] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.745408][ T3050] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.753847][ T3050] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.762676][ T3050] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.771130][ T3050] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.778200][ T3050] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.790802][ T3050] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.799102][ T3050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.808801][ T3050] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.819874][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.831913][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.842547][ T3050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.855222][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.865142][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.876667][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.900424][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.916956][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.927556][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.937703][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.948411][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.956428][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.964580][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.973176][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.982563][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.991100][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.998984][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.008153][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.017401][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.026800][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.036447][ T243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.045297][ T243] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.057280][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.080253][ T243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.089847][ T243] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.100628][ T243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.109530][ T243] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.119249][ T243] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.126338][ T243] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.134629][ T243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.144023][ T243] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.152628][ T243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.162084][ T243] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.170464][ T243] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.177609][ T243] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.185658][ T243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.194589][ T243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.203328][ T243] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.215155][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.224064][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.232837][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.239990][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.253146][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.264613][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.277278][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.286250][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.295283][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.307037][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.318607][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.327375][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.334474][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.342696][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.352456][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.360658][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.369384][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.378014][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.386302][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.398527][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.430217][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.455714][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.465208][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.472350][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.492886][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.511170][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.519774][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.526885][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.538629][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.547486][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.556651][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.565560][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.587360][ T4193] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 62.598376][ T4193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.639229][ T243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.652824][ T243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.687683][ T243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.697483][ T243] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.727926][ T243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.738012][ T243] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.747933][ T243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.762185][ T243] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.770565][ T243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.779518][ T243] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.788756][ T243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.797539][ T13] Bluetooth: hci0: command 0x041b tx timeout [ 62.799066][ T243] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.814249][ T243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.823081][ T243] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.831635][ T243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.840325][ T243] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.849053][ T243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.858333][ T243] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.866989][ T243] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.874730][ T13] Bluetooth: hci1: command 0x041b tx timeout [ 62.878755][ T243] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.881785][ T13] Bluetooth: hci2: command 0x041b tx timeout [ 62.894751][ T13] Bluetooth: hci3: command 0x041b tx timeout [ 62.899936][ T243] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.901756][ T13] Bluetooth: hci4: command 0x041b tx timeout [ 62.928951][ T4183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.942764][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.955871][ T4195] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.968147][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.977190][ T243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.989868][ T243] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.003563][ T243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.014762][ T243] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.027184][ T243] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.038764][ T243] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.057806][ T3050] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.065775][ T3050] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.086997][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.104262][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.151246][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.158741][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.175532][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.205358][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.232372][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.265886][ T243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.276687][ T243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.310013][ T4191] device veth0_vlan entered promiscuous mode [ 63.317570][ T243] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.331009][ T243] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.338814][ T243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.357727][ T243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.388016][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.416577][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.429446][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.440205][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.450661][ T4193] device veth0_vlan entered promiscuous mode [ 63.478527][ T4191] device veth1_vlan entered promiscuous mode [ 63.497255][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.507798][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.521493][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.533802][ T4193] device veth1_vlan entered promiscuous mode [ 63.551849][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.561355][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.571459][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.580250][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.589377][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.649142][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.658223][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.666856][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.676087][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.685607][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.695171][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.704232][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.713049][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.744528][ T4191] device veth0_macvtap entered promiscuous mode [ 63.759497][ T4191] device veth1_macvtap entered promiscuous mode [ 63.768555][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.777035][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.785347][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.795254][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.804091][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.811969][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.822506][ T4183] device veth0_vlan entered promiscuous mode [ 63.846987][ T4193] device veth0_macvtap entered promiscuous mode [ 63.855428][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.865397][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.874765][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.883918][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.893107][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.903572][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.912621][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.926142][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.943857][ T4193] device veth1_macvtap entered promiscuous mode [ 63.951574][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.959790][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.969291][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.977394][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.987063][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.998605][ T4183] device veth1_vlan entered promiscuous mode [ 64.009541][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.023682][ T4195] device veth0_vlan entered promiscuous mode [ 64.035414][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.044334][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.053717][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.067907][ T4184] device veth0_vlan entered promiscuous mode [ 64.085119][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.093505][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.102050][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.115992][ T4184] device veth1_vlan entered promiscuous mode [ 64.129481][ T4191] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.139792][ T4191] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.149374][ T4191] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.159640][ T4191] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.178792][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.186861][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.195503][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.204844][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.223238][ T4195] device veth1_vlan entered promiscuous mode [ 64.236894][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.250602][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.262451][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.273759][ T4183] device veth0_macvtap entered promiscuous mode [ 64.292075][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.300175][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.309124][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.325254][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.336661][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.349222][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.362696][ T4183] device veth1_macvtap entered promiscuous mode [ 64.375891][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.396377][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.405819][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.423476][ T4193] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.433947][ T4193] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.444435][ T4193] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.453882][ T4193] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.480559][ T4184] device veth0_macvtap entered promiscuous mode [ 64.491896][ T4184] device veth1_macvtap entered promiscuous mode [ 64.506165][ T243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.515410][ T243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.525085][ T243] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.533870][ T243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.544179][ T243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.556124][ T243] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.571880][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.583129][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.596528][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.607255][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.619177][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.638404][ T4195] device veth0_macvtap entered promiscuous mode [ 64.651866][ T243] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.668001][ T243] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.679066][ T243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.702025][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.713184][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.723543][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.734106][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.744356][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.755023][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.766747][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.775439][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.786150][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.796872][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.807360][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.818399][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.827941][ T4195] device veth1_macvtap entered promiscuous mode [ 64.841356][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.849820][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.859343][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.869246][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.873293][ T4227] Bluetooth: hci0: command 0x040f tx timeout [ 64.882865][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.895858][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.906718][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.916779][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.927757][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.937752][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.949042][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.952308][ T4227] Bluetooth: hci4: command 0x040f tx timeout [ 64.965139][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.978217][ T4227] Bluetooth: hci3: command 0x040f tx timeout [ 64.978793][ T4183] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.987111][ T4227] Bluetooth: hci2: command 0x040f tx timeout [ 64.999505][ T4227] Bluetooth: hci1: command 0x040f tx timeout [ 65.008920][ T4183] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.017712][ T4183] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.026750][ T4183] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.058522][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.067311][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.079813][ T4184] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.089801][ T4184] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.099054][ T4184] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.108333][ T4184] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.150681][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.162008][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.170811][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.194611][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.206312][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.217530][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.229484][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.239962][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.250573][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.260866][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.273168][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.286498][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.311295][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.319869][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.335053][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.349328][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.360592][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.372382][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.382261][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.392761][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.403242][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.413942][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.425963][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.453626][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.467518][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.483784][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.498006][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.522578][ T4195] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.536685][ T4195] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.547751][ T4195] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.557653][ T4195] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.570278][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.633228][ T4247] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.642802][ T4247] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.660805][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.703066][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.712271][ T4247] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.720217][ T4247] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.734226][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.744830][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.755803][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.806947][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.828468][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.848993][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.857219][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.866503][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.881721][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.929595][ T4247] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.986511][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.031050][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.039767][ T4247] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.062952][ T3050] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.073443][ T4261] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 66.081831][ T3050] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.098476][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.239443][ T4261] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 66.254735][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.276563][ T243] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.347917][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 66.356976][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 66.366004][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 66.375028][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 66.384070][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 66.393100][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 66.402124][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 66.411140][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 66.420138][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 66.429173][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 67.084236][ T13] Bluetooth: hci0: command 0x0419 tx timeout [ 67.091956][ T13] Bluetooth: hci1: command 0x0419 tx timeout [ 67.098376][ T13] Bluetooth: hci2: command 0x0419 tx timeout [ 67.121785][ T13] Bluetooth: hci3: command 0x0419 tx timeout [ 67.127998][ T13] Bluetooth: hci4: command 0x0419 tx timeout [ 68.327500][ T4290] misc userio: Invalid payload size [ 70.557388][ T4297] device syzkaller0 entered promiscuous mode [ 71.276875][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.285809][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.162629][ T4324] device syzkaller0 entered promiscuous mode [ 73.146617][ T4345] misc userio: Invalid payload size [ 75.076867][ T4353] device syzkaller0 entered promiscuous mode [ 75.342277][ T4363] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.350214][ T4363] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.493370][ T4369] netlink: 68 bytes leftover after parsing attributes in process `syz.1.25'. [ 75.508055][ T4369] tipc: Started in network mode [ 75.513672][ T4369] tipc: Node identity ac14140f, cluster identity 4711 [ 75.523453][ T4369] tipc: Enabled bearer , priority 10 [ 75.553763][ T4372] netlink: 36 bytes leftover after parsing attributes in process `syz.1.26'. [ 75.601005][ T4374] Zero length message leads to an empty skb [ 76.522749][ T4228] tipc: Node number set to 2886997007 [ 77.230999][ T4396] misc userio: Invalid payload size [ 77.443836][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 78.367939][ T4406] device syzkaller0 entered promiscuous mode [ 79.324323][ T4416] netlink: 68 bytes leftover after parsing attributes in process `syz.0.37'. [ 79.351046][ T4417] netlink: 36 bytes leftover after parsing attributes in process `syz.1.38'. [ 79.386188][ T4416] tipc: Started in network mode [ 79.410747][ T4416] tipc: Node identity ac14140f, cluster identity 4711 [ 79.429427][ T4416] tipc: Enabled bearer , priority 10 [ 79.439110][ T4419] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.446779][ T4419] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.129819][ T4456] misc userio: Invalid payload size [ 80.991756][ T4229] tipc: Node number set to 2886997007 [ 81.612461][ T21] cfg80211: failed to load regulatory.db [ 81.766231][ T4468] device syzkaller0 entered promiscuous mode [ 81.946923][ T4464] ================================================================== [ 81.955371][ T4464] BUG: KASAN: use-after-free in ax25_find_cb+0x175/0x3a0 [ 81.962420][ T4464] Read of size 8 at addr ffff888022ca9708 by task syz.2.47/4464 [ 81.970064][ T4464] [ 81.972405][ T4464] CPU: 0 PID: 4464 Comm: syz.2.47 Not tainted syzkaller #0 [ 81.979626][ T4464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 81.989685][ T4464] Call Trace: [ 81.992958][ T4464] [ 81.995882][ T4464] dump_stack_lvl+0x188/0x250 [ 82.000564][ T4464] ? show_regs_print_info+0x20/0x20 [ 82.005758][ T4464] ? _printk+0xda/0x130 [ 82.009907][ T4464] ? ax25_find_cb+0x175/0x3a0 [ 82.014585][ T4464] ? load_image+0x400/0x400 [ 82.019089][ T4464] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 82.024552][ T4464] print_address_description+0x60/0x2d0 [ 82.030123][ T4464] ? ax25_find_cb+0x175/0x3a0 [ 82.034792][ T4464] kasan_report+0xdf/0x130 [ 82.039206][ T4464] ? ax25_find_cb+0x175/0x3a0 [ 82.043901][ T4464] ax25_find_cb+0x175/0x3a0 [ 82.048405][ T4464] rose_transmit_link+0x169/0x730 [ 82.053432][ T4464] rose_write_internal+0x680/0x1e90 [ 82.058641][ T4464] ? rose_validate_nr+0x120/0x120 [ 82.063665][ T4464] ? __timer_delete+0x6c/0x220 [ 82.068446][ T4464] ? skb_queue_purge+0x62/0x290 [ 82.073296][ T4464] rose_release+0x22a/0x4e0 [ 82.077802][ T4464] sock_close+0xd5/0x240 [ 82.082034][ T4464] ? sock_mmap+0x90/0x90 [ 82.086265][ T4464] __fput+0x234/0x930 [ 82.090249][ T4464] task_work_run+0x125/0x1a0 [ 82.094866][ T4464] get_signal+0x1222/0x12c0 [ 82.099375][ T4464] arch_do_signal_or_restart+0xe7/0x12c0 [ 82.105007][ T4464] ? kick_process+0xd4/0x140 [ 82.109617][ T4464] ? task_work_add+0x1a7/0x1d0 [ 82.114373][ T4464] ? get_sigframe_size+0x10/0x10 [ 82.119303][ T4464] ? __sys_connect+0x278/0x450 [ 82.124083][ T4464] ? exit_to_user_mode_loop+0x3b/0x130 [ 82.129563][ T4464] exit_to_user_mode_loop+0x9e/0x130 [ 82.134856][ T4464] exit_to_user_mode_prepare+0xee/0x180 [ 82.140398][ T4464] syscall_exit_to_user_mode+0x16/0x40 [ 82.145859][ T4464] do_syscall_64+0x58/0xa0 [ 82.150268][ T4464] ? clear_bhb_loop+0x30/0x80 [ 82.154944][ T4464] ? clear_bhb_loop+0x30/0x80 [ 82.159641][ T4464] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 82.165542][ T4464] RIP: 0033:0x7fc67a9ec799 [ 82.169966][ T4464] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.189567][ T4464] RSP: 002b:00007fc678c25028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 82.197976][ T4464] RAX: fffffffffffffe00 RBX: 00007fc67ac66090 RCX: 00007fc67a9ec799 [ 82.205944][ T4464] RDX: 000000000000001c RSI: 0000200000000240 RDI: 000000000000000c [ 82.213909][ T4464] RBP: 00007fc67aa82bd9 R08: 0000000000000000 R09: 0000000000000000 [ 82.221875][ T4464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.229851][ T4464] R13: 00007fc67ac66128 R14: 00007fc67ac66090 R15: 00007fff4b23c0f8 [ 82.237829][ T4464] [ 82.240843][ T4464] [ 82.243163][ T4464] Allocated by task 4399: [ 82.247473][ T4464] __kasan_kmalloc+0xb5/0xf0 [ 82.252079][ T4464] ax25_dev_device_up+0x50/0x580 [ 82.257010][ T4464] ax25_device_event+0x483/0x4f0 [ 82.261947][ T4464] raw_notifier_call_chain+0xcb/0x160 [ 82.267340][ T4464] __dev_notify_flags+0x194/0x300 [ 82.272391][ T4464] dev_change_flags+0xe3/0x1a0 [ 82.277171][ T4464] dev_ifsioc+0x130/0xd50 [ 82.281488][ T4464] dev_ioctl+0x545/0xe30 [ 82.285735][ T4464] sock_do_ioctl+0x245/0x320 [ 82.290316][ T4464] sock_ioctl+0x4d2/0x710 [ 82.294646][ T4464] __se_sys_ioctl+0xfa/0x170 [ 82.299223][ T4464] do_syscall_64+0x4c/0xa0 [ 82.303630][ T4464] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 82.309515][ T4464] [ 82.311830][ T4464] Freed by task 4461: [ 82.316442][ T4464] kasan_set_track+0x4b/0x70 [ 82.321043][ T4464] kasan_set_free_info+0x1f/0x40 [ 82.326009][ T4464] ____kasan_slab_free+0xd5/0x110 [ 82.331038][ T4464] slab_free_freelist_hook+0xea/0x170 [ 82.336409][ T4464] kfree+0xef/0x2a0 [ 82.340214][ T4464] ax25_release+0x661/0x870 [ 82.344732][ T4464] sock_close+0xd5/0x240 [ 82.348992][ T4464] __fput+0x234/0x930 [ 82.352970][ T4464] task_work_run+0x125/0x1a0 [ 82.357551][ T4464] exit_to_user_mode_loop+0x10f/0x130 [ 82.362911][ T4464] exit_to_user_mode_prepare+0xee/0x180 [ 82.368551][ T4464] syscall_exit_to_user_mode+0x16/0x40 [ 82.374042][ T4464] do_syscall_64+0x58/0xa0 [ 82.378487][ T4464] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 82.384382][ T4464] [ 82.386694][ T4464] Last potentially related work creation: [ 82.392400][ T4464] kasan_save_stack+0x35/0x60 [ 82.397090][ T4464] kasan_record_aux_stack+0xb8/0x100 [ 82.402379][ T4464] insert_work+0x54/0x3d0 [ 82.406703][ T4464] __queue_work+0x9c5/0xd50 [ 82.411203][ T4464] queue_work_on+0x124/0x1f0 [ 82.415787][ T4464] netdevice_event+0x803/0x900 [ 82.420564][ T4464] raw_notifier_call_chain+0xcb/0x160 [ 82.425940][ T4464] register_netdevice+0x12a6/0x1710 [ 82.431141][ T4464] macvlan_common_newlink+0x109a/0x1810 [ 82.436699][ T4464] rtnl_newlink+0x1359/0x1a50 [ 82.441374][ T4464] rtnetlink_rcv_msg+0x844/0xf30 [ 82.446316][ T4464] netlink_rcv_skb+0x1f5/0x440 [ 82.451077][ T4464] netlink_unicast+0x774/0x920 [ 82.455833][ T4464] netlink_sendmsg+0x8ba/0xbe0 [ 82.460585][ T4464] __sys_sendto+0x46d/0x620 [ 82.465087][ T4464] __x64_sys_sendto+0xda/0xf0 [ 82.469765][ T4464] do_syscall_64+0x4c/0xa0 [ 82.474186][ T4464] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 82.480103][ T4464] [ 82.482423][ T4464] The buggy address belongs to the object at ffff888022ca9700 [ 82.482423][ T4464] which belongs to the cache kmalloc-192 of size 192 [ 82.496494][ T4464] The buggy address is located 8 bytes inside of [ 82.496494][ T4464] 192-byte region [ffff888022ca9700, ffff888022ca97c0) [ 82.509619][ T4464] The buggy address belongs to the page: [ 82.515251][ T4464] page:ffffea00008b2a40 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888022ca9d00 pfn:0x22ca9 [ 82.526695][ T4464] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 82.534238][ T4464] raw: 00fff00000000200 ffffea00008b2488 ffffea00008ad8c8 ffff888016c41a00 [ 82.542814][ T4464] raw: ffff888022ca9d00 000000000010000e 00000001ffffffff 0000000000000000 [ 82.551382][ T4464] page dumped because: kasan: bad access detected [ 82.557781][ T4464] page_owner tracks the page as allocated [ 82.563481][ T4464] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 1, ts 10436711776, free_ts 9592107288 [ 82.579178][ T4464] get_page_from_freelist+0x1bbd/0x1ca0 [ 82.584724][ T4464] __alloc_pages+0x1ee/0x480 [ 82.589311][ T4464] alloc_page_interleave+0x24/0x1e0 [ 82.594517][ T4464] new_slab+0xc0/0x4b0 [ 82.598573][ T4464] ___slab_alloc+0x80a/0xdd0 [ 82.603160][ T4464] kmem_cache_alloc_trace+0x1a5/0x2a0 [ 82.608599][ T4464] call_usermodehelper_setup+0x8a/0x260 [ 82.614151][ T4464] kobject_uevent_env+0x65e/0x890 [ 82.619169][ T4464] really_probe+0x77d/0xc80 [ 82.623663][ T4464] __driver_probe_device+0x18c/0x330 [ 82.628938][ T4464] driver_probe_device+0x4f/0x420 [ 82.633950][ T4464] __device_attach_driver+0x2b0/0x500 [ 82.639308][ T4464] bus_for_each_drv+0x184/0x210 [ 82.644268][ T4464] __device_attach+0x2a8/0x480 [ 82.649023][ T4464] bus_probe_device+0xbc/0x1e0 [ 82.653775][ T4464] device_add+0xa00/0xfb0 [ 82.658095][ T4464] page last free stack trace: [ 82.662755][ T4464] free_unref_page_prepare+0x637/0x6c0 [ 82.668212][ T4464] free_unref_page+0x8f/0x2a0 [ 82.672894][ T4464] __vunmap+0x8b9/0xa50 [ 82.677077][ T4464] free_work+0x56/0x80 [ 82.681162][ T4464] process_one_work+0x85f/0x1010 [ 82.686132][ T4464] worker_thread+0xaa6/0x1290 [ 82.690803][ T4464] kthread+0x436/0x520 [ 82.694865][ T4464] ret_from_fork+0x1f/0x30 [ 82.699331][ T4464] [ 82.701649][ T4464] Memory state around the buggy address: [ 82.707279][ T4464] ffff888022ca9600: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 82.715325][ T4464] ffff888022ca9680: 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 82.723521][ T4464] >ffff888022ca9700: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 82.731579][ T4464] ^ [ 82.735931][ T4464] ffff888022ca9780: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 82.743980][ T4464] ffff888022ca9800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 82.752025][ T4464] ================================================================== [ 82.760084][ T4464] Disabling lock debugging due to kernel taint [ 82.766467][ T4464] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 82.773661][ T4464] CPU: 0 PID: 4464 Comm: syz.2.47 Tainted: G B syzkaller #0 [ 82.782250][ T4464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 82.792300][ T4464] Call Trace: [ 82.795567][ T4464] [ 82.798485][ T4464] dump_stack_lvl+0x188/0x250 [ 82.803156][ T4464] ? show_regs_print_info+0x20/0x20 [ 82.808342][ T4464] ? load_image+0x400/0x400 [ 82.812843][ T4464] panic+0x2e5/0x810 [ 82.816736][ T4464] ? asm_sysvec_call_function_single+0x16/0x20 [ 82.822882][ T4464] ? bpf_jit_dump+0xd0/0xd0 [ 82.827377][ T4464] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 82.833269][ T4464] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 82.839149][ T4464] ? _raw_spin_unlock+0x40/0x40 [ 82.843986][ T4464] ? ax25_find_cb+0x175/0x3a0 [ 82.848650][ T4464] check_panic_on_warn+0x80/0xa0 [ 82.853576][ T4464] ? ax25_find_cb+0x175/0x3a0 [ 82.858239][ T4464] end_report+0x6d/0xf0 [ 82.862384][ T4464] kasan_report+0x102/0x130 [ 82.866876][ T4464] ? ax25_find_cb+0x175/0x3a0 [ 82.871541][ T4464] ax25_find_cb+0x175/0x3a0 [ 82.876030][ T4464] rose_transmit_link+0x169/0x730 [ 82.881052][ T4464] rose_write_internal+0x680/0x1e90 [ 82.886259][ T4464] ? rose_validate_nr+0x120/0x120 [ 82.891282][ T4464] ? __timer_delete+0x6c/0x220 [ 82.896030][ T4464] ? skb_queue_purge+0x62/0x290 [ 82.900892][ T4464] rose_release+0x22a/0x4e0 [ 82.905404][ T4464] sock_close+0xd5/0x240 [ 82.909629][ T4464] ? sock_mmap+0x90/0x90 [ 82.913856][ T4464] __fput+0x234/0x930 [ 82.917832][ T4464] task_work_run+0x125/0x1a0 [ 82.922428][ T4464] get_signal+0x1222/0x12c0 [ 82.926920][ T4464] arch_do_signal_or_restart+0xe7/0x12c0 [ 82.932672][ T4464] ? kick_process+0xd4/0x140 [ 82.937259][ T4464] ? task_work_add+0x1a7/0x1d0 [ 82.942017][ T4464] ? get_sigframe_size+0x10/0x10 [ 82.946955][ T4464] ? __sys_connect+0x278/0x450 [ 82.951916][ T4464] ? exit_to_user_mode_loop+0x3b/0x130 [ 82.957378][ T4464] exit_to_user_mode_loop+0x9e/0x130 [ 82.962650][ T4464] exit_to_user_mode_prepare+0xee/0x180 [ 82.968183][ T4464] syscall_exit_to_user_mode+0x16/0x40 [ 82.973640][ T4464] do_syscall_64+0x58/0xa0 [ 82.978149][ T4464] ? clear_bhb_loop+0x30/0x80 [ 82.982819][ T4464] ? clear_bhb_loop+0x30/0x80 [ 82.987493][ T4464] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 82.993381][ T4464] RIP: 0033:0x7fc67a9ec799 [ 82.997788][ T4464] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.017394][ T4464] RSP: 002b:00007fc678c25028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 83.025809][ T4464] RAX: fffffffffffffe00 RBX: 00007fc67ac66090 RCX: 00007fc67a9ec799 [ 83.033789][ T4464] RDX: 000000000000001c RSI: 0000200000000240 RDI: 000000000000000c [ 83.041754][ T4464] RBP: 00007fc67aa82bd9 R08: 0000000000000000 R09: 0000000000000000 [ 83.049726][ T4464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 83.057689][ T4464] R13: 00007fc67ac66128 R14: 00007fc67ac66090 R15: 00007fff4b23c0f8 [ 83.065659][ T4464] [ 83.068959][ T4464] Kernel Offset: disabled [ 83.073293][ T4464] Rebooting in 86400 seconds..