last executing test programs: 5.952833326s ago: executing program 0 (id=474): setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000000c0)={0x84, @local, 0x15, 0x3, 'fo\x00', 0x1, 0x0, 0x69}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000380)={{0x84, @rand_addr=0x64010104, 0x4e24, 0x3, 'nq\x00', 0x8, 0x5, 0x55}, {@remote, 0x4e22, 0x0, 0x7, 0x12d5c, 0x12d58}}, 0x44) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)=ANY=[@ANYRES16=r2, @ANYRES32, @ANYBLOB="0800c3"], 0x33fe0}, 0x1, 0x0, 0x0, 0x40002}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="1beb41ea4ea9ca354f167d9eaee7dc35eca218b865688d79fe31cbe00d190c853bfe6a22bd7dec0023aa0e038d07000040e37e00f7dd3afafdbc70e1b5928033df5e82fd76f31e8b29a0f05c2cef56f56cd0330dc984004f220b7dcb23a05d530df65691cf6a3cceb7a97c673856f552ded9530b52fe6d1e662090d2802233ec1adca9eaab9dd6f04b2717ed1552cf46dc28cd3fbf1ec1eaedd80d1da838a00a1e229ce16d2c1a411be06f715e8b6aa7552800d5282e4e0bf3eaf55a", 0xbc}, {&(0x7f0000000b00)}], 0x2, 0x0, 0x0, 0x4004090}, {0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)="d21e61c0af08368aedabcf6e445f1ca30a2f37d1f6d14042afeb21e49b0da7fd9f", 0x21}, {&(0x7f0000000c00)}], 0x2, 0x0, 0x0, 0x1}, {0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000fc0)}], 0x1, 0x0, 0x0, 0x84090}], 0x3, 0x4004000) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f00000006c0)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x3, 0x0, 0x7, 0x0, 0x1, 0x0, 'syz0\x00', &(0x7f0000000680)=['']}) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 5.753356648s ago: executing program 0 (id=476): socket$packet(0x11, 0x3, 0x300) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00222200000096231306e53f070d0000002a940183", @ANYRES64=r0], 0x0}, 0x0) getresuid(&(0x7f0000000440), &(0x7f00000004c0), &(0x7f0000000500)) 3.663249502s ago: executing program 0 (id=506): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x8, 0x1}, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x4, {0x1000, 0x20}}, &(0x7f0000000380)={0x40, 0x7, 0x2, 0x4}, 0x0, &(0x7f0000000400)={0x40, 0xb, 0x2, "aa53"}, &(0x7f0000000440)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000000480)={0x40, 0x13, 0x6}, &(0x7f00000004c0)={0x40, 0x17, 0x6, @random="8ec447dfa6ba"}, &(0x7f0000000500)={0x40, 0x19, 0x2, '&b'}, &(0x7f0000000540)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000000580)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000000600)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x21, 0x1, 0x8}}) syz_usb_control_io(r0, 0x0, 0x0) 1.626815633s ago: executing program 2 (id=524): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0a00000007000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 1.618258754s ago: executing program 1 (id=525): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000008}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="1e031c00008c71ef288563"], 0xffdd) 1.507919941s ago: executing program 2 (id=527): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f00000000c0)=0xa, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000840)=0x473e, 0x4) sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800) recvmmsg(r0, &(0x7f00000031c0)=[{{0x0, 0x0, 0x0}, 0x75}], 0x1, 0x2100, 0x0) 1.446548964s ago: executing program 1 (id=529): syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) recvfrom$l2tp6(0xffffffffffffffff, 0x0, 0x94, 0x40000002, 0x0, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.362605939s ago: executing program 2 (id=531): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[], &(0x7f0000000340)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x18000000000002a0, 0x204, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.281152524s ago: executing program 1 (id=532): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x4) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r3, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r5, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48050}, 0x0) 1.275152244s ago: executing program 4 (id=533): setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000000c0)={0x84, @local, 0x15, 0x3, 'fo\x00', 0x1, 0x0, 0x69}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000380)={{0x84, @rand_addr=0x64010104, 0x4e24, 0x3, 'nq\x00', 0x8, 0x5, 0x55}, {@remote, 0x4e22, 0x0, 0x7, 0x12d5c, 0x12d58}}, 0x44) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="1beb41ea4ea9ca354f167d9eaee7dc35eca218b865688d79fe31cbe00d190c853bfe6a22bd7dec0023aa0e038d07000040e37e00f7dd3afafdbc70e1b5928033df5e82fd76f31e8b29a0f05c2cef56f56cd0330dc984004f220b7dcb23a0", 0x5e}, {&(0x7f0000000b00)}], 0x2, 0x0, 0x0, 0x4004090}, {0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000c00)}], 0x1, 0x0, 0x0, 0x1}, {0x0, 0x0, &(0x7f0000000640)=[{0x0}, {&(0x7f0000000fc0)}], 0x2, 0x0, 0x0, 0x84090}], 0x3, 0x4004000) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f00000006c0)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.239922246s ago: executing program 0 (id=534): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) write$tun(r0, &(0x7f0000000080)={@val={0x8, 0x800}, @val={0x0, 0x1, 0x6, 0x4, 0x2f, 0x40}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x28, 0x29, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x26}}, {0x4e26, 0x4e20, 0x15, 0x0, @gue={{0x2, 0x0, 0x3, 0x5, 0x0, @val=0x80}, "7982d60305"}}}}, 0x37) 1.18133491s ago: executing program 2 (id=535): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd28, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x2, 0x20000000, 0x100000a, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.093816035s ago: executing program 1 (id=536): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x38, r1, 0x5, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5, 0x1, 0x1}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000084}, 0x0) 1.074794106s ago: executing program 4 (id=537): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0a00000007000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 953.308873ms ago: executing program 4 (id=539): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 940.197944ms ago: executing program 2 (id=540): setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000000c0)={0x84, @local, 0x15, 0x3, 'fo\x00', 0x1, 0x0, 0x69}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000380)={{0x84, @rand_addr=0x64010104, 0x4e24, 0x3, 'nq\x00', 0x8, 0x5, 0x55}, {@remote, 0x4e22, 0x0, 0x7, 0x12d5c, 0x12d58}}, 0x44) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)=ANY=[@ANYRES32, @ANYBLOB="0800c3"], 0x33fe0}, 0x1, 0x0, 0x0, 0x40002}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000b00)}], 0x1, 0x0, 0x0, 0x4004090}, {0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)="d21e61c0af08368aedabcf6e445f1ca30a2f37d1f6d14042afeb21e49b0da7fd9f", 0x21}, {&(0x7f0000000c00)}], 0x2, 0x0, 0x0, 0x1}, {0x0, 0x0, &(0x7f0000000640)=[{0x0}, {&(0x7f0000000fc0)}], 0x2, 0x0, 0x0, 0x84090}], 0x3, 0x4004000) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f00000006c0)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x3, 0x0, 0x7, 0x0, 0x1, 0x0, 'syz0\x00', &(0x7f0000000680)=['']}) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 896.823117ms ago: executing program 1 (id=541): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b922, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xe, 0xb}, {0xf, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) close(r5) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) 896.484727ms ago: executing program 0 (id=542): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xb7, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x1e) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "3a9badf933cbd4a5", "f568be9086150c45fb95a5e557f520c287f0a2f14d34ef1e24b3046bba0aff40", "82703436", "5b29230ec59329e6"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) close(r0) 888.731937ms ago: executing program 3 (id=543): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x11}}, 0x1e) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, 0x0, 0x0) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTLQI(r6, 0x0, 0x3, 0x0, 0x0) write(r2, 0x0, 0x0) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000480), 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, r9) sendmsg$NBD_CMD_CONNECT(r9, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, r9) getsockopt$inet_udp_int(r8, 0x11, 0x6c, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, r5) ioctl$sock_rose_SIOCADDRT(r7, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x4, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8990, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) 770.896844ms ago: executing program 0 (id=544): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') socket$l2tp6(0xa, 0x2, 0x73) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r1 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x61d0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYRES32=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000824}, 0x8040) 736.799107ms ago: executing program 3 (id=545): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[], &(0x7f0000000340)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x18000000000002a0, 0x204, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 729.120747ms ago: executing program 2 (id=546): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000040)={0x3b, &(0x7f0000000200)=[{0x20, '\x00', @buffer={"785f629b000bc36e4c47ceeef4e988279ccb9ce37f092b150598374457bf103b", 0x20}, 0x9}]}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="40000000180015"], 0x40}], 0x1, 0x0, 0x0, 0x40065}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000ec0)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @dstopts_2292={{0x58, 0x29, 0x4, {0x4, 0x7, '\x00', [@generic={0xfe, 0x21, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4"}, @generic={0x80, 0x4, "09e12e5f"}, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}]}}}, @hoplimit={{0x14}}, @hopopts={{0x30, 0x29, 0x36, {0x5e, 0x2, '\x00', [@generic={0xff}, @pad1, @pad1, @calipso={0x7, 0x8, {0x3, 0x0, 0x0, 0xfff}}]}}}], 0xb8}}], 0x1, 0x810) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000480)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000100)=[{0x0}], 0x1}}], 0x1, 0x24088804) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000300)=[{{&(0x7f0000000280)={0xa, 0x4e20, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000600)="6a9ee35872dedd3fa3577ce3d64d437abb6e906ee0d0354bcc7edf38e105d37f635fbb3b9c00a3d3bc61866fb3389eff2a0443cf6c38450ce2732419a8329bbe26f4eb1c9edcbf53fb1b0df9c77d6864e90753e3800dff58b9950616473ea1e55b947db3de3ebb8f63edf11ebec9eef2da6b9f545e28273d239534a4682dc23c44a85f64d17bbf41e291f3e3092626f045d8b2b5df6e478729cc88a79aa5f7fe99e374f09c34fe5b63b6dffd256f4ab6ec553520f191b386b290ce1e7fe4c59288afbcafe11869395eaae3f556234701", 0xd0}, {&(0x7f0000002840)="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", 0xc36}], 0x2, &(0x7f0000000b40)}}], 0x1, 0x4000081) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 593.051175ms ago: executing program 4 (id=547): setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000000c0)={0x84, @local, 0x15, 0x3, 'fo\x00', 0x1, 0x0, 0x69}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000380)={{0x84, @rand_addr=0x64010104, 0x4e24, 0x3, 'nq\x00', 0x8, 0x5, 0x55}, {@remote, 0x4e22, 0x0, 0x7, 0x12d5c, 0x12d58}}, 0x44) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="1beb41ea4ea9ca354f167d9eaee7dc35eca218b865688d79fe31cbe00d190c853bfe6a22bd7dec0023aa0e038d07000040e37e00f7dd3afafdbc70e1b5928033df5e82fd76f31e8b29a0f05c2cef56f56cd0330dc984004f220b7dcb23a0", 0x5e}, {&(0x7f0000000b00)}], 0x2, 0x0, 0x0, 0x4004090}, {0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000c00)}], 0x1, 0x0, 0x0, 0x1}, {0x0, 0x0, &(0x7f0000000640)=[{0x0}, {&(0x7f0000000fc0)}], 0x2, 0x0, 0x0, 0x84090}], 0x3, 0x4004000) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f00000006c0)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 556.317507ms ago: executing program 3 (id=548): bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) 396.101787ms ago: executing program 3 (id=549): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0a00000007000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 234.867777ms ago: executing program 3 (id=550): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xf}, 0x15, 0x3, 'lblcr\x00', 0x1, 0x6, 0x48}, 0x2c) socket$kcm(0xa, 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xc, 0x2}}, 0x44) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @loopback, 0x4e21, 0x3, 'lblcr\x00', 0x0, 0x81, 0x39}, {@rand_addr=0x64010500, 0x4e25, 0x3, 0xc3, 0xfffffff8, 0x12d5c}}, 0x44) r3 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000140)=@in6={0x2, 0x15, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 141.954412ms ago: executing program 4 (id=551): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) write(r0, &(0x7f0000000600)="b7a27258eeb57eb735b6ed1bf5b29ebb2d5240787de075bdc2cf36967267e224fcbbcf968165848fb7e50964120f70981723b2c434c501ad1e450f9c8363f37485056c46930d3e3ada1f563942d9c3cfe84ed8816a3c6edba12715c196aec86f1ada73dae005f27fa073cca78c0a6e1433d1b68fae9cf3cc9248e284b9261101022ce604d6c37402dd50095d16d930915ed390bb1eb5eda8d625af17ba1b439097c46c82d24da04e26a767cf7b7dc9d2089ed3a128951f5b7a9c7bc05003d0c60c9a226a3aa64f52c7a083396874c996dd046b10e543c5434e08d5dcd17e2be8cfaec24c5ec2d2cf69dd226d1a74146043ec58f51d152165237cc018baeeedcd307373234e7f723358ebce3676917a4d0e723822a66f6ae40311b4fcf6bf8b452cf88661f82d1c306638f875c02b08fd594325a1ccd492dd7c3abd5e807b08993cf3a1a9d27b618fd66e0baf5ed7168b515b7c5cbc28ccaef476a1cb94d8b677c1c38373de577326a0f28db3c966e89f37ba64b0816539d7862aecb13b63bfadcc1615fe0c8c4ca8681754933d57568f642f0b10f8409fcc414fa29743346eab5d4efba1560be296c5ea584af830533cc83bbcb2a1536e069050db7ffe37e970504db09020cee2a1da136dcbf9b5ab27da2050b44cbb36690e3fade327783a3d0cceca374876d91a6b6001a8f06b7e4294f638b7eac5da085654fd7f5ecd3490d436288da5509cb8b9d3384d92e6cc5c1a611db2af9ab52f72c426a8e843fa160ddc7e1da0d2db4154389f8a07d2e9b2605549621b8cc71ea25b0983a7f07d9f370706559071ee1ab25cec05901f1da668de618f9ff3e6a76fd6f3d44dfb77ce2dc3b46a113adf0165e191967e3393e3ca023c0154541436f6d689001aab8be55b0751e51506f5f1bd908effc1acfcd7d07fda4ac30e396bee77b4d8f730ccdc95d0759e1e367a7aeb9888e471070456fa36cf66ddc5e783bddbabeff8c09f6d163b169db894d30e795df7688a6c4b1c4106dc5f2c149b74eabc9727f20ab7ad53c1252678c0be13ba179dc4bc580a99109c8ae8ec361eb0401a77bcc333fb150600790b048b1400b0be2378fd28a03c2fa7d75023c4ac16543593885163acd8f63ccc5859feec7dd0f5fe8f1cb1dad71a79ec636166162a4a2a14700932bbb86123a1a725ed5b31fcc5c824f8bb50c18b8ffd236bb1d712977375a7f47ded4e19dc02b00f11263e933d0c6965c748864066e65ada7c1fe31319dd87550979c0db5063342f70847b6eef4c4a2b23a8e42980a91ebaa8e4712b7aef0f7bc94538cb7229adc5259d10d9f92612af0ebb1d38112d32c7eae56ef08c631dbc277fc61a7daaaebd50ec87764b8e7456e160d7287aeb9702f16c5a38660e32cb4a1a18325605e9eb79bd038c3f50d47e489a1bdd5ed21d66188dff625cafe0f82a0367e70c3de0f3cfcce49a99646fec1670c351c3b31a5e7291a4508b3e21afe698f089e038f81f05658629c1008c3efc8a87f947f018138f68fabc7dd8260857efe6a6e4b035da3a80818a4cd305dc887550ae99da8b6dfff5b286f94527f12c4c24f7b31da274076a90e5cfc1078dc0da07b0378eb14ac4419803b9e6f4ad5fdd5662bf83862db6bd741cb3a4e55a3fbcd91524b27fc0f78f27d67872f33aa9c2dfeb2fd63990a8c396ce17807f2f996fae162c02c8a0accd0ce6ccce730d26dce8e0ec7c3f6da7ec4a4f8123e151500b49c8567ffe02d186e35d004ba920e1c6bbdf7960019ef7e229eac766cfdec721eb980ca0c8f825e4ab7a401747044a252fec53fdf054e0927997eb4120e7fd80fd9db7721ba6db538ac046885d308c8486ff67606baf32810b0147f3c88efb03daf7663f650cba7a5043c1e9f397f6aade481e6d69d9d2a222125941947e12f0008330cd9d6bf9eac09c02089638d89d7b5128a4df1781ffa570a971435091687bcccf034066201ebec67858126b3a98d1437c8fe7af3741118e024803a68836f7cf4f23e5ec44e0079f3123ad1715f71dfdb6cbd86c1c288cec9f9d6aae8a6b4d6fe85341eb67bb5a0a43bf75fd1ce7898a18dd11dac7eb604af235333b55ac1d4ec74756bb8d8b00632d0979ebca10e69a2c8bae6f874cf5d2a94a77ccc8c5ef3b88971aa982690ea4d9d7e1992400ec5dc1b966ee9535bda5a152c656c0675d411a86c4db394e8305fb08fe4866c39a7b48652f6c9262c9d54ebadf3e9063ac01eaff635d1b8cba72107abf13a8143531fd502bdecabd068f9396673c3112873d1b3bd48166d2057fc13a3abe827ad80cc110c16d37dd85590171f4aca89cef3e04420352a9264f31aecb212ae982f25b04c82345cba64880c705970ff5c191183494a3761831fe8f6728505a956fdcdc8084fd1f6dc56b54723600358d65a6b7d74238d762ceae8531c78e97fbae63018c8bc74855f8a02acb4b4c35d72397c019c927d61b60ef1931e7e39318ac0fdcd24e740c7902a7b3081263b8a8a3260b4cab4ca5feae236e449d84218fa8b11e11c128c36d1937262559067a08d316195f895a13bba21c89731560ed32a84849bd59f36cc7849e0529dd594f53b08bf1fa466800f375c0ca21f8dac0054b432662ec9e5b40447782d8e059863494ac42d2c64850c2753846a6db9bb26161feda3a0c8fb414df6af1c1e122383f7f18907eddb79cc0c19ecbe25ea280302f9b579f70f136d3b4289724775a1d2dc37a589b69d5dec01cea0969ba9c8db9d40aaf869d6e75193b4358d1fca6634b96f20da91eeff60a2e626d5c086fd8d308b6ce5cb75abad6083f58f775171fff767a3204cdf1e76713be1882deb686cea967134f01795f182ceff162348e6bca107b5effb73bb8", 0x7f5) 53.126878ms ago: executing program 1 (id=552): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0x8, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0xce21, @dev={0xac, 0x14, 0x14, 0x1c}}], 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x10}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES8=r1, @ANYRES32, @ANYRESHEX=r0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000007d863d69590549faafb6fdf0e8ae5f94f93de358014e8e1f4013dae31198b6e51e540a5853f359e75b223fd54249b16ba5ac4d4b67ebced194175b791395f3704e2bb32a9bfa5aeed1f9d0faba8e9dfa87712e8dcb957b3a0e3f4acebdcc29c79ac41d80fb919c56787e265d8ad036ad419887f3a5471d53bc3e87f7b33973b70911f7f01cd3d154d888500679c1203ffb542e75d192290c9a8b2b7c57d9446311697a0ab61066c1ce6386fa2fb29f4e4910fb3abb49b8a8b0f8e5d3a1726ec49bcea2afd64d45d19299174f83f4f23a43"], 0x48) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r2, &(0x7f0000000240), &(0x7f0000000080)=@tcp=r3}, 0x20) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x0, 0x101, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}, {0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x4}}, 0x0, {[0x2cb6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80000000]}}, 0x5c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000900)={r2, &(0x7f0000000540)="c279a3fc9c31efb78410a0b7a0c142f1ff66dbfdcd684e1da60c98760ae0c6c1084fba69a1436890bc81ba2eda86b185b2e50ff29117f945a5629c88a4215b92d4b495c49c2d7dccf6b6524991210400000000000000e4380e4df2d937f9ce816dd94d4f5a78e6ec21ca1311906392271f"}, 0x20) r4 = socket(0xa, 0x3, 0x3a) r5 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00'}) ioctl(r5, 0x8b2c, &(0x7f0000000040)) bind$alg(r4, &(0x7f0000000240)={0x26, 'aead\x00', 0x0, 0x0, 'ccm_base(lrw-twofish-3way,sha384-generic)\x00'}, 0x58) socketpair$unix(0x1, 0x1, 0x0, 0x0) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) bind$ax25(r6, &(0x7f0000000100)={{0x3, @default, 0x1}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r7, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000200)=@ethtool_rxfh_indir={0x39, 0x4, [0x34, 0x7, 0x2, 0xff]}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) write$rfkill(r8, 0x0, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r6, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) 52.629717ms ago: executing program 3 (id=553): bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) close(0x3) close(0x4) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) close(0x4) 0s ago: executing program 4 (id=554): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x11, 0x3, 'none\x00', 0x1, 0x6, 0x4e}, 0x2c) r1 = socket$kcm(0xa, 0x2, 0x0) socket(0xb, 0xa, 0x3f0b8395) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.16' (ED25519) to the list of known hosts. [ 56.235388][ T4171] cgroup: Unknown subsys name 'net' [ 56.385073][ T4171] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 57.829575][ T4171] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 59.304182][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 59.342197][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 59.352275][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 59.396872][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 59.450641][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 59.497849][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.505777][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.514497][ T4185] device bridge_slave_0 entered promiscuous mode [ 59.547100][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.554291][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.562362][ T4192] device bridge_slave_0 entered promiscuous mode [ 59.576992][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.584176][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.592227][ T4185] device bridge_slave_1 entered promiscuous mode [ 59.612705][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.619976][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.628109][ T4192] device bridge_slave_1 entered promiscuous mode [ 59.665838][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.673591][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.682090][ T4189] device bridge_slave_0 entered promiscuous mode [ 59.689887][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.696958][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.705319][ T4184] device bridge_slave_0 entered promiscuous mode [ 59.718805][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.726113][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.734416][ T4184] device bridge_slave_1 entered promiscuous mode [ 59.763240][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.770557][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.778295][ T4189] device bridge_slave_1 entered promiscuous mode [ 59.787313][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.798233][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.815247][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.831904][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.849149][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.859990][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.907299][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.925023][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.936334][ T4184] team0: Port device team_slave_0 added [ 59.942678][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.950704][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.958474][ T4193] device bridge_slave_0 entered promiscuous mode [ 59.972247][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.979343][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.987283][ T4193] device bridge_slave_1 entered promiscuous mode [ 59.997409][ T4185] team0: Port device team_slave_0 added [ 60.009748][ T4184] team0: Port device team_slave_1 added [ 60.030317][ T4192] team0: Port device team_slave_0 added [ 60.042638][ T4185] team0: Port device team_slave_1 added [ 60.050565][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.067004][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.079329][ T4189] team0: Port device team_slave_0 added [ 60.093348][ T4192] team0: Port device team_slave_1 added [ 60.112908][ T4189] team0: Port device team_slave_1 added [ 60.119738][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.126692][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.153105][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.179579][ T4193] team0: Port device team_slave_0 added [ 60.196995][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.204092][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.230102][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.242615][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.249677][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.275704][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.298607][ T4193] team0: Port device team_slave_1 added [ 60.311278][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.318257][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.344389][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.364769][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.371862][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.398640][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.410598][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.417560][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.443797][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.455736][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.462766][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.494320][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.516653][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.523734][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.549961][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.615106][ T4184] device hsr_slave_0 entered promiscuous mode [ 60.621988][ T4184] device hsr_slave_1 entered promiscuous mode [ 60.637154][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.644252][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.670557][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.683460][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.690886][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.717137][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.732160][ T4189] device hsr_slave_0 entered promiscuous mode [ 60.739556][ T4189] device hsr_slave_1 entered promiscuous mode [ 60.746032][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.753960][ T4189] Cannot create hsr debugfs directory [ 60.771236][ T4192] device hsr_slave_0 entered promiscuous mode [ 60.779879][ T4192] device hsr_slave_1 entered promiscuous mode [ 60.786546][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.794207][ T4192] Cannot create hsr debugfs directory [ 60.836752][ T4185] device hsr_slave_0 entered promiscuous mode [ 60.844092][ T4185] device hsr_slave_1 entered promiscuous mode [ 60.851358][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.858984][ T4185] Cannot create hsr debugfs directory [ 60.888148][ T4193] device hsr_slave_0 entered promiscuous mode [ 60.894885][ T4193] device hsr_slave_1 entered promiscuous mode [ 60.901676][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.909320][ T4193] Cannot create hsr debugfs directory [ 61.029765][ T4173] Bluetooth: hci4: command 0x0409 tx timeout [ 61.029795][ T1108] Bluetooth: hci2: command 0x0409 tx timeout [ 61.030883][ T1108] Bluetooth: hci1: command 0x0409 tx timeout [ 61.048450][ T1108] Bluetooth: hci0: command 0x0409 tx timeout [ 61.054777][ T1108] Bluetooth: hci3: command 0x0409 tx timeout [ 61.236091][ T4189] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 61.250100][ T4189] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 61.258801][ T4189] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 61.267729][ T4189] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 61.337638][ T4185] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 61.351926][ T4185] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 61.362288][ T4185] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 61.381387][ T4185] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 61.411424][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.458056][ T4184] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 61.470384][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.480138][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.494346][ T4184] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 61.503158][ T4184] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 61.515812][ T4184] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 61.532111][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.557010][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.568744][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.577924][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.587142][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.594450][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.603865][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.637873][ T1645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.647030][ T1645] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.658315][ T1645] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.665457][ T1645] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.674811][ T1645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.682954][ T1645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.693784][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.713580][ T1645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.728256][ T1645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.738211][ T4192] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 61.762519][ T4192] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 61.777243][ T4192] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 61.786031][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.796671][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.806350][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.815448][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.824957][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.834000][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.842757][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.849878][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.857603][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.866149][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.887069][ T4189] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 61.897844][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.915465][ T4192] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 61.931654][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.940683][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.950971][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.958038][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.965854][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.975444][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.985714][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.994315][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.003262][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.013671][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.053840][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.069807][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.088153][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.100804][ T4193] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 62.111784][ T4193] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 62.123320][ T4193] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 62.134449][ T4193] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 62.151157][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.159400][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.168108][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.181326][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.193073][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.226049][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.243052][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.257457][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.269483][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.278286][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.304324][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.312805][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.347464][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.370085][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.377031][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.391593][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.412899][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.423240][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.432731][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.441542][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.448725][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.465701][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.488760][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.518987][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.526827][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.537029][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.546833][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.555796][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.562912][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.575097][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.593819][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.605293][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.619483][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.627923][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.638040][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.647446][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.678783][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.690353][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.698791][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.705915][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.714907][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.725431][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.734234][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.741352][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.749106][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.757259][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.766348][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.774767][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.783069][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.805385][ T4184] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 62.816409][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.833778][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.843300][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.852537][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.860245][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.867642][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.877074][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.885571][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.894834][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.903683][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.912392][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.923062][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.934037][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.945305][ T4189] device veth0_vlan entered promiscuous mode [ 62.954832][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.964493][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.973610][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.993689][ T4189] device veth1_vlan entered promiscuous mode [ 63.021792][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.028688][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.040015][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.056012][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.065017][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.074475][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.083150][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.092535][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.109542][ T4252] Bluetooth: hci2: command 0x041b tx timeout [ 63.109574][ T4243] Bluetooth: hci3: command 0x041b tx timeout [ 63.132069][ T4243] Bluetooth: hci0: command 0x041b tx timeout [ 63.138153][ T4243] Bluetooth: hci1: command 0x041b tx timeout [ 63.146528][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.155211][ T1645] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.163130][ T4243] Bluetooth: hci4: command 0x041b tx timeout [ 63.169811][ T1645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.184989][ T1645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.203311][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.212524][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.247520][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.256166][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.266206][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.276334][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.285208][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.297169][ T4189] device veth0_macvtap entered promiscuous mode [ 63.327744][ T4185] device veth0_vlan entered promiscuous mode [ 63.336692][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.346637][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.355708][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.366310][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.375860][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.385907][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.393020][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.401378][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.410999][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.419854][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.426932][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.435522][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.467024][ T4185] device veth1_vlan entered promiscuous mode [ 63.476232][ T4189] device veth1_macvtap entered promiscuous mode [ 63.485399][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.495296][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.503838][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.513784][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.524383][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.534207][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.542806][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.551049][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.577085][ T4193] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 63.589028][ T4193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.605097][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.629028][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.637014][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.648329][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.657907][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.667528][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.684672][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.693620][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.702484][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.732427][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.758049][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.769292][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.778470][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.790404][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.799807][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.808550][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.816776][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.827537][ T4185] device veth0_macvtap entered promiscuous mode [ 63.838180][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.853586][ T4189] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.864728][ T4189] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.873648][ T4189] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.882602][ T4189] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.901098][ T4185] device veth1_macvtap entered promiscuous mode [ 63.916367][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.926805][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.941394][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.954935][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.965185][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.983066][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.017780][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.031727][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.042991][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.059276][ T1645] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.066714][ T1645] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.075160][ T1645] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.084783][ T1645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.103681][ T1645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.113906][ T1645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.125630][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.136205][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.149902][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.166423][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.175356][ T4184] device veth0_vlan entered promiscuous mode [ 64.183521][ T1645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.193286][ T1645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.206260][ T1645] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.218405][ T1645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.241554][ T4185] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.256809][ T4185] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.266933][ T4185] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.276865][ T4185] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.301574][ T4184] device veth1_vlan entered promiscuous mode [ 64.308567][ T1645] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.318383][ T1645] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.326356][ T1645] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.334989][ T1645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.344554][ T1645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.355554][ T1645] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.365242][ T1645] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.393017][ T4192] device veth0_vlan entered promiscuous mode [ 64.493614][ T4192] device veth1_vlan entered promiscuous mode [ 64.506778][ T4184] device veth0_macvtap entered promiscuous mode [ 64.518569][ T4184] device veth1_macvtap entered promiscuous mode [ 64.534690][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.543909][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.554011][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.563845][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.573221][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.584315][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.597126][ T1645] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.605866][ T1645] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.651355][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.670109][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.680915][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.691413][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.702177][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.722590][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.761396][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.770726][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.778578][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.788126][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.798459][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.808334][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.818305][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.827636][ T4192] device veth0_macvtap entered promiscuous mode [ 64.845642][ T4192] device veth1_macvtap entered promiscuous mode [ 64.856936][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.868426][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.879796][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.891467][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.905516][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.919233][ T4184] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.927974][ T4184] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.937540][ T4184] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.946558][ T4184] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.985322][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.993664][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.009286][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.018447][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.073769][ T4260] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.087231][ T4260] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.105340][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.111138][ T4294] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 65.127668][ T4294] sctp: [Deprecated]: syz.2.3 (pid 4294) Use of int in max_burst socket option. [ 65.127668][ T4294] Use struct sctp_assoc_value instead [ 65.147431][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.155620][ T4294] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 65.185387][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.197199][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.206147][ T4243] Bluetooth: hci4: command 0x040f tx timeout [ 65.213011][ T4243] Bluetooth: hci1: command 0x040f tx timeout [ 65.214189][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.233735][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.245765][ T4243] Bluetooth: hci0: command 0x040f tx timeout [ 65.254744][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.267237][ T4243] Bluetooth: hci3: command 0x040f tx timeout [ 65.274196][ T4243] Bluetooth: hci2: command 0x040f tx timeout [ 65.280499][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.307739][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.318624][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.354363][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.383450][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.402405][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.423188][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.437480][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.452038][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.477829][ T4193] device veth0_vlan entered promiscuous mode [ 65.497812][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.517766][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.528115][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.545754][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.555842][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.572301][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.590274][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.613703][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.627587][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.643006][ T4193] device veth1_vlan entered promiscuous mode [ 65.662228][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.678154][ T4192] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.690294][ T4192] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.698957][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.707326][ T4192] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.716990][ T4192] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.727693][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.809208][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.832042][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.858805][ T4193] device veth0_macvtap entered promiscuous mode [ 65.887673][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.922426][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.956011][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.966043][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.012053][ T4193] device veth1_macvtap entered promiscuous mode [ 66.070412][ T26] audit: type=1400 audit(1770741590.264:2): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=4305 comm="syz.1.6" [ 66.096468][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.120839][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.144986][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.166209][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.178309][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.189692][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.200642][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.211469][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.222004][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.313559][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.331836][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.468502][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.625292][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.806481][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.921070][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.018312][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.028908][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.038757][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.050357][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.063140][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.082717][ T4193] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.100158][ T4193] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.134266][ T4193] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.145415][ T4193] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.176397][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.195042][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.227171][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.240620][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.255049][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.279555][ T4310] Bluetooth: hci0: command 0x0419 tx timeout [ 67.291419][ T4310] Bluetooth: hci1: command 0x0419 tx timeout [ 67.306448][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.315046][ T4310] Bluetooth: hci4: command 0x0419 tx timeout [ 67.349940][ T4248] Bluetooth: hci2: command 0x0419 tx timeout [ 67.362689][ T4248] Bluetooth: hci3: command 0x0419 tx timeout [ 67.380504][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.388366][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.434887][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.503515][ T4327] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 67.547922][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.550134][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.585809][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.600923][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.632850][ T4323] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 67.641609][ T4323] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 67.658114][ T1645] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.681129][ T1645] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.711019][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.723369][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.752518][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.839084][ T4334] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 67.927769][ T4340] netlink: 'syz.0.12': attribute type 1 has an invalid length. [ 68.149615][ T4228] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 68.529300][ T4228] usb 2-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 68.550179][ T4228] usb 2-1: config 0 interface 0 has no altsetting 0 [ 68.709497][ T4228] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 68.723379][ T4228] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 68.732519][ T4228] usb 2-1: Product: syz [ 68.736728][ T4228] usb 2-1: Manufacturer: syz [ 68.748260][ T4228] usb 2-1: SerialNumber: syz [ 68.800631][ T4228] usb 2-1: config 0 descriptor?? [ 68.820158][ T4338] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 68.853725][ T4228] usb 2-1: selecting invalid altsetting 0 [ 69.141757][ T4372] device syzkaller0 entered promiscuous mode [ 69.177229][ T4372] tipc: Started in network mode [ 69.191875][ T4338] usb 2-1: selecting invalid altsetting 0 [ 69.209130][ T4372] tipc: Node identity b284e30457bf, cluster identity 4711 [ 69.217586][ T4372] tipc: Enabled bearer , priority 0 [ 69.224974][ T4338] usb 2-1: 0:0: usb_set_interface failed (-22) [ 69.285019][ T4337] usb 2-1: selecting invalid altsetting 0 [ 69.309671][ T4368] tipc: Resetting bearer [ 69.329290][ T4337] usb 2-1: 0:0: usb_set_interface failed (-22) [ 69.335506][ T4337] usb 2-1: selecting invalid altsetting 0 [ 69.350433][ T4337] usb 2-1: 0:0: usb_set_interface failed (-22) [ 69.374415][ T4337] usb 2-1: selecting invalid altsetting 0 [ 69.381607][ T4337] usb 2-1: 0:0: usb_set_interface failed (-22) [ 69.391419][ T4228] usb 2-1: USB disconnect, device number 2 [ 69.414785][ T4368] tipc: Disabling bearer [ 69.466700][ T4378] team0: Device ipvlan1 failed to register rx_handler [ 69.950543][ C1] Unknown status report in ack skb [ 70.179168][ T4173] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 70.202350][ T4408] syz.2.33 uses obsolete (PF_INET,SOCK_PACKET) [ 70.432121][ T4196] Bluetooth: hci4: Dropping invalid advertising data [ 70.439190][ T4196] Bluetooth: hci4: Malicious advertising data. [ 70.445425][ T4173] usb 4-1: Using ep0 maxpacket: 8 [ 70.589190][ T4173] usb 4-1: config 0 interface 0 has no altsetting 0 [ 70.595871][ T4173] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 70.629656][ T4173] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.680653][ T4173] usb 4-1: config 0 descriptor?? [ 71.193421][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.200123][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.235126][ T4173] mcp2221 0003:04D8:00DD.0001: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 71.606140][ T4289] usb 4-1: USB disconnect, device number 2 [ 71.707645][ T4461] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 72.331197][ T4482] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 72.813797][ T4510] device syzkaller0 entered promiscuous mode [ 73.168996][ T1108] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 73.200635][ T4523] block device autoloading is deprecated and will be removed. [ 73.459598][ T1108] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 73.473027][ T4536] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 73.491248][ T4532] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 73.549238][ T1108] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 73.564242][ T1108] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 73.600729][ T1108] usb 2-1: config 0 interface 0 has no altsetting 0 [ 73.689154][ T1108] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 73.717709][ T1108] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 73.760066][ T1108] usb 2-1: config 0 interface 0 has no altsetting 0 [ 73.849184][ T1108] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 73.858428][ T1108] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 73.910904][ T1108] usb 2-1: config 0 interface 0 has no altsetting 0 [ 73.949128][ T4228] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 74.009189][ T1108] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 74.018132][ T1108] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 74.069343][ T1108] usb 2-1: config 0 interface 0 has no altsetting 0 [ 74.151016][ T4557] netlink: 37 bytes leftover after parsing attributes in process `syz.4.88'. [ 74.161017][ T1108] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 74.172282][ T1108] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 74.404393][ T1108] usb 2-1: config 0 interface 0 has no altsetting 0 [ 74.499337][ T4228] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 74.507727][ T4228] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.519215][ T1108] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 74.536985][ T1108] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 74.548709][ T4228] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.567047][ T1108] usb 2-1: config 0 interface 0 has no altsetting 0 [ 74.573996][ T4228] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 74.592770][ T4228] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 74.603658][ T4228] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.639091][ T4228] usb 1-1: config 0 descriptor?? [ 74.672306][ T1108] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 74.715652][ T1108] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 74.748635][ T1108] usb 2-1: config 0 interface 0 has no altsetting 0 [ 74.850295][ T1108] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 74.872169][ T1108] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 74.929208][ T1108] usb 2-1: config 0 interface 0 has no altsetting 0 [ 75.109077][ T1108] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 75.132054][ T4228] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 75.142263][ T1108] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 75.159029][ T4228] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 75.174587][ T1108] usb 2-1: Product: syz [ 75.183554][ T4228] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 75.193967][ T1108] usb 2-1: Manufacturer: syz [ 75.204879][ T1108] usb 2-1: SerialNumber: syz [ 75.213170][ T4228] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 75.230761][ T4228] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 75.241154][ T1108] usb 2-1: config 0 descriptor?? [ 75.253007][ T4228] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 75.266303][ T4228] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 75.286820][ T4228] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 75.307749][ T1108] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 75.324322][ T4228] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 75.344164][ T4228] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 75.356913][ T4228] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 75.365430][ T4579] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 75.387860][ T4228] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 75.408443][ T4228] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 75.422938][ T4228] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 75.442241][ T4228] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 75.475559][ T4228] plantronics 0003:047F:FFFF.0002: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 75.522901][ T4228] usb 1-1: USB disconnect, device number 2 [ 75.568491][ T1108] usb 2-1: USB disconnect, device number 3 [ 75.574463][ C0] usb 2-1: yurex_control_callback - control failed: -71 [ 75.618009][ T1108] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 75.882243][ T4583] fido_id[4583]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 75.990461][ T4596] netlink: 8 bytes leftover after parsing attributes in process `syz.2.99'. [ 76.145691][ T4196] Bluetooth: hci0: ACL packet too small [ 76.162977][ T4599] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 76.674169][ T4617] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 77.729084][ T4653] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 78.049794][ T4658] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 78.567651][ T4688] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 78.651944][ T4692] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 79.261670][ T4726] Zero length message leads to an empty skb [ 79.409271][ T4736] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 79.427074][ T4733] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 79.719046][ T23] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 80.110117][ T23] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 80.122519][ T23] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 80.131621][ T23] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 80.150722][ T23] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 80.181432][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.229453][ T4741] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 80.250556][ T23] hub 1-1:1.0: bad descriptor, ignoring hub [ 80.262288][ T23] hub: probe of 1-1:1.0 failed with error -5 [ 80.269141][ T4773] IPVS: sync thread started: state = MASTER, mcast_ifn = batadv_slave_0, syncid = 4, id = 0 [ 80.283476][ T23] cdc_wdm 1-1:1.0: skipping garbage [ 80.290109][ T23] cdc_wdm 1-1:1.0: skipping garbage [ 80.297648][ T23] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 80.303876][ T23] cdc_wdm 1-1:1.0: Unknown control protocol [ 80.436079][ T4779] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 80.513836][ T4777] kvm: emulating exchange as write [ 80.549812][ T4783] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 80.810228][ T4228] usb 1-1: USB disconnect, device number 3 [ 81.135250][ T4805] 9pnet_virtio: no channels available for device syz [ 81.204017][ T4807] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 81.342077][ T4813] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 81.443030][ T1111] cfg80211: failed to load regulatory.db [ 81.447467][ T4818] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 81.786783][ T4829] device syzkaller0 entered promiscuous mode [ 81.912375][ T4228] Bluetooth: hci5: command 0x1003 tx timeout [ 81.925470][ T4835] 9pnet_virtio: no channels available for device syz [ 81.936025][ T4200] Bluetooth: hci5: sending frame failed (-49) [ 82.161048][ T4838] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.385873][ T4843] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 82.420213][ T4838] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.599630][ T4838] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.803662][ T4838] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.942884][ T4838] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.975651][ T4838] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.990879][ T4838] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.004997][ T4838] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.354287][ T4880] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 83.398807][ T4883] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 83.989353][ T1108] Bluetooth: hci5: command 0x1001 tx timeout [ 83.995539][ T4200] Bluetooth: hci5: sending frame failed (-49) [ 84.092095][ T4912] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 84.952412][ T4949] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 85.172257][ T4957] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 86.069122][ T1108] Bluetooth: hci5: command 0x1009 tx timeout [ 86.644469][ T5007] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 86.981192][ T5019] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 87.398075][ T5035] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 87.968978][ T5063] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 88.352090][ T5081] device bridge0 entered promiscuous mode [ 88.382275][ T5078] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 88.815058][ T5102] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 89.307006][ T5120] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 90.343832][ T5153] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 90.550182][ T5164] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 92.075910][ T5231] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 93.102778][ T5276] device syzkaller0 entered promiscuous mode [ 93.159354][ T5280] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 93.366009][ T5286] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 93.384830][ T5286] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 94.006089][ T5330] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 94.060231][ T5332] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 94.604997][ T5344] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 94.647938][ T5344] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 95.109028][ T4289] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 95.117215][ T5367] KVM: debugfs: duplicate directory 5367-5 [ 95.311371][ T5382] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 95.346065][ T5385] ======================================================= [ 95.346065][ T5385] WARNING: The mand mount option has been deprecated and [ 95.346065][ T5385] and is ignored by this kernel. Remove the mand [ 95.346065][ T5385] option from the mount to silence this warning. [ 95.346065][ T5385] ======================================================= [ 95.684674][ T4289] usb 2-1: unable to get BOS descriptor or descriptor too short [ 95.750960][ T4289] usb 2-1: not running at top speed; connect to a high speed hub [ 95.879198][ T4289] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.899926][ T4289] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 96.189118][ T4289] usb 2-1: string descriptor 0 read error: -22 [ 96.202808][ T4289] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 96.222993][ T4289] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.312324][ T4289] usb 2-1: 0:2 : does not exist [ 96.665776][ T5444] fuse: root generation should be zero [ 96.769177][ T4251] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 97.009010][ T4251] usb 1-1: Using ep0 maxpacket: 16 [ 97.129236][ T4251] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.155030][ T4251] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 97.349379][ T4251] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 97.374268][ T4251] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.408186][ T4251] usb 1-1: Product: syz [ 97.428629][ T4251] usb 1-1: Manufacturer: syz [ 97.454106][ T4251] usb 1-1: SerialNumber: syz [ 98.109156][ T4289] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 98.349152][ T4289] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 98.396667][ T4289] usb 2-1: USB disconnect, device number 4 [ 98.439217][ T4251] usb 1-1: 0:2 : does not exist [ 98.469201][ T4251] usb 1-1: USB disconnect, device number 4 [ 98.669772][ T1111] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 98.754165][ T4202] udevd[4202]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 98.949353][ T1111] usb 3-1: Using ep0 maxpacket: 16 [ 99.066757][ T5537] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 99.079295][ T1111] usb 3-1: too many endpoints for config 0 interface 0 altsetting 3: 63, using maximum allowed: 30 [ 99.097924][ T5537] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 99.102717][ T4289] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 99.126974][ T1111] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.152585][ T1111] usb 3-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 63 [ 99.189392][ T1111] usb 3-1: config 0 interface 0 has no altsetting 0 [ 99.197372][ T1111] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 99.218243][ T1111] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.239427][ T1111] usb 3-1: config 0 descriptor?? [ 99.409096][ T4289] usb 2-1: Using ep0 maxpacket: 32 [ 99.510506][ T5557] capability: warning: `syz.0.469' uses deprecated v2 capabilities in a way that may be insecure [ 99.559262][ T4289] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.589166][ T4289] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 99.624135][ T4289] usb 2-1: New USB device found, idVendor=0458, idProduct=501b, bcdDevice= 0.00 [ 99.644147][ T4289] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.676360][ T4289] usb 2-1: config 0 descriptor?? [ 99.720460][ T5523] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 99.730048][ T1111] lua 0003:1E7D:2C2E.0003: unknown main item tag 0x0 [ 99.737674][ T1111] lua 0003:1E7D:2C2E.0003: unknown main item tag 0x0 [ 99.748021][ T1111] lua 0003:1E7D:2C2E.0003: unknown main item tag 0x0 [ 99.755091][ T1111] lua 0003:1E7D:2C2E.0003: unknown main item tag 0x0 [ 99.789393][ T1111] lua 0003:1E7D:2C2E.0003: unknown main item tag 0x0 [ 99.821347][ T1111] lua 0003:1E7D:2C2E.0003: hidraw0: USB HID v0.0b Device [HID 1e7d:2c2e] on usb-dummy_hcd.2-1/input0 [ 99.931893][ T1111] usb 3-1: USB disconnect, device number 2 [ 99.993896][ T5568] fido_id[5568]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 100.214596][ T4289] hid-generic 0003:0458:501B.0004: hidraw0: USB HID v0.00 Device [HID 0458:501b] on usb-dummy_hcd.1-1/input0 [ 100.232845][ T4371] udevd[4371]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 100.372504][ T4236] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 100.445146][ T4173] usb 2-1: USB disconnect, device number 5 [ 100.618929][ T4236] usb 1-1: Using ep0 maxpacket: 16 [ 100.739117][ T4236] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.759680][ T4236] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.779416][ T4236] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 100.792681][ T1108] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 100.828378][ T4236] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 100.850000][ T4236] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.881123][ T4236] usb 1-1: config 0 descriptor?? [ 101.039049][ T1108] usb 3-1: Using ep0 maxpacket: 16 [ 101.118294][ T5619] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 101.159234][ T1108] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 101.176716][ T1108] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 101.349412][ T1108] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 101.361934][ T4236] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 101.375956][ T1108] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.398930][ T4236] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 101.406231][ T4236] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 101.418112][ T1108] usb 3-1: Product: syz [ 101.429407][ T1108] usb 3-1: Manufacturer: syz [ 101.434492][ T1108] usb 3-1: SerialNumber: syz [ 101.440420][ T4236] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 101.476489][ T4236] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 101.494002][ T4236] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 101.514617][ T4236] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 101.544542][ T4236] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 101.557271][ T4236] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 101.570008][ T4236] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 101.577556][ T4236] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 101.586039][ T4236] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 101.593880][ T4236] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 101.601519][ T4236] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 101.608828][ T4236] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 101.682968][ T4236] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0005/input/input5 [ 101.741021][ T4236] microsoft 0003:045E:07DA.0005: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 101.790317][ T1108] usb 3-1: 0:2 : does not exist [ 101.829688][ T4236] usb 1-1: USB disconnect, device number 5 [ 101.864094][ T1108] usb 3-1: USB disconnect, device number 3 [ 101.982619][ T5638] fido_id[5638]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 102.128398][ T4371] udevd[4371]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 102.344380][ T5655] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 102.429055][ T4173] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 102.523355][ T4236] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 102.789164][ T4236] usb 1-1: Using ep0 maxpacket: 32 [ 102.809655][ T5665] xt_l2tp: v2 doesn't support IP mode [ 102.829151][ T4173] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 102.850743][ T4173] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 102.911581][ T4236] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.951094][ T4236] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.969223][ T4173] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 102.992054][ T4173] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 103.019632][ T4173] usb 2-1: SerialNumber: syz [ 103.109777][ T4236] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 103.129817][ T4236] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 103.138288][ T4236] usb 1-1: Product: syz [ 103.174392][ T4236] usb 1-1: Manufacturer: syz [ 103.230507][ T4236] hub 1-1:4.0: USB hub found [ 103.351690][ T4173] usb 2-1: 0:2 : does not exist [ 103.399124][ T4173] usb 2-1: USB disconnect, device number 6 [ 103.453599][ T4236] hub 1-1:4.0: 2 ports detected [ 103.635729][ T5680] device syzkaller0 entered promiscuous mode [ 103.671171][ T4371] udevd[4371]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 104.015259][ T5690] device syzkaller0 entered promiscuous mode [ 104.123234][ T4236] usb 1-1: USB disconnect, device number 6 [ 104.659859][ T5716] MPTCP: addr_signal error, rm_addr=1 [ 105.017671][ T5735] device syzkaller0 entered promiscuous mode [ 105.041021][ T5741] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 105.200231][ T5745] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 105.906359][ T5762] ================================================================== [ 105.914862][ T5762] BUG: KASAN: use-after-free in ax25_release+0x5ca/0x870 [ 105.921947][ T5762] Read of size 8 at addr ffff888078809b08 by task syz.1.552/5762 [ 105.929694][ T5762] [ 105.932057][ T5762] CPU: 0 PID: 5762 Comm: syz.1.552 Not tainted syzkaller #0 [ 105.939366][ T5762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 105.949455][ T5762] Call Trace: [ 105.952760][ T5762] [ 105.955739][ T5762] dump_stack_lvl+0x188/0x250 [ 105.960461][ T5762] ? show_regs_print_info+0x20/0x20 [ 105.965702][ T5762] ? _printk+0xda/0x130 [ 105.969896][ T5762] ? ax25_release+0x5ca/0x870 [ 105.974625][ T5762] ? load_image+0x400/0x400 [ 105.979173][ T5762] print_address_description+0x60/0x2d0 [ 105.984746][ T5762] ? ax25_release+0x5ca/0x870 [ 105.989443][ T5762] kasan_report+0xdf/0x130 [ 105.993912][ T5762] ? ax25_release+0x5ca/0x870 [ 105.998636][ T5762] ax25_release+0x5ca/0x870 [ 106.003170][ T5762] sock_close+0xd5/0x240 [ 106.007464][ T5762] ? sock_mmap+0x90/0x90 [ 106.011751][ T5762] __fput+0x234/0x930 [ 106.015787][ T5762] task_work_run+0x125/0x1a0 [ 106.020422][ T5762] exit_to_user_mode_loop+0x10f/0x130 [ 106.025834][ T5762] exit_to_user_mode_prepare+0xee/0x180 [ 106.031412][ T5762] syscall_exit_to_user_mode+0x16/0x40 [ 106.036907][ T5762] do_syscall_64+0x58/0xa0 [ 106.041357][ T5762] ? clear_bhb_loop+0x30/0x80 [ 106.046069][ T5762] ? clear_bhb_loop+0x30/0x80 [ 106.050788][ T5762] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 106.056726][ T5762] RIP: 0033:0x7fda7d1bbf79 [ 106.061173][ T5762] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.080928][ T5762] RSP: 002b:00007ffd7653de88 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 106.089378][ T5762] RAX: 0000000000000000 RBX: 00007ffd7653df70 RCX: 00007fda7d1bbf79 [ 106.097376][ T5762] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 106.105381][ T5762] RBP: 0000000000019d42 R08: 0000000000000001 R09: 0000000000000000 [ 106.113382][ T5762] R10: 0000001b31420000 R11: 0000000000000246 R12: 00007ffd7653dfb0 [ 106.121377][ T5762] R13: 00007fda7d435fac R14: 0000000000019dac R15: 00007fda7d435fa0 [ 106.129390][ T5762] [ 106.132427][ T5762] [ 106.134762][ T5762] Allocated by task 4813: [ 106.139139][ T5762] __kasan_kmalloc+0xb5/0xf0 [ 106.143759][ T5762] ax25_dev_device_up+0x50/0x580 [ 106.148715][ T5762] ax25_device_event+0x483/0x4f0 [ 106.153675][ T5762] raw_notifier_call_chain+0xcb/0x160 [ 106.159078][ T5762] __dev_notify_flags+0x194/0x300 [ 106.164136][ T5762] dev_change_flags+0xe3/0x1a0 [ 106.168927][ T5762] dev_ifsioc+0x130/0xd50 [ 106.173297][ T5762] dev_ioctl+0x545/0xe30 [ 106.177573][ T5762] sock_do_ioctl+0x245/0x320 [ 106.182197][ T5762] sock_ioctl+0x4d2/0x710 [ 106.186556][ T5762] __se_sys_ioctl+0xfa/0x170 [ 106.191173][ T5762] do_syscall_64+0x4c/0xa0 [ 106.195617][ T5762] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 106.201550][ T5762] [ 106.203273][ T5768] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 106.203902][ T5762] Freed by task 5764: [ 106.215036][ T5762] kasan_set_track+0x4b/0x70 [ 106.219656][ T5762] kasan_set_free_info+0x1f/0x40 [ 106.224620][ T5762] ____kasan_slab_free+0xd5/0x110 [ 106.229669][ T5762] slab_free_freelist_hook+0xea/0x170 [ 106.235061][ T5762] kfree+0xef/0x2a0 [ 106.238898][ T5762] ax25_device_event+0x4b4/0x4f0 [ 106.243882][ T5762] raw_notifier_call_chain+0xcb/0x160 [ 106.249284][ T5762] __dev_notify_flags+0x158/0x300 [ 106.254324][ T5762] dev_change_flags+0xe3/0x1a0 [ 106.259204][ T5762] dev_ifsioc+0x130/0xd50 [ 106.263689][ T5762] dev_ioctl+0x545/0xe30 [ 106.267948][ T5762] sock_do_ioctl+0x245/0x320 [ 106.272570][ T5762] sock_ioctl+0x4d2/0x710 [ 106.276931][ T5762] __se_sys_ioctl+0xfa/0x170 [ 106.281533][ T5762] do_syscall_64+0x4c/0xa0 [ 106.285960][ T5762] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 106.291878][ T5762] [ 106.294213][ T5762] The buggy address belongs to the object at ffff888078809b00 [ 106.294213][ T5762] which belongs to the cache kmalloc-192 of size 192 [ 106.308288][ T5762] The buggy address is located 8 bytes inside of [ 106.308288][ T5762] 192-byte region [ffff888078809b00, ffff888078809bc0) [ 106.321397][ T5762] The buggy address belongs to the page: [ 106.327044][ T5762] page:ffffea0001e20240 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78809 [ 106.337291][ T5762] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 106.344860][ T5762] raw: 00fff00000000200 ffffea00008ca8c0 0000000200000002 ffff888016c41a00 [ 106.353472][ T5762] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 106.362055][ T5762] page dumped because: kasan: bad access detected [ 106.368472][ T5762] page_owner tracks the page as allocated [ 106.374185][ T5762] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 4340, ts 67926656401, free_ts 67901226117 [ 106.390170][ T5762] get_page_from_freelist+0x1bbd/0x1ca0 [ 106.395726][ T5762] __alloc_pages+0x1ee/0x480 [ 106.400321][ T5762] new_slab+0xb6/0x4b0 [ 106.404399][ T5762] ___slab_alloc+0x80a/0xdd0 [ 106.408996][ T5762] __kmalloc_node+0x200/0x3b0 [ 106.413682][ T5762] memcg_alloc_page_obj_cgroups+0x81/0x120 [ 106.419491][ T5762] new_slab+0x100/0x4b0 [ 106.423654][ T5762] ___slab_alloc+0x80a/0xdd0 [ 106.428265][ T5762] kmem_cache_alloc+0x195/0x290 [ 106.433140][ T5762] __d_alloc+0x2a/0x6f0 [ 106.437300][ T5762] d_alloc_pseudo+0x19/0x70 [ 106.441808][ T5762] alloc_file_pseudo+0xe0/0x200 [ 106.446659][ T5762] sock_alloc_file+0xb3/0x240 [ 106.451353][ T5762] __sys_socket+0x11d/0x170 [ 106.455866][ T5762] __x64_sys_socket+0x76/0x80 [ 106.460555][ T5762] do_syscall_64+0x4c/0xa0 [ 106.464983][ T5762] page last free stack trace: [ 106.469660][ T5762] free_unref_page_prepare+0x637/0x6c0 [ 106.475126][ T5762] free_unref_page+0x8f/0x2a0 [ 106.479817][ T5762] af_alg_free_resources+0x3cd/0x650 [ 106.485114][ T5762] skcipher_recvmsg+0xa84/0xd60 [ 106.489975][ T5762] ____sys_recvmsg+0x2cd/0x5e0 [ 106.494758][ T5762] ___sys_recvmsg+0x21a/0x5c0 [ 106.499447][ T5762] __x64_sys_recvmsg+0x1f9/0x2c0 [ 106.504399][ T5762] do_syscall_64+0x4c/0xa0 [ 106.508815][ T5762] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 106.514732][ T5762] [ 106.517067][ T5762] Memory state around the buggy address: [ 106.522708][ T5762] ffff888078809a00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 106.530777][ T5762] ffff888078809a80: 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc [ 106.538857][ T5762] >ffff888078809b00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 106.546929][ T5762] ^ [ 106.551268][ T5762] ffff888078809b80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 106.559348][ T5762] ffff888078809c00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 106.567435][ T5762] ================================================================== [ 106.575497][ T5762] Disabling lock debugging due to kernel taint [ 106.663211][ T5762] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 106.670476][ T5762] CPU: 0 PID: 5762 Comm: syz.1.552 Tainted: G B syzkaller #0 [ 106.679183][ T5762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 106.689268][ T5762] Call Trace: [ 106.692567][ T5762] [ 106.695518][ T5762] dump_stack_lvl+0x188/0x250 [ 106.700239][ T5762] ? show_regs_print_info+0x20/0x20 [ 106.705468][ T5762] ? load_image+0x400/0x400 [ 106.710015][ T5762] panic+0x2e5/0x810 [ 106.713975][ T5762] ? bpf_jit_dump+0xd0/0xd0 [ 106.718507][ T5762] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 106.724510][ T5762] ? _raw_spin_unlock+0x40/0x40 [ 106.729376][ T5762] ? print_memory_metadata+0x314/0x400 [ 106.734868][ T5762] ? ax25_release+0x5ca/0x870 [ 106.739562][ T5762] check_panic_on_warn+0x80/0xa0 [ 106.744559][ T5762] ? ax25_release+0x5ca/0x870 [ 106.749255][ T5762] end_report+0x6d/0xf0 [ 106.753419][ T5762] kasan_report+0x102/0x130 [ 106.757939][ T5762] ? ax25_release+0x5ca/0x870 [ 106.762642][ T5762] ax25_release+0x5ca/0x870 [ 106.767156][ T5762] sock_close+0xd5/0x240 [ 106.771411][ T5762] ? sock_mmap+0x90/0x90 [ 106.775670][ T5762] __fput+0x234/0x930 [ 106.779661][ T5762] task_work_run+0x125/0x1a0 [ 106.784260][ T5762] exit_to_user_mode_loop+0x10f/0x130 [ 106.789649][ T5762] exit_to_user_mode_prepare+0xee/0x180 [ 106.795263][ T5762] syscall_exit_to_user_mode+0x16/0x40 [ 106.800750][ T5762] do_syscall_64+0x58/0xa0 [ 106.805178][ T5762] ? clear_bhb_loop+0x30/0x80 [ 106.809881][ T5762] ? clear_bhb_loop+0x30/0x80 [ 106.814565][ T5762] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 106.820462][ T5762] RIP: 0033:0x7fda7d1bbf79 [ 106.824893][ T5762] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.844529][ T5762] RSP: 002b:00007ffd7653de88 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 106.852962][ T5762] RAX: 0000000000000000 RBX: 00007ffd7653df70 RCX: 00007fda7d1bbf79 [ 106.860980][ T5762] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 106.868960][ T5762] RBP: 0000000000019d42 R08: 0000000000000001 R09: 0000000000000000 [ 106.876955][ T5762] R10: 0000001b31420000 R11: 0000000000000246 R12: 00007ffd7653dfb0 [ 106.884936][ T5762] R13: 00007fda7d435fac R14: 0000000000019dac R15: 00007fda7d435fa0 [ 106.892925][ T5762] [ 106.896129][ T5762] Kernel Offset: disabled [ 106.900468][ T5762] Rebooting in 86400 seconds..