last executing test programs: 2.317529824s ago: executing program 2 (id=276): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000400)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f00000006c0)="38000000010006", 0x7) 2.213622721s ago: executing program 2 (id=279): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4}, {}, {0x6, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc858}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0x0, 0xfff1}, {0x0, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000805}, 0x4049008) 1.881387113s ago: executing program 1 (id=285): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x2, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56441, 0x70bd28, 0x80100, {0x0, 0x0, 0x0, r7, {0x0, 0xfff2}, {0xfff2, 0xb}, {0x4, 0xb}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0xee0b}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c821}, 0x20008844) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$packet(0x11, 0x3, 0x300) r9 = socket$netlink(0x10, 0x3, 0x0) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendto$packet(r8, &(0x7f00000002c0)="0503d6fcd3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x8100, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.829110556s ago: executing program 3 (id=286): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffb, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x6, 0xd21, 0x101, 0x6, 0x5, 0xbd, 0x100, 0x4}}}}]}, 0x58}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r8, 0x15}, 0x80, &(0x7f0000000500)=[{&(0x7f00000002c0)="f2", 0x1}], 0x1}, 0x44) 1.759709041s ago: executing program 2 (id=287): shutdown(0xffffffffffffffff, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) 1.654487188s ago: executing program 0 (id=289): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@bridge_dellink={0x24, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x8400, 0x40000}, [@IFLA_AF_SPEC={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x60}, 0x20000000) 1.612113091s ago: executing program 1 (id=290): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)={0x94, r3, 0x5eae78d9c54e9d3f, 0x0, 0x27dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x4}, @NL802154_ATTR_SEC_KEY={0x74, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "90f3695395bd41d0c6823a55808f9037"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x7}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "aeb1dd2c570dcb9d5ab2bdbb2426133fb9838fbc41cc1d7e57bf3e4276f971b5"}, @NL802154_KEY_ATTR_ID={0x18, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x72}]}, @NL802154_KEY_ATTR_ID={0x18, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x20040000}, 0x200440c4) 1.583758443s ago: executing program 2 (id=291): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85", 0x58}, {0x0}, {&(0x7f0000000780)}, {0x0}], 0x4}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0}}], 0x2, 0x20000044) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x40800) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_TDLS_OPER(r4, 0x0, 0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) write$nci(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="600602"], 0x6) 1.429320633s ago: executing program 0 (id=292): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000003480)=@newqdisc={0x860, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x834, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0xfffffffe, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x1, 0xfffffffc, 0x4, 0x1, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x2, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x4fe, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xfc, 0x9, 0xa7, 0xf, 0x2, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ab, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x0, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x80000009, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x1fd, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x8, 0x200006, 0xd, 0x400, 0x0, 0x3, 0x5, 0x10000, 0x7, 0x4, 0x81, 0x0, 0x8, 0x0, 0x9, 0x5, 0xc0000, 0x8001, 0x1, 0x2000, 0x1, 0x8da5, 0x1, 0x4, 0x2, 0x6, 0x58, 0x7, 0x6f, 0x8, 0x3, 0x4, 0x9, 0x1000, 0x4, 0x9, 0x6, 0x80000001, 0x3, 0x1, 0xd4, 0x100, 0xa, 0xfff, 0x8, 0x9, 0x7, 0x7fffffff, 0xf4b3, 0x1, 0x0, 0x8, 0x8, 0x6, 0xd815, 0xfffffff9, 0x2, 0x401, 0x9, 0x36, 0xf, 0x74, 0xbbc, 0x9, 0x0, 0x6, 0x8, 0x5, 0x6, 0xb, 0x5, 0x5, 0x4e3, 0x200, 0x0, 0x9, 0x8001, 0x2, 0x1000, 0x7fffffff, 0x46a3, 0x6, 0x2, 0x1dd50645, 0x401, 0x5, 0x101, 0xbf, 0x0, 0x9, 0x3, 0x65, 0xffffff13, 0x2, 0x30, 0x1a3f, 0x2, 0x389c, 0x4, 0x3, 0x3ff, 0x4, 0x4, 0x6, 0xf3bb, 0x1ff, 0x8, 0xf, 0xb, 0x401, 0x4, 0x1000, 0x1, 0x8, 0x1, 0x7ff, 0x7fff, 0x8, 0x408, 0x3ff, 0x4, 0x1, 0xffff, 0x7fff, 0x2, 0x9, 0x1, 0xfff, 0x0, 0xfffffffe, 0x4, 0x0, 0x101, 0x78f0, 0xf, 0x7, 0x0, 0x3, 0xf1c7, 0x100, 0x3, 0x4, 0xfffffffe, 0xffffff7f, 0x3, 0x0, 0x6, 0xd, 0x3, 0xa, 0x8, 0x200, 0x0, 0x400, 0x9, 0x6, 0x132f, 0xaba3, 0x1, 0x3, 0x5, 0x5, 0x6f788000, 0xc, 0x1ff, 0x40, 0x9, 0x3, 0x2, 0x1, 0x0, 0x71, 0xb13, 0x4, 0xbc5, 0x0, 0x7, 0xffff, 0x100, 0x7b58, 0x1, 0x807, 0x1ff, 0x3, 0x400, 0x80000000, 0x1040, 0x3, 0xfffffffa, 0x9a5, 0x8, 0x5, 0x1, 0x9, 0x3, 0x9, 0x7, 0x3, 0x1, 0x101, 0x4, 0x6, 0x598f, 0x5, 0x8e, 0x0, 0xa, 0x9, 0x1000, 0x8, 0xd00f, 0x2, 0x1, 0x6, 0x2a, 0x7, 0x100, 0x24e, 0xbd, 0x2, 0x2800000, 0x807, 0x0, 0x401, 0x6, 0x2, 0x9, 0x7039, 0x4, 0x1, 0x9, 0x1, 0xb18, 0x2, 0xfffffffe, 0x26e, 0x6, 0x5c, 0x8, 0x100, 0x3ff, 0x1, 0x0, 0xb, 0x10000, 0x8, 0x6, 0x2, 0x6, 0x7, 0x2, 0x7ff, 0x1, 0x4, 0x8001, 0x3]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x3f, 0x2, 0x0, 0x0, 0x97ab, 0x40}, {0x2, 0x0, 0x3, 0x57, 0x8, 0x3}, 0x1, 0x2, 0xa2d}}]}}]}, 0x860}, 0x1, 0x0, 0x0, 0x40098}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.369165408s ago: executing program 3 (id=293): r0 = socket(0xa, 0x3, 0xff) unshare(0x22020400) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x2c) 1.310185201s ago: executing program 1 (id=294): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1", 0x83}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c617c69458d721eb85d0e5372751cd23cc88571f540aa75255a73b8c9cdc2e75edf622add4302f913d9", 0xb2}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0, 0x0, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x78}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e00)="abc662f2a7dc713d226b612e712df36db5547daf508fb74a679224eba0fe5f05c53081ff6ebac83c264c6deeec6d4546fe7d00337f488ecee46577d71b39e24cdef94f16295eb7", 0x47}], 0x1}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa464", 0xd}], 0x1}}], 0x4, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000100)=0xfffffffe, 0x4) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.233562957s ago: executing program 2 (id=295): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000002a80)=[{&(0x7f0000000080)="c2", 0x1}], 0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) write$cgroup_pid(r4, &(0x7f0000000000), 0xffffff98) splice(r0, 0x0, r4, 0x0, 0x5, 0x6) write(r2, 0x0, 0x0) 1.18548082s ago: executing program 3 (id=296): sendmsg(0xffffffffffffffff, 0x0, 0x48000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x7}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x7fffffff}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756a85d86dd", 0x5ea, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) 1.101794685s ago: executing program 4 (id=297): unshare(0x28000600) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, 0x0) 997.334052ms ago: executing program 1 (id=298): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0xe22, 0x0, @loopback={0xff00000000000000}}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) 905.682789ms ago: executing program 4 (id=299): bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={0xffffffffffffffff, 0x0, &(0x7f0000000680)=""/246}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x15) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xts-twofish-avx,camellia-asm,cbcmac(aes))\x00'}, 0x58) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="04010000100053"], 0x104}, 0x1, 0xf0ffffff, 0x0, 0x20040890}, 0x200080c0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000280)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x28, r4, 0x101, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x84) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x8, 0x3, 0x2b0, 0x0, 0xffffffff, 0xffffffff, 0x148, 0xffffffff, 0x218, 0xffffffff, 0xffffffff, 0x218, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0xe8, 0x148, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @common=@inet=@multiport={{0x50}, {0x2, 0x6, [0x4e22, 0x4e21, 0x4e24, 0x4e23, 0x4e22, 0x4e23, 0x4e22, 0x4e24, 0x4e20, 0x4e23, 0x4e22, 0x4e23, 0x4e21, 0x4e20, 0x4e22], [0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1], 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, 0x3, 0x8, [0x2e, 0xf, 0x30, 0x30, 0xc, 0x29, 0x21, 0x29, 0x25, 0x3c, 0x34, 0x2b, 0xb, 0x39, 0x23, 0x27], 0x0, 0xffffffff, 0x5}}}, {{@ip={@local, @dev={0xac, 0x14, 0x14, 0x3e}, 0xffffffff, 0x0, 'veth0_to_team\x00', 'team_slave_0\x00', {}, {0xff}, 0x6c, 0x3, 0x8}, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@local, [0xff, 0xffffffff, 0xff000000, 0xff], 0x4e23, 0x4e23, 0x4e22, 0x4e23, 0x8128, 0x8, 0xfffffffd, 0x1a67, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), r7) r10 = getpid() r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x59, r11, 0x4, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x38, r9, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_PID={0x8, 0x1c, r10}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0xc) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xa, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="611289000000000061134c0000000000bf2000000000000007000000080000002d0301"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x12}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f90724fc60040f03", 0x17}], 0x1}, 0x0) socket$kcm(0x10, 0x400000002, 0x0) 895.48654ms ago: executing program 0 (id=300): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendto$packet(r0, 0x0, 0x0, 0x8, 0x0, 0x0) 809.382845ms ago: executing program 1 (id=301): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r0, &(0x7f0000000600)={&(0x7f0000000040)={0xa, 0x4e22, 0x3, @mcast2, 0x1}, 0x1c, 0x0}, 0x80) 701.597792ms ago: executing program 0 (id=302): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x772}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x439, 0x10000000, 0x0, {0x0, 0x0, 0x0, r4, 0x69801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x2}}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendto$packet(r1, &(0x7f00000001c0)="11eb0300", 0x4, 0x2404c081, &(0x7f0000000200)={0x11, 0x88a8, r4, 0x1, 0x4, 0x6, @multicast}, 0x14) 700.998983ms ago: executing program 3 (id=303): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffb, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x6, 0xd21, 0x101, 0x6, 0x5, 0xbd, 0x100, 0x4}}}}]}, 0x58}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r8, 0x15}, 0x80, &(0x7f0000000500)=[{&(0x7f00000002c0)="f2", 0x1}], 0x1}, 0x44) 641.173316ms ago: executing program 1 (id=304): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e22, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000000)={r2, 0x4}, 0x8) 401.421443ms ago: executing program 4 (id=305): r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000440)=0x1, 0x4) sendmsg$inet(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x2, 0x4c22, @multicast2}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000140)="0800101d89b5eb00", 0x8}], 0x1}, 0x4008084) 353.751106ms ago: executing program 2 (id=306): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$igmp6(0xa, 0x3, 0x2) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r0 = socket$netlink(0x10, 0x3, 0x12) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newqdisc={0x24, 0x10, 0x100, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x6, 0x6}, {0xfff1}, {0xe, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 334.549217ms ago: executing program 4 (id=307): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe, 0x0, 0x3}, 0x1c) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000040)=0x2, 0x4) 233.451684ms ago: executing program 0 (id=308): unshare(0x20040600) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x46, &(0x7f0000000080)='team0\x00', 0x10) 189.084657ms ago: executing program 4 (id=309): unshare(0x400) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000180)=0x8, 0x4) 143.76739ms ago: executing program 4 (id=310): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000003480)=@newqdisc={0x860, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x834, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0xfffffffe, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x1, 0xfffffffc, 0x4, 0x1, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x2, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x4fe, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xfc, 0x9, 0xa7, 0xf, 0x2, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ab, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x0, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x80000009, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x1fd, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x8, 0x200006, 0xd, 0x400, 0x0, 0x3, 0x5, 0x10000, 0x7, 0x4, 0x81, 0x0, 0x8, 0x0, 0x9, 0x5, 0xc0000, 0x8001, 0x1, 0x2000, 0x1, 0x8da5, 0x1, 0x4, 0x2, 0x6, 0x58, 0x7, 0x6f, 0x8, 0x3, 0x4, 0x9, 0x1000, 0x4, 0x9, 0x6, 0x80000001, 0x3, 0x1, 0xd4, 0x100, 0xa, 0xfff, 0x8, 0x9, 0x7, 0x7fffffff, 0xf4b3, 0x1, 0x0, 0x8, 0x8, 0x6, 0xd815, 0xfffffff9, 0x2, 0x401, 0x9, 0x36, 0xf, 0x74, 0xbbc, 0x9, 0x0, 0x6, 0x8, 0x5, 0x6, 0xb, 0x5, 0x5, 0x4e3, 0x200, 0x0, 0x9, 0x8001, 0x2, 0x1000, 0x7fffffff, 0x46a3, 0x6, 0x2, 0x1dd50645, 0x401, 0x5, 0x101, 0xbf, 0x0, 0x9, 0x3, 0x65, 0xffffff13, 0x2, 0x30, 0x1a3f, 0x2, 0x389c, 0x4, 0x3, 0x3ff, 0x4, 0x4, 0x6, 0xf3bb, 0x1ff, 0x8, 0xf, 0xb, 0x401, 0x4, 0x1000, 0x1, 0x8, 0x1, 0x7ff, 0x7fff, 0x8, 0x408, 0x3ff, 0x4, 0x1, 0xffff, 0x7fff, 0x2, 0x9, 0x1, 0xfff, 0x0, 0xfffffffe, 0x4, 0x0, 0x101, 0x78f0, 0xf, 0x7, 0x0, 0x3, 0xf1c7, 0x100, 0x3, 0x4, 0xfffffffe, 0xffffff7f, 0x3, 0x0, 0x6, 0xd, 0x3, 0xa, 0x8, 0x200, 0x0, 0x400, 0x9, 0x6, 0x132f, 0xaba3, 0x1, 0x3, 0x5, 0x5, 0x6f788000, 0xc, 0x1ff, 0x40, 0x9, 0x3, 0x2, 0x1, 0x0, 0x71, 0xb13, 0x4, 0xbc5, 0x0, 0x7, 0xffff, 0x100, 0x7b58, 0x1, 0x807, 0x1ff, 0x3, 0x400, 0x80000000, 0x1040, 0x3, 0xfffffffa, 0x9a5, 0x8, 0x5, 0x1, 0x9, 0x3, 0x9, 0x7, 0x3, 0x1, 0x101, 0x4, 0x6, 0x598f, 0x5, 0x8e, 0x0, 0xa, 0x9, 0x1000, 0x8, 0xd00f, 0x2, 0x1, 0x6, 0x2a, 0x7, 0x100, 0x24e, 0xbd, 0x2, 0x2800000, 0x807, 0x0, 0x401, 0x6, 0x2, 0x9, 0x7039, 0x4, 0x1, 0x9, 0x1, 0xb18, 0x2, 0xfffffffe, 0x26e, 0x6, 0x5c, 0x8, 0x100, 0x3ff, 0x1, 0x0, 0xb, 0x10000, 0x8, 0x6, 0x2, 0x6, 0x7, 0x2, 0x7ff, 0x1, 0x4, 0x8001, 0x3]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x3f, 0x2, 0x0, 0x0, 0x97ab, 0x40}, {0x2, 0x0, 0x3, 0x57, 0x8, 0x3}, 0x1, 0x2, 0xa2d}}]}}]}, 0x860}, 0x1, 0x0, 0x0, 0x40098}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 69.356045ms ago: executing program 0 (id=311): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r2, &(0x7f0000000100)={{0x3, @null, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) read(r2, &(0x7f00000000c0)=""/20, 0x14) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) 69.122055ms ago: executing program 3 (id=312): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={0x18, 0x0, 0x1, 0x401, 0x21, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8d7f1b7f2655125c}, 0x0) 0s ago: executing program 3 (id=313): sendmsg(0xffffffffffffffff, 0x0, 0x48000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x7}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x7fffffff}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756a85d86dd", 0x5ea, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.235' (ED25519) to the list of known hosts. [ 50.168975][ T4169] cgroup: Unknown subsys name 'net' [ 50.302759][ T4169] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 51.747043][ T4169] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 53.711151][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 53.768659][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 53.800894][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 53.872584][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 53.884414][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 53.906043][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.913338][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.921923][ T4185] device bridge_slave_0 entered promiscuous mode [ 53.935533][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.943002][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.951254][ T4185] device bridge_slave_1 entered promiscuous mode [ 54.019655][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.041678][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.048932][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.056570][ T4194] device bridge_slave_0 entered promiscuous mode [ 54.065517][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.090065][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.097446][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.105166][ T4194] device bridge_slave_1 entered promiscuous mode [ 54.119773][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.127424][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.135110][ T4191] device bridge_slave_0 entered promiscuous mode [ 54.173514][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.180817][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.189574][ T4191] device bridge_slave_1 entered promiscuous mode [ 54.206921][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.213990][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.222248][ T4189] device bridge_slave_0 entered promiscuous mode [ 54.237289][ T4185] team0: Port device team_slave_0 added [ 54.249268][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.256374][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.267961][ T4190] device bridge_slave_0 entered promiscuous mode [ 54.275566][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.282908][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.290631][ T4189] device bridge_slave_1 entered promiscuous mode [ 54.299397][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.310630][ T4185] team0: Port device team_slave_1 added [ 54.318051][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.332871][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.340206][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.348435][ T4190] device bridge_slave_1 entered promiscuous mode [ 54.382879][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.407185][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.425524][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.441595][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.452942][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.468548][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.475533][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.502070][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.516462][ T4194] team0: Port device team_slave_0 added [ 54.531552][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.549627][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.556605][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.583006][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.595880][ T4194] team0: Port device team_slave_1 added [ 54.610912][ T4189] team0: Port device team_slave_0 added [ 54.624795][ T4189] team0: Port device team_slave_1 added [ 54.643175][ T4191] team0: Port device team_slave_0 added [ 54.651538][ T4191] team0: Port device team_slave_1 added [ 54.699132][ T4190] team0: Port device team_slave_0 added [ 54.718539][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.725522][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.751733][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.774583][ T4185] device hsr_slave_0 entered promiscuous mode [ 54.781717][ T4185] device hsr_slave_1 entered promiscuous mode [ 54.789835][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.796970][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.823292][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.835777][ T4190] team0: Port device team_slave_1 added [ 54.853030][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.860481][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.886579][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.898270][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.905240][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.931619][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.947736][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.954706][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.980741][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.999190][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.006250][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.032607][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.061752][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.069096][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.095423][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.109293][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.116250][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.142353][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.177522][ T4191] device hsr_slave_0 entered promiscuous mode [ 55.185060][ T4191] device hsr_slave_1 entered promiscuous mode [ 55.192246][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.200066][ T4191] Cannot create hsr debugfs directory [ 55.266443][ T4190] device hsr_slave_0 entered promiscuous mode [ 55.274175][ T4190] device hsr_slave_1 entered promiscuous mode [ 55.281569][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.289208][ T4190] Cannot create hsr debugfs directory [ 55.308221][ T4194] device hsr_slave_0 entered promiscuous mode [ 55.314857][ T4194] device hsr_slave_1 entered promiscuous mode [ 55.324529][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.332387][ T4194] Cannot create hsr debugfs directory [ 55.342355][ T4189] device hsr_slave_0 entered promiscuous mode [ 55.349363][ T4189] device hsr_slave_1 entered promiscuous mode [ 55.355997][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.364653][ T4189] Cannot create hsr debugfs directory [ 55.397692][ T1110] Bluetooth: hci3: command 0x0409 tx timeout [ 55.404449][ T1110] Bluetooth: hci0: command 0x0409 tx timeout [ 55.476875][ T1110] Bluetooth: hci2: command 0x0409 tx timeout [ 55.482982][ T1110] Bluetooth: hci1: command 0x0409 tx timeout [ 55.487086][ T4174] Bluetooth: hci4: command 0x0409 tx timeout [ 55.704303][ T4191] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 55.715601][ T4191] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 55.735125][ T4191] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 55.744252][ T4191] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 55.789371][ T4194] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.804344][ T4194] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.814062][ T4194] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.825162][ T4194] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.869122][ T4190] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 55.879403][ T4190] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 55.899381][ T4190] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.914840][ T4190] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 56.002216][ T4189] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 56.016160][ T4189] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 56.032268][ T4189] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 56.069876][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.089281][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.098422][ T4189] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 56.126622][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.141814][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.152134][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.160227][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.169257][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.177501][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.186209][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.195699][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.202961][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.220190][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.238184][ T4185] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 56.246514][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.255069][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.264132][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.272911][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.280044][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.297315][ T4185] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 56.308499][ T4185] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 56.319976][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.326953][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.335344][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.345397][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.354082][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.361313][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.369288][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.383536][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.392312][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.401000][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.408260][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.418256][ T4185] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 56.435752][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.444528][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.461654][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.475581][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.485142][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.494532][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.503679][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.510793][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.520058][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.560409][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.570727][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.582021][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.591246][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.600292][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.609340][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.616478][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.626461][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.635150][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.644428][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.653585][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.663293][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.672344][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.681644][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.690294][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.699342][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.708958][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.717162][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.757645][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.770951][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.780120][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.789611][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.799088][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.807551][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.816157][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.824876][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.834245][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.844579][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.854311][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.864318][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.873329][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.887915][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.897531][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.924582][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.933136][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.944674][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.969638][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.991354][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.029157][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.036140][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.049063][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.099638][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.108084][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.121694][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.133253][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.161046][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.177464][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.203102][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.210275][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.266980][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.275661][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.291895][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.302521][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.309749][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.319591][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.330296][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.339206][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.346602][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.354563][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.365352][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.374145][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.382366][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.390573][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.405432][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.418178][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.441349][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.463594][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.477121][ T23] Bluetooth: hci0: command 0x041b tx timeout [ 57.479632][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.489071][ T23] Bluetooth: hci3: command 0x041b tx timeout [ 57.509353][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.523544][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.531733][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.545990][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.559701][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.568877][ T23] Bluetooth: hci4: command 0x041b tx timeout [ 57.573535][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.575021][ T23] Bluetooth: hci1: command 0x041b tx timeout [ 57.585014][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.589397][ T23] Bluetooth: hci2: command 0x041b tx timeout [ 57.596248][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.614920][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.626199][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.661916][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.674579][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.683871][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.693265][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.703043][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.711906][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.719122][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.727954][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.760175][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.773169][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.805456][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.813419][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.829249][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.859449][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.880001][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.897325][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.906256][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.923470][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.934617][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.963207][ T4194] device veth0_vlan entered promiscuous mode [ 57.982095][ T4194] device veth1_vlan entered promiscuous mode [ 57.993182][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.002734][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.013892][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.022458][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.031273][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.039784][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.048545][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.057067][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.065301][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.073361][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.090894][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.100255][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.113275][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.122596][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.144328][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.164119][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.175656][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.193103][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.201735][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.213897][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.222213][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.233036][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.250301][ T4191] device veth0_vlan entered promiscuous mode [ 58.261002][ T4194] device veth0_macvtap entered promiscuous mode [ 58.272112][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.285028][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.319538][ T4194] device veth1_macvtap entered promiscuous mode [ 58.337296][ T4191] device veth1_vlan entered promiscuous mode [ 58.361770][ T4190] device veth0_vlan entered promiscuous mode [ 58.370765][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.383728][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.392707][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.401763][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.410517][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.419629][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.429340][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.438371][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.447244][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.455247][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.481730][ T4190] device veth1_vlan entered promiscuous mode [ 58.509655][ T4191] device veth0_macvtap entered promiscuous mode [ 58.529473][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.539348][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.548003][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.555601][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.563527][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.573549][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.582830][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.591535][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.602305][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.610768][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.619576][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.630472][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.641284][ T4191] device veth1_macvtap entered promiscuous mode [ 58.656579][ T4190] device veth0_macvtap entered promiscuous mode [ 58.665997][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.675349][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.686279][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.695617][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.705366][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.714174][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.727043][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.739349][ T4185] device veth0_vlan entered promiscuous mode [ 58.748439][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.759409][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.770044][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.778548][ T4190] device veth1_macvtap entered promiscuous mode [ 58.790944][ T4185] device veth1_vlan entered promiscuous mode [ 58.804056][ T4194] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.813281][ T4194] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.822089][ T4194] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.831140][ T4194] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.852774][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.863991][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.878320][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.909293][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.919927][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.930924][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.940050][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.951552][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.962670][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.973725][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.994529][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.005667][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.023464][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.034352][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.046424][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.056438][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.065961][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.075224][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.084678][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.094372][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.103959][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.130382][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.140999][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.151446][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.162498][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.174221][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.183341][ T4191] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.192341][ T4191] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.201705][ T4191] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.210854][ T4191] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.242831][ T4189] device veth0_vlan entered promiscuous mode [ 59.273556][ T4185] device veth0_macvtap entered promiscuous mode [ 59.286056][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.295200][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.304826][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.313418][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.322490][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.331487][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.340094][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.348339][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.355989][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.365984][ T4190] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.375922][ T4190] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.384725][ T4190] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.393777][ T4190] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.433635][ T4185] device veth1_macvtap entered promiscuous mode [ 59.450657][ T4189] device veth1_vlan entered promiscuous mode [ 59.509531][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.513710][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.519285][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.537893][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.549052][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.559717][ T4227] Bluetooth: hci3: command 0x040f tx timeout [ 59.559943][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.565923][ T4227] Bluetooth: hci0: command 0x040f tx timeout [ 59.581494][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.593033][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.604645][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.616435][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.629064][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.639453][ T23] Bluetooth: hci2: command 0x040f tx timeout [ 59.640765][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.645957][ T23] Bluetooth: hci1: command 0x040f tx timeout [ 59.661722][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.662559][ T23] Bluetooth: hci4: command 0x040f tx timeout [ 59.672622][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.688995][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.700522][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.719722][ T4185] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.729181][ T4185] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.739695][ T4185] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.748923][ T4185] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.759651][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.768523][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.776490][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.785223][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.793693][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.803699][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.812484][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.822753][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.894758][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.905287][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.937170][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.939869][ T4242] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.950818][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.955741][ T4242] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.963308][ T4189] device veth0_macvtap entered promiscuous mode [ 59.984487][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.993794][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.002836][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.034486][ T156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.045042][ T156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.053428][ T4189] device veth1_macvtap entered promiscuous mode [ 60.084164][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.103663][ T156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.120459][ T156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.150658][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.173922][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.192553][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.203601][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.223776][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.235113][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.246149][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.258287][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.269101][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.283488][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.326989][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.335795][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.386067][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.411481][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.430749][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.449335][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.463406][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.483732][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.495943][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.513058][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.526484][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.535290][ T4268] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET) [ 60.568646][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.586835][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.599664][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.608249][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.628066][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.656449][ T4189] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.682240][ T4189] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.708960][ T4189] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.719997][ T4189] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.854384][ T156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.862541][ T156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.870784][ T4242] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.885433][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.896629][ T4242] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.905700][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.931976][ T4273] device syzkaller0 entered promiscuous mode [ 61.153112][ T4242] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.171265][ T4242] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.177787][ T4281] Zero length message leads to an empty skb [ 61.213108][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.234096][ T4279] tipc: Started in network mode [ 61.244479][ T4279] tipc: Node identity fa6d18dd2758, cluster identity 4711 [ 61.269820][ T4279] tipc: Enabled bearer , priority 0 [ 61.292425][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.331673][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.414621][ T4286] device syzkaller0 entered promiscuous mode [ 61.446919][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.481027][ T4278] tipc: Resetting bearer [ 61.563460][ T4278] tipc: Disabling bearer [ 61.639018][ T4227] Bluetooth: hci0: command 0x0419 tx timeout [ 61.657016][ T4227] Bluetooth: hci3: command 0x0419 tx timeout [ 61.728101][ T4227] Bluetooth: hci4: command 0x0419 tx timeout [ 61.735051][ T4227] Bluetooth: hci1: command 0x0419 tx timeout [ 61.750971][ T4227] Bluetooth: hci2: command 0x0419 tx timeout [ 62.089973][ T4318] device syzkaller0 entered promiscuous mode [ 62.571330][ T4332] tipc: Started in network mode [ 62.587843][ T4332] tipc: Node identity 920898b66428, cluster identity 4711 [ 62.626304][ T4332] tipc: Enabled bearer , priority 0 [ 62.725251][ T4335] device syzkaller0 entered promiscuous mode [ 62.777233][ T4331] tipc: Resetting bearer [ 62.863187][ T4331] tipc: Disabling bearer [ 63.003092][ T4341] device syzkaller0 entered promiscuous mode [ 63.434704][ T4360] device syzkaller0 entered promiscuous mode [ 63.739058][ T4376] device syzkaller0 entered promiscuous mode [ 63.796922][ T4376] TC_ACT_REPEAT abuse ? [ 64.104936][ T4397] netlink: 8 bytes leftover after parsing attributes in process `syz.4.53'. [ 64.344695][ T4407] device syzkaller0 entered promiscuous mode [ 64.834005][ T4425] device syzkaller0 entered promiscuous mode [ 64.877830][ T4425] TC_ACT_REPEAT abuse ? [ 65.113547][ T4439] netlink: 8 bytes leftover after parsing attributes in process `syz.1.74'. [ 65.141169][ T4438] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 65.190539][ T4439] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.199956][ T4439] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.208741][ T4439] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.217619][ T4439] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.280837][ T4439] netlink: 8 bytes leftover after parsing attributes in process `syz.1.74'. [ 65.309088][ T4443] device syzkaller0 entered promiscuous mode [ 65.516081][ T4452] netlink: 128 bytes leftover after parsing attributes in process `syz.0.80'. [ 65.610596][ T4454] device syzkaller0 entered promiscuous mode [ 65.784225][ T4463] netlink: 12 bytes leftover after parsing attributes in process `syz.1.84'. [ 65.832857][ T4463] device netdevsim0 entered promiscuous mode [ 65.839865][ T4463] device macvtap1 entered promiscuous mode [ 66.178043][ T4478] device syzkaller0 entered promiscuous mode [ 66.495959][ T4495] device syzkaller0 entered promiscuous mode [ 66.535866][ T4498] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 66.952767][ T4511] netlink: 4 bytes leftover after parsing attributes in process `syz.2.103'. [ 67.013694][ T4511] device veth1_to_hsr entered promiscuous mode [ 67.038423][ T4517] netlink: 8 bytes leftover after parsing attributes in process `syz.2.103'. [ 67.114263][ T4521] device syzkaller0 entered promiscuous mode [ 67.509149][ T4537] netlink: 'syz.2.112': attribute type 13 has an invalid length. [ 67.566822][ T4537] netlink: 'syz.2.112': attribute type 17 has an invalid length. [ 67.595133][ T4537] netlink: 'syz.2.112': attribute type 27 has an invalid length. [ 67.978205][ T4563] device syzkaller0 entered promiscuous mode [ 69.682965][ T4604] device syzkaller0 entered promiscuous mode [ 69.733706][ T4606] device syzkaller0 entered promiscuous mode [ 70.520802][ T4627] netlink: 12 bytes leftover after parsing attributes in process `syz.1.140'. [ 71.049300][ T4640] device syzkaller0 entered promiscuous mode [ 71.213156][ T4642] device syzkaller0 entered promiscuous mode [ 71.400461][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.424808][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.863724][ T4683] xt_hashlimit: size too large, truncated to 1048576 [ 73.049986][ T4684] xt_hashlimit: size too large, truncated to 1048576 [ 73.073970][ T4684] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 73.302699][ T4545] Set syz1 is full, maxelem 65536 reached [ 73.494834][ T4689] device syzkaller0 entered promiscuous mode [ 73.530972][ T4690] device syzkaller0 entered promiscuous mode [ 74.144464][ T4711] netlink: 8 bytes leftover after parsing attributes in process `syz.1.167'. [ 74.193631][ T4711] netlink: 8 bytes leftover after parsing attributes in process `syz.1.167'. [ 74.284436][ T4711] netlink: 8 bytes leftover after parsing attributes in process `syz.1.167'. [ 74.338387][ T4711] netlink: 8 bytes leftover after parsing attributes in process `syz.1.167'. [ 74.397628][ T4711] netlink: 8 bytes leftover after parsing attributes in process `syz.1.167'. [ 74.430795][ T4711] netlink: 8 bytes leftover after parsing attributes in process `syz.1.167'. [ 74.457262][ T4711] netlink: 8 bytes leftover after parsing attributes in process `syz.1.167'. [ 74.494173][ T4711] netlink: 8 bytes leftover after parsing attributes in process `syz.1.167'. [ 74.507273][ T4711] netlink: 8 bytes leftover after parsing attributes in process `syz.1.167'. [ 74.529563][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 74.548884][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.567966][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.744121][ T4725] netlink: set zone limit has 8 unknown bytes [ 74.999841][ T4734] device syzkaller0 entered promiscuous mode [ 76.643578][ T4778] device syzkaller0 entered promiscuous mode [ 77.509930][ T4816] device syzkaller0 entered promiscuous mode [ 77.602806][ T4818] __nla_validate_parse: 67 callbacks suppressed [ 77.602822][ T4818] netlink: 8 bytes leftover after parsing attributes in process `syz.2.202'. [ 77.684069][ T4818] netlink: 20 bytes leftover after parsing attributes in process `syz.2.202'. [ 77.705243][ T4818] netlink: 28 bytes leftover after parsing attributes in process `syz.2.202'. [ 78.162045][ T4838] device syzkaller0 entered promiscuous mode [ 78.504665][ T4853] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 78.856944][ T4866] netlink: 4 bytes leftover after parsing attributes in process `syz.1.214'. [ 78.899150][ T4866] device bond0 entered promiscuous mode [ 78.947148][ T4866] device bond_slave_0 entered promiscuous mode [ 78.958794][ T4866] device bond_slave_1 entered promiscuous mode [ 78.967132][ T4866] device gretap0 entered promiscuous mode [ 78.975029][ T4866] device hsr1 entered promiscuous mode [ 78.986926][ T4871] netlink: 'syz.0.216': attribute type 17 has an invalid length. [ 79.013051][ T4871] netlink: 8 bytes leftover after parsing attributes in process `syz.0.216'. [ 79.041602][ T4871] bond0: option all_slaves_active: invalid value (44) [ 79.616916][ T4892] device syzkaller0 entered promiscuous mode [ 79.723027][ T4896] device syzkaller0 entered promiscuous mode [ 80.742187][ T4928] device syzkaller0 entered promiscuous mode [ 81.085823][ T4935] device syzkaller0 entered promiscuous mode [ 81.206316][ T4937] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 81.517043][ T4943] device syzkaller0 entered promiscuous mode [ 81.638914][ T1108] cfg80211: failed to load regulatory.db [ 81.912940][ T4960] device syzkaller0 entered promiscuous mode [ 82.023024][ T4966] device syzkaller0 entered promiscuous mode [ 82.176575][ T4976] netlink: 28 bytes leftover after parsing attributes in process `syz.4.257'. [ 82.186450][ T4976] netlink: 32 bytes leftover after parsing attributes in process `syz.4.257'. [ 82.195864][ T4976] netlink: 28 bytes leftover after parsing attributes in process `syz.4.257'. [ 82.206550][ T4976] netlink: 32 bytes leftover after parsing attributes in process `syz.4.257'. [ 82.268388][ T4982] netlink: 28 bytes leftover after parsing attributes in process `syz.4.261'. [ 82.433805][ T4992] device syzkaller0 entered promiscuous mode [ 82.463865][ T4886] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 82.669426][ T5001] device syzkaller0 entered promiscuous mode [ 82.835076][ T5013] tipc: Enabling of bearer rejected, failed to enable media [ 83.268044][ T5036] device syzkaller0 entered promiscuous mode [ 83.485762][ T5048] device syzkaller0 entered promiscuous mode [ 83.606974][ T5051] device syzkaller0 entered promiscuous mode [ 83.750548][ T5057] device syzkaller0 entered promiscuous mode [ 84.235141][ T5083] device syzkaller0 entered promiscuous mode [ 84.464021][ T5098] netlink: 36 bytes leftover after parsing attributes in process `syz.4.299'. [ 85.303256][ T5142] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 85.337673][ T5142] [ 85.340043][ T5142] ====================================================== [ 85.347070][ T5142] WARNING: possible circular locking dependency detected [ 85.354103][ T5142] syzkaller #0 Not tainted [ 85.358542][ T5142] ------------------------------------------------------ [ 85.365568][ T5142] syz.0.311/5142 is trying to acquire lock: [ 85.371474][ T5142] ffff888076777120 (sk_lock-AF_AX25){+.+.}-{0:0}, at: ax25_device_event+0x217/0x4f0 [ 85.380911][ T5142] [ 85.380911][ T5142] but task is already holding lock: [ 85.388282][ T5142] ffffffff8d43cb48 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x534/0xe30 [ 85.396584][ T5142] [ 85.396584][ T5142] which lock already depends on the new lock. [ 85.396584][ T5142] [ 85.407003][ T5142] [ 85.407003][ T5142] the existing dependency chain (in reverse order) is: [ 85.416048][ T5142] [ 85.416048][ T5142] -> #1 (rtnl_mutex){+.+.}-{3:3}: [ 85.423277][ T5142] __mutex_lock_common+0x1e3/0x2400 [ 85.429029][ T5142] mutex_lock_nested+0x17/0x20 [ 85.434329][ T5142] ax25_setsockopt+0x859/0xa60 [ 85.439636][ T5142] __sys_setsockopt+0x2bf/0x3d0 [ 85.445028][ T5142] __x64_sys_setsockopt+0xb1/0xc0 [ 85.450599][ T5142] do_syscall_64+0x4c/0xa0 [ 85.455572][ T5142] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 85.462010][ T5142] [ 85.462010][ T5142] -> #0 (sk_lock-AF_AX25){+.+.}-{0:0}: [ 85.469769][ T5142] __lock_acquire+0x2c42/0x7d10 [ 85.475252][ T5142] lock_acquire+0x19e/0x400 [ 85.480292][ T5142] lock_sock_nested+0x44/0x100 [ 85.485689][ T5142] ax25_device_event+0x217/0x4f0 [ 85.491175][ T5142] raw_notifier_call_chain+0xcb/0x160 [ 85.497107][ T5142] __dev_notify_flags+0x158/0x300 [ 85.502674][ T5142] dev_change_flags+0xe3/0x1a0 [ 85.507986][ T5142] dev_ifsioc+0x130/0xd50 [ 85.512851][ T5142] dev_ioctl+0x545/0xe30 [ 85.517623][ T5142] sock_do_ioctl+0x245/0x320 [ 85.522738][ T5142] sock_ioctl+0x4d2/0x710 [ 85.527600][ T5142] __se_sys_ioctl+0xfa/0x170 [ 85.532735][ T5142] do_syscall_64+0x4c/0xa0 [ 85.537690][ T5142] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 85.544126][ T5142] [ 85.544126][ T5142] other info that might help us debug this: [ 85.544126][ T5142] [ 85.554467][ T5142] Possible unsafe locking scenario: [ 85.554467][ T5142] [ 85.562021][ T5142] CPU0 CPU1 [ 85.567393][ T5142] ---- ---- [ 85.572773][ T5142] lock(rtnl_mutex); [ 85.576764][ T5142] lock(sk_lock-AF_AX25); [ 85.583720][ T5142] lock(rtnl_mutex); [ 85.590230][ T5142] lock(sk_lock-AF_AX25); [ 85.594650][ T5142] [ 85.594650][ T5142] *** DEADLOCK *** [ 85.594650][ T5142] [ 85.602799][ T5142] 1 lock held by syz.0.311/5142: [ 85.607745][ T5142] #0: ffffffff8d43cb48 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x534/0xe30 [ 85.616472][ T5142] [ 85.616472][ T5142] stack backtrace: [ 85.622361][ T5142] CPU: 0 PID: 5142 Comm: syz.0.311 Not tainted syzkaller #0 [ 85.629660][ T5142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 85.639728][ T5142] Call Trace: [ 85.643025][ T5142] [ 85.645969][ T5142] dump_stack_lvl+0x188/0x250 [ 85.650670][ T5142] ? load_image+0x400/0x400 [ 85.655202][ T5142] ? show_regs_print_info+0x20/0x20 [ 85.660433][ T5142] ? print_circular_bug+0x12b/0x1a0 [ 85.665650][ T5142] check_noncircular+0x296/0x330 [ 85.670599][ T5142] ? stack_trace_snprint+0xf0/0xf0 [ 85.675739][ T5142] ? add_chain_block+0x940/0x940 [ 85.680694][ T5142] ? lockdep_lock+0xf1/0x1f0 [ 85.685280][ T5142] ? mark_lock+0x94/0x320 [ 85.689596][ T5142] __lock_acquire+0x2c42/0x7d10 [ 85.694441][ T5142] ? mark_lock+0x94/0x320 [ 85.698779][ T5142] ? verify_lock_unused+0x140/0x140 [ 85.704054][ T5142] ? verify_lock_unused+0x140/0x140 [ 85.709255][ T5142] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 85.715324][ T5142] ? lockdep_hardirqs_on_prepare+0x770/0x770 [ 85.721294][ T5142] ? mark_lock+0x94/0x320 [ 85.725612][ T5142] lock_acquire+0x19e/0x400 [ 85.730113][ T5142] ? ax25_device_event+0x217/0x4f0 [ 85.735215][ T5142] ? lock_chain_count+0x20/0x20 [ 85.740583][ T5142] ? read_lock_is_recursive+0x10/0x10 [ 85.746031][ T5142] ? __local_bh_enable_ip+0x136/0x1c0 [ 85.751390][ T5142] ? lockdep_hardirqs_on+0x94/0x140 [ 85.756581][ T5142] ? __local_bh_enable_ip+0x136/0x1c0 [ 85.761943][ T5142] ? _local_bh_enable+0xa0/0xa0 [ 85.766780][ T5142] lock_sock_nested+0x44/0x100 [ 85.771553][ T5142] ? ax25_device_event+0x217/0x4f0 [ 85.776660][ T5142] ax25_device_event+0x217/0x4f0 [ 85.781687][ T5142] raw_notifier_call_chain+0xcb/0x160 [ 85.787056][ T5142] __dev_notify_flags+0x158/0x300 [ 85.792067][ T5142] ? __dev_change_flags+0x6a0/0x6a0 [ 85.797256][ T5142] ? __dev_change_flags+0x4d0/0x6a0 [ 85.802484][ T5142] ? dev_get_flags+0x1c0/0x1c0 [ 85.807256][ T5142] ? __mutex_lock_common+0x465/0x2400 [ 85.812630][ T5142] dev_change_flags+0xe3/0x1a0 [ 85.817402][ T5142] dev_ifsioc+0x130/0xd50 [ 85.821727][ T5142] ? dev_ioctl+0xe30/0xe30 [ 85.826131][ T5142] ? apparmor_capable+0x12c/0x190 [ 85.831150][ T5142] ? full_name_hash+0x8e/0xe0 [ 85.836016][ T5142] dev_ioctl+0x545/0xe30 [ 85.840299][ T5142] ? _copy_from_user+0x111/0x170 [ 85.845330][ T5142] sock_do_ioctl+0x245/0x320 [ 85.850002][ T5142] ? sock_show_fdinfo+0xb0/0xb0 [ 85.854849][ T5142] sock_ioctl+0x4d2/0x710 [ 85.859199][ T5142] ? sock_poll+0x410/0x410 [ 85.863696][ T5142] ? bpf_lsm_file_ioctl+0x5/0x10 [ 85.868646][ T5142] ? security_file_ioctl+0x7c/0xa0 [ 85.873767][ T5142] ? sock_poll+0x410/0x410 [ 85.878199][ T5142] __se_sys_ioctl+0xfa/0x170 [ 85.882780][ T5142] do_syscall_64+0x4c/0xa0 [ 85.887184][ T5142] ? clear_bhb_loop+0x30/0x80 [ 85.891850][ T5142] ? clear_bhb_loop+0x30/0x80 [ 85.896536][ T5142] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 85.902599][ T5142] RIP: 0033:0x7fe18d4ba819 [ 85.907023][ T5142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.926887][ T5142] RSP: 002b:00007fe18b6f3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 85.935391][ T5142] RAX: ffffffffffffffda RBX: 00007fe18d734090 RCX: 00007fe18d4ba819 [ 85.943365][ T5142] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000004 [ 85.951332][ T5142] RBP: 00007fe18d550c91 R08: 0000000000000000 R09: 0000000000000000 [ 85.959388][ T5142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.967359][ T5142] R13: 00007fe18d734128 R14: 00007fe18d734090 R15: 00007ffc0ff49298 [ 85.975334][ T5142] [ 86.016592][ T5142] ================================================================== [ 86.024706][ T5142] BUG: KASAN: use-after-free in ax25_dev_device_down+0x35e/0x520 [ 86.032469][ T5142] Write of size 4 at addr ffff88802548cab8 by task syz.0.311/5142 [ 86.040294][ T5142] [ 86.042629][ T5142] CPU: 0 PID: 5142 Comm: syz.0.311 Not tainted syzkaller #0 [ 86.049909][ T5142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 86.059955][ T5142] Call Trace: [ 86.063223][ T5142] [ 86.066142][ T5142] dump_stack_lvl+0x188/0x250 [ 86.070813][ T5142] ? show_regs_print_info+0x20/0x20 [ 86.076004][ T5142] ? _printk+0xda/0x130 [ 86.080147][ T5142] ? ax25_dev_device_down+0x35e/0x520 [ 86.085514][ T5142] ? load_image+0x400/0x400 [ 86.090004][ T5142] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 86.095469][ T5142] print_address_description+0x60/0x2d0 [ 86.101024][ T5142] ? ax25_dev_device_down+0x35e/0x520 [ 86.106384][ T5142] kasan_report+0xdf/0x130 [ 86.110793][ T5142] ? ax25_dev_device_down+0x35e/0x520 [ 86.116154][ T5142] kasan_check_range+0x235/0x290 [ 86.121092][ T5142] ax25_dev_device_down+0x35e/0x520 [ 86.126311][ T5142] ax25_device_event+0x4b4/0x4f0 [ 86.131247][ T5142] raw_notifier_call_chain+0xcb/0x160 [ 86.136621][ T5142] __dev_notify_flags+0x158/0x300 [ 86.141658][ T5142] ? __dev_change_flags+0x6a0/0x6a0 [ 86.146847][ T5142] ? __dev_change_flags+0x4d0/0x6a0 [ 86.152044][ T5142] ? dev_get_flags+0x1c0/0x1c0 [ 86.156797][ T5142] ? __mutex_lock_common+0x465/0x2400 [ 86.162277][ T5142] dev_change_flags+0xe3/0x1a0 [ 86.167036][ T5142] dev_ifsioc+0x130/0xd50 [ 86.171386][ T5142] ? dev_ioctl+0xe30/0xe30 [ 86.175795][ T5142] ? apparmor_capable+0x12c/0x190 [ 86.180825][ T5142] ? full_name_hash+0x8e/0xe0 [ 86.185543][ T5142] dev_ioctl+0x545/0xe30 [ 86.189783][ T5142] ? _copy_from_user+0x111/0x170 [ 86.194726][ T5142] sock_do_ioctl+0x245/0x320 [ 86.199312][ T5142] ? sock_show_fdinfo+0xb0/0xb0 [ 86.204153][ T5142] sock_ioctl+0x4d2/0x710 [ 86.208471][ T5142] ? sock_poll+0x410/0x410 [ 86.212874][ T5142] ? bpf_lsm_file_ioctl+0x5/0x10 [ 86.217807][ T5142] ? security_file_ioctl+0x7c/0xa0 [ 86.222929][ T5142] ? sock_poll+0x410/0x410 [ 86.227334][ T5142] __se_sys_ioctl+0xfa/0x170 [ 86.231915][ T5142] do_syscall_64+0x4c/0xa0 [ 86.236332][ T5142] ? clear_bhb_loop+0x30/0x80 [ 86.241005][ T5142] ? clear_bhb_loop+0x30/0x80 [ 86.245673][ T5142] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 86.251551][ T5142] RIP: 0033:0x7fe18d4ba819 [ 86.255953][ T5142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.275549][ T5142] RSP: 002b:00007fe18b6f3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 86.283954][ T5142] RAX: ffffffffffffffda RBX: 00007fe18d734090 RCX: 00007fe18d4ba819 [ 86.291917][ T5142] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000004 [ 86.299878][ T5142] RBP: 00007fe18d550c91 R08: 0000000000000000 R09: 0000000000000000 [ 86.307844][ T5142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.315873][ T5142] R13: 00007fe18d734128 R14: 00007fe18d734090 R15: 00007ffc0ff49298 [ 86.323924][ T5142] [ 86.326934][ T5142] [ 86.329257][ T5142] Allocated by task 5142: [ 86.333572][ T5142] __kasan_kmalloc+0xb5/0xf0 [ 86.338168][ T5142] ax25_dev_device_up+0x50/0x580 [ 86.343101][ T5142] ax25_device_event+0x483/0x4f0 [ 86.348034][ T5142] raw_notifier_call_chain+0xcb/0x160 [ 86.353391][ T5142] __dev_notify_flags+0x194/0x300 [ 86.358403][ T5142] dev_change_flags+0xe3/0x1a0 [ 86.363152][ T5142] dev_ifsioc+0x130/0xd50 [ 86.367474][ T5142] dev_ioctl+0x545/0xe30 [ 86.371717][ T5142] sock_do_ioctl+0x245/0x320 [ 86.376306][ T5142] sock_ioctl+0x4d2/0x710 [ 86.380714][ T5142] __se_sys_ioctl+0xfa/0x170 [ 86.385289][ T5142] do_syscall_64+0x4c/0xa0 [ 86.389689][ T5142] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 86.395697][ T5142] [ 86.398007][ T5142] Freed by task 5142: [ 86.401969][ T5142] kasan_set_track+0x4b/0x70 [ 86.406565][ T5142] kasan_set_free_info+0x1f/0x40 [ 86.411523][ T5142] ____kasan_slab_free+0xd5/0x110 [ 86.416548][ T5142] slab_free_freelist_hook+0xea/0x170 [ 86.421915][ T5142] kfree+0xef/0x2a0 [ 86.425719][ T5142] ax25_dev_device_down+0x1c0/0x520 [ 86.431001][ T5142] ax25_device_event+0x4b4/0x4f0 [ 86.435932][ T5142] raw_notifier_call_chain+0xcb/0x160 [ 86.441410][ T5142] __dev_notify_flags+0x158/0x300 [ 86.446499][ T5142] dev_change_flags+0xe3/0x1a0 [ 86.451266][ T5142] dev_ifsioc+0x130/0xd50 [ 86.455595][ T5142] dev_ioctl+0x545/0xe30 [ 86.460003][ T5142] sock_do_ioctl+0x245/0x320 [ 86.464615][ T5142] sock_ioctl+0x4d2/0x710 [ 86.468939][ T5142] __se_sys_ioctl+0xfa/0x170 [ 86.473614][ T5142] do_syscall_64+0x4c/0xa0 [ 86.478051][ T5142] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 86.484050][ T5142] [ 86.486435][ T5142] Last potentially related work creation: [ 86.492205][ T5142] kasan_save_stack+0x35/0x60 [ 86.496905][ T5142] kasan_record_aux_stack+0xb8/0x100 [ 86.502285][ T5142] insert_work+0x54/0x3d0 [ 86.506697][ T5142] __queue_work+0x9c5/0xd50 [ 86.511191][ T5142] queue_work_on+0x124/0x1f0 [ 86.515768][ T5142] call_usermodehelper_exec+0x2e3/0x520 [ 86.521410][ T5142] __request_module+0x40b/0x980 [ 86.526260][ T5142] dev_load+0x156/0x1b0 [ 86.530417][ T5142] dev_ioctl+0x3c0/0xe30 [ 86.534653][ T5142] sock_do_ioctl+0x245/0x320 [ 86.539390][ T5142] sock_ioctl+0x4d2/0x710 [ 86.543718][ T5142] __se_sys_ioctl+0xfa/0x170 [ 86.548429][ T5142] do_syscall_64+0x4c/0xa0 [ 86.552835][ T5142] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 86.558720][ T5142] [ 86.561038][ T5142] Second to last potentially related work creation: [ 86.567782][ T5142] kasan_save_stack+0x35/0x60 [ 86.572529][ T5142] kasan_record_aux_stack+0xb8/0x100 [ 86.577821][ T5142] insert_work+0x54/0x3d0 [ 86.582140][ T5142] __queue_work+0x9c5/0xd50 [ 86.586632][ T5142] queue_work_on+0x124/0x1f0 [ 86.591221][ T5142] netdevice_event+0x803/0x900 [ 86.595973][ T5142] raw_notifier_call_chain+0xcb/0x160 [ 86.601334][ T5142] dev_set_mac_address+0x2e8/0x400 [ 86.606457][ T5142] dev_set_mac_address_user+0x2d/0x50 [ 86.611819][ T5142] do_setlink+0x8b0/0x3d60 [ 86.616223][ T5142] rtnl_newlink+0x1658/0x1a50 [ 86.620888][ T5142] rtnetlink_rcv_msg+0x844/0xf30 [ 86.625847][ T5142] netlink_rcv_skb+0x1f5/0x440 [ 86.630619][ T5142] netlink_unicast+0x774/0x920 [ 86.635376][ T5142] netlink_sendmsg+0x8ba/0xbe0 [ 86.640146][ T5142] __sys_sendto+0x46d/0x620 [ 86.644653][ T5142] __x64_sys_sendto+0xda/0xf0 [ 86.649380][ T5142] do_syscall_64+0x4c/0xa0 [ 86.653791][ T5142] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 86.659676][ T5142] [ 86.661986][ T5142] The buggy address belongs to the object at ffff88802548ca00 [ 86.661986][ T5142] which belongs to the cache kmalloc-192 of size 192 [ 86.676115][ T5142] The buggy address is located 184 bytes inside of [ 86.676115][ T5142] 192-byte region [ffff88802548ca00, ffff88802548cac0) [ 86.689573][ T5142] The buggy address belongs to the page: [ 86.695314][ T5142] page:ffffea0000952300 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88802548c200 pfn:0x2548c [ 86.706930][ T5142] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 86.714471][ T5142] raw: 00fff00000000200 0000000000000000 0000000100000001 ffff888016c41a00 [ 86.723063][ T5142] raw: ffff88802548c200 000000008010000d 00000001ffffffff 0000000000000000 [ 86.731723][ T5142] page dumped because: kasan: bad access detected [ 86.738121][ T5142] page_owner tracks the page as allocated [ 86.743837][ T5142] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12c00(GFP_NOIO|__GFP_NOWARN|__GFP_NORETRY), pid 1, ts 9873711667, free_ts 9843199561 [ 86.759283][ T5142] get_page_from_freelist+0x1bbd/0x1ca0 [ 86.764827][ T5142] __alloc_pages+0x1ee/0x480 [ 86.769417][ T5142] alloc_page_interleave+0x24/0x1e0 [ 86.774606][ T5142] new_slab+0xc0/0x4b0 [ 86.778661][ T5142] ___slab_alloc+0x80a/0xdd0 [ 86.783251][ T5142] __kmalloc+0x1cd/0x330 [ 86.787492][ T5142] usb_alloc_urb+0x3f/0x140 [ 86.792005][ T5142] usb_control_msg+0x115/0x3e0 [ 86.796759][ T5142] usb_get_descriptor+0xad/0x3d0 [ 86.801685][ T5142] usb_get_configuration+0x2b3/0x4d30 [ 86.807047][ T5142] usb_new_device+0x138/0x1660 [ 86.811800][ T5142] register_root_hub+0x278/0x580 [ 86.816729][ T5142] usb_add_hcd+0xa88/0xef0 [ 86.821148][ T5142] vhci_hcd_probe+0x1bd/0x370 [ 86.825811][ T5142] platform_probe+0x137/0x1c0 [ 86.830476][ T5142] really_probe+0x284/0xc80 [ 86.834973][ T5142] page last free stack trace: [ 86.839628][ T5142] free_unref_page_prepare+0x637/0x6c0 [ 86.845074][ T5142] free_unref_page_list+0x119/0x820 [ 86.850266][ T5142] release_pages+0x186c/0x1be0 [ 86.855112][ T5142] tlb_finish_mmu+0x176/0x300 [ 86.859791][ T5142] exit_mmap+0x3d0/0x640 [ 86.864036][ T5142] __mmput+0x115/0x3b0 [ 86.868197][ T5142] free_bprm+0x141/0x300 [ 86.872533][ T5142] kernel_execve+0x380/0x900 [ 86.877146][ T5142] call_usermodehelper_exec_async+0x207/0x350 [ 86.883213][ T5142] ret_from_fork+0x1f/0x30 [ 86.887654][ T5142] [ 86.889979][ T5142] Memory state around the buggy address: [ 86.895596][ T5142] ffff88802548c980: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 86.903647][ T5142] ffff88802548ca00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 86.911701][ T5142] >ffff88802548ca80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 86.919751][ T5142] ^ [ 86.925716][ T5142] ffff88802548cb00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 86.933859][ T5142] ffff88802548cb80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 86.941990][ T5142] ================================================================== [ 86.957464][ T5142] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 86.964820][ T5142] CPU: 1 PID: 5142 Comm: syz.0.311 Tainted: G B syzkaller #0 [ 86.973513][ T5142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 86.983578][ T5142] Call Trace: [ 86.986858][ T5142] [ 86.989794][ T5142] dump_stack_lvl+0x188/0x250 [ 86.994465][ T5142] ? show_regs_print_info+0x20/0x20 [ 86.999654][ T5142] ? load_image+0x400/0x400 [ 87.004159][ T5142] panic+0x2e5/0x810 [ 87.008045][ T5142] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 87.014286][ T5142] ? bpf_jit_dump+0xd0/0xd0 [ 87.018780][ T5142] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 87.024750][ T5142] ? _raw_spin_unlock+0x40/0x40 [ 87.029678][ T5142] ? ax25_dev_device_down+0x35e/0x520 [ 87.035059][ T5142] check_panic_on_warn+0x80/0xa0 [ 87.040030][ T5142] ? ax25_dev_device_down+0x35e/0x520 [ 87.045496][ T5142] end_report+0x6d/0xf0 [ 87.049659][ T5142] kasan_report+0x102/0x130 [ 87.054167][ T5142] ? ax25_dev_device_down+0x35e/0x520 [ 87.059546][ T5142] kasan_check_range+0x235/0x290 [ 87.064517][ T5142] ax25_dev_device_down+0x35e/0x520 [ 87.069737][ T5142] ax25_device_event+0x4b4/0x4f0 [ 87.074681][ T5142] raw_notifier_call_chain+0xcb/0x160 [ 87.080062][ T5142] __dev_notify_flags+0x158/0x300 [ 87.085086][ T5142] ? __dev_change_flags+0x6a0/0x6a0 [ 87.090291][ T5142] ? __dev_change_flags+0x4d0/0x6a0 [ 87.095487][ T5142] ? dev_get_flags+0x1c0/0x1c0 [ 87.100244][ T5142] ? __mutex_lock_common+0x465/0x2400 [ 87.105612][ T5142] dev_change_flags+0xe3/0x1a0 [ 87.110372][ T5142] dev_ifsioc+0x130/0xd50 [ 87.114696][ T5142] ? dev_ioctl+0xe30/0xe30 [ 87.119102][ T5142] ? apparmor_capable+0x12c/0x190 [ 87.124250][ T5142] ? full_name_hash+0x8e/0xe0 [ 87.128928][ T5142] dev_ioctl+0x545/0xe30 [ 87.133164][ T5142] ? _copy_from_user+0x111/0x170 [ 87.138090][ T5142] sock_do_ioctl+0x245/0x320 [ 87.142674][ T5142] ? sock_show_fdinfo+0xb0/0xb0 [ 87.147541][ T5142] sock_ioctl+0x4d2/0x710 [ 87.152006][ T5142] ? sock_poll+0x410/0x410 [ 87.156420][ T5142] ? bpf_lsm_file_ioctl+0x5/0x10 [ 87.161351][ T5142] ? security_file_ioctl+0x7c/0xa0 [ 87.166460][ T5142] ? sock_poll+0x410/0x410 [ 87.170883][ T5142] __se_sys_ioctl+0xfa/0x170 [ 87.175475][ T5142] do_syscall_64+0x4c/0xa0 [ 87.179898][ T5142] ? clear_bhb_loop+0x30/0x80 [ 87.184565][ T5142] ? clear_bhb_loop+0x30/0x80 [ 87.189234][ T5142] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 87.195129][ T5142] RIP: 0033:0x7fe18d4ba819 [ 87.199537][ T5142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.219134][ T5142] RSP: 002b:00007fe18b6f3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 87.227545][ T5142] RAX: ffffffffffffffda RBX: 00007fe18d734090 RCX: 00007fe18d4ba819 [ 87.235623][ T5142] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000004 [ 87.243611][ T5142] RBP: 00007fe18d550c91 R08: 0000000000000000 R09: 0000000000000000 [ 87.251577][ T5142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.259539][ T5142] R13: 00007fe18d734128 R14: 00007fe18d734090 R15: 00007ffc0ff49298 [ 87.267610][ T5142] [ 87.270727][ T5142] Kernel Offset: disabled [ 87.275051][ T5142] Rebooting in 86400 seconds..