last executing test programs: 4.08652129s ago: executing program 1 (id=93): r0 = socket$kcm(0x29, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) r2 = socket$alg(0x26, 0x5, 0x0) close(0x3) bind$alg(r2, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) accept4(r2, 0x0, 0x0, 0x80800) sendfile(r0, r1, 0x0, 0xffffffff000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r3, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000240)="a1260000000000000a05b02164db6cf2317819", 0x13}], 0x2) 2.739579542s ago: executing program 1 (id=108): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f00000005c0)="ba", 0x1, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r1, 0x1, 0xd8, 0x6, @multicast}, 0x14) 2.339513719s ago: executing program 2 (id=114): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0x2, 0x16, 0x5, 0x5, 0xa, 0x0, 0x70bd25, 0x25dfdbfd, [@sadb_x_policy={0x8, 0x12, 0x1, 0x4, 0x0, 0x0, 0x0, {0x6, 0x2b, 0x7, 0xf9, 0x0, 0x6, 0x0, @in6=@remote, @in=@private=0xa010102}}]}, 0x50}}, 0x4c040) 2.260473875s ago: executing program 3 (id=116): r0 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@dstopts={{0x18, 0x29, 0x37, {0x2b}}}], 0x18}}], 0x1, 0x20000040) 2.122154394s ago: executing program 2 (id=118): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x9, 0x5, 0x7, 0xc1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000100), 0x3f, r0}, 0x38) ioctl$SIOCAX25CTLCON(0xffffffffffffffff, 0x89e8, &(0x7f0000000340)={@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0xc, 0x4, 0x6, [@default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null]}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000340), 0x0}, 0x20) 2.079420957s ago: executing program 3 (id=119): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x27}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xb}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x25, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.03544439s ago: executing program 1 (id=121): getsockname$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x84, @private=0xa010101, 0x15, 0x3, 'sh\x00', 0x0, 0x5, 0x3f}, 0x2c) gettid() r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e20, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@loopback, 0x4e20, 0x10000, 0x2, 0x2}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e25, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r3, &(0x7f0000000840)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000880)=ANY=[@ANYBLOB="d4010000", @ANYRES16, @ANYBLOB="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"], 0x1d4}, 0x1, 0x0, 0x0, 0x8015}, 0x4048010) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) 1.971491654s ago: executing program 2 (id=122): sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x0, 0x1, 0x3, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4048002}, 0x90) recvmmsg(0xffffffffffffffff, &(0x7f0000007d80)=[{{0x0, 0x0, &(0x7f0000002640)=[{0x0}, {&(0x7f0000001440)=""/100, 0x64}], 0x1000000000000053}, 0xfffe}], 0x1, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000540), 0x2}, 0x3}], 0x4000048, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.913545498s ago: executing program 3 (id=123): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) write$tun(r1, &(0x7f0000000300)={@val={0x0, 0x10}, @val={0x3, 0x4, 0xfff9, 0xd, 0x8, 0x5f}, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x9, @local, @empty, @empty, @rand_addr=' \x01\x00'}}, 0x42) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001f80)=@newqdisc={0x45c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x8, 0x200006, 0xd, 0x400, 0x0, 0x3, 0x5, 0x10000, 0x7, 0x4, 0x81, 0x0, 0x8, 0x0, 0x9, 0x5, 0xc0000, 0x8001, 0x1, 0x2000, 0x1, 0x8da5, 0x1, 0x4, 0x2, 0x6, 0x58, 0x7, 0x73, 0x8, 0x3, 0x4, 0x9, 0x1000, 0x4, 0x9, 0x6, 0x80000001, 0x3, 0x1, 0xd4, 0x100, 0xa, 0xfff, 0x8, 0x9, 0x7, 0x7fffffff, 0xf4b3, 0x1, 0x0, 0x8, 0x8, 0x6, 0xd815, 0xfffffff9, 0x2, 0x401, 0x9, 0x36, 0xf, 0x74, 0xbbc, 0x9, 0x0, 0x6, 0x8, 0x5, 0x6, 0xb, 0x5, 0x5, 0x4e3, 0x200, 0x0, 0x9, 0x8001, 0x2, 0x1000, 0x7fffffff, 0x46a3, 0x6, 0x2, 0x1dd50645, 0x401, 0x5, 0x101, 0xbf, 0x0, 0x9, 0x3, 0x65, 0xffffff13, 0x2, 0x30, 0x1a3f, 0x2, 0x389c, 0x4, 0x3, 0x3ff, 0x4, 0x4, 0x6, 0xf3bb, 0x1ff, 0x8, 0xf, 0xb, 0x401, 0x4, 0x1000, 0x1, 0x8, 0x1, 0x7ff, 0x7fff, 0x8, 0x408, 0x3ff, 0x4, 0x1, 0xffff, 0x7fff, 0x2, 0xa, 0x1, 0xfff, 0x0, 0xfffffffe, 0x4, 0x0, 0x101, 0x78f1, 0xf, 0x7, 0x0, 0x3, 0xf1c7, 0x100, 0x3, 0x4, 0xfffffffe, 0xffffff7f, 0x3, 0x685e, 0x6, 0xd, 0x3, 0xa, 0x8, 0x200, 0x0, 0x400, 0x9, 0x6, 0x132f, 0xaba3, 0x1, 0x3, 0x1, 0x2, 0x6f788000, 0xc, 0x1ff, 0x40, 0x8, 0x3, 0x2, 0x1, 0x0, 0x71, 0xb13, 0x4, 0xbc5, 0x0, 0xa, 0xffff, 0x100, 0x7b58, 0x1, 0x807, 0x1ff, 0x3, 0x400, 0x80000000, 0x1040, 0x3, 0xfffffffa, 0x9a5, 0x8, 0x5, 0x1, 0x9, 0x3, 0x9, 0x7, 0x3, 0x1, 0x103, 0x2, 0x6, 0x598f, 0x5, 0x8e, 0x0, 0xa, 0x9, 0x1000, 0x8, 0xd00f, 0x2, 0x1, 0x7, 0x2a, 0x7, 0x100, 0x24e, 0xbd, 0x2, 0x2800000, 0x807, 0x0, 0x401, 0x6, 0x2, 0xfffffffb, 0x7039, 0x4, 0x1, 0x9, 0x1, 0xb18, 0x7, 0xfffffffe, 0x26e, 0x6, 0x5c, 0x8, 0x100, 0x3ff, 0x1, 0x0, 0xb, 0x10000, 0x8, 0x6, 0x2, 0x6, 0x7, 0x2, 0x7ff, 0x1, 0x4, 0x8001, 0x3]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x3f, 0x0, 0x0, 0x0, 0x97ab, 0x40}, {0x2, 0x0, 0x3, 0x57, 0x8, 0x3}, 0x1, 0x2, 0xa2d}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) socket$unix(0x1, 0x2, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.431416351s ago: executing program 4 (id=125): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x2c, 0x1, 0x2, 0xc05, 0x0, 0x0, {0x2, 0x0, 0x83}, [@CTA_EXPECT_MASTER={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0xfc, 0x0}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2a}}}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x80) 1.428764422s ago: executing program 0 (id=126): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x4) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000740)=@xdp={0x2c, 0x0, r2, 0x42}, 0x80, &(0x7f0000000cc0)=[{&(0x7f00000002c0)="27030200dc0f24000e00003c000c00000000ff840000000200000003125ce882cbf490d908f1523f000005032d9c2740e260a09c6911cda856d5141bffc6", 0x3e}], 0x1}, 0x8bb3a321ef809a) 1.402486263s ago: executing program 3 (id=127): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000b00)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) recvmmsg$unix(r1, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/116, 0x74}], 0x1}}], 0x1, 0x40002100, 0x0) 1.350069147s ago: executing program 4 (id=128): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1a, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 1.261639163s ago: executing program 1 (id=129): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b400000000000000610a680000000000060000000000000095001b0000000000"], &(0x7f0000000080)='GPL\x00', 0xa, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) 1.199462187s ago: executing program 4 (id=130): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be20000d072f5b89c3043c47c896ce0bc8731fa595b6b4d45ef26dcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557eb3c5ca683a4b6fc89398f2b9000f224891060017c4700de60beac671e8e8fdecb03588aa6007e71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0d18a93ee341ab59016f81860324b800300000000000092d9c5fe34ccb80a61ffcb3363073fd8962823ee45f5d7394e9510f4a801efdf008499d7aca1afac6c702cfabe8a9c55c8dafcdb110036e14c1035cafdfef6a358cbfadb3579a285580a3c080d4e0a48d7bdc38a0437c8c1b3aa408a"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000cc0)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&\x00'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r3, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3}, &(0x7f0000000040), &(0x7f00000000c0)=r0}, 0x20) 1.132730362s ago: executing program 1 (id=131): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x42, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000840)=@newtfilter={0x34, 0x2c, 0x42f, 0x870bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r12, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000005c0)="ba", 0x1, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r9, 0x1, 0xd8, 0x6, @multicast}, 0x14) 1.081071375s ago: executing program 0 (id=132): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x38, 0x2, [@TCA_FW_ACT={0x34, 0x4, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x84}, 0x8000) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x1ff, 0x200, 0x5, 0x4, 0x1}, 0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 1.026969739s ago: executing program 2 (id=133): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x39, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = socket(0x2, 0x2, 0x1) bind$unix(r0, &(0x7f0000000000)=@abs, 0x6e) connect$unix(r0, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e24}, 0x6e) 1.026415029s ago: executing program 3 (id=134): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r5, 0xc}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 982.035212ms ago: executing program 4 (id=135): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r0, 0x0, 0x0, 0x48800, &(0x7f0000000180)={0xa, 0x4e22, 0x200, @mcast1, 0x9}, 0x1c) 923.353686ms ago: executing program 2 (id=136): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3ab}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r1) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="af75355d1696"}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x4) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$kcm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f00000002c0)="27030200dc0f24000e00003c000c00000000ff840000000200000003125ce882cbf490d908f1523f000000002d9c2740e260a09c6911cda856d5141bffc6", 0x3e}], 0x1}, 0x8bb3a321ef809a) 923.014276ms ago: executing program 4 (id=137): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) write$tun(r1, &(0x7f0000000300)={@val={0x0, 0x10}, @val={0x3, 0x4, 0xfff9, 0xd, 0x8, 0x5f}, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x9, @local, @empty, @empty, @rand_addr=' \x01\x00'}}, 0x42) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001f80)=@newqdisc={0x45c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x8, 0x200006, 0xd, 0x400, 0x0, 0x3, 0x5, 0x10000, 0x7, 0x4, 0x81, 0x0, 0x8, 0x0, 0x9, 0x5, 0xc0000, 0x8001, 0x1, 0x2000, 0x1, 0x8da5, 0x1, 0x4, 0x2, 0x6, 0x58, 0x7, 0x73, 0x8, 0x3, 0x4, 0x9, 0x1000, 0x4, 0x9, 0x6, 0x80000001, 0x3, 0x1, 0xd4, 0x100, 0xa, 0xfff, 0x8, 0x9, 0x7, 0x7fffffff, 0xf4b3, 0x1, 0x0, 0x8, 0x8, 0x6, 0xd815, 0xfffffff9, 0x2, 0x401, 0x9, 0x36, 0xf, 0x74, 0xbbc, 0x9, 0x0, 0x6, 0x8, 0x5, 0x6, 0xb, 0x5, 0x5, 0x4e3, 0x200, 0x0, 0x9, 0x8001, 0x2, 0x1000, 0x7fffffff, 0x46a3, 0x6, 0x2, 0x1dd50645, 0x401, 0x5, 0x101, 0xbf, 0x0, 0x9, 0x3, 0x65, 0xffffff13, 0x2, 0x30, 0x1a3f, 0x2, 0x389c, 0x4, 0x3, 0x3ff, 0x4, 0x4, 0x6, 0xf3bb, 0x1ff, 0x8, 0xf, 0xb, 0x401, 0x4, 0x1000, 0x1, 0x8, 0x1, 0x7ff, 0x7fff, 0x8, 0x408, 0x3ff, 0x4, 0x1, 0xffff, 0x7fff, 0x2, 0xa, 0x1, 0xfff, 0x0, 0xfffffffe, 0x4, 0x0, 0x101, 0x78f1, 0xf, 0x7, 0x0, 0x3, 0xf1c7, 0x100, 0x3, 0x4, 0xfffffffe, 0xffffff7f, 0x3, 0x685e, 0x6, 0xd, 0x3, 0xa, 0x8, 0x200, 0x0, 0x400, 0x9, 0x6, 0x132f, 0xaba3, 0x1, 0x3, 0x1, 0x2, 0x6f788000, 0xc, 0x1ff, 0x40, 0x8, 0x3, 0x2, 0x1, 0x0, 0x71, 0xb13, 0x4, 0xbc5, 0x0, 0xa, 0xffff, 0x100, 0x7b58, 0x1, 0x807, 0x1ff, 0x3, 0x400, 0x80000000, 0x1040, 0x3, 0xfffffffa, 0x9a5, 0x8, 0x5, 0x1, 0x9, 0x3, 0x9, 0x7, 0x3, 0x1, 0x103, 0x2, 0x6, 0x598f, 0x5, 0x8e, 0x0, 0xa, 0x9, 0x1000, 0x8, 0xd00f, 0x2, 0x1, 0x7, 0x2a, 0x7, 0x100, 0x24e, 0xbd, 0x2, 0x2800000, 0x807, 0x0, 0x401, 0x6, 0x2, 0xfffffffb, 0x7039, 0x4, 0x1, 0x9, 0x1, 0xb18, 0x7, 0xfffffffe, 0x26e, 0x6, 0x5c, 0x8, 0x100, 0x3ff, 0x1, 0x0, 0xb, 0x10000, 0x8, 0x6, 0x2, 0x6, 0x7, 0x2, 0x7ff, 0x1, 0x4, 0x8001, 0x3]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x3f, 0x0, 0x0, 0x0, 0x97ab, 0x40}, {0x2, 0x0, 0x3, 0x57, 0x8, 0x3}, 0x1, 0x2, 0xa2d}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) socket$unix(0x1, 0x2, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 879.995849ms ago: executing program 0 (id=138): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x70}, 0x19}, 0x0) 769.095857ms ago: executing program 0 (id=139): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "dbdc27ff", "16de86d67a8426bd"}, 0x28) close(0x3) 427.21173ms ago: executing program 0 (id=140): connect$tipc(0xffffffffffffffff, &(0x7f0000000140)=@id={0x1e, 0x3, 0x3, {0x4e22, 0x3}}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) accept4$vsock_stream(0xffffffffffffffff, &(0x7f00000001c0)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth1_virt_wifi\x00', 0x100}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000080), r1) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000000c0)={0x60, r2, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000431}, 0x4040084) 189.431377ms ago: executing program 3 (id=141): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) bind$ax25(r2, &(0x7f0000000100)={{0x3, @null, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x93}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r3, 0x0, 0x8, &(0x7f00000000c0)=0x101, 0x4) recvmmsg(r3, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x24, r6, 0x1, 0x170bd2e, 0x0, {}, [@ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x104}, 0x0) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @local}, 0x1, 0x2, 0x2, 0x2, 0xfffe, 0x7fff}, 0x20) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r7, 0x8b32, &(0x7f0000000040)) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) 29.013187ms ago: executing program 2 (id=142): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x4) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000740)=@xdp={0x2c, 0x0, r2, 0x42}, 0x80, &(0x7f0000000cc0)=[{&(0x7f00000002c0)="27030200dc0f24000e00003c000c00000000ff840000000200000003125ce882cbf490d908f1523f000005032d9c2740e260a09c6911cda856d5141bffc6", 0x3e}], 0x1}, 0x8bb3a321ef809a) 6.920859ms ago: executing program 1 (id=143): bind$netlink(0xffffffffffffffff, &(0x7f0000000400)={0x10, 0x0, 0x25dfdbff, 0xfa83eb850bd66ef}, 0xc) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r1, 0x0, 0x0, 0x240458d0, &(0x7f0000000200)={0x11, 0xf8, 0x0, 0x1, 0x85, 0x6, @remote}, 0x14) 5.988869ms ago: executing program 0 (id=144): r0 = socket$netlink(0x10, 0x3, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0xc, 0x4) sendmsg$nl_route(r0, 0x0, 0x40002) 0s ago: executing program 4 (id=145): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000b00)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) recvmmsg$unix(r1, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/116, 0x74}], 0x1}}], 0x1, 0x40002100, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.90' (ED25519) to the list of known hosts. [ 55.414656][ T4172] cgroup: Unknown subsys name 'net' [ 55.560333][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 57.051438][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 58.480867][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 58.510870][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 58.538257][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 58.588520][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 58.625190][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 58.690637][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.698694][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.707230][ T4185] device bridge_slave_0 entered promiscuous mode [ 58.735727][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.742934][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.751068][ T4185] device bridge_slave_1 entered promiscuous mode [ 58.769119][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.776466][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.785264][ T4189] device bridge_slave_0 entered promiscuous mode [ 58.815443][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.823101][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.831815][ T4189] device bridge_slave_1 entered promiscuous mode [ 58.855359][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.881599][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.889072][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.897523][ T4188] device bridge_slave_0 entered promiscuous mode [ 58.906772][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.935165][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.942538][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.951473][ T4186] device bridge_slave_0 entered promiscuous mode [ 58.959606][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.966788][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.975526][ T4188] device bridge_slave_1 entered promiscuous mode [ 58.995775][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.006869][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.014215][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.022828][ T4186] device bridge_slave_1 entered promiscuous mode [ 59.045574][ T4185] team0: Port device team_slave_0 added [ 59.059456][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.067082][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.075477][ T4187] device bridge_slave_0 entered promiscuous mode [ 59.084396][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.103162][ T4185] team0: Port device team_slave_1 added [ 59.111432][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.124656][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.134089][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.141880][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.150535][ T4187] device bridge_slave_1 entered promiscuous mode [ 59.171431][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.215912][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.227096][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.244323][ T4189] team0: Port device team_slave_0 added [ 59.253220][ T4189] team0: Port device team_slave_1 added [ 59.261716][ T4186] team0: Port device team_slave_0 added [ 59.276724][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.286683][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.293815][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.321209][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.339760][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.347173][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.373299][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.386143][ T4186] team0: Port device team_slave_1 added [ 59.428962][ T4188] team0: Port device team_slave_0 added [ 59.442326][ T4188] team0: Port device team_slave_1 added [ 59.448869][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.456164][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.482439][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.494814][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.501886][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.528284][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.548760][ T4187] team0: Port device team_slave_0 added [ 59.571092][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.578341][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.604558][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.617630][ T4187] team0: Port device team_slave_1 added [ 59.623993][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.631390][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.659002][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.705646][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.712700][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.739193][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.762135][ T4185] device hsr_slave_0 entered promiscuous mode [ 59.769040][ T4185] device hsr_slave_1 entered promiscuous mode [ 59.795236][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.802242][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.828685][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.840342][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.847680][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.874448][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.889566][ T4189] device hsr_slave_0 entered promiscuous mode [ 59.896933][ T4189] device hsr_slave_1 entered promiscuous mode [ 59.903754][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.911637][ T4189] Cannot create hsr debugfs directory [ 59.920838][ T4186] device hsr_slave_0 entered promiscuous mode [ 59.928327][ T4186] device hsr_slave_1 entered promiscuous mode [ 59.935249][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.942970][ T4186] Cannot create hsr debugfs directory [ 59.953652][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.960952][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.987093][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.083833][ T4187] device hsr_slave_0 entered promiscuous mode [ 60.092367][ T4187] device hsr_slave_1 entered promiscuous mode [ 60.100077][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.108336][ T4187] Cannot create hsr debugfs directory [ 60.115627][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 60.122481][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 60.136978][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 60.143122][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 60.161620][ T4188] device hsr_slave_0 entered promiscuous mode [ 60.169435][ T4188] device hsr_slave_1 entered promiscuous mode [ 60.176307][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.183871][ T4188] Cannot create hsr debugfs directory [ 60.198743][ T21] Bluetooth: hci3: command 0x0409 tx timeout [ 60.455619][ T4185] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 60.467477][ T4185] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 60.478427][ T4185] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 60.491064][ T4185] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 60.535827][ T4186] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 60.545868][ T4186] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 60.570797][ T4186] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 60.580097][ T4186] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 60.632246][ T4189] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 60.655049][ T4189] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 60.668284][ T4189] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 60.679436][ T4189] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 60.744123][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.778226][ T4188] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 60.794063][ T4188] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 60.806371][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.817571][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.828382][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.849821][ T4188] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 60.860590][ T4188] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 60.881494][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.901264][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.910730][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.923634][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.931159][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.940855][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.976868][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.983792][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.992428][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.003043][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.012559][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.021192][ T1227] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.028662][ T1227] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.037733][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.047781][ T4187] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 61.061609][ T4187] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 61.072280][ T4187] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 61.097190][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.107618][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.116784][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.126027][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.133329][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.142329][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.151661][ T4187] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 61.164882][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.175276][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.184051][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.191518][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.223639][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.236145][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.246475][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.255699][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.265766][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.274716][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.307183][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.316773][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.327541][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.338950][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.347708][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.374837][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.386293][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.394382][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.403868][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.413978][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.432101][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.442667][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.452221][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.474112][ T4186] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 61.486397][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.505814][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.521158][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.531474][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.541629][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.551823][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.562003][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.572964][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.595740][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.607796][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.621154][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.636200][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.669338][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.678985][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.689640][ T4238] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.697111][ T4238] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.707055][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.722455][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.731643][ T4238] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.739063][ T4238] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.748156][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.758288][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.770453][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.779904][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.789407][ T4238] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.796847][ T4238] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.825508][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.834121][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.851796][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.863659][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.883007][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.892528][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.923941][ T4188] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 61.937628][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.951169][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.959901][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.969654][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.978772][ T4238] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.986082][ T4238] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.995436][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.003815][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.013055][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.022761][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.032055][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.041832][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.050336][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.058312][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.085203][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.093952][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.104210][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.117534][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.126752][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.139218][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.148200][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.169696][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.195111][ T2862] Bluetooth: hci0: command 0x041b tx timeout [ 62.201500][ T2862] Bluetooth: hci2: command 0x041b tx timeout [ 62.209259][ T4189] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 62.222025][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.227132][ T2862] Bluetooth: hci1: command 0x041b tx timeout [ 62.239941][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.251061][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.258974][ T2862] Bluetooth: hci4: command 0x041b tx timeout [ 62.267787][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.275946][ T2862] Bluetooth: hci3: command 0x041b tx timeout [ 62.282567][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.292009][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.301564][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.310618][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.320046][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.328873][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.338552][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.355919][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.366993][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.399585][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.432318][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.449742][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.462920][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.480723][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.493728][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.508370][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.517783][ T4185] device veth0_vlan entered promiscuous mode [ 62.541421][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.550696][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.560455][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.567604][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.576232][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.616643][ T4186] device veth0_vlan entered promiscuous mode [ 62.623999][ T4185] device veth1_vlan entered promiscuous mode [ 62.633732][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.649836][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.659545][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.668688][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.677712][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.685812][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.706155][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.715440][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.723959][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.731093][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.757154][ T4186] device veth1_vlan entered promiscuous mode [ 62.765293][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.773471][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.781343][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.795920][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.823792][ T4186] device veth0_macvtap entered promiscuous mode [ 62.832290][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.842162][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.852193][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.862224][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.877212][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.891260][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.906486][ T4186] device veth1_macvtap entered promiscuous mode [ 62.916775][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.929833][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.957595][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.967833][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.987190][ T4185] device veth0_macvtap entered promiscuous mode [ 63.002292][ T4185] device veth1_macvtap entered promiscuous mode [ 63.015245][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.026207][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.036803][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.046209][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.055550][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.064867][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.073738][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.082653][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.091768][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.123447][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.132468][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.141759][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.150971][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.162549][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.172174][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.184146][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.197349][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.212134][ T4188] device veth0_vlan entered promiscuous mode [ 63.220629][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.232958][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.245875][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.269810][ T4189] device veth0_vlan entered promiscuous mode [ 63.279256][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.290196][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.299792][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.309015][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.318179][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.334248][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.343817][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.352407][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.361858][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.373577][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.382455][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.390975][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.403158][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.416870][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.427994][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.439420][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.450990][ T4188] device veth1_vlan entered promiscuous mode [ 63.459232][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.468265][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.480273][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.490172][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.499915][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.535709][ T4186] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.547008][ T4186] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.557846][ T4186] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.567313][ T4186] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.584140][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.592415][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.602789][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.615059][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.624174][ T4185] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.644777][ T4185] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.653547][ T4185] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.662580][ T4185] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.688360][ T4189] device veth1_vlan entered promiscuous mode [ 63.752316][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.764044][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.788653][ T4188] device veth0_macvtap entered promiscuous mode [ 63.825615][ T4189] device veth0_macvtap entered promiscuous mode [ 63.834678][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.842849][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.853985][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.866508][ T4188] device veth1_macvtap entered promiscuous mode [ 63.879011][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.889145][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.899979][ T4189] device veth1_macvtap entered promiscuous mode [ 63.974085][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.991143][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.001802][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.012584][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.026081][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.036286][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.047557][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.057488][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.068590][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.078837][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.089460][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.100996][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.124678][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.132841][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.142776][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.151752][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.160618][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.173458][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.185253][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.196390][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.207766][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.219148][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.245310][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.254048][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.263321][ T1227] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.263938][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.275834][ T23] Bluetooth: hci1: command 0x040f tx timeout [ 64.284732][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.290888][ T1227] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.303457][ T4188] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.304759][ T23] Bluetooth: hci2: command 0x040f tx timeout [ 64.318746][ T23] Bluetooth: hci0: command 0x040f tx timeout [ 64.320906][ T4188] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.334224][ T4188] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.343092][ T4188] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.363033][ T2862] Bluetooth: hci3: command 0x040f tx timeout [ 64.371565][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.384095][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.387475][ T2862] Bluetooth: hci4: command 0x040f tx timeout [ 64.401585][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.412282][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.422243][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.432910][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.446259][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.453670][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.461915][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.471071][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.500946][ T4189] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.510272][ T4189] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.519718][ T4189] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.530280][ T4189] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.553114][ T392] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.561836][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.565545][ T392] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.570505][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.623396][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.633216][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.642842][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.656338][ T4187] device veth0_vlan entered promiscuous mode [ 64.670970][ T392] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.684905][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.692999][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.703106][ T392] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.733852][ T4187] device veth1_vlan entered promiscuous mode [ 64.745968][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.753931][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.821703][ T1227] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.854620][ T1227] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.875503][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.885065][ T392] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.889474][ T4187] device veth0_macvtap entered promiscuous mode [ 64.893008][ T392] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.940822][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.950163][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.960054][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.969363][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.000188][ T4187] device veth1_macvtap entered promiscuous mode [ 65.021219][ T1227] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.022251][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.035944][ T1227] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.058430][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.107338][ T392] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.116919][ T392] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.127616][ T392] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.161255][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.189210][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.206703][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.221409][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.234501][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.247723][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.258343][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.275855][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.313474][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.330089][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.347578][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.369125][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.396466][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.417110][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.451799][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.482650][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.511626][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.526276][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.537470][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.559279][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.584888][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.604201][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.626399][ T4187] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.648419][ T4187] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.657902][ T4187] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.667086][ T4187] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.713457][ T4293] device syzkaller0 entered promiscuous mode [ 65.913404][ T392] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.943794][ T392] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.957374][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.980110][ T392] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.988598][ T392] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.998661][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.248767][ T4314] syz.4.13 uses obsolete (PF_INET,SOCK_PACKET) [ 66.357664][ T21] Bluetooth: hci0: command 0x0419 tx timeout [ 66.366986][ T21] Bluetooth: hci2: command 0x0419 tx timeout [ 66.381110][ T21] Bluetooth: hci1: command 0x0419 tx timeout [ 66.436656][ T21] Bluetooth: hci4: command 0x0419 tx timeout [ 66.452735][ T21] Bluetooth: hci3: command 0x0419 tx timeout [ 66.764141][ T4328] device syzkaller0 entered promiscuous mode [ 67.042091][ T4333] device syzkaller0 entered promiscuous mode [ 67.066293][ T4335] device syzkaller0 entered promiscuous mode [ 67.094298][ T4337] netlink: 16 bytes leftover after parsing attributes in process `syz.3.23'. [ 67.273792][ T4344] netlink: 4 bytes leftover after parsing attributes in process `syz.0.25'. [ 67.296997][ T4344] Zero length message leads to an empty skb [ 67.346183][ T4346] device syzkaller0 entered promiscuous mode [ 67.462329][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 67.473935][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.488002][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.499768][ T4349] device bridge_slave_0 left promiscuous mode [ 67.510503][ T4349] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.540463][ T4349] device bridge_slave_1 left promiscuous mode [ 67.547294][ T4349] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.562661][ T4349] bond0: (slave bond_slave_0): Releasing backup interface [ 67.583069][ T4349] bond0: (slave bond_slave_1): Releasing backup interface [ 67.648521][ T4349] team0: Port device team_slave_0 removed [ 67.672124][ T4349] team0: Port device team_slave_1 removed [ 67.678604][ T4349] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.686445][ T4349] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.695522][ T4349] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.703112][ T4349] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.784433][ T4354] team0: Mode changed to "loadbalance" [ 67.840675][ T4357] netlink: 'syz.2.30': attribute type 1 has an invalid length. [ 67.987699][ T4364] netlink: 14 bytes leftover after parsing attributes in process `syz.2.30'. [ 68.142793][ T4353] device syzkaller0 entered promiscuous mode [ 68.189028][ T4378] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 68.538111][ T4403] netlink: 4 bytes leftover after parsing attributes in process `syz.2.38'. [ 68.966131][ T4423] device syzkaller0 entered promiscuous mode [ 69.092481][ T4427] device syzkaller0 entered promiscuous mode [ 69.164032][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 69.183774][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.200890][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.212551][ T4430] device bridge_slave_0 left promiscuous mode [ 69.224256][ T4430] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.244550][ T4430] device bridge_slave_1 left promiscuous mode [ 69.251347][ T4430] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.271717][ T4430] bond0: (slave bond_slave_0): Releasing backup interface [ 69.298424][ T4430] bond0: (slave bond_slave_1): Releasing backup interface [ 69.347856][ T4430] team0: Port device team_slave_0 removed [ 69.376461][ T4430] team0: Port device team_slave_1 removed [ 69.385776][ T4430] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.393576][ T4430] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 69.403314][ T4430] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.410972][ T4430] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 69.476926][ T4432] team0: Mode changed to "loadbalance" [ 69.864010][ T4457] device syzkaller0 entered promiscuous mode [ 70.095095][ T4466] device syzkaller0 entered promiscuous mode [ 70.463169][ T4479] team0: No ports can be present during mode change [ 70.789683][ T4490] device syzkaller0 entered promiscuous mode [ 70.948825][ T4500] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 71.175252][ T4502] device syzkaller0 entered promiscuous mode [ 71.489044][ T1429] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.495807][ T1429] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.629238][ T4515] team0: No ports can be present during mode change [ 71.688460][ T4517] device syzkaller0 entered promiscuous mode [ 71.940888][ T4526] netlink: 14 bytes leftover after parsing attributes in process `syz.0.81'. [ 72.220183][ T4537] device syzkaller0 entered promiscuous mode [ 72.522748][ T4541] netlink: 4 bytes leftover after parsing attributes in process `syz.4.86'. [ 72.531719][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807d203c00: rx timeout, send abort [ 72.563590][ T4544] device syzkaller0 entered promiscuous mode [ 72.571575][ T4546] team0: No ports can be present during mode change [ 72.848944][ T4555] device syzkaller0 entered promiscuous mode [ 73.054181][ T4569] IPVS: sync thread started: state = BACKUP, mcast_ifn = team0, syncid = 0, id = 0 [ 73.367084][ T4575] device syzkaller0 entered promiscuous mode [ 73.399431][ T4582] device syzkaller0 entered promiscuous mode [ 73.809058][ T4596] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 74.202191][ T4603] device syzkaller0 entered promiscuous mode [ 74.386034][ T4607] device veth0_macvtap left promiscuous mode [ 74.626705][ T4619] netlink: 'syz.4.115': attribute type 7 has an invalid length. [ 74.668475][ T4607] syz.0.111 (4607) used greatest stack depth: 20304 bytes left [ 74.923327][ T4630] device syzkaller0 entered promiscuous mode [ 74.981395][ T4631] device syzkaller0 entered promiscuous mode [ 75.465123][ T3855] device veth0_macvtap entered promiscuous mode [ 76.043806][ T4690] device syzkaller0 entered promiscuous mode [ 76.173481][ T4700] device syzkaller0 entered promiscuous mode [ 76.272362][ T4677] device syzkaller0 entered promiscuous mode [ 76.666336][ T4719] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 76.685578][ T4719] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.716812][ T4719] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.738924][ T4724] team0: Unable to change to the same mode the team is in [ 76.814291][ T4730] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 76.927775][ T4729] [ 76.930174][ T4729] ====================================================== [ 76.937399][ T4729] WARNING: possible circular locking dependency detected [ 76.944562][ T4729] syzkaller #0 Not tainted [ 76.949012][ T4729] ------------------------------------------------------ [ 76.956225][ T4729] syz.3.141/4729 is trying to acquire lock: [ 76.962313][ T4729] ffff888026329120 (sk_lock-AF_AX25){+.+.}-{0:0}, at: ax25_device_event+0x217/0x4f0 [ 76.971877][ T4729] [ 76.971877][ T4729] but task is already holding lock: [ 76.979360][ T4729] ffffffff8d43cb48 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x534/0xe30 [ 76.987765][ T4729] [ 76.987765][ T4729] which lock already depends on the new lock. [ 76.987765][ T4729] [ 76.998293][ T4729] [ 76.998293][ T4729] the existing dependency chain (in reverse order) is: [ 77.007423][ T4729] [ 77.007423][ T4729] -> #1 (rtnl_mutex){+.+.}-{3:3}: [ 77.015190][ T4729] __mutex_lock_common+0x1e3/0x2400 [ 77.020953][ T4729] mutex_lock_nested+0x17/0x20 [ 77.026450][ T4729] ax25_setsockopt+0x859/0xa60 [ 77.031843][ T4729] __sys_setsockopt+0x2bf/0x3d0 [ 77.037422][ T4729] __x64_sys_setsockopt+0xb1/0xc0 [ 77.043096][ T4729] do_syscall_64+0x4c/0xa0 [ 77.048077][ T4729] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 77.054601][ T4729] [ 77.054601][ T4729] -> #0 (sk_lock-AF_AX25){+.+.}-{0:0}: [ 77.062277][ T4729] __lock_acquire+0x2c42/0x7d10 [ 77.067860][ T4729] lock_acquire+0x19e/0x400 [ 77.072922][ T4729] lock_sock_nested+0x44/0x100 [ 77.078249][ T4729] ax25_device_event+0x217/0x4f0 [ 77.084014][ T4729] raw_notifier_call_chain+0xcb/0x160 [ 77.089949][ T4729] __dev_notify_flags+0x158/0x300 [ 77.095534][ T4729] dev_change_flags+0xe3/0x1a0 [ 77.100863][ T4729] dev_ifsioc+0x130/0xd50 [ 77.106047][ T4729] dev_ioctl+0x545/0xe30 [ 77.110866][ T4729] sock_do_ioctl+0x245/0x320 [ 77.116013][ T4729] sock_ioctl+0x4d2/0x710 [ 77.121068][ T4729] __se_sys_ioctl+0xfa/0x170 [ 77.126420][ T4729] do_syscall_64+0x4c/0xa0 [ 77.131485][ T4729] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 77.138711][ T4729] [ 77.138711][ T4729] other info that might help us debug this: [ 77.138711][ T4729] [ 77.149045][ T4729] Possible unsafe locking scenario: [ 77.149045][ T4729] [ 77.156522][ T4729] CPU0 CPU1 [ 77.161990][ T4729] ---- ---- [ 77.167373][ T4729] lock(rtnl_mutex); [ 77.171394][ T4729] lock(sk_lock-AF_AX25); [ 77.179299][ T4729] lock(rtnl_mutex); [ 77.186180][ T4729] lock(sk_lock-AF_AX25); [ 77.190735][ T4729] [ 77.190735][ T4729] *** DEADLOCK *** [ 77.190735][ T4729] [ 77.199515][ T4729] 1 lock held by syz.3.141/4729: [ 77.204669][ T4729] #0: ffffffff8d43cb48 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x534/0xe30 [ 77.213785][ T4729] [ 77.213785][ T4729] stack backtrace: [ 77.219732][ T4729] CPU: 1 PID: 4729 Comm: syz.3.141 Not tainted syzkaller #0 [ 77.227330][ T4729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 77.237696][ T4729] Call Trace: [ 77.241088][ T4729] [ 77.244032][ T4729] dump_stack_lvl+0x188/0x250 [ 77.249031][ T4729] ? load_image+0x400/0x400 [ 77.253740][ T4729] ? show_regs_print_info+0x20/0x20 [ 77.258990][ T4729] ? print_circular_bug+0x12b/0x1a0 [ 77.264223][ T4729] check_noncircular+0x296/0x330 [ 77.269189][ T4729] ? stack_trace_snprint+0xf0/0xf0 [ 77.274310][ T4729] ? add_chain_block+0x940/0x940 [ 77.279250][ T4729] ? lockdep_lock+0xf1/0x1f0 [ 77.283846][ T4729] ? mark_lock+0x94/0x320 [ 77.288193][ T4729] __lock_acquire+0x2c42/0x7d10 [ 77.293202][ T4729] ? mark_lock+0x94/0x320 [ 77.297773][ T4729] ? verify_lock_unused+0x140/0x140 [ 77.303006][ T4729] ? verify_lock_unused+0x140/0x140 [ 77.308212][ T4729] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 77.314321][ T4729] ? lockdep_hardirqs_on_prepare+0x770/0x770 [ 77.320552][ T4729] ? mark_lock+0x94/0x320 [ 77.324890][ T4729] lock_acquire+0x19e/0x400 [ 77.329587][ T4729] ? ax25_device_event+0x217/0x4f0 [ 77.334718][ T4729] ? lock_chain_count+0x20/0x20 [ 77.340076][ T4729] ? read_lock_is_recursive+0x10/0x10 [ 77.346678][ T4729] ? __local_bh_enable_ip+0x136/0x1c0 [ 77.352452][ T4729] ? lockdep_hardirqs_on+0x94/0x140 [ 77.358388][ T4729] ? __local_bh_enable_ip+0x136/0x1c0 [ 77.364033][ T4729] ? _local_bh_enable+0xa0/0xa0 [ 77.369537][ T4729] lock_sock_nested+0x44/0x100 [ 77.374519][ T4729] ? ax25_device_event+0x217/0x4f0 [ 77.380174][ T4729] ax25_device_event+0x217/0x4f0 [ 77.385165][ T4729] raw_notifier_call_chain+0xcb/0x160 [ 77.391297][ T4729] __dev_notify_flags+0x158/0x300 [ 77.396331][ T4729] ? __dev_change_flags+0x6a0/0x6a0 [ 77.401633][ T4729] ? __dev_change_flags+0x4d0/0x6a0 [ 77.406840][ T4729] ? dev_get_flags+0x1c0/0x1c0 [ 77.411879][ T4729] ? __mutex_lock_common+0x465/0x2400 [ 77.417445][ T4729] dev_change_flags+0xe3/0x1a0 [ 77.422327][ T4729] dev_ifsioc+0x130/0xd50 [ 77.426668][ T4729] ? dev_ioctl+0xe30/0xe30 [ 77.431343][ T4729] ? apparmor_capable+0x12c/0x190 [ 77.436387][ T4729] ? full_name_hash+0x8e/0xe0 [ 77.441103][ T4729] dev_ioctl+0x545/0xe30 [ 77.445341][ T4729] ? _copy_from_user+0x111/0x170 [ 77.450380][ T4729] sock_do_ioctl+0x245/0x320 [ 77.455179][ T4729] ? sock_show_fdinfo+0xb0/0xb0 [ 77.460043][ T4729] sock_ioctl+0x4d2/0x710 [ 77.464384][ T4729] ? sock_poll+0x410/0x410 [ 77.468864][ T4729] ? bpf_lsm_file_ioctl+0x5/0x10 [ 77.473974][ T4729] ? security_file_ioctl+0x7c/0xa0 [ 77.479396][ T4729] ? sock_poll+0x410/0x410 [ 77.483828][ T4729] __se_sys_ioctl+0xfa/0x170 [ 77.488517][ T4729] do_syscall_64+0x4c/0xa0 [ 77.492942][ T4729] ? clear_bhb_loop+0x30/0x80 [ 77.497723][ T4729] ? clear_bhb_loop+0x30/0x80 [ 77.502411][ T4729] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 77.508320][ T4729] RIP: 0033:0x7f21f87f8819 [ 77.512870][ T4729] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.533027][ T4729] RSP: 002b:00007f21f6a52028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 77.541703][ T4729] RAX: ffffffffffffffda RBX: 00007f21f8a71fa0 RCX: 00007f21f87f8819 [ 77.549912][ T4729] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000004 [ 77.557896][ T4729] RBP: 00007f21f888ec91 R08: 0000000000000000 R09: 0000000000000000 [ 77.566304][ T4729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.574485][ T4729] R13: 00007f21f8a72038 R14: 00007f21f8a71fa0 R15: 00007ffd045b2078 [ 77.582587][ T4729] [ 77.593224][ T4729] ================================================================== [ 77.601613][ T4729] BUG: KASAN: use-after-free in ax25_dev_device_down+0x35e/0x520 [ 77.609379][ T4729] Write of size 4 at addr ffff88805fcfe5b8 by task syz.3.141/4729 [ 77.617382][ T4729] [ 77.619722][ T4729] CPU: 1 PID: 4729 Comm: syz.3.141 Not tainted syzkaller #0 [ 77.627283][ T4729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 77.637541][ T4729] Call Trace: [ 77.641699][ T4729] [ 77.644990][ T4729] dump_stack_lvl+0x188/0x250 [ 77.649678][ T4729] ? show_regs_print_info+0x20/0x20 [ 77.655046][ T4729] ? _printk+0xda/0x130 [ 77.659538][ T4729] ? ax25_dev_device_down+0x35e/0x520 [ 77.664940][ T4729] ? load_image+0x400/0x400 [ 77.669457][ T4729] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 77.675039][ T4729] print_address_description+0x60/0x2d0 [ 77.680611][ T4729] ? ax25_dev_device_down+0x35e/0x520 [ 77.686181][ T4729] kasan_report+0xdf/0x130 [ 77.690805][ T4729] ? ax25_dev_device_down+0x35e/0x520 [ 77.697049][ T4729] kasan_check_range+0x235/0x290 [ 77.702288][ T4729] ax25_dev_device_down+0x35e/0x520 [ 77.707678][ T4729] ax25_device_event+0x4b4/0x4f0 [ 77.712756][ T4729] raw_notifier_call_chain+0xcb/0x160 [ 77.718142][ T4729] __dev_notify_flags+0x158/0x300 [ 77.723387][ T4729] ? __dev_change_flags+0x6a0/0x6a0 [ 77.728878][ T4729] ? __dev_change_flags+0x4d0/0x6a0 [ 77.734474][ T4729] ? dev_get_flags+0x1c0/0x1c0 [ 77.739274][ T4729] ? __mutex_lock_common+0x465/0x2400 [ 77.744818][ T4729] dev_change_flags+0xe3/0x1a0 [ 77.749603][ T4729] dev_ifsioc+0x130/0xd50 [ 77.753945][ T4729] ? dev_ioctl+0xe30/0xe30 [ 77.759062][ T4729] ? apparmor_capable+0x12c/0x190 [ 77.764108][ T4729] ? full_name_hash+0x8e/0xe0 [ 77.768786][ T4729] dev_ioctl+0x545/0xe30 [ 77.773050][ T4729] ? _copy_from_user+0x111/0x170 [ 77.778112][ T4729] sock_do_ioctl+0x245/0x320 [ 77.782798][ T4729] ? sock_show_fdinfo+0xb0/0xb0 [ 77.787659][ T4729] sock_ioctl+0x4d2/0x710 [ 77.792194][ T4729] ? sock_poll+0x410/0x410 [ 77.796700][ T4729] ? bpf_lsm_file_ioctl+0x5/0x10 [ 77.801636][ T4729] ? security_file_ioctl+0x7c/0xa0 [ 77.806994][ T4729] ? sock_poll+0x410/0x410 [ 77.811456][ T4729] __se_sys_ioctl+0xfa/0x170 [ 77.816157][ T4729] do_syscall_64+0x4c/0xa0 [ 77.820679][ T4729] ? clear_bhb_loop+0x30/0x80 [ 77.825565][ T4729] ? clear_bhb_loop+0x30/0x80 [ 77.830252][ T4729] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 77.836391][ T4729] RIP: 0033:0x7f21f87f8819 [ 77.840848][ T4729] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.860702][ T4729] RSP: 002b:00007f21f6a52028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 77.869146][ T4729] RAX: ffffffffffffffda RBX: 00007f21f8a71fa0 RCX: 00007f21f87f8819 [ 77.877543][ T4729] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000004 [ 77.885905][ T4729] RBP: 00007f21f888ec91 R08: 0000000000000000 R09: 0000000000000000 [ 77.893919][ T4729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.901907][ T4729] R13: 00007f21f8a72038 R14: 00007f21f8a71fa0 R15: 00007ffd045b2078 [ 77.910176][ T4729] [ 77.913198][ T4729] [ 77.915628][ T4729] Allocated by task 4730: [ 77.920037][ T4729] __kasan_kmalloc+0xb5/0xf0 [ 77.924721][ T4729] ax25_dev_device_up+0x50/0x580 [ 77.929763][ T4729] ax25_device_event+0x483/0x4f0 [ 77.934701][ T4729] raw_notifier_call_chain+0xcb/0x160 [ 77.940092][ T4729] __dev_notify_flags+0x194/0x300 [ 77.945222][ T4729] dev_change_flags+0xe3/0x1a0 [ 77.950089][ T4729] dev_ifsioc+0x130/0xd50 [ 77.954483][ T4729] dev_ioctl+0x545/0xe30 [ 77.959234][ T4729] sock_do_ioctl+0x245/0x320 [ 77.963931][ T4729] sock_ioctl+0x4d2/0x710 [ 77.968271][ T4729] __se_sys_ioctl+0xfa/0x170 [ 77.972894][ T4729] do_syscall_64+0x4c/0xa0 [ 77.977420][ T4729] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 77.983402][ T4729] [ 77.985797][ T4729] Freed by task 4729: [ 77.989802][ T4729] kasan_set_track+0x4b/0x70 [ 77.994580][ T4729] kasan_set_free_info+0x1f/0x40 [ 77.999528][ T4729] ____kasan_slab_free+0xd5/0x110 [ 78.004591][ T4729] slab_free_freelist_hook+0xea/0x170 [ 78.010056][ T4729] kfree+0xef/0x2a0 [ 78.013871][ T4729] ax25_dev_device_down+0x1c0/0x520 [ 78.019069][ T4729] ax25_device_event+0x4b4/0x4f0 [ 78.024003][ T4729] raw_notifier_call_chain+0xcb/0x160 [ 78.029466][ T4729] __dev_notify_flags+0x158/0x300 [ 78.034599][ T4729] dev_change_flags+0xe3/0x1a0 [ 78.039394][ T4729] dev_ifsioc+0x130/0xd50 [ 78.043837][ T4729] dev_ioctl+0x545/0xe30 [ 78.048091][ T4729] sock_do_ioctl+0x245/0x320 [ 78.052694][ T4729] sock_ioctl+0x4d2/0x710 [ 78.057040][ T4729] __se_sys_ioctl+0xfa/0x170 [ 78.061957][ T4729] do_syscall_64+0x4c/0xa0 [ 78.066409][ T4729] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 78.072306][ T4729] [ 78.074669][ T4729] Last potentially related work creation: [ 78.080554][ T4729] kasan_save_stack+0x35/0x60 [ 78.085604][ T4729] kasan_record_aux_stack+0xb8/0x100 [ 78.090914][ T4729] insert_work+0x54/0x3d0 [ 78.095556][ T4729] __queue_work+0x9c5/0xd50 [ 78.100509][ T4729] queue_work_on+0x124/0x1f0 [ 78.105196][ T4729] netdevice_event+0x803/0x900 [ 78.109980][ T4729] raw_notifier_call_chain+0xcb/0x160 [ 78.115550][ T4729] __dev_notify_flags+0x194/0x300 [ 78.120729][ T4729] dev_change_flags+0xe3/0x1a0 [ 78.125627][ T4729] do_setlink+0xcdb/0x3d60 [ 78.130261][ T4729] rtnl_newlink+0x1658/0x1a50 [ 78.135133][ T4729] rtnetlink_rcv_msg+0x844/0xf30 [ 78.140659][ T4729] netlink_rcv_skb+0x1f5/0x440 [ 78.145646][ T4729] netlink_unicast+0x774/0x920 [ 78.150547][ T4729] netlink_sendmsg+0x8ba/0xbe0 [ 78.155327][ T4729] __sys_sendto+0x46d/0x620 [ 78.160153][ T4729] __x64_sys_sendto+0xda/0xf0 [ 78.164846][ T4729] do_syscall_64+0x4c/0xa0 [ 78.169469][ T4729] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 78.175404][ T4729] [ 78.177784][ T4729] The buggy address belongs to the object at ffff88805fcfe500 [ 78.177784][ T4729] which belongs to the cache kmalloc-192 of size 192 [ 78.192715][ T4729] The buggy address is located 184 bytes inside of [ 78.192715][ T4729] 192-byte region [ffff88805fcfe500, ffff88805fcfe5c0) [ 78.207098][ T4729] The buggy address belongs to the page: [ 78.213030][ T4729] page:ffffea00017f3f80 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5fcfe [ 78.223712][ T4729] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 78.231541][ T4729] raw: 00fff00000000200 ffffea00008e7640 0000000b0000000b ffff888016c41a00 [ 78.240930][ T4729] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 78.249521][ T4729] page dumped because: kasan: bad access detected [ 78.255962][ T4729] page_owner tracks the page as allocated [ 78.261796][ T4729] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY), pid 4188, ts 64488069575, free_ts 19737888221 [ 78.278136][ T4729] get_page_from_freelist+0x1bbd/0x1ca0 [ 78.283788][ T4729] __alloc_pages+0x1ee/0x480 [ 78.288418][ T4729] new_slab+0xc0/0x4b0 [ 78.292676][ T4729] ___slab_alloc+0x80a/0xdd0 [ 78.297279][ T4729] kmem_cache_alloc_trace+0x1a5/0x2a0 [ 78.302837][ T4729] addr_event+0xc3/0x460 [ 78.307184][ T4729] inetaddr_event+0xec/0x150 [ 78.311899][ T4729] blocking_notifier_call_chain+0x103/0x1b0 [ 78.317792][ T4729] __inet_insert_ifa+0x9f7/0xbe0 [ 78.323007][ T4729] inet_rtm_newaddr+0x99a/0x1890 [ 78.328130][ T4729] rtnetlink_rcv_msg+0x844/0xf30 [ 78.333272][ T4729] netlink_rcv_skb+0x1f5/0x440 [ 78.338236][ T4729] netlink_unicast+0x774/0x920 [ 78.343966][ T4729] netlink_sendmsg+0x8ba/0xbe0 [ 78.348744][ T4729] __sys_sendto+0x46d/0x620 [ 78.353347][ T4729] __x64_sys_sendto+0xda/0xf0 [ 78.358018][ T4729] page last free stack trace: [ 78.362680][ T4729] free_unref_page_prepare+0x637/0x6c0 [ 78.368136][ T4729] free_unref_page+0x8f/0x2a0 [ 78.372811][ T4729] free_contig_range+0x96/0xf0 [ 78.377592][ T4729] destroy_args+0xf0/0xa00 [ 78.382012][ T4729] debug_vm_pgtable+0x321/0x380 [ 78.386882][ T4729] do_one_initcall+0x272/0x730 [ 78.392437][ T4729] do_initcall_level+0x137/0x1f0 [ 78.398124][ T4729] do_initcalls+0x4b/0x90 [ 78.402725][ T4729] kernel_init_freeable+0x3e9/0x570 [ 78.408096][ T4729] kernel_init+0x19/0x1b0 [ 78.412590][ T4729] ret_from_fork+0x1f/0x30 [ 78.417260][ T4729] [ 78.419714][ T4729] Memory state around the buggy address: [ 78.425469][ T4729] ffff88805fcfe480: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 78.433671][ T4729] ffff88805fcfe500: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 78.442334][ T4729] >ffff88805fcfe580: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 78.450961][ T4729] ^ [ 78.457052][ T4729] ffff88805fcfe600: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 78.465133][ T4729] ffff88805fcfe680: 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc [ 78.473195][ T4729] ================================================================== [ 78.486710][ T4729] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 78.494073][ T4729] CPU: 1 PID: 4729 Comm: syz.3.141 Tainted: G B syzkaller #0 [ 78.502858][ T4729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 78.513165][ T4729] Call Trace: [ 78.516914][ T4729] [ 78.519871][ T4729] dump_stack_lvl+0x188/0x250 [ 78.524807][ T4729] ? show_regs_print_info+0x20/0x20 [ 78.530047][ T4729] ? load_image+0x400/0x400 [ 78.534689][ T4729] panic+0x2e5/0x810 [ 78.538714][ T4729] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 78.544908][ T4729] ? bpf_jit_dump+0xd0/0xd0 [ 78.549457][ T4729] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 78.555591][ T4729] ? _raw_spin_unlock+0x40/0x40 [ 78.560509][ T4729] ? ax25_dev_device_down+0x35e/0x520 [ 78.565919][ T4729] check_panic_on_warn+0x80/0xa0 [ 78.570882][ T4729] ? ax25_dev_device_down+0x35e/0x520 [ 78.576340][ T4729] end_report+0x6d/0xf0 [ 78.580951][ T4729] kasan_report+0x102/0x130 [ 78.585723][ T4729] ? ax25_dev_device_down+0x35e/0x520 [ 78.591300][ T4729] kasan_check_range+0x235/0x290 [ 78.596558][ T4729] ax25_dev_device_down+0x35e/0x520 [ 78.601891][ T4729] ax25_device_event+0x4b4/0x4f0 [ 78.607030][ T4729] raw_notifier_call_chain+0xcb/0x160 [ 78.612697][ T4729] __dev_notify_flags+0x158/0x300 [ 78.617904][ T4729] ? __dev_change_flags+0x6a0/0x6a0 [ 78.623324][ T4729] ? __dev_change_flags+0x4d0/0x6a0 [ 78.628823][ T4729] ? dev_get_flags+0x1c0/0x1c0 [ 78.633777][ T4729] ? __mutex_lock_common+0x465/0x2400 [ 78.639198][ T4729] dev_change_flags+0xe3/0x1a0 [ 78.644195][ T4729] dev_ifsioc+0x130/0xd50 [ 78.648884][ T4729] ? dev_ioctl+0xe30/0xe30 [ 78.653411][ T4729] ? apparmor_capable+0x12c/0x190 [ 78.658609][ T4729] ? full_name_hash+0x8e/0xe0 [ 78.663394][ T4729] dev_ioctl+0x545/0xe30 [ 78.667678][ T4729] ? _copy_from_user+0x111/0x170 [ 78.672628][ T4729] sock_do_ioctl+0x245/0x320 [ 78.677553][ T4729] ? sock_show_fdinfo+0xb0/0xb0 [ 78.682419][ T4729] sock_ioctl+0x4d2/0x710 [ 78.686858][ T4729] ? sock_poll+0x410/0x410 [ 78.691734][ T4729] ? bpf_lsm_file_ioctl+0x5/0x10 [ 78.697411][ T4729] ? security_file_ioctl+0x7c/0xa0 [ 78.702682][ T4729] ? sock_poll+0x410/0x410 [ 78.707111][ T4729] __se_sys_ioctl+0xfa/0x170 [ 78.711735][ T4729] do_syscall_64+0x4c/0xa0 [ 78.716536][ T4729] ? clear_bhb_loop+0x30/0x80 [ 78.721781][ T4729] ? clear_bhb_loop+0x30/0x80 [ 78.727116][ T4729] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 78.733041][ T4729] RIP: 0033:0x7f21f87f8819 [ 78.737926][ T4729] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.758723][ T4729] RSP: 002b:00007f21f6a52028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 78.767845][ T4729] RAX: ffffffffffffffda RBX: 00007f21f8a71fa0 RCX: 00007f21f87f8819 [ 78.775952][ T4729] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000004 [ 78.784106][ T4729] RBP: 00007f21f888ec91 R08: 0000000000000000 R09: 0000000000000000 [ 78.792365][ T4729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 78.800696][ T4729] R13: 00007f21f8a72038 R14: 00007f21f8a71fa0 R15: 00007ffd045b2078 [ 78.809015][ T4729] [ 78.812530][ T4729] Kernel Offset: disabled [ 78.816962][ T4729] Rebooting in 86400 seconds..