last executing test programs: 2m58.815020254s ago: executing program 1 (id=855): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1003d1, 0x3, 0x20000000, 0x6, 0x6}, 0x69}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r1) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000740)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f0000000cc0)=[{&(0x7f00000002c0)="27030200dc0f14000e00003c0ff000000000ff880000000200000003125ce882cbf490d908f1523f000000002d9c", 0x2e}], 0x1}, 0x8bb3a321efc09a) 2m48.980066727s ago: executing program 1 (id=861): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) connect$tipc(r0, &(0x7f0000000340)=@name={0x1e, 0x2, 0x0, {{0x0, 0x2}, 0x2}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000880)={0x3, 0x2, 0x5, 0xff5}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) unshare(0x22020600) r4 = syz_clone(0x0, 0x0, 0x29, 0x0, 0x0, 0x0) ptrace(0x8, r4) wait4(0x0, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x800452d2, 0x0) syz_mount_image$hfs(&(0x7f0000000180), &(0x7f00000000c0)='./file2\x00', 0x3000812, &(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYRES16=0x0, @ANYRES32=0x0, @ANYRESHEX=0x0, @ANYRESOCT], 0x11, 0x30b, &(0x7f0000000680)="$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") openat(0xffffffffffffff9c, 0x0, 0x141042, 0x0) 2m47.858005472s ago: executing program 1 (id=873): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r1, 0x5, 0x3, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) fadvise64(r0, 0x63eb, 0x0, 0x1) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r9 = socket$pppoe(0x18, 0x1, 0x0) sendmsg$NL80211_CMD_ASSOCIATE(r4, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYRES32=r9, @ANYRES16=r1, @ANYRES64=r0], 0x70}, 0x1, 0x0, 0x0, 0x4040881}, 0x4000000) connect$pppoe(r9, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="00ff00", 'bond0\x00'}}, 0x1e) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f00000003c0)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x0, 0xf, 0x0, &(0x7f0000000000)="1ffdfaae35289d4f333173846fe86c", 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) sendmmsg(r9, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) r11 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IPT_SO_SET_REPLACE(r11, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x560, 0x3b0, 0x0, 0x94, 0x94, 0x94, 0x4cc, 0x4cc, 0x4cc, 0x4cc, 0x4cc, 0x6, 0x0, {[{{@ip={@remote, @broadcast, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {0xff}, {}, 0x0, 0x0, 0x18}, 0x0, 0x70, 0x94, 0x0, {0x0, 0x2000000}}, @inet=@DSCP={0x24}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@ip={@broadcast, @private=0xa010101, 0x0, 0x0, 'dvmrp0\x00', 'nr0\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0xa8, 0xcc, 0x0, {}, [@common=@unspec=@time={{0x38}, {0xfffff38f, 0x8000, 0x8d84, 0xcafc, 0xffffff8e, 0x70, 0x1}}]}, @unspec=@CHECKSUM={0x24}}, {{@ip={@loopback, @local, 0x0, 0x0, 'geneve0\x00', 'veth1_to_team\x00', {0xff}, {}, 0x0, 0x0, 0x3}, 0x0, 0x94, 0x1bc, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x7}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@uncond, 0x0, 0xe0, 0x11c, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz1\x00', 0x0, 0x0, 0x1, 0x1}}]}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x3, 0x8, @ipv4=@multicast1, 0x5e20}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x5bc) 2m36.495984411s ago: executing program 1 (id=881): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) umount2(&(0x7f00000001c0)='./file0/file0\x00', 0x8) 2m36.437402624s ago: executing program 1 (id=884): lsetxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x3) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x810) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) r4 = openat$fb0(0xffffffffffffff9c, 0x0, 0x800, 0x0) r5 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x100, 0x0, 0x335}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000001800)=""/200, 0xc8}], 0x1}) io_uring_enter(r5, 0x47ba, 0x0, 0x0, 0x0, 0x0) 2m35.893539911s ago: executing program 1 (id=887): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r2, @ANYBLOB='\x00('], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a9295", 0xd2}], 0x1}, 0x60044084) 2m35.883214301s ago: executing program 32 (id=887): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r2, @ANYBLOB='\x00('], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a9295", 0xd2}], 0x1}, 0x60044084) 23.563496636s ago: executing program 4 (id=1401): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000080000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000021440011800a0001006d617463680000003400028008000240000000001c0003000afe6cbf96caa5debdad61b67ddb2fb68fcf19f7807076430a00010071756f7461"], 0xc8}, 0x1, 0x0, 0x0, 0x4000005}, 0x20000004) socketpair(0x1e, 0xa, 0xd, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000069114e0000000000850000001a0000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x80) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x14, r5, 0x2, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x10000) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="10010000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r4], 0x110}, 0x1, 0x0, 0x0, 0x4000401}, 0x2404c080) bind$alg(r2, &(0x7f00000007c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) bind$alg(r2, &(0x7f0000000440)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) write(r0, &(0x7f0000000000)="0a000000010001", 0x7) 23.449536372s ago: executing program 4 (id=1403): r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x7ffffff7, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r1, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000280)="5338a3848b25", 0x6}], 0x1}}], 0x1, 0x20008000) recvmsg(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000000200)=""/112, 0x70}], 0x1}, 0x123) shutdown(r1, 0x1) socketpair(0x25, 0x4, 0x8, &(0x7f0000000000)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x1, 0x7}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x84}, 0x8000) 12.326038766s ago: executing program 3 (id=1415): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x11}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r6, 0x0, 0x0, 0x4000824, &(0x7f0000000080)={0x11, 0x8100, r5, 0x1, 0xfe, 0x6, @multicast}, 0x14) 12.314438107s ago: executing program 4 (id=1416): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1003d1, 0x3, 0x20000000, 0x6, 0x6}, 0x69}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r1) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000740)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f0000000cc0)=[{&(0x7f00000002c0)="27030200dc0f14000e00003c0ff000000000ff880000000200000003125ce882cbf490d908f1523f000000002d9c", 0x2e}], 0x1}, 0x8bb3a321efc09a) 12.200134052s ago: executing program 2 (id=1420): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000380)=0x2, 0x4) sendto$inet(r0, 0x0, 0x0, 0x28040041, &(0x7f0000000040)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)="1f", 0x1}], 0x1}, 0x48c0) recvmmsg(r0, &(0x7f00000013c0)=[{{0x0, 0x0, 0x0}, 0x13c3}], 0x1, 0x0, 0x0) 12.199074972s ago: executing program 2 (id=1421): r0 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0x0, 0x102000200032, 0xffffffffffffffff, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000abaff9)={0x77359400}, 0x10) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func={0x0, 0x0, 0x0, 0x90}]}}, 0x0, 0x26, 0x0, 0x1}, 0x20) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) socket(0x400000000010, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f00000000c0)=0x800, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) 12.130901486s ago: executing program 3 (id=1422): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0xfff3, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x172fd}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x20}], 0x1}, 0x4) 1.076483377s ago: executing program 2 (id=1426): r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x7ffffff7, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r1, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000280)="5338a3848b25", 0x6}], 0x1}}], 0x1, 0x20008000) recvmsg(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000000200)=""/112, 0x70}], 0x1}, 0x123) shutdown(r1, 0x1) socketpair(0x25, 0x4, 0x8, &(0x7f0000000000)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x1, 0x7}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x84}, 0x8000) 1.035244229s ago: executing program 4 (id=1428): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x22d00, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket(0x14, 0x2, 0x4) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x10000000}) 1.010071101s ago: executing program 3 (id=1429): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) socket$inet6_mptcp(0xa, 0x1, 0x106) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000c40), 0x12) 1.002408811s ago: executing program 2 (id=1430): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000a80)=0x1, 0x4) r1 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000040)={{{@in=@rand_addr=0x64010102, @in6=@remote, 0x4e1f, 0x0, 0x0, 0x0, 0x2}, {0x10000, 0x10, 0x40000000007, 0x6811221d, 0x100000000, 0x4, 0x200000003, 0x9}, {0x4000000000000005, 0xfffffffffffffffd, 0x7}, 0x5, 0x0, 0x1, 0x0, 0x6, 0x3}, {{@in=@local, 0x0, 0x6c}, 0x2, @in=@empty, 0x3502, 0x1, 0x3, 0x0, 0x9, 0x3}}, 0xe8) socket(0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 935.448084ms ago: executing program 3 (id=1434): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000380)=0x2, 0x4) sendto$inet(r0, 0x0, 0x0, 0x28040041, &(0x7f0000000040)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)="1f", 0x1}], 0x1}, 0x48c0) recvmmsg(r0, &(0x7f00000013c0)=[{{0x0, 0x0, 0x0}, 0x13c3}], 0x1, 0x0, 0x0) 899.555056ms ago: executing program 2 (id=1435): setxattr$security_capability(&(0x7f0000003c40)='./file0\x00', &(0x7f0000003c80), &(0x7f0000003cc0)=@v3={0x3000000, [{0x9, 0xfffffff7}, {0x3, 0x3}]}, 0x18, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 00004'], 0x2a, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x84, 0x0, &(0x7f0000001040)) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) syz_init_net_socket$ax25(0x3, 0x3, 0x8) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r4, &(0x7f00000000c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x4, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x40) 883.015537ms ago: executing program 3 (id=1437): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 820.01314ms ago: executing program 3 (id=1438): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) connect$ax25(r0, &(0x7f00000001c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) 751.129373ms ago: executing program 4 (id=1439): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001340)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x8004, {0x0, 0x0, 0x0, r6, {}, {}, {0xa, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x24040812) 615.53575ms ago: executing program 5 (id=1443): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4000090) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x6}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r5, 0x6) r6 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r6, &(0x7f0000000080), 0x10) sendmmsg(r6, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r7 = accept4$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}, 0x807}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000006c0)=""/240, 0xf0}], 0x2c}, 0x1ff}], 0x2, 0x20022, 0x0) recvfrom$unix(r7, &(0x7f0000000480)=""/242, 0xf2, 0x22, 0x0, 0x0) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e3000000000000000000000000800030000000000140006"], 0x58}}, 0x20008000) close(r4) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r10, &(0x7f0000000440)="8374b5819cd1", 0x6, 0x200000c1, &(0x7f00000001c0)={0x11, 0x8100, 0x0, 0x1, 0x23}, 0x14) 520.205784ms ago: executing program 4 (id=1446): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f00000002c0)) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r6, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r4}, 0x20) sendmmsg$inet6(r4, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)}}], 0x56, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) 328.594164ms ago: executing program 0 (id=1448): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newlink={0x38, 0x10, 0x437, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, 0x50483}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x10}}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc3555d6a4ad63b82}, 0x0) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 327.470104ms ago: executing program 5 (id=1449): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8810}, 0x8000) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x58, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x9, 0x4}, {}, {0x7, 0x6}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xceb, 0x7, 0x4}, {{0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x1}}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 319.027184ms ago: executing program 0 (id=1450): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1003d1, 0x3, 0x20000000, 0x6, 0x6}, 0x69}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r1) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000740)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f0000000cc0)=[{&(0x7f00000002c0)="27030200dc0f14000e00003c0ff000000000ff880000000200000003125ce882cbf490d908f1523f000000002d9c", 0x2e}], 0x1}, 0x8bb3a321efc09a) 210.186629ms ago: executing program 0 (id=1451): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x11}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r6, 0x33}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000000)="b8", 0x1}], 0x1}, 0x404481c) 206.46932ms ago: executing program 5 (id=1452): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641", 0xb0}, {&(0x7f0000000d00)="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", 0x12e}, {&(0x7f0000001300)="e0cda6472d1ccfb4d1d46bf348a3b7ff9e5b6b3e30ef2266c86a085e37271763c50968fe2e2eb13b9472381bade936f9a85e26aac6ebd21115f086751d870434cf07dbd9", 0x44}], 0x3}}], 0x1, 0x2090) close(0x3) 181.974141ms ago: executing program 5 (id=1453): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0}}, 0xc004004) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r2, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) 159.303522ms ago: executing program 5 (id=1454): r0 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0x0, 0x102000200032, 0xffffffffffffffff, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000abaff9)={0x77359400}, 0x10) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func={0x0, 0x0, 0x0, 0x90}]}}, 0x0, 0x26, 0x0, 0x1}, 0x20) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) socket(0x400000000010, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f00000000c0)=0x800, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) 90.694975ms ago: executing program 0 (id=1455): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x211}, @TCA_NETEM_SLOT={0x2c, 0xc, {0xfffffffffffffff4, 0x2, 0x8, 0x0, 0x5, 0x7}}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804) ioctl$SIOCSIFHWADDR(r4, 0x8922, 0x0) 16.359109ms ago: executing program 0 (id=1456): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$inet(r4, 0x0, 0x20000000) 15.142609ms ago: executing program 2 (id=1457): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) socket(0x400000000010, 0x3, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001340)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x8004, {0x0, 0x0, 0x0, r6, {}, {}, {0xa, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x24040812) 9.916859ms ago: executing program 5 (id=1458): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29c}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1003d1, 0x3, 0x20000000, 0x6, 0x86}, 0x69}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r3) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) socket$unix(0x1, 0x1, 0x0) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, 0x0, 0x42}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)="27030200dc0f14000e00003c0ff000000000ff840000000200000003125ce882cbf490d908f1523f00", 0x29}, {&(0x7f0000002680)="76e69c0141", 0x5}], 0x2}, 0x4005) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r7, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 0s ago: executing program 0 (id=1459): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000100), 0x4) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0x4, @val=@netfilter={0x1, 0x0, 0x7}}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x8810) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000140)=ANY=[@ANYBLOB="020d0000100000002f3144a8edffffff03000600ff18000002004909000100000000000000001e0e080012000200010000d200000000000030006c540203009f7eae02000000adb20200000000f52c000000cdff00000001020014bb000001000000002300001300030005000020000002"], 0x80}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmmsg(r3, &(0x7f00000000c0), 0x2c8, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback, 0x2f, 0x0, 0x0, &(0x7f0000000140)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$nl_generic(r2, 0x0, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0x0, 0xa, 0x148, 0x160, 0x60, 0x1f0, 0x2a8, 0x2a8, 0x1f0, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @rand_addr=0x64010106, 0xff, 0xffffffff, 'gretap0\x00', 'wg2\x00', {}, {0xff}, 0x0, 0x3}, 0x0, 0xf0, 0x160, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x11, 0x0, 0x0, 0xfffffffd, 0x533, 0xffffffff, 0x7, 0x0, 0x8}}}, @inet=@rpfilter={{0x28}, {0x7}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x2, 0x0, 0x1000, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea68dba902bdc2ff8a930811d5ab686316d51d4773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x2e8) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r5, 0x89e4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r6, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0698f00e23c964c6da89ab3ca10000006c71d907000000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000fdffffff00"/28], 0x50) socket$key(0xf, 0x3, 0x2) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x1, 0x65, 0xe, 0x4e, 0x24, 0xc, @private=0xa010100, @multicast2}}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r7, 0x0, 0xd2, &(0x7f0000000200)={@broadcast, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f00000006c0)={0x0, 0x10000000003000, 0x1000, 0x2, 0x1}, 0x20) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='illinois', 0x8) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.33' (ED25519) to the list of known hosts. [ 29.279210][ T4307] cgroup: Unknown subsys name 'net' [ 29.561309][ T4307] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 29.846747][ T4307] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 30.549171][ T4323] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 30.555316][ T4321] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 30.557693][ T4327] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 30.559389][ T4327] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 30.564611][ T4327] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 30.567248][ T4334] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 30.569021][ T4334] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 30.570521][ T4334] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 30.571896][ T4334] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 30.573158][ T4334] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 30.574662][ T4334] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 30.575923][ T4334] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 30.577227][ T4334] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 30.578586][ T4334] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 30.579843][ T4334] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 30.581417][ T4334] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 30.583211][ T4336] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 30.583407][ T4334] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 30.584466][ T4336] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 30.585752][ T4334] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 30.587323][ T4336] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 30.588239][ T4334] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 30.590272][ T4336] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 30.590966][ T4334] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 30.591699][ T4336] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 30.592777][ T4334] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 30.596369][ T47] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 30.600134][ T4337] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 30.601786][ T4335] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 30.619814][ T4335] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 30.725216][ T4319] chnl_net:caif_netlink_parms(): no params data found [ 30.759008][ T4324] chnl_net:caif_netlink_parms(): no params data found [ 30.780771][ T4320] chnl_net:caif_netlink_parms(): no params data found [ 30.799313][ T4319] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.800508][ T4319] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.802058][ T4319] device bridge_slave_0 entered promiscuous mode [ 30.805245][ T4325] chnl_net:caif_netlink_parms(): no params data found [ 30.819858][ T4319] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.821159][ T4319] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.822752][ T4319] device bridge_slave_1 entered promiscuous mode [ 30.840003][ T4320] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.841184][ T4320] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.842826][ T4320] device bridge_slave_0 entered promiscuous mode [ 30.846913][ T4320] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.847987][ T4320] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.849949][ T4320] device bridge_slave_1 entered promiscuous mode [ 30.851411][ T4324] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.852470][ T4324] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.853800][ T4324] device bridge_slave_0 entered promiscuous mode [ 30.857043][ T4319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.860134][ T4319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.865603][ T4324] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.866823][ T4324] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.868486][ T4324] device bridge_slave_1 entered promiscuous mode [ 30.877523][ T4325] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.878724][ T4325] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.880291][ T4325] device bridge_slave_0 entered promiscuous mode [ 30.881950][ T4331] chnl_net:caif_netlink_parms(): no params data found [ 30.884041][ T4325] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.885245][ T4325] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.886810][ T4325] device bridge_slave_1 entered promiscuous mode [ 30.892312][ T4319] team0: Port device team_slave_0 added [ 30.899507][ T4320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.901654][ T4319] team0: Port device team_slave_1 added [ 30.907020][ T4324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.913766][ T4320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.920626][ T4324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.923094][ T4325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.932091][ T4319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.933228][ T4319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.937214][ T4319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.942822][ T4325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.951719][ T4319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.952963][ T4319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.957126][ T4319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.968136][ T4325] team0: Port device team_slave_0 added [ 30.972637][ T4320] team0: Port device team_slave_0 added [ 30.974289][ T4325] team0: Port device team_slave_1 added [ 30.976016][ T4324] team0: Port device team_slave_0 added [ 30.980099][ T4331] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.981239][ T4331] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.982666][ T4331] device bridge_slave_0 entered promiscuous mode [ 30.985310][ T4320] team0: Port device team_slave_1 added [ 30.988783][ T4324] team0: Port device team_slave_1 added [ 30.994781][ T4324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.995837][ T4324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.999880][ T4324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.002514][ T4324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.003686][ T4324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.007886][ T4324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.010166][ T4331] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.011437][ T4331] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.012831][ T4331] device bridge_slave_1 entered promiscuous mode [ 31.018246][ T4325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.019953][ T4325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.023880][ T4325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.036112][ T4331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.039787][ T4320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.040853][ T4320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.044803][ T4320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.080397][ T4319] device hsr_slave_0 entered promiscuous mode [ 31.118896][ T4319] device hsr_slave_1 entered promiscuous mode [ 31.179773][ T4325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.180941][ T4325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.184954][ T4325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.187648][ T4331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.193043][ T4320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.194183][ T4320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.197941][ T4320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.214652][ T4331] team0: Port device team_slave_0 added [ 31.224872][ T4331] team0: Port device team_slave_1 added [ 31.271287][ T4324] device hsr_slave_0 entered promiscuous mode [ 31.318853][ T4324] device hsr_slave_1 entered promiscuous mode [ 31.389048][ T4324] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.390227][ T4324] Cannot create hsr debugfs directory [ 31.429673][ T4325] device hsr_slave_0 entered promiscuous mode [ 31.468898][ T4325] device hsr_slave_1 entered promiscuous mode [ 31.538662][ T4325] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.539932][ T4325] Cannot create hsr debugfs directory [ 31.579792][ T4320] device hsr_slave_0 entered promiscuous mode [ 31.618853][ T4320] device hsr_slave_1 entered promiscuous mode [ 31.658671][ T4320] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.659802][ T4320] Cannot create hsr debugfs directory [ 31.676100][ T4331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.677240][ T4331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.681348][ T4331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.689399][ T4331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.690528][ T4331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.694867][ T4331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.809794][ T4331] device hsr_slave_0 entered promiscuous mode [ 31.859391][ T4331] device hsr_slave_1 entered promiscuous mode [ 31.898792][ T4331] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.899953][ T4331] Cannot create hsr debugfs directory [ 31.954485][ T4319] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 32.010205][ T4319] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 32.054538][ T4324] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 32.089838][ T4324] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 32.129791][ T4319] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 32.170470][ T4319] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 32.210992][ T4324] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 32.249795][ T4324] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 32.332915][ T4325] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 32.380531][ T4320] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 32.421351][ T4325] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 32.469662][ T4320] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.509663][ T4320] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.549720][ T4320] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.591753][ T4325] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 32.630546][ T4325] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 32.659004][ T4327] Bluetooth: hci4: command 0x0409 tx timeout [ 32.659008][ T4335] Bluetooth: hci1: command 0x0409 tx timeout [ 32.659080][ T4335] Bluetooth: hci3: command 0x0409 tx timeout [ 32.659994][ T4327] Bluetooth: hci0: command 0x0409 tx timeout [ 32.661060][ T4335] Bluetooth: hci2: command 0x0409 tx timeout [ 32.702797][ T4331] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 32.735928][ T4331] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 32.799957][ T4331] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 32.843741][ T4331] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 32.893203][ T4319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.909853][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.912094][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.914921][ T4324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.924739][ T4319] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.930006][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.931797][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.933329][ T1611] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.934524][ T1611] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.938306][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.946565][ T238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.948445][ T238] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.951139][ T238] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.952341][ T238] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.953706][ T238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.955190][ T238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.957422][ T4324] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.965068][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.966703][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.972715][ T238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.974719][ T238] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.976441][ T238] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.986781][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.988407][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.990523][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.991956][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.993967][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.995685][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.997169][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.998779][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.000331][ T1611] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.001446][ T1611] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.002867][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.005426][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.020018][ T4325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.027924][ T238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.029717][ T238] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.031195][ T238] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.032437][ T238] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.033833][ T238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.035522][ T238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.037051][ T238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.042839][ T238] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.044751][ T238] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.060247][ T4320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.062634][ T238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.064500][ T238] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.066118][ T238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.067566][ T238] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.073325][ T238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.075003][ T238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.083365][ T4331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.085800][ T4325] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.090551][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.092058][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.094061][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.095637][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.097094][ T1611] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.098169][ T1611] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.102081][ T4320] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.104018][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.110128][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.111677][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.113137][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.117582][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.119357][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.121321][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.122361][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.125219][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.126577][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.140560][ T238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.144436][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.145903][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.147424][ T4367] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.148499][ T4367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.154900][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.156820][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.158482][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.161849][ T4367] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.163075][ T4367] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.164532][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.167446][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.171560][ T4331] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.175228][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.182041][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.184230][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.185980][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.187566][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.189722][ T4367] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.190937][ T4367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.201645][ T4319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.202875][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.204434][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.205935][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.208406][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.210777][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.212642][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.214423][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.216126][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.217649][ T4367] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.218853][ T4367] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.222096][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.223351][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.224628][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.226297][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.227800][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.232853][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.245231][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.246797][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.249005][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.250740][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.252454][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.254017][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.255691][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.257218][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.258883][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.260485][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.261776][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.263284][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.264628][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.265958][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.268442][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.270819][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.277591][ T4324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.284181][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.285959][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.287498][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.289356][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.298523][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.300643][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.306809][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.311734][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.313389][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.328503][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.330689][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.346812][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.348480][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.352100][ T4319] device veth0_vlan entered promiscuous mode [ 33.355579][ T4319] device veth1_vlan entered promiscuous mode [ 33.357502][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.359416][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.360862][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.366264][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.367941][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.370560][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.372020][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.383018][ T4324] device veth0_vlan entered promiscuous mode [ 33.386248][ T4324] device veth1_vlan entered promiscuous mode [ 33.409653][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.411190][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.412655][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.414121][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.415646][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.417717][ T4319] device veth0_macvtap entered promiscuous mode [ 33.424256][ T4319] device veth1_macvtap entered promiscuous mode [ 33.437020][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.442381][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.443972][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.445800][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.449358][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.450541][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.453541][ T4320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.457008][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.458321][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.472029][ T4331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.476225][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.477502][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.483044][ T4325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.486229][ T4324] device veth0_macvtap entered promiscuous mode [ 33.493133][ T4324] device veth1_macvtap entered promiscuous mode [ 33.496458][ T4319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.499827][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.501231][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.502764][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.504312][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.509291][ T4319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.513346][ T4324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.515087][ T4324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.517278][ T4324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.522726][ T4324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.524422][ T4324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.526558][ T4324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.529940][ T238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.531624][ T238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.533088][ T238] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.534590][ T238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.536079][ T238] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.537872][ T238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.542138][ T238] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.543653][ T238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.550171][ T238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.552140][ T238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.555450][ T4319] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.556739][ T4319] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.558072][ T4319] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.560990][ T4319] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.563427][ T4331] device veth0_vlan entered promiscuous mode [ 33.564717][ T238] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.566068][ T238] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.567456][ T238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.569395][ T238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.572506][ T4324] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.573968][ T4324] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.575442][ T4324] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.576865][ T4324] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.595000][ T238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.596510][ T238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.603293][ T4331] device veth1_vlan entered promiscuous mode [ 33.605784][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.607179][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.610978][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.612559][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.613988][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.615481][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.616882][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.620075][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.621472][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.632109][ T4320] device veth0_vlan entered promiscuous mode [ 33.634999][ T4325] device veth0_vlan entered promiscuous mode [ 33.652665][ T4320] device veth1_vlan entered promiscuous mode [ 33.655802][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.657296][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.659469][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.661052][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.664005][ T4325] device veth1_vlan entered promiscuous mode [ 33.666971][ T4331] device veth0_macvtap entered promiscuous mode [ 33.670144][ T4331] device veth1_macvtap entered promiscuous mode [ 33.685545][ T4325] device veth0_macvtap entered promiscuous mode [ 33.688101][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.689743][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.691139][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.692531][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.694459][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.695859][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.697298][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.699845][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.706268][ T4325] device veth1_macvtap entered promiscuous mode [ 33.709070][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.710231][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.719583][ T238] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.720981][ T238] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.724813][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.726477][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.728126][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.730433][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.732603][ T4331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.734113][ T238] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.735374][ T238] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.738573][ T4320] device veth0_macvtap entered promiscuous mode [ 33.743562][ T4320] device veth1_macvtap entered promiscuous mode [ 33.745312][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.746858][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.748335][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.750890][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.752484][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.753928][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.755389][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.766710][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.766821][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.768075][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.770027][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.772774][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.774467][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.776111][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.777593][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.781394][ T4325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.784603][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.786552][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.788217][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.790368][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.792855][ T4331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.796472][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.798192][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.803476][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.804940][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.806496][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.809550][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.811372][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.812908][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.814663][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.816348][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.818117][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.824968][ T4325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.828571][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.830651][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.832358][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.833991][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.835572][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.837307][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.839474][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.841211][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.843578][ T4320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.845528][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.847071][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.851499][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.852987][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.856462][ T238] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.857079][ T4331] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.857722][ T238] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.861944][ T4331] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.863290][ T4331] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.864752][ T4331] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.876472][ T4325] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.877865][ T4325] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.879760][ T4325] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.881184][ T4325] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.883408][ T238] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.893337][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.895128][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.896767][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.898441][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.910561][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.912493][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.948887][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.950614][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.953620][ T4320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.988939][ T238] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.990723][ T238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.030808][ T4320] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.031295][ T4407] loop2: detected capacity change from 0 to 128 [ 34.032181][ T4320] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.032207][ T4320] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.341483][ T4320] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.403188][ T4407] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 34.464913][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.466791][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.472543][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.495560][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.496939][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.520068][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.545433][ T4324] EXT4-fs (loop2): unmounting filesystem. [ 34.565566][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.566749][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.568546][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.579273][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.580568][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.581696][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.581731][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.595249][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.596882][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.598396][ T4418] syz.2.6 uses obsolete (PF_INET,SOCK_PACKET) [ 34.622268][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.623852][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.625178][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.740042][ T4335] Bluetooth: hci2: command 0x041b tx timeout [ 34.749494][ T4336] Bluetooth: hci0: command 0x041b tx timeout [ 34.750527][ T4336] Bluetooth: hci3: command 0x041b tx timeout [ 34.764626][ T4420] netlink: 'syz.0.1': attribute type 10 has an invalid length. [ 34.779084][ T4327] Bluetooth: hci4: command 0x041b tx timeout [ 34.779106][ T4321] Bluetooth: hci1: command 0x041b tx timeout [ 34.817668][ T4427] loop0: detected capacity change from 0 to 512 [ 34.841688][ T4427] EXT4-fs: Ignoring removed mblk_io_submit option [ 34.842769][ T4427] EXT4-fs: inline encryption not supported [ 34.855794][ T4427] EXT4-fs (loop0): Test dummy encryption mode enabled [ 34.856902][ T4427] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 34.869464][ T4427] EXT4-fs (loop0): can't mount with both data=journal and dax [ 35.214840][ T4420] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 35.387639][ T4435] netlink: 'syz.3.4': attribute type 10 has an invalid length. [ 35.396875][ T4435] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 35.847479][ T4451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.850625][ T4451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.904913][ T4453] device dummy0 entered promiscuous mode [ 35.907309][ T4453] device dummy0 left promiscuous mode [ 36.054866][ T4451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.056671][ T4451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.607826][ T4462] loop0: detected capacity change from 0 to 4096 [ 36.615607][ T4464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.617738][ T4464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.678230][ T4325] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 36.679881][ T4325] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 36.854487][ T4327] Bluetooth: hci2: command 0x040f tx timeout [ 36.855669][ T4327] Bluetooth: hci3: command 0x040f tx timeout [ 36.856779][ T4327] Bluetooth: hci4: command 0x040f tx timeout [ 36.893118][ T4327] Bluetooth: hci1: command 0x040f tx timeout [ 36.894385][ T4327] Bluetooth: hci0: command 0x040f tx timeout [ 37.202563][ T4479] device syzkaller0 entered promiscuous mode [ 37.425978][ T4487] netlink: 'syz.1.22': attribute type 10 has an invalid length. [ 37.431872][ T4487] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 38.862002][ T4516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.863491][ T4516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.899195][ T4336] Bluetooth: hci0: command 0x0419 tx timeout [ 38.902481][ T4327] Bluetooth: hci1: command 0x0419 tx timeout [ 38.903731][ T4336] Bluetooth: hci4: command 0x0419 tx timeout [ 38.904739][ T4327] Bluetooth: hci3: command 0x0419 tx timeout [ 38.905768][ T4336] Bluetooth: hci2: command 0x0419 tx timeout [ 39.022477][ T4524] loop0: detected capacity change from 0 to 4096 [ 39.041036][ T4524] EXT4-fs: inline encryption not supported [ 39.071893][ T4524] EXT4-fs (loop0): Test dummy encryption mode enabled [ 39.122541][ T4524] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 39.123870][ T4524] System zones: 0-5 [ 39.132736][ T4524] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 39.166453][ T4325] EXT4-fs (loop0): unmounting filesystem. [ 39.212800][ T4516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.214350][ T4516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.515599][ T4518] loop4: detected capacity change from 0 to 262144 [ 39.516976][ T4518] ======================================================= [ 39.516976][ T4518] WARNING: The mand mount option has been deprecated and [ 39.516976][ T4518] and is ignored by this kernel. Remove the mand [ 39.516976][ T4518] option from the mount to silence this warning. [ 39.516976][ T4518] ======================================================= [ 39.528470][ T4518] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop4 scanned by syz.4.32 (4518) [ 39.536085][ T4518] BTRFS info (device loop4): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 39.537826][ T4518] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 39.539379][ T4518] BTRFS info (device loop4): using free space tree [ 39.562085][ T4533] netlink: 'syz.1.37': attribute type 10 has an invalid length. [ 39.643296][ T4518] BTRFS info (device loop4): enabling ssd optimizations [ 39.667761][ T4320] BTRFS info (device loop4): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 40.763394][ T4596] loop4: detected capacity change from 0 to 4096 [ 40.773566][ T4596] EXT4-fs: inline encryption not supported [ 40.781381][ T4601] netlink: 'syz.3.51': attribute type 10 has an invalid length. [ 40.786694][ T4596] EXT4-fs (loop4): Test dummy encryption mode enabled [ 40.811947][ T4596] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 40.813415][ T4596] System zones: 0-5 [ 40.831866][ T4596] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 40.924283][ T4320] EXT4-fs (loop4): unmounting filesystem. [ 41.025197][ T4613] loop1: detected capacity change from 0 to 128 [ 41.046224][ T4374] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 41.092160][ T4613] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 41.158574][ T4619] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 41.420380][ T4319] EXT4-fs (loop1): unmounting filesystem. [ 41.450487][ T4624] device syzkaller0 entered promiscuous mode [ 41.468756][ T4374] usb 1-1: Using ep0 maxpacket: 32 [ 41.472543][ T4374] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 41.473916][ T4374] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 41.475212][ T4374] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 41.476731][ T4374] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 41.478258][ T4374] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 41.488574][ T4374] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 41.491321][ T4374] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 41.492897][ T4628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.493470][ T4374] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 41.494974][ T4628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.498968][ T4374] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.502939][ T4374] usb 1-1: config 0 descriptor?? [ 41.585842][ T4626] loop2: detected capacity change from 0 to 32768 [ 41.594946][ T4626] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.63 (4626) [ 41.603612][ T4626] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 41.605352][ T4626] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 41.606680][ T4626] BTRFS info (device loop2): using free space tree [ 41.637478][ T4626] BTRFS info (device loop2): enabling ssd optimizations [ 41.662278][ T4324] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 41.715170][ T4374] usb 1-1: USB disconnect, device number 2 [ 41.763379][ T4309] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop2 scanned by udevd (4309) [ 41.896253][ T4661] netlink: 'syz.1.68': attribute type 10 has an invalid length. [ 42.308027][ T4665] loop3: detected capacity change from 0 to 4096 [ 42.312989][ T4671] loop4: detected capacity change from 0 to 128 [ 42.315005][ T4665] EXT4-fs: inline encryption not supported [ 42.320988][ T4671] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 42.355917][ T4665] EXT4-fs (loop3): Test dummy encryption mode enabled [ 42.359214][ T4320] EXT4-fs (loop4): unmounting filesystem. [ 42.374486][ T4665] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 42.375727][ T4665] System zones: 0-5 [ 42.377563][ T4665] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 42.411495][ T4331] EXT4-fs (loop3): unmounting filesystem. [ 42.498782][ T4651] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 42.584370][ T4679] loop1: detected capacity change from 0 to 32768 [ 42.623671][ T4679] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.75 (4679) [ 42.671146][ T4679] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 42.728696][ T4686] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 42.947742][ T4679] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 42.956749][ T4679] BTRFS info (device loop1): using free space tree [ 42.968676][ T4651] usb 1-1: Using ep0 maxpacket: 16 [ 42.971351][ T4651] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 42.972680][ T4651] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 42.973988][ T4651] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 42.975358][ T4651] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 42.976920][ T4651] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 42.981882][ T4651] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 42.983539][ T4651] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 42.985660][ T4651] usb 1-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice= 0.87 [ 42.987173][ T4651] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.992963][ T4651] usb 1-1: config 0 descriptor?? [ 42.995557][ T4651] port100 1-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 43.112680][ T4679] BTRFS info (device loop1): enabling ssd optimizations [ 43.151398][ T4679] overlayfs: missing 'lowerdir' [ 43.197935][ T4651] usb 1-1: USB disconnect, device number 3 [ 43.238118][ T4319] BTRFS info (device loop1): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 43.337176][ T4309] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 10 /dev/loop1 scanned by udevd (4309) [ 43.377836][ T4713] device syzkaller0 entered promiscuous mode [ 43.671077][ T4724] loop1: detected capacity change from 0 to 4096 [ 43.696950][ T4724] EXT4-fs: inline encryption not supported [ 43.718053][ T4724] EXT4-fs (loop1): Test dummy encryption mode enabled [ 43.729615][ T4724] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 43.730945][ T4724] System zones: 0-5 [ 43.740310][ T4724] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 43.747007][ T4729] loop0: detected capacity change from 0 to 128 [ 43.748189][ T4724] fs-verity: sha512 using implementation "sha512-ce" [ 43.777355][ T4729] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 43.798321][ T4319] EXT4-fs (loop1): unmounting filesystem. [ 43.876449][ T4325] EXT4-fs (loop0): unmounting filesystem. [ 43.906599][ T4737] usb usb8: usbfs: process 4737 (syz.3.89) did not claim interface 0 before use [ 43.995107][ T4745] device syzkaller0 entered promiscuous mode [ 44.090490][ T4747] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 44.340359][ T4752] loop4: detected capacity change from 0 to 2048 [ 44.402066][ T4754] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 44.407887][ T4752] NILFS (loop4): unrecognized mount option "ÿÿÿÿÿÿÿÿÿÿÿÿÿÿ18446744073709551615ÿÿÿÿš@­LqE:†‹ á艞Õt}²0ü$‰" [ 44.438855][ T4757] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 44.441907][ T4757] vhci_hcd: invalid port number 96 [ 44.442867][ T4757] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 44.917685][ T4763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.921624][ T4763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.006695][ T4770] loop1: detected capacity change from 0 to 4096 [ 45.018396][ T4770] EXT4-fs: inline encryption not supported [ 45.026385][ T4770] EXT4-fs (loop1): Test dummy encryption mode enabled [ 45.038238][ T4770] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 45.041999][ T4770] System zones: 0-5 [ 45.043344][ T4770] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 45.081965][ T4774] loop3: detected capacity change from 0 to 128 [ 45.102897][ T4319] EXT4-fs (loop1): unmounting filesystem. [ 45.114429][ T4776] netlink: 32 bytes leftover after parsing attributes in process `syz.2.103'. [ 45.117901][ T4774] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 45.179769][ T4331] EXT4-fs (loop3): unmounting filesystem. [ 45.187021][ T4776] netlink: 32 bytes leftover after parsing attributes in process `syz.2.103'. [ 45.333400][ T4776] netlink: 32 bytes leftover after parsing attributes in process `syz.2.103'. [ 45.701210][ T4789] loop2: detected capacity change from 0 to 64 [ 45.947571][ T4800] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 46.158210][ T4799] device syzkaller0 entered promiscuous mode [ 46.284446][ T4809] loop3: detected capacity change from 0 to 4096 [ 46.297355][ T4809] EXT4-fs: inline encryption not supported [ 46.320550][ T4809] EXT4-fs (loop3): Test dummy encryption mode enabled [ 46.338022][ T4809] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 46.339918][ T4809] System zones: 0-5 [ 46.341344][ T4809] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 46.362742][ T4812] loop1: detected capacity change from 0 to 128 [ 46.388842][ T4812] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 46.426847][ T4319] EXT4-fs (loop1): unmounting filesystem. [ 46.466993][ T4331] EXT4-fs (loop3): unmounting filesystem. [ 46.492873][ T4821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.499824][ T4821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.695107][ T4830] loop3: detected capacity change from 0 to 32768 [ 46.718670][ T4561] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 46.771974][ T4830] XFS (loop3): Mounting V5 Filesystem [ 46.810347][ T4830] XFS (loop3): Ending clean mount [ 46.883976][ T4846] device syzkaller0 entered promiscuous mode [ 46.907077][ T4331] XFS (loop3): Unmounting Filesystem [ 46.908824][ T4561] usb 1-1: Using ep0 maxpacket: 8 [ 46.911924][ T4561] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 46.913395][ T4561] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 46.915095][ T4561] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 46.916802][ T4561] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 46.922951][ T4561] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 46.927008][ T4561] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 46.930616][ T4561] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.117802][ T4848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.120593][ T4848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.151677][ T4561] usb 1-1: usb_control_msg returned -32 [ 47.152689][ T4561] usbtmc 1-1:16.0: can't read capabilities [ 47.263548][ T4850] netlink: 'syz.1.129': attribute type 10 has an invalid length. [ 47.270127][ T4852] loop3: detected capacity change from 0 to 128 [ 47.289837][ T4852] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 47.381820][ T4331] EXT4-fs (loop3): unmounting filesystem. [ 47.445739][ T4856] loop4: detected capacity change from 0 to 4096 [ 47.455486][ T4856] EXT4-fs: inline encryption not supported [ 47.465030][ T4856] EXT4-fs (loop4): Test dummy encryption mode enabled [ 47.472263][ T4856] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 47.473662][ T4856] System zones: 0-5 [ 47.477062][ T4856] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 47.506367][ T4320] EXT4-fs (loop4): unmounting filesystem. [ 47.581215][ T4859] loop1: detected capacity change from 0 to 32768 [ 47.655360][ T4877] device syzkaller0 entered promiscuous mode [ 47.748488][ T4883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.752386][ T4883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.754967][ T4885] loop4: detected capacity change from 0 to 128 [ 47.761670][ T4885] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 47.831130][ T4887] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 47.879506][ T4336] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 47.881168][ T4336] Bluetooth: hci0: Injecting HCI hardware error event [ 47.887598][ T4330] Bluetooth: hci0: hardware error 0x00 [ 48.088895][ T4888] usbtmc 1-1:16.0: CHECK_CLEAR_STATUS returned 7 [ 48.091840][ T4320] EXT4-fs (loop4): unmounting filesystem. [ 48.228368][ T4892] netlink: 'syz.4.142': attribute type 10 has an invalid length. [ 48.232843][ T4892] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 48.320824][ T4561] usb 1-1: USB disconnect, device number 4 [ 48.464244][ T4897] EXT4-fs: inline encryption not supported [ 48.466059][ T4897] EXT4-fs (loop4): Test dummy encryption mode enabled [ 48.468479][ T4897] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 48.470505][ T4897] System zones: 0-5 [ 48.472036][ T4897] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 48.495323][ T4320] EXT4-fs (loop4): unmounting filesystem. [ 48.557339][ T4902] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.610769][ T4906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.612534][ T4906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.663382][ T4902] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 49.051000][ T4923] netlink: 36 bytes leftover after parsing attributes in process `syz.2.154'. [ 49.054357][ T4923] netlink: 'syz.2.154': attribute type 4 has an invalid length. [ 49.055588][ T4923] netlink: 152 bytes leftover after parsing attributes in process `syz.2.154'. [ 49.070175][ T4923] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 49.282210][ T4936] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 49.511106][ T4934] netlink: 'syz.0.158': attribute type 10 has an invalid length. [ 49.546157][ T4939] device syzkaller0 entered promiscuous mode [ 49.679968][ T4941] EXT4-fs: inline encryption not supported [ 49.686728][ T4941] EXT4-fs (loop0): Test dummy encryption mode enabled [ 49.692551][ T4941] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 49.697164][ T4941] System zones: 0-5 [ 49.705319][ T4941] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 49.754706][ T4325] EXT4-fs (loop0): unmounting filesystem. [ 50.178814][ T4330] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 60.765626][ T4959] netlink: 36 bytes leftover after parsing attributes in process `syz.2.166'. [ 60.767264][ T4960] netlink: 'syz.2.166': attribute type 4 has an invalid length. [ 60.768547][ T4960] netlink: 152 bytes leftover after parsing attributes in process `syz.2.166'. [ 60.770110][ T4960] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 61.079988][ T5004] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 61.302991][ T4987] netlink: 'syz.2.172': attribute type 10 has an invalid length. [ 61.304659][ T4987] wlan1: mtu less than device minimum [ 61.311151][ T4987] bond0: (slave wlan1): Error -22 calling dev_set_mtu [ 61.429668][ T22] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 61.688818][ T22] usb 1-1: Using ep0 maxpacket: 16 [ 61.692846][ T22] usb 1-1: config 0 has an invalid interface number: 133 but max is 0 [ 61.694396][ T22] usb 1-1: config 0 has no interface number 0 [ 61.695984][ T22] usb 1-1: config 0 interface 133 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 61.701851][ T22] usb 1-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 61.706829][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.714672][ T22] usb 1-1: Product: syz [ 61.718467][ T22] usb 1-1: Manufacturer: syz [ 61.723826][ T22] usb 1-1: SerialNumber: syz [ 61.734746][ T22] usb 1-1: config 0 descriptor?? [ 61.759876][ T5016] set_capacity_and_notify: 2 callbacks suppressed [ 61.759885][ T5016] loop2: detected capacity change from 0 to 256 [ 61.792210][ T5018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.793745][ T5018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.956920][ T22] keyspan 1-1:0.133: Keyspan 1 port adapter converter detected [ 61.958244][ T22] keyspan 1-1:0.133: unsupported endpoint type 0 [ 61.960878][ T22] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 81 [ 61.962163][ T22] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 1 [ 61.963286][ T22] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 2 [ 61.977055][ T22] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 62.128683][ T5025] loop1: detected capacity change from 0 to 64 [ 62.463246][ T22] usb 1-1: USB disconnect, device number 5 [ 62.466939][ T22] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 62.470895][ T22] keyspan 1-1:0.133: device disconnected [ 62.573290][ T5032] device veth1 entered promiscuous mode [ 62.742937][ T5032] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.744900][ T5032] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.110598][ T5055] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 63.349894][ T5052] loop1: detected capacity change from 0 to 512 [ 63.355042][ T5052] EXT4-fs: Mount option(s) incompatible with ext3 [ 63.467029][ T5051] loop0: detected capacity change from 0 to 32768 [ 63.478731][ T5051] XFS (loop0): Mounting V5 Filesystem [ 63.502726][ T5051] XFS (loop0): Ending clean mount [ 63.521672][ T4325] XFS (loop0): Unmounting Filesystem [ 63.617248][ T5032] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.006054][ T5032] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.007560][ T5032] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.009390][ T5032] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.010877][ T5032] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.508072][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.509284][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.531137][ T5053] netlink: 'syz.3.189': attribute type 10 has an invalid length. [ 64.574858][ T5087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.577473][ T5087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.045107][ T5099] loop2: detected capacity change from 0 to 32768 [ 65.082082][ T5099] XFS (loop2): Mounting V5 Filesystem [ 65.156130][ T5113] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 65.362489][ T5099] XFS (loop2): Ending clean mount [ 65.405167][ T4324] XFS (loop2): Unmounting Filesystem [ 65.462032][ T5117] device syzkaller0 entered promiscuous mode [ 65.527500][ T5115] loop3: detected capacity change from 0 to 32768 [ 65.545078][ T5115] XFS (loop3): Mounting V5 Filesystem [ 65.558466][ T5115] XFS (loop3): Ending clean mount [ 65.599639][ T4331] XFS (loop3): Unmounting Filesystem [ 69.621914][ T114] cfg80211: failed to load regulatory.db [ 76.994255][ T5141] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 76.995617][ T5141] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 77.012530][ T5164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.014019][ T5164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.085280][ T5141] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 77.111904][ T5148] tipc: Enabling of bearer rejected, failed to enable media [ 77.468035][ T5177] device syzkaller0 entered promiscuous mode [ 78.339864][ T5189] loop2: detected capacity change from 0 to 2048 [ 78.373101][ T5193] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 78.389004][ T5189] NILFS (loop2): unrecognized mount option "ÿÿÿÿÿÿÿÿÿÿÿÿÿÿ18446744073709551615ÿÿÿÿš@­LqE:†‹ á艞Õt}²0ü$‰" [ 78.825785][ T5203] netlink: 32 bytes leftover after parsing attributes in process `syz.0.229'. [ 78.851017][ T5205] device syzkaller0 entered promiscuous mode [ 78.961614][ T5202] loop4: detected capacity change from 0 to 32768 [ 79.033863][ T5202] XFS (loop4): Mounting V5 Filesystem [ 79.046594][ T5202] XFS (loop4): Ending clean mount [ 79.076841][ T4320] XFS (loop4): Unmounting Filesystem [ 79.361479][ T4327] block nbd3: Receive control failed (result -32) [ 79.363587][ T4330] block nbd3: Receive control failed (result -32) [ 79.363810][ T5194] block nbd3: shutting down sockets [ 81.584610][ T27] audit: type=1326 audit(81.560:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5241 comm="syz.4.238" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb7377128 code=0x0 [ 91.366650][ T5267] netlink: 'syz.1.242': attribute type 10 has an invalid length. [ 91.494549][ T5278] loop0: detected capacity change from 0 to 2048 [ 91.533102][ T5282] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 91.786781][ T5283] loop1: detected capacity change from 0 to 8 [ 91.854198][ T5278] NILFS (loop0): unrecognized mount option "ÿÿÿÿÿÿÿÿÿÿÿÿÿÿ18446744073709551615ÿÿÿÿš@­LqE:†‹ á艞Õt}²0ü$‰" [ 92.515445][ T5301] Zero length message leads to an empty skb [ 94.695668][ T5331] lo speed is unknown, defaulting to 1000 [ 94.696749][ T5331] lo speed is unknown, defaulting to 1000 [ 94.727681][ T5331] lo speed is unknown, defaulting to 1000 [ 94.735216][ T5331] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 94.745389][ T5331] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 94.836050][ T5331] lo speed is unknown, defaulting to 1000 [ 94.839456][ T5331] lo speed is unknown, defaulting to 1000 [ 94.841941][ T5331] lo speed is unknown, defaulting to 1000 [ 94.844290][ T5331] lo speed is unknown, defaulting to 1000 [ 94.846667][ T5331] lo speed is unknown, defaulting to 1000 [ 94.849135][ T5331] lo speed is unknown, defaulting to 1000 [ 95.262584][ T5351] netlink: 8 bytes leftover after parsing attributes in process `syz.0.266'. [ 95.747432][ T5364] device syzkaller0 entered promiscuous mode [ 96.633513][ T5380] siw: device registration error -23 [ 97.031357][ T5390] netlink: 16 bytes leftover after parsing attributes in process `syz.2.279'. [ 97.060390][ T5388] block device autoloading is deprecated and will be removed. [ 98.793343][ T5427] xt_ecn: cannot match TCP bits for non-tcp packets [ 99.478131][ T5431] loop4: detected capacity change from 0 to 32768 [ 99.496036][ T5431] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 99.600419][ T5275] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 99.613940][ T5443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.615776][ T5443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.378316][ T5467] loop2: detected capacity change from 0 to 1024 [ 100.381376][ T5467] EXT4-fs: inline encryption not supported [ 100.382670][ T5467] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 100.463845][ T5471] mmap: syz.0.303 (5471) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 100.477226][ T5471] Unsupported ieee802154 address type: 0 [ 100.679273][ T5467] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 100.694343][ T4324] EXT4-fs (loop2): unmounting filesystem. [ 100.823675][ T5475] loop2: detected capacity change from 0 to 32768 [ 100.830636][ T5475] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 100.871768][ T5275] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 101.563331][ T5489] loop1: detected capacity change from 0 to 4096 [ 101.796929][ T5491] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 103.127171][ T5528] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 103.390730][ T5528] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 103.442492][ T5534] lo speed is unknown, defaulting to 1000 [ 104.753878][ T5562] netlink: 'syz.4.335': attribute type 10 has an invalid length. [ 104.862687][ T5563] device syzkaller0 entered promiscuous mode [ 104.953905][ T5571] loop2: detected capacity change from 0 to 32768 [ 105.034966][ T5571] XFS (loop2): Mounting V5 Filesystem [ 105.054388][ T5571] XFS (loop2): Ending clean mount [ 105.059077][ T5571] XFS (loop2): Quotacheck needed: Please wait. [ 105.063860][ T5575] lo speed is unknown, defaulting to 1000 [ 105.090587][ T5571] XFS (loop2): Quotacheck: Done. [ 105.162833][ T5590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.176811][ T5590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.638064][ T5599] device syzkaller0 entered promiscuous mode [ 105.732483][ T4324] XFS (loop2): Unmounting Filesystem [ 105.922003][ T5608] device syzkaller0 entered promiscuous mode [ 106.007383][ T5615] loop4: detected capacity change from 0 to 8 [ 106.303447][ T5629] device syzkaller0 entered promiscuous mode [ 106.416976][ T5631] lo speed is unknown, defaulting to 1000 [ 106.704403][ T5639] loop3: detected capacity change from 0 to 4096 [ 106.911825][ T5640] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 107.722462][ T5667] device syzkaller0 entered promiscuous mode [ 109.579449][ T5732] loop2: detected capacity change from 0 to 764 [ 109.618041][ T5734] device syzkaller0 entered promiscuous mode [ 110.745996][ T5771] loop1: detected capacity change from 0 to 764 [ 110.835211][ T5777] device syzkaller0 entered promiscuous mode [ 111.662621][ T5805] loop3: detected capacity change from 0 to 4096 [ 111.692730][ T5805] ntfs: volume version 3.1. [ 112.111089][ T5811] loop2: detected capacity change from 0 to 764 [ 112.496021][ T5827] loop4: detected capacity change from 0 to 512 [ 112.505767][ T5827] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e01c, mo2=0022] [ 112.507139][ T5827] System zones: 1-12 [ 112.517964][ T5827] EXT4-fs error (device loop4): dx_probe:823: inode #2: comm syz.4.409: Directory hole found for htree index block 0 [ 112.522432][ T5827] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -117 [ 112.523933][ T5827] EXT4-fs error (device loop4): dx_probe:823: inode #2: comm syz.4.409: Directory hole found for htree index block 0 [ 112.526245][ T5827] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 112.527644][ T5827] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 112.534095][ T5827] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 112.544935][ T4320] EXT4-fs (loop4): unmounting filesystem. [ 112.630641][ T5825] device syzkaller0 entered promiscuous mode [ 112.690133][ T5841] loop2: detected capacity change from 0 to 2048 [ 112.719261][ T5842] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 112.790918][ T5842] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 112.796042][ T5842] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 112.803990][ T5842] Remounting filesystem read-only [ 112.805649][ T4324] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 114.104933][ T5878] loop2: detected capacity change from 0 to 40427 [ 114.112585][ T5878] F2FS-fs (loop2): Invalid segment/section count (31, 24 x 1) [ 114.115108][ T5878] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 114.120469][ T5878] F2FS-fs (loop2): invalid crc value [ 114.121527][ T5878] F2FS-fs (loop2): Ignore s_resuid=0, s_resgid=60928 w/o reserve_root [ 114.128222][ T5878] F2FS-fs (loop2): Found nat_bits in checkpoint [ 114.154794][ T5878] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 114.157045][ T5878] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1 [ 114.163652][ T5878] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 114.164974][ T5878] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 120.287616][ T5917] loop4: detected capacity change from 0 to 1024 [ 121.403801][ T5925] loop4: detected capacity change from 0 to 64 [ 124.158752][ T5937] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 124.160110][ T5937] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 124.161840][ T5937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.163467][ T5937] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.248790][ T5937] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 124.254135][ T5945] loop2: detected capacity change from 0 to 764 [ 124.286229][ T5948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.287770][ T5948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.310435][ T4330] Bluetooth: hci4: adv larger than maximum supported [ 124.310480][ T4330] Bluetooth: hci4: Malformed LE Event: 0x0d [ 124.685756][ T5956] loop4: detected capacity change from 0 to 64 [ 125.019690][ T5962] capability: warning: `syz.3.447' uses 32-bit capabilities (legacy support in use) [ 125.092568][ T5966] netlink: 36 bytes leftover after parsing attributes in process `syz.0.449'. [ 125.094523][ T5966] netlink: 'syz.0.449': attribute type 4 has an invalid length. [ 125.098048][ T5966] netlink: 152 bytes leftover after parsing attributes in process `syz.0.449'. [ 125.103697][ T5966] wlan1: mtu less than device minimum [ 125.172396][ T5972] device syzkaller0 entered promiscuous mode [ 125.949022][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.950378][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.092542][ T5991] loop1: detected capacity change from 0 to 2048 [ 126.113979][ T5992] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 126.136348][ T5992] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 126.138077][ T5992] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4) [ 126.141140][ T5992] Remounting filesystem read-only [ 126.142364][ T4319] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 136.935575][ T5984] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 136.978890][ T5984] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 137.026468][ T6011] netlink: 36 bytes leftover after parsing attributes in process `syz.1.462'. [ 137.201617][ T6052] device syzkaller0 entered promiscuous mode [ 138.127972][ T6064] Cannot find add_set index 0 as target [ 138.629346][ T6071] netlink: 4 bytes leftover after parsing attributes in process `syz.0.474'. [ 138.631501][ T6071] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.780726][ T6071] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.873500][ T6073] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 139.360053][ T6083] device syzkaller0 entered promiscuous mode [ 140.021944][ T6034] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 150.761087][ T6088] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 150.763081][ T6088] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 150.764227][ T6088] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 150.766042][ T6088] device bridge_slave_0 left promiscuous mode [ 150.768081][ T6088] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.809883][ T6088] device bridge_slave_1 left promiscuous mode [ 150.810930][ T6088] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.830690][ T6088] bond0: (slave bond_slave_0): Releasing backup interface [ 150.872442][ T6088] bond0: (slave bond_slave_1): Releasing backup interface [ 150.897318][ T6112] loop4: detected capacity change from 0 to 32768 [ 150.904255][ T6112] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 150.926103][ T6088] team0: Port device team_slave_0 removed [ 150.945092][ T6088] team0: Port device team_slave_1 removed [ 150.946403][ T6088] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.947600][ T6088] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 150.954547][ T6110] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 150.971779][ T6088] bond0: (slave wlan1): Releasing backup interface [ 151.001938][ T6089] bridge0: port 1(team0) entered blocking state [ 151.003090][ T6089] bridge0: port 1(team0) entered disabled state [ 151.005689][ T6089] device team0 entered promiscuous mode [ 151.012270][ T6089] bridge0: port 1(team0) entered blocking state [ 151.012509][ T6118] netlink: 8 bytes leftover after parsing attributes in process `syz.4.493'. [ 151.013552][ T6089] bridge0: port 1(team0) entered forwarding state [ 151.020196][ T6101] lo speed is unknown, defaulting to 1000 [ 151.043291][ T11] bridge0: port 1(team0) entered disabled state [ 151.048511][ T6109] netlink: 4 bytes leftover after parsing attributes in process `syz.1.489'. [ 151.050241][ T6109] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.140844][ T6109] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.533268][ T6126] tipc: Enabling of bearer rejected, failed to enable media [ 151.536489][ T6137] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 151.579922][ T6137] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 151.655616][ T6150] loop1: detected capacity change from 0 to 128 [ 151.688777][ T6150] loop1: detected capacity change from 128 to 0 [ 151.736443][ T6156] netlink: 8 bytes leftover after parsing attributes in process `syz.0.506'. [ 151.875578][ T6163] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 151.887113][ T6163] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 151.892890][ T6163] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 152.069372][ T6171] Soft offlining pfn 0x121f5b at process virtual address 0x20ffb000 [ 152.122826][ T6171] Soft offlining pfn 0x122908 at process virtual address 0x20ffc000 [ 152.128411][ T6173] tipc: Enabling of bearer rejected, failed to enable media [ 152.166666][ T6171] Soft offlining pfn 0x13bf82 at process virtual address 0x20ffd000 [ 152.174381][ T6176] device syzkaller0 entered promiscuous mode [ 152.189552][ T6173] device syzkaller0 entered promiscuous mode [ 152.268318][ T6187] netlink: 8 bytes leftover after parsing attributes in process `syz.3.518'. [ 153.113552][ T6199] netlink: 36 bytes leftover after parsing attributes in process `syz.0.522'. [ 153.618745][ T4330] Bluetooth: hci2: command 0x0406 tx timeout [ 153.619826][ T4327] Bluetooth: hci4: command 0x0406 tx timeout [ 153.619842][ T4336] Bluetooth: hci3: command 0x0406 tx timeout [ 153.620861][ T4330] Bluetooth: hci1: command 0x0406 tx timeout [ 154.910031][ T6212] netlink: 4 bytes leftover after parsing attributes in process `syz.0.525'. [ 156.577493][ T27] audit: type=1326 audit(156.550:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6216 comm="syz.0.527" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96b77128 code=0x7ffc0000 [ 156.581060][ T27] audit: type=1326 audit(156.550:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6216 comm="syz.0.527" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96b77128 code=0x7ffc0000 [ 156.584470][ T27] audit: type=1326 audit(156.550:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6216 comm="syz.0.527" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff96b77128 code=0x7ffc0000 [ 156.587956][ T27] audit: type=1326 audit(156.550:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6216 comm="syz.0.527" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96b77128 code=0x7ffc0000 [ 156.594288][ T27] audit: type=1326 audit(156.550:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6216 comm="syz.0.527" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96b77128 code=0x7ffc0000 [ 156.597750][ T27] audit: type=1326 audit(156.550:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6216 comm="syz.0.527" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffff96b77128 code=0x7ffc0000 [ 156.672817][ T27] audit: type=1326 audit(156.650:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6216 comm="syz.0.527" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96b77128 code=0x7ffc0000 [ 156.678695][ T27] audit: type=1326 audit(156.650:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6216 comm="syz.0.527" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96b77128 code=0x7ffc0000 [ 156.733105][ T6222] netlink: 8 bytes leftover after parsing attributes in process `syz.0.529'. [ 163.522605][ T6203] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 163.529581][ T6203] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 163.551730][ T6224] lo speed is unknown, defaulting to 1000 [ 163.568087][ T6234] netlink: 36 bytes leftover after parsing attributes in process `syz.3.534'. [ 164.035277][ T6247] netlink: 4 bytes leftover after parsing attributes in process `syz.1.536'. [ 164.065878][ T27] audit: type=1326 audit(164.040:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6248 comm="syz.2.538" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90b77128 code=0x7ffc0000 [ 164.070479][ T27] audit: type=1326 audit(164.040:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6248 comm="syz.2.538" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90b77128 code=0x7ffc0000 [ 164.073779][ T27] audit: type=1326 audit(164.040:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6248 comm="syz.2.538" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90b77128 code=0x7ffc0000 [ 164.077202][ T27] audit: type=1326 audit(164.040:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6248 comm="syz.2.538" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff90b77128 code=0x7ffc0000 [ 164.090055][ T27] audit: type=1326 audit(164.040:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6248 comm="syz.2.538" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90b77128 code=0x7ffc0000 [ 164.094228][ T27] audit: type=1326 audit(164.040:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6248 comm="syz.2.538" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90b77128 code=0x7ffc0000 [ 164.097919][ T27] audit: type=1326 audit(164.040:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6248 comm="syz.2.538" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90b77128 code=0x7ffc0000 [ 164.107210][ T27] audit: type=1326 audit(164.040:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6248 comm="syz.2.538" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=200 compat=0 ip=0xffff90b77128 code=0x7ffc0000 [ 164.111305][ T27] audit: type=1326 audit(164.040:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6248 comm="syz.2.538" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90b77128 code=0x7ffc0000 [ 164.114950][ T27] audit: type=1326 audit(164.040:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6248 comm="syz.2.538" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90b77128 code=0x7ffc0000 [ 164.415747][ T6260] device syzkaller0 entered promiscuous mode [ 175.423509][ T6276] tipc: Enabling of bearer rejected, failed to enable media [ 175.430459][ T6272] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 175.431829][ T6272] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 175.433546][ T6272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.468859][ T6272] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 175.486246][ T6291] device syzkaller0 entered promiscuous mode [ 175.570974][ T6300] netlink: 36 bytes leftover after parsing attributes in process `syz.2.553'. [ 175.745561][ T6304] loop4: detected capacity change from 0 to 64 [ 178.720917][ T6353] netlink: 36 bytes leftover after parsing attributes in process `syz.1.570'. [ 180.585967][ T6387] loop1: detected capacity change from 0 to 64 [ 187.380752][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.381850][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 188.905981][ T6349] netlink: 36 bytes leftover after parsing attributes in process `syz.0.568'. [ 188.913027][ T6368] tipc: Enabling of bearer rejected, failed to enable media [ 189.003997][ T6414] netlink: 36 bytes leftover after parsing attributes in process `syz.1.583'. [ 189.962855][ T6435] loop1: detected capacity change from 0 to 64 [ 190.557409][ T6448] netlink: 36 bytes leftover after parsing attributes in process `syz.2.592'. [ 190.978257][ T6456] device syzkaller0 entered promiscuous mode [ 191.371716][ T6473] netlink: 36 bytes leftover after parsing attributes in process `syz.0.598'. [ 193.252089][ T6502] loop2: detected capacity change from 0 to 64 [ 203.005391][ T6464] tipc: Enabling of bearer rejected, failed to enable media [ 203.013866][ T6492] netlink: 36 bytes leftover after parsing attributes in process `syz.0.603'. [ 203.047315][ T6532] netlink: 36 bytes leftover after parsing attributes in process `syz.3.612'. [ 204.192267][ T6560] loop3: detected capacity change from 0 to 64 [ 204.565611][ T6567] netlink: 36 bytes leftover after parsing attributes in process `syz.4.622'. [ 204.673809][ T6571] device syzkaller0 entered promiscuous mode [ 204.894777][ T6580] netlink: 36 bytes leftover after parsing attributes in process `syz.3.627'. [ 216.275037][ T6577] tipc: Enabling of bearer rejected, failed to enable media [ 216.308188][ T6616] lo speed is unknown, defaulting to 1000 [ 216.564047][ T6631] netlink: 36 bytes leftover after parsing attributes in process `syz.1.640'. [ 216.628456][ T6632] loop2: detected capacity change from 0 to 64 [ 217.746423][ T6659] tipc: Enabling of bearer rejected, failed to enable media [ 217.748538][ T6659] device syzkaller0 entered promiscuous mode [ 218.034026][ T6668] device syzkaller0 entered promiscuous mode [ 218.271872][ T6678] netlink: 36 bytes leftover after parsing attributes in process `syz.4.654'. [ 218.921816][ T6688] loop2: detected capacity change from 0 to 64 [ 222.011616][ T6746] netlink: 36 bytes leftover after parsing attributes in process `syz.0.668'. [ 230.486002][ T6743] netlink: 'syz.3.667': attribute type 10 has an invalid length. [ 231.791568][ T6790] netlink: 36 bytes leftover after parsing attributes in process `syz.1.679'. [ 232.306764][ T6795] device syzkaller0 entered promiscuous mode [ 232.445492][ T6805] netlink: 'syz.3.684': attribute type 10 has an invalid length. [ 232.493354][ T6810] device syzkaller0 entered promiscuous mode [ 232.618735][ T6816] loop4: detected capacity change from 0 to 64 [ 233.439867][ T6838] lo speed is unknown, defaulting to 1000 [ 233.632535][ T6845] netlink: 'syz.1.696': attribute type 10 has an invalid length. [ 233.711256][ T6850] device syzkaller0 entered promiscuous mode [ 233.760021][ T6850] tipc: Enabling of bearer rejected, failed to enable media [ 233.940826][ T6857] loop1: detected capacity change from 0 to 64 [ 234.043828][ T6863] loop1: detected capacity change from 0 to 2048 [ 234.050424][ T6864] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 234.074111][ T6864] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 234.075993][ T6864] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4) [ 234.077951][ T6864] Remounting filesystem read-only [ 234.080922][ T4319] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 234.746808][ T6881] netlink: 'syz.2.708': attribute type 10 has an invalid length. [ 234.748386][ T6881] wlan1: mtu less than device minimum [ 234.753839][ T6881] bond0: (slave wlan1): Error -22 calling dev_set_mtu [ 234.755212][ T6879] lo speed is unknown, defaulting to 1000 [ 234.822902][ T6885] tipc: Enabling of bearer rejected, failed to enable media [ 234.902588][ T6891] loop2: detected capacity change from 0 to 64 [ 235.427776][ T6927] netlink: 'syz.0.721': attribute type 10 has an invalid length. [ 235.438288][ T6927] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 235.448973][ T6931] device syzkaller0 entered promiscuous mode [ 235.940602][ T6939] tipc: Enabling of bearer rejected, failed to enable media [ 236.002304][ T6941] lo speed is unknown, defaulting to 1000 [ 236.455352][ T6971] loop4: detected capacity change from 0 to 64 [ 236.501509][ T6967] netlink: 'syz.0.734': attribute type 10 has an invalid length. [ 236.744896][ T6981] tipc: Enabling of bearer rejected, failed to enable media [ 236.819536][ T6992] lo speed is unknown, defaulting to 1000 [ 236.828047][ T6991] loop1: detected capacity change from 0 to 2048 [ 236.855703][ T6996] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 236.898027][ T6996] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 236.900037][ T6996] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4) [ 236.902886][ T6996] Remounting filesystem read-only [ 236.904156][ T4319] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 237.539385][ T7011] netlink: 'syz.3.747': attribute type 10 has an invalid length. [ 237.628944][ T7018] device syzkaller0 entered promiscuous mode [ 237.692034][ T7024] tipc: Enabling of bearer rejected, failed to enable media [ 237.718438][ T7026] loop1: detected capacity change from 0 to 64 [ 238.291660][ T7055] lo speed is unknown, defaulting to 1000 [ 238.429243][ T7058] netlink: 'syz.0.760': attribute type 10 has an invalid length. [ 238.632706][ T7070] device syzkaller0 entered promiscuous mode [ 238.997211][ T7070] tipc: Enabling of bearer rejected, failed to enable media [ 239.264418][ T7097] netlink: 'syz.1.771': attribute type 10 has an invalid length. [ 239.317988][ T7100] lo speed is unknown, defaulting to 1000 [ 239.465602][ T7110] loop2: detected capacity change from 0 to 2048 [ 239.500484][ T7112] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 239.535322][ T7113] loop4: detected capacity change from 0 to 64 [ 239.658625][ T7112] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 239.660460][ T7112] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 239.663231][ T7112] Remounting filesystem read-only [ 239.664420][ T4324] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 240.043288][ T7133] device syzkaller0 entered promiscuous mode [ 240.099488][ T7134] tipc: Enabling of bearer rejected, failed to enable media [ 240.406095][ T7149] netlink: 'syz.4.786': attribute type 10 has an invalid length. [ 240.928098][ T7156] lo speed is unknown, defaulting to 1000 [ 241.211118][ T7175] device syzkaller0 entered promiscuous mode [ 241.358893][ T7185] tipc: Enabling of bearer rejected, failed to enable media [ 241.362961][ T7189] netlink: 'syz.0.797': attribute type 10 has an invalid length. [ 241.481098][ T7197] loop4: detected capacity change from 0 to 64 [ 242.896027][ T7226] device syzkaller0 entered promiscuous mode [ 242.960408][ T7231] netlink: 'syz.4.808': attribute type 10 has an invalid length. [ 242.964034][ T7226] tipc: Enabling of bearer rejected, failed to enable media [ 243.022564][ T7238] lo speed is unknown, defaulting to 1000 [ 243.893080][ T7265] loop4: detected capacity change from 0 to 64 [ 244.114096][ T7271] netlink: 'syz.1.821': attribute type 10 has an invalid length. [ 244.148394][ T7273] device syzkaller0 entered promiscuous mode [ 244.446612][ T7291] lo speed is unknown, defaulting to 1000 [ 245.640682][ T7314] netlink: 'syz.4.834': attribute type 10 has an invalid length. [ 246.016518][ T7322] device syzkaller0 entered promiscuous mode [ 246.791407][ T7334] lo speed is unknown, defaulting to 1000 [ 246.948087][ T7346] device syzkaller0 entered promiscuous mode [ 246.976301][ T7350] netlink: 'syz.4.846': attribute type 10 has an invalid length. [ 247.064210][ T7356] loop3: detected capacity change from 0 to 64 [ 248.929195][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.930809][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.808081][ T7405] lo speed is unknown, defaulting to 1000 [ 258.856043][ T7408] netlink: 'syz.4.859': attribute type 10 has an invalid length. [ 259.096151][ T7426] loop1: detected capacity change from 0 to 64 [ 259.252923][ T7434] device syzkaller0 entered promiscuous mode [ 259.888329][ T7447] device syzkaller0 entered promiscuous mode [ 271.322973][ T7456] netlink: 'syz.1.873': attribute type 10 has an invalid length. [ 271.334916][ T7461] lo speed is unknown, defaulting to 1000 [ 271.591707][ T7500] device syzkaller0 entered promiscuous mode [ 271.713295][ T7507] loop2: detected capacity change from 0 to 64 [ 272.011660][ T4330] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 272.013649][ T4330] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 272.015759][ T4330] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 272.017583][ T4330] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 272.020470][ T4330] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 272.022314][ T4330] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 274.098763][ T4330] Bluetooth: hci0: command 0x0409 tx timeout [ 276.178994][ T4330] Bluetooth: hci0: command 0x041b tx timeout [ 278.263610][ T4330] Bluetooth: hci0: command 0x040f tx timeout [ 280.339372][ T4330] Bluetooth: hci0: command 0x0419 tx timeout [ 282.629286][ T7521] netlink: 52 bytes leftover after parsing attributes in process `syz.2.891'. [ 282.666321][ T7546] lo speed is unknown, defaulting to 1000 [ 282.715243][ T7510] lo speed is unknown, defaulting to 1000 [ 282.803372][ T7510] chnl_net:caif_netlink_parms(): no params data found [ 283.127489][ T7510] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.128888][ T7510] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.130701][ T7510] device bridge_slave_0 entered promiscuous mode [ 283.133052][ T7510] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.134321][ T7510] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.136286][ T7510] device bridge_slave_1 entered promiscuous mode [ 283.144456][ T7510] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 283.147716][ T7510] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 283.158945][ T7510] team0: Port device team_slave_0 added [ 283.161793][ T7510] team0: Port device team_slave_1 added [ 283.178349][ T7510] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 283.179571][ T7510] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.184017][ T7510] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 283.186596][ T7510] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 283.187711][ T7510] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.194782][ T7510] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 283.231678][ T7510] device hsr_slave_0 entered promiscuous mode [ 283.279008][ T7510] device hsr_slave_1 entered promiscuous mode [ 283.328718][ T7510] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 283.331081][ T7510] Cannot create hsr debugfs directory [ 283.664573][ T7510] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 283.889396][ T7510] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 283.948123][ T7583] device syzkaller0 entered promiscuous mode [ 283.954222][ T7510] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 283.990293][ T7510] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 284.031276][ T7587] device syzkaller0 entered promiscuous mode [ 284.033667][ T7582] tipc: Started in network mode [ 284.034595][ T7582] tipc: Node identity ca6416ee9fcf, cluster identity 4711 [ 284.035913][ T7582] tipc: Enabled bearer , priority 0 [ 284.094059][ T4442] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.129020][ T7579] tipc: Resetting bearer [ 284.181727][ T7579] tipc: Disabling bearer [ 284.273045][ T4442] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.297924][ T7606] lo speed is unknown, defaulting to 1000 [ 284.392608][ T4442] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.405419][ T7611] device syzkaller0 entered promiscuous mode [ 287.593994][ T7637] loop3: detected capacity change from 0 to 64 [ 295.709889][ T4442] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.742915][ T7510] 8021q: adding VLAN 0 to HW filter on device bond0 [ 295.746510][ T5254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 295.748075][ T5254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 295.769766][ T7510] 8021q: adding VLAN 0 to HW filter on device team0 [ 295.774301][ T5254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 295.775921][ T5254] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 295.777531][ T5254] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.778785][ T5254] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.822617][ T5254] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 296.068221][ T238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 296.075161][ T238] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 296.175420][ T238] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.176635][ T238] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.184538][ T238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 296.205937][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 296.217037][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 296.219425][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 296.223714][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 296.232989][ T238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 296.234765][ T238] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 296.238410][ T238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 296.244346][ T238] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 296.252465][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 296.261417][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 296.290897][ T7510] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 296.623551][ T7510] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 296.626663][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 296.628040][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 296.946059][ T7716] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 297.091243][ T238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 297.092892][ T238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 297.105872][ T238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 297.107585][ T238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 297.116545][ T7510] device veth0_vlan entered promiscuous mode [ 297.125617][ T238] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 297.130543][ T238] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 297.252895][ T7510] device veth1_vlan entered promiscuous mode [ 297.261224][ T7739] device syzkaller0 entered promiscuous mode [ 297.401052][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 297.402717][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 297.404155][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 297.406045][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 297.408727][ T7510] device veth0_macvtap entered promiscuous mode [ 297.411076][ T7510] device veth1_macvtap entered promiscuous mode [ 297.415401][ T7510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.427174][ T7510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.429965][ T7510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.431474][ T7510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.432970][ T7510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.434444][ T7510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.458141][ T7510] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 297.524381][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 297.526008][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 297.527542][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 297.533136][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 297.536854][ T7510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.538444][ T7510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.542359][ T7510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.544301][ T7510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.553853][ T7510] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 297.556872][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 297.560186][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 297.634354][ T7510] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.635760][ T7510] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.637214][ T7510] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.639572][ T7510] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.733875][ T7766] netlink: 52 bytes leftover after parsing attributes in process `syz.3.934'. [ 298.182131][ T4442] bond0: (slave wlan1): Releasing backup interface [ 298.740149][ T4442] device hsr_slave_0 left promiscuous mode [ 298.768871][ T4442] device hsr_slave_1 left promiscuous mode [ 298.848777][ T4442] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 298.850091][ T4442] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 298.852315][ T4442] device bridge_slave_1 left promiscuous mode [ 298.854535][ T4442] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.889389][ T4442] device bridge_slave_0 left promiscuous mode [ 298.890525][ T4442] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.008943][ T4442] device veth1_macvtap left promiscuous mode [ 299.010083][ T4442] device veth0_macvtap left promiscuous mode [ 299.012031][ T4442] device veth1_vlan left promiscuous mode [ 299.012980][ T4442] device veth0_vlan left promiscuous mode [ 300.387230][ T7750] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 301.242549][ T4442] team0 (unregistering): Port device team_slave_1 removed [ 301.430462][ T4442] team0 (unregistering): Port device team_slave_0 removed [ 301.600648][ T4442] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 301.809957][ T4442] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 303.302889][ T4442] bond0 (unregistering): Released all slaves [ 303.618563][ T4561] lo speed is unknown, defaulting to 1000 [ 303.627455][ T7788] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 303.632326][ T7788] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 303.633752][ T7788] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 303.643183][ T7788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.644953][ T7788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.646586][ T7788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.648275][ T7788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.652981][ T7788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.654746][ T7788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.656250][ T7788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.657815][ T7788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.693845][ T4389] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.695078][ T4389] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.696380][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 303.738224][ T7808] netlink: 24 bytes leftover after parsing attributes in process `syz.3.944'. [ 303.786367][ T1611] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.787737][ T1611] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.789642][ T238] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 303.847915][ T7812] device team0 left promiscuous mode [ 303.918436][ T7812] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 303.947463][ T7812] bridge0: port 1(team0) entered disabled state [ 303.971645][ T7812] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 303.972951][ T7812] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 303.986137][ T7812] bond0: (slave wlan1): Releasing backup interface [ 304.155958][ T7826] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 304.360307][ T7858] netlink: 8 bytes leftover after parsing attributes in process `syz.0.949'. [ 304.928352][ T7876] tipc: Enabled bearer , priority 0 [ 304.942347][ T7876] tipc: Resetting bearer [ 304.969793][ T7875] tipc: Disabling bearer [ 305.242080][ T7902] netlink: 24 bytes leftover after parsing attributes in process `syz.5.960'. [ 305.255455][ T7903] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 305.266682][ T7903] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 305.273083][ T7903] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 305.281155][ T7903] device bridge_slave_0 left promiscuous mode [ 305.285898][ T7903] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.363708][ T7903] device bridge_slave_1 left promiscuous mode [ 305.366209][ T7903] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.411521][ T7903] bond0: (slave bond_slave_0): Releasing backup interface [ 305.604833][ T7903] bond0: (slave bond_slave_1): Releasing backup interface [ 305.667631][ T7903] team0: Port device team_slave_0 removed [ 305.698461][ T7903] team0: Port device team_slave_1 removed [ 305.702512][ T7903] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 305.706049][ T7903] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 305.708092][ T7903] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 305.712753][ T7903] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 305.733279][ T7903] bond0: (slave wlan1): Releasing backup interface [ 307.091680][ T7953] netlink: 24 bytes leftover after parsing attributes in process `syz.5.973'. [ 308.214836][ T7900] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 308.353231][ T7972] device batadv_slave_0 entered promiscuous mode [ 309.310019][ T7983] netlink: 24 bytes leftover after parsing attributes in process `syz.4.984'. [ 309.316307][ T7970] device batadv_slave_0 left promiscuous mode [ 309.357866][ T8010] tipc: Enabling of bearer rejected, failed to enable media [ 310.192806][ T8064] netlink: 312 bytes leftover after parsing attributes in process `syz.5.999'. [ 310.260117][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 310.261671][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 310.280808][ T8070] device syzkaller0 entered promiscuous mode [ 310.338970][ T8071] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1002'. [ 312.406660][ T8016] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 312.952757][ T8138] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1021'. [ 313.179901][ T8162] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1025'. [ 313.375441][ T8176] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1031'. [ 315.288748][ T8215] xt_hashlimit: size too large, truncated to 1048576 [ 315.289906][ T8215] xt_hashlimit: overflow, try lower: 0/0 [ 316.117685][ T8152] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 316.170900][ T8223] device syzkaller0 entered promiscuous mode [ 316.224255][ T8228] tipc: Failed to remove unknown binding: 66,0,0/0:3846150819/3846150820 [ 316.230231][ T8228] tipc: Failed to remove unknown binding: 66,0,0/0:3846150819/3846150820 [ 316.296820][ T8228] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1046'. [ 316.307952][ T8241] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1046'. [ 318.473288][ T8297] device syzkaller0 entered promiscuous mode [ 319.554432][ T8264] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 319.612136][ T8308] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1071'. [ 319.712308][ T8319] device syzkaller0 entered promiscuous mode [ 319.715848][ T8319] 0: reclassify loop, rule prio 0, protocol 800 [ 321.019701][ T8417] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1097'. [ 322.977941][ T8343] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 323.087329][ T8498] device syzkaller0 entered promiscuous mode [ 334.588963][ T8520] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1111'. [ 335.319732][ T8575] device syzkaller0 entered promiscuous mode [ 335.550172][ T8577] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1127'. [ 335.552604][ T8577] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1127'. [ 335.556411][ T8577] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1127'. [ 335.572113][ T8577] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1127'. [ 335.577083][ T8577] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1127'. [ 335.683785][ T8588] IPVS: Scheduler module ip_vs_ not found [ 335.686034][ T8588] IPVS: length: 24 != 51539681304 [ 335.904378][ T8605] device syzkaller0 entered promiscuous mode [ 336.602509][ T8627] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1145'. [ 336.604659][ T8627] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1145'. [ 336.606235][ T8627] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1145'. [ 336.610745][ T8627] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1145'. [ 336.656826][ T8634] device syzkaller0 entered promiscuous mode [ 336.873893][ T8647] device syzkaller0 entered promiscuous mode [ 337.058937][ T4442] wlan1: Trigger new scan to find an IBSS to join [ 337.233033][ T8667] device syzkaller0 entered promiscuous mode [ 337.704587][ T8685] device syzkaller0 entered promiscuous mode [ 339.334395][ T8756] device syzkaller0 entered promiscuous mode [ 339.876602][ T8775] vcan0: tx address claim with different name [ 340.059425][ T8791] Bluetooth: MGMT ver 1.22 [ 340.151738][ T4367] wlan1: Trigger new scan to find an IBSS to join [ 341.110828][ T8834] block nbd0: not configured, cannot reconfigure [ 341.765776][ T8854] IPVS: rr: FWM 3 0x00000003 - no destination available [ 342.098691][ T4330] Bluetooth: hci2: command 0x0401 tx timeout [ 342.099820][ T4321] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 342.566999][ T8870] __nla_validate_parse: 15 callbacks suppressed [ 342.567012][ T8870] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1234'. [ 342.874182][ T8889] netlink: 'syz.2.1241': attribute type 39 has an invalid length. [ 343.085049][ T8907] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1247'. [ 343.157930][ T8913] device syzkaller0 entered promiscuous mode [ 343.580822][ T8924] IPVS: set_ctl: invalid protocol: 51 172.20.20.170:20001 [ 343.582406][ T8924] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1254'. [ 343.612647][ T8924] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1254'. [ 343.614382][ T8924] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1254'. [ 343.710600][ T8933] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1258'. [ 343.958408][ T8955] device syzkaller0 entered promiscuous mode [ 343.965681][ T8955] tc action pedit offset must be on 32 bit boundaries [ 344.098825][ T4367] wlan1: Trigger new scan to find an IBSS to join [ 344.329705][ T8971] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1272'. [ 345.116910][ T5254] wlan1: Creating new IBSS network, BSSID 52:32:32:d6:a3:d7 [ 345.318940][ T9032] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1288'. [ 345.471315][ T9048] device syzkaller0 entered promiscuous mode [ 346.742431][ T9070] xt_hashlimit: size too large, truncated to 1048576 [ 346.743489][ T9070] xt_hashlimit: overflow, try lower: 0/0 [ 356.805596][ T9083] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1304'. [ 357.046892][ T9113] device syzkaller0 entered promiscuous mode [ 357.283765][ T9130] device syzkaller0 entered promiscuous mode [ 357.494036][ T9138] xt_hashlimit: size too large, truncated to 1048576 [ 357.495486][ T9138] xt_hashlimit: overflow, try lower: 0/0 [ 357.902137][ T9151] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1323'. [ 368.416265][ T9140] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1322'. [ 368.456917][ T9164] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1329'. [ 368.746501][ T9181] tipc: Started in network mode [ 368.747531][ T9181] tipc: Node identity ac14142f, cluster identity 4711 [ 368.749765][ T9181] tipc: New replicast peer: 0.0.0.0 [ 368.753917][ T9181] tipc: Enabled bearer , priority 10 [ 369.427824][ T9198] device syzkaller0 entered promiscuous mode [ 369.432622][ T9192] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1339'. [ 369.455445][ T9200] device syzkaller0 entered promiscuous mode [ 371.699047][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 371.700050][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 375.109977][ T9] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 380.709315][ T9225] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 380.748139][ T9212] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1343'. [ 380.751120][ T9212] device ip6gre1 entered promiscuous mode [ 380.752716][ T4326] tipc: Node number set to 2886997039 [ 380.913762][ T9237] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1353'. [ 380.991985][ T9246] device syzkaller0 entered promiscuous mode [ 381.197395][ T9251] IPVS: set_ctl: invalid protocol: 51 172.20.20.170:20001 [ 381.201654][ T9251] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1358'. [ 392.047404][ T9250] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1368'. [ 392.049284][ T9251] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1358'. [ 392.050735][ T9251] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1358'. [ 392.106566][ T9268] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 392.186832][ T9275] device syzkaller0 entered promiscuous mode [ 392.273969][ T9289] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1372'. [ 392.343644][ T9293] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1374'. [ 392.374693][ T9296] device syzkaller0 entered promiscuous mode [ 403.528786][ T9347] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1388'. [ 403.682318][ T9372] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 403.803373][ T9375] device syzkaller0 entered promiscuous mode [ 404.336153][ T9383] Bluetooth: MGMT ver 1.22 [ 415.392828][ T9394] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1405'. [ 415.518986][ T9424] x_tables: ip6_tables: udplite match: only valid for protocol 136 [ 415.567906][ T9433] device syzkaller0 entered promiscuous mode [ 426.750523][ T9441] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1421'. [ 427.035036][ T9506] ax25_connect(): syz.3.1438 uses autobind, please contact jreuter@yaina.de [ 427.267156][ T9525] tipc: Enabling of bearer rejected, failed to enable media [ 427.276463][ T9526] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1443'. [ 427.278576][ T9526] device syzkaller0 entered promiscuous mode [ 427.720997][ T9558] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1454'. [ 427.757687][ T9561] tipc: Enabling of bearer rejected, failed to enable media [ 427.862914][ T9506] ------------[ cut here ]------------ [ 427.863942][ T9506] refcount_t: decrement hit 0; leaking memory. [ 427.865284][ T9506] WARNING: CPU: 0 PID: 9506 at lib/refcount.c:31 refcount_warn_saturate+0x194/0x1f8 [ 427.866810][ T9506] Modules linked in: [ 427.867464][ T9506] CPU: 0 PID: 9506 Comm: syz.3.1438 Not tainted syzkaller #0 [ 427.868762][ T9506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 427.870373][ T9506] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 427.871672][ T9506] pc : refcount_warn_saturate+0x194/0x1f8 [ 427.872612][ T9506] lr : refcount_warn_saturate+0x194/0x1f8 [ 427.873563][ T9506] sp : ffff8000208a7700 [ 427.874249][ T9506] x29: ffff8000208a7700 x28: 1fffe0001bba8805 x27: dfff800000000000 [ 427.875533][ T9506] x26: dfff800000000000 x25: ffff700004114ee8 x24: ffff0000d2b47000 [ 427.876807][ T9506] x23: ffff0000d2b47010 x22: ffff8000208a7740 x21: 0000000000000000 [ 427.878099][ T9506] x20: ffff0000dcb625fc x19: ffff800017bda000 x18: ffff800011b8bf60 [ 427.879343][ T9506] x17: 1fffe00033ea877e x16: ffff8000082d91a4 x15: 0000000040000000 [ 427.880597][ T9506] x14: 0000000000000001 x13: 1fffe00033eaae30 x12: 0000000000ff0100 [ 427.881888][ T9506] x11: ff0080000a8db964 x10: 0000000000000003 x9 : 59a2ca32eac09100 [ 427.883188][ T9506] x8 : 59a2ca32eac09100 x7 : ffff80000825796c x6 : 0000000000000000 [ 427.884438][ T9506] x5 : 0000000000000080 x4 : 0000000000000001 x3 : 0000000000000000 [ 427.885826][ T9506] x2 : 0000000000000006 x1 : ffff800011b8da80 x0 : ffff80018a3de000 [ 427.887148][ T9506] Call trace: [ 427.887703][ T9506] refcount_warn_saturate+0x194/0x1f8 [ 427.888598][ T9506] ref_tracker_free+0x560/0x6b4 [ 427.889423][ T9506] ax25_release+0x2c8/0x87c [ 427.890195][ T9506] sock_close+0xb4/0x1f8 [ 427.890879][ T9506] __fput+0x1bc/0x7b8 [ 427.891572][ T9506] ____fput+0x20/0x30 [ 427.892276][ T9506] task_work_run+0x1ec/0x278 [ 427.893033][ T9506] get_signal+0x111c/0x1304 [ 427.893748][ T9506] do_notify_resume+0x33c/0x2aa4 [ 427.894598][ T9506] el0_svc+0x98/0x128 [ 427.895307][ T9506] el0t_64_sync_handler+0x84/0xf0 [ 427.896095][ T9506] el0t_64_sync+0x18c/0x190 [ 427.896868][ T9506] irq event stamp: 496 [ 427.897545][ T9506] hardirqs last enabled at (495): [] finish_lock_switch+0xb0/0x1c4 [ 427.899156][ T9506] hardirqs last disabled at (496): [] el1_dbg+0x24/0x80 [ 427.900536][ T9506] softirqs last enabled at (448): [] ax25_cb_del+0x14c/0x194 [ 427.902020][ T9506] softirqs last disabled at (446): [] ax25_cb_del+0x30/0x194 [ 427.903448][ T9506] ---[ end trace 0000000000000000 ]--- [ 427.951513][ T9574] device syzkaller0 entered promiscuous mode [ 427.953898][ T9573] xt_hashlimit: size too large, truncated to 1048576 [ 427.955174][ T9573] xt_hashlimit: overflow, try lower: 0/0 [ 430.178626][ C0] ================================================================== [ 430.180048][ C0] BUG: KASAN: use-after-free in ax25_heartbeat_expiry+0x10c/0x128 [ 430.181342][ C0] Read of size 4 at addr ffff0000d2b47060 by task swapper/0/0 [ 430.182640][ C0] [ 430.183011][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G W syzkaller #0 [ 430.184347][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 430.186010][ C0] Call trace: [ 430.186541][ C0] dump_backtrace+0x1c0/0x1ec [ 430.187317][ C0] show_stack+0x2c/0x3c [ 430.187983][ C0] __dump_stack+0x30/0x40 [ 430.188703][ C0] dump_stack_lvl+0xf4/0x15c [ 430.189491][ C0] print_address_description+0x88/0x218 [ 430.190427][ C0] print_report+0x50/0x68 [ 430.191099][ C0] kasan_report+0xa8/0xfc [ 430.191804][ C0] __asan_report_load4_noabort+0x2c/0x38 [ 430.192689][ C0] ax25_heartbeat_expiry+0x10c/0x128 [ 430.193562][ C0] call_timer_fn+0x1b8/0x95c [ 430.194303][ C0] __run_timers+0x478/0x6f0 [ 430.195030][ C0] run_timer_softirq+0x7c/0x114 [ 430.195872][ C0] handle_softirqs+0x318/0xc60 [ 430.196671][ C0] __do_softirq+0x14/0x20 [ 430.197370][ C0] ____do_softirq+0x14/0x20 [ 430.198080][ C0] call_on_irq_stack+0x30/0x48 [ 430.198827][ C0] do_softirq_own_stack+0x20/0x2c [ 430.199627][ C0] __irq_exit_rcu+0x23c/0x438 [ 430.200346][ C0] irq_exit_rcu+0x14/0x84 [ 430.201039][ C0] el1_interrupt+0x38/0x54 [ 430.201740][ C0] el1h_64_irq_handler+0x18/0x24 [ 430.202530][ C0] el1h_64_irq+0x64/0x68 [ 430.203222][ C0] arch_local_irq_enable+0xc/0x18 [ 430.204067][ C0] default_idle_call+0x68/0xd8 [ 430.204818][ C0] do_idle+0x1d8/0x4c8 [ 430.205500][ C0] cpu_startup_entry+0x5c/0x74 [ 430.206235][ C0] rest_init+0x2d4/0x2f0 [ 430.206881][ C0] start_kernel+0x0/0x538 [ 430.207499][ C0] start_kernel+0x48c/0x538 [ 430.208197][ C0] __primary_switched+0xb8/0xc0 [ 430.208907][ C0] [ 430.209283][ C0] Allocated by task 7826: [ 430.209933][ C0] kasan_set_track+0x4c/0x80 [ 430.210598][ C0] kasan_save_alloc_info+0x24/0x30 [ 430.211367][ C0] __kasan_kmalloc+0xa0/0xb8 [ 430.212115][ C0] kmalloc_trace+0x7c/0x94 [ 430.212942][ C0] ax25_dev_device_up+0x5c/0x520 [ 430.213800][ C0] ax25_device_event+0x128/0x650 [ 430.214608][ C0] raw_notifier_call_chain+0xd4/0x164 [ 430.215492][ C0] __dev_notify_flags+0x250/0x480 [ 430.216262][ C0] dev_change_flags+0xc8/0x154 [ 430.217013][ C0] dev_ifsioc+0x138/0xc04 [ 430.217687][ C0] dev_ioctl+0x4b0/0xc74 [ 430.218343][ C0] sock_do_ioctl+0x198/0x258 [ 430.219154][ C0] sock_ioctl+0x238/0x824 [ 430.219912][ C0] __arm64_sys_ioctl+0x14c/0x1c8 [ 430.220730][ C0] invoke_syscall+0x98/0x2b4 [ 430.221471][ C0] el0_svc_common+0x138/0x258 [ 430.222224][ C0] do_el0_svc+0x58/0x130 [ 430.222896][ C0] el0_svc+0x58/0x128 [ 430.223519][ C0] el0t_64_sync_handler+0x84/0xf0 [ 430.224305][ C0] el0t_64_sync+0x18c/0x190 [ 430.225001][ C0] [ 430.225387][ C0] Freed by task 4368: [ 430.226030][ C0] kasan_set_track+0x4c/0x80 [ 430.226707][ C0] kasan_save_free_info+0x38/0x5c [ 430.227486][ C0] ____kasan_slab_free+0x148/0x1b0 [ 430.228306][ C0] __kasan_slab_free+0x18/0x28 [ 430.229065][ C0] slab_free_freelist_hook+0x16c/0x1e8 [ 430.229946][ C0] kmem_cache_free_bulk+0x33c/0x3d0 [ 430.230778][ C0] kfree_rcu_work+0x288/0x6bc [ 430.231504][ C0] process_one_work+0x7f8/0x13a4 [ 430.232278][ C0] worker_thread+0x8c4/0xfec [ 430.232993][ C0] kthread+0x250/0x2d8 [ 430.233635][ C0] ret_from_fork+0x10/0x20 [ 430.234307][ C0] [ 430.234634][ C0] Last potentially related work creation: [ 430.235440][ C0] kasan_save_stack+0x40/0x70 [ 430.236136][ C0] __kasan_record_aux_stack+0xc0/0xdc [ 430.236880][ C0] kasan_record_aux_stack_noalloc+0x14/0x20 [ 430.237741][ C0] kvfree_call_rcu+0xb4/0x6e8 [ 430.238555][ C0] ax25_release+0x350/0x87c [ 430.239287][ C0] sock_close+0xb4/0x1f8 [ 430.240010][ C0] __fput+0x1bc/0x7b8 [ 430.240609][ C0] ____fput+0x20/0x30 [ 430.241257][ C0] task_work_run+0x1ec/0x278 [ 430.241994][ C0] get_signal+0x111c/0x1304 [ 430.242719][ C0] do_notify_resume+0x33c/0x2aa4 [ 430.243492][ C0] el0_svc+0x98/0x128 [ 430.244111][ C0] el0t_64_sync_handler+0x84/0xf0 [ 430.244899][ C0] el0t_64_sync+0x18c/0x190 [ 430.245640][ C0] [ 430.246011][ C0] Second to last potentially related work creation: [ 430.247047][ C0] kasan_save_stack+0x40/0x70 [ 430.247729][ C0] __kasan_record_aux_stack+0xc0/0xdc [ 430.248543][ C0] kasan_record_aux_stack_noalloc+0x14/0x20 [ 430.249474][ C0] insert_work+0x64/0x37c [ 430.250136][ C0] __queue_work+0xcbc/0x1234 [ 430.250781][ C0] queue_work_on+0xc0/0x164 [ 430.251482][ C0] call_usermodehelper_exec+0x240/0x4a0 [ 430.252446][ C0] __request_module+0x46c/0xae0 [ 430.253235][ C0] dev_load+0x1d8/0x1ec [ 430.253936][ C0] dev_ioctl+0x368/0xc74 [ 430.254623][ C0] sock_do_ioctl+0x198/0x258 [ 430.255357][ C0] sock_ioctl+0x238/0x824 [ 430.256046][ C0] __arm64_sys_ioctl+0x14c/0x1c8 [ 430.256860][ C0] invoke_syscall+0x98/0x2b4 [ 430.257633][ C0] el0_svc_common+0x138/0x258 [ 430.258380][ C0] do_el0_svc+0x58/0x130 [ 430.259055][ C0] el0_svc+0x58/0x128 [ 430.259665][ C0] el0t_64_sync_handler+0x84/0xf0 [ 430.260480][ C0] el0t_64_sync+0x18c/0x190 [ 430.261222][ C0] [ 430.261619][ C0] The buggy address belongs to the object at ffff0000d2b47000 [ 430.261619][ C0] which belongs to the cache kmalloc-256 of size 256 [ 430.263966][ C0] The buggy address is located 96 bytes inside of [ 430.263966][ C0] 256-byte region [ffff0000d2b47000, ffff0000d2b47100) [ 430.266233][ C0] [ 430.266596][ C0] The buggy address belongs to the physical page: [ 430.267624][ C0] page:0000000013dddb77 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff0000d2b46400 pfn:0x112b46 [ 430.269413][ C0] head:0000000013dddb77 order:1 compound_mapcount:0 compound_pincount:0 [ 430.270715][ C0] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 430.272007][ C0] raw: 05ffc00000010200 fffffc00034f6288 fffffc0003358008 ffff0000c0002480 [ 430.273352][ C0] raw: ffff0000d2b46400 000000000010000e 00000001ffffffff 0000000000000000 [ 430.274694][ C0] page dumped because: kasan: bad access detected [ 430.275688][ C0] [ 430.276048][ C0] Memory state around the buggy address: [ 430.276980][ C0] ffff0000d2b46f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 430.278255][ C0] ffff0000d2b46f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 430.279528][ C0] >ffff0000d2b47000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 430.280766][ C0] ^ [ 430.281916][ C0] ffff0000d2b47080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 430.283169][ C0] ffff0000d2b47100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 430.284413][ C0] ================================================================== [ 430.285709][ C0] Disabling lock debugging due to kernel taint [ 433.139059][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 433.140223][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 437.471534][ T4389] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)