last executing test programs: 5.713807762s ago: executing program 3 (id=312): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x0, 0x84d, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x2, 0xb}, 0x5, 0x34, 0x91f}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_RATE64={0xc, 0x4, 0xdd31e353c9fd1eb}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) close(r4) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0x9, 0xb}, {0xffe0, 0xa}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x5, 0x4, 0x0, 0x8}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4.904877524s ago: executing program 0 (id=313): socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f00000001c0)=0x7, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) write$tun(r1, &(0x7f0000002780)=ANY=[@ANYBLOB="1c0008200203000014"], 0xfb5) 4.898785633s ago: executing program 2 (id=314): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_batadv\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xc6da5938055fa6fd, 0x21}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_MTU={0x8, 0x4, 0xf3cd}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x2000c000) 4.710749071s ago: executing program 2 (id=317): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc010) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x12, 0x0, 0x0) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r5, 0x890b, &(0x7f00000007c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x0, @bcast, @rose={'rose', 0x0}, 0x2, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r6, 0x890b, 0x0) ioctl$sock_rose_SIOCDELRT(r6, 0x890c, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @null, @bpq0, 0x1, [@bcast, @default, @default, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xa, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004080}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$unix(0x1, 0x1, 0x0) 4.628238937s ago: executing program 0 (id=318): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7102}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000008c0)=@newtfilter={0x50, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x3, 0x9}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xff}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0xe6a7, 0x300}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010) 4.551362954s ago: executing program 4 (id=319): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x17}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffff7}}]}, &(0x7f0000000400)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000001f00)="de4dc043102f0e202515a02eac23", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 4.489402644s ago: executing program 3 (id=320): connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r1}, 0x38) 4.471175521s ago: executing program 2 (id=321): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x800) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0xe0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xfff3, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x20842}]}}]}, 0x3c}}, 0x4044080) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000002b80)=0x10000, 0x4) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)={0x20, 0xa, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) getsockname$packet(r5, 0x0, &(0x7f0000000180)) sendmmsg$inet(r1, 0x0, 0x0, 0x20040010) bind$packet(r0, &(0x7f0000000040)={0x11, 0x18, r3, 0x1, 0x5, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 4.461770999s ago: executing program 1 (id=322): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b400000095"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f00000007c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x6, @bcast, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @bcast, @null]}) ioctl$sock_rose_SIOCDELRT(r4, 0x890c, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @null, @bpq0, 0x1, [@bcast, @default, @default, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}) 4.413990901s ago: executing program 4 (id=323): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xaf) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r6) sendmsg$unix(r4, &(0x7f00000017c0)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f00000000c0)="95", 0x1}], 0x1, &(0x7f0000001700)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r6}}}], 0x20, 0x48000}, 0x200c050) r7 = socket$nl_route(0x10, 0x3, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x100, 0x2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r7, r8, 0x0) r9 = geteuid() getresgid(&(0x7f0000000d00), &(0x7f0000000d40), 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$unix(r1, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000300)="2b40e0eb84623894e574384517c3d1cb0a9312", 0x13}, {0x0}], 0x2, &(0x7f0000000dc0)=[@cred={{0x1c, 0x1, 0x2, {r0, 0x0, r6}}}, @rights={{0x1c, 0x1, 0x1, [r1, 0xffffffffffffffff, r1]}}, @cred={{0x1c, 0x1, 0x2, {r0, r8}}}, @cred={{0x1c, 0x1, 0x2, {r0, r9}}}], 0x80, 0x800}}, {{&(0x7f0000000ec0)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4000}}], 0x2, 0x4000041) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) 4.193735253s ago: executing program 1 (id=324): ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xb) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4b2dfe21750f744b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) socket$igmp(0x2, 0x3, 0x2) r3 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) close_range(r3, r3, 0x0) syz_open_dev$usbmon(0x0, 0x9e7, 0x2040) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) unshare(0x22020400) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 4.148075866s ago: executing program 0 (id=325): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f00000008c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0x18}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20}, 0x94) 3.934063659s ago: executing program 3 (id=326): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = socket(0x200000000000011, 0x2, 0x1) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa424e1aa2e0d4080045"], 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.256496194s ago: executing program 4 (id=327): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}], 0x1c) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000100)={r2, 0x6}, 0x8) 3.188400102s ago: executing program 0 (id=328): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x26f}], 0x1}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r1 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25", 0x8}], 0x1}, 0x0) 3.134023963s ago: executing program 2 (id=329): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r6, 0x0, 0x0, 0x296ad8a36be72053, &(0x7f0000000000)={0x11, 0x4, r3, 0x1, 0xd8, 0x6, @local}, 0x14) 2.64640482s ago: executing program 3 (id=330): r0 = socket(0x25, 0x1, 0x1) sendto$inet(r0, 0x0, 0x0, 0x4001001, 0x0, 0x0) 2.480622882s ago: executing program 1 (id=331): r0 = socket$vsock_stream(0x28, 0x1, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x11e) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000050) r4 = syz_io_uring_setup(0x126e, &(0x7f0000000480)={0x0, 0x72d9, 0x80, 0x0, 0x100000}, &(0x7f0000000500), &(0x7f0000000780)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r4, 0x2, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x6, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x0, 0x12, 0x60d, 0x1d8, 0x202, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private1, @ipv4={'\x00', '\xff\xff', @empty}, [0x0, 0xff], [], 'ip_vti0\x00', 'macsec0\x00', {0xff}}, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "000000165a8c2e0617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f672225d6147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac05a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x74, 0x2}}, @common=@icmp6={{0x28}, {0xd, "ea9c", 0x1}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0x0, 0xffffff00, 0xff000000], [0xff, 0xff000000, 0x0, 0xff], 'ipvlan1\x00', 'erspan0\x00', {}, {0xff}, 0x2b, 0x5, 0x6, 0x33}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x5, 0x8001, 0xf53, 'syz0\x00', 'syz1\x00', {0xffffffffffffff7f}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) sched_rr_get_interval(r1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) setxattr$incfs_size(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8) getsockopt(r0, 0x28, 0x0, &(0x7f00000012c0)=""/4096, 0x0) 2.341804338s ago: executing program 0 (id=332): socket$kcm(0x10, 0x2, 0x10) r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x7, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x3, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x3, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x5, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x800, 0xce7c, 0x1, 0x0, 0x7, 0x196, 0x2, 0x6, 0x4, 0xc, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0x2, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0x8, 0x8001, 0x4, 0x6, 0x4, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0xfffffff5, 0x7, 0x5, 0x65e1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0xffff6f3c, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x4, 0x9da, 0x4, 0x6, 0xea6, 0x3, 0x5, 0x10, 0x3, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0x6, 0x9, 0x5, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x1, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x2, 0x2, 0x0, 0xb, 0xfffffff7, 0x8, 0x101, 0xc57, 0x5, 0x2, 0x5, 0x8, 0xfffffffc, 0xf, 0x1982, 0x1, 0x80000000, 0x7, 0x9, 0x6, 0x8000, 0x2, 0x1, 0x2, 0x2, 0x5, 0x5, 0xffffff1c, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x43d, 0x1b8f, 0x14, 0x65, 0xc00, 0x9, 0x9, 0x3, 0x8, 0x10001, 0x295, 0x6, 0xcb1, 0x1, 0xb7e, 0x10001, 0x2, 0x7, 0x6, 0x1, 0x2, 0x3ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d4, 0x3ff, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x7ff, 0x7fffffff, 0x80, 0x2, 0x90, 0x2, 0x6, 0x3, 0x70, 0x7f, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xfffffffe, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xfff, 0x421, 0x3ff, 0x2, 0xd, 0xfb6, 0x5, 0xfffffffd, 0xac, 0x7fff, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.318077034s ago: executing program 4 (id=333): setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000180)={0xfffffffe, {{0xa, 0x0, 0xfffffffd, @mcast1, 0x24}}, 0x1}, 0x90) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8810}, 0x8000) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x58, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x9, 0x4}, {}, {0x7, 0x6}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xceb, 0x7, 0x4}, {{0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x1}}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x5dc}], 0x1}, 0x4) 2.146931515s ago: executing program 3 (id=334): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) clock_adjtime(0x0, &(0x7f0000000340)={0xffff, 0x0, 0x0, 0x0, 0x6733, 0x401, 0x0, 0x0, 0xab5, 0x0, 0x3b9ac9ff, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfef, 0x0, 0x0, 0x1, 0xe52, 0x6}) r3 = socket(0x28, 0x5, 0x0) listen(r3, 0x0) r4 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) write$binfmt_elf64(r4, &(0x7f0000000240)=ANY=[], 0x40000) r5 = accept4$unix(r3, 0x0, 0x0, 0x80000) recvfrom$unix(r5, &(0x7f0000000140)=""/243, 0x40000, 0x40000000, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000"], 0x48) connect$unix(0xffffffffffffffff, 0x0, 0x0) 1.723610973s ago: executing program 2 (id=335): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x2, 0x5, 0x80000001, 0x1, 0xfffffff1, 0xcd2, 0x1}}, {0x6, 0x2, [0x7]}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000780)=@xdp={0x2c, 0x0, r7, 0x3a}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="270302", 0x3}], 0x1}, 0x24004855) 1.300362211s ago: executing program 1 (id=336): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004260000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1e, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0xffffffffffffffc7, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NHA_FDB={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r4, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000047400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080007002609090914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) 1.113241179s ago: executing program 4 (id=337): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xaf) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r6) sendmsg$unix(r4, &(0x7f00000017c0)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f00000000c0)="95", 0x1}], 0x1, &(0x7f0000001700)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r6}}}], 0x20, 0x48000}, 0x200c050) r7 = socket$nl_route(0x10, 0x3, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x100, 0x2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r7, r8, 0x0) r9 = geteuid() getresgid(&(0x7f0000000d00), &(0x7f0000000d40), 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$unix(r1, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000300)="2b40e0eb84623894e574384517c3d1cb0a9312", 0x13}, {0x0}], 0x2, &(0x7f0000000dc0)=[@cred={{0x1c, 0x1, 0x2, {r0, 0x0, r6}}}, @rights={{0x1c, 0x1, 0x1, [r1, 0xffffffffffffffff, r1]}}, @cred={{0x1c, 0x1, 0x2, {r0, r8}}}, @cred={{0x1c, 0x1, 0x2, {r0, r9}}}], 0x80, 0x800}}, {{&(0x7f0000000ec0)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4000}}], 0x2, 0x4000041) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) 1.111074269s ago: executing program 0 (id=338): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r3, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}, 0x1, 0x0, 0x0, 0x40900}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) splice(r0, 0x0, r2, 0x0, 0x10d00, 0xf) 1.071210782s ago: executing program 1 (id=339): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)={0x38, r2, 0x1, 0x4, 0x2, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x4, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x2, 0xf, 0x0, 0x9, 0x1000, 0x3, 0xc]}}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c891}, 0x14) 998.58175ms ago: executing program 2 (id=340): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x1, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x10424}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_to_bond\x00'}, @IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x80, 0x3}}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000840}, 0x60000090) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc) setsockopt$ax25_SO_BINDTODEVICE(r4, 0x101, 0x19, &(0x7f00000001c0)=@bpq0, 0x10) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) setsockopt$ax25_SO_BINDTODEVICE(r4, 0x101, 0x19, &(0x7f0000000180)=@netrom={'nr', 0x0}, 0x10) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000008d00), r6) sendmsg$NLBL_UNLABEL_C_ACCEPT(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, r7, 0x1, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x2400cc00}, 0x0) sendmsg$inet6(r5, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x94e, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000029000000040000003b000000000000001800000000000000290000003b000000330000000000000030000000000000002900000037000000110200000000000005020081550100000100c2040000000b0001000401060000"], 0x60}, 0x40080) 375.989534ms ago: executing program 1 (id=341): syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$kcm(0x2, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='westwood', 0x8) recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4112, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=@deltclass={0x24, 0x29, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x4, 0xe}, {0x10, 0xfff1}, {0xd, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x40804}, 0x40000) 334.084437ms ago: executing program 3 (id=342): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x20bbfb2b, 0xf2, 0x45ff, 0x9, 0xfffffffc, 0xb5, 0x10001, 0x2, 0x81}}}}]}, 0x58}}, 0x180c0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r4) 0s ago: executing program 4 (id=343): socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f00000001c0)=0x7, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000001600)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000002780)=ANY=[@ANYBLOB="1c0008200203000014"], 0xfb5) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 39.451357][ T3856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.462756][ T3856] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.188' (ED25519) to the list of known hosts. syzkaller login: [ 61.907222][ T4174] cgroup: Unknown subsys name 'net' [ 62.067414][ T4174] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 63.519638][ T4174] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 65.435321][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 65.468781][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 65.503140][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 65.580506][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 65.624424][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.631742][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.639795][ T4186] device bridge_slave_0 entered promiscuous mode [ 65.675184][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.682477][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.690522][ T4186] device bridge_slave_1 entered promiscuous mode [ 65.705096][ T4200] chnl_net:caif_netlink_parms(): no params data found [ 65.720433][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.727711][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.735888][ T4194] device bridge_slave_0 entered promiscuous mode [ 65.776463][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.784211][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.792168][ T4194] device bridge_slave_1 entered promiscuous mode [ 65.813469][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.822675][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.829741][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.838533][ T4188] device bridge_slave_0 entered promiscuous mode [ 65.865908][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.875213][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.882602][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.890355][ T4188] device bridge_slave_1 entered promiscuous mode [ 65.897798][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.905160][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.913307][ T4187] device bridge_slave_0 entered promiscuous mode [ 65.926693][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.933800][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.942756][ T4187] device bridge_slave_1 entered promiscuous mode [ 65.970861][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.004813][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.027203][ T4186] team0: Port device team_slave_0 added [ 66.036117][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.052837][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.070727][ T4186] team0: Port device team_slave_1 added [ 66.078127][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.095061][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.104361][ T4200] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.111631][ T4200] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.119614][ T4200] device bridge_slave_0 entered promiscuous mode [ 66.149030][ T4194] team0: Port device team_slave_0 added [ 66.168700][ T4200] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.176132][ T4200] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.184254][ T4200] device bridge_slave_1 entered promiscuous mode [ 66.199677][ T4194] team0: Port device team_slave_1 added [ 66.206279][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.213372][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.239330][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.252889][ T4187] team0: Port device team_slave_0 added [ 66.259232][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.266314][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.292577][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.312131][ T4188] team0: Port device team_slave_0 added [ 66.326505][ T4187] team0: Port device team_slave_1 added [ 66.344233][ T4188] team0: Port device team_slave_1 added [ 66.368414][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.375693][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.402117][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.415378][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.422639][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.448797][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.462227][ T4200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.503434][ T4200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.513077][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.520031][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.546491][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.558222][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.565366][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.591652][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.610171][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.620017][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.646475][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.668990][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.676521][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.702755][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.718663][ T4186] device hsr_slave_0 entered promiscuous mode [ 66.725946][ T4186] device hsr_slave_1 entered promiscuous mode [ 66.757077][ T4194] device hsr_slave_0 entered promiscuous mode [ 66.765310][ T4194] device hsr_slave_1 entered promiscuous mode [ 66.772245][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.780014][ T4194] Cannot create hsr debugfs directory [ 66.805208][ T4200] team0: Port device team_slave_0 added [ 66.813499][ T4200] team0: Port device team_slave_1 added [ 66.856003][ T4187] device hsr_slave_0 entered promiscuous mode [ 66.862804][ T4187] device hsr_slave_1 entered promiscuous mode [ 66.869242][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.877159][ T4187] Cannot create hsr debugfs directory [ 66.905773][ T4200] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.913708][ T4200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.940093][ T4200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.953253][ T4200] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.960217][ T4200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.986383][ T4200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.035623][ T4188] device hsr_slave_0 entered promiscuous mode [ 67.042675][ T4188] device hsr_slave_1 entered promiscuous mode [ 67.049542][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.057185][ T4188] Cannot create hsr debugfs directory [ 67.132484][ T4200] device hsr_slave_0 entered promiscuous mode [ 67.139112][ T4200] device hsr_slave_1 entered promiscuous mode [ 67.146160][ T4200] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.154065][ T4200] Cannot create hsr debugfs directory [ 67.171856][ T2288] Bluetooth: hci3: command 0x0409 tx timeout [ 67.178538][ T2288] Bluetooth: hci2: command 0x0409 tx timeout [ 67.206032][ T2288] Bluetooth: hci1: command 0x0409 tx timeout [ 67.212373][ T2288] Bluetooth: hci0: command 0x0409 tx timeout [ 67.261323][ T1325] Bluetooth: hci4: command 0x0409 tx timeout [ 67.386962][ T4186] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 67.411761][ T4186] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 67.432317][ T4186] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 67.442116][ T4186] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 67.490942][ T4194] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 67.513502][ T4194] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 67.527230][ T4194] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 67.537065][ T4194] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 67.584379][ T4188] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 67.594162][ T4188] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 67.612752][ T4188] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 67.623915][ T4188] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 67.704283][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.718593][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.733547][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.743427][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.764009][ T4187] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 67.778721][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.787451][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.797199][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.808645][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.816904][ T4187] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 67.826992][ T4187] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 67.838474][ T4187] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 67.854960][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.864492][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.874124][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.881473][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.925386][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.933743][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.945802][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.954340][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.961433][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.971096][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.979728][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.989545][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.998555][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.008217][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.015335][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.023870][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.032793][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.042635][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.049699][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.058046][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.086809][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.096208][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.108156][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.117654][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.137722][ T4200] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.149699][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.159980][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.169199][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.178303][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.187384][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.197751][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.210017][ T4200] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.220808][ T4200] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.236895][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.249169][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.257701][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.267449][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.276823][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.288400][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.297177][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.306593][ T4200] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.327272][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.342906][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.354392][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.366701][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.375541][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.397897][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.408919][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.416993][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.433871][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.479696][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.489303][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.505071][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.512249][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.527704][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.552052][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.573869][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.589077][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.599121][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.606257][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.622721][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.650118][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.674963][ T912] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.705957][ T912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.718099][ T912] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.729814][ T912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.746356][ T912] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.757851][ T912] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.770089][ T912] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.780897][ T912] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.799515][ T4188] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 68.812578][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.835176][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.845781][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.856952][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.864095][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.872393][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.881856][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.890170][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.898839][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.907808][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.914937][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.923938][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.933058][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.941667][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.959636][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.968254][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.976729][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.985844][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.996777][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.005958][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.015433][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.025131][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.052250][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.059726][ T912] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.067974][ T912] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.077353][ T912] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.085687][ T912] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.094177][ T912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.104267][ T912] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.116857][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.133740][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.145047][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.178204][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.194902][ T912] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.209527][ T912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.225162][ T4186] device veth0_vlan entered promiscuous mode [ 69.242926][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.251533][ T4229] Bluetooth: hci0: command 0x041b tx timeout [ 69.261129][ T4229] Bluetooth: hci1: command 0x041b tx timeout [ 69.268738][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.281996][ T4229] Bluetooth: hci2: command 0x041b tx timeout [ 69.289388][ T4229] Bluetooth: hci3: command 0x041b tx timeout [ 69.299877][ T4200] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.313071][ T4186] device veth1_vlan entered promiscuous mode [ 69.332251][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.340064][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.348186][ T4229] Bluetooth: hci4: command 0x041b tx timeout [ 69.364491][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.377424][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.387711][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.451591][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.463845][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.475729][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.486623][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.499245][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.519131][ T4194] device veth0_vlan entered promiscuous mode [ 69.533309][ T4200] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.545484][ T4186] device veth0_macvtap entered promiscuous mode [ 69.563123][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.578516][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.586971][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.597250][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.606436][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.626131][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.635194][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.650255][ T4186] device veth1_macvtap entered promiscuous mode [ 69.667772][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.677281][ T4194] device veth1_vlan entered promiscuous mode [ 69.689958][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.699046][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.707951][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.715095][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.723853][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.732832][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.741313][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.748408][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.757484][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.790196][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.803729][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.815731][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.824887][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.838761][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.847660][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.867319][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.888456][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.903488][ T4194] device veth0_macvtap entered promiscuous mode [ 69.910613][ T912] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.923119][ T912] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.930585][ T912] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.943723][ T912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.956947][ T912] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.966203][ T912] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.976421][ T912] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.985836][ T912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.995118][ T912] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.004605][ T912] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.013199][ T912] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.026486][ T4186] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.037293][ T4186] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.053667][ T4186] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.062739][ T4186] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.080811][ T4194] device veth1_macvtap entered promiscuous mode [ 70.094545][ T4188] device veth0_vlan entered promiscuous mode [ 70.102554][ T912] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.118713][ T912] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.128363][ T912] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.145435][ T912] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.157907][ T912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.169397][ T912] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.180849][ T912] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.220134][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.230850][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.240114][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.248899][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.267882][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.284549][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.299354][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.310096][ T4188] device veth1_vlan entered promiscuous mode [ 70.332162][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.340511][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.349004][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.360490][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.376961][ T4200] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.418005][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.436518][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.447949][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.458869][ T4194] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.470837][ T4194] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.480859][ T4194] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.489809][ T4194] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.514550][ T4188] device veth0_macvtap entered promiscuous mode [ 70.533040][ T912] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.543366][ T912] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.554603][ T912] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.566635][ T912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.575784][ T912] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.607019][ T4188] device veth1_macvtap entered promiscuous mode [ 70.643630][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.655827][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.680499][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.700448][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.739841][ T4187] device veth0_vlan entered promiscuous mode [ 70.753036][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.767936][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.782449][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.795155][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.809762][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.818173][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.833522][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.846209][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.855666][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.864628][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.873538][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.882088][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.900221][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.915517][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.926015][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.937108][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.949456][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.963319][ T4187] device veth1_vlan entered promiscuous mode [ 70.981849][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.989928][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.998441][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.008017][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.020132][ T4188] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.029688][ T4188] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.038566][ T4188] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.047623][ T4188] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.079394][ T4200] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.086924][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.093067][ T3060] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.105691][ T3060] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.112284][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.140773][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.148880][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.159047][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.167036][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.185181][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.191914][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.199160][ T4187] device veth0_macvtap entered promiscuous mode [ 71.227274][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.237957][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.262096][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.285298][ T4187] device veth1_macvtap entered promiscuous mode [ 71.342226][ T4268] Bluetooth: hci3: command 0x040f tx timeout [ 71.348344][ T4268] Bluetooth: hci2: command 0x040f tx timeout [ 71.356214][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.357284][ T4268] Bluetooth: hci1: command 0x040f tx timeout [ 71.369924][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.380199][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.388554][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.396354][ T4268] Bluetooth: hci0: command 0x040f tx timeout [ 71.402955][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.415103][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.423691][ T4229] Bluetooth: hci4: command 0x040f tx timeout [ 71.464134][ T4270] loop1: detected capacity change from 0 to 128 [ 71.481113][ T912] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.500860][ T912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.538167][ T912] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.547987][ T912] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.564735][ T4200] device veth0_vlan entered promiscuous mode [ 71.574607][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.587252][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.597791][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.608941][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.619387][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.630249][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.646071][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.666899][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.676250][ T3060] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.689870][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.698544][ T3060] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.733975][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.747393][ T3060] attempt to access beyond end of device [ 71.747393][ T3060] loop1: rw=1, want=212, limit=128 [ 71.766805][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.782399][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.793236][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.805332][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.815630][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.826410][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.839737][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.894656][ T4200] device veth1_vlan entered promiscuous mode [ 71.924011][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.943713][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.964477][ T4187] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.981208][ T4187] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.004790][ T4187] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.023322][ T4187] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.040313][ T3060] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.049996][ T4272] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4'. [ 72.069583][ T3060] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.085970][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.226564][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.238795][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.247552][ T4289] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 72.278470][ T4200] device veth0_macvtap entered promiscuous mode [ 72.342453][ T4200] device veth1_macvtap entered promiscuous mode [ 72.361647][ T4293] device syzkaller0 entered promiscuous mode [ 72.378991][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.408950][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.410161][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.432074][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.445057][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.457193][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.467502][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.478079][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.488382][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.498893][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.514209][ T4200] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.529882][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.551317][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.560424][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.574307][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.586851][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.623417][ T4279] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.632683][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.646663][ T4279] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.653374][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.667570][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.678252][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.690696][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.706170][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.716456][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.730851][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.742838][ T4200] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.778777][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.796476][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.808629][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.841895][ T4200] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.850640][ T4200] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.864088][ T4298] syz.2.8 uses obsolete (PF_INET,SOCK_PACKET) [ 72.928413][ T4200] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.938796][ T4200] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.978807][ T4297] tipc: Started in network mode [ 72.988281][ T4297] tipc: Node identity ba0f5213921d, cluster identity 4711 [ 73.005853][ T4297] tipc: Enabled bearer , priority 0 [ 73.038409][ T4303] device syzkaller0 entered promiscuous mode [ 73.057614][ T4297] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9'. [ 73.118526][ T4297] tipc: Resetting bearer [ 73.208408][ T4296] tipc: Resetting bearer [ 73.218884][ T4296] tipc: Disabling bearer [ 73.253534][ T4311] netlink: 52 bytes leftover after parsing attributes in process `syz.3.13'. [ 73.273233][ T4311] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.281701][ T4311] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.375745][ T3060] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.398638][ T3060] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.424085][ T13] Bluetooth: hci0: command 0x0419 tx timeout [ 73.431937][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.440664][ T13] Bluetooth: hci1: command 0x0419 tx timeout [ 73.466359][ T13] Bluetooth: hci2: command 0x0419 tx timeout [ 73.484173][ T4311] syz.3.13 (4311) used greatest stack depth: 20432 bytes left [ 73.494055][ T13] Bluetooth: hci3: command 0x0419 tx timeout [ 73.501508][ T13] Bluetooth: hci4: command 0x0419 tx timeout [ 73.530521][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.546543][ T4321] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 73.555292][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.581913][ T4321] Zero length message leads to an empty skb [ 73.588408][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.610922][ T4321] mmap: syz.3.17 (4321): VmData 175800320 exceed data ulimit 33554432. Update limits or use boot option ignore_rlimit_data. [ 73.809120][ T4330] device syzkaller0 entered promiscuous mode [ 73.831027][ T4334] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 74.313324][ T4354] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 74.359135][ T4354] loop4: detected capacity change from 0 to 512 [ 74.398192][ T4354] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 74.475155][ T4360] netlink: 28 bytes leftover after parsing attributes in process `syz.0.32'. [ 74.485374][ T4360] netlink: 28 bytes leftover after parsing attributes in process `syz.0.32'. [ 74.502374][ T4360] netlink: 52 bytes leftover after parsing attributes in process `syz.0.32'. [ 74.580412][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805e335800: rx timeout, send abort [ 74.606849][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805e335800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 74.738995][ T4367] device syzkaller1 entered promiscuous mode [ 74.867960][ T4375] netlink: 104 bytes leftover after parsing attributes in process `syz.4.39'. [ 74.912046][ T4377] device vlan0 entered promiscuous mode [ 75.054310][ T4381] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.42'. [ 75.259942][ T4384] netlink: 44 bytes leftover after parsing attributes in process `syz.0.44'. [ 75.290827][ T4388] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 75.796312][ T4391] loop4: detected capacity change from 0 to 512 [ 76.112711][ T4391] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 76.401185][ T4409] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.518898][ T4415] netlink: 4 bytes leftover after parsing attributes in process `syz.3.56'. [ 78.594702][ T4424] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 78.662102][ T4417] netlink: 'syz.4.53': attribute type 39 has an invalid length. [ 78.958647][ T4437] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 79.051768][ T4437] loop0: detected capacity change from 0 to 512 [ 79.134560][ T4437] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 79.188317][ T4446] batman_adv: batadv0: Adding interface: dummy0 [ 79.239569][ T4446] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.320266][ T4446] batman_adv: batadv0: Interface activated: dummy0 [ 79.382479][ T4452] batadv0: mtu less than device minimum [ 79.413952][ T4452] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 79.426706][ T4452] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 79.439180][ T4452] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 79.451721][ T4452] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 79.464253][ T4452] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 79.476695][ T4452] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 79.489042][ T4452] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 79.501601][ T4452] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 79.514097][ T4452] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 79.790130][ T4476] netlink: 'syz.4.75': attribute type 11 has an invalid length. [ 79.969753][ T4484] netlink: 'syz.1.79': attribute type 1 has an invalid length. [ 80.093660][ T4486] netlink: 14 bytes leftover after parsing attributes in process `syz.1.79'. [ 80.112163][ T4491] netlink: 'syz.4.82': attribute type 1 has an invalid length. [ 80.261966][ T4492] netlink: 14 bytes leftover after parsing attributes in process `syz.1.79'. [ 80.318569][ T4500] netlink: 12 bytes leftover after parsing attributes in process `syz.2.85'. [ 80.583303][ T4509] tipc: Started in network mode [ 80.588232][ T4509] tipc: Node identity 9ecd7bf1f48f, cluster identity 4711 [ 80.620809][ T4509] tipc: Enabled bearer , priority 0 [ 80.658512][ T4505] device syzkaller0 entered promiscuous mode [ 80.758538][ T4505] tipc: Resetting bearer [ 80.844680][ T4503] tipc: Resetting bearer [ 80.892385][ T4503] tipc: Disabling bearer [ 81.046781][ T4528] netlink: 28 bytes leftover after parsing attributes in process `syz.0.97'. [ 81.067020][ T4528] netlink: 28 bytes leftover after parsing attributes in process `syz.0.97'. [ 81.097588][ T4528] netlink: 'syz.0.97': attribute type 6 has an invalid length. [ 81.181907][ T4531] netlink: 12 bytes leftover after parsing attributes in process `syz.2.99'. [ 81.352780][ T4541] netlink: 4 bytes leftover after parsing attributes in process `syz.0.102'. [ 81.508601][ T4546] netlink: 4 bytes leftover after parsing attributes in process `syz.0.102'. [ 81.796122][ T4562] netlink: 'syz.1.109': attribute type 29 has an invalid length. [ 81.835986][ T4562] netlink: 'syz.1.109': attribute type 29 has an invalid length. [ 81.921534][ T4562] netlink: 'syz.1.109': attribute type 29 has an invalid length. [ 81.955556][ T4562] netlink: 52 bytes leftover after parsing attributes in process `syz.1.109'. [ 81.972578][ T4562] unsupported nla_type 41 [ 82.408211][ T4584] netlink: 4 bytes leftover after parsing attributes in process `syz.0.117'. [ 83.136729][ T4621] 8021q: adding VLAN 0 to HW filter on device bond1 [ 83.173114][ T4621] bond0: (slave bond1): Enslaving as an active interface with an up link [ 83.602889][ T4634] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 83.661348][ T4634] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 83.709247][ T4634] bond0 (unregistering): (slave bond1): Releasing backup interface [ 83.764622][ T4634] bond0 (unregistering): Released all slaves [ 83.995876][ T4685] loop3: detected capacity change from 0 to 1024 [ 84.036949][ T4685] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 84.045510][ T4685] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 84.056621][ T4685] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 84.068503][ T4685] EXT4-fs error (device loop3): ext4_get_journal_inode:5185: inode #17: comm syz.3.132: iget: bad i_size value: 4398046511204 [ 84.085195][ T4685] EXT4-fs (loop3): no journal found [ 85.035790][ T4701] device syzkaller0 entered promiscuous mode [ 85.581005][ C0] sched: RT throttling activated [ 86.153632][ T4726] __nla_validate_parse: 3 callbacks suppressed [ 86.153652][ T4726] netlink: 8 bytes leftover after parsing attributes in process `syz.0.145'. [ 86.466785][ T4738] netlink: 80 bytes leftover after parsing attributes in process `syz.1.149'. [ 86.535518][ T1110] cfg80211: failed to load regulatory.db [ 86.564639][ T4740] loop3: detected capacity change from 0 to 512 [ 86.622684][ T4740] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 86.836689][ T4740] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.150: bg 0: block 255: padding at end of block bitmap is not set [ 86.889010][ T4755] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 86.922400][ T4759] loop4: detected capacity change from 0 to 1024 [ 86.964304][ T4759] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 86.973020][ T4759] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 86.983965][ T4759] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 86.997939][ T4759] EXT4-fs error (device loop4): ext4_get_journal_inode:5185: inode #17: comm syz.4.157: iget: bad i_size value: 4398046511204 [ 87.013089][ T4759] EXT4-fs (loop4): no journal found [ 87.021485][ T4740] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6194: Corrupt filesystem [ 87.113797][ T4740] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.150: invalid indirect mapped block 1 (level 1) [ 87.132264][ T4740] EXT4-fs (loop3): 1 truncate cleaned up [ 87.138059][ T4740] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 89.612915][ T4796] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 89.803104][ T4806] tipc: Started in network mode [ 89.810319][ T4806] tipc: Node identity 469ec3a00975, cluster identity 4711 [ 89.826270][ T4806] tipc: Enabled bearer , priority 0 [ 89.839720][ T4809] device syzkaller0 entered promiscuous mode [ 89.884088][ T4804] tipc: Resetting bearer [ 89.949119][ T4800] tipc: Resetting bearer [ 89.966682][ T4816] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 89.985706][ T4800] tipc: Disabling bearer [ 90.086630][ T4822] loop0: detected capacity change from 0 to 1024 [ 90.139346][ T4822] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 90.148732][ T4822] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 90.159791][ T4822] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 90.174334][ T4822] EXT4-fs error (device loop0): ext4_get_journal_inode:5185: inode #17: comm syz.0.176: iget: bad i_size value: 4398046511204 [ 90.189481][ T4822] EXT4-fs (loop0): no journal found [ 90.398466][ T4831] device syzkaller1 entered promiscuous mode [ 91.276293][ T4834] netlink: 12 bytes leftover after parsing attributes in process `syz.1.182'. [ 91.770125][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880623b3000: rx timeout, send abort [ 91.797711][ T4845] netlink: 4 bytes leftover after parsing attributes in process `syz.2.185'. [ 91.896145][ T4854] netlink: 44 bytes leftover after parsing attributes in process `syz.3.186'. [ 92.609095][ T4868] netlink: 8 bytes leftover after parsing attributes in process `syz.0.193'. [ 92.622357][ T4863] tipc: Enabled bearer , priority 0 [ 92.659998][ T4863] device syzkaller0 entered promiscuous mode [ 92.733960][ T4865] netlink: 4 bytes leftover after parsing attributes in process `syz.2.191'. [ 92.801580][ T4873] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 92.809141][ T4873] IPv6: NLM_F_CREATE should be set when creating new route [ 92.827894][ T4865] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 92.835258][ T4865] IPv6: NLM_F_CREATE should be set when creating new route [ 92.937341][ T4870] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.062035][ T4879] device syzkaller0 entered promiscuous mode [ 93.276712][ T4886] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 93.987304][ T4870] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.091418][ T4230] tipc: Node number set to 672289299 [ 94.259607][ T4870] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.388471][ T4892] tipc: Resetting bearer [ 94.456650][ T4870] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.480798][ T4861] tipc: Resetting bearer [ 94.510220][ T4861] tipc: Disabling bearer [ 94.668017][ T4870] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.728926][ T4870] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.787867][ T4870] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.820850][ T4870] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.170472][ T4913] device syzkaller0 entered promiscuous mode [ 96.555916][ T4916] netlink: 16 bytes leftover after parsing attributes in process `syz.1.210'. [ 96.590199][ T4916] netlink: 16 bytes leftover after parsing attributes in process `syz.1.210'. [ 96.718529][ T4937] netlink: 'syz.4.218': attribute type 4 has an invalid length. [ 96.753156][ T4933] netlink: 'syz.2.217': attribute type 1 has an invalid length. [ 96.878414][ T4939] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 96.901541][ T4939] bond1: (slave vxcan3): Error -22 calling dev_set_mtu [ 96.956148][ T4943] netlink: 20 bytes leftover after parsing attributes in process `syz.2.217'. [ 97.231217][ T4964] netlink: 48 bytes leftover after parsing attributes in process `syz.3.225'. [ 97.364531][ T4968] tipc: Failed to remove unknown binding: 66,0,0/672289299:757788824/757788826 [ 97.381997][ T4968] tipc: Failed to remove unknown binding: 66,0,0/672289299:757788824/757788825 [ 98.363647][ T4979] tipc: Enabled bearer , priority 0 [ 98.458175][ T4987] sctp: [Deprecated]: syz.2.234 (pid 4987) Use of int in maxseg socket option. [ 98.458175][ T4987] Use struct sctp_assoc_value instead [ 98.492143][ T4979] device syzkaller0 entered promiscuous mode [ 98.521280][ T4979] tipc: Resetting bearer [ 98.556762][ T4978] tipc: Resetting bearer [ 98.579868][ T4978] tipc: Disabling bearer [ 98.597321][ T4993] device syzkaller0 entered promiscuous mode [ 98.769556][ T5000] netlink: 144 bytes leftover after parsing attributes in process `syz.1.240'. [ 98.818646][ T5000] Cannot find set identified by id 0 to match [ 100.074615][ T5015] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 100.122872][ T5015] netlink: 8 bytes leftover after parsing attributes in process `syz.2.245'. [ 100.264409][ T5022] device syzkaller0 entered promiscuous mode [ 100.299665][ T5029] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 100.688826][ T5044] tipc: Enabled bearer , priority 0 [ 100.696710][ T5044] device syzkaller0 entered promiscuous mode [ 100.795100][ T5044] tipc: Resetting bearer [ 101.222724][ T5043] tipc: Resetting bearer [ 101.502158][ T5043] tipc: Disabling bearer [ 101.632467][ T5054] loop4: detected capacity change from 0 to 1024 [ 101.655234][ T5054] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 101.663946][ T5054] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 101.674940][ T5054] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 101.686265][ T5054] EXT4-fs error (device loop4): ext4_get_journal_inode:5185: inode #17: comm syz.4.262: iget: bad i_size value: 4398046511204 [ 101.703026][ T5054] EXT4-fs (loop4): no journal found [ 101.932354][ T5058] device syzkaller0 entered promiscuous mode [ 102.706983][ T5074] netlink: 12 bytes leftover after parsing attributes in process `syz.1.267'. [ 103.016871][ T5076] syz.0.268 uses old SIOCAX25GETINFO [ 103.376685][ T5083] netlink: 12 bytes leftover after parsing attributes in process `syz.0.271'. [ 103.844613][ T5092] tipc: Enabled bearer , priority 0 [ 103.863991][ T5096] netlink: 4 bytes leftover after parsing attributes in process `syz.1.276'. [ 103.883840][ T5092] device syzkaller0 entered promiscuous mode [ 103.941817][ T5092] tipc: Resetting bearer [ 104.000283][ T5091] tipc: Resetting bearer [ 104.063204][ T5091] tipc: Disabling bearer [ 104.158031][ T5109] tipc: Enabled bearer , priority 0 [ 104.205340][ T5109] device syzkaller0 entered promiscuous mode [ 104.271255][ T5109] netlink: 4 bytes leftover after parsing attributes in process `syz.1.281'. [ 104.341972][ T5109] tipc: Resetting bearer [ 104.361659][ T5118] netlink: 12 bytes leftover after parsing attributes in process `syz.0.286'. [ 104.379822][ T5108] tipc: Resetting bearer [ 104.398816][ T5108] tipc: Disabling bearer [ 104.430298][ T5116] device syzkaller0 entered promiscuous mode [ 105.943940][ T5171] tipc: Enabled bearer , priority 0 [ 105.967788][ T5168] device syzkaller0 entered promiscuous mode [ 106.096102][ T5172] device syzkaller0 entered promiscuous mode [ 106.138655][ T5175] netlink: 4 bytes leftover after parsing attributes in process `syz.4.300'. [ 106.273305][ T5168] tipc: Resetting bearer [ 106.333420][ T5164] tipc: Resetting bearer [ 106.370826][ T5164] tipc: Disabling bearer [ 107.511770][ T5196] device syzkaller0 entered promiscuous mode [ 107.554919][ T5201] tipc: Started in network mode [ 107.570448][ T5201] tipc: Node identity 1a44082b8614, cluster identity 4711 [ 107.590818][ T5201] tipc: Enabled bearer , priority 0 [ 107.636157][ T5197] device syzkaller0 entered promiscuous mode [ 107.720307][ T5201] tipc: Resetting bearer [ 107.753792][ T5195] tipc: Resetting bearer [ 107.796764][ T5195] tipc: Disabling bearer [ 107.994025][ T5216] netlink: 12 bytes leftover after parsing attributes in process `syz.2.321'. [ 108.125690][ T5216] netlink: 12 bytes leftover after parsing attributes in process `syz.2.321'. [ 109.689716][ T5243] device syzkaller0 entered promiscuous mode [ 110.243110][ T5256] device syzkaller0 entered promiscuous mode [ 110.311870][ T5258] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 111.049058][ T5259] device syzkaller0 entered promiscuous mode [ 111.212824][ T5269] netlink: 12 bytes leftover after parsing attributes in process `syz.1.336'. [ 112.502900][ T5282] ================================================================== [ 112.511284][ T5282] BUG: KASAN: use-after-free in ax25_release+0x5ca/0x870 [ 112.518373][ T5282] Read of size 8 at addr ffff888023034408 by task syz.2.340/5282 [ 112.526117][ T5282] [ 112.528484][ T5282] CPU: 0 PID: 5282 Comm: syz.2.340 Not tainted syzkaller #0 [ 112.535796][ T5282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 112.545886][ T5282] Call Trace: [ 112.549187][ T5282] [ 112.552138][ T5282] dump_stack_lvl+0x188/0x250 [ 112.556860][ T5282] ? show_regs_print_info+0x20/0x20 [ 112.562093][ T5282] ? _printk+0xda/0x130 [ 112.566287][ T5282] ? load_image+0x400/0x400 [ 112.570820][ T5282] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 112.576319][ T5282] print_address_description+0x60/0x2d0 [ 112.581909][ T5282] ? ax25_release+0x5ca/0x870 [ 112.586617][ T5282] kasan_report+0xdf/0x130 [ 112.591073][ T5282] ? ax25_release+0x5ca/0x870 [ 112.595787][ T5282] ax25_release+0x5ca/0x870 [ 112.600336][ T5282] sock_close+0xd5/0x240 [ 112.604611][ T5282] ? sock_mmap+0x90/0x90 [ 112.608881][ T5282] __fput+0x234/0x930 [ 112.612906][ T5282] task_work_run+0x125/0x1a0 [ 112.617531][ T5282] do_exit+0x626/0x20c0 [ 112.621728][ T5282] ? put_task_struct+0x80/0x80 [ 112.626516][ T5282] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 112.632533][ T5282] ? lock_chain_count+0x20/0x20 [ 112.637434][ T5282] ? _raw_spin_lock_irq+0xb7/0xf0 [ 112.642489][ T5282] do_group_exit+0x12e/0x300 [ 112.647111][ T5282] ? lockdep_hardirqs_on+0x94/0x140 [ 112.652342][ T5282] get_signal+0x6ca/0x12c0 [ 112.656813][ T5282] arch_do_signal_or_restart+0xe7/0x12c0 [ 112.662486][ T5282] ? sock_show_fdinfo+0xb0/0xb0 [ 112.667374][ T5282] ? get_sigframe_size+0x10/0x10 [ 112.672376][ T5282] ? exit_to_user_mode_loop+0x3b/0x130 [ 112.677867][ T5282] exit_to_user_mode_loop+0x9e/0x130 [ 112.683280][ T5282] exit_to_user_mode_prepare+0xee/0x180 [ 112.688855][ T5282] syscall_exit_to_user_mode+0x16/0x40 [ 112.694350][ T5282] do_syscall_64+0x58/0xa0 [ 112.698793][ T5282] ? clear_bhb_loop+0x30/0x80 [ 112.703514][ T5282] ? clear_bhb_loop+0x30/0x80 [ 112.708229][ T5282] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 112.714168][ T5282] RIP: 0033:0x7efd5be5a629 [ 112.718645][ T5282] Code: Unable to access opcode bytes at RIP 0x7efd5be5a5ff. [ 112.726031][ T5282] RSP: 002b:00007efd5a072028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 112.734481][ T5282] RAX: 0000000000000000 RBX: 00007efd5c0d4180 RCX: 00007efd5be5a629 [ 112.742476][ T5282] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000005 [ 112.750475][ T5282] RBP: 00007efd5bef0b39 R08: 0000000000000000 R09: 0000000000000000 [ 112.758476][ T5282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.766477][ T5282] R13: 00007efd5c0d4218 R14: 00007efd5c0d4180 R15: 00007fff952cab38 [ 112.774629][ T5282] [ 112.777678][ T5282] [ 112.780020][ T5282] Allocated by task 5015: [ 112.784374][ T5282] __kasan_kmalloc+0xb5/0xf0 [ 112.788989][ T5282] ax25_dev_device_up+0x50/0x580 [ 112.793955][ T5282] ax25_device_event+0x483/0x4f0 [ 112.798919][ T5282] raw_notifier_call_chain+0xcb/0x160 [ 112.804326][ T5282] __dev_notify_flags+0x194/0x300 [ 112.809378][ T5282] dev_change_flags+0xe3/0x1a0 [ 112.814172][ T5282] dev_ifsioc+0x130/0xd50 [ 112.818539][ T5282] dev_ioctl+0x545/0xe30 [ 112.822799][ T5282] sock_do_ioctl+0x245/0x320 [ 112.827412][ T5282] sock_ioctl+0x4d2/0x710 [ 112.831794][ T5282] __se_sys_ioctl+0xfa/0x170 [ 112.836406][ T5282] do_syscall_64+0x4c/0xa0 [ 112.840848][ T5282] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 112.846780][ T5282] [ 112.849128][ T5282] Freed by task 5282: [ 112.853130][ T5282] kasan_set_track+0x4b/0x70 [ 112.857745][ T5282] kasan_set_free_info+0x1f/0x40 [ 112.862715][ T5282] ____kasan_slab_free+0xd5/0x110 [ 112.867776][ T5282] slab_free_freelist_hook+0xea/0x170 [ 112.873178][ T5282] kfree+0xef/0x2a0 [ 112.877021][ T5282] ax25_device_event+0x4b4/0x4f0 [ 112.881984][ T5282] raw_notifier_call_chain+0xcb/0x160 [ 112.887385][ T5282] __dev_notify_flags+0x158/0x300 [ 112.892441][ T5282] dev_change_flags+0xe3/0x1a0 [ 112.897238][ T5282] dev_ifsioc+0x130/0xd50 [ 112.901616][ T5282] dev_ioctl+0x545/0xe30 [ 112.905891][ T5282] sock_do_ioctl+0x245/0x320 [ 112.910515][ T5282] sock_ioctl+0x4d2/0x710 [ 112.914871][ T5282] __se_sys_ioctl+0xfa/0x170 [ 112.919485][ T5282] do_syscall_64+0x4c/0xa0 [ 112.923924][ T5282] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 112.929844][ T5282] [ 112.932193][ T5282] Last potentially related work creation: [ 112.937931][ T5282] kasan_save_stack+0x35/0x60 [ 112.942661][ T5282] kasan_record_aux_stack+0xb8/0x100 [ 112.947980][ T5282] insert_work+0x54/0x3d0 [ 112.952357][ T5282] __queue_work+0x9c5/0xd50 [ 112.956890][ T5282] queue_work_on+0x124/0x1f0 [ 112.961503][ T5282] netdevice_event+0x803/0x900 [ 112.966298][ T5282] raw_notifier_call_chain+0xcb/0x160 [ 112.971699][ T5282] register_netdevice+0x12a6/0x1710 [ 112.976932][ T5282] veth_newlink+0x6bc/0xe30 [ 112.981465][ T5282] rtnl_newlink+0x1359/0x1a50 [ 112.986170][ T5282] rtnetlink_rcv_msg+0x844/0xf30 [ 112.991140][ T5282] netlink_rcv_skb+0x1f5/0x440 [ 112.995925][ T5282] netlink_unicast+0x774/0x920 [ 113.000725][ T5282] netlink_sendmsg+0x8ba/0xbe0 [ 113.005523][ T5282] __sys_sendto+0x46d/0x620 [ 113.010056][ T5282] __x64_sys_sendto+0xda/0xf0 [ 113.014767][ T5282] do_syscall_64+0x4c/0xa0 [ 113.019224][ T5282] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 113.025130][ T5282] [ 113.027459][ T5282] Second to last potentially related work creation: [ 113.034064][ T5282] kasan_save_stack+0x35/0x60 [ 113.038778][ T5282] kasan_record_aux_stack+0xb8/0x100 [ 113.044096][ T5282] insert_work+0x54/0x3d0 [ 113.048431][ T5282] __queue_work+0x9c5/0xd50 [ 113.052934][ T5282] queue_work_on+0x124/0x1f0 [ 113.057532][ T5282] call_usermodehelper_exec+0x2e3/0x520 [ 113.063081][ T5282] kobject_uevent_env+0x681/0x890 [ 113.068109][ T5282] device_add+0x91c/0xfb0 [ 113.072442][ T5282] device_create_with_groups+0x267/0x300 [ 113.078096][ T5282] misc_register+0x24c/0x470 [ 113.082683][ T5282] tun_init+0x48/0xe0 [ 113.086690][ T5282] do_one_initcall+0x272/0x730 [ 113.091466][ T5282] do_initcall_level+0x137/0x1f0 [ 113.096422][ T5282] do_initcalls+0x4b/0x90 [ 113.100760][ T5282] kernel_init_freeable+0x3e9/0x570 [ 113.105980][ T5282] kernel_init+0x19/0x1b0 [ 113.110341][ T5282] ret_from_fork+0x1f/0x30 [ 113.114774][ T5282] [ 113.117094][ T5282] The buggy address belongs to the object at ffff888023034400 [ 113.117094][ T5282] which belongs to the cache kmalloc-192 of size 192 [ 113.131149][ T5282] The buggy address is located 8 bytes inside of [ 113.131149][ T5282] 192-byte region [ffff888023034400, ffff8880230344c0) [ 113.144275][ T5282] The buggy address belongs to the page: [ 113.149940][ T5282] page:ffffea00008c0d00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x23034 [ 113.160092][ T5282] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 113.167767][ T5282] raw: 00fff00000000200 ffffea0000aba2c0 0000000600000002 ffff888016c41a00 [ 113.176368][ T5282] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 113.184947][ T5282] page dumped because: kasan: bad access detected [ 113.191376][ T5282] page_owner tracks the page as allocated [ 113.197096][ T5282] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 1, ts 9071456860, free_ts 0 [ 113.211963][ T5282] get_page_from_freelist+0x1bbd/0x1ca0 [ 113.217542][ T5282] __alloc_pages+0x1ee/0x480 [ 113.222159][ T5282] alloc_page_interleave+0x24/0x1e0 [ 113.227438][ T5282] new_slab+0xc0/0x4b0 [ 113.231537][ T5282] ___slab_alloc+0x80a/0xdd0 [ 113.236152][ T5282] kmem_cache_alloc_trace+0x1a5/0x2a0 [ 113.241588][ T5282] call_usermodehelper_setup+0x8a/0x260 [ 113.247167][ T5282] kobject_uevent_env+0x65e/0x890 [ 113.252222][ T5282] driver_register+0x3e2/0x430 [ 113.257022][ T5282] phy_driver_register+0x174/0x270 [ 113.262159][ T5282] phy_drivers_register+0x3b/0xc0 [ 113.267219][ T5282] do_one_initcall+0x272/0x730 [ 113.272009][ T5282] do_initcall_level+0x137/0x1f0 [ 113.276977][ T5282] do_initcalls+0x4b/0x90 [ 113.281335][ T5282] kernel_init_freeable+0x3e9/0x570 [ 113.286556][ T5282] kernel_init+0x19/0x1b0 [ 113.290887][ T5282] page_owner free stack trace missing [ 113.296253][ T5282] [ 113.298591][ T5282] Memory state around the buggy address: [ 113.304227][ T5282] ffff888023034300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 113.312316][ T5282] ffff888023034380: 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 113.320397][ T5282] >ffff888023034400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 113.328464][ T5282] ^ [ 113.332789][ T5282] ffff888023034480: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 113.340872][ T5282] ffff888023034500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 113.348942][ T5282] ================================================================== [ 113.357017][ T5282] Disabling lock debugging due to kernel taint [ 113.367333][ T5282] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 113.374648][ T5282] CPU: 1 PID: 5282 Comm: syz.2.340 Tainted: G B syzkaller #0 [ 113.383338][ T5282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 113.393407][ T5282] Call Trace: [ 113.396717][ T5282] [ 113.399671][ T5282] dump_stack_lvl+0x188/0x250 [ 113.404376][ T5282] ? show_regs_print_info+0x20/0x20 [ 113.409577][ T5282] ? load_image+0x400/0x400 [ 113.414130][ T5282] panic+0x2e5/0x810 [ 113.418043][ T5282] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 113.424203][ T5282] ? bpf_jit_dump+0xd0/0xd0 [ 113.428706][ T5282] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 113.434685][ T5282] ? _raw_spin_unlock+0x40/0x40 [ 113.439534][ T5282] ? ax25_release+0x5ca/0x870 [ 113.444219][ T5282] check_panic_on_warn+0x80/0xa0 [ 113.449153][ T5282] ? ax25_release+0x5ca/0x870 [ 113.453849][ T5282] end_report+0x6d/0xf0 [ 113.458029][ T5282] kasan_report+0x102/0x130 [ 113.462535][ T5282] ? ax25_release+0x5ca/0x870 [ 113.467210][ T5282] ax25_release+0x5ca/0x870 [ 113.471721][ T5282] sock_close+0xd5/0x240 [ 113.475981][ T5282] ? sock_mmap+0x90/0x90 [ 113.480225][ T5282] __fput+0x234/0x930 [ 113.484210][ T5282] task_work_run+0x125/0x1a0 [ 113.488800][ T5282] do_exit+0x626/0x20c0 [ 113.492955][ T5282] ? put_task_struct+0x80/0x80 [ 113.497735][ T5282] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 113.503715][ T5282] ? lock_chain_count+0x20/0x20 [ 113.508574][ T5282] ? _raw_spin_lock_irq+0xb7/0xf0 [ 113.513612][ T5282] do_group_exit+0x12e/0x300 [ 113.518247][ T5282] ? lockdep_hardirqs_on+0x94/0x140 [ 113.523478][ T5282] get_signal+0x6ca/0x12c0 [ 113.527925][ T5282] arch_do_signal_or_restart+0xe7/0x12c0 [ 113.533651][ T5282] ? sock_show_fdinfo+0xb0/0xb0 [ 113.538503][ T5282] ? get_sigframe_size+0x10/0x10 [ 113.543448][ T5282] ? exit_to_user_mode_loop+0x3b/0x130 [ 113.548903][ T5282] exit_to_user_mode_loop+0x9e/0x130 [ 113.554187][ T5282] exit_to_user_mode_prepare+0xee/0x180 [ 113.559774][ T5282] syscall_exit_to_user_mode+0x16/0x40 [ 113.565238][ T5282] do_syscall_64+0x58/0xa0 [ 113.569650][ T5282] ? clear_bhb_loop+0x30/0x80 [ 113.574320][ T5282] ? clear_bhb_loop+0x30/0x80 [ 113.579013][ T5282] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 113.584903][ T5282] RIP: 0033:0x7efd5be5a629 [ 113.589332][ T5282] Code: Unable to access opcode bytes at RIP 0x7efd5be5a5ff. [ 113.596704][ T5282] RSP: 002b:00007efd5a072028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 113.605134][ T5282] RAX: 0000000000000000 RBX: 00007efd5c0d4180 RCX: 00007efd5be5a629 [ 113.613110][ T5282] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000005 [ 113.621089][ T5282] RBP: 00007efd5bef0b39 R08: 0000000000000000 R09: 0000000000000000 [ 113.629076][ T5282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.637040][ T5282] R13: 00007efd5c0d4218 R14: 00007efd5c0d4180 R15: 00007fff952cab38 [ 113.645118][ T5282] [ 113.648482][ T5282] Kernel Offset: disabled [ 113.652814][ T5282] Rebooting in 86400 seconds..