last executing test programs: 3.856980251s ago: executing program 0 (id=1249): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) shutdown(r1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, 0x0, 0x0) r2 = socket$inet(0x2b, 0x801, 0x0) listen(r2, 0x9) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000002ec0)=ANY=[@ANYBLOB="02000000040000000700000009"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000000, 0x3, 0x4, 0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) close(0x4) shutdown(r0, 0x1) 2.867987148s ago: executing program 0 (id=1265): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) socket$key(0xf, 0x3, 0x2) setsockopt$packet_int(r0, 0x107, 0x14, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x88}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f0000000340)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0xa, 0x0, 0x8d}, @mpls={[], @ipv6=@tipc_packet={0x8, 0x6, "09c2b4", 0x68, 0x6, 0xff, @empty, @mcast2, {[@fragment={0x2e, 0x0, 0x2c, 0x0, 0x0, 0x3, 0x67}, @srh={0x4, 0x6, 0x4, 0x3, 0x8f, 0x10, 0x1000, [@loopback, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}], @payload_named={{{{{0x28, 0x0, 0x0, 0x0, 0x1, 0xa, 0x2, 0x2, 0x4886, 0x0, 0x3, 0x9, 0x0, 0x2, 0x8, 0x0, 0x0, 0x4e23, 0x4e20}, 0x1}, 0x4, 0x4}}}}}}}, 0x9e) 1.654614777s ago: executing program 2 (id=1287): socket$packet(0x11, 0x2, 0x300) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000140)={0x1d, r1}, 0x10) recvmmsg(r0, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x40010000, &(0x7f0000007300)={0x0, 0x989680}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) close(0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, {0xb, 0x6}, {0x3, 0xfff9}, {0x2}}}, 0x24}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=@gettfilter={0x34, 0x2e, 0x10, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x3, 0x7ffc}, {0x0, 0x4}, {0x0, 0xfff2}}, [{0x8, 0xb, 0x6}, {0x8, 0xb, 0xf194}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000001c0)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r6, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) listen(r6, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000200)='ns/pid\x00') r7 = bpf$PROG_LOAD(0x5, &(0x7f0000010400)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xf}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r7}, 0xc) select(0x40, &(0x7f00000000c0)={0x7fffffffffffffff, 0x3, 0xca0, 0x3, 0x2, 0x3, 0x7, 0x7}, &(0x7f0000000100)={0x7fffffff, 0xb9, 0xf, 0x5, 0xfda6, 0x7, 0x7, 0xfff}, &(0x7f0000000140)={0xf, 0x2, 0x3ff, 0x2, 0xffffffffffffffff, 0x2, 0xfffffffffffffffb, 0x4}, &(0x7f0000000180)={0x0, 0x2710}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.555911037s ago: executing program 4 (id=1289): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x5f024efe, 0xffff, 0x4, 0x6, 0x7, 0x4, 0x7, 0x1aa8, 0x53}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24004045}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0xffe0, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_PLIMIT={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) close(0xffffffffffffffff) socket(0x400000000010, 0x3, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b01000031c6"}) 1.449768487s ago: executing program 1 (id=1290): sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, 0x0, 0x2) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "ffb00afe4e70"}}}}}}}, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) 1.295515562s ago: executing program 3 (id=1291): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010000b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f00000001c0)='GPL\x00', 0x1, 0xff6, &(0x7f0000001e00)=""/4086, 0x0, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) 1.21957873s ago: executing program 1 (id=1292): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d00001000000000000000000000000800120002000200000000002000000030002b0023000000000000000000000010003300000000000000000000000000fc020000000000000000000000000000030005000000000002000000ac1414aa0000000000000000030006000000000002"], 0x80}}, 0x0) 1.2187337s ago: executing program 2 (id=1293): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x70, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xf, 0xf}, {}, {0x7, 0xd}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40, 0x2, [@TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x800, 0x7, 0x1}, {{0x0, 0x0, 0x1}, {0x3, 0x1, 0x1}}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0xe85, 0x6e4, 0xc}, {0x4, 0x80000000, 0x3, 0x1, 0xf, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6e4}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006100)=@delchain={0x24, 0x65, 0x1, 0x70bd2e, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {}, {0xb}}}, 0x51}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 1.206510011s ago: executing program 0 (id=1294): setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x4e20, 0x9, 0x4e23, 0x7, 0x2, 0x80, 0x20, 0x87}, {0x2, 0x6, 0x1, 0x4, 0x4, 0x0, 0x1}, {0x2f37, 0x0, 0xc73, 0xffffffffffffffd8}, 0x1, 0x6e6bb9, 0x1, 0x1, 0x1, 0x1}, {{@in6=@private2, 0x4d3, 0xff}, 0xa, @in6=@mcast1, 0x0, 0x3, 0x0, 0x0, 0x80000003, 0x8, 0x8}}, 0xe8) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000300)=ANY=[], 0x110) 1.168396675s ago: executing program 3 (id=1295): r0 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_int(r0, 0x1, 0x22, 0x0, &(0x7f0000000000)=0x3d) 1.051964556s ago: executing program 1 (id=1296): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000240)=""/109, 0x6d}], 0x1}, 0x2000) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbfc}, 0xfffffd3c}, 0x1, 0x0, 0x0, 0x4048800}, 0x4048050) 1.051366646s ago: executing program 3 (id=1297): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x2) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0xc3) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01052dbd7000ffdbdf25020000000600060008000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) setsockopt$ax25_int(r1, 0x101, 0x9, &(0x7f0000000000)=0xac0f, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x100, 0x73d, 0x3509, 0x3, 0x10000, 0x7, 0x1000, 0x9, 0x3, 0x3, 0x882e, 0x8, 0x8, 0x2, 0x9, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x9, 0xffff, 0x7a, 0x5, 0x7, 0x7fff, 0xffffff40, 0x9, 0x6, 0x8, 0x2, 0x57, 0x0, 0x4, 0x7fff, 0x9, 0xfffffffb, 0x2, 0xcf9f, 0x0, 0x1, 0x8, 0x1, 0x5, 0xfffffff9, 0xd5, 0x80000001, 0x6, 0x4, 0x9, 0x8, 0xfffffffd, 0x15, 0x7, 0xc, 0x8, 0x4, 0x3, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x1, 0x1, 0x801e, 0x7, 0x4, 0x0, 0x8, 0x5, 0x8001, 0x5, 0x1, 0x1000, 0x9, 0x3, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0xe, 0x7fff, 0xfffffff8, 0x7, 0x0, 0xb1, 0x3, 0xffffff44, 0x1, 0x8, 0xf, 0x6, 0x556, 0x1, 0x2c, 0x5, 0x80000001, 0x1, 0x0, 0xffffff00, 0x3, 0x2, 0x7, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x80, 0x7, 0x0, 0x743, 0x5, 0x3, 0x7, 0x200, 0x5, 0x0, 0x8, 0x3, 0x100, 0x2, 0x8, 0x1, 0x1, 0x8, 0xe, 0x5, 0x6, 0x4, 0x7ff, 0x5, 0xfffffffe, 0x7, 0xf80, 0x7, 0x5a, 0x2302, 0xffff, 0x3ff, 0x2, 0x5, 0x1, 0x6, 0x3, 0x401, 0x10001, 0x512d, 0x1, 0xe, 0x2, 0xa3c0, 0x4, 0x8000, 0x10001, 0x15a, 0x6, 0x120000, 0x9, 0x7fffffff, 0x7, 0x9, 0x80000004, 0x5, 0x7e9, 0x48, 0x9, 0x3, 0x0, 0x5, 0x6, 0xf, 0xff, 0xd, 0x6, 0x9, 0x0, 0x200, 0x9, 0xff, 0x4, 0x7, 0x7, 0x8, 0x4, 0x56, 0x4a82, 0xffff0000, 0x7ff, 0x3e1, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x6, 0x8, 0x48, 0x1a, 0x2000000, 0x1ff, 0x844, 0x6, 0x3ff, 0x2, 0x100, 0x6, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x4, 0x7, 0x3565, 0x2, 0x4, 0xebf, 0x9, 0x1000, 0x1, 0x71f, 0x2, 0x7, 0x6e8, 0x8, 0x0, 0x80000000, 0x6, 0x9, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4, 0x1}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet(0x2, 0x3, 0x100) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000500)=0x8, 0x4) bind$inet(r6, &(0x7f0000000000)={0x2, 0x0, @local}, 0x3c) connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r6, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x80) r7 = socket(0x200000000000011, 0x2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {0x3}, {0x0, 0xfff1}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x0, 0x5, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000003c0)={'vlan0\x00', &(0x7f0000000340)=@ethtool_gfeatures={0x3a, 0x4, [{}, {}, {}, {}]}}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r5, 0x8982, &(0x7f0000000040)={0x3, 'veth1_virt_wifi\x00', {0xffff}, 0x9}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r12, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) getsockopt$IP_VS_SO_GET_VERSION(r7, 0x0, 0x480, &(0x7f0000000080), &(0x7f00000000c0)=0x40) sendmsg$NL80211_CMD_GET_INTERFACE(r7, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000326bd7000fddbdf250500000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990008000000660000009d34c319a500d97318f77f311940ea10c78ac17de7ea13106d09b11ca243bb170f6a6e0e1475ff1158cb7da130efe961f6c2a52f9b49186af931a35b89ea561caf9e8bee9714a4067e419056"], 0x28}, 0x1, 0x0, 0x0, 0x4800}, 0x8001) 993.051602ms ago: executing program 0 (id=1298): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x400000, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x2, 0xfffa, 0x7, 0x8, 0x8}, {0x6, 0x1, 0xd, 0x6, 0x6, 0xfb8e001}, 0x6, 0x4, 0x111e}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000011}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xf}, {0x7, 0xb}, {0xd, 0x7}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1, 0x5, 0x2, 0x2, 0x3, 0x2, 0x5, 0x0, 0x81}}}}]}, 0x58}}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 963.785435ms ago: executing program 4 (id=1299): ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000001000000e27f00000100000012"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x13, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000740), 0x80000002, r0}, 0x38) 728.063618ms ago: executing program 4 (id=1300): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c000380140001"], 0xfc}}, 0x0) 697.751941ms ago: executing program 4 (id=1301): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x94b, 0x4) syz_emit_ethernet(0x5e, &(0x7f0000000540)={@random="b12a73e9dc0f", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @initdev={0xfe, 0x4, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @private0, @loopback}}}}}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000440)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb8000", 0x38, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast2, {[], @time_exceed={0x4, 0x0, 0x0, 0x60, '\x00', {0x0, 0x6, "f99063", 0x800, 0x3a, 0xff, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [], "1b8d2069162baf34"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x2000, 0x0) recvmmsg(r0, &(0x7f0000001fc0)=[{{0x0, 0x0, 0x0}, 0xfffffff7}], 0x1, 0x4130, 0x0) 633.765317ms ago: executing program 1 (id=1302): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c"], 0x7c}, 0x1, 0x0, 0x0, 0x4005000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x2c, 0x4, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_USERDATA={0x4}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000800) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x4}, @TCA_FQ_TIMER_SLACK={0x8, 0xd, 0x2b3}]}}]}, 0x40}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a00000000000000008004"], 0x26}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) syz_emit_ethernet(0x3a, &(0x7f00000001c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x4000, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0x80, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0x3}]}}}}}}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r2, &(0x7f0000000ec0)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @private=0xa010100, 0x4}, 0x80, &(0x7f0000000340)=[{0x0}, {&(0x7f00000007c0)="a960e57530b65741465209e7c6235055450b1ed3da8592b928d8e20971659d8e3ca392643af5fa7ae0e3455099a5f7b857afa34cbf9962bdc9db46a15e7dcf9412a2b98b6ae75ca1bd7eae82d94855e9ced28430f77527b7c0b999eab05883ce32fa9b99187b196d53939db62b2b37c0cd0dea2a1be6f97dbcd0937bb416c3fb74a9d08d9afa4c86a507485b0e6821ba9d82e6b8522a6eba1734eccbc5659567aa08b5b93be09bc2a6d6319acbd1aeb751f8e9b7ce9e2f", 0xb7}, {&(0x7f0000001400)}], 0x3}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000880)="90b9f79fecb3ad0dc00ca95fb148a3ba4355cee5ce27d2c10d8474464a37dea0c1ab2a961404f5aa5493cdadb4b6bf4131e96c0aef0f89065db2aa551c68ce3fa911638fd608ff9e30cce409b6e516e59c272cdbbb88c83dc61199d70f8f7e05d9639d278d53151a6720a51979ffd78dcc1a000929160435bd61e3f36c78b9bd5baef79be54e537dfc26029f52cfd5b4dd3416fc140fce45c077ab5ee206763130ccdaedd3bff9b7a20b6b02e558fd", 0xaf}, {&(0x7f0000000a40)}], 0x3}}], 0x2, 0x11) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 556.036315ms ago: executing program 2 (id=1303): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x1}, 0x94) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x1b, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f00000011c0)="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", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x34}}, @ip_tos_u8={{0x38, 0x29, 0x2}}, @ip_tos_u8={{0x100000000000000}}], 0x50}, 0x5d8) 555.513575ms ago: executing program 4 (id=1304): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x6}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x26f, 0x7, 0x2, 0xc93, 0x6, 0x7ff, 0x0, 0x7, 0xfffffffa}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b927, 0x25dfdc01, {0x0, 0x0, 0x0, r9, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x10001}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 554.924765ms ago: executing program 3 (id=1305): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008"], 0x7c}, 0x1, 0x0, 0x0, 0x4005000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x23, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PARMS={0x4, 0x2, {{0x0, 0x0, 0x0, 0xfffffffe}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x74}}, 0x0) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, 0x0, 0x20000800) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a00000000000000008004"], 0x26}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r0, &(0x7f0000000ec0)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @private=0xa010100, 0x4}, 0x80, &(0x7f0000000340)=[{&(0x7f00000006c0)="cc5c84001214dbd9e5943aa8a315357330c56529d6b619a78687eea13ea02981afbb0fab70e8c3ab037cd82bd48f4947702a177974e7eff5f2ccdec909645f69e3dea5153157374459f6a21ba8609552d9ada54e81b0f19b55b77cf382ad229baa9decce1ea639a300f1fa65b945a0e29d36cb8ed369e91698c0e9", 0x7b}, {&(0x7f00000007c0)="a960e57530b65741465209e7c6235055450b1ed3da8592b928d8e20971659d8e3ca392643af5fa7ae0e3455099a5f7b857afa34cbf9962bdc9db46a15e7dcf9412a2b98b6ae75ca1bd7eae82d94855e9ced28430f77527b7c0b999eab05883ce32fa9b99187b196d53939db62b2b37c0cd0dea2a1be6f97dbcd0937bb416c3fb74a9d08d9afa4c86a507485b0e6821ba9d82e6b8522a6eba1734eccbc5659567aa08b5b93be09bc2a6d6319acbd1aeb751f8e9b7ce9e2f", 0xb7}, {&(0x7f0000001400)="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", 0xf89}], 0x3}}], 0x1, 0x11) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 524.242968ms ago: executing program 0 (id=1306): r0 = socket$nl_generic(0x10, 0x3, 0x10) close(0x3) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}, 0x48) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r2, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r2, 0x80) accept$netrom(r2, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) read(r1, &(0x7f00000003c0)=""/123, 0x7b) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x4044000}, 0x0) 494.978621ms ago: executing program 1 (id=1307): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$kcm(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x19, 0x4, 0x8, 0x1}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000240), &(0x7f00000006c0)=r0}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r5, r2, 0x25, 0x2, @val=@tcx}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000440)={@link_local, @random, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x64, 0x0, 0x0, 0x2, 0x0, @empty, @empty}, @address_request={0x11, 0x0, 0x0, 0x5}}}}}, 0x0) 419.951078ms ago: executing program 2 (id=1308): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0xe, &(0x7f0000001b80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001200000008000800000001000800090000000000180001801400020076657468305f746f5f626f6e640000000800070000000000080006"], 0x4c}}, 0x0) 398.248741ms ago: executing program 3 (id=1309): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0xcf}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 358.733084ms ago: executing program 2 (id=1310): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x70, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xf, 0xf}, {}, {0x7, 0xd}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40, 0x2, [@TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x800, 0x7, 0x1}, {{0x0, 0x0, 0x1}, {0x3, 0x1, 0x1}}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0xe85, 0x6e4, 0xc}, {0x4, 0x80000000, 0x3, 0x1, 0xf, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6e4}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006100)=@delchain={0x24, 0x65, 0x1, 0x70bd2e, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff3}, {}, {0xb}}}, 0x51}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x34, 0x2c, 0xd27, 0x870bd28, 0x8000, {0x0, 0x0, 0x0, r11, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 255.935064ms ago: executing program 3 (id=1311): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) socket(0x400000000010, 0x3, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x70, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xf, 0xf}, {}, {0x7, 0xd}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40, 0x2, [@TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x800, 0x7, 0x1}, {{0x0, 0x0, 0x1}, {0x3, 0x1, 0x1}}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0xe85, 0x6e4, 0xc}, {0x4, 0x80000000, 0x3, 0x1, 0xf, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6e4}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 255.321934ms ago: executing program 1 (id=1312): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSACCEPT(r3, 0x89e3) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x6, @any, 0x0, 0x1}, 0xe) connect$bt_l2cap(r2, &(0x7f0000000680)={0x1f, 0x20, @none}, 0xe) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000037400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080007002609090914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r4, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x14, 0x0, @remote}, 0x10) sendmmsg(r4, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x22, &(0x7f0000000100)={0x0, 0x989680}) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$sock_ifreq(r5, 0x89f0, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000007000000008000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000eaff0000000000f700"/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r6, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r7, &(0x7f0000000340)="351656b5c7027f807406bb0b", &(0x7f0000000400)}, 0x20) getpeername(r5, &(0x7f00000002c0)=@isdn, &(0x7f00000000c0)=0x80) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0xf, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000400000000000000000000018110000", @ANYRES32=r8, @ANYRES32=r0], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r12}, &(0x7f0000000000), &(0x7f0000000140)=r9}, 0x20) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r12, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f00000000c0)=r13, 0x4) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0900000001000000080000004000000042000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r14}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r14, &(0x7f0000000280), &(0x7f0000000600)=""/98}, 0x20) sendmsg$inet(r11, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 241.881316ms ago: executing program 4 (id=1313): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24004045}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0x7, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) close(0xffffffffffffffff) socket(0x400000000010, 0x3, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 186.198171ms ago: executing program 0 (id=1314): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002800)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x5, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r8 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0}}], 0x1, 0x0) 0s ago: executing program 2 (id=1315): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r2, 0x0, 0x0, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r1, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.128' (ED25519) to the list of known hosts. syzkaller login: [ 57.541790][ T4172] cgroup: Unknown subsys name 'net' [ 57.657124][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 59.090566][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 61.041945][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 61.189303][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 61.199025][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.206301][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.214745][ T4190] device bridge_slave_0 entered promiscuous mode [ 61.225844][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.233063][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.240764][ T4190] device bridge_slave_1 entered promiscuous mode [ 61.265779][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 61.329399][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.356525][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.390831][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 61.431503][ T4190] team0: Port device team_slave_0 added [ 61.446350][ T4190] team0: Port device team_slave_1 added [ 61.452401][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.459464][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.467519][ T4191] device bridge_slave_0 entered promiscuous mode [ 61.481977][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 61.512653][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.519771][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.527841][ T4191] device bridge_slave_1 entered promiscuous mode [ 61.535662][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.543012][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.551075][ T4182] device bridge_slave_0 entered promiscuous mode [ 61.565998][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.573080][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.599942][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.617975][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.625251][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.633241][ T4182] device bridge_slave_1 entered promiscuous mode [ 61.648811][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.655971][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.682187][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.721343][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.758328][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.769129][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.791788][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.798953][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.807232][ T4183] device bridge_slave_0 entered promiscuous mode [ 61.823316][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.842560][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.849644][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.857832][ T4183] device bridge_slave_1 entered promiscuous mode [ 61.888563][ T4190] device hsr_slave_0 entered promiscuous mode [ 61.895698][ T4190] device hsr_slave_1 entered promiscuous mode [ 61.909443][ T4191] team0: Port device team_slave_0 added [ 61.917372][ T4191] team0: Port device team_slave_1 added [ 61.948049][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.967990][ T4182] team0: Port device team_slave_0 added [ 61.974228][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.981914][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.989706][ T4187] device bridge_slave_0 entered promiscuous mode [ 61.999245][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.008486][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.015976][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.023885][ T4187] device bridge_slave_1 entered promiscuous mode [ 62.051990][ T4182] team0: Port device team_slave_1 added [ 62.083446][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.090408][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.116652][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.143488][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.154964][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.172538][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.179497][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.205699][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.233156][ T4183] team0: Port device team_slave_0 added [ 62.251998][ T4187] team0: Port device team_slave_0 added [ 62.261745][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.268699][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.294667][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.307202][ T4183] team0: Port device team_slave_1 added [ 62.314685][ T4187] team0: Port device team_slave_1 added [ 62.328290][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.335972][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.362012][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.420672][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.427713][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.454032][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.482568][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.489531][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.515714][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.530397][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.537468][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.563540][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.578040][ T4191] device hsr_slave_0 entered promiscuous mode [ 62.585292][ T4191] device hsr_slave_1 entered promiscuous mode [ 62.592258][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.600057][ T4191] Cannot create hsr debugfs directory [ 62.612891][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.619854][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.646446][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.670585][ T4182] device hsr_slave_0 entered promiscuous mode [ 62.677808][ T4182] device hsr_slave_1 entered promiscuous mode [ 62.684561][ T4182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.692161][ T4182] Cannot create hsr debugfs directory [ 62.781799][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 62.790174][ T4187] device hsr_slave_0 entered promiscuous mode [ 62.790978][ T1111] Bluetooth: hci3: command 0x0409 tx timeout [ 62.803221][ T4187] device hsr_slave_1 entered promiscuous mode [ 62.803291][ T1111] Bluetooth: hci0: command 0x0409 tx timeout [ 62.815500][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.823504][ T4187] Cannot create hsr debugfs directory [ 62.856491][ T4183] device hsr_slave_0 entered promiscuous mode [ 62.861197][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 62.868631][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 62.869267][ T4183] device hsr_slave_1 entered promiscuous mode [ 62.881564][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.889122][ T4183] Cannot create hsr debugfs directory [ 63.118468][ T4190] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.129665][ T4190] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.142245][ T4190] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.151540][ T4190] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.211997][ T4191] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.235018][ T4191] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.249398][ T4191] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.277865][ T4191] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.294886][ T4187] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.304281][ T4187] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.322401][ T4187] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.341387][ T4187] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.387654][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.419651][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.429532][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.438477][ T4182] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 63.448032][ T4182] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 63.473753][ T4182] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 63.498208][ T4182] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 63.509711][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.523426][ T4183] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.534534][ T4183] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.550622][ T4183] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.560180][ T4183] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.589208][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.599507][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.609567][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.616858][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.638910][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.646815][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.656636][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.666845][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.673993][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.683334][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.717209][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.743992][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.753672][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.767538][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.780136][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.798444][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.807789][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.833864][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.842581][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.850840][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.859143][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.874490][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.888061][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.898398][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.909793][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.925473][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.934722][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.957970][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.967446][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.978809][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.989413][ T311] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.996546][ T311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.008628][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.026493][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.049759][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.056875][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.066763][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.076223][ T311] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.083356][ T311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.097220][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.107838][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.121447][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.130160][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.138801][ T311] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.145869][ T311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.169475][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.186326][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.193537][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.203510][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.214612][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.224393][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.232999][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.243234][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.251770][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.259923][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.268762][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.277796][ T311] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.284885][ T311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.298429][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.307519][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.317118][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.327623][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.337769][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.374056][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.383500][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.393632][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.402761][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.411992][ T311] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.419163][ T311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.427092][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.436231][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.444976][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.453876][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.463368][ T311] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.470427][ T311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.478380][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.487737][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.496774][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.506151][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.514718][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.523206][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.532554][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.541375][ T311] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.548448][ T311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.556324][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.565042][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.572785][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.580221][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.588337][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.596692][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.618111][ T4191] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 64.629158][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.655145][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.669329][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.681783][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.691461][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.700090][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.709521][ T311] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.716644][ T311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.725270][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.734050][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.743237][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.752174][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.760424][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.768997][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.778011][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.787874][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.796656][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.805303][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.813882][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.822296][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.830531][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.838927][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.847624][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.855429][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.871479][ T4246] Bluetooth: hci0: command 0x041b tx timeout [ 64.877534][ T4246] Bluetooth: hci3: command 0x041b tx timeout [ 64.884027][ T4246] Bluetooth: hci2: command 0x041b tx timeout [ 64.906547][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.921672][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.941052][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.941731][ T4233] Bluetooth: hci4: command 0x041b tx timeout [ 64.950098][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.963589][ T7] Bluetooth: hci1: command 0x041b tx timeout [ 64.976596][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.992265][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.009443][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.040247][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.062720][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.078622][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.087253][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.103132][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.115946][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.128354][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.146220][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.191971][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.199438][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.214310][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.224686][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.233433][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.241990][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.254368][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.266292][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.281241][ T4190] device veth0_vlan entered promiscuous mode [ 65.289107][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.302856][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.325894][ T4190] device veth1_vlan entered promiscuous mode [ 65.361984][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.371287][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.379994][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.405230][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.428477][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.439062][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.490481][ T4187] device veth0_vlan entered promiscuous mode [ 65.498449][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.508820][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.519992][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.529259][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.536973][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.545813][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.554737][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.562794][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.573963][ T4190] device veth0_macvtap entered promiscuous mode [ 65.586416][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.599139][ T4187] device veth1_vlan entered promiscuous mode [ 65.607997][ T1447] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.616364][ T1447] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.624953][ T1447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.633313][ T1447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.644529][ T4191] device veth0_vlan entered promiscuous mode [ 65.660609][ T4190] device veth1_macvtap entered promiscuous mode [ 65.669668][ T1447] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.679511][ T1447] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.688369][ T1447] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.696178][ T1447] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.703788][ T1447] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.731978][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.742860][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.754045][ T4191] device veth1_vlan entered promiscuous mode [ 65.768721][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.810467][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.819998][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.830123][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.839386][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.848076][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.857404][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.866681][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.875150][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.891621][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.900178][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.911693][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.919519][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.929184][ T4183] device veth0_vlan entered promiscuous mode [ 65.938114][ T4187] device veth0_macvtap entered promiscuous mode [ 65.948496][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.973928][ T4183] device veth1_vlan entered promiscuous mode [ 65.980935][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.988978][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.002464][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.012120][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.023638][ T4190] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.038001][ T4190] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.047528][ T4190] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.056847][ T4190] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.088106][ T4187] device veth1_macvtap entered promiscuous mode [ 66.099571][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.115969][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.128121][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.139249][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.164047][ T4191] device veth0_macvtap entered promiscuous mode [ 66.177673][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.189864][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.201774][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.215397][ T1447] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.226901][ T1447] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.235912][ T1447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.266475][ T4191] device veth1_macvtap entered promiscuous mode [ 66.275173][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.288394][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.299731][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.312212][ T1447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.326461][ T1447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.335232][ T1447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.345027][ T1447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.354617][ T1447] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.363354][ T1447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.376359][ T4183] device veth0_macvtap entered promiscuous mode [ 66.399895][ T4187] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.413041][ T4187] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.422069][ T4187] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.431260][ T4187] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.455609][ T4183] device veth1_macvtap entered promiscuous mode [ 66.509917][ T1447] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.518710][ T1447] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.527362][ T1447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.535688][ T1447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.546150][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.558270][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.569581][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.580102][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.592061][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.616862][ T4182] device veth0_vlan entered promiscuous mode [ 66.625941][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.634425][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.646873][ T1447] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.655085][ T1447] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.663229][ T1447] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.671332][ T1447] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.680388][ T1447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.698436][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.709603][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.720071][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.732684][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.744221][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.761473][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.772821][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.783240][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.797866][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.807908][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.818830][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.830051][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.838014][ T1447] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.846926][ T1447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.856628][ T1447] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.866307][ T1447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.883824][ T4191] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.892727][ T4191] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.901597][ T4191] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.910371][ T4191] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.933059][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.943847][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.944948][ T4233] Bluetooth: hci2: command 0x040f tx timeout [ 66.958683][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.966299][ T4233] Bluetooth: hci3: command 0x040f tx timeout [ 66.970608][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.976581][ T4233] Bluetooth: hci0: command 0x040f tx timeout [ 66.987416][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.002700][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.015622][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.021938][ T1108] Bluetooth: hci4: command 0x040f tx timeout [ 67.030673][ T1108] Bluetooth: hci1: command 0x040f tx timeout [ 67.046341][ T4182] device veth1_vlan entered promiscuous mode [ 67.060902][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.068935][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.079868][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.103972][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.121177][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.134538][ T4183] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.144362][ T4183] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.153106][ T4183] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.162190][ T4183] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.180575][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.190008][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.204037][ T4182] device veth0_macvtap entered promiscuous mode [ 67.217947][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.229575][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.263731][ T4182] device veth1_macvtap entered promiscuous mode [ 67.275974][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.285601][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.296772][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.369141][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.382658][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.393070][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.405973][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.415910][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.426857][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.436743][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.447263][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.458669][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.471296][ T1447] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.479255][ T1447] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.494010][ T1447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.557071][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.568303][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.579642][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.591298][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.601258][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.612245][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.622311][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.634679][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.647909][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.673842][ T1447] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.688865][ T1447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.701781][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.715656][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.716348][ T4182] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.734556][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.760419][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.761577][ T4182] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.776493][ T4182] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.785466][ T4182] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.803439][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.811828][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.817809][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.836139][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.844392][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.895177][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.918692][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.959820][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.974460][ T1447] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.987605][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.019139][ T1447] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.079106][ T4267] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.097321][ T4267] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.139916][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.243032][ T4267] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.282758][ T4267] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.323464][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.729413][ T4328] device syzkaller0 entered promiscuous mode [ 68.887243][ T4332] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12'. [ 68.999371][ T4304] syz.3.6 uses obsolete (PF_INET,SOCK_PACKET) [ 69.009948][ T4335] device syzkaller0 entered promiscuous mode [ 69.024688][ T4233] Bluetooth: hci0: command 0x0419 tx timeout [ 69.036088][ T4233] Bluetooth: hci3: command 0x0419 tx timeout [ 69.048957][ T4233] Bluetooth: hci2: command 0x0419 tx timeout [ 69.106177][ T4298] Bluetooth: hci1: command 0x0419 tx timeout [ 69.114403][ T4298] Bluetooth: hci4: command 0x0419 tx timeout [ 69.886199][ T4358] device syzkaller1 entered promiscuous mode [ 69.999620][ T4363] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 70.295302][ T4371] netlink: 4 bytes leftover after parsing attributes in process `syz.3.26'. [ 70.506235][ T4375] tipc: Started in network mode [ 70.518135][ T4375] tipc: Node identity 62eb76aa0038, cluster identity 4711 [ 70.533916][ T4375] tipc: Enabled bearer , priority 0 [ 70.555664][ T4375] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 70.581117][ T4375] tipc: Resetting bearer [ 70.602937][ T4374] tipc: Disabling bearer [ 71.030440][ T4382] device syzkaller0 entered promiscuous mode [ 71.264154][ T1429] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.280836][ T1429] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.867628][ T4421] tipc: Started in network mode [ 71.896212][ T4421] tipc: Node identity fae13a68a867, cluster identity 4711 [ 71.923596][ T4421] tipc: Enabled bearer , priority 0 [ 71.965537][ T4421] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 72.010551][ T4421] tipc: Resetting bearer [ 72.029863][ T4420] tipc: Disabling bearer [ 72.069993][ T4425] device syzkaller1 entered promiscuous mode [ 72.371825][ T4444] netlink: 4 bytes leftover after parsing attributes in process `syz.0.43'. [ 72.922664][ T4469] netlink: 4 bytes leftover after parsing attributes in process `syz.3.50'. [ 73.205050][ T4476] tipc: Started in network mode [ 73.209994][ T4476] tipc: Node identity e64340fa6c72, cluster identity 4711 [ 73.267419][ T4476] tipc: Enabled bearer , priority 0 [ 73.279461][ T4482] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 73.346522][ T4476] tipc: Resetting bearer [ 73.382319][ T4475] tipc: Disabling bearer [ 73.412058][ T4485] device syzkaller0 entered promiscuous mode [ 73.612231][ T4490] netlink: 4 bytes leftover after parsing attributes in process `syz.2.57'. [ 74.482279][ T4526] tipc: Enabled bearer , priority 0 [ 74.521796][ T4526] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 74.573853][ T4526] tipc: Resetting bearer [ 74.611855][ T4525] tipc: Disabling bearer [ 74.881563][ T4543] tipc: Enabled bearer , priority 0 [ 74.912662][ T4543] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 74.947714][ T4543] tipc: Resetting bearer [ 74.988905][ T4542] tipc: Disabling bearer [ 75.271586][ T4563] netlink: 4 bytes leftover after parsing attributes in process `syz.1.80'. [ 75.407870][ T4571] Zero length message leads to an empty skb [ 75.750249][ T4588] tipc: Enabled bearer , priority 0 [ 75.819943][ T4587] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.856176][ T4588] tipc: Resetting bearer [ 75.865321][ T4586] tipc: Disabling bearer [ 75.946336][ T4587] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.040442][ T4587] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.126779][ T4587] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.246307][ T4587] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.270137][ T4587] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.303191][ T4587] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.312605][ T4600] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 76.320575][ T4602] netlink: 16 bytes leftover after parsing attributes in process `syz.4.94'. [ 76.343378][ T4587] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.464172][ T4608] device syzkaller0 entered promiscuous mode [ 76.533806][ T4610] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 76.541331][ T4610] IPv6: NLM_F_CREATE should be set when creating new route [ 76.548593][ T4610] IPv6: NLM_F_CREATE should be set when creating new route [ 76.555862][ T4610] IPv6: NLM_F_CREATE should be set when creating new route [ 76.816552][ T4622] tipc: Started in network mode [ 76.851019][ T4622] tipc: Node identity 027969b8a987, cluster identity 4711 [ 76.858287][ T4622] tipc: Enabled bearer , priority 0 [ 76.931890][ T4622] tipc: Resetting bearer [ 76.978155][ T4621] tipc: Disabling bearer [ 77.352790][ T4660] tipc: Enabling of bearer rejected, failed to enable media [ 77.413740][ T4662] device syzkaller0 entered promiscuous mode [ 77.902486][ T4698] tipc: Enabled bearer , priority 0 [ 77.948348][ T4698] tipc: Resetting bearer [ 77.964750][ T4705] netlink: 4 bytes leftover after parsing attributes in process `syz.3.118'. [ 77.992488][ T4696] tipc: Disabling bearer [ 78.156295][ T4715] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 78.409656][ T4727] tipc: Enabling of bearer rejected, failed to enable media [ 78.419435][ T4726] device syzkaller0 entered promiscuous mode [ 78.807891][ T4749] tipc: Enabled bearer , priority 0 [ 78.832948][ T4749] tipc: Resetting bearer [ 78.850200][ T4747] tipc: Disabling bearer [ 79.088992][ T4761] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 79.136842][ T4761] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.151097][ T4761] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.226480][ T4766] netlink: 4 bytes leftover after parsing attributes in process `syz.4.146'. [ 79.329201][ T4769] device syzkaller0 entered promiscuous mode [ 79.475380][ T4778] tipc: Enabling of bearer rejected, failed to enable media [ 79.729832][ T4791] tipc: Enabled bearer , priority 0 [ 79.755218][ T4791] tipc: Resetting bearer [ 79.771624][ T4790] tipc: Disabling bearer [ 80.289822][ T4821] tipc: Enabling of bearer rejected, failed to enable media [ 80.330423][ T4823] netlink: 88 bytes leftover after parsing attributes in process `syz.0.164'. [ 80.518851][ T4836] tipc: Enabled bearer , priority 0 [ 80.602081][ T4836] tipc: Resetting bearer [ 80.618085][ T4834] tipc: Disabling bearer [ 80.803016][ T4845] netlink: 4 bytes leftover after parsing attributes in process `syz.3.171'. [ 81.090322][ T4876] netlink: 'syz.4.179': attribute type 10 has an invalid length. [ 81.124201][ T4876] netlink: 4 bytes leftover after parsing attributes in process `syz.4.179'. [ 81.150559][ T4876] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 81.231053][ T4885] tipc: Enabling of bearer rejected, failed to enable media [ 81.430034][ T4897] netlink: 8 bytes leftover after parsing attributes in process `syz.1.183'. [ 81.505891][ T13] cfg80211: failed to load regulatory.db [ 81.556144][ T4902] tipc: Enabling of bearer rejected, failed to enable media [ 81.593765][ T4904] SET target dimension over the limit! [ 81.675629][ T4904] 8021q: adding VLAN 0 to HW filter on device bond1 [ 81.778794][ T4910] device bridge_slave_0 left promiscuous mode [ 81.827961][ T4910] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.912008][ T4910] device bridge_slave_1 left promiscuous mode [ 81.921029][ T4910] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.976805][ T4910] bond0: (slave bond_slave_0): Releasing backup interface [ 82.008157][ T4910] bond0: (slave bond_slave_1): Releasing backup interface [ 82.049116][ T4910] team0: Port device team_slave_0 removed [ 82.069594][ T4910] team0: Port device team_slave_1 removed [ 82.084208][ T4910] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.101003][ T4910] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.111967][ T4910] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.119885][ T4910] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.537096][ T4942] device syzkaller0 entered promiscuous mode [ 82.725120][ T4956] tipc: Enabling of bearer rejected, failed to enable media [ 82.872772][ T4970] tipc: Enabling of bearer rejected, failed to enable media [ 83.639971][ T5024] device syzkaller0 entered promiscuous mode [ 83.816564][ T5033] tipc: Enabling of bearer rejected, failed to enable media [ 83.936444][ T5041] tipc: Enabling of bearer rejected, failed to enable media [ 84.450488][ T5077] device syzkaller0 entered promiscuous mode [ 85.042425][ T5117] tipc: Enabling of bearer rejected, failed to enable media [ 85.076806][ T5118] netlink: 4 bytes leftover after parsing attributes in process `syz.4.238'. [ 85.106581][ T5123] tipc: Enabling of bearer rejected, failed to enable media [ 85.157808][ T5113] netlink: 4 bytes leftover after parsing attributes in process `syz.4.238'. [ 85.509749][ T5154] device syzkaller0 entered promiscuous mode [ 85.594212][ T5160] 8021q: adding VLAN 0 to HW filter on device bond2 [ 85.603083][ T5160] bond0: (slave bond2): Enslaving as an active interface with an up link [ 85.769856][ T5169] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 86.337930][ T5208] tipc: Enabling of bearer rejected, failed to enable media [ 86.378037][ T5212] netlink: 76 bytes leftover after parsing attributes in process `syz.2.259'. [ 86.672065][ T5230] tipc: Enabling of bearer rejected, failed to enable media [ 86.876054][ T5239] device syzkaller0 entered promiscuous mode [ 88.841769][ T5286] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.849347][ T5286] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.769549][ T5286] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.841510][ T5286] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.467517][ T5286] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.476846][ T5286] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.486130][ T5286] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.495525][ T5286] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.655863][ T5286] syz.1.275 (5286) used greatest stack depth: 19904 bytes left [ 90.659663][ T5289] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20002 - 0 [ 90.685943][ T5289] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20002 - 0 [ 90.700630][ T5289] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20002 - 0 [ 90.717259][ T5289] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20002 - 0 [ 90.726644][ T5289] device geneve2 entered promiscuous mode [ 90.744694][ T5292] tipc: Enabling of bearer rejected, failed to enable media [ 90.847271][ T5304] tipc: Enabling of bearer rejected, failed to enable media [ 90.928888][ T5305] device syzkaller0 entered promiscuous mode [ 91.421959][ T5333] tipc: Enabled bearer , priority 0 [ 91.447189][ T5333] device syzkaller0 entered promiscuous mode [ 91.501241][ T5333] tipc: Resetting bearer [ 91.565511][ T5332] tipc: Resetting bearer [ 91.616990][ T5332] tipc: Disabling bearer [ 91.643816][ T5341] netlink: 20 bytes leftover after parsing attributes in process `syz.4.289'. [ 91.752078][ T5347] team0: No ports can be present during mode change [ 91.820329][ T5351] tipc: Enabling of bearer rejected, failed to enable media [ 91.901046][ T5355] tipc: Enabling of bearer rejected, failed to enable media [ 92.258473][ T5381] device syzkaller0 entered promiscuous mode [ 92.428180][ T5383] netlink: 'syz.0.299': attribute type 1 has an invalid length. [ 93.138793][ T5422] tipc: Enabling of bearer rejected, failed to enable media [ 93.238200][ T5427] tipc: Enabling of bearer rejected, failed to enable media [ 93.458821][ T5441] device syzkaller0 entered promiscuous mode [ 94.309112][ T5482] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 94.315933][ T5482] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 94.494149][ T5489] tipc: Enabling of bearer rejected, failed to enable media [ 94.548468][ T5487] tipc: Started in network mode [ 94.569085][ T5487] tipc: Node identity 9664f79b393e, cluster identity 4711 [ 94.590891][ T5487] tipc: Enabled bearer , priority 0 [ 94.633248][ T5491] device syzkaller0 entered promiscuous mode [ 94.648362][ T5487] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 94.781937][ T5487] tipc: Resetting bearer [ 94.802165][ T5486] tipc: Disabling bearer [ 95.643519][ T5533] device syzkaller0 entered promiscuous mode [ 95.735444][ T5542] tipc: Enabling of bearer rejected, failed to enable media [ 95.791388][ T5539] device syzkaller0 entered promiscuous mode [ 95.947966][ T5546] tipc: Enabled bearer , priority 0 [ 95.985466][ T5551] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 96.016129][ T5544] tipc: Resetting bearer [ 96.090166][ T5543] tipc: Disabling bearer [ 96.766712][ T5586] device syzkaller0 entered promiscuous mode [ 96.886081][ T5590] netlink: 71 bytes leftover after parsing attributes in process `syz.1.359'. [ 96.904481][ T5592] tipc: Enabling of bearer rejected, failed to enable media [ 97.011861][ T5597] tipc: Enabled bearer , priority 0 [ 97.061400][ T5597] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 97.084804][ T5597] tipc: Resetting bearer [ 97.211476][ T5595] tipc: Disabling bearer [ 97.805197][ T5636] device syzkaller0 entered promiscuous mode [ 97.947565][ T5645] tipc: Enabling of bearer rejected, failed to enable media [ 98.233984][ T5660] device syzkaller0 entered promiscuous mode [ 98.277517][ T5660] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 98.437784][ T5673] netlink: 4 bytes leftover after parsing attributes in process `syz.1.380'. [ 98.529845][ T5670] netlink: 4 bytes leftover after parsing attributes in process `syz.2.379'. [ 98.847734][ T5692] device syzkaller0 entered promiscuous mode [ 99.016185][ T5700] tipc: Enabled bearer , priority 0 [ 99.046771][ T5700] tipc: Resetting bearer [ 99.078247][ T5699] tipc: Disabling bearer [ 99.119344][ T5704] device syzkaller0 entered promiscuous mode [ 99.134877][ T5704] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 99.449761][ T5724] netlink: 4 bytes leftover after parsing attributes in process `syz.4.397'. [ 100.132728][ T5746] device syzkaller0 entered promiscuous mode [ 100.403160][ T5760] tipc: Enabled bearer , priority 0 [ 100.434624][ T5759] tipc: Resetting bearer [ 100.587703][ T5758] tipc: Disabling bearer [ 100.620029][ T5767] device syzkaller0 entered promiscuous mode [ 100.677084][ T5767] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 101.203331][ T5810] device syzkaller0 entered promiscuous mode [ 101.352742][ T5816] netlink: 24 bytes leftover after parsing attributes in process `syz.4.423'. [ 101.416431][ T5816] device bond1 entered promiscuous mode [ 101.423357][ T5816] 8021q: adding VLAN 0 to HW filter on device bond1 [ 101.454735][ T5816] bond1 (unregistering): Released all slaves [ 101.796306][ T5845] tipc: Enabled bearer , priority 0 [ 101.837928][ T5845] tipc: Resetting bearer [ 101.940503][ T5840] tipc: Disabling bearer [ 102.001935][ T5855] device syzkaller0 entered promiscuous mode [ 102.023425][ T5855] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 102.211444][ T5873] netlink: 8 bytes leftover after parsing attributes in process `syz.4.434'. [ 102.752549][ T5899] device syzkaller0 entered promiscuous mode [ 102.899875][ T5905] netlink: 'syz.4.442': attribute type 3 has an invalid length. [ 103.168921][ T5916] device syzkaller0 entered promiscuous mode [ 103.202274][ T5918] tipc: Enabled bearer , priority 0 [ 103.279063][ T5918] device syzkaller0 entered promiscuous mode [ 103.306225][ T5918] tipc: Resetting bearer [ 103.389455][ T5917] tipc: Resetting bearer [ 103.460565][ T5917] tipc: Disabling bearer [ 103.714487][ T5943] device syzkaller0 entered promiscuous mode [ 103.758210][ T5943] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 104.049554][ T5955] device syzkaller0 entered promiscuous mode [ 104.388196][ T5976] device syzkaller0 entered promiscuous mode [ 104.440347][ T5977] device bond3 entered promiscuous mode [ 104.448858][ T5977] 8021q: adding VLAN 0 to HW filter on device bond3 [ 104.826947][ T6007] device syzkaller0 entered promiscuous mode [ 104.871525][ T6007] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 105.273983][ T6027] device syzkaller0 entered promiscuous mode [ 105.484251][ T6038] device syzkaller0 entered promiscuous mode [ 106.046742][ T6059] device syzkaller0 entered promiscuous mode [ 106.097452][ T6059] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 106.434438][ T6073] netlink: 8 bytes leftover after parsing attributes in process `syz.2.490'. [ 106.464819][ T6075] device syzkaller0 entered promiscuous mode [ 106.659432][ T6083] netlink: 'syz.0.492': attribute type 21 has an invalid length. [ 106.669089][ T6087] netlink: 36 bytes leftover after parsing attributes in process `syz.2.490'. [ 106.848408][ T6093] device syzkaller0 entered promiscuous mode [ 106.938976][ T6092] netlink: 4 bytes leftover after parsing attributes in process `syz.3.493'. [ 107.062966][ T6110] device syzkaller0 entered promiscuous mode [ 107.128907][ T6110] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 107.246026][ T6114] 8021q: VLANs not supported on ip6gre0 [ 107.392633][ T6121] netlink: 'syz.0.505': attribute type 46 has an invalid length. [ 108.092272][ T6145] device syzkaller0 entered promiscuous mode [ 108.355942][ T6153] device syzkaller0 entered promiscuous mode [ 108.384336][ T6153] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 108.422019][ T6160] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 108.731362][ T6176] netlink: 12 bytes leftover after parsing attributes in process `syz.0.521'. [ 109.227550][ T6192] netlink: 12 bytes leftover after parsing attributes in process `syz.1.527'. [ 109.297108][ T6194] netlink: 8 bytes leftover after parsing attributes in process `syz.3.529'. [ 109.320621][ T6194] bond0: Unable to set down delay as MII monitoring is disabled [ 109.391686][ T6191] device syzkaller0 entered promiscuous mode [ 109.533209][ T6207] netlink: 8 bytes leftover after parsing attributes in process `syz.1.533'. [ 109.630059][ T6202] netlink: 4 bytes leftover after parsing attributes in process `syz.3.532'. [ 109.690255][ T6211] device syzkaller0 entered promiscuous mode [ 109.756239][ T6215] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 110.073700][ T6232] netlink: 52 bytes leftover after parsing attributes in process `syz.1.542'. [ 110.378447][ T6237] netlink: 40 bytes leftover after parsing attributes in process `syz.1.544'. [ 110.668601][ T6246] device syzkaller0 entered promiscuous mode [ 110.682295][ T6246] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 110.809455][ T4310] bond0: (slave bond2): interface is now down [ 110.818111][ T6263] device syzkaller0 entered promiscuous mode [ 110.880753][ T4310] bond0: (slave bond2): interface is now down [ 110.901483][ T144] bond0: (slave bond2): interface is now down [ 110.909244][ T144] bond0: now running without any active interface! [ 110.942597][ T6263] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 111.554894][ T6299] device syzkaller0 entered promiscuous mode [ 111.786004][ T6310] device syzkaller0 entered promiscuous mode [ 111.823848][ T6310] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 112.721423][ T6354] device syzkaller0 entered promiscuous mode [ 112.757081][ T6359] (unnamed net_device) (uninitialized): option use_carrier: invalid value (76) [ 112.887238][ T6362] netlink: 68 bytes leftover after parsing attributes in process `syz.1.586'. [ 112.931368][ T6365] device syzkaller0 entered promiscuous mode [ 113.000304][ T6365] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 113.377178][ T6384] netlink: 4 bytes leftover after parsing attributes in process `syz.3.594'. [ 113.516150][ T6393] device syzkaller0 entered promiscuous mode [ 114.040840][ T6413] device syzkaller0 entered promiscuous mode [ 114.060839][ T6411] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 114.269438][ T6425] netlink: 8 bytes leftover after parsing attributes in process `syz.2.608'. [ 114.362642][ T6431] netlink: 4 bytes leftover after parsing attributes in process `syz.1.609'. [ 114.548948][ T6442] device syzkaller0 entered promiscuous mode [ 115.238506][ T6468] device syzkaller0 entered promiscuous mode [ 115.267334][ T6468] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 115.900161][ T6511] netlink: 4 bytes leftover after parsing attributes in process `syz.3.631'. [ 115.961185][ T6508] device syzkaller0 entered promiscuous mode [ 116.241535][ T6522] device syzkaller0 entered promiscuous mode [ 116.307578][ T6522] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 116.961811][ T6562] device syzkaller0 entered promiscuous mode [ 116.986485][ T6557] netlink: 4 bytes leftover after parsing attributes in process `syz.3.653'. [ 117.147232][ T6575] device syzkaller0 entered promiscuous mode [ 117.188869][ T6575] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 117.466018][ T6595] netlink: 20 bytes leftover after parsing attributes in process `syz.0.665'. [ 117.492386][ T6595] netlink: 'syz.0.665': attribute type 1 has an invalid length. [ 117.506609][ T6595] netlink: 12 bytes leftover after parsing attributes in process `syz.0.665'. [ 117.706463][ T6609] device syzkaller0 entered promiscuous mode [ 117.894736][ T6618] device syzkaller0 entered promiscuous mode [ 117.952832][ T6618] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 118.416669][ T6652] device syzkaller0 entered promiscuous mode [ 118.730465][ T6656] crypto_alloc_aead failed rc=-4 [ 118.787754][ T6674] device syzkaller0 entered promiscuous mode [ 118.944356][ T6677] netlink: 4 bytes leftover after parsing attributes in process `syz.1.692'. [ 118.960466][ T6687] device syzkaller0 entered promiscuous mode [ 118.987320][ T6687] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 119.181804][ T6705] netlink: 'syz.3.698': attribute type 1 has an invalid length. [ 119.242997][ T6709] netlink: 8 bytes leftover after parsing attributes in process `syz.2.699'. [ 119.258769][ T6708] bond4: (slave vxcan1): The slave device specified does not support setting the MAC address [ 119.347446][ T6708] bond4: (slave vxcan1): Error -22 calling dev_set_mtu [ 119.506773][ T6710] bond4: (slave gretap1): making interface the new active one [ 119.527868][ T6710] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 119.962422][ T6735] netlink: 12 bytes leftover after parsing attributes in process `syz.2.707'. [ 119.962506][ T6736] device syzkaller0 entered promiscuous mode [ 120.004294][ T6733] netlink: 388 bytes leftover after parsing attributes in process `syz.2.707'. [ 120.114693][ T6740] device syzkaller0 entered promiscuous mode [ 120.161484][ T6740] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 120.463978][ T6761] netlink: 4 bytes leftover after parsing attributes in process `syz.1.714'. [ 120.811120][ T6771] netlink: 20 bytes leftover after parsing attributes in process `syz.3.719'. [ 120.902788][ T6771] netlink: 20 bytes leftover after parsing attributes in process `syz.3.719'. [ 120.979449][ T6781] device syzkaller0 entered promiscuous mode [ 121.122270][ T6787] device syzkaller0 entered promiscuous mode [ 121.132475][ T6787] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 121.935186][ T6826] device syzkaller0 entered promiscuous mode [ 122.045368][ T6836] netlink: 4 bytes leftover after parsing attributes in process `syz.0.737'. [ 122.109521][ T6838] device syzkaller0 entered promiscuous mode [ 122.193032][ T6838] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 122.628828][ T6868] IPVS: ip_vs_add_dest(): server weight less than zero [ 122.790450][ T6875] device syzkaller0 entered promiscuous mode [ 122.822040][ T6877] netlink: 'syz.3.750': attribute type 10 has an invalid length. [ 122.847870][ T6877] netlink: 40 bytes leftover after parsing attributes in process `syz.3.750'. [ 122.890964][ T6877] device dummy0 entered promiscuous mode [ 122.898314][ T6877] bridge0: port 1(dummy0) entered blocking state [ 122.911321][ T6877] bridge0: port 1(dummy0) entered disabled state [ 122.919995][ T6877] bridge0: port 1(dummy0) entered blocking state [ 122.926426][ T6877] bridge0: port 1(dummy0) entered forwarding state [ 122.965096][ T6878] netlink: 4 bytes leftover after parsing attributes in process `syz.2.753'. [ 123.332304][ T6892] device syzkaller0 entered promiscuous mode [ 123.364688][ T6892] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 123.486533][ T6904] tipc: Enabling of bearer rejected, failed to enable media [ 123.785308][ T6917] device syzkaller0 entered promiscuous mode [ 124.178883][ T6942] netlink: 'syz.0.774': attribute type 39 has an invalid length. [ 124.280229][ T6938] netlink: 'syz.1.772': attribute type 21 has an invalid length. [ 124.364820][ T6949] device syzkaller0 entered promiscuous mode [ 124.435479][ T6949] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 124.746616][ T6972] device syzkaller0 entered promiscuous mode [ 125.252463][ T7004] device syzkaller0 entered promiscuous mode [ 125.260588][ T7006] device syzkaller0 entered promiscuous mode [ 125.269705][ T7004] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 125.467487][ T7016] device syzkaller0 entered promiscuous mode [ 125.587671][ T7025] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 125.781097][ T7045] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 125.954004][ T7051] netlink: 'syz.1.812': attribute type 12 has an invalid length. [ 125.995417][ T7051] netlink: 'syz.1.812': attribute type 29 has an invalid length. [ 126.017110][ T7051] netlink: 148 bytes leftover after parsing attributes in process `syz.1.812'. [ 126.169539][ T7062] device syzkaller0 entered promiscuous mode [ 126.188739][ T7062] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 126.222519][ T7068] device syzkaller0 entered promiscuous mode [ 126.395840][ T7075] device syzkaller0 entered promiscuous mode [ 126.687000][ T7085] netlink: 4 bytes leftover after parsing attributes in process `syz.2.824'. [ 127.184208][ T7118] device syzkaller0 entered promiscuous mode [ 127.260023][ T7126] device syzkaller0 entered promiscuous mode [ 127.269830][ T7126] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 127.303500][ T7079] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 127.537179][ T7135] device syzkaller0 entered promiscuous mode [ 127.650954][ T7141] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 127.840268][ T7151] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 128.178241][ T7166] tipc: Enabling of bearer rejected, failed to enable media [ 128.244095][ T7176] device syzkaller0 entered promiscuous mode [ 128.363331][ T7176] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 128.431860][ T7178] device syzkaller0 entered promiscuous mode [ 128.726804][ T7203] netlink: 64 bytes leftover after parsing attributes in process `syz.2.859'. [ 128.921828][ T7207] bridge0 speed is unknown, defaulting to 1000 [ 128.972850][ T7207] bridge0 speed is unknown, defaulting to 1000 [ 129.022189][ T7207] bridge0 speed is unknown, defaulting to 1000 [ 129.055642][ T7207] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 129.139801][ T7207] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 129.312364][ T7207] bridge0 speed is unknown, defaulting to 1000 [ 129.348133][ T7207] bridge0 speed is unknown, defaulting to 1000 [ 129.401726][ T7207] bridge0 speed is unknown, defaulting to 1000 [ 129.436296][ T7207] bridge0 speed is unknown, defaulting to 1000 [ 129.458940][ T7207] bridge0 speed is unknown, defaulting to 1000 [ 129.476401][ T7239] tipc: Enabling of bearer rejected, failed to enable media [ 129.516164][ T7239] device syzkaller0 entered promiscuous mode [ 129.565859][ T7239] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 129.627684][ T7207] bridge0 speed is unknown, defaulting to 1000 [ 129.634432][ T7245] netlink: 4 bytes leftover after parsing attributes in process `syz.2.870'. [ 129.676661][ T7207] bridge0 speed is unknown, defaulting to 1000 [ 129.679986][ T7250] device syzkaller0 entered promiscuous mode [ 129.963728][ T7262] netlink: 'syz.3.875': attribute type 10 has an invalid length. [ 130.038954][ T7262] netlink: 40 bytes leftover after parsing attributes in process `syz.3.875'. [ 130.358486][ T7289] netlink: 4 bytes leftover after parsing attributes in process `syz.0.883'. [ 130.495172][ T7291] tipc: Enabling of bearer rejected, failed to enable media [ 130.558349][ T7298] device syzkaller0 entered promiscuous mode [ 130.592907][ T7291] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 130.729344][ T7305] device syzkaller0 entered promiscuous mode [ 130.889956][ T7312] netlink: 12 bytes leftover after parsing attributes in process `syz.4.894'. [ 131.371571][ T7340] netlink: 4 bytes leftover after parsing attributes in process `syz.3.901'. [ 131.638221][ T7351] tipc: Enabling of bearer rejected, failed to enable media [ 131.655881][ T7351] device syzkaller0 entered promiscuous mode [ 131.708754][ T7351] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 131.785902][ T7357] tipc: Enabling of bearer rejected, failed to enable media [ 131.854982][ T7357] device syzkaller0 entered promiscuous mode [ 131.996223][ T7369] netlink: 9032 bytes leftover after parsing attributes in process `syz.2.913'. [ 132.702618][ T1429] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.708961][ T1429] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.876942][ T7406] tipc: Enabling of bearer rejected, failed to enable media [ 132.916843][ T7406] device syzkaller0 entered promiscuous mode [ 132.943206][ T7406] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 133.011048][ T7412] xt_CT: No such helper "syz0" [ 133.085529][ T7416] tipc: Enabling of bearer rejected, failed to enable media [ 133.128987][ T7416] device syzkaller0 entered promiscuous mode [ 134.026456][ T7457] tipc: Enabling of bearer rejected, failed to enable media [ 134.052704][ T7457] device syzkaller0 entered promiscuous mode [ 134.094268][ T7457] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 134.247085][ T7463] tipc: Enabling of bearer rejected, failed to enable media [ 134.258446][ T7463] device syzkaller0 entered promiscuous mode [ 134.706183][ T7479] device veth1_macvtap left promiscuous mode [ 134.868970][ T7486] netlink: 'syz.2.954': attribute type 1 has an invalid length. [ 134.921315][ T7490] tipc: Enabling of bearer rejected, failed to enable media [ 134.951545][ T7490] device syzkaller0 entered promiscuous mode [ 134.985045][ T7490] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 137.327505][ T7566] tipc: Enabled bearer , priority 0 [ 137.348628][ T7566] device syzkaller0 entered promiscuous mode [ 137.409709][ T7566] tipc: Resetting bearer [ 137.477081][ T7564] tipc: Resetting bearer [ 137.502760][ T7564] tipc: Disabling bearer [ 137.512033][ T7571] netlink: 'syz.4.983': attribute type 1 has an invalid length. [ 137.678753][ T7575] tipc: Enabling of bearer rejected, failed to enable media [ 137.698842][ T7575] device syzkaller0 entered promiscuous mode [ 137.729448][ T7575] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 137.812479][ T7577] tipc: Enabling of bearer rejected, failed to enable media [ 137.831392][ T7577] device syzkaller0 entered promiscuous mode [ 138.540570][ T7613] device syzkaller0 entered promiscuous mode [ 138.589615][ T7619] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 139.593728][ T7660] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1015'. [ 139.719125][ T7662] device syzkaller0 entered promiscuous mode [ 139.747086][ T7666] tipc: Enabling of bearer rejected, failed to enable media [ 139.779142][ T7662] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 139.788532][ T7666] device syzkaller0 entered promiscuous mode [ 139.900629][ T7671] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1018'. [ 140.053510][ T7679] netlink: 'syz.2.1022': attribute type 1 has an invalid length. [ 140.655929][ T7708] tipc: Enabling of bearer rejected, failed to enable media [ 140.732963][ T7708] device syzkaller0 entered promiscuous mode [ 140.938455][ T7721] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1034'. [ 141.058813][ T7724] device syzkaller0 entered promiscuous mode [ 141.454133][ T7741] bridge0 speed is unknown, defaulting to 1000 [ 141.834192][ T7754] device syzkaller0 entered promiscuous mode [ 141.843388][ T7756] device syzkaller0 entered promiscuous mode [ 142.077334][ T7760] device syzkaller0 entered promiscuous mode [ 142.103870][ T7760] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 142.515101][ T7783] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1060'. [ 142.645256][ T7787] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1061'. [ 142.783446][ T7791] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1062'. [ 142.847102][ T7794] device syzkaller0 entered promiscuous mode [ 143.002570][ T7796] device syzkaller0 entered promiscuous mode [ 143.489436][ T7816] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1074'. [ 143.576881][ T7814] bridge0 speed is unknown, defaulting to 1000 [ 144.195374][ T7837] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1077'. [ 144.490983][ T7842] tipc: Enabled bearer , priority 0 [ 144.497982][ T7844] device syzkaller0 entered promiscuous mode [ 144.579372][ T7842] tipc: Resetting bearer [ 144.614564][ T7848] device syzkaller0 entered promiscuous mode [ 144.677151][ T7841] tipc: Resetting bearer [ 144.727014][ T7841] tipc: Disabling bearer [ 144.928117][ T7855] device syzkaller0 entered promiscuous mode [ 145.048042][ T7859] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1085'. [ 145.118602][ T7862] bridge0 speed is unknown, defaulting to 1000 [ 145.679450][ T7877] device syzkaller0 entered promiscuous mode [ 145.751976][ T7874] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 146.253023][ T7889] device syzkaller0 entered promiscuous mode [ 146.304264][ T7893] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1099'. [ 146.466033][ T7899] device syzkaller0 entered promiscuous mode [ 146.510245][ T7897] device syzkaller0 entered promiscuous mode [ 146.549561][ T7897] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 146.990247][ T7920] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1110'. [ 147.021113][ T7920] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1110'. [ 147.051072][ T7923] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1110'. [ 147.103003][ T7923] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1110'. [ 147.146675][ T7925] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 147.363007][ T7933] device syzkaller0 entered promiscuous mode [ 147.429256][ T7937] tipc: Enabled bearer , priority 0 [ 147.484288][ T7937] device syzkaller0 entered promiscuous mode [ 147.515176][ T7936] tipc: Resetting bearer [ 147.560623][ T7941] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1119'. [ 147.577731][ T7936] tipc: Disabling bearer [ 147.594405][ T7939] tipc: Enabled bearer , priority 0 [ 147.608352][ T7942] device syzkaller0 entered promiscuous mode [ 147.677300][ T7939] tipc: Resetting bearer [ 147.716641][ T7938] tipc: Resetting bearer [ 147.761232][ T7938] tipc: Disabling bearer [ 148.072221][ T7960] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1126'. [ 148.526187][ T7977] tipc: Enabled bearer , priority 0 [ 148.601029][ T7979] device syzkaller0 entered promiscuous mode [ 148.668403][ T7976] tipc: Resetting bearer [ 148.737833][ T7976] tipc: Disabling bearer [ 148.982207][ T8001] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1136'. [ 149.070188][ T7996] bridge0 speed is unknown, defaulting to 1000 [ 149.122408][ T8005] netlink: 19 bytes leftover after parsing attributes in process `syz.1.1141'. [ 150.155499][ T8049] __nla_validate_parse: 1 callbacks suppressed [ 150.155517][ T8049] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1155'. [ 150.238298][ T8050] device syzkaller0 entered promiscuous mode [ 150.457626][ T8055] bridge0 speed is unknown, defaulting to 1000 [ 150.716569][ T8066] device syzkaller0 entered promiscuous mode [ 150.741950][ T8066] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 151.388638][ T8083] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1168'. [ 151.569047][ T8086] device syzkaller0 entered promiscuous mode [ 151.841407][ T8095] tipc: Enabled bearer , priority 0 [ 151.868410][ T8095] device syzkaller0 entered promiscuous mode [ 151.903063][ T8094] tipc: Resetting bearer [ 151.962049][ T8094] tipc: Disabling bearer [ 152.012153][ T8099] device syzkaller0 entered promiscuous mode [ 152.042550][ T8099] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 152.180190][ T8108] netlink: 204 bytes leftover after parsing attributes in process `syz.1.1178'. [ 152.346231][ T8111] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1179'. [ 152.460963][ T8124] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1181'. [ 152.653439][ T8130] device syzkaller0 entered promiscuous mode [ 152.676038][ T8131] bridge0 speed is unknown, defaulting to 1000 [ 153.463828][ T8148] tipc: Enabled bearer , priority 0 [ 153.481948][ T8148] device syzkaller0 entered promiscuous mode [ 153.542636][ T8147] tipc: Resetting bearer [ 153.590047][ T8147] tipc: Disabling bearer [ 153.635053][ T8153] device syzkaller0 entered promiscuous mode [ 153.673620][ T8153] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 153.863314][ T8165] device syzkaller0 entered promiscuous mode [ 154.147683][ T8173] tipc: Enabled bearer , priority 0 [ 154.190353][ T8173] device syzkaller0 entered promiscuous mode [ 154.254809][ T8173] tipc: Resetting bearer [ 154.307217][ T8185] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1202'. [ 154.391481][ T8170] tipc: Resetting bearer [ 154.448957][ T8170] tipc: Disabling bearer [ 154.499179][ T8188] tipc: Enabled bearer , priority 0 [ 154.521115][ T8176] bridge0 speed is unknown, defaulting to 1000 [ 154.531642][ T8188] device syzkaller0 entered promiscuous mode [ 154.582632][ T8186] tipc: Resetting bearer [ 154.640024][ T8186] tipc: Disabling bearer [ 154.677712][ T8194] device team_slave_0 entered promiscuous mode [ 154.684281][ T8194] device team_slave_1 entered promiscuous mode [ 154.711515][ T8194] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 155.032430][ T8200] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 155.126857][ T8210] device syzkaller0 entered promiscuous mode [ 155.134449][ T8210] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 155.426558][ T8221] device syzkaller0 entered promiscuous mode [ 155.640549][ T8234] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1217'. [ 155.822197][ T8242] tipc: Enabled bearer , priority 0 [ 155.868919][ T8242] device syzkaller0 entered promiscuous mode [ 156.024106][ T8240] tipc: Resetting bearer [ 156.099277][ T8240] tipc: Disabling bearer [ 156.114894][ T8254] device syzkaller0 entered promiscuous mode [ 156.261554][ T8262] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 156.352192][ T8268] device syzkaller0 entered promiscuous mode [ 156.735217][ T8290] device batadv0 entered promiscuous mode [ 156.750975][ T8290] device vlan2 entered promiscuous mode [ 156.817947][ T8285] bridge0 speed is unknown, defaulting to 1000 [ 156.846058][ T8288] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1236'. [ 157.072701][ T8304] tipc: Enabled bearer , priority 0 [ 157.086374][ T8304] device syzkaller0 entered promiscuous mode [ 157.110303][ T8302] tipc: Resetting bearer [ 157.177043][ T8302] tipc: Disabling bearer [ 157.225902][ T8310] device syzkaller0 entered promiscuous mode [ 157.419499][ T8313] device syzkaller0 entered promiscuous mode [ 157.440978][ T8315] Illegal XDP return value 4294967274, expect packet loss! [ 157.457254][ T8313] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 157.953820][ T8339] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1255'. [ 157.967153][ T8337] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1251'. [ 157.986656][ T8342] device syzkaller0 entered promiscuous mode [ 158.027381][ T8343] tipc: Enabled bearer , priority 0 [ 158.109969][ T8343] device syzkaller0 entered promiscuous mode [ 158.205094][ T8341] tipc: Resetting bearer [ 158.273042][ T8341] tipc: Disabling bearer [ 158.295905][ T8354] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1258'. [ 158.456148][ T8362] tipc: Enabled bearer , priority 0 [ 158.496498][ T8362] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 158.539813][ T8362] tipc: Resetting bearer [ 158.607597][ T8359] tipc: Disabling bearer [ 158.689509][ T8368] bridge0 speed is unknown, defaulting to 1000 [ 158.844336][ T8377] device syzkaller0 entered promiscuous mode [ 159.012009][ T8393] tipc: Enabled bearer , priority 0 [ 159.060988][ T8382] device syzkaller0 entered promiscuous mode [ 159.127003][ T8381] tipc: Resetting bearer [ 159.225942][ T8381] tipc: Disabling bearer [ 159.550986][ T8414] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 159.600852][ T8416] tipc: Enabled bearer , priority 0 [ 159.626860][ T8416] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 159.660458][ T8416] tipc: Resetting bearer [ 159.703522][ T8415] tipc: Disabling bearer [ 159.848322][ T8431] device syzkaller0 entered promiscuous mode [ 160.105472][ T8442] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1287'. [ 160.122795][ T8445] tipc: Enabled bearer , priority 0 [ 160.169411][ T8440] device syzkaller0 entered promiscuous mode [ 160.270895][ T8439] tipc: Resetting bearer [ 160.339572][ T8439] tipc: Disabling bearer [ 160.572597][ T8475] bridge0: port 1(dummy0) entered disabled state [ 160.633861][ T8474] tipc: Enabled bearer , priority 0 [ 160.676972][ T8474] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 160.719421][ T8482] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1300'. [ 160.770658][ T8474] tipc: Resetting bearer [ 160.795227][ T8473] tipc: Disabling bearer [ 161.006951][ T8494] device syzkaller0 entered promiscuous mode [ 161.302391][ T8513] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1312'. [ 161.366440][ T8515] tipc: Enabled bearer , priority 0 [ 161.384196][ T8515] device syzkaller0 entered promiscuous mode [ 161.421765][ T8514] tipc: Resetting bearer [ 161.479999][ T8514] tipc: Disabling bearer [ 161.606692][ T8522] ================================================================== [ 161.615135][ T8522] BUG: KASAN: use-after-free in ax25_unregister_dev_sysctl+0x33/0xa0 [ 161.623265][ T8522] Read of size 8 at addr ffff888022b8ec18 by task syz.1.1312/8522 [ 161.631087][ T8522] [ 161.633442][ T8522] CPU: 0 PID: 8522 Comm: syz.1.1312 Not tainted syzkaller #0 [ 161.641009][ T8522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 161.651099][ T8522] Call Trace: [ 161.654398][ T8522] [ 161.657543][ T8522] dump_stack_lvl+0x168/0x230 [ 161.662259][ T8522] ? show_regs_print_info+0x20/0x20 [ 161.667480][ T8522] ? _printk+0xcc/0x110 [ 161.671666][ T8522] ? load_image+0x3b0/0x3b0 [ 161.676196][ T8522] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 161.681595][ T8522] ? lock_chain_count+0x20/0x20 [ 161.686479][ T8522] print_address_description+0x60/0x2d0 [ 161.692062][ T8522] ? ax25_unregister_dev_sysctl+0x33/0xa0 [ 161.697813][ T8522] kasan_report+0xdf/0x130 [ 161.702257][ T8522] ? ax25_unregister_dev_sysctl+0x33/0xa0 [ 161.708012][ T8522] ax25_unregister_dev_sysctl+0x33/0xa0 [ 161.713580][ T8522] ax25_dev_device_down+0x5b/0x520 [ 161.718708][ T8522] ax25_device_event+0x4b4/0x4f0 [ 161.723658][ T8522] raw_notifier_call_chain+0xcb/0x160 [ 161.729042][ T8522] dev_close_many+0x28d/0x400 [ 161.733746][ T8522] ? _raw_spin_unlock+0x40/0x40 [ 161.738609][ T8522] ? __dev_open+0x420/0x420 [ 161.743122][ T8522] ? bond_netdev_event+0x159/0xea0 [ 161.748280][ T8522] ? try_to_del_timer_sync+0x165/0x1b0 [ 161.753747][ T8522] dev_close+0x14c/0x200 [ 161.757999][ T8522] ? __dev_close_many+0x2a0/0x2a0 [ 161.763035][ T8522] ? macvlan_device_event+0x10b/0x930 [ 161.768416][ T8522] bpq_device_event+0x2f4/0x9c0 [ 161.773267][ T8522] ? lockdep_rtnl_is_held+0x22/0x30 [ 161.778476][ T8522] ? team_device_event+0x11b/0x9e0 [ 161.783602][ T8522] raw_notifier_call_chain+0xcb/0x160 [ 161.788986][ T8522] dev_close_many+0x28d/0x400 [ 161.793672][ T8522] ? __dev_open+0x420/0x420 [ 161.798199][ T8522] ? lock_chain_count+0x20/0x20 [ 161.803055][ T8522] ? lockdep_hardirqs_on_prepare+0x760/0x760 [ 161.809044][ T8522] dev_close+0x14c/0x200 [ 161.813289][ T8522] ? __dev_close_many+0x2a0/0x2a0 [ 161.818316][ T8522] ? __local_bh_enable_ip+0x12a/0x1b0 [ 161.823692][ T8522] ? _local_bh_enable+0xa0/0xa0 [ 161.828543][ T8522] bond_setup_by_slave+0x61/0x3a0 [ 161.833571][ T8522] bond_enslave+0x77c/0x3a40 [ 161.838223][ T8522] ? __lock_acquire+0x13ad/0x7c60 [ 161.843256][ T8522] ? asm_sysvec_call_function_single+0x16/0x20 [ 161.849414][ T8522] ? lockdep_hardirqs_on+0x94/0x140 [ 161.854620][ T8522] ? bond_lower_state_changed+0x150/0x150 [ 161.860354][ T8522] ? apparmor_capable+0x12c/0x190 [ 161.865385][ T8522] ? bpf_lsm_capable+0x5/0x10 [ 161.870068][ T8522] ? full_name_hash+0x8e/0xe0 [ 161.874751][ T8522] bond_do_ioctl+0x2a2/0x8c0 [ 161.879346][ T8522] ? bond_eth_ioctl+0x200/0x200 [ 161.884206][ T8522] ? rcu_lock_acquire+0x30/0x30 [ 161.889060][ T8522] ? __mutex_lock_common+0x14ce/0x2390 [ 161.894528][ T8522] bond_siocdevprivate+0x13c/0x320 [ 161.899642][ T8522] ? __rwlock_init+0x140/0x140 [ 161.904399][ T8522] ? bond_do_ioctl+0x8c0/0x8c0 [ 161.909161][ T8522] ? do_raw_spin_unlock+0x11d/0x230 [ 161.914540][ T8522] ? __mutex_lock_common+0x14d8/0x2390 [ 161.920021][ T8522] ? full_name_hash+0x8e/0xe0 [ 161.924728][ T8522] dev_ifsioc+0xaf5/0xe70 [ 161.929080][ T8522] ? dev_ioctl+0x5e8/0xe50 [ 161.933514][ T8522] ? dev_ioctl+0xe50/0xe50 [ 161.937950][ T8522] ? full_name_hash+0x8e/0xe0 [ 161.942645][ T8522] dev_ioctl+0x5f9/0xe50 [ 161.946895][ T8522] ? get_user_ifreq+0xc7/0x170 [ 161.951664][ T8522] sock_ioctl+0x67b/0x6e0 [ 161.956004][ T8522] ? sock_poll+0x3f0/0x3f0 [ 161.960435][ T8522] ? bpf_lsm_file_ioctl+0x5/0x10 [ 161.965393][ T8522] ? security_file_ioctl+0x7c/0xa0 [ 161.970517][ T8522] ? sock_poll+0x3f0/0x3f0 [ 161.974944][ T8522] __se_sys_ioctl+0xfa/0x170 [ 161.979539][ T8522] do_syscall_64+0x4c/0xa0 [ 161.983959][ T8522] ? clear_bhb_loop+0x30/0x80 [ 161.988636][ T8522] ? clear_bhb_loop+0x30/0x80 [ 161.993319][ T8522] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 161.999228][ T8522] RIP: 0033:0x7fd4c2e19fc9 [ 162.003652][ T8522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.023261][ T8522] RSP: 002b:00007fd4c103f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 162.031684][ T8522] RAX: ffffffffffffffda RBX: 00007fd4c3071180 RCX: 00007fd4c2e19fc9 [ 162.039661][ T8522] RDX: 0000200000000180 RSI: 00000000000089f0 RDI: 0000000000000008 [ 162.047648][ T8522] RBP: 00007fd4c2e9cf91 R08: 0000000000000000 R09: 0000000000000000 [ 162.055619][ T8522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 162.063587][ T8522] R13: 00007fd4c3071218 R14: 00007fd4c3071180 R15: 00007fff5ffdc368 [ 162.071570][ T8522] [ 162.074587][ T8522] [ 162.076929][ T8522] Allocated by task 7899: [ 162.081249][ T8522] __kasan_kmalloc+0xb5/0xf0 [ 162.085843][ T8522] addr_event+0xc3/0x460 [ 162.090084][ T8522] inet6addr_event+0x9c/0xc0 [ 162.094667][ T8522] atomic_notifier_call_chain+0x15d/0x280 [ 162.100383][ T8522] ipv6_add_addr+0xb30/0xde0 [ 162.104976][ T8522] addrconf_add_linklocal+0x280/0x6b0 [ 162.110360][ T8522] addrconf_addr_gen+0x4ee/0x620 [ 162.115317][ T8522] addrconf_init_auto_addrs+0x6d5/0xa80 [ 162.120891][ T8522] addrconf_notify+0xa6b/0xf00 [ 162.125669][ T8522] raw_notifier_call_chain+0xcb/0x160 [ 162.131050][ T8522] __dev_notify_flags+0x178/0x2d0 [ 162.136082][ T8522] dev_change_flags+0xe3/0x1a0 [ 162.140846][ T8522] dev_ifsioc+0x147/0xe70 [ 162.145175][ T8522] dev_ioctl+0x55f/0xe50 [ 162.149417][ T8522] sock_do_ioctl+0x222/0x2f0 [ 162.154010][ T8522] sock_ioctl+0x4ed/0x6e0 [ 162.158343][ T8522] __se_sys_ioctl+0xfa/0x170 [ 162.162948][ T8522] do_syscall_64+0x4c/0xa0 [ 162.167362][ T8522] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 162.173382][ T8522] [ 162.175715][ T8522] Last potentially related work creation: [ 162.181425][ T8522] kasan_save_stack+0x35/0x60 [ 162.186105][ T8522] kasan_record_aux_stack+0xb8/0x100 [ 162.191388][ T8522] insert_work+0x54/0x3d0 [ 162.195710][ T8522] __queue_work+0x9c5/0xd50 [ 162.200209][ T8522] queue_work_on+0x11d/0x1d0 [ 162.204794][ T8522] inet6addr_event+0x9c/0xc0 [ 162.209387][ T8522] atomic_notifier_call_chain+0x15d/0x280 [ 162.215115][ T8522] ipv6_add_addr+0xb30/0xde0 [ 162.219705][ T8522] addrconf_add_linklocal+0x280/0x6b0 [ 162.225076][ T8522] addrconf_addr_gen+0x4ee/0x620 [ 162.230017][ T8522] addrconf_init_auto_addrs+0x6d5/0xa80 [ 162.235570][ T8522] addrconf_notify+0xa6b/0xf00 [ 162.240337][ T8522] raw_notifier_call_chain+0xcb/0x160 [ 162.245705][ T8522] __dev_notify_flags+0x178/0x2d0 [ 162.250730][ T8522] dev_change_flags+0xe3/0x1a0 [ 162.255495][ T8522] dev_ifsioc+0x147/0xe70 [ 162.259825][ T8522] dev_ioctl+0x55f/0xe50 [ 162.264071][ T8522] sock_do_ioctl+0x222/0x2f0 [ 162.268662][ T8522] sock_ioctl+0x4ed/0x6e0 [ 162.273004][ T8522] __se_sys_ioctl+0xfa/0x170 [ 162.277593][ T8522] do_syscall_64+0x4c/0xa0 [ 162.282000][ T8522] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 162.287887][ T8522] [ 162.290222][ T8522] Second to last potentially related work creation: [ 162.296796][ T8522] kasan_save_stack+0x35/0x60 [ 162.301468][ T8522] kasan_record_aux_stack+0xb8/0x100 [ 162.306751][ T8522] insert_work+0x54/0x3d0 [ 162.311094][ T8522] __queue_work+0x9c5/0xd50 [ 162.315616][ T8522] queue_work_on+0x11d/0x1d0 [ 162.320201][ T8522] inetaddr_event+0xe0/0x140 [ 162.324790][ T8522] blocking_notifier_call_chain+0x103/0x1b0 [ 162.330684][ T8522] __inet_insert_ifa+0x9e9/0xbc0 [ 162.335622][ T8522] inet_rtm_newaddr+0x940/0x1800 [ 162.340560][ T8522] rtnetlink_rcv_msg+0x9b9/0xe60 [ 162.345528][ T8522] netlink_rcv_skb+0x1e0/0x430 [ 162.350299][ T8522] netlink_unicast+0x774/0x920 [ 162.355063][ T8522] netlink_sendmsg+0x8ab/0xbc0 [ 162.359824][ T8522] __sys_sendto+0x423/0x580 [ 162.364326][ T8522] __x64_sys_sendto+0xda/0xf0 [ 162.368995][ T8522] do_syscall_64+0x4c/0xa0 [ 162.373407][ T8522] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 162.379393][ T8522] [ 162.381724][ T8522] The buggy address belongs to the object at ffff888022b8ec00 [ 162.381724][ T8522] which belongs to the cache kmalloc-192 of size 192 [ 162.395787][ T8522] The buggy address is located 24 bytes inside of [ 162.395787][ T8522] 192-byte region [ffff888022b8ec00, ffff888022b8ecc0) [ 162.408983][ T8522] The buggy address belongs to the page: [ 162.414619][ T8522] page:ffffea00008ae380 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888022b8ef00 pfn:0x22b8e [ 162.426070][ T8522] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 162.433622][ T8522] raw: 00fff00000000200 ffffea0000930e88 ffffea00009566c8 ffff888016841a00 [ 162.442205][ T8522] raw: ffff888022b8ef00 0000000000100008 00000001ffffffff 0000000000000000 [ 162.450788][ T8522] page dumped because: kasan: bad access detected [ 162.457200][ T8522] page_owner tracks the page as allocated [ 162.462904][ T8522] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12c00(GFP_NOIO|__GFP_NOWARN|__GFP_NORETRY), pid 1, ts 10721772607, free_ts 9005366326 [ 162.478452][ T8522] get_page_from_freelist+0x1b77/0x1c60 [ 162.484004][ T8522] __alloc_pages+0x1e1/0x470 [ 162.488594][ T8522] alloc_page_interleave+0x24/0x1e0 [ 162.493793][ T8522] new_slab+0xc0/0x4b0 [ 162.497863][ T8522] ___slab_alloc+0x81e/0xdf0 [ 162.502450][ T8522] __kmalloc+0x1cd/0x330 [ 162.506692][ T8522] usb_alloc_urb+0x3f/0x140 [ 162.511211][ T8522] usb_control_msg+0x115/0x3e0 [ 162.515977][ T8522] usb_get_status+0xe3/0x290 [ 162.520564][ T8522] hub_probe+0x1cb8/0x35e0 [ 162.524982][ T8522] usb_probe_interface+0x5a0/0xaf0 [ 162.530095][ T8522] really_probe+0x284/0xc80 [ 162.534599][ T8522] __driver_probe_device+0x18c/0x330 [ 162.539886][ T8522] driver_probe_device+0x4f/0x420 [ 162.544911][ T8522] __device_attach_driver+0x2b0/0x500 [ 162.550306][ T8522] bus_for_each_drv+0x175/0x200 [ 162.555156][ T8522] page last free stack trace: [ 162.559820][ T8522] free_unref_page_prepare+0x637/0x6c0 [ 162.565284][ T8522] free_unref_page+0x94/0x280 [ 162.569965][ T8522] __vunmap+0x8ab/0xa40 [ 162.574121][ T8522] free_work+0x56/0x80 [ 162.578191][ T8522] process_one_work+0x863/0x1000 [ 162.583130][ T8522] worker_thread+0xaa8/0x12a0 [ 162.587809][ T8522] kthread+0x436/0x520 [ 162.591886][ T8522] ret_from_fork+0x1f/0x30 [ 162.596304][ T8522] [ 162.598628][ T8522] Memory state around the buggy address: [ 162.604250][ T8522] ffff888022b8eb00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 162.612307][ T8522] ffff888022b8eb80: 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc [ 162.620363][ T8522] >ffff888022b8ec00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 162.628416][ T8522] ^ [ 162.633261][ T8522] ffff888022b8ec80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 162.641320][ T8522] ffff888022b8ed00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 162.649373][ T8522] ================================================================== [ 162.657429][ T8522] Disabling lock debugging due to kernel taint [ 162.695123][ T8522] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 162.702385][ T8522] CPU: 1 PID: 8522 Comm: syz.1.1312 Tainted: G B syzkaller #0 [ 162.711181][ T8522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 162.721252][ T8522] Call Trace: [ 162.724545][ T8522] [ 162.727481][ T8522] dump_stack_lvl+0x168/0x230 [ 162.732173][ T8522] ? show_regs_print_info+0x20/0x20 [ 162.737399][ T8522] ? load_image+0x3b0/0x3b0 [ 162.741929][ T8522] panic+0x2c9/0x7f0 [ 162.745861][ T8522] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 162.752046][ T8522] ? bpf_jit_dump+0xd0/0xd0 [ 162.756580][ T8522] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 162.762486][ T8522] ? _raw_spin_unlock+0x40/0x40 [ 162.767360][ T8522] ? ax25_unregister_dev_sysctl+0x33/0xa0 [ 162.773102][ T8522] check_panic_on_warn+0x80/0xa0 [ 162.778061][ T8522] ? ax25_unregister_dev_sysctl+0x33/0xa0 [ 162.783809][ T8522] end_report+0x6d/0xf0 [ 162.787978][ T8522] kasan_report+0x102/0x130 [ 162.792502][ T8522] ? ax25_unregister_dev_sysctl+0x33/0xa0 [ 162.798235][ T8522] ax25_unregister_dev_sysctl+0x33/0xa0 [ 162.803803][ T8522] ax25_dev_device_down+0x5b/0x520 [ 162.808942][ T8522] ax25_device_event+0x4b4/0x4f0 [ 162.813901][ T8522] raw_notifier_call_chain+0xcb/0x160 [ 162.819296][ T8522] dev_close_many+0x28d/0x400 [ 162.823995][ T8522] ? _raw_spin_unlock+0x40/0x40 [ 162.828864][ T8522] ? __dev_open+0x420/0x420 [ 162.833412][ T8522] ? bond_netdev_event+0x159/0xea0 [ 162.838543][ T8522] ? try_to_del_timer_sync+0x165/0x1b0 [ 162.844023][ T8522] dev_close+0x14c/0x200 [ 162.848293][ T8522] ? __dev_close_many+0x2a0/0x2a0 [ 162.853334][ T8522] ? macvlan_device_event+0x10b/0x930 [ 162.858733][ T8522] bpq_device_event+0x2f4/0x9c0 [ 162.863602][ T8522] ? lockdep_rtnl_is_held+0x22/0x30 [ 162.868822][ T8522] ? team_device_event+0x11b/0x9e0 [ 162.873973][ T8522] raw_notifier_call_chain+0xcb/0x160 [ 162.879391][ T8522] dev_close_many+0x28d/0x400 [ 162.884102][ T8522] ? __dev_open+0x420/0x420 [ 162.888624][ T8522] ? lock_chain_count+0x20/0x20 [ 162.893511][ T8522] ? lockdep_hardirqs_on_prepare+0x760/0x760 [ 162.899515][ T8522] dev_close+0x14c/0x200 [ 162.903780][ T8522] ? __dev_close_many+0x2a0/0x2a0 [ 162.908833][ T8522] ? __local_bh_enable_ip+0x12a/0x1b0 [ 162.914226][ T8522] ? _local_bh_enable+0xa0/0xa0 [ 162.919114][ T8522] bond_setup_by_slave+0x61/0x3a0 [ 162.924161][ T8522] bond_enslave+0x77c/0x3a40 [ 162.928797][ T8522] ? __lock_acquire+0x13ad/0x7c60 [ 162.933838][ T8522] ? asm_sysvec_call_function_single+0x16/0x20 [ 162.939985][ T8522] ? lockdep_hardirqs_on+0x94/0x140 [ 162.945186][ T8522] ? bond_lower_state_changed+0x150/0x150 [ 162.950937][ T8522] ? apparmor_capable+0x12c/0x190 [ 162.955975][ T8522] ? bpf_lsm_capable+0x5/0x10 [ 162.960779][ T8522] ? full_name_hash+0x8e/0xe0 [ 162.965456][ T8522] bond_do_ioctl+0x2a2/0x8c0 [ 162.970057][ T8522] ? bond_eth_ioctl+0x200/0x200 [ 162.974912][ T8522] ? rcu_lock_acquire+0x30/0x30 [ 162.979778][ T8522] ? __mutex_lock_common+0x14ce/0x2390 [ 162.985268][ T8522] bond_siocdevprivate+0x13c/0x320 [ 162.990380][ T8522] ? __rwlock_init+0x140/0x140 [ 162.995147][ T8522] ? bond_do_ioctl+0x8c0/0x8c0 [ 162.999921][ T8522] ? do_raw_spin_unlock+0x11d/0x230 [ 163.005118][ T8522] ? __mutex_lock_common+0x14d8/0x2390 [ 163.010581][ T8522] ? full_name_hash+0x8e/0xe0 [ 163.015269][ T8522] dev_ifsioc+0xaf5/0xe70 [ 163.019597][ T8522] ? dev_ioctl+0x5e8/0xe50 [ 163.024027][ T8522] ? dev_ioctl+0xe50/0xe50 [ 163.028454][ T8522] ? full_name_hash+0x8e/0xe0 [ 163.033161][ T8522] dev_ioctl+0x5f9/0xe50 [ 163.037408][ T8522] ? get_user_ifreq+0xc7/0x170 [ 163.042220][ T8522] sock_ioctl+0x67b/0x6e0 [ 163.046544][ T8522] ? sock_poll+0x3f0/0x3f0 [ 163.050964][ T8522] ? bpf_lsm_file_ioctl+0x5/0x10 [ 163.055921][ T8522] ? security_file_ioctl+0x7c/0xa0 [ 163.061035][ T8522] ? sock_poll+0x3f0/0x3f0 [ 163.065450][ T8522] __se_sys_ioctl+0xfa/0x170 [ 163.070113][ T8522] do_syscall_64+0x4c/0xa0 [ 163.074533][ T8522] ? clear_bhb_loop+0x30/0x80 [ 163.079206][ T8522] ? clear_bhb_loop+0x30/0x80 [ 163.083903][ T8522] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 163.089787][ T8522] RIP: 0033:0x7fd4c2e19fc9 [ 163.094218][ T8522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.113904][ T8522] RSP: 002b:00007fd4c103f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 163.122312][ T8522] RAX: ffffffffffffffda RBX: 00007fd4c3071180 RCX: 00007fd4c2e19fc9 [ 163.130300][ T8522] RDX: 0000200000000180 RSI: 00000000000089f0 RDI: 0000000000000008 [ 163.138368][ T8522] RBP: 00007fd4c2e9cf91 R08: 0000000000000000 R09: 0000000000000000 [ 163.146333][ T8522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 163.154301][ T8522] R13: 00007fd4c3071218 R14: 00007fd4c3071180 R15: 00007fff5ffdc368 [ 163.162289][ T8522] [ 163.165588][ T8522] Kernel Offset: disabled [ 163.169921][ T8522] Rebooting in 86400 seconds..