last executing test programs: 2.262557553s ago: executing program 1 (id=313): r0 = socket(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'hsr0\x00', 0x0}) sendto$packet(r0, &(0x7f00000005c0)="01154e000100001198e52a271753221e44541a", 0x13, 0x0, &(0x7f0000000040)={0x11, 0x2, r1, 0x0, 0xfa, 0x0}, 0x14) 2.078408362s ago: executing program 1 (id=317): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xd, 0x20000000ec071, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000002b40)='cubic', 0x4) setsockopt$inet6_int(r1, 0x29, 0x2, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0xffffffff) socketpair(0x28, 0xa, 0x6, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, 0x4, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x801}, 0x804) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000100)={0x8, 'ip6tnl0\x00', {'bond_slave_1\x00'}, 0xb7f8}) sendto(r2, 0x0, 0x0, 0x20000818, &(0x7f00000002c0)=@in={0x2, 0x4e24, @local}, 0x80) bind$inet(r2, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e26, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=ANY=[@ANYBLOB="8c02000016000100000000000000000000000000000000000000000000000000fc0200000000000000000000000000004e2000"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000010000000000000010000000000000000400000000000000050000000000000007000000000000000100000000000000c300000000000000810000000000000002000000000000000100000001000000ff0100000000000000000000060000000100000300000000"], 0x28c}, 0x1, 0x0, 0x0, 0x81}, 0x4000080) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)={0x14, 0x19, 0xa, 0x201}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x8004) socket$inet_smc(0x2b, 0x1, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) r7 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000000)=0x4, 0x4) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) recvmsg(r7, &(0x7f0000002c00)={&(0x7f0000000180)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, 0x0, 0x0, &(0x7f0000001c00)=""/4096, 0x1000}, 0x1) r9 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r9, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r9, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) 1.772315406s ago: executing program 4 (id=318): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x4040) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000540)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b000000080000000c000000000000800100"], 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24008000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000b48b00107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xb, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r3, r5, 0x25, 0x4, @void}, 0x10) write$tun(r0, &(0x7f00000007c0)=ANY=[], 0xfdef) 1.525825678s ago: executing program 2 (id=321): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e1d, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}, 0x2}, 0x1c) syz_emit_ethernet(0xd2, &(0x7f0000000080)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x9c, 0x11, 0xff, @ipv4={'\x00', '\xff\xff', @empty}, @ipv4={'\x00', '\xff\xff', @loopback}, {[], {0x4e1d, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "23e9c9deda338979d8aafa218a85ed0c5cdf78391bc64d12a442bcdca77342a7", "cb0b84a64d44a90afd90d33713c8792e3156421571fe4de6e519b8991b03f90d2bec50f39198a18c9bd00c5228583fff", "205ef49af51093c7134f946c11d7837f0f4287d5d382a32604dbffe6", {"56e8cb6783b1a334408278736e8139d2", "e4be21420396daec7200"}}}}}}}}, 0x0) 1.354574746s ago: executing program 4 (id=323): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r2, {0x4}, {0xffff, 0xffff}, {0xe, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x24048881}, 0x4000080) 1.351189796s ago: executing program 1 (id=324): close(0x3) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0a00000004000000080000000a"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) close(r1) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x1, 0x100, 0x0, 0x0, 0x3b8000, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000611800000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000150802000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) 1.294160579s ago: executing program 3 (id=326): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000001480), 0x2, 0x0) ioctl$XFS_IOC_COMMIT_RANGE(r0, 0x40585883, &(0x7f00000014c0)={0xffffffffffffffff, 0x0, 0x3, 0x7fff, 0x80000001, 0x1, [0xdded, 0x7, 0xffffffff9b8c001c, 0x401, 0xffffffffffffffff, 0xc0]}) 1.293592399s ago: executing program 2 (id=327): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036000000180100006420002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r1, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x32, &(0x7f00000001c0)={@local, @random="facfff00716e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x26, 0x24, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x3}}}}}}}, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000240)={@link_local, @random="4bb7e00d2cac", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x100, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x1c, 0x0, @opaque="acbc8e44b8817e42f60614d9e490b8c4f3e29d0a"}}}}}, 0x0) 1.154437105s ago: executing program 2 (id=328): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x20040004) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r6 = socket$kcm(0x11, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r10, {0xf000, 0xffff}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008884}, 0x20000800) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$kcm(r6, &(0x7f0000002900)={&(0x7f0000000340)=@xdp={0x2c, 0x8, r4, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000280)="6b46afbe0e", 0x5}], 0x1}, 0x20000885) 1.153929145s ago: executing program 4 (id=329): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xfffffffffffffd1c, 0x2, [@TCA_PIE_BETA={0x8}]}}]}, 0x38}}, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab08", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r5, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r6}, &(0x7f0000000000), &(0x7f0000000040)=r7}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) 1.153405785s ago: executing program 1 (id=331): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x1, 0x6, 0x10}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000118110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000004000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40241, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 1.05498165s ago: executing program 3 (id=333): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffb, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) 939.359266ms ago: executing program 1 (id=335): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001"], 0x19) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000000)=""/48}, 0x20) r1 = socket$inet6(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newlink={0x40, 0x10, 0x439, 0x70bd27, 0x4000, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000010000000000000060018200000", @ANYRES32=r2, @ANYBLOB="0000000007000000c30009400000000095"], &(0x7f00000002c0)='syzkaller\x00', 0xc, 0xdf, &(0x7f0000001400)=""/223, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x94) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x3a, &(0x7f0000002100)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data}}}}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, 0x0, 0x80) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, &(0x7f00000000c0)=0xac3a, 0x4) r4 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000180)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x33, 0xffff5257, 0x9, 0x100, 0x7, 0x0, 0x400, 0x3, 0xffff7fff}}) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r5, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014) listen(r5, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r6, 0x29, 0x1a, &(0x7f0000001040)=0x2a9, 0x4) 939.096836ms ago: executing program 0 (id=336): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4d}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x2f}]}}}, {0x30, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x10, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa, 0x1, "910d00000000"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CMP_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x104}, 0x1, 0x0, 0x0, 0x180}, 0x0) 938.828136ms ago: executing program 4 (id=337): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newroute={0x30, 0x18, 0x401, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, 0xfe, 0x2, 0x0, 0x1}, [@RTA_GATEWAY={0x14, 0x5, @mcast1}]}, 0x30}}, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 882.423438ms ago: executing program 3 (id=338): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x7ff}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={0xffffffffffffffff, 0x0, &(0x7f0000000340)=""/89}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@map=r1, 0x35, 0x0, 0x1, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000002c0)={0x7, 0x0}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@cgroup=r1, 0xffffffffffffffff, 0x34, 0x2029, r1, @void, @void, @value=r4, @void, r3}, 0x20) unshare(0x600) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215, 0x100000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}, 0x1, 0xba01}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xb0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x88, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x50, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x4}, @NFTA_BITWISE_DATA={0x1c, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x15, 0x1, "24200b84ca94c1ce064081bec78e3cb2ed"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x124}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x8, r6, 0x1, 0xf9, 0x6, @multicast}, 0x14) 797.392262ms ago: executing program 0 (id=339): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb25210000001f000300", @ANYRES32=r2, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000) 737.502435ms ago: executing program 3 (id=340): syz_emit_ethernet(0x62, &(0x7f0000000440)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x10, 0x2, 0xfffe, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x7, 0xf989, "4f46b5"}, @sack={0x5, 0xe, [0x394, 0x6, 0x6]}, @exp_smc={0xfe, 0x6}, @sack={0x5, 0xe, [0x5, 0x95, 0x5]}]}}}}}}}, 0x0) 685.066107ms ago: executing program 2 (id=341): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000340), &(0x7f000001f200)=0x4) 546.587984ms ago: executing program 4 (id=342): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001040)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r1, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c8f0}, 0x4890) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f00000005c0)="bad330fbc93f8b78040000ea0756a85d86", 0x11, 0x4041, &(0x7f00000001c0)={0x11, 0xfdea2eae72344f2f, r1, 0x1, 0xd8, 0x6, @multicast}, 0x14) 546.125824ms ago: executing program 0 (id=343): r0 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$XFS_IOC_COMMIT_RANGE(r0, 0x40585883, &(0x7f00000014c0)={0xffffffffffffffff, 0x0, 0x3, 0x7fff, 0x80000001, 0x1, [0xdded, 0x7, 0xffffffff9b8c001c, 0x401, 0xffffffffffffffff, 0xc0]}) 545.812194ms ago: executing program 3 (id=344): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/mnt\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, r1, 0x411, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x40000) 490.137576ms ago: executing program 0 (id=345): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x6, 0x5}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0xcc, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x9c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x88, 0x9, 0x0, 0x1, [@m_csum={0x84, 0x1, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x8, 0x1, 0x3}, 0x20}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x9, 0x6, 0xf9e, 0x56}, 0x1a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xfffffffa, 0x2, 0x7, 0x0, 0x2}, 0x12}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0007000024c1020000ff3207c2fb7fe0406e52534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 426.35191ms ago: executing program 3 (id=346): r0 = socket$inet6(0xa, 0x3, 0x5) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r7 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000880)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xffffb29d, 0x8001, 0xd1ad045825a3ada6, 0x4, 0x7}, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, 0x0, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r4, &(0x7f0000000500)=ANY=[@ANYBLOB="000008004500001c000100004001"], 0xfdef) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r2, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x6, 0x3}, 0x10) bind$tipc(r1, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x1b8, 0x2e8, 0x2e8, 0x1b8, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0xf8, 0x118, 0x0, {0x0, 0x2000000000000}}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TEE={0x0, 'TEE\x00', 0x1, {@ipv6=@ipv4={'\x00', '\xff\xff', @loopback}, 'bond0\x00', {0x3}}}}], {{'\x00', 0x0, 0x105, 0xd0}, {0x28}}}}, 0x366) 334.554104ms ago: executing program 2 (id=347): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x1a0, 0x270, 0xffffffff, 0xffffffff, 0xd0, 0x1a0, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1a0}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) syz_emit_ethernet(0x66, &(0x7f00000000c0)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x30, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "f19f00", 0x0, 0x0, 0x0, @private1, @private2}}}}}}}, 0x0) 201.04545ms ago: executing program 0 (id=348): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x1, 0x60000000, 0xc}, {@rand_addr=0x64010106, 0x4e26, 0x3, 0x0, 0x80008001, 0x1}}, 0x44) 130.763893ms ago: executing program 2 (id=349): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x5e25, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x400ad80, &(0x7f0000000080)={0xa, 0x4c24, 0x78a2, @dev={0xfe, 0x80, '\x00', 0x22}}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='pids.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) sendmmsg$inet6(r0, &(0x7f0000006780)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="b3ab706204ee39c9dae21a1718ee351ebc92d2f0d482a863ae5c0b4d768ffe745af2c53a083d9b761b", 0xfff7}], 0x11, 0x0, 0x0, 0x11000000}, 0xb00}], 0x1, 0x0) 62.597217ms ago: executing program 4 (id=350): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a090500ff33e6a2bb0000020000000900020073007a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x44) 62.274577ms ago: executing program 0 (id=351): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000022c0)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x60000000, 0xffffffffffffffff, 0x1, 0x7}, 0x2, r3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 0s ago: executing program 1 (id=352): syz_emit_ethernet(0x56, &(0x7f0000000140)={@local, @remote, @val={@void, {0x8100, 0x5, 0x0, 0x3}}, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x5, 0x0, @dev={0xac, 0x14, 0x14, 0x32}, @dev={0xac, 0x14, 0x14, 0x41}, {[@timestamp_addr={0x44, 0x14, 0x5, 0x3, 0x0, [{@broadcast}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfa9}]}, @lsrr={0x83, 0x7, 0xd3, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @end]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0xfffd}}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000100001082cbd7000ffffffff01000000", @ANYRES32=0x0, @ANYBLOB="fffe0100010000"], 0x28}}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r1, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/25, 0x19}}, {{&(0x7f0000000340)=@alg, 0x80, &(0x7f0000000900)=[{&(0x7f0000000440)=""/79, 0x4f}, {&(0x7f00000005c0)=""/245, 0xf5}, {&(0x7f00000006c0)=""/153, 0x99}, {&(0x7f0000000780)=""/131, 0x83}, {&(0x7f0000000840)=""/131, 0x83}], 0x5, &(0x7f0000000980)=""/74, 0x4a}, 0x100}], 0x2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000014c0)=ANY=[@ANYBLOB="2000000010003904000800006ca1288986e7ec2e", @ANYRES32=0x0, @ANYBLOB="0958010000000000"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r2, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0xc}, 0x10) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000400)={0x0, 0x186a0}, 0x10) connect$llc(r2, &(0x7f0000000100)={0x1a, 0x1, 0x0, 0x0, 0x0, 0xc, @remote}, 0x10) syz_emit_ethernet(0x11, &(0x7f0000000200)={@local, @remote, @void, {@llc={0x4, {@llc={0xc, 0xd, 's'}}}}}, 0x0) syz_emit_ethernet(0x11, &(0x7f0000000300)={@local, @remote, @void, {@llc={0x4, {@llc={0xc, 0xd, 's'}}}}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) r4 = socket(0x15, 0x80005, 0x0) getsockopt(r4, 0x200000000114, 0x271a, 0xffffffffffffffff, &(0x7f0000000000)=0x7ffff000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @mss={0x2, 0xb}, @mss, @window={0x3, 0x6, 0xff81}, @timestamp, @timestamp, @sack_perm, @window={0x3, 0x800, 0x5}], 0x8) sendto$inet(r5, &(0x7f0000000000)="b8", 0x1, 0x2400a044, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r5, &(0x7f0000000380)='x', 0x1, 0x480c1, 0x0, 0x0) r6 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r6, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x810, 0x0, 0x0) setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f0000000080)=0x1, 0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.108' (ED25519) to the list of known hosts. [ 61.405423][ T4171] cgroup: Unknown subsys name 'net' [ 61.516296][ T4171] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 62.995267][ T4171] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 65.141788][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 65.268461][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 65.287043][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.296680][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.305689][ T4194] device bridge_slave_0 entered promiscuous mode [ 65.318699][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.325956][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.334693][ T4194] device bridge_slave_1 entered promiscuous mode [ 65.345749][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 65.378358][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 65.421665][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 65.437827][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.477478][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.523797][ T4194] team0: Port device team_slave_0 added [ 65.535341][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.542599][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.550944][ T4185] device bridge_slave_0 entered promiscuous mode [ 65.564325][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.571767][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.579876][ T4185] device bridge_slave_1 entered promiscuous mode [ 65.602233][ T4194] team0: Port device team_slave_1 added [ 65.649339][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.656441][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.682892][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.701718][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.711066][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.718165][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.726986][ T4184] device bridge_slave_0 entered promiscuous mode [ 65.741913][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.748904][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.775046][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.794848][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.804314][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.811915][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.819793][ T4184] device bridge_slave_1 entered promiscuous mode [ 65.858908][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.866159][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.874506][ T4186] device bridge_slave_0 entered promiscuous mode [ 65.890659][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.897766][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.906375][ T4189] device bridge_slave_0 entered promiscuous mode [ 65.928708][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.936008][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.944643][ T4186] device bridge_slave_1 entered promiscuous mode [ 65.958928][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.966322][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.974849][ T4189] device bridge_slave_1 entered promiscuous mode [ 65.984613][ T4185] team0: Port device team_slave_0 added [ 65.992724][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.013473][ T4194] device hsr_slave_0 entered promiscuous mode [ 66.024504][ T4194] device hsr_slave_1 entered promiscuous mode [ 66.039013][ T4185] team0: Port device team_slave_1 added [ 66.046813][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.084778][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.105546][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.115202][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.123432][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.149619][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.168220][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.176144][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.202420][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.215568][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.246750][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.279839][ T4184] team0: Port device team_slave_0 added [ 66.312420][ T4186] team0: Port device team_slave_0 added [ 66.323935][ T4184] team0: Port device team_slave_1 added [ 66.339107][ T4189] team0: Port device team_slave_0 added [ 66.351134][ T4186] team0: Port device team_slave_1 added [ 66.370573][ T4189] team0: Port device team_slave_1 added [ 66.379624][ T4185] device hsr_slave_0 entered promiscuous mode [ 66.387103][ T4185] device hsr_slave_1 entered promiscuous mode [ 66.393923][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.402113][ T4185] Cannot create hsr debugfs directory [ 66.434956][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.442483][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.468732][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.511056][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.518052][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.544231][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.576628][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.584242][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.610325][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.622626][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.629631][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.656183][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.674647][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.682381][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.708463][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.724290][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.731506][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.757604][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.838772][ T4184] device hsr_slave_0 entered promiscuous mode [ 66.845840][ T4184] device hsr_slave_1 entered promiscuous mode [ 66.852733][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.860392][ T4184] Cannot create hsr debugfs directory [ 66.889821][ T4189] device hsr_slave_0 entered promiscuous mode [ 66.897184][ T13] Bluetooth: hci1: command 0x0409 tx timeout [ 66.900499][ T23] Bluetooth: hci4: command 0x0409 tx timeout [ 66.905389][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 66.909776][ T23] Bluetooth: hci3: command 0x0409 tx timeout [ 66.922260][ T23] Bluetooth: hci0: command 0x0409 tx timeout [ 66.929897][ T4189] device hsr_slave_1 entered promiscuous mode [ 66.936845][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.944676][ T4189] Cannot create hsr debugfs directory [ 66.962130][ T4186] device hsr_slave_0 entered promiscuous mode [ 66.969149][ T4186] device hsr_slave_1 entered promiscuous mode [ 66.976021][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.984340][ T4186] Cannot create hsr debugfs directory [ 67.215170][ T4194] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 67.232052][ T4194] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 67.245670][ T4194] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 67.263685][ T4194] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 67.317587][ T4185] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 67.330818][ T4185] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 67.357647][ T4185] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 67.366954][ T4185] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 67.415213][ T4189] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 67.425610][ T4189] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 67.462948][ T4189] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 67.478240][ T4189] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 67.490376][ T4184] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.516476][ T4184] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.536011][ T4184] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.546619][ T4184] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.568132][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.619095][ T4186] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 67.635995][ T4186] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 67.654404][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.668742][ T4186] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 67.678575][ T4186] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 67.694590][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.704952][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.715591][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.725078][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.736222][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.743632][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.770529][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.787115][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.800849][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.809306][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.816465][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.863056][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.883578][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.913905][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.928162][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.937998][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.948195][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.957369][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.967416][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.977125][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.988283][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.007178][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.016320][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.039696][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.052539][ T4194] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.066338][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.077970][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.086979][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.095735][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.103983][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.112728][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.121485][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.129961][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.138841][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.150680][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.163760][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.192299][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.208193][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.217189][ T304] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.224334][ T304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.234561][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.244725][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.257993][ T304] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.265153][ T304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.280262][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.289214][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.299086][ T304] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.306219][ T304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.315815][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.324086][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.339073][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.373466][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.387174][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.399579][ T4232] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.406738][ T4232] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.422043][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.432597][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.446005][ T4232] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.453216][ T4232] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.465734][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.474660][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.483839][ T4232] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.491009][ T4232] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.499055][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.508230][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.517566][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.526727][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.535822][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.549988][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.558222][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.566948][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.576558][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.608145][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.617022][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.637990][ T4184] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 68.649238][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.670883][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.679961][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.689627][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.701081][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.709505][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.719788][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.729318][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.739286][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.748513][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.758266][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.765925][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.782646][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.813563][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.825642][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.842695][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.852245][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.868405][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.877418][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.888485][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.899871][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.908439][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.925554][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.934925][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.944379][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.953903][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.969332][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.979035][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.981611][ T4235] Bluetooth: hci0: command 0x041b tx timeout [ 69.002518][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.018842][ T4235] Bluetooth: hci3: command 0x041b tx timeout [ 69.025980][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.038962][ T4235] Bluetooth: hci2: command 0x041b tx timeout [ 69.048877][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.056530][ T4235] Bluetooth: hci4: command 0x041b tx timeout [ 69.069680][ T4235] Bluetooth: hci1: command 0x041b tx timeout [ 69.078875][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.093343][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.117288][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.167729][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.181796][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.189844][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.205976][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.226382][ T4194] device veth0_vlan entered promiscuous mode [ 69.238775][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.260573][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.277967][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.287541][ T304] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.294718][ T304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.304055][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.313378][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.322028][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.331055][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.339627][ T304] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.346779][ T304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.355407][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.365369][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.381019][ T4194] device veth1_vlan entered promiscuous mode [ 69.415826][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.427728][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.437020][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.447094][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.457136][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.467350][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.476989][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.487143][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.496421][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.505526][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.534509][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.558934][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.570822][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.579474][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.588737][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.598368][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.607269][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.655511][ T4184] device veth0_vlan entered promiscuous mode [ 69.665900][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.677937][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.686464][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.694538][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.702533][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.711729][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.726185][ T4194] device veth0_macvtap entered promiscuous mode [ 69.738555][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.752363][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.771102][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.781965][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.792437][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.802411][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.813860][ T4194] device veth1_macvtap entered promiscuous mode [ 69.823392][ T4184] device veth1_vlan entered promiscuous mode [ 69.851088][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.859978][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.869241][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.889678][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.915677][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.926896][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.947484][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.957699][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.967128][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.976319][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.998028][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.007058][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.016519][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.028524][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.054404][ T4184] device veth0_macvtap entered promiscuous mode [ 70.064009][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.073448][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.086597][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.101407][ T4194] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.111021][ T4194] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.119836][ T4194] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.129766][ T4194] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.145593][ T4184] device veth1_macvtap entered promiscuous mode [ 70.156834][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.166206][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.177541][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.186624][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.194326][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.201949][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.209832][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.234816][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.242601][ T4189] device veth0_vlan entered promiscuous mode [ 70.260218][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.268587][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.285580][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.299085][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.311647][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.322005][ T4185] device veth0_vlan entered promiscuous mode [ 70.364506][ T4189] device veth1_vlan entered promiscuous mode [ 70.381404][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.391638][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.399547][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.408775][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.418186][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.438253][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.449077][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.460720][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.482545][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.505204][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.520913][ T4185] device veth1_vlan entered promiscuous mode [ 70.549153][ T4184] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.564073][ T4184] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.577477][ T4184] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.590282][ T4184] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.623610][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.638643][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.662062][ T4189] device veth0_macvtap entered promiscuous mode [ 70.701519][ T4189] device veth1_macvtap entered promiscuous mode [ 70.757919][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.771884][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.787141][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.797970][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.808172][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.819462][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.831823][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.845658][ T4185] device veth0_macvtap entered promiscuous mode [ 70.853002][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.861662][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.869793][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.878716][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.888120][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.897770][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.907370][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.916515][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.948666][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.959882][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.969901][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.981162][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.992623][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.006621][ T4189] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.016523][ T4189] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.025439][ T4189] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.034743][ T4189] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.050729][ T4234] Bluetooth: hci3: command 0x040f tx timeout [ 71.057114][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.065243][ T4234] Bluetooth: hci0: command 0x040f tx timeout [ 71.076805][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.086480][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.095693][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.113820][ T4185] device veth1_macvtap entered promiscuous mode [ 71.141057][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.141075][ T4234] Bluetooth: hci1: command 0x040f tx timeout [ 71.150467][ T4234] Bluetooth: hci4: command 0x040f tx timeout [ 71.156521][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.176566][ T4186] device veth0_vlan entered promiscuous mode [ 71.187595][ T4234] Bluetooth: hci2: command 0x040f tx timeout [ 71.214325][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.223170][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.241418][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.249980][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.259589][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.268022][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.283231][ T4253] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.285095][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.300829][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.307370][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.310220][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.338087][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.350686][ T4253] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.359545][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.369618][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.381641][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.391584][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.402129][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.418957][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.435377][ T4186] device veth1_vlan entered promiscuous mode [ 71.443488][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.464619][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.476458][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.484850][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.493615][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.522200][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.535630][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.548734][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.559346][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.570393][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.582725][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.594996][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.643024][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.659107][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.679035][ T4185] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.688573][ T4185] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.700012][ T4185] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.709234][ T4185] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.741907][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.749776][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.761736][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.794226][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.811737][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.823896][ T4186] device veth0_macvtap entered promiscuous mode [ 71.875284][ T4186] device veth1_macvtap entered promiscuous mode [ 71.913759][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.923927][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.944890][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.956247][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.965392][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.980460][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.998318][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.009452][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.021456][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.041154][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.056683][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.068201][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.084792][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.097369][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.126168][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.148244][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.163135][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.184349][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.197583][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.218221][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.255003][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.281223][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.301433][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.329416][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.359993][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.375019][ T4281] x_tables: duplicate entry at hook 2 [ 72.394643][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.403012][ T4281] x_tables: duplicate underflow at hook 3 [ 72.424636][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.447406][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.457273][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.469366][ T4186] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.498283][ T4186] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.521817][ T4186] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.531779][ T4186] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.547819][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.618705][ T304] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.657392][ T304] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.685386][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.810469][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.818376][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.847998][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.874613][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.908557][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.924135][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.979397][ T4288] FAULT_INJECTION: forcing a failure. [ 72.979397][ T4288] name fail_futex, interval 1, probability 0, space 0, times 1 [ 73.033189][ T4288] CPU: 1 PID: 4288 Comm: syz.1.2 Not tainted syzkaller #0 [ 73.040389][ T4288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 73.050951][ T4288] Call Trace: [ 73.054276][ T4288] [ 73.057244][ T4288] dump_stack_lvl+0x188/0x250 [ 73.061991][ T4288] ? show_regs_print_info+0x20/0x20 [ 73.067237][ T4288] ? load_image+0x410/0x410 [ 73.071794][ T4288] ? place_entity+0x4f0/0x4f0 [ 73.076522][ T4288] should_fail+0x383/0x4b0 [ 73.080997][ T4288] get_futex_key+0x1a1/0x12d0 [ 73.085732][ T4288] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 73.091770][ T4288] ? futex_wait_restart+0x250/0x250 [ 73.097018][ T4288] ? lock_chain_count+0x20/0x20 [ 73.101924][ T4288] futex_wait_setup+0x4b/0x520 [ 73.106737][ T4288] ? lockdep_hardirqs_on+0x94/0x140 [ 73.111982][ T4288] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 73.117923][ T4288] futex_wait+0x22f/0x680 [ 73.122312][ T4288] ? do_futex+0x12b0/0x12b0 [ 73.126887][ T4288] ? verify_lock_unused+0x140/0x140 [ 73.132141][ T4288] do_futex+0xdc2/0x12b0 [ 73.136446][ T4288] ? __secure_computing+0x2f0/0x2f0 [ 73.141698][ T4288] ? futex_exit_release+0x1c0/0x1c0 [ 73.147460][ T4288] ? __context_tracking_exit+0x4c/0x80 [ 73.152970][ T4288] __se_sys_futex+0x389/0x420 [ 73.157696][ T4288] ? __x64_sys_futex+0xf0/0xf0 [ 73.162513][ T4288] ? __x64_sys_futex+0x1d/0xf0 [ 73.167329][ T4288] do_syscall_64+0x4c/0xa0 [ 73.171801][ T4288] ? clear_bhb_loop+0x30/0x80 [ 73.176525][ T4288] ? clear_bhb_loop+0x30/0x80 [ 73.181260][ T4288] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 73.187210][ T4288] RIP: 0033:0x7f693a7a2159 [ 73.191674][ T4288] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.211357][ T4288] RSP: 002b:00007f69389fa0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 73.219816][ T4288] RAX: ffffffffffffffda RBX: 00007f693aa29fa8 RCX: 00007f693a7a2159 [ 73.227831][ T4288] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f693aa29fa8 [ 73.235844][ T4288] RBP: 00007f693aa29fa0 R08: 0000000000000000 R09: 0000000000000000 [ 73.243859][ T4288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 73.251873][ T4288] R13: 00007f693aa2a038 R14: 00007ffe935b90f0 R15: 00007ffe935b91d8 [ 73.259917][ T4288] [ 73.267704][ T4234] Bluetooth: hci0: command 0x0419 tx timeout [ 73.282553][ T4234] Bluetooth: hci3: command 0x0419 tx timeout [ 73.301987][ T4234] Bluetooth: hci4: command 0x0419 tx timeout [ 73.311022][ T4234] Bluetooth: hci1: command 0x0419 tx timeout [ 73.319070][ T4234] Bluetooth: hci2: command 0x0419 tx timeout [ 73.445832][ T4296] device syzkaller0 entered promiscuous mode [ 73.477687][ T4302] Zero length message leads to an empty skb [ 73.618865][ T4305] raw_sendmsg: syz.1.15 forgot to set AF_INET. Fix it! [ 73.791604][ T4318] netlink: 'syz.3.18': attribute type 10 has an invalid length. [ 73.809889][ T4316] netlink: 32 bytes leftover after parsing attributes in process `syz.4.20'. [ 73.839150][ T4318] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.864149][ T4318] bond0: (slave team0): Enslaving as an active interface with an up link [ 74.337804][ T4348] netdevsim netdevsim4: Direct firmware load for failed with error -2 [ 74.353419][ T4348] netdevsim netdevsim4: Falling back to sysfs fallback for: [ 74.623703][ T4365] xt_policy: output policy not valid in PREROUTING and INPUT [ 74.636544][ T4365] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 74.950995][ T4376] device syzkaller1 entered promiscuous mode [ 75.089950][ T4382] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 75.097294][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.123698][ T4383] netlink: 'syz.1.41': attribute type 3 has an invalid length. [ 75.730620][ T4404] netlink: 8 bytes leftover after parsing attributes in process `syz.2.51'. [ 75.844869][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 75.891402][ T4405] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 76.114147][ T4411] syz.1.53 uses obsolete (PF_INET,SOCK_PACKET) [ 76.754319][ T4438] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 77.237885][ T4464] tipc: Started in network mode [ 77.247902][ T4464] tipc: Node identity ac1414aa, cluster identity 4711 [ 77.308989][ T4464] tipc: New replicast peer: 172.20.20.187 [ 77.329046][ T4464] tipc: Enabled bearer , priority 10 [ 77.668642][ T4487] loop2: detected capacity change from 0 to 256 [ 77.711286][ T4487] ======================================================= [ 77.711286][ T4487] WARNING: The mand mount option has been deprecated and [ 77.711286][ T4487] and is ignored by this kernel. Remove the mand [ 77.711286][ T4487] option from the mount to silence this warning. [ 77.711286][ T4487] ======================================================= [ 77.746657][ T4486] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 77.935970][ T4487] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 77.983493][ T4487] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 78.014304][ T4487] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 78.036316][ T4493] batman_adv: batadv0: Adding interface: syzkaller0 [ 78.053391][ T26] audit: type=1800 audit(1789873803.752:2): pid=4487 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.80" name="file1" dev="loop2" ino=1048590 res=0 errno=0 [ 78.074411][ T4493] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.110359][ T4487] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 78.134554][ T4493] batman_adv: batadv0: Interface activated: syzkaller0 [ 78.143975][ T4487] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 78.299974][ T4499] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 78.450560][ T4509] netlink: 'syz.0.90': attribute type 1 has an invalid length. [ 78.461792][ T4198] tipc: Node number set to 2886997162 [ 78.499033][ T4509] netlink: 'syz.0.90': attribute type 2 has an invalid length. [ 78.609611][ T4515] netlink: 4 bytes leftover after parsing attributes in process `syz.1.93'. [ 78.716241][ T4515] team0: Port device team_slave_0 removed [ 78.796970][ T4492] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 78.876033][ T4492] batman_adv: batadv0: Removing interface: syzkaller0 [ 78.941249][ T4532] loop4: detected capacity change from 0 to 256 [ 79.026394][ T4537] netlink: 'syz.2.101': attribute type 3 has an invalid length. [ 79.121115][ T4532] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 79.162284][ T4532] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 79.199774][ T4532] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 79.230754][ T26] audit: type=1800 audit(1789873804.932:3): pid=4532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.98" name="file1" dev="loop4" ino=1048591 res=0 errno=0 [ 79.264293][ T4532] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 79.320201][ T4532] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 79.668282][ T4561] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 79.705607][ T4561] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 79.828322][ T4573] netlink: 40 bytes leftover after parsing attributes in process `syz.1.117'. [ 79.875066][ T4576] lo: MTU too low for tipc bearer [ 79.886367][ T4576] tipc: Enabling of bearer rejected, failed to enable media [ 80.463109][ T4585] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 80.479298][ T4608] 8021q: adding VLAN 0 to HW filter on device bond1 [ 80.558796][ T4608] bridge0: port 3(bond1) entered blocking state [ 80.648393][ T4608] bridge0: port 3(bond1) entered disabled state [ 80.675271][ T4608] device bond1 entered promiscuous mode [ 80.682913][ T4608] bridge0: port 3(bond1) entered blocking state [ 80.689542][ T4608] bridge0: port 3(bond1) entered forwarding state [ 80.830560][ T154] bridge0: port 3(bond1) entered disabled state [ 81.027576][ T4639] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 81.158218][ T4645] device syzkaller1 entered promiscuous mode [ 81.235289][ T4651] netlink: 36 bytes leftover after parsing attributes in process `syz.4.150'. [ 81.271886][ T4654] netlink: 4 bytes leftover after parsing attributes in process `syz.0.151'. [ 81.380137][ T1107] Bluetooth: hci4: command 0x0405 tx timeout [ 82.044542][ T4663] 8021q: adding VLAN 0 to HW filter on device bond1 [ 82.079353][ T4663] bridge0: port 3(bond1) entered blocking state [ 82.112553][ T4663] bridge0: port 3(bond1) entered disabled state [ 82.178978][ T4663] device bond1 entered promiscuous mode [ 82.212470][ T4663] bridge0: port 3(bond1) entered blocking state [ 82.219017][ T4663] bridge0: port 3(bond1) entered forwarding state [ 82.411046][ T4591] bridge0: port 3(bond1) entered disabled state [ 82.435626][ T4682] netlink: 3 bytes leftover after parsing attributes in process `syz.0.161'. [ 82.835677][ T4701] device vlan0 entered promiscuous mode [ 82.980292][ T4706] netlink: 'syz.0.167': attribute type 1 has an invalid length. [ 83.036518][ T4706] netlink: 'syz.0.167': attribute type 2 has an invalid length. [ 83.902935][ T4721] 8021q: adding VLAN 0 to HW filter on device bond1 [ 84.029642][ T4721] bridge0: port 3(bond1) entered blocking state [ 84.110476][ T4721] bridge0: port 3(bond1) entered disabled state [ 84.158239][ T4721] device bond1 entered promiscuous mode [ 84.177964][ T4721] bridge0: port 3(bond1) entered blocking state [ 84.184427][ T4721] bridge0: port 3(bond1) entered forwarding state [ 84.223886][ T144] bridge0: port 3(bond1) entered disabled state [ 84.238301][ T4730] device syzkaller0 entered promiscuous mode [ 84.670044][ C1] sched: RT throttling activated [ 84.801733][ T4742] device syzkaller0 entered promiscuous mode [ 84.899507][ T4742] TC_ACT_REPEAT abuse ? [ 85.525124][ T4760] device syzkaller0 entered promiscuous mode [ 86.652833][ T7] cfg80211: failed to load regulatory.db [ 86.693209][ T4779] netdevsim netdevsim2: Direct firmware load for failed with error -2 [ 86.747445][ T4779] netdevsim netdevsim2: Falling back to sysfs fallback for: [ 87.510985][ T4815] netlink: 72 bytes leftover after parsing attributes in process `syz.1.204'. [ 88.099125][ T4874] device syzkaller0 entered promiscuous mode [ 88.259262][ T4882] netdevsim netdevsim3: Direct firmware load for failed with error -2 [ 88.312941][ T4882] netdevsim netdevsim3: Falling back to sysfs fallback for: [ 88.496855][ T4890] tc action pedit 'at' offset 5 out of bounds [ 88.503131][ T4890] tc action pedit 'at' offset 5 out of bounds [ 88.509298][ T4890] tc action pedit 'at' offset 5 out of bounds [ 88.515461][ T4890] tc action pedit 'at' offset 5 out of bounds [ 88.521602][ T4890] tc action pedit 'at' offset 5 out of bounds [ 88.527704][ T4890] tc action pedit 'at' offset 5 out of bounds [ 88.533875][ T4890] tc action pedit 'at' offset 5 out of bounds [ 88.539976][ T4890] tc action pedit 'at' offset 5 out of bounds [ 88.546171][ T4890] tc action pedit 'at' offset 5 out of bounds [ 88.552321][ T4890] tc action pedit 'at' offset 5 out of bounds [ 88.558455][ T4890] 0: reclassify loop, rule prio 0, protocol 800 [ 88.766800][ T4903] device syzkaller0 entered promiscuous mode [ 88.805182][ T4900] TC_ACT_REPEAT abuse ? [ 88.998747][ T4908] device syzkaller1 entered promiscuous mode [ 89.528512][ T4926] device syzkaller0 entered promiscuous mode [ 89.821468][ T4939] 0: reclassify loop, rule prio 0, protocol 800 [ 89.971407][ T4948] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 89.996110][ T4948] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 90.154199][ T4948] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 90.205382][ T4950] device batadv_slave_1 entered promiscuous mode [ 90.323252][ T4954] device batadv_slave_1 left promiscuous mode [ 90.867500][ T4979] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 90.905336][ T4979] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 90.926434][ T4979] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 91.239748][ T4990] netlink: 'syz.1.252': attribute type 3 has an invalid length. [ 91.372317][ T4991] 0: reclassify loop, rule prio 0, protocol 800 [ 91.464199][ T4997] netlink: 'syz.3.256': attribute type 3 has an invalid length. [ 91.490591][ T4997] netlink: 8 bytes leftover after parsing attributes in process `syz.3.256'. [ 91.626567][ T5003] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 91.807974][ T5012] netlink: 48 bytes leftover after parsing attributes in process `syz.4.263'. [ 91.874587][ T5010] netlink: 8 bytes leftover after parsing attributes in process `syz.3.262'. [ 92.053794][ T5019] netdevsim netdevsim0: Direct firmware load for failed with error -2 [ 92.106651][ T5019] netdevsim netdevsim0: Falling back to sysfs fallback for: [ 93.185360][ T5061] device syzkaller1 entered promiscuous mode [ 93.227868][ T5061] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 93.832509][ T5086] netdevsim netdevsim1: Direct firmware load for failed with error -2 [ 93.856805][ T5086] netdevsim netdevsim1: Falling back to sysfs fallback for: [ 94.754938][ T5114] netlink: 16 bytes leftover after parsing attributes in process `syz.4.303'. [ 95.486132][ T5139] netdevsim netdevsim0: Direct firmware load for failed with error -2 [ 95.530166][ T5139] netdevsim netdevsim0: Falling back to sysfs fallback for: [ 96.005955][ T5157] Illegal XDP return value 4294967274, expect packet loss! [ 96.562366][ T5187] netlink: 12 bytes leftover after parsing attributes in process `syz.4.329'. [ 96.797949][ T5195] netdevsim netdevsim1: Direct firmware load for failed with error -2 [ 96.838615][ T5195] netdevsim netdevsim1: Falling back to sysfs fallback for: [ 96.917626][ T5206] netlink: 'syz.0.339': attribute type 3 has an invalid length. [ 97.087233][ T5211] sctp: [Deprecated]: syz.2.341 (pid 5211) Use of int in maxseg socket option. [ 97.087233][ T5211] Use struct sctp_assoc_value instead [ 97.235546][ T5217] device syzkaller0 entered promiscuous mode [ 97.333973][ T5223] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 97.606588][ T5236] device syzkaller0 entered promiscuous mode [ 97.654018][ T5236] [ 97.656425][ T5236] ============================================ [ 97.662596][ T5236] WARNING: possible recursive locking detected [ 97.668786][ T5236] syzkaller #0 Not tainted [ 97.673222][ T5236] -------------------------------------------- [ 97.679408][ T5236] syz.0.351/5236 is trying to acquire lock: [ 97.685322][ T5236] ffff88805e28c108 (&sch->q.lock){+.-.}-{2:2}, at: __dev_queue_xmit+0xa2b/0x2e50 [ 97.694518][ T5236] [ 97.694518][ T5236] but task is already holding lock: [ 97.701909][ T5236] ffff88805e28c108 (&sch->q.lock){+.-.}-{2:2}, at: __dev_queue_xmit+0xa2b/0x2e50 [ 97.711099][ T5236] [ 97.711099][ T5236] other info that might help us debug this: [ 97.719224][ T5236] Possible unsafe locking scenario: [ 97.719224][ T5236] [ 97.726697][ T5236] CPU0 [ 97.730005][ T5236] ---- [ 97.733318][ T5236] lock(&sch->q.lock); [ 97.737512][ T5236] lock(&sch->q.lock); [ 97.741701][ T5236] [ 97.741701][ T5236] *** DEADLOCK *** [ 97.741701][ T5236] [ 97.749863][ T5236] May be due to missing lock nesting notation [ 97.749863][ T5236] [ 97.758198][ T5236] 3 locks held by syz.0.351/5236: [ 97.763241][ T5236] #0: ffffffff8c31efc0 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 97.772874][ T5236] #1: ffff88805e28c108 (&sch->q.lock){+.-.}-{2:2}, at: __dev_queue_xmit+0xa2b/0x2e50 [ 97.782502][ T5236] #2: ffffffff8c31efc0 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 97.792130][ T5236] [ 97.792130][ T5236] stack backtrace: [ 97.793844][ T5240] netlink: 8 bytes leftover after parsing attributes in process `syz.1.352'. [ 97.798077][ T5236] CPU: 0 PID: 5236 Comm: syz.0.351 Not tainted syzkaller #0 [ 97.814137][ T5236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 97.824224][ T5236] Call Trace: [ 97.827538][ T5236] [ 97.830506][ T5236] dump_stack_lvl+0x188/0x250 [ 97.835225][ T5236] ? show_regs_print_info+0x20/0x20 [ 97.840477][ T5236] ? load_image+0x410/0x410 [ 97.845060][ T5236] __lock_acquire+0x1247/0x7b50 [ 97.849952][ T5236] ? stack_trace_snprint+0xe0/0xe0 [ 97.855099][ T5236] ? lockdep_unlock+0x143/0x2e0 [ 97.860003][ T5236] ? verify_lock_unused+0x140/0x140 [ 97.865252][ T5236] ? add_lock_to_list+0x18d/0x280 [ 97.870339][ T5236] ? __lock_acquire+0x2844/0x7b50 [ 97.875421][ T5236] lock_acquire+0x19e/0x400 [ 97.879963][ T5236] ? __dev_queue_xmit+0xa2b/0x2e50 [ 97.885131][ T5236] ? read_lock_is_recursive+0x10/0x10 [ 97.890544][ T5236] ? rcu_read_lock_bh_held+0x76/0xf0 [ 97.895874][ T5236] ? rcu_read_lock_held+0x40/0x40 [ 97.900936][ T5236] _raw_spin_lock+0x2a/0x40 [ 97.905468][ T5236] ? __dev_queue_xmit+0xa2b/0x2e50 [ 97.910617][ T5236] __dev_queue_xmit+0xa2b/0x2e50 [ 97.915613][ T5236] ? dev_queue_xmit+0x20/0x20 [ 97.920352][ T5236] ? __kernel_text_address+0x9a/0x100 [ 97.925797][ T5236] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 97.931734][ T5236] ? lockdep_hardirqs_on+0x94/0x140 [ 97.936975][ T5236] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 97.942906][ T5236] ? _raw_spin_unlock+0x40/0x40 [ 97.947798][ T5236] ? stack_trace_save+0xa6/0xf0 [ 97.952692][ T5236] ? netdev_core_pick_tx+0x300/0x300 [ 97.958008][ T5236] sch_frag_xmit_hook+0x2d8/0x1be0 [ 97.963194][ T5236] ? __kasan_slab_alloc+0xa9/0xc0 [ 97.968252][ T5236] ? __kasan_slab_alloc+0x92/0xc0 [ 97.973336][ T5236] ? slab_post_alloc_hook+0x4c/0x380 [ 97.978649][ T5236] ? kmem_cache_alloc+0x15d/0x280 [ 97.983702][ T5236] ? skb_clone+0x1bd/0x350 [ 97.988160][ T5236] ? tcf_mirred_act+0x5b0/0x1640 [ 97.993130][ T5236] ? tcf_action_exec+0x177/0x570 [ 97.998109][ T5236] ? basic_classify+0x1ae/0x2c0 [ 98.002995][ T5236] ? tcf_classify+0x218/0xad0 [ 98.007701][ T5236] ? qfq_enqueue+0x31b/0x1310 [ 98.012420][ T5236] ? dev_qdisc_enqueue+0x48/0x210 [ 98.017479][ T5236] ? __dev_queue_xmit+0xbde/0x2e50 [ 98.022615][ T5236] ? packet_sendmsg+0x3b4f/0x4de0 [ 98.027673][ T5236] ? mq_dump_class_stats+0x430/0x430 [ 98.032994][ T5236] ? do_syscall_64+0x4c/0xa0 [ 98.037621][ T5236] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 98.043736][ T5236] ? __copy_skb_header+0x3ba/0x4f0 [ 98.048879][ T5236] ? memcpy+0x3c/0x60 [ 98.052884][ T5236] ? __copy_skb_header+0x3ba/0x4f0 [ 98.058036][ T5236] ? __skb_clone+0x446/0x6c0 [ 98.062681][ T5236] ? skb_clone+0x1f1/0x350 [ 98.067137][ T5236] ? tcf_mirred_act+0x59a/0x1640 [ 98.072108][ T5236] tcf_mirred_act+0xc5a/0x1640 [ 98.076908][ T5236] tcf_action_exec+0x177/0x570 [ 98.081719][ T5236] basic_classify+0x1ae/0x2c0 [ 98.086455][ T5236] tcf_classify+0x218/0xad0 [ 98.091008][ T5236] qfq_enqueue+0x31b/0x1310 [ 98.095547][ T5236] ? sch_tree_lock+0x110/0x110 [ 98.100362][ T5236] ? do_raw_spin_lock+0x128/0x2f0 [ 98.105429][ T5236] ? __rwlock_init+0x140/0x140 [ 98.110229][ T5236] ? __alloc_skb+0x473/0x750 [ 98.114862][ T5236] dev_qdisc_enqueue+0x48/0x210 [ 98.119753][ T5236] __dev_queue_xmit+0xbde/0x2e50 [ 98.124742][ T5236] ? dev_queue_xmit+0x20/0x20 [ 98.129453][ T5236] ? virtio_net_hdr_to_skb+0xca1/0x1260 [ 98.135040][ T5236] ? packet_cached_dev_get+0x270/0x270 [ 98.140546][ T5236] ? skb_put+0x10e/0x200 [ 98.144826][ T5236] packet_sendmsg+0x3b4f/0x4de0 [ 98.149717][ T5236] ? sched_move_task+0x180/0x4f0 [ 98.154723][ T5236] ? aa_sk_perm+0x7dc/0x910 [ 98.159269][ T5236] ? packet_getsockopt+0x9a0/0x9a0 [ 98.164426][ T5236] ? apparmor_setprocattr+0x42e/0x6a0 [ 98.169843][ T5236] ? apparmor_socket_sendmsg+0x88/0x230 [ 98.175427][ T5236] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 98.180753][ T5236] ? security_socket_sendmsg+0x7c/0xa0 [ 98.186279][ T5236] ? packet_getsockopt+0x9a0/0x9a0 [ 98.191440][ T5236] ____sys_sendmsg+0x5be/0x8f0 [ 98.196270][ T5236] ? __sys_sendmsg_sock+0x30/0x30 [ 98.201336][ T5236] ? import_iovec+0x6f/0xa0 [ 98.206079][ T5236] ___sys_sendmsg+0x236/0x2e0 [ 98.210803][ T5236] ? __sys_sendmsg+0x290/0x290 [ 98.215623][ T5236] __se_sys_sendmsg+0x1b7/0x2a0 [ 98.220527][ T5236] ? __x64_sys_sendmsg+0x80/0x80 [ 98.225504][ T5236] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 98.231522][ T5236] ? lockdep_hardirqs_on+0x94/0x140 [ 98.236755][ T5236] do_syscall_64+0x4c/0xa0 [ 98.241201][ T5236] ? clear_bhb_loop+0x30/0x80 [ 98.245910][ T5236] ? clear_bhb_loop+0x30/0x80 [ 98.250625][ T5236] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 98.256683][ T5236] RIP: 0033:0x7f0a0ea86159 [ 98.261133][ T5236] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.280781][ T5236] RSP: 002b:00007f0a0ccde028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 98.289246][ T5236] RAX: ffffffffffffffda RBX: 00007f0a0ed0dfa0 RCX: 00007f0a0ea86159 [ 98.297252][ T5236] RDX: 0000000000004005 RSI: 0000200000000280 RDI: 0000000000000006 [ 98.305267][ T5236] RBP: 00007f0a0eb1d06b R08: 0000000000000000 R09: 0000000000000000 [ 98.313264][ T5236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.321300][ T5236] R13: 00007f0a0ed0e038 R14: 00007f0a0ed0dfa0 R15: 00007fff6eee0148 [ 98.329324][ T5236]