last executing test programs: 2.744423042s ago: executing program 0 (id=276): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090) 2.711771025s ago: executing program 4 (id=278): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r0, 0x890b, &(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00') bind$x25(r0, &(0x7f0000000080), 0x12) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000001480), 0x4) sendmsg$kcm(r1, &(0x7f00000014c0)={&(0x7f0000001500)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000001580)=[{&(0x7f00000015c0)="27031c00160014000000002f1eafacf706e105400000894f00050004ee0b80558ddbba9b37242d37a518fc9c5be50eaf07c3650596", 0x26}], 0xf}, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000001c0)={'syzkaller1\x00', 0x1}) connect$x25(r0, &(0x7f0000001600)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x12) r4 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newtfilter={0x90, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x8, 0x0, 0x102}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x90}}, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_ifreq(r0, 0x8921, &(0x7f0000000000)={'macsec0\x00', @ifru_hwaddr=@random="97bebe75e56c"}) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000040)={'bond0\x00', 0x2000}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0002, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r8, 0x107, 0xa, &(0x7f0000000440)=0x2, 0x4) setsockopt$packet_rx_ring(r8, 0x107, 0x5, &(0x7f0000000480)=@req3={0x1000, 0x7fff, 0x1000, 0x3a, 0x0, 0xfffffffd}, 0x1c) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000100)) 2.306002926s ago: executing program 0 (id=280): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = socket(0xa, 0x3, 0x4) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000bc0)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x22004804}, 0x80c0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000002c0)={0x0, @multicast2, @loopback}, &(0x7f0000000300)=0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="180000006800010000000000000000000a009242ff2c1f11b936fcfba1bfd77f24000000000000009bc5da322ae7e71c70b7f3e2df1bb21068e6e15ba297c36a4ca84d5dd6155c85f434ffd13a117f2fa3febba82e96d510719a6cb71f727ff63a7808f9e8c1df3e4d8be4936625e0e66daf380f296812dafddec47325d1a8b34d0cabc00b7fee7af24161dbd08fcd86a537f9b5314b09558cbbe9e5663bf1429f1e2187df4eb31bbfecfb85ff726c0c83def90d8d80ed1ff287ae5d2165148011c525f22aee4f7d1bad8675e74b70649e2b999816d34167891c4d796d7a5734ef0a37f9bbe76283b3e780fcf29d63a7d4205cc944117f"], 0x18}}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000003c0), &(0x7f0000000400)=0x4) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r2) getsockname$packet(r2, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000841}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x4000800) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000800)={'syztnl0\x00', 0x0}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f0000000000)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000580)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000e40)=[@sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x5) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000e80)='veno', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000ec0), 0x4) sendto$inet(r3, &(0x7f0000000f00), 0xffffffffffffff94, 0xb, 0x0, 0x0) 2.010958876s ago: executing program 4 (id=286): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x20, r2, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x248, [0x0, 0x200000000540, 0x200000000570, 0x2000000005a0], 0x0, 0x0, &(0x7f00000005c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{0x9, 0x62, 0x88a2, 'vxcan1\x00', 'macvtap0\x00', 'macvlan0\x00', 'ip_vti0\x00', @remote, [0xff, 0xff], @local, [0xff, 0xff, 0x0, 0xff], 0x0, 0x70, 0xa0, 0xd0, [], [@common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x5}}}], @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffd}}}, {0x9, 0xa, 0x8100, 'batadv0\x00', 'wg0\x00', 'veth1_vlan\x00', 'vcan0\x00', @broadcast, [0xff, 0xff, 0x0, 0x0, 0x0, 0xff], @multicast, [0x0, 0x0, 0x0, 0xff, 0xff], 0x0, 0x70, 0x70, 0xe8, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x0, 0x1, 0xc, 0x0, 0x0, "69adf79813a11049ebcdb0980580c7f6de8e6e6070173b4cff9adc9227a858725603213c81515c41e35a5ac8698a3916f061e73b3c69bfde8da5ba34c3a40670"}}}}]}]}, 0x2c0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000580)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)={0x54, r2, 0x1, 0x70bd28, 0x25dfdbfe, {}, [{{0x8, 0x1, r6}, {0x38, 0x2, 0x0, 0x1, [{0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}]}}]}, 0x54}}, 0x110) 1.978466139s ago: executing program 1 (id=287): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='vegas', 0x5) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f00000000c0)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000280), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) 1.369287871s ago: executing program 4 (id=291): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x1e, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a8, 0x1b0, 0xc8, 0x8, 0x0, 0x5803, 0x310, 0x2e8, 0x2e8, 0x310, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0x2000000000000}}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @mcast2, [], [], 'macvtap0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) syz_open_dev$admmidi(&(0x7f0000000340), 0x2, 0x3) mkdir(&(0x7f00000003c0)='./debug\x00', 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000004540)='./config\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000004580)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000045c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000004600)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000004640)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000046c0)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004740), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000047c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f00000048c0)='./config\x00', &(0x7f0000004900)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000004940)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) rmdir(&(0x7f0000004980)='./config/nvmet/subsystems/testnqn\x00') 1.302439308s ago: executing program 0 (id=294): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000002c0)=0x63ba, 0x4) sendmmsg$inet6(r0, &(0x7f00000004c0)=[{{&(0x7f0000000500)={0xa, 0x4e23, 0x800, @mcast2}, 0x1c, 0x0}}], 0x1, 0x60040000) 1.124056286s ago: executing program 3 (id=295): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), r0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000100) 1.027010846s ago: executing program 4 (id=296): setsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x804) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000500)={'syz_tun\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x35, &(0x7f0000000840)=ANY=[@ANYBLOB="0180c20000000200000000010027424203"], 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_PIM(r2, 0x0, 0xd0, &(0x7f0000000180)=0x3, 0x4) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[], &(0x7f0000000240)=""/75, 0x3d, 0x4b, 0x0, 0x9}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x3d, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000880)=@generic={0x2d, "000000000000080118000200000006000a00"}, 0x80, 0x0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) 943.941064ms ago: executing program 0 (id=297): write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, 0x0, 0x0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x48, r1, 0x601, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "000102030405060708090a0b0c0d0e0f"}]}, 0x48}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x38, r1, 0x601, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}]}, 0x38}}, 0x0) 943.787224ms ago: executing program 1 (id=298): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f00000003c0)={0xa3, 0x746, 0x3, 0x4, 0xfb, 0x8, 0xb}, 0xc) connect$bt_l2cap(r0, &(0x7f0000000400)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xffff}, 0xe) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x8044) 932.665945ms ago: executing program 2 (id=299): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000004c0)={0x8607, 0x3, 0xe, 0xa2}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="200000001600010a0000002200000000810000000400000008000a"], 0x20}, 0x1, 0x0, 0x0, 0x48007}, 0x8000) 919.669547ms ago: executing program 3 (id=300): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x5, 0xa}, {}, {0x6, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x5, 0x7}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8849}, 0x20004804) 864.031762ms ago: executing program 4 (id=301): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[], 0x48}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x40004) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4c0c4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, &(0x7f0000000280)=@udp=r3}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r2) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="90000000", @ANYRES16=r5, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="0600cd00000000006c003300d0200900080211000001080211000000505050505050"], 0x90}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 827.995086ms ago: executing program 1 (id=302): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000380)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000500)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc02, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {0xffff, 0xb}, {0x4, 0x4}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xfff, 0x0, 0x100, 0x0, 0x781, 0x4d, 0x9, 0x3}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x448c2}, 0x4894) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000000780)={'syzkaller0\x00', @random="2b0100004ec6"}) 823.093337ms ago: executing program 2 (id=303): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090) 632.099306ms ago: executing program 3 (id=304): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1a, 0x4, &(0x7f0000000500)=@framed={{0x18, 0x2, 0x0, 0x0, 0xb2b3, 0x0, 0x0, 0x0, 0x18}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3508a}]}, &(0x7f0000000540)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x3d}, 0x94) 631.917606ms ago: executing program 3 (id=305): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000000906010200000000000000000500ffff200007800c00018008000140e000000208000a400000000205000300020000000900020073797a31000000000500010007"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)=[{0x0}, {&(0x7f00000009c0)=""/90, 0x5a}, {&(0x7f0000001680)=""/4096, 0x1000}], 0x3}, 0x10000) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000002680)={0x0, 0x0, &(0x7f00000026c0)={&(0x7f0000002700)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) socket(0x1, 0x803, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000a40)=0x2, 0x4) 594.86051ms ago: executing program 2 (id=306): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x1e, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a8, 0x1b0, 0xc8, 0x8, 0x0, 0x5803, 0x310, 0x2e8, 0x2e8, 0x310, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0x2000000000000}}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @mcast2, [], [], 'macvtap0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) syz_open_dev$admmidi(&(0x7f0000000340), 0x2, 0x3) mkdir(&(0x7f00000003c0)='./debug\x00', 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000004540)='./config\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000004580)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000045c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000004600)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000004640)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000046c0)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004740), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000047c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f00000048c0)='./config\x00', &(0x7f0000004900)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000004940)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) rmdir(&(0x7f0000004980)='./config/nvmet/subsystems/testnqn\x00') 550.040404ms ago: executing program 4 (id=307): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r2) getsockname$packet(r2, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000840)=0x14) sendmsg$nl_route(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000200000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$nl_route(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=ANY=[@ANYBLOB="2c000000130005000b00"/20, @ANYRES32=r3, @ANYBLOB="11"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000f40)={0x14, 0x0, 0x100, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 519.442527ms ago: executing program 0 (id=308): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000280)=0x100000001, 0x4) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x9, @loopback, 0x40}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000300), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000340)=@ccm_128={{0x304}, "7a0afacb1ba30ef3", "a3966a9c2c799501471a53222718e691", "b728f3ff", "0d461df8b401a3a2"}, 0x28) setsockopt$inet6_tcp_TLS_RX(r0, 0x11a, 0x2, &(0x7f0000000380)=@ccm_128={{0x304}, "60549d932b45fc49", "9cf08593b6c981755478ea7bee87a7c4", "149962a8", "5085b7ed0a2d0e79"}, 0x84) 518.410458ms ago: executing program 1 (id=309): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000080)={0x1, 0x1}, 0x2) 330.702566ms ago: executing program 3 (id=310): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010026bd7000fbdbdf0f4f00000008000300", @ANYRES32=r2, @ANYBLOB="40007a800c000300a3656b9a83cb8cce14000100fc6f53636fe48f91ef3fdbe1c8c4a118140002"], 0x5c}, 0x1, 0x0, 0x0, 0x40044}, 0x810) 226.559777ms ago: executing program 2 (id=311): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000150001032dbd7000000000000c1600000800040001"], 0x1c}}, 0x30040040) 154.693194ms ago: executing program 0 (id=312): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x1, 0x0, 0x2) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f00000001c0), 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xe0, 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r1, &(0x7f0000000780)={0x2, 0x4e22, @local}, 0x10) listen(r1, 0x5) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000000080)=[{{&(0x7f0000000280)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0}}], 0x1, 0x0) shutdown(r2, 0x1) setsockopt(r2, 0x84, 0x82, &(0x7f0000000740)="1a00000002000000", 0x8) r3 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r3, &(0x7f00000007c0)={0x2, 0x4e22, @local}, 0x10) 154.475364ms ago: executing program 1 (id=313): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1a, 0x4, &(0x7f0000000500)=@framed={{0x18, 0x2, 0x0, 0x0, 0xb2b3, 0x0, 0x0, 0x0, 0x18}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x34a0c}]}, &(0x7f0000000540)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x3d}, 0x94) 110.841169ms ago: executing program 2 (id=314): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1a, 0x4, &(0x7f0000000500)=@framed={{0x18, 0x2, 0x0, 0x0, 0xb2b3, 0x0, 0x0, 0x0, 0x18}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x352b8}]}, &(0x7f0000000540)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x3d}, 0x94) 68.024133ms ago: executing program 1 (id=315): ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, &(0x7f0000000180)=0x7) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000340)=""/4096, 0x1000, 0xb) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001500)={0x6, 0x3, &(0x7f0000001340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}}, &(0x7f0000001400)='syzkaller\x00', 0xffff, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001480)={0x0, 0x4, 0x6, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0x0, 0x10, 0x6}, 0x94) r1 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000001600)=0x4, 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000001640)=@ccm_128={{0x304}, "7dbeefd4efea6387", "b7c071beee4e831e99d199a28781901d", "f15131f0", "754fbb9e6a0445bd"}, 0x28) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000016c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000018c0)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001880)={0x0}, 0x1, 0x0, 0x0, 0x4010}, 0x80) close(r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_LEAVE_MESH(r3, 0x0, 0x4000000) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000002bc0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r4, &(0x7f0000002f00)={&(0x7f0000002e00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002ec0)={&(0x7f0000002e40)={0x3c, r2, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x40) 171.41µs ago: executing program 3 (id=316): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090) 0s ago: executing program 2 (id=317): socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x803, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, 0x0, 0x0) syz_emit_ethernet(0x6a, &(0x7f00000007c0)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x4002, 0x5, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "96597d00c5c0577eec4f99e3a24dd89fb66655d7b05291cb", "af6af5116bf52dbb91d30ae25aab828a961858f6c338a29f34c53e0526788e16"}}}}}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000840)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x8, 0x24, 0x0, 0xe000, 0x1, 0x11, 0x0, @empty, @empty}, {0x4e1e, 0x4e22, 0x10, 0x0, @gue={{0x2, 0x1, 0x1, 0x24, 0x0, @val=0x80}}}}}}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.225' (ED25519) to the list of known hosts. [ 63.707773][ T4176] cgroup: Unknown subsys name 'net' [ 63.821865][ T4176] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.320835][ T4176] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 66.988565][ T4200] rdma_rxe: rxe_register_device failed with error -23 [ 66.989340][ T4196] rxe_eth0 speed is unknown, defaulting to 1000 [ 67.008066][ T4189] rdma_rxe: rxe_register_device failed with error -23 [ 67.015285][ T4192] rdma_rxe: rxe_register_device failed with error -23 [ 67.023156][ T4192] rdma_rxe: failed to add rxe_eth0 [ 67.028972][ T4189] rdma_rxe: failed to add rxe_eth0 [ 67.029653][ T4197] rdma_rxe: rxe_register_device failed with error -23 [ 67.041011][ T4196] rxe_eth0 speed is unknown, defaulting to 1000 [ 67.045556][ T4196] rxe_eth0 speed is unknown, defaulting to 1000 [ 67.066127][ T4200] rdma_rxe: failed to add rxe_eth0 [ 67.070253][ T4197] rdma_rxe: failed to add rxe_eth0 [ 67.315465][ T23] rxe_eth0 speed is unknown, defaulting to 1000 [ 67.310389][ T4196] infiniband rxe0: set active [ 67.337218][ T4196] infiniband rxe0: added rxe_eth0 [ 67.426909][ T4196] RDS/IB: rxe0: added [ 67.431599][ T4196] smc: adding ib device rxe0 with port count 1 [ 67.438260][ T4196] smc: ib device rxe0 port 1 has pnetid [ 67.470343][ T7] rxe_eth0 speed is unknown, defaulting to 1000 [ 67.504937][ T4196] rxe_eth0 speed is unknown, defaulting to 1000 [ 67.574411][ T4197] chnl_net:caif_netlink_parms(): no params data found [ 67.622808][ T4200] chnl_net:caif_netlink_parms(): no params data found [ 67.676290][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 67.691162][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 67.784286][ T23] rxe_eth0 speed is unknown, defaulting to 1000 [ 67.860472][ T4196] rxe_eth0 speed is unknown, defaulting to 1000 [ 67.900682][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.908966][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.923340][ T4192] device bridge_slave_0 entered promiscuous mode [ 67.951634][ T4197] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.959111][ T4197] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.972275][ T4197] device bridge_slave_0 entered promiscuous mode [ 67.989022][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.001020][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.009466][ T4192] device bridge_slave_1 entered promiscuous mode [ 68.036065][ T4197] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.043243][ T4197] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.051925][ T4197] device bridge_slave_1 entered promiscuous mode [ 68.066160][ T4196] rxe_eth0 speed is unknown, defaulting to 1000 [ 68.066886][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.079639][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.087933][ T4189] device bridge_slave_0 entered promiscuous mode [ 68.097350][ T4200] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.104453][ T4200] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.113146][ T4200] device bridge_slave_0 entered promiscuous mode [ 68.138582][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.146644][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.155929][ T4189] device bridge_slave_1 entered promiscuous mode [ 68.163184][ T4200] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.170836][ T4200] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.179524][ T4200] device bridge_slave_1 entered promiscuous mode [ 68.189368][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.231673][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.258514][ T4197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.291951][ T4192] team0: Port device team_slave_0 added [ 68.303806][ T4197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.315535][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.326842][ T4200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.338942][ T4200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.348275][ T4196] rxe_eth0 speed is unknown, defaulting to 1000 [ 68.356535][ T4192] team0: Port device team_slave_1 added [ 68.380695][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.449641][ T4197] team0: Port device team_slave_0 added [ 68.467877][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.475203][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.501651][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.516741][ T4200] team0: Port device team_slave_0 added [ 68.523285][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.531828][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.558912][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.589359][ T4197] team0: Port device team_slave_1 added [ 68.625917][ T4200] team0: Port device team_slave_1 added [ 68.680905][ T4189] team0: Port device team_slave_0 added [ 68.688392][ T4196] rxe_eth0 speed is unknown, defaulting to 1000 [ 68.719162][ T4192] device hsr_slave_0 entered promiscuous mode [ 68.736320][ T4192] device hsr_slave_1 entered promiscuous mode [ 68.760039][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.774069][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.814868][ T4197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.843112][ T4189] team0: Port device team_slave_1 added [ 68.864187][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.873965][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.905191][ T4197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.932499][ T4200] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.940696][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 68.947812][ T4200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.949901][ T4178] Bluetooth: hci2: command 0x0409 tx timeout [ 68.980366][ T4200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.988505][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 69.014311][ T4200] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.021588][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 69.024861][ T23] Bluetooth: hci4: command 0x0409 tx timeout [ 69.029443][ T4200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.061149][ T4200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.120132][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.133195][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.166441][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.182700][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.190134][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.216496][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.233180][ T4197] device hsr_slave_0 entered promiscuous mode [ 69.241160][ T4197] device hsr_slave_1 entered promiscuous mode [ 69.248403][ T4197] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.256890][ T4197] Cannot create hsr debugfs directory [ 69.351024][ T4200] device hsr_slave_0 entered promiscuous mode [ 69.358667][ T4200] device hsr_slave_1 entered promiscuous mode [ 69.365851][ T4200] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.373457][ T4200] Cannot create hsr debugfs directory [ 69.416828][ T4189] device hsr_slave_0 entered promiscuous mode [ 69.424119][ T4189] device hsr_slave_1 entered promiscuous mode [ 69.431154][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.439157][ T4189] Cannot create hsr debugfs directory [ 69.561834][ T3854] infiniband rxe0: set active [ 69.594218][ T23] rxe_eth0 speed is unknown, defaulting to 1000 [ 69.749644][ T4192] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.775237][ T4192] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.796186][ T4192] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.808308][ T4192] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.824073][ T4196] chnl_net:caif_netlink_parms(): no params data found [ 69.899115][ T4197] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.917294][ T4197] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.937862][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.945239][ T4196] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.953437][ T4196] device bridge_slave_0 entered promiscuous mode [ 69.962238][ T4196] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.969375][ T4196] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.977695][ T4196] device bridge_slave_1 entered promiscuous mode [ 69.985276][ T4197] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.996178][ T4197] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.028336][ T4196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.042599][ T4196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.071351][ T4196] team0: Port device team_slave_0 added [ 70.082178][ T4196] team0: Port device team_slave_1 added [ 70.109480][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.116509][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.144497][ T4196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.158345][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.165799][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.192243][ T4196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.253675][ T4196] device hsr_slave_0 entered promiscuous mode [ 70.261577][ T4196] device hsr_slave_1 entered promiscuous mode [ 70.269214][ T4196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.277360][ T4196] Cannot create hsr debugfs directory [ 70.287687][ T4189] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.316311][ T4189] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.326161][ T4189] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.366666][ T4189] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.459472][ T4200] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 70.499125][ T4200] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 70.512957][ T4200] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 70.545972][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.554067][ T4200] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 70.581615][ T4196] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.605624][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.612679][ T4196] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.626982][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.637541][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.652040][ T4197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.667198][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.678196][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.689599][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.697080][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.707316][ T4196] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.733035][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.743347][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.752568][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.765279][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.772397][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.781048][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.791523][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.801322][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.811397][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.820281][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.845534][ T4196] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.859952][ T4197] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.881477][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.890780][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.901050][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.910740][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.920889][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.929855][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.943386][ T156] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.950916][ T156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.959048][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.968879][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.977717][ T156] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.984841][ T156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.992676][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.022360][ T4192] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.040575][ T1327] Bluetooth: hci0: command 0x041b tx timeout [ 71.046862][ T1327] Bluetooth: hci2: command 0x041b tx timeout [ 71.053013][ T1327] Bluetooth: hci1: command 0x041b tx timeout [ 71.059796][ T4192] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.076043][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.095703][ T4267] Bluetooth: hci4: command 0x041b tx timeout [ 71.102161][ T4267] Bluetooth: hci3: command 0x041b tx timeout [ 71.108794][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.118926][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.128700][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.138276][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.147525][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.157096][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.166622][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.176777][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.186783][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.214015][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.222042][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.230618][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.241561][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.263162][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.277987][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.330541][ T4197] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.346588][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.353142][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.369710][ T4197] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.385093][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.393822][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.402443][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.409672][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.418514][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.428094][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.436893][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.446416][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.455495][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.462576][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.470819][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.483392][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.499382][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.507968][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.536339][ T4200] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.548093][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.581955][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.601088][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.622681][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.637125][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.651752][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.672181][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.682485][ T4200] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.706974][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.715543][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.724476][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.733302][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.742503][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.752075][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.761193][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.788690][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.804352][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.821193][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.829870][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.846165][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.865088][ T1238] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.872213][ T1238] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.887478][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.896947][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.906256][ T1238] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.913471][ T1238] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.937390][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.949322][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.961242][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.969195][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.980046][ T4196] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.001612][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.026307][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.043427][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.053209][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.060429][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.077686][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.092454][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.102917][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.110090][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.119701][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.127880][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.158375][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.167255][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.177557][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.187569][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.198346][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.207514][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.217666][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.227348][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.237706][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.247409][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.260881][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.272311][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.282677][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.298330][ T4197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.312032][ T4200] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.324012][ T4200] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.341292][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.349690][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.359237][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.369040][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.379565][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.399157][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.415222][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.422743][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.431973][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.441661][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.450267][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.461073][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.495039][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.511378][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.521446][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.555311][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.564588][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.622607][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.636034][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.672423][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.691637][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.704044][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.713333][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.722699][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.731511][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.741501][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.749766][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.761058][ T4192] device veth0_vlan entered promiscuous mode [ 72.806321][ T4197] device veth0_vlan entered promiscuous mode [ 72.813826][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.825667][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.839252][ T4189] device veth0_vlan entered promiscuous mode [ 72.852779][ T4192] device veth1_vlan entered promiscuous mode [ 72.867600][ T4200] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.881681][ T4197] device veth1_vlan entered promiscuous mode [ 72.890107][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.902910][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.925858][ T4189] device veth1_vlan entered promiscuous mode [ 72.963384][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.979149][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.990386][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.002243][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.012553][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.022439][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.034432][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.061780][ T4192] device veth0_macvtap entered promiscuous mode [ 73.073928][ T4192] device veth1_macvtap entered promiscuous mode [ 73.087294][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.095716][ T4267] Bluetooth: hci1: command 0x040f tx timeout [ 73.102791][ T4267] Bluetooth: hci2: command 0x040f tx timeout [ 73.102936][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.119222][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.125869][ T4267] Bluetooth: hci0: command 0x040f tx timeout [ 73.142744][ T4197] device veth0_macvtap entered promiscuous mode [ 73.162435][ T4189] device veth0_macvtap entered promiscuous mode [ 73.175361][ T1109] Bluetooth: hci3: command 0x040f tx timeout [ 73.185380][ T4285] Bluetooth: hci4: command 0x040f tx timeout [ 73.193882][ T4189] device veth1_macvtap entered promiscuous mode [ 73.209599][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.222482][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.234588][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.243642][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.252890][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.262723][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.277353][ T4197] device veth1_macvtap entered promiscuous mode [ 73.311078][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.320817][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.338399][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.354803][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.363831][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.402994][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.429580][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.438425][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.449578][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.459419][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.468744][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.480072][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.492177][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.506346][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.517062][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.528119][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.539209][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.551403][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.564138][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.576815][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.586371][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.620917][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.630985][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.640364][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.649527][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.661829][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.672688][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.685084][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.700387][ T4196] device veth0_vlan entered promiscuous mode [ 73.710132][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.721748][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.734048][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.746632][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.760125][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.770971][ T4192] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.780105][ T4192] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.789188][ T4192] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.797976][ T4192] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.810147][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.820095][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.829020][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.839041][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.848451][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.858157][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.867848][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.876554][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.887710][ T4197] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.897549][ T4197] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.907755][ T4197] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.917107][ T4197] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.930449][ T4189] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.939834][ T4189] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.948839][ T4189] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.957850][ T4189] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.984171][ T4196] device veth1_vlan entered promiscuous mode [ 74.001420][ T4200] device veth0_vlan entered promiscuous mode [ 74.039166][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.048643][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.068415][ T4200] device veth1_vlan entered promiscuous mode [ 74.091619][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.105699][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.113595][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.140869][ T4196] device veth0_macvtap entered promiscuous mode [ 74.182611][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.195621][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.206136][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.220083][ T4196] device veth1_macvtap entered promiscuous mode [ 74.298322][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.312995][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.325190][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.336761][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.347635][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.358900][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.371129][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.382769][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.396261][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.422202][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.437318][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.447094][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.455453][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.466140][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.475486][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.484106][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.496450][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.509422][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.523223][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.534331][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.545025][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.555907][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.568287][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.592730][ T4200] device veth0_macvtap entered promiscuous mode [ 74.602071][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.610706][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.621931][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.635031][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.642901][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.655463][ T4200] device veth1_macvtap entered promiscuous mode [ 74.675525][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.683691][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.695710][ T4196] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.704505][ T4196] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.715253][ T4196] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.724001][ T4196] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.796135][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.798225][ T4272] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.803999][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.830431][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.844330][ T4272] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.854282][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.869425][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.880440][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.894776][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.906465][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.916625][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.928085][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.940160][ T4200] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.952851][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.963362][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.973768][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.987538][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.998599][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.007564][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.044043][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.062321][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.074718][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.085839][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.096554][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.107331][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.117646][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.128670][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.140940][ T4200] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.155036][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.163736][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.174182][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.185580][ T7] Bluetooth: hci0: command 0x0419 tx timeout [ 75.191698][ T7] Bluetooth: hci2: command 0x0419 tx timeout [ 75.204740][ T7] Bluetooth: hci1: command 0x0419 tx timeout [ 75.236724][ T4200] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.252966][ T4200] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.258122][ T4267] Bluetooth: hci4: command 0x0419 tx timeout [ 75.269627][ T4200] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.278255][ T4267] Bluetooth: hci3: command 0x0419 tx timeout [ 75.289157][ T4200] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.315681][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.333090][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.374349][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.394088][ T4305] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.402784][ T4305] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.443570][ T4311] loop1: detected capacity change from 0 to 128 [ 75.460308][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.505308][ T1238] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.513202][ T1238] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.615271][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.622575][ T4311] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 75.622773][ T4311] ext4 filesystem being mounted at /0/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 75.694267][ T156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.711605][ T156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.785495][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.797123][ T4272] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.842917][ T4272] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.045730][ T4323] loop3: detected capacity change from 0 to 32768 [ 76.066713][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.086028][ T4323] ======================================================= [ 76.086028][ T4323] WARNING: The mand mount option has been deprecated and [ 76.086028][ T4323] and is ignored by this kernel. Remove the mand [ 76.086028][ T4323] option from the mount to silence this warning. [ 76.086028][ T4323] ======================================================= [ 76.173647][ T4323] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.4 (4323) [ 76.245101][ T4323] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 76.254371][ T4323] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 76.264721][ T4323] BTRFS info (device loop3): use zstd compression, level 3 [ 76.271981][ T4323] BTRFS info (device loop3): force clearing of disk cache [ 76.279260][ T4323] BTRFS info (device loop3): enabling disk space caching [ 76.286442][ T4323] BTRFS info (device loop3): disk space caching is enabled [ 76.294326][ T4323] BTRFS info (device loop3): has skinny extents [ 76.347364][ T4334] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 76.566639][ T4344] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 76.627333][ T4323] BTRFS info (device loop3): enabling ssd optimizations [ 76.642868][ T4323] BTRFS info (device loop3): clearing free space tree [ 76.650696][ T4323] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 76.661633][ T4323] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 76.671832][ T4344] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 77.104660][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 77.124661][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 77.134658][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 77.144664][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 77.154656][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 77.164665][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 77.174664][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 77.184663][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 77.194659][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 77.204658][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 79.795378][ T4264] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 79.837118][ T4387] loop4: detected capacity change from 0 to 128 [ 79.922226][ T4391] misc userio: Invalid payload size [ 79.928760][ T4387] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 79.960589][ T4387] ext4 filesystem being mounted at /2/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 80.151139][ T4264] usb 1-1: not running at top speed; connect to a high speed hub [ 80.227218][ T4397] loop3: detected capacity change from 0 to 1764 [ 80.255074][ T4264] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 80.324909][ T4264] usb 1-1: string descriptor 0 read error: -71 [ 80.331433][ T4264] usb 1-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 80.385281][ T4264] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.466424][ T4264] usb 1-1: can't set config #1, error -71 [ 80.539511][ T4264] usb 1-1: USB disconnect, device number 2 [ 80.654194][ T4403] smpboot: CPU 1 is now offline [ 80.760941][ T4407] misc userio: Invalid payload size [ 80.794526][ T4409] process 'syz.1.24' launched './file0' with NULL argv: empty string added [ 80.849246][ T4405] x86: Booting SMP configuration: [ 80.878515][ T4405] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 80.938737][ T0] kvm-clock: cpu 1, msr ff3c041, secondary cpu clock [ 80.955921][ T18] kvm-guest: stealtime: cpu 1, msr b8f27440 [ 81.051895][ T4399] loop4: detected capacity change from 0 to 32768 [ 81.117599][ T4399] BTRFS: device fsid afd29e67-b8c6-49b0-b0d7-0efab618e2f3 devid 1 transid 8 /dev/loop4 scanned by syz.4.22 (4399) [ 81.203050][ T4399] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 81.237452][ T4399] BTRFS info (device loop4): using free space tree [ 81.270402][ T4399] BTRFS info (device loop4): has skinny extents [ 81.297736][ T4426] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 81.393544][ T4435] netlink: 60 bytes leftover after parsing attributes in process `syz.2.28'. [ 81.473964][ T4435] unsupported nlmsg_type 40 [ 81.483528][ T4399] BTRFS info (device loop4): enabling ssd optimizations [ 81.532486][ T4201] Bluetooth: unknown link type 128 [ 82.007146][ T4478] loop3: detected capacity change from 0 to 8 [ 82.919847][ T4285] rxe_eth0 speed is unknown, defaulting to 1000 [ 83.837902][ T4267] Bluetooth: hci1: command 0x0409 tx timeout [ 84.502438][ T26] audit: type=1800 audit(1794065299.460:2): pid=4522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.40" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 85.944658][ C0] sched: RT throttling activated [ 86.967757][ T2859] cfg80211: failed to load regulatory.db [ 87.053275][ T4524] netlink: 'syz.2.43': attribute type 12 has an invalid length. [ 88.407165][ T4546] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 88.487059][ T4546] netlink: 60 bytes leftover after parsing attributes in process `syz.1.52'. [ 88.540514][ T4201] Bluetooth: unknown link type 128 [ 90.985167][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 91.791976][ T4556] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 92.111349][ T4568] netlink: 'syz.0.57': attribute type 12 has an invalid length. [ 92.808058][ T4586] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 92.852015][ T26] audit: type=1800 audit(1794065307.810:3): pid=4585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.66" name="UDC" dev="configfs" ino=33684 res=0 errno=0 [ 92.937732][ T4586] netlink: 60 bytes leftover after parsing attributes in process `syz.4.65'. [ 93.005075][ T4201] Bluetooth: unknown link type 128 [ 93.043879][ T4592] HTB: quantum of class FFF10001 is small. Consider r2q change. [ 93.074290][ T4594] device syzkaller0 entered promiscuous mode [ 93.141205][ T4594] tipc: Started in network mode [ 93.154781][ T4594] tipc: Node identity 628e074d44b, cluster identity 4711 [ 93.172354][ T4594] tipc: Enabled bearer , priority 0 [ 93.186681][ T4601] loop4: detected capacity change from 0 to 8 [ 93.215145][ T4598] Zero length message leads to an empty skb [ 93.264908][ T4594] tipc: Resetting bearer [ 93.292319][ T4593] tipc: Resetting bearer [ 93.335299][ T4593] tipc: Disabling bearer [ 93.872389][ T26] audit: type=1800 audit(1794065308.830:4): pid=4612 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.72" name="file1" dev="loop4" ino=5 res=0 errno=0 [ 94.303692][ T4622] loop0: detected capacity change from 0 to 512 [ 95.374572][ T4381] Bluetooth: hci4: command 0x0409 tx timeout [ 95.445670][ T4622] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 95.489930][ T4622] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.75: invalid indirect mapped block 256 (level 1) [ 95.527723][ T4639] netlink: 60 bytes leftover after parsing attributes in process `syz.4.82'. [ 95.566160][ T4622] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.75: invalid indirect mapped block 2683928664 (level 1) [ 95.592734][ T147] Bluetooth: unknown link type 128 [ 95.625025][ T4622] EXT4-fs (loop0): 1 truncate cleaned up [ 95.630738][ T4622] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,max_dir_size_kb=0x0000000000000009,stripe=0x0000000000000ee9,nodioread_nolock,discard,usrjquota=.nouid32,noauto_da_alloc,jqfmt=vfsv0,barrier,nogrpid,,,errors=continue. Quota mode: writeback. [ 95.881973][ T4650] loop4: detected capacity change from 0 to 8 [ 97.654688][ T4285] Bluetooth: hci4: command 0x0409 tx timeout [ 97.780998][ T26] audit: type=1800 audit(1794065312.740:5): pid=4658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.86" name="file1" dev="loop4" ino=5 res=0 errno=0 [ 98.645069][ T4670] device syzkaller0 entered promiscuous mode [ 102.131676][ T4688] CIFS: Attempting to mount \\127.0.0.1\share [ 102.206950][ T4694] loop1: detected capacity change from 0 to 512 [ 102.745669][ T4702] x86/PAT: syz.3.81:4702 freeing invalid memtype [mem 0xfe004000-0xfe005fff] [ 102.796284][ T4694] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 102.827465][ T4694] EXT4-fs (loop1): 1 truncate cleaned up [ 102.840284][ T4694] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,dioread_nolock,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,nojournal_checksum,grpjquota=,,errors=continue. Quota mode: none. [ 102.914789][ T4706] netdevsim netdevsim2 netdevsim0: IPsec offload requires 128 bit authentication [ 103.981907][ T4706] netdevsim netdevsim2 netdevsim0: Failed to get key data for SA table [ 103.990817][ T4688] CIFS: VFS: \\127.0.0.1 Send error in SessSetup = -11 [ 103.998865][ T4688] CIFS: VFS: cifs_mount failed w/return code = -11 [ 104.627755][ T4717] loop3: detected capacity change from 0 to 8 [ 104.646454][ T4718] netlink: 60 bytes leftover after parsing attributes in process `syz.4.101'. [ 104.681664][ T147] Bluetooth: unknown link type 128 [ 105.298019][ T26] audit: type=1800 audit(1794065320.260:6): pid=4728 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.100" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 105.639743][ T4733] netlink: 4 bytes leftover after parsing attributes in process `syz.0.106'. [ 105.671810][ T4729] loop1: detected capacity change from 0 to 4096 [ 105.900750][ T4750] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 106.077233][ T26] audit: type=1800 audit(1794065321.040:7): pid=4761 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.104" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 106.144417][ T4762] netlink: 'syz.3.114': attribute type 12 has an invalid length. [ 106.153871][ T26] audit: type=1800 audit(1794065321.080:8): pid=4729 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.104" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 106.247614][ T4764] device syzkaller0 entered promiscuous mode [ 106.294727][ T4764] tipc: Started in network mode [ 106.331900][ T4764] tipc: Node identity 42c334ae040b, cluster identity 4711 [ 106.365437][ T4764] tipc: Enabled bearer , priority 0 [ 106.435729][ T4773] tipc: Resetting bearer [ 106.471552][ T4763] tipc: Resetting bearer [ 106.521022][ T4763] tipc: Disabling bearer [ 106.637441][ T4785] syz.3.123 uses obsolete (PF_INET,SOCK_PACKET) [ 106.694782][ T4266] Bluetooth: hci4: command 0x0409 tx timeout [ 106.732587][ T4791] netlink: 60 bytes leftover after parsing attributes in process `syz.0.126'. [ 106.797287][ T4791] netlink: 60 bytes leftover after parsing attributes in process `syz.0.126'. [ 106.815802][ T4787] tc action pedit offset must be on 32 bit boundaries [ 106.833615][ T4793] netlink: 60 bytes leftover after parsing attributes in process `syz.0.126'. [ 107.191491][ T4812] netdevsim netdevsim0 netdevsim0: IPsec offload requires 128 bit authentication [ 107.241226][ T4812] netdevsim netdevsim0 netdevsim0: Failed to get key data for SA table [ 107.551233][ T4826] device syzkaller0 entered promiscuous mode [ 107.592568][ T4826] tipc: Started in network mode [ 107.613026][ T4826] tipc: Node identity 46cbe730017b, cluster identity 4711 [ 107.652570][ T4826] tipc: Enabled bearer , priority 0 [ 107.702904][ T4826] tipc: Resetting bearer [ 107.747359][ T4823] tipc: Resetting bearer [ 107.794475][ T4823] tipc: Disabling bearer [ 107.946277][ T4676] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 108.025766][ T26] audit: type=1800 audit(1794065322.990:9): pid=4758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.104" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 108.669242][ T4872] netlink: 64 bytes leftover after parsing attributes in process `syz.3.152'. [ 108.762224][ T4872] device syzkaller1 entered promiscuous mode [ 108.812596][ T4872] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 109.313263][ T4915] netlink: 4 bytes leftover after parsing attributes in process `syz.2.167'. [ 109.464901][ T4923] ip_tables: iptables: counters copy to user failed while replacing table [ 109.785185][ T4941] netlink: 8 bytes leftover after parsing attributes in process `syz.4.178'. [ 109.836819][ T4949] netlink: 8 bytes leftover after parsing attributes in process `syz.4.178'. [ 109.873634][ T4949] netlink: 8 bytes leftover after parsing attributes in process `syz.4.178'. [ 109.903148][ T4949] netlink: 8 bytes leftover after parsing attributes in process `syz.4.178'. [ 109.933144][ T4949] netlink: 8 bytes leftover after parsing attributes in process `syz.4.178'. [ 111.164436][ T5052] netlink: 28 bytes leftover after parsing attributes in process `syz.0.208'. [ 111.523545][ T5068] device syzkaller0 entered promiscuous mode [ 112.455656][ T5126] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 112.535220][ T5126] Cannot find add_set index 0 as target [ 112.687869][ T5129] Set syz1 is full, maxelem 2076 reached [ 113.180804][ T5149] device syzkaller0 entered promiscuous mode [ 113.233453][ T5149] tipc: Enabled bearer , priority 0 [ 113.298158][ T5149] tipc: Resetting bearer [ 113.350847][ T5148] tipc: Resetting bearer [ 113.389913][ T5148] tipc: Disabling bearer [ 113.543775][ T5163] device syzkaller0 entered promiscuous mode [ 113.583927][ T5163] 0: reclassify loop, rule prio 0, protocol 800 [ 114.007475][ T5181] ip_tables: iptables: counters copy to user failed while replacing table [ 114.293476][ T5197] device syzkaller0 entered promiscuous mode [ 114.348989][ T5197] tipc: Enabled bearer , priority 0 [ 114.416120][ T5197] tipc: Resetting bearer [ 114.935056][ T5196] tipc: Resetting bearer [ 115.157622][ T5227] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 115.263574][ T5234] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 115.978089][ T5196] tipc: Disabling bearer [ 116.054957][ T4470] tipc: Node number set to 1187525806 [ 116.188968][ T4201] Bluetooth: hci4: link tx timeout [ 116.195326][ T4201] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 116.204664][ T4201] Bluetooth: hci4: link tx timeout [ 116.209829][ T4201] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 116.218106][ T4201] Bluetooth: hci4: link tx timeout [ 116.223276][ T4201] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 116.248732][ T4201] Bluetooth: hci4: link tx timeout [ 116.253928][ T4201] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 116.262153][ T4201] Bluetooth: hci4: link tx timeout [ 116.267425][ T4201] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 116.279044][ T4201] Bluetooth: hci4: link tx timeout [ 116.284204][ T4201] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 116.292275][ T4201] Bluetooth: hci4: link tx timeout [ 116.297516][ T4201] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 116.309405][ T4201] Bluetooth: hci4: link tx timeout [ 116.314568][ T4201] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 116.322312][ T4201] Bluetooth: hci4: link tx timeout [ 116.327588][ T4201] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 116.335349][ T4201] Bluetooth: hci4: link tx timeout [ 116.340496][ T4201] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 116.348265][ T4201] Bluetooth: hci4: link tx timeout [ 116.353410][ T4201] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 116.502115][ T4201] Bluetooth: hci4: link tx timeout [ 116.507422][ T4201] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 116.515551][ T4201] Bluetooth: hci4: link tx timeout [ 116.520708][ T4201] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 116.528754][ T4201] Bluetooth: hci4: link tx timeout [ 116.533901][ T4201] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 116.542498][ T4201] Bluetooth: hci4: link tx timeout [ 116.547710][ T4201] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 116.778494][ T5257] netlink: 'syz.3.283': attribute type 10 has an invalid length. [ 116.816548][ T5257] device macvlan0 entered promiscuous mode [ 116.877418][ T5257] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 116.913879][ T5263] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 116.958425][ T5263] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 116.993692][ T5263] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 117.031823][ T5263] device bridge_slave_0 left promiscuous mode [ 117.051363][ T5263] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.101183][ T5263] device bridge_slave_1 left promiscuous mode [ 117.116713][ T5263] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.154095][ T5263] bond0: (slave bond_slave_0): Releasing backup interface [ 117.234074][ T5263] bond0: (slave bond_slave_1): Releasing backup interface [ 117.301574][ T5263] team0: Port device team_slave_0 removed [ 117.330566][ T5263] team0: Port device team_slave_1 removed [ 117.342422][ T5263] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.350324][ T5263] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.362781][ T5263] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.370824][ T5263] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.397149][ T4381] bond0 speed is unknown, defaulting to 1000 [ 117.732738][ T5289] netlink: 16 bytes leftover after parsing attributes in process `syz.2.293'. [ 118.077758][ T5315] netlink: 76 bytes leftover after parsing attributes in process `syz.3.300'. [ 118.095964][ T5311] device syzkaller0 entered promiscuous mode [ 118.294740][ T4266] Bluetooth: hci4: command 0x0406 tx timeout [ 118.527075][ T5340] netlink: 'syz.4.307': attribute type 1 has an invalid length. [ 118.682166][ T5346] netlink: 8 bytes leftover after parsing attributes in process `syz.3.310'. [ 118.789603][ T5347] bond1: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 118.882197][ T5350] [ 118.884573][ T5350] ====================================================== [ 118.891640][ T5350] WARNING: possible circular locking dependency detected [ 118.898681][ T5350] syzkaller #0 Not tainted [ 118.903103][ T5350] ------------------------------------------------------ [ 118.910111][ T5350] syz.0.312/5350 is trying to acquire lock: [ 118.915998][ T5350] ffff88801e8c9f98 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0xfa/0x210 [ 118.927408][ T5350] [ 118.927408][ T5350] but task is already holding lock: [ 118.934783][ T5350] ffff88801e8c8120 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x249/0x520 [ 118.943757][ T5350] [ 118.943757][ T5350] which lock already depends on the new lock. [ 118.943757][ T5350] [ 118.954238][ T5350] [ 118.954238][ T5350] the existing dependency chain (in reverse order) is: [ 118.963265][ T5350] [ 118.963265][ T5350] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 118.971005][ T5350] lock_sock_nested+0x44/0x100 [ 118.976395][ T5350] smc_listen_out+0xd4/0x3c0 [ 118.981542][ T5350] smc_listen_work+0x52a/0xd10 [ 118.986835][ T5350] process_one_work+0x867/0xff0 [ 118.992252][ T5350] worker_thread+0xad7/0x12a0 [ 118.997455][ T5350] kthread+0x42e/0x520 [ 119.002049][ T5350] ret_from_fork+0x1f/0x30 [ 119.007004][ T5350] [ 119.007004][ T5350] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 119.017224][ T5350] __lock_acquire+0x38f7/0x7d40 [ 119.022879][ T5350] lock_acquire+0x19f/0x400 [ 119.027910][ T5350] __flush_work+0x116/0x210 [ 119.032959][ T5350] __cancel_work_timer+0x3f4/0x560 [ 119.038678][ T5350] smc_clcsock_release+0x5c/0xe0 [ 119.044148][ T5350] __smc_release+0x644/0x7b0 [ 119.049300][ T5350] smc_close_non_accepted+0xd1/0x1f0 [ 119.055128][ T5350] smc_close_active+0xae2/0xea0 [ 119.060498][ T5350] __smc_release+0x9c/0x7b0 [ 119.065528][ T5350] smc_release+0x2c1/0x520 [ 119.070482][ T5350] sock_close+0xbf/0x210 [ 119.075254][ T5350] __fput+0x212/0x8c0 [ 119.079755][ T5350] task_work_run+0x125/0x1a0 [ 119.084872][ T5350] exit_to_user_mode_loop+0x10f/0x130 [ 119.090792][ T5350] exit_to_user_mode_prepare+0xee/0x180 [ 119.096856][ T5350] syscall_exit_to_user_mode+0x16/0x40 [ 119.102850][ T5350] do_syscall_64+0x58/0xa0 [ 119.107810][ T5350] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 119.114228][ T5350] [ 119.114228][ T5350] other info that might help us debug this: [ 119.114228][ T5350] [ 119.124448][ T5350] Possible unsafe locking scenario: [ 119.124448][ T5350] [ 119.131905][ T5350] CPU0 CPU1 [ 119.137271][ T5350] ---- ---- [ 119.142646][ T5350] lock(sk_lock-AF_SMC/1); [ 119.147160][ T5350] lock((work_completion)(&new_smc->smc_listen_work)); [ 119.156638][ T5350] lock(sk_lock-AF_SMC/1); [ 119.163684][ T5350] lock((work_completion)(&new_smc->smc_listen_work)); [ 119.170702][ T5350] [ 119.170702][ T5350] *** DEADLOCK *** [ 119.170702][ T5350] [ 119.178946][ T5350] 2 locks held by syz.0.312/5350: [ 119.183980][ T5350] #0: ffff88805eb3c410 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x82/0x210 [ 119.194254][ T5350] #1: ffff88801e8c8120 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x249/0x520 [ 119.203655][ T5350] [ 119.203655][ T5350] stack backtrace: [ 119.209552][ T5350] CPU: 0 PID: 5350 Comm: syz.0.312 Not tainted syzkaller #0 [ 119.216847][ T5350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 119.226920][ T5350] Call Trace: [ 119.230220][ T5350] [ 119.233168][ T5350] dump_stack_lvl+0x188/0x250 [ 119.237889][ T5350] ? load_image+0x410/0x410 [ 119.242568][ T5350] ? show_regs_print_info+0x20/0x20 [ 119.247801][ T5350] ? print_circular_bug+0x12b/0x1a0 [ 119.253015][ T5350] check_noncircular+0x2f8/0x400 [ 119.257951][ T5350] ? deref_stack_reg+0xd0/0x120 [ 119.262799][ T5350] ? look_up_lock_class+0x71/0x110 [ 119.267908][ T5350] ? print_deadlock_bug+0x5d0/0x5d0 [ 119.273111][ T5350] ? lockdep_lock+0xf1/0x1f0 [ 119.277712][ T5350] ? lock_release+0xb5/0x8a0 [ 119.282338][ T5350] ? mark_lock+0x94/0x320 [ 119.286792][ T5350] ? _find_first_zero_bit+0xd1/0xf0 [ 119.292035][ T5350] __lock_acquire+0x38f7/0x7d40 [ 119.296928][ T5350] ? deref_stack_reg+0xd0/0x120 [ 119.301818][ T5350] ? verify_lock_unused+0x140/0x140 [ 119.307020][ T5350] ? mark_lock+0x94/0x320 [ 119.311352][ T5350] ? __lock_acquire+0x13b3/0x7d40 [ 119.316389][ T5350] ? lockdep_lock+0xf1/0x1f0 [ 119.321023][ T5350] lock_acquire+0x19f/0x400 [ 119.325528][ T5350] ? __flush_work+0xfa/0x210 [ 119.330142][ T5350] ? read_lock_is_recursive+0x10/0x10 [ 119.335539][ T5350] __flush_work+0x116/0x210 [ 119.340066][ T5350] ? __flush_work+0xfa/0x210 [ 119.344679][ T5350] ? flush_work+0x20/0x20 [ 119.349023][ T5350] ? try_to_grab_pending+0xfb/0x820 [ 119.354220][ T5350] ? mark_lock+0x94/0x320 [ 119.358558][ T5350] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 119.364578][ T5350] ? lock_chain_count+0x20/0x20 [ 119.369477][ T5350] ? mark_lock+0x94/0x320 [ 119.373916][ T5350] ? __cancel_work_timer+0x36a/0x560 [ 119.379221][ T5350] __cancel_work_timer+0x3f4/0x560 [ 119.384388][ T5350] ? cancel_work_sync+0x20/0x20 [ 119.389275][ T5350] ? __local_bh_enable_ip+0x136/0x1c0 [ 119.394676][ T5350] ? lockdep_hardirqs_on+0x94/0x140 [ 119.399906][ T5350] ? __local_bh_enable_ip+0x136/0x1c0 [ 119.405300][ T5350] ? _local_bh_enable+0xa0/0xa0 [ 119.410154][ T5350] smc_clcsock_release+0x5c/0xe0 [ 119.415101][ T5350] __smc_release+0x644/0x7b0 [ 119.419717][ T5350] smc_close_non_accepted+0xd1/0x1f0 [ 119.425043][ T5350] smc_close_active+0xae2/0xea0 [ 119.429894][ T5350] ? sock_no_sendpage_locked+0x1a0/0x1a0 [ 119.435537][ T5350] __smc_release+0x9c/0x7b0 [ 119.440072][ T5350] smc_release+0x2c1/0x520 [ 119.444506][ T5350] sock_close+0xbf/0x210 [ 119.448759][ T5350] ? sock_mmap+0x90/0x90 [ 119.452999][ T5350] __fput+0x212/0x8c0 [ 119.456991][ T5350] task_work_run+0x125/0x1a0 [ 119.461630][ T5350] exit_to_user_mode_loop+0x10f/0x130 [ 119.467090][ T5350] exit_to_user_mode_prepare+0xee/0x180 [ 119.472649][ T5350] syscall_exit_to_user_mode+0x16/0x40 [ 119.478114][ T5350] do_syscall_64+0x58/0xa0 [ 119.482550][ T5350] ? clear_bhb_loop+0x30/0x80 [ 119.487246][ T5350] ? clear_bhb_loop+0x30/0x80 [ 119.491922][ T5350] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 119.497837][ T5350] RIP: 0033:0x7f0943794b19 [ 119.502274][ T5350] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.521899][ T5350] RSP: 002b:00007fffbe316898 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 119.530315][ T5350] RAX: 0000000000000000 RBX: 00007f0943a1cda0 RCX: 00007f0943794b19 [ 119.538298][ T5350] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 119.546303][ T5350] RBP: 00007f0943a1cda0 R08: 00007f0943a1b038 R09: 0000000000000000 [ 119.554291][ T5350] R10: 00000000003ffcb4 R11: 0000000000000246 R12: 000000000001d2cd [ 119.562264][ T5350] R13: 00007f0943a1afac R14: 000000000001cffd R15: 00007fffbe3169a0 [ 119.570254][ T5350] [ 119.591196][ T5352] netlink: 12 bytes leftover after parsing attributes in process `syz.4.307'. [ 119.630241][ T5352] 8021q: adding VLAN 0 to HW filter on device bond1