last executing test programs: 8.552787999s ago: executing program 1 (id=426): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000020000000000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="30000000000b0102000000000100000003000000080002400000000008000340000000010b0001006d616e676c65"], 0x30}}, 0x20004084) 8.423443181s ago: executing program 1 (id=427): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x4000001) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0xfffffffd) ioctl$int_in(r2, 0x5452, &(0x7f0000000340)=0xf) r3 = accept4(r2, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000001000), 0x581, 0x40000000, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2, 0x20}, 0xe) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bond0\x00'}) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) ioctl$sock_ax25_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000180)={@null, @bcast, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @bcast, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r6, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) sendmsg$inet6(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@tclass={{0x14, 0x29, 0x43, 0x80007}}], 0x18}, 0x20048041) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7, 0x8001, 0x5}, &(0x7f0000000080)=0x14) 8.178562855s ago: executing program 1 (id=432): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, 0xffffffffffffffff, 0x0, 0x40000000000000}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f0000000100)="29000000140005b7ff000000040860eb0101b6ff021596db2d6d6974b5d728aa4b5d", 0x22) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x30, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSCATLST={0x8, 0xc, 0x0, 0x1, [{0x4, 0x7}]}]}, 0x30}}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@map, r0, 0x2e, 0x20, 0x0, @void, @void, @void, @value}, 0x20) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 7.962358538s ago: executing program 1 (id=435): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd2000100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) 7.572482623s ago: executing program 1 (id=440): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe) connect$vsock_stream(r1, &(0x7f0000000280)={0x28, 0x0, 0x2711, @local}, 0x10) shutdown(r1, 0x1) write(r1, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r2, 0x0, 0xffffffff000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={r2, 0x0, 0x0}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000500)={0x3, {{0x2, 0x4e22, @broadcast}}}, 0x88) mmap(&(0x7f0000551000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f00009c5000/0x4000)=nil, 0x4000, 0x3, 0x28012, r4, 0x0) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, r4, 0x0) socket$l2tp(0x2, 0x2, 0x73) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000010000000000000000000000711212000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x144, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@local, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {}, {}, {}, 0x0, 0x3502, 0x2, 0x0, 0xfd}, [@algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}}}, @tfcpad={0x8, 0x16, 0x34b}]}, 0x144}}, 0x0) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="19517b", @ANYRES16=0x0, @ANYBLOB="000400000000000000000d0000000500190005000000050018004d00000006000a0001"], 0x2c}, 0x1, 0x0, 0x0, 0x18000}, 0x4004011) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r6, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{0x11}, {0x0, 0x100000000000000}]}, 0x68) 6.37579866s ago: executing program 3 (id=455): r0 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0xa, 0x84}}}, 0xd8}, 0x1, 0x0, 0x0, 0xc800}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4affeeaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a"], 0x44}}, 0x4000010) 6.267621432s ago: executing program 3 (id=457): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x18) bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) socket$xdp(0x2c, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r3, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 5.792207538s ago: executing program 3 (id=463): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r0, &(0x7f00000004c0)='W', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x8}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, 0x0, 0x0) 5.69581984s ago: executing program 1 (id=465): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', 0xffffffffffffffff, 0x0, 0xd}, 0x18) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffc4c, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000400)=""/116, 0x74}], 0x1}}], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r1) 5.593652491s ago: executing program 3 (id=466): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2, 0x0, @void, @value}, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r3, 0x2, 0x2, 0x0, @void, @value}, 0x10) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r4, 0x2, 0x0, 0x0, &(0x7f0000000340)=[0x0, 0x0], 0x2, 0x0, 0x0, 0x0, 0x0}, 0x40) 5.473431723s ago: executing program 3 (id=468): socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r0, 0x849) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)}}], 0x1, 0x24008094) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x14, 0x0, 0x100, 0x0, 0x0, {0x1c}}, 0x14}, 0x1, 0x0, 0x0, 0x20044405}, 0x8044) socket(0x1d, 0x2, 0x6) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) unshare(0x24020400) unshare(0x22020400) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='memory.events\x00', 0x275a, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="ff", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) listen(r2, 0x9) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x27}, 0x62) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/12], 0x48) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r5, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 5.142314238s ago: executing program 3 (id=471): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000b00)={0x28, r1, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x40800) 1.596268418s ago: executing program 2 (id=500): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000180)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7004ffdbdf25180000005c0030805800018008000100000000000c000500018000000000000034000380060003009aaa000006000100020000000800020003000000080002000000000006000300a2aa000008000200030000000c000500000000000000000008000300", @ANYRES32=r3], 0x78}, 0x1, 0x0, 0x0, 0x854}, 0x8014) 1.529459749s ago: executing program 2 (id=501): unshare(0x2c060000) unshare(0x24060400) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000006c0)=@file={0x1, './file0\x00'}, 0x6e) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@o_path={&(0x7f00000002c0)='./file0\x00', 0x0, 0x4008, r0}, 0x6) 1.400302221s ago: executing program 2 (id=503): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000bc0)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43770122635aea1dc487fb381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5", 0x6b}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276", 0x85}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001f00)="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", 0x2e6}], 0x1}}], 0x3, 0xc0) 1.292445442s ago: executing program 2 (id=505): socket$kcm(0x2, 0x200000000000001, 0x106) socket$kcm(0x2, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) socket$vsock_stream(0x28, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYRES64=r0], 0x10) 1.120810435s ago: executing program 2 (id=507): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={r1, 0x2}, &(0x7f0000000140)=0x8) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f00000003c0)=@l2tp6={0xa, 0x0, 0x2, @remote, 0x20000000}, 0x80, 0x0, 0x0, 0x0, 0x17}, 0x0) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000100)=@sack_info={r1, 0x3, 0xfffffffc}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0x8, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f00000002c0)={'veth0\x00', 0xe00}) r7 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="3868259b", @ANYRES16=r9, @ANYBLOB="0100000000000000000001000000080005000100000006000600000000001400020077673000"/50], 0x38}, 0x1, 0x0, 0x0, 0x844}, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES64], 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYRES16=r8, @ANYRES16=r9, @ANYRES16=r9], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x40000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) 968.768657ms ago: executing program 0 (id=511): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@local, @empty, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0xfffc, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0x2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4, 0x9c00}]}}}}}}}, 0x0) 870.232928ms ago: executing program 0 (id=512): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x3f}, 0xfffffffc}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) shutdown(r1, 0x0) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/249, 0x1ff18}], 0x1}, 0x0) close(r3) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, 0x0, 0x0) r7 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x140, 0x5c, 0x160, 0x140, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'wg1\x00', {}, {0x222cecdb0fb5a62a}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x0, "d176"}}, @common=@unspec=@state={{0x28}, {0xfffffffd}}]}, @unspec=@CT0={0x48}}, {{@ipv6={@local, @private2, [], [0xff], 'veth1_to_hsr\x00', 'dummy0\x00', {}, {}, 0x88}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) sendmsg$nl_route(r7, 0x0, 0x20004000) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r7, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYRES16=r8, @ANYBLOB="10002abd7000ffdbdf250400000006001d000300000014001f"], 0x38}, 0x1, 0x0, 0x0, 0x28040084}, 0x4000001) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x40884) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000002c0)={0x64, r10, 0x1, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xffffffff, 0xc}}}}, [@NL80211_ATTR_FRAME={0x32, 0x33, @reassoc_req={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x6}, @device_b, @device_a, @random="d307e7b66e71", {0x9, 0xc4d}, @value=@ver_80211n={0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1}}, 0x10, 0x9, @device_a, {0x0, 0x6, @default_ap_ssid}, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}]}, 0x64}, 0x1, 0x0, 0x0, 0x6a845ecb4f20be71}, 0x24008080) sendmsg$TIPC_NL_LINK_GET(r5, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x840}, 0xd0) recvmmsg(r1, &(0x7f0000008880), 0x45b, 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "c5"}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x74}}, 0x0) 816.235649ms ago: executing program 2 (id=513): r0 = socket(0x40000000015, 0x5, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) 583.947522ms ago: executing program 4 (id=515): r0 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r0, 0x29, 0x21, &(0x7f0000000200), 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@un=@abs={0x0, 0x0, 0xa00}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x28}, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, &(0x7f00000000c0)) 512.313853ms ago: executing program 0 (id=516): r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x4000) close(r0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'dummy0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xc}, {0xfff3, 0x8}}}, 0x24}}, 0x20040000) 498.355463ms ago: executing program 4 (id=517): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)={0x34, r1, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVKEY={0x18, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) 359.696395ms ago: executing program 4 (id=518): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0xfff1}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x32ad}, @TCA_FLOW_MODE={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x408c0}, 0x4000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 280.314276ms ago: executing program 0 (id=519): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r2}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa004}, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) 232.955767ms ago: executing program 4 (id=520): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x22, 0x2, 0x3) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$xdp(0x2c, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x15) socket$alg(0x26, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r1, @ANYRESOCT=r0], 0x20) 216.307148ms ago: executing program 0 (id=521): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x12}, 0x20048004) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x208) r2 = accept4(r1, 0x0, 0x0, 0x80000) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r0, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) 72.02623ms ago: executing program 0 (id=522): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000040), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1982f80cdecd07f8908a983a7c9fb81c2ba7f7e87c991f30e50d1b3bbe4cf2a2f5d4571b6568ada51bc121c9139d2a8e0638c84066b1759081802"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000003540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003500)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x34000041) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000800), r3) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b80)={0x6c, r4, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x40011) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x780, 0x1d0, 0x5c8, 0x0, 0x5c8, 0x0, 0x6b0, 0x6b0, 0x6b0, 0x6b0, 0x6b0, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@ipv6={@loopback, @dev, [], [], 'batadv_slave_0\x00', 'ip6gretap0\x00', {}, {}, 0x2b}, 0x0, 0x1e0, 0x208, 0x7400, {}, [@common=@rt={{0x138}, {0x0, [0x0, 0x5], 0x0, 0x0, 0x0, [@dev, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, @private2, @private1, @dev, @dev={0xfe, 0x80, '\x00', 0x34}, @mcast2, @local, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, @loopback, @mcast1, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ipv6header={{0x28}, {0x81, 0x10, 0x1}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@socket3={{0x28}, 0x2}]}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7e0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x62040200) socket$rxrpc(0x21, 0x2, 0xa) socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, @mcast2, @mcast2={0xff, 0x3}, 0x0, 0x0, 0xfffffffe, 0xffffffff}}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="40000000190001090000000000000000021800000000fd010000000008000100ac141400080005000a0101020c00168008020000000000020600150002"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000fa62013400000000009500000057000000"], &(0x7f0000000040)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 71.82714ms ago: executing program 4 (id=523): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="0209"], 0x10}}, 0x0) 0s ago: executing program 4 (id=524): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x300, &(0x7f0000000180)=[{&(0x7f0000000340)="89000000120081ae08060cdc030000007f03e3f7000000106ee2ffca1b1f1400000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec001210000140090c0c00bdad446b9bbc7a46e39882a5dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0xff0f0000}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.217' (ED25519) to the list of known hosts. [ 39.797915][ T4017] cgroup: Unknown subsys name 'net' [ 40.018135][ T4017] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 40.373203][ T4017] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 41.803896][ T4028] chnl_net:caif_netlink_parms(): no params data found [ 41.825469][ T4039] chnl_net:caif_netlink_parms(): no params data found [ 41.839679][ T4027] chnl_net:caif_netlink_parms(): no params data found [ 41.912100][ T4028] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.914075][ T4028] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.916817][ T4028] device bridge_slave_0 entered promiscuous mode [ 41.930824][ T4034] chnl_net:caif_netlink_parms(): no params data found [ 41.951601][ T4028] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.953535][ T4028] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.956211][ T4028] device bridge_slave_1 entered promiscuous mode [ 41.990533][ T4039] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.992581][ T4039] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.995114][ T4039] device bridge_slave_0 entered promiscuous mode [ 42.021265][ T4039] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.023290][ T4039] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.025760][ T4039] device bridge_slave_1 entered promiscuous mode [ 42.030221][ T4028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.034916][ T4028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.052458][ T4027] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.054462][ T4027] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.057148][ T4027] device bridge_slave_0 entered promiscuous mode [ 42.076419][ T4027] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.078436][ T4027] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.081161][ T4027] device bridge_slave_1 entered promiscuous mode [ 42.092446][ T4028] team0: Port device team_slave_0 added [ 42.115842][ T4028] team0: Port device team_slave_1 added [ 42.119717][ T4027] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.124511][ T4039] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.127361][ T4038] chnl_net:caif_netlink_parms(): no params data found [ 42.144220][ T4027] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.153395][ T4039] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.158831][ T4034] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.160781][ T4034] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.163691][ T4034] device bridge_slave_0 entered promiscuous mode [ 42.173506][ T4028] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.175336][ T4028] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.187154][ T4028] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.206881][ T4039] team0: Port device team_slave_0 added [ 42.208793][ T4034] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.210718][ T4034] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.214754][ T4034] device bridge_slave_1 entered promiscuous mode [ 42.224655][ T4027] team0: Port device team_slave_0 added [ 42.226732][ T4028] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.228478][ T4028] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.236086][ T4028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.249755][ T4039] team0: Port device team_slave_1 added [ 42.259737][ T4027] team0: Port device team_slave_1 added [ 42.313290][ T4034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.316620][ T4027] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.318438][ T4027] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.325556][ T4027] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.329766][ T4027] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.331930][ T4027] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.338583][ T4027] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.348214][ T4039] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.350040][ T4039] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.357027][ T4039] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.367794][ T4034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.378103][ T4038] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.380049][ T4038] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.387399][ T4038] device bridge_slave_0 entered promiscuous mode [ 42.390806][ T4038] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.394126][ T4038] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.396717][ T4038] device bridge_slave_1 entered promiscuous mode [ 42.399228][ T4039] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.401474][ T4039] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.408468][ T4039] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.464281][ T4028] device hsr_slave_0 entered promiscuous mode [ 42.501429][ T4028] device hsr_slave_1 entered promiscuous mode [ 42.551578][ T4034] team0: Port device team_slave_0 added [ 42.603156][ T4027] device hsr_slave_0 entered promiscuous mode [ 42.641469][ T4027] device hsr_slave_1 entered promiscuous mode [ 42.681194][ T4027] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 42.683419][ T4027] Cannot create hsr debugfs directory [ 42.692908][ T4038] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.696540][ T4034] team0: Port device team_slave_1 added [ 42.699630][ T4038] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.769787][ T4038] team0: Port device team_slave_0 added [ 42.772268][ T4034] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.774100][ T4034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.780757][ T4034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.833219][ T4039] device hsr_slave_0 entered promiscuous mode [ 42.898378][ T4039] device hsr_slave_1 entered promiscuous mode [ 42.931441][ T4039] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 42.933515][ T4039] Cannot create hsr debugfs directory [ 42.941709][ T4038] team0: Port device team_slave_1 added [ 42.944725][ T4034] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.946555][ T4034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.953875][ T4034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 43.016336][ T4038] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 43.018196][ T4038] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.025701][ T4038] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 43.053846][ T4038] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 43.055716][ T4038] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.068206][ T4038] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 43.123196][ T4034] device hsr_slave_0 entered promiscuous mode [ 43.171584][ T4034] device hsr_slave_1 entered promiscuous mode [ 43.201175][ T4034] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 43.203238][ T4034] Cannot create hsr debugfs directory [ 43.353288][ T4038] device hsr_slave_0 entered promiscuous mode [ 43.391529][ T4038] device hsr_slave_1 entered promiscuous mode [ 43.431262][ T4038] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 43.433313][ T4038] Cannot create hsr debugfs directory [ 43.531628][ T1534] Bluetooth: hci1: command 0x0409 tx timeout [ 43.541405][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 43.554117][ T4027] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 43.609853][ T4027] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 43.611170][ T1534] Bluetooth: hci4: command 0x0409 tx timeout [ 43.613162][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 43.613584][ T1534] Bluetooth: hci2: command 0x0409 tx timeout [ 43.664529][ T4027] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 43.716268][ T4027] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 43.776150][ T4028] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 43.813321][ T4028] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 43.887130][ T4028] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 43.925471][ T4028] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 43.991386][ T4039] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 44.052309][ T4039] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 44.105151][ T4039] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 44.155442][ T4039] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 44.232868][ T4034] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 44.306874][ T4034] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 44.374251][ T4034] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 44.433262][ T4034] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 44.465542][ T4038] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 44.503929][ T4038] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 44.578523][ T4038] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 44.623323][ T4038] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 44.718996][ T4027] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.746540][ T4028] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.759924][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.764241][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.769371][ T4027] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.793030][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.795566][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.798066][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.800751][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.804510][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.806756][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.809569][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.823266][ T4028] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.834639][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.838119][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.840877][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.842964][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.866090][ T1631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.868583][ T1631] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.877528][ T1631] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.879353][ T1631] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.883870][ T1631] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.886295][ T1631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 44.896467][ T1631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.899060][ T1631] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.903631][ T1631] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.905383][ T1631] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.915394][ T4039] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.918450][ T1631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 44.921403][ T1631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 44.937638][ T1631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 44.941697][ T1631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 44.944830][ T1631] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 44.947453][ T1631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 44.950049][ T1631] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 44.956290][ T1631] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 44.983769][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.986373][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.989333][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 44.993173][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 44.995839][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.998551][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.004981][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 45.015877][ T4027] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 45.024665][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 45.027507][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 45.030520][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.037788][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.050530][ T1631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 45.057856][ T1631] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.060327][ T1631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 45.066321][ T1631] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.069836][ T4028] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 45.082834][ T4038] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.089042][ T4039] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.115623][ T4034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.122936][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.125312][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.140377][ T4038] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.144919][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.147640][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.150561][ T353] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.152612][ T353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.159881][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 45.175401][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.178161][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.182297][ T353] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.184410][ T353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.187130][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.189947][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.193864][ T353] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.195796][ T353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.198123][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.200874][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.204803][ T353] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.206731][ T353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.209053][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 45.218787][ T4034] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.232438][ T4027] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.236712][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.239281][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.251982][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 45.254079][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 45.268138][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 45.272663][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.275553][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.277988][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.279843][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.286545][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 45.289035][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 45.291484][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 45.302601][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 45.305507][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 45.308374][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 45.312435][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 45.315160][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 45.318076][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 45.330019][ T4028] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.338828][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 45.342158][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 45.344882][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.347510][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.349901][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.351794][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.355672][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 45.372679][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 45.375543][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 45.378311][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 45.393220][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 45.395752][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.398291][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 45.401662][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 45.404214][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 45.406700][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.409163][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 45.413545][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.416220][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 45.431167][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 45.434747][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.437286][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 45.439886][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.446153][ T4038] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 45.457176][ T4039] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 45.460874][ T4039] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 45.464632][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 45.467904][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 45.470629][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 45.475125][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.478671][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 45.501891][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 45.504832][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 45.507437][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 45.510330][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.514155][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 45.516726][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.519279][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 45.525117][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.531953][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.541830][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 45.548356][ T4027] device veth0_vlan entered promiscuous mode [ 45.570223][ T4034] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 45.590502][ T1631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 45.594538][ T1631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.597205][ T1631] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.600043][ T1631] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 45.616276][ T4027] device veth1_vlan entered promiscuous mode [ 45.622546][ T4078] Bluetooth: hci0: command 0x041b tx timeout [ 45.624230][ T4078] Bluetooth: hci1: command 0x041b tx timeout [ 45.633823][ T4028] device veth0_vlan entered promiscuous mode [ 45.666505][ T4028] device veth1_vlan entered promiscuous mode [ 45.670196][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 45.674066][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 45.678314][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 45.680769][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 45.684816][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 45.689813][ T4038] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.692087][ T4078] Bluetooth: hci4: command 0x041b tx timeout [ 45.692452][ T13] Bluetooth: hci2: command 0x041b tx timeout [ 45.699875][ T13] Bluetooth: hci3: command 0x041b tx timeout [ 45.707971][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 45.710588][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 45.714385][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.730180][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 45.732791][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 45.750915][ T4027] device veth0_macvtap entered promiscuous mode [ 45.760122][ T4027] device veth1_macvtap entered promiscuous mode [ 45.779043][ T4039] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.796452][ T1631] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 45.799038][ T1631] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 45.804906][ T1631] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 45.807046][ T1631] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 45.813498][ T4034] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.834401][ T1631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 45.837120][ T1631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.847977][ T4028] device veth0_macvtap entered promiscuous mode [ 45.853536][ T4027] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.861508][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 45.864265][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 45.867021][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.888487][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 45.891290][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.895226][ T4027] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.900380][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 45.904290][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 45.907014][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 45.909632][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.918205][ T4028] device veth1_macvtap entered promiscuous mode [ 45.934931][ T4027] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.937348][ T4027] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.939765][ T4027] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.944168][ T4027] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.957655][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 45.960305][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 45.965975][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.968747][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.972385][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 45.977556][ T4034] device veth0_vlan entered promiscuous mode [ 46.000907][ T1631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 46.004034][ T1631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.006819][ T1631] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.009394][ T1631] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.021982][ T4039] device veth0_vlan entered promiscuous mode [ 46.033380][ T4028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.036294][ T4028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.040148][ T4028] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.045983][ T4028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.048753][ T4028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.055390][ T4028] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.067629][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 46.070397][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.075242][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 46.078213][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.080973][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 46.083796][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.093171][ T4034] device veth1_vlan entered promiscuous mode [ 46.096939][ T4028] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.099571][ T4028] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.103287][ T4028] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.105630][ T4028] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.148952][ T4039] device veth1_vlan entered promiscuous mode [ 46.198995][ T1631] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.201824][ T1631] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.212086][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 46.214670][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 46.217513][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.220222][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 46.224624][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.227367][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.230011][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.240856][ T4034] device veth0_macvtap entered promiscuous mode [ 46.278907][ T4038] device veth0_vlan entered promiscuous mode [ 46.282090][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 46.284726][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 46.287334][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.296053][ T4039] device veth0_macvtap entered promiscuous mode [ 46.305236][ T353] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.307638][ T353] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.309639][ T4034] device veth1_macvtap entered promiscuous mode [ 46.320924][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 46.325597][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 46.328119][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 46.339113][ T4039] device veth1_macvtap entered promiscuous mode [ 46.355188][ T4038] device veth1_vlan entered promiscuous mode [ 46.368515][ T1631] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.370806][ T1631] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.391249][ T1631] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 46.394060][ T1631] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 46.396584][ T1631] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 46.399067][ T1631] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 46.413949][ T4038] device veth0_macvtap entered promiscuous mode [ 46.429605][ T1631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 46.440343][ T1631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.446438][ T1631] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 46.452083][ T4038] device veth1_macvtap entered promiscuous mode [ 46.473683][ T1631] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.474946][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.478793][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.485252][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.487156][ T1631] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.488007][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.495172][ T4034] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.509318][ T4038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.514341][ T4038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.517087][ T4038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.519865][ T4038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.523226][ T4038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.526011][ T4038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.529923][ T4038] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.532564][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 46.535186][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 46.537736][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 46.540471][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.543868][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 46.546523][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.550479][ T4039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.554432][ T4039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.556983][ T4039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.559860][ T4039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.563486][ T4039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.566261][ T4039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.568847][ T4039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.573344][ T4039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.593329][ T4039] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.616191][ T4038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.619159][ T4038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.624583][ T4038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.627321][ T4038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.639747][ T4038] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.646299][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.649227][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.655561][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.658426][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.661473][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.664328][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.668065][ T4034] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.670221][ T1631] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 46.674500][ T1631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.677318][ T1631] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 46.679979][ T1631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.683930][ T1631] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 46.686820][ T1631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.702338][ T4038] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.704734][ T4038] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.712268][ T4038] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.714664][ T4038] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.744497][ T4034] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.746723][ T4034] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.749489][ T4034] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.755969][ T4111] loop1: detected capacity change from 0 to 512 [ 46.756708][ T4034] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.766522][ T4039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.767944][ T4111] EXT4-fs (loop1): Ignoring removed oldalloc option [ 46.772143][ T4111] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 46.775515][ T4111] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 46.778961][ T4039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.784578][ T4039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.787447][ T4039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.790119][ T4039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.796347][ T4039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.798204][ T4111] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2825: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 46.799139][ T4039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.805512][ T4039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.809611][ T4111] EXT4-fs (loop1): 1 truncate cleaned up [ 46.809705][ T4039] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.821154][ T4111] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,oldalloc,barrier=0x0000000000000003,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 46.830292][ T1631] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 46.833826][ T1631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.848241][ T4039] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.856708][ T4039] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.868117][ T4039] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.870632][ T4039] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.005260][ T353] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.007578][ T353] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.010869][ T1800] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 47.208237][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.210528][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.238671][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 47.249332][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.251869][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.255011][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 47.320180][ T1631] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.327050][ T1631] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.342018][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 47.409095][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.433909][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.453877][ T1800] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 47.500550][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.527286][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.530294][ T1800] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 47.574703][ T4116] FAULT_INJECTION: forcing a failure. [ 47.574703][ T4116] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 47.578288][ T4116] CPU: 0 PID: 4116 Comm: syz.2.3 Not tainted 5.15.182-syzkaller #0 [ 47.580446][ T4116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 47.583096][ T4116] Call trace: [ 47.583921][ T4116] dump_backtrace+0x0/0x43c [ 47.585113][ T4116] show_stack+0x2c/0x3c [ 47.586213][ T4116] __dump_stack+0x30/0x40 [ 47.587342][ T4116] dump_stack_lvl+0xf8/0x160 [ 47.588532][ T4116] dump_stack+0x1c/0x5c [ 47.589633][ T4116] should_fail+0x3c0/0x51c [ 47.590772][ T4116] should_fail_usercopy+0x20/0x30 [ 47.592102][ T4116] simple_read_from_buffer+0xd0/0x264 [ 47.593488][ T4116] proc_fail_nth_read+0x19c/0x244 [ 47.594806][ T4116] vfs_read+0x278/0xa10 [ 47.595889][ T4116] ksys_read+0x120/0x210 [ 47.597028][ T4116] __arm64_sys_read+0x7c/0x90 [ 47.598237][ T4116] invoke_syscall+0x98/0x2b8 [ 47.599409][ T4116] el0_svc_common+0x138/0x258 [ 47.600632][ T4116] do_el0_svc+0x58/0x14c [ 47.601776][ T4116] el0_svc+0x78/0x1e0 [ 47.602813][ T4116] el0t_64_sync_handler+0xcc/0xe4 [ 47.604144][ T4116] el0t_64_sync+0x1a0/0x1a4 [ 47.691972][ T4074] Bluetooth: hci1: command 0x040f tx timeout [ 47.699440][ T4074] Bluetooth: hci0: command 0x040f tx timeout [ 47.771322][ T4076] Bluetooth: hci3: command 0x040f tx timeout [ 47.778607][ T4076] Bluetooth: hci2: command 0x040f tx timeout [ 47.780386][ T4076] Bluetooth: hci4: command 0x040f tx timeout [ 48.099712][ T4136] FAULT_INJECTION: forcing a failure. [ 48.099712][ T4136] name failslab, interval 1, probability 0, space 0, times 1 [ 48.103269][ T4136] CPU: 1 PID: 4136 Comm: syz.1.10 Not tainted 5.15.182-syzkaller #0 [ 48.105351][ T4136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 48.108033][ T4136] Call trace: [ 48.108923][ T4136] dump_backtrace+0x0/0x43c [ 48.110160][ T4136] show_stack+0x2c/0x3c [ 48.111301][ T4136] __dump_stack+0x30/0x40 [ 48.112474][ T4136] dump_stack_lvl+0xf8/0x160 [ 48.113733][ T4136] dump_stack+0x1c/0x5c [ 48.114812][ T4136] should_fail+0x3c0/0x51c [ 48.115988][ T4136] __should_failslab+0xbc/0x10c [ 48.117280][ T4136] should_failslab+0x10/0x28 [ 48.118486][ T4136] slab_pre_alloc_hook+0x64/0xec [ 48.119778][ T4136] __kmalloc+0xbc/0x44c [ 48.120937][ T4136] tomoyo_realpath_from_path+0xcc/0x510 [ 48.122363][ T4136] tomoyo_path_number_perm+0x1b0/0x518 [ 48.123764][ T4136] tomoyo_file_ioctl+0x2c/0x3c [ 48.125008][ T4136] security_file_ioctl+0x80/0xbc [ 48.126306][ T4136] __arm64_sys_ioctl+0xa8/0x1c8 [ 48.127584][ T4136] invoke_syscall+0x98/0x2b8 [ 48.128765][ T4136] el0_svc_common+0x138/0x258 [ 48.130031][ T4136] do_el0_svc+0x58/0x14c [ 48.131138][ T4136] el0_svc+0x78/0x1e0 [ 48.132179][ T4136] el0t_64_sync_handler+0xcc/0xe4 [ 48.133511][ T4136] el0t_64_sync+0x1a0/0x1a4 [ 48.474896][ T4136] ERROR: Out of memory at tomoyo_realpath_from_path. [ 49.098668][ T4148] loop3: detected capacity change from 0 to 764 [ 49.277434][ T4157] loop2: detected capacity change from 0 to 512 [ 49.319521][ T4160] FAULT_INJECTION: forcing a failure. [ 49.319521][ T4160] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 49.333497][ T4157] EXT4-fs (loop2): Ignoring removed oldalloc option [ 49.335634][ T4157] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 49.346876][ T4160] CPU: 1 PID: 4160 Comm: syz.1.17 Not tainted 5.15.182-syzkaller #0 [ 49.349125][ T4160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 49.351884][ T4160] Call trace: [ 49.352706][ T4160] dump_backtrace+0x0/0x43c [ 49.353908][ T4160] show_stack+0x2c/0x3c [ 49.355011][ T4160] __dump_stack+0x30/0x40 [ 49.356167][ T4160] dump_stack_lvl+0xf8/0x160 [ 49.357281][ T4160] dump_stack+0x1c/0x5c [ 49.358365][ T4160] should_fail+0x3c0/0x51c [ 49.359542][ T4160] should_fail_usercopy+0x20/0x30 [ 49.360970][ T4160] do_ip6t_set_ctl+0x590/0xe00 [ 49.362241][ T4160] nf_setsockopt+0x270/0x290 [ 49.363407][ T4160] ipv6_setsockopt+0x1a18/0x36dc [ 49.364717][ T4160] rawv6_setsockopt+0x204/0x7a4 [ 49.365945][ T4160] sock_common_setsockopt+0xb0/0xcc [ 49.367308][ T4160] __sys_setsockopt+0x2f8/0x4b0 [ 49.368601][ T4160] __arm64_sys_setsockopt+0xb8/0xd4 [ 49.369974][ T4160] invoke_syscall+0x98/0x2b8 [ 49.371147][ T4160] el0_svc_common+0x138/0x258 [ 49.372376][ T4160] do_el0_svc+0x58/0x14c [ 49.373518][ T4160] el0_svc+0x78/0x1e0 [ 49.374612][ T4160] el0t_64_sync_handler+0xcc/0xe4 [ 49.375894][ T4160] el0t_64_sync+0x1a0/0x1a4 [ 49.389554][ T4157] EXT4-fs (loop2): 1 truncate cleaned up [ 49.394414][ T4122] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5'. [ 49.397545][ T4157] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,oldalloc,barrier=0x0000000000000003,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 49.413910][ T4122] netlink: 'syz.4.5': attribute type 1 has an invalid length. [ 49.420854][ T4122] netlink: 'syz.4.5': attribute type 2 has an invalid length. [ 49.429941][ T4122] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5'. [ 49.642568][ T4165] rock: directory entry would overflow storage [ 49.644495][ T4165] rock: sig=0x4f50, size=4, remaining=3 [ 49.645955][ T4165] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 49.662227][ T4164] loop1: detected capacity change from 0 to 2048 [ 49.706925][ T4164] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 49.810743][ T4076] Bluetooth: hci0: command 0x0419 tx timeout [ 49.827364][ T4076] Bluetooth: hci1: command 0x0419 tx timeout [ 49.852310][ T4076] Bluetooth: hci4: command 0x0419 tx timeout [ 49.853981][ T4076] Bluetooth: hci2: command 0x0419 tx timeout [ 49.855874][ T4076] Bluetooth: hci3: command 0x0419 tx timeout [ 51.086430][ T4174] loop3: detected capacity change from 0 to 32768 [ 51.131975][ T4174] ======================================================= [ 51.131975][ T4174] WARNING: The mand mount option has been deprecated and [ 51.131975][ T4174] and is ignored by this kernel. Remove the mand [ 51.131975][ T4174] option from the mount to silence this warning. [ 51.131975][ T4174] ======================================================= [ 51.192144][ T4192] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 51.284771][ T4195] loop1: detected capacity change from 0 to 2048 [ 51.325638][ T4195] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 51.339238][ T4174] XFS (loop3): Mounting V5 Filesystem [ 51.412158][ T4209] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 51.416335][ T4195] FAULT_INJECTION: forcing a failure. [ 51.416335][ T4195] name failslab, interval 1, probability 0, space 0, times 0 [ 51.419678][ T4195] CPU: 1 PID: 4195 Comm: syz.1.26 Not tainted 5.15.182-syzkaller #0 [ 51.421745][ T4195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 51.424409][ T4195] Call trace: [ 51.425246][ T4195] dump_backtrace+0x0/0x43c [ 51.426445][ T4195] show_stack+0x2c/0x3c [ 51.427529][ T4195] __dump_stack+0x30/0x40 [ 51.428651][ T4195] dump_stack_lvl+0xf8/0x160 [ 51.429827][ T4195] dump_stack+0x1c/0x5c [ 51.430906][ T4195] should_fail+0x3c0/0x51c [ 51.432070][ T4195] __should_failslab+0xbc/0x10c [ 51.433322][ T4195] should_failslab+0x10/0x28 [ 51.434522][ T4195] slab_pre_alloc_hook+0x64/0xec [ 51.435825][ T4195] __kmalloc+0xbc/0x44c [ 51.436988][ T4195] tomoyo_realpath_from_path+0xcc/0x510 [ 51.438373][ T4195] tomoyo_path_number_perm+0x1b0/0x518 [ 51.439763][ T4195] tomoyo_path_mknod+0x138/0x180 [ 51.441059][ T4195] security_path_mknod+0xf8/0x14c [ 51.442407][ T4195] path_openat+0x8c4/0x26e4 [ 51.443566][ T4195] do_filp_open+0x164/0x330 [ 51.444759][ T4195] do_sys_openat2+0x128/0x3d8 [ 51.445966][ T4195] __arm64_sys_openat+0x120/0x154 [ 51.447302][ T4195] invoke_syscall+0x98/0x2b8 [ 51.448521][ T4195] el0_svc_common+0x138/0x258 [ 51.449736][ T4195] do_el0_svc+0x58/0x14c [ 51.450873][ T4195] el0_svc+0x78/0x1e0 [ 51.451934][ T4195] el0t_64_sync_handler+0xcc/0xe4 [ 51.453300][ T4195] el0t_64_sync+0x1a0/0x1a4 [ 51.460448][ T4195] ERROR: Out of memory at tomoyo_realpath_from_path. [ 51.464343][ T4195] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=2) [ 51.469176][ T4195] Remounting filesystem read-only [ 51.470889][ T4195] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=2) [ 51.478548][ T4206] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 51.541256][ T4174] XFS (loop3): Ending clean mount [ 51.545829][ T4174] XFS (loop3): Quotacheck needed: Please wait. [ 51.553738][ T4210] netlink: 'syz.0.28': attribute type 1 has an invalid length. [ 51.558985][ T4210] loop0: detected capacity change from 0 to 256 [ 51.593122][ T4193] loop2: detected capacity change from 0 to 40427 [ 51.612980][ T4210] exfat: Unknown parameter '' [ 51.619670][ T4212] loop1: detected capacity change from 0 to 764 [ 51.623120][ T4174] XFS (loop3): Quotacheck: Done. [ 51.634522][ T4193] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x1ffff [ 51.652760][ T4193] F2FS-fs (loop2): invalid crc value [ 51.690937][ T4193] F2FS-fs (loop2): Found nat_bits in checkpoint [ 51.797626][ T4193] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 51.981222][ T4027] XFS (loop3): Unmounting Filesystem [ 52.139147][ T4216] rock: directory entry would overflow storage [ 52.140814][ T4216] rock: sig=0x4f50, size=4, remaining=3 [ 52.142345][ T4216] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 52.164442][ T4189] loop4: detected capacity change from 0 to 40427 [ 52.193863][ T4219] FAULT_INJECTION: forcing a failure. [ 52.193863][ T4219] name failslab, interval 1, probability 0, space 0, times 0 [ 52.206259][ T4189] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x1ffff [ 52.215034][ T4189] F2FS-fs (loop4): invalid crc value [ 52.215113][ T4219] CPU: 1 PID: 4219 Comm: syz.0.32 Not tainted 5.15.182-syzkaller #0 [ 52.218606][ T4219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 52.221200][ T4219] Call trace: [ 52.222039][ T4219] dump_backtrace+0x0/0x43c [ 52.223215][ T4219] show_stack+0x2c/0x3c [ 52.224316][ T4219] __dump_stack+0x30/0x40 [ 52.225450][ T4219] dump_stack_lvl+0xf8/0x160 [ 52.226752][ T4219] dump_stack+0x1c/0x5c [ 52.227819][ T4219] should_fail+0x3c0/0x51c [ 52.229012][ T4219] __should_failslab+0xbc/0x10c [ 52.230324][ T4219] should_failslab+0x10/0x28 [ 52.231546][ T4219] slab_pre_alloc_hook+0x64/0xec [ 52.232888][ T4219] __kmalloc_node+0xb8/0x520 [ 52.234105][ T4219] __vmalloc_node_range+0x2c0/0x8d8 [ 52.235397][ T4219] vmalloc+0x118/0x190 [ 52.236466][ T4219] netlink_sendmsg+0x4ec/0x9cc [ 52.237702][ T4219] ____sys_sendmsg+0x61c/0x920 [ 52.238981][ T4219] ___sys_sendmsg+0x1d0/0x240 [ 52.240225][ T4219] __arm64_sys_sendmsg+0x1a8/0x254 [ 52.241600][ T4219] invoke_syscall+0x98/0x2b8 [ 52.242887][ T4219] el0_svc_common+0x138/0x258 [ 52.244156][ T4219] do_el0_svc+0x58/0x14c [ 52.245279][ T4219] el0_svc+0x78/0x1e0 [ 52.246328][ T4219] el0t_64_sync_handler+0xcc/0xe4 [ 52.247721][ T4219] el0t_64_sync+0x1a0/0x1a4 [ 52.270164][ T4189] F2FS-fs (loop4): Found nat_bits in checkpoint [ 52.332138][ T4189] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 52.444311][ T4232] loop0: detected capacity change from 0 to 512 [ 52.638463][ T4232] EXT4-fs (loop0): Ignoring removed oldalloc option [ 52.640644][ T4232] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 52.640945][ T4234] loop3: detected capacity change from 0 to 4096 [ 52.678988][ T4232] EXT4-fs (loop0): 1 truncate cleaned up [ 52.680651][ T4232] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,oldalloc,barrier=0x0000000000000003,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 52.927101][ T4243] loop1: detected capacity change from 0 to 256 [ 52.942723][ T4243] FAT-fs (loop1): Unrecognized mount option "nnonumtail=1" or missing value [ 52.985082][ T4247] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 53.020759][ T4247] loop2: detected capacity change from 0 to 256 [ 53.172644][ T4250] loop3: detected capacity change from 0 to 16 [ 53.226446][ T4250] erofs: (device loop3): mounted with root inode @ nid 36. [ 53.387249][ T4255] syz.1.38 sent an empty control message without MSG_MORE. [ 53.756660][ T4250] netem: incorrect gi model size [ 53.758137][ T4250] netem: change failed [ 53.891901][ T4257] team0: Cannot enslave team device to itself [ 53.940940][ T4257] libceph: resolve '0' (ret=-3): failed [ 54.077621][ T4262] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 54.079548][ T4262] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 54.154942][ T4262] vhci_hcd vhci_hcd.0: Device attached [ 54.181144][ T4263] vhci_hcd: connection closed [ 54.188121][ T148] vhci_hcd: stop threads [ 54.192287][ T148] vhci_hcd: release socket [ 54.193561][ T148] vhci_hcd: disconnect device [ 54.394398][ T4271] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 54.396196][ T4271] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 54.405974][ T4274] FAULT_INJECTION: forcing a failure. [ 54.405974][ T4274] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 54.409495][ T4274] CPU: 0 PID: 4274 Comm: syz.3.46 Not tainted 5.15.182-syzkaller #0 [ 54.411561][ T4274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 54.413939][ T4266] loop1: detected capacity change from 0 to 8192 [ 54.414192][ T4274] Call trace: [ 54.416709][ T4274] dump_backtrace+0x0/0x43c [ 54.417722][ T4271] vhci_hcd vhci_hcd.0: Device attached [ 54.417908][ T4274] show_stack+0x2c/0x3c [ 54.420323][ T4274] __dump_stack+0x30/0x40 [ 54.421449][ T4274] dump_stack_lvl+0xf8/0x160 [ 54.422625][ T4274] dump_stack+0x1c/0x5c [ 54.423700][ T4274] should_fail+0x3c0/0x51c [ 54.424852][ T4274] should_fail_usercopy+0x20/0x30 [ 54.426203][ T4274] simple_read_from_buffer+0xd0/0x264 [ 54.427601][ T4274] proc_fail_nth_read+0x19c/0x244 [ 54.428937][ T4274] vfs_read+0x278/0xa10 [ 54.430027][ T4274] ksys_read+0x120/0x210 [ 54.431078][ T4274] __arm64_sys_read+0x7c/0x90 [ 54.432261][ T4274] invoke_syscall+0x98/0x2b8 [ 54.433518][ T4274] el0_svc_common+0x138/0x258 [ 54.434697][ T4274] do_el0_svc+0x58/0x14c [ 54.435820][ T4274] el0_svc+0x78/0x1e0 [ 54.436854][ T4274] el0t_64_sync_handler+0xcc/0xe4 [ 54.438159][ T4274] el0t_64_sync+0x1a0/0x1a4 [ 54.454269][ T4244] loop4: detected capacity change from 0 to 32768 [ 54.533306][ T4244] (syz.4.34,4244,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 54.547110][ T4244] (syz.4.34,4244,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 54.581932][ T4272] vhci_hcd: connection closed [ 54.583162][ T4177] vhci_hcd: stop threads [ 54.585145][ T4253] loop2: detected capacity change from 0 to 32768 [ 54.585559][ T4177] vhci_hcd: release socket [ 54.593106][ T4177] vhci_hcd: disconnect device [ 54.601629][ T4073] vhci_hcd: vhci_device speed not set [ 54.642963][ T4244] JBD2: Ignoring recovery information on journal [ 54.646587][ T4253] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.41 (4253) [ 54.751157][ T4253] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 54.753771][ T4253] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 54.756511][ T4253] BTRFS info (device loop2): force lzo compression, level 0 [ 54.766663][ T4253] BTRFS info (device loop2): setting nodatasum [ 54.768314][ T4253] BTRFS info (device loop2): use lzo compression, level 0 [ 54.772906][ T4253] BTRFS info (device loop2): using free space tree [ 54.774709][ T4253] BTRFS info (device loop2): has skinny extents [ 54.782445][ T4282] FAULT_INJECTION: forcing a failure. [ 54.782445][ T4282] name failslab, interval 1, probability 0, space 0, times 0 [ 54.785774][ T4282] CPU: 1 PID: 4282 Comm: syz.3.49 Not tainted 5.15.182-syzkaller #0 [ 54.787907][ T4282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 54.790675][ T4282] Call trace: [ 54.791599][ T4282] dump_backtrace+0x0/0x43c [ 54.792823][ T4282] show_stack+0x2c/0x3c [ 54.793928][ T4282] __dump_stack+0x30/0x40 [ 54.795091][ T4282] dump_stack_lvl+0xf8/0x160 [ 54.796362][ T4282] dump_stack+0x1c/0x5c [ 54.797440][ T4282] should_fail+0x3c0/0x51c [ 54.798584][ T4282] __should_failslab+0xbc/0x10c [ 54.799857][ T4282] should_failslab+0x10/0x28 [ 54.801102][ T4282] slab_pre_alloc_hook+0x64/0xec [ 54.802403][ T4282] __kmalloc_node+0xb8/0x520 [ 54.803671][ T4282] __vmalloc_node_range+0x2c0/0x8d8 [ 54.805103][ T4282] vmalloc+0x118/0x190 [ 54.806184][ T4282] netlink_sendmsg+0x4ec/0x9cc [ 54.807456][ T4282] ____sys_sendmsg+0x61c/0x920 [ 54.808726][ T4282] ___sys_sendmsg+0x1d0/0x240 [ 54.809949][ T4282] __arm64_sys_sendmsg+0x1a8/0x254 [ 54.811341][ T4282] invoke_syscall+0x98/0x2b8 [ 54.812603][ T4282] el0_svc_common+0x138/0x258 [ 54.813862][ T4282] do_el0_svc+0x58/0x14c [ 54.815001][ T4282] el0_svc+0x78/0x1e0 [ 54.816027][ T4282] el0t_64_sync_handler+0xcc/0xe4 [ 54.817433][ T4282] el0t_64_sync+0x1a0/0x1a4 [ 54.832765][ T4283] loop0: detected capacity change from 0 to 64 [ 54.868426][ T4283] netlink: 292 bytes leftover after parsing attributes in process `syz.0.50'. [ 54.947344][ T4244] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 54.955752][ T4293] netlink: 256 bytes leftover after parsing attributes in process `syz.3.51'. [ 54.994263][ T4292] loop3: detected capacity change from 0 to 4096 [ 55.197574][ T4038] ocfs2: Unmounting device (7,4) on (node local) [ 55.455723][ T4322] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 55.457508][ T4322] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 55.460148][ T4322] vhci_hcd vhci_hcd.0: Device attached [ 55.474017][ T4322] loop0: detected capacity change from 0 to 8 [ 55.540525][ T4322] SQUASHFS error: lzo decompression failed, data probably corrupt [ 55.574505][ T4322] SQUASHFS error: Failed to read block 0x91: -5 [ 55.576353][ T4322] SQUASHFS error: Unable to read metadata cache entry [8f] [ 55.616181][ T4322] SQUASHFS error: Unable to read inode 0x11f [ 55.672908][ T4324] vhci_hcd: connection closed [ 55.673146][ T148] vhci_hcd: stop threads [ 55.675543][ T148] vhci_hcd: release socket [ 55.676855][ T148] vhci_hcd: disconnect device [ 55.805517][ T4276] loop1: detected capacity change from 0 to 40427 [ 55.824043][ T4276] udc-core: couldn't find an available UDC or it's busy [ 55.825934][ T4276] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 55.831378][ T4222] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop2 scanned by udevd (4222) [ 55.877028][ T4342] netlink: 580 bytes leftover after parsing attributes in process `syz.2.60'. [ 55.880292][ T4340] netlink: 580 bytes leftover after parsing attributes in process `syz.2.60'. [ 56.066940][ T4320] loop3: detected capacity change from 0 to 32768 [ 56.069534][ T4320] XFS: ikeep mount option is deprecated. [ 56.119325][ T4320] XFS (loop3): Mounting V5 Filesystem [ 56.317906][ T4365] process 'syz.0.65' launched './file1' with NULL argv: empty string added [ 56.328348][ T4320] XFS (loop3): Ending clean mount [ 56.338940][ T4320] XFS (loop3): Quotacheck needed: Please wait. [ 56.375584][ T4320] XFS (loop3): Quotacheck: Done. [ 56.428369][ T4368] autofs4:pid:4368:autofs_fill_super: called with bogus options [ 56.590303][ T4380] loop0: detected capacity change from 0 to 256 [ 56.630790][ T4027] XFS (loop3): Unmounting Filesystem [ 56.656073][ T4380] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 56.658983][ T4380] FAT-fs (loop0): Filesystem has been set read-only [ 56.696628][ T4380] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 56.699398][ T4380] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 56.707050][ T4382] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 56.709900][ T4382] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 56.716675][ T4382] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 56.721675][ T4383] loop1: detected capacity change from 0 to 512 [ 56.769708][ T4383] EXT4-fs (loop1): Ignoring removed oldalloc option [ 56.771551][ T4383] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 56.790538][ T4383] EXT4-fs (loop1): 1 truncate cleaned up [ 56.794605][ T4383] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,oldalloc,barrier=0x0000000000000003,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 57.057192][ T4376] loop4: detected capacity change from 0 to 32768 [ 57.847895][ T4376] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.69 (4376) [ 57.891842][ T4392] loop0: detected capacity change from 0 to 1024 [ 58.068165][ T4376] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 58.070515][ T4376] BTRFS info (device loop4): force clearing of disk cache [ 58.073557][ T4376] BTRFS info (device loop4): force zlib compression, level 3 [ 58.075698][ T4376] BTRFS warning (device loop4): excessive commit interval 4096 [ 58.077606][ T4376] BTRFS info (device loop4): enabling auto defrag [ 58.089658][ T4376] BTRFS info (device loop4): metadata ratio 257 [ 58.111163][ T4376] BTRFS info (device loop4): enabling disk space caching [ 58.113195][ T4376] BTRFS info (device loop4): disk space caching is enabled [ 58.117275][ T4376] BTRFS info (device loop4): has skinny extents [ 58.862611][ T4392] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 58.974851][ T4392] tipc: Started in network mode [ 58.976460][ T4392] tipc: Node identity 4, cluster identity 4711 [ 58.978192][ T4392] tipc: Node number set to 4 [ 59.017937][ T4399] loop1: detected capacity change from 0 to 32768 [ 59.075043][ T4411] loop3: detected capacity change from 0 to 2048 [ 59.080341][ T4412] netlink: 8 bytes leftover after parsing attributes in process `syz.3.72'. [ 59.364770][ T4376] BTRFS info (device loop4): enabling ssd optimizations [ 59.367544][ T4376] BTRFS info (device loop4): clearing free space tree [ 59.369633][ T4376] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 59.394196][ T4376] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 60.501429][ T4454] loop0: detected capacity change from 0 to 2048 [ 61.470714][ T4468] loop1: detected capacity change from 0 to 512 [ 61.481915][ T4454] EXT4-fs (loop0): mounted filesystem without journal. Opts: min_batch_time=0x000000000000000d,mb_optimize_scan=0x0000000000000001,noblock_validity,,errors=continue. Quota mode: none. [ 61.502601][ T4468] EXT4-fs (loop1): Ignoring removed oldalloc option [ 61.504427][ T4468] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 61.635968][ T4436] loop3: detected capacity change from 0 to 40427 [ 61.650092][ T4468] EXT4-fs (loop1): 1 truncate cleaned up [ 61.651855][ T4468] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,oldalloc,barrier=0x0000000000000003,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 62.383087][ T4454] Zero length message leads to an empty skb [ 62.597616][ T4478] sched: RT throttling activated [ 63.224288][ T4484] loop2: detected capacity change from 0 to 256 [ 63.336023][ T4484] FAT-fs (loop2): Unrecognized mount option "nnonumtail=1" or missing value [ 63.643573][ T4494] FAULT_INJECTION: forcing a failure. [ 63.643573][ T4494] name failslab, interval 1, probability 0, space 0, times 0 [ 63.647018][ T4494] CPU: 0 PID: 4494 Comm: syz.1.96 Not tainted 5.15.182-syzkaller #0 [ 63.649054][ T4494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 63.651656][ T4494] Call trace: [ 63.652504][ T4494] dump_backtrace+0x0/0x43c [ 63.653766][ T4494] show_stack+0x2c/0x3c [ 63.654910][ T4494] __dump_stack+0x30/0x40 [ 63.656135][ T4494] dump_stack_lvl+0xf8/0x160 [ 63.657359][ T4494] dump_stack+0x1c/0x5c [ 63.658482][ T4494] should_fail+0x3c0/0x51c [ 63.659666][ T4494] __should_failslab+0xbc/0x10c [ 63.660951][ T4494] should_failslab+0x10/0x28 [ 63.662185][ T4494] slab_pre_alloc_hook+0x64/0xec [ 63.663501][ T4494] __kmalloc+0xbc/0x44c [ 63.664570][ T4494] tomoyo_realpath_from_path+0xcc/0x510 [ 63.666063][ T4494] tomoyo_path_number_perm+0x1b0/0x518 [ 63.667493][ T4494] tomoyo_file_ioctl+0x2c/0x3c [ 63.668767][ T4494] security_file_ioctl+0x80/0xbc [ 63.670107][ T4494] __arm64_sys_ioctl+0xa8/0x1c8 [ 63.671435][ T4494] invoke_syscall+0x98/0x2b8 [ 63.672603][ T4494] el0_svc_common+0x138/0x258 [ 63.673874][ T4494] do_el0_svc+0x58/0x14c [ 63.675012][ T4494] el0_svc+0x78/0x1e0 [ 63.676126][ T4494] el0t_64_sync_handler+0xcc/0xe4 [ 63.677447][ T4494] el0t_64_sync+0x1a0/0x1a4 [ 63.678779][ T4494] ERROR: Out of memory at tomoyo_realpath_from_path. [ 64.377714][ T4504] netlink: 'syz.2.99': attribute type 2 has an invalid length. [ 64.407561][ T4500] loop1: detected capacity change from 0 to 2048 [ 64.477993][ T4500] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 64.545274][ T4511] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 64.596167][ T4500] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=2) [ 64.609616][ T4500] Remounting filesystem read-only [ 64.616538][ T4500] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=2) [ 64.734016][ T4517] loop3: detected capacity change from 0 to 1024 [ 64.830546][ T4517] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 64.876652][ T4525] loop0: detected capacity change from 0 to 4096 [ 65.872481][ T4503] loop4: detected capacity change from 0 to 32768 [ 65.895756][ T4534] loop2: detected capacity change from 0 to 128 [ 66.014259][ T4532] loop1: detected capacity change from 0 to 32768 [ 66.079095][ T4535] netlink: 14 bytes leftover after parsing attributes in process `syz.0.106'. [ 67.604934][ T4546] loop4: detected capacity change from 0 to 1024 [ 67.817206][ T4546] hfsplus: bad catalog entry type [ 67.972861][ T4561] loop3: detected capacity change from 0 to 512 [ 68.038131][ T4561] EXT4-fs error (device loop3): ext4_do_update_inode:5203: inode #16: comm syz.3.113: corrupted inode contents [ 68.044028][ T4561] EXT4-fs error (device loop3): ext4_dirty_inode:6039: inode #16: comm syz.3.113: mark_inode_dirty error [ 68.047478][ T4561] EXT4-fs error (device loop3): ext4_do_update_inode:5203: inode #16: comm syz.3.113: corrupted inode contents [ 68.095266][ T4561] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #16: comm syz.3.113: mark_inode_dirty error [ 68.108346][ T4561] EXT4-fs error (device loop3): ext4_do_update_inode:5203: inode #16: comm syz.3.113: corrupted inode contents [ 68.152662][ T4561] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 68.173631][ T4561] EXT4-fs error (device loop3): ext4_do_update_inode:5203: inode #16: comm syz.3.113: corrupted inode contents [ 68.194820][ T4561] EXT4-fs error (device loop3): ext4_truncate:4273: inode #16: comm syz.3.113: mark_inode_dirty error [ 68.215809][ T4561] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 68.230202][ T4561] EXT4-fs (loop3): 1 truncate cleaned up [ 68.241507][ T4561] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 68.355313][ T4569] loop2: detected capacity change from 0 to 764 [ 68.440871][ T4544] loop1: detected capacity change from 0 to 40427 [ 69.303026][ T4569] rock: directory entry would overflow storage [ 69.304805][ T4569] rock: sig=0x4f50, size=4, remaining=3 [ 69.306237][ T4569] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 69.424672][ T4544] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x1ffff [ 69.442552][ T4544] F2FS-fs (loop1): invalid crc value [ 69.466731][ T4544] F2FS-fs (loop1): Found nat_bits in checkpoint [ 69.524502][ T4544] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 69.628607][ T2057] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.630597][ T2057] ieee802154 phy1 wpan1: encryption failed: -22 [ 69.719853][ T4028] attempt to access beyond end of device [ 69.719853][ T4028] loop1: rw=2049, want=45104, limit=40427 [ 70.513309][ T4588] loop3: detected capacity change from 0 to 2048 [ 70.568207][ T1631] hfsplus: b-tree write err: -5, ino 4 [ 70.635935][ T4588] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 70.638356][ T4588] UDF-fs: Scanning with blocksize 512 failed [ 70.707967][ T4594] loop4: detected capacity change from 0 to 4096 [ 70.987086][ T4588] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 71.012272][ T4597] x_tables: unsorted underflow at hook 3 [ 71.025897][ T4597] device syzkaller1 entered promiscuous mode [ 71.277661][ T4604] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 72.140075][ T4600] loop0: detected capacity change from 0 to 262144 [ 72.234047][ T4600] F2FS-fs (loop0): invalid crc value [ 72.267022][ T4600] F2FS-fs (loop0): Found nat_bits in checkpoint [ 72.282523][ T4600] F2FS-fs (loop0): Start checkpoint disabled! [ 72.308619][ T4617] netlink: 8 bytes leftover after parsing attributes in process `syz.4.131'. [ 72.321167][ T4600] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 72.672769][ T4624] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input2 [ 72.937980][ T4634] syz.4.138 uses obsolete (PF_INET,SOCK_PACKET) [ 73.057238][ T4642] netlink: 8 bytes leftover after parsing attributes in process `syz.0.141'. [ 73.197718][ T4648] tipc: Started in network mode [ 73.209399][ T4648] tipc: Node identity e6f6b44907e4, cluster identity 4711 [ 73.234829][ T4648] tipc: Enabled bearer , priority 0 [ 73.243001][ T4650] netlink: 'syz.2.145': attribute type 12 has an invalid length. [ 73.245120][ T4650] netlink: 132 bytes leftover after parsing attributes in process `syz.2.145'. [ 73.340850][ T4654] netlink: 164 bytes leftover after parsing attributes in process `syz.3.143'. [ 73.382990][ T4655] syzkaller0: MTU too low for tipc bearer [ 73.384556][ T4655] tipc: Disabling bearer [ 73.484339][ T4657] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.518319][ T4661] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.674104][ T4657] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.769458][ T4657] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.888507][ T4657] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.107522][ T4657] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.116172][ T4333] af_packet: tpacket_rcv: packet too big, clamped from 90 to 4294967286. macoff=82 [ 74.146674][ T4657] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.166433][ T4657] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.199299][ T4657] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.501414][ T4713] netlink: 'syz.3.165': attribute type 10 has an invalid length. [ 74.528389][ T4716] netlink: 4 bytes leftover after parsing attributes in process `syz.2.166'. [ 74.629986][ T4713] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.642185][ T4713] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 74.743868][ T21] cfg80211: failed to load regulatory.db [ 74.754825][ T4730] netem: incorrect ge model size [ 74.760746][ T4730] netem: change failed [ 75.254804][ T4762] netlink: 'syz.2.183': attribute type 3 has an invalid length. [ 75.496077][ T4777] netlink: 36 bytes leftover after parsing attributes in process `syz.1.187'. [ 75.630370][ T4779] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.825020][ T4779] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.962283][ T4779] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.979528][ T4798] batman_adv: batadv0: Adding interface: ip6gretap1 [ 75.992132][ T4798] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.017061][ T4798] batman_adv: batadv0: Interface activated: ip6gretap1 [ 76.083893][ T4779] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.236984][ T4804] netlink: 4 bytes leftover after parsing attributes in process `syz.4.195'. [ 76.502916][ T4811] netlink: 'syz.4.198': attribute type 1 has an invalid length. [ 76.543163][ T4811] 8021q: adding VLAN 0 to HW filter on device bond1 [ 76.557676][ T4779] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.583000][ T4815] bond1: (slave gretap1): making interface the new active one [ 76.592038][ T4815] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 76.603968][ T4779] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.618530][ T4779] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.627789][ T1800] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 76.634431][ T4779] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.132736][ T4842] device batadv_slave_1 entered promiscuous mode [ 77.135647][ T4841] device batadv_slave_1 left promiscuous mode [ 77.282468][ T4851] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 77.286095][ T4851] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.288215][ T4851] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.465246][ T4867] netlink: 8 bytes leftover after parsing attributes in process `syz.4.215'. [ 77.786522][ T4887] xt_CT: No such helper "snmp" [ 78.924877][ T4921] device batadv1 entered promiscuous mode [ 78.929470][ T4920] netlink: 224 bytes leftover after parsing attributes in process `syz.1.238'. [ 79.530261][ T4953] device geneve2 entered promiscuous mode [ 80.297082][ T4985] netlink: 12 bytes leftover after parsing attributes in process `syz.3.265'. [ 80.356399][ T4985] netlink: 52 bytes leftover after parsing attributes in process `syz.3.265'. [ 80.454897][ T4991] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 80.525202][ T4994] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.617582][ T4994] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.656114][ T4994] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.706609][ T4994] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.220136][ T5015] netlink: 56 bytes leftover after parsing attributes in process `syz.2.276'. [ 81.809582][ T5031] netlink: 4 bytes leftover after parsing attributes in process `syz.1.281'. [ 81.861601][ T5031] netlink: 12 bytes leftover after parsing attributes in process `syz.1.281'. [ 82.058957][ T4994] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.079463][ T4994] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.107654][ T4994] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.132958][ T4994] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.406155][ T5051] device vlan2 entered promiscuous mode [ 82.476103][ T5051] netlink: 4 bytes leftover after parsing attributes in process `syz.3.289'. [ 82.808507][ T5059] netlink: 24 bytes leftover after parsing attributes in process `syz.0.292'. [ 82.814906][ T5059] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.838526][ T5059] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.477089][ T5073] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.562477][ T5073] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.686163][ T5073] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.813673][ T5073] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.013164][ T5073] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.019070][ T5073] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.046020][ T5073] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.072838][ T5073] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.183165][ T5083] netlink: 48 bytes leftover after parsing attributes in process `syz.2.299'. [ 84.198549][ T5083] netlink: 24 bytes leftover after parsing attributes in process `syz.2.299'. [ 84.306805][ T5086] netlink: 'syz.0.300': attribute type 10 has an invalid length. [ 84.351522][ T5086] team0: Device ipvlan1 failed to register rx_handler [ 84.536332][ T5092] device hsr0 entered promiscuous mode [ 84.542108][ T5092] netlink: 4 bytes leftover after parsing attributes in process `syz.0.302'. [ 84.551510][ T5092] device hsr_slave_0 left promiscuous mode [ 84.604835][ T5092] device hsr_slave_1 left promiscuous mode [ 84.652369][ T5091] xt_CT: No such helper "snmp" [ 84.783237][ T5092] device hsr0 left promiscuous mode [ 85.938225][ T5042] Set syz1 is full, maxelem 65536 reached [ 86.110867][ T5137] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 86.114985][ T5137] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 86.117297][ T5137] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 86.121120][ T5137] device bridge_slave_0 left promiscuous mode [ 86.123123][ T5137] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.168450][ T5137] device bridge_slave_1 left promiscuous mode [ 86.170321][ T5137] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.225858][ T5137] bond0: (slave bond_slave_0): Releasing backup interface [ 86.277581][ T5137] bond0: (slave bond_slave_1): Releasing backup interface [ 86.355383][ T5137] team0: Port device team_slave_0 removed [ 86.378174][ T5137] team0: Port device team_slave_1 removed [ 86.380301][ T5137] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.383398][ T5137] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.386594][ T5137] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.388631][ T5137] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.517767][ T5149] netlink: 'syz.2.324': attribute type 25 has an invalid length. [ 86.519796][ T5149] netlink: 'syz.2.324': attribute type 7 has an invalid length. [ 86.570322][ T5155] netlink: 'syz.2.327': attribute type 29 has an invalid length. [ 86.574532][ T5155] netlink: 'syz.2.327': attribute type 29 has an invalid length. [ 86.734880][ T5170] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 87.209117][ T5197] netlink: 4 bytes leftover after parsing attributes in process `syz.2.341'. [ 87.852639][ T5236] device hsr0 entered promiscuous mode [ 87.855166][ T5235] device hsr0 left promiscuous mode [ 88.077659][ T5244] netlink: 116 bytes leftover after parsing attributes in process `syz.3.357'. [ 88.164373][ T5252] netlink: 8 bytes leftover after parsing attributes in process `syz.4.361'. [ 88.176650][ T5252] netlink: 8 bytes leftover after parsing attributes in process `syz.4.361'. [ 88.230920][ T5256] netlink: 21 bytes leftover after parsing attributes in process `syz.3.363'. [ 89.030872][ T5304] device ip6gretap0 entered promiscuous mode [ 89.037204][ T5304] device vlan2 entered promiscuous mode [ 89.089531][ T5308] netlink: 12 bytes leftover after parsing attributes in process `syz.3.385'. [ 89.672836][ T5345] delete_channel: no stack [ 90.026237][ T5350] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input3 [ 90.226198][ T5369] netlink: 'syz.1.408': attribute type 1 has an invalid length. [ 90.835145][ T5401] netlink: 12 bytes leftover after parsing attributes in process `syz.2.415'. [ 93.065421][ T5483] netlink: 88 bytes leftover after parsing attributes in process `syz.3.446'. [ 93.069160][ T5483] netlink: 16 bytes leftover after parsing attributes in process `syz.3.446'. [ 93.145859][ T5485] netlink: 'syz.3.447': attribute type 9 has an invalid length. [ 94.006081][ T5512] netlink: 4 bytes leftover after parsing attributes in process `syz.3.457'. [ 94.018620][ T5512] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.041420][ T5512] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.052403][ T5512] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.054378][ T5512] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.100608][ T5516] netlink: 40 bytes leftover after parsing attributes in process `syz.2.459'. [ 94.166313][ T5512] bond0: (slave batadv0): Releasing backup interface [ 94.326970][ T5521] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 94.329723][ T5521] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 94.515891][ T5527] bridge0: port 3(erspan0) entered blocking state [ 94.530431][ T5527] bridge0: port 3(erspan0) entered disabled state [ 94.543981][ T5527] device erspan0 entered promiscuous mode [ 94.546174][ T5527] bridge0: port 3(erspan0) entered blocking state [ 94.548075][ T5527] bridge0: port 3(erspan0) entered forwarding state [ 95.879414][ T26] audit: type=1107 audit(95.850:2): pid=5567 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='$ ?Bkӯ`-UkUqDuėt*hA3^u' [ 95.966249][ T5568] netlink: 40 bytes leftover after parsing attributes in process `syz.0.478'. [ 95.982740][ T5572] netlink: 16 bytes leftover after parsing attributes in process `syz.2.479'. [ 96.112972][ T5559] chnl_net:caif_netlink_parms(): no params data found [ 96.257229][ T5559] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.259094][ T5559] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.262615][ T5559] device bridge_slave_0 entered promiscuous mode [ 96.272574][ T5559] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.276583][ T5559] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.285400][ T5559] device bridge_slave_1 entered promiscuous mode [ 96.357188][ T5559] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.405143][ T5559] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.516681][ T5593] netlink: 'syz.0.483': attribute type 1 has an invalid length. [ 96.522709][ T5559] team0: Port device team_slave_0 added [ 96.532028][ T5559] team0: Port device team_slave_1 added [ 96.631562][ T5559] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.633457][ T5559] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.662605][ T5559] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.688161][ T5559] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.690008][ T5559] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.726788][ T5559] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.785680][ T5600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.487'. [ 96.873355][ T5559] device hsr_slave_0 entered promiscuous mode [ 96.918106][ T5559] device hsr_slave_1 entered promiscuous mode [ 96.958277][ T5559] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.960323][ T5559] Cannot create hsr debugfs directory [ 96.963134][ T5600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.487'. [ 97.122215][ T5606] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 97.125803][ T5606] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 97.127980][ T5606] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 97.142785][ T5606] device bridge_slave_0 left promiscuous mode [ 97.144573][ T5606] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.232598][ T5606] device bridge_slave_1 left promiscuous mode [ 97.234478][ T5606] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.314806][ T5606] bond0: (slave bond_slave_0): Releasing backup interface [ 97.361642][ T5606] bond0: (slave bond_slave_1): Releasing backup interface [ 97.425824][ T5606] team0: Port device team_slave_0 removed [ 97.466418][ T5606] team0: Port device team_slave_1 removed [ 97.468504][ T5606] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.470430][ T5606] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.505295][ T5606] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.509105][ T5606] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.546216][ T5604] netlink: 'syz.0.489': attribute type 10 has an invalid length. [ 97.587498][ T5604] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 97.696899][ T4459] Bluetooth: hci0: command 0x0409 tx timeout [ 97.806196][ T5559] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.908290][ T5559] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.999614][ T5626] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.002448][ T5626] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.004553][ T5626] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.006740][ T5626] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.019108][ T5626] device vxlan0 entered promiscuous mode [ 98.029230][ T5626] IPv6: ADDRCONF(NETDEV_CHANGE): vxlan0: link becomes ready [ 98.037220][ T5559] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.145729][ T5559] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.295910][ T5635] netlink: 'syz.2.499': attribute type 22 has an invalid length. [ 98.396827][ T5559] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 98.453115][ T5559] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 98.472973][ T5559] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 98.515190][ T5559] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 98.766061][ T5559] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.805167][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 98.807754][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 98.824647][ T5559] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.839366][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 98.849647][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 98.852502][ T353] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.854480][ T353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.867993][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 98.880648][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 98.887529][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 98.894020][ T353] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.895987][ T353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.924266][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 98.927305][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 98.941277][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 98.950659][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 98.964334][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 98.970527][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 98.999736][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 99.005491][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 99.010275][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 99.023395][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 99.028435][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 99.048017][ T5559] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 99.440896][ T5559] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.463321][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 99.465685][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 99.512511][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 99.515367][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 99.578343][ T5671] xt_CT: No such helper "snmp" [ 99.579225][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 99.588866][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 99.592789][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 99.595348][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 99.612471][ T5559] device veth0_vlan entered promiscuous mode [ 99.632511][ T5559] device veth1_vlan entered promiscuous mode [ 99.670318][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 99.679653][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 99.682999][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 99.686287][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 99.718535][ T5559] device veth0_macvtap entered promiscuous mode [ 99.723965][ T5682] netlink: 4 bytes leftover after parsing attributes in process `syz.0.516'. [ 99.782072][ T3609] Bluetooth: hci0: command 0x041b tx timeout [ 99.792848][ T5559] device veth1_macvtap entered promiscuous mode [ 99.814773][ T1631] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 99.817306][ T1631] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 99.833749][ T5559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.836818][ T5559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.839453][ T5559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.851661][ T5559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.863095][ T5559] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.868428][ T5559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.875310][ T5559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.877854][ T5559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.880497][ T5559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.896766][ T5559] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.898832][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 99.902657][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 99.905434][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 99.910879][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 99.922643][ T5559] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.925123][ T5559] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.927356][ T5559] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.933681][ T5559] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.955386][ T5688] IPv4: Oversized IP packet from 127.202.26.0 [ 100.065262][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.068764][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.089093][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 100.138831][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.149943][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.163901][ T1631] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 100.209669][ T5559] [ 100.210342][ T5559] ====================================================== [ 100.212270][ T5559] WARNING: possible circular locking dependency detected [ 100.214159][ T5559] 5.15.182-syzkaller #0 Not tainted [ 100.215534][ T5559] ------------------------------------------------------ [ 100.217487][ T5559] syz-executor/5559 is trying to acquire lock: [ 100.219252][ T5559] ffff0000e62cf120 (sk_lock-AF_BLUETOOTH-BTPROTO_SCO){+.+.}-{0:0}, at: sco_conn_del+0x120/0x4b8 [ 100.222128][ T5559] [ 100.222128][ T5559] but task is already holding lock: [ 100.224096][ T5559] ffff8000163b91a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xb0/0x214 [ 100.226846][ T5559] [ 100.226846][ T5559] which lock already depends on the new lock. [ 100.226846][ T5559] [ 100.230131][ T5559] [ 100.230131][ T5559] the existing dependency chain (in reverse order) is: [ 100.232604][ T5559] [ 100.232604][ T5559] -> #2 (hci_cb_list_lock){+.+.}-{3:3}: [ 100.234745][ T5559] __mutex_lock_common+0x194/0x1edc [ 100.236255][ T5559] mutex_lock_nested+0xac/0x11c [ 100.237757][ T5559] hci_remote_features_evt+0x418/0x850 [ 100.239386][ T5559] hci_event_packet+0x560/0x11bc [ 100.240893][ T5559] hci_rx_work+0x1cc/0x880 [ 100.242222][ T5559] process_one_work+0x79c/0x1140 [ 100.243737][ T5559] worker_thread+0x8f4/0x101c [ 100.245120][ T5559] kthread+0x374/0x454 [ 100.246337][ T5559] ret_from_fork+0x10/0x20 [ 100.247711][ T5559] [ 100.247711][ T5559] -> #1 (&hdev->lock){+.+.}-{3:3}: [ 100.249734][ T5559] __mutex_lock_common+0x194/0x1edc [ 100.251332][ T5559] mutex_lock_nested+0xac/0x11c [ 100.252778][ T5559] sco_sock_connect+0x160/0x7d8 [ 100.254260][ T5559] __sys_connect+0x264/0x28c [ 100.255623][ T5559] __arm64_sys_connect+0x7c/0x94 [ 100.257112][ T5559] invoke_syscall+0x98/0x2b8 [ 100.258493][ T5559] el0_svc_common+0x138/0x258 [ 100.259871][ T5559] do_el0_svc+0x58/0x14c [ 100.261164][ T5559] el0_svc+0x78/0x1e0 [ 100.262325][ T5559] el0t_64_sync_handler+0xcc/0xe4 [ 100.263854][ T5559] el0t_64_sync+0x1a0/0x1a4 [ 100.265221][ T5559] [ 100.265221][ T5559] -> #0 (sk_lock-AF_BLUETOOTH-BTPROTO_SCO){+.+.}-{0:0}: [ 100.267611][ T5559] __lock_acquire+0x2928/0x651c [ 100.269060][ T5559] lock_acquire+0x1f4/0x620 [ 100.269895][ T5702] netlink: 4 bytes leftover after parsing attributes in process `syz.2.525'. [ 100.270447][ T5559] lock_sock_nested+0xd8/0x1d4 [ 100.274201][ T5559] sco_conn_del+0x120/0x4b8 [ 100.275590][ T5559] sco_disconn_cfm+0x8c/0xdc [ 100.277025][ T5559] hci_conn_hash_flush+0x108/0x214 [ 100.278524][ T5559] hci_dev_do_close+0x7e4/0x105c [ 100.280020][ T5559] hci_unregister_dev+0x23c/0x4c0 [ 100.281535][ T5559] vhci_release+0x74/0xc4 [ 100.282876][ T5559] __fput+0x1c0/0x7f8 [ 100.284105][ T5559] ____fput+0x20/0x30 [ 100.285320][ T5559] task_work_run+0x12c/0x1e0 [ 100.286745][ T5559] do_exit+0x67c/0x1f58 [ 100.288040][ T5559] do_group_exit+0x100/0x268 [ 100.289456][ T5559] __wake_up_parent+0x0/0x60 [ 100.290858][ T5559] invoke_syscall+0x98/0x2b8 [ 100.292224][ T5559] el0_svc_common+0x138/0x258 [ 100.293648][ T5559] do_el0_svc+0x58/0x14c [ 100.294926][ T5559] el0_svc+0x78/0x1e0 [ 100.296163][ T5559] el0t_64_sync_handler+0xcc/0xe4 [ 100.297618][ T5559] el0t_64_sync+0x1a0/0x1a4 [ 100.299001][ T5559] [ 100.299001][ T5559] other info that might help us debug this: [ 100.299001][ T5559] [ 100.301823][ T5559] Chain exists of: [ 100.301823][ T5559] sk_lock-AF_BLUETOOTH-BTPROTO_SCO --> &hdev->lock --> hci_cb_list_lock [ 100.301823][ T5559] [ 100.305616][ T5559] Possible unsafe locking scenario: [ 100.305616][ T5559] [ 100.307616][ T5559] CPU0 CPU1 [ 100.309100][ T5559] ---- ---- [ 100.310597][ T5559] lock(hci_cb_list_lock); [ 100.311798][ T5559] lock(&hdev->lock); [ 100.313645][ T5559] lock(hci_cb_list_lock); [ 100.315491][ T5559] lock(sk_lock-AF_BLUETOOTH-BTPROTO_SCO); [ 100.317063][ T5559] [ 100.317063][ T5559] *** DEADLOCK *** [ 100.317063][ T5559] [ 100.319278][ T5559] 3 locks held by syz-executor/5559: [ 100.320822][ T5559] #0: ffff0000d685cff0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x60/0x105c [ 100.323411][ T5559] #1: ffff0000d685c078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_do_close+0x334/0x105c [ 100.326130][ T5559] #2: ffff8000163b91a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xb0/0x214 [ 100.328847][ T5559] [ 100.328847][ T5559] stack backtrace: [ 100.330470][ T5559] CPU: 0 PID: 5559 Comm: syz-executor Not tainted 5.15.182-syzkaller #0 [ 100.332748][ T5559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 100.335434][ T5559] Call trace: [ 100.336281][ T5559] dump_backtrace+0x0/0x43c [ 100.337519][ T5559] show_stack+0x2c/0x3c [ 100.338619][ T5559] __dump_stack+0x30/0x40 [ 100.339859][ T5559] dump_stack_lvl+0xf8/0x160 [ 100.341084][ T5559] dump_stack+0x1c/0x5c [ 100.342227][ T5559] print_circular_bug+0x148/0x1b0 [ 100.343524][ T5559] check_noncircular+0x240/0x2d4 [ 100.344855][ T5559] __lock_acquire+0x2928/0x651c [ 100.346156][ T5559] lock_acquire+0x1f4/0x620 [ 100.347347][ T5559] lock_sock_nested+0xd8/0x1d4 [ 100.348689][ T5559] sco_conn_del+0x120/0x4b8 [ 100.349926][ T5559] sco_disconn_cfm+0x8c/0xdc [ 100.351169][ T5559] hci_conn_hash_flush+0x108/0x214 [ 100.352529][ T5559] hci_dev_do_close+0x7e4/0x105c [ 100.353875][ T5559] hci_unregister_dev+0x23c/0x4c0 [ 100.355269][ T5559] vhci_release+0x74/0xc4 [ 100.356454][ T5559] __fput+0x1c0/0x7f8 [ 100.357481][ T5559] ____fput+0x20/0x30 [ 100.358519][ T5559] task_work_run+0x12c/0x1e0 [ 100.359780][ T5559] do_exit+0x67c/0x1f58 [ 100.360892][ T5559] do_group_exit+0x100/0x268 [ 100.362126][ T5559] __wake_up_parent+0x0/0x60 [ 100.363418][ T5559] invoke_syscall+0x98/0x2b8 [ 100.364683][ T5559] el0_svc_common+0x138/0x258 [ 100.365909][ T5559] do_el0_svc+0x58/0x14c [ 100.367085][ T5559] el0_svc+0x78/0x1e0 [ 100.368130][ T5559] el0t_64_sync_handler+0xcc/0xe4 [ 100.369507][ T5559] el0t_64_sync+0x1a0/0x1a4 [ 100.375619][ T5706] netlink: 12 bytes leftover after parsing attributes in process `syz.2.525'. [ 100.391815][ T5707] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 100.394978][ T5707] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 103.335740][ T136] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.957793][ T136] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.016604][ T136] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.058007][ T136] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.764055][ T136] device hsr_slave_0 left promiscuous mode [ 106.801879][ T136] device hsr_slave_1 left promiscuous mode [ 106.891377][ T136] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.893345][ T136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.896434][ T136] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.898400][ T136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.900721][ T136] device bridge_slave_1 left promiscuous mode [ 106.906313][ T136] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.945345][ T136] device bridge_slave_0 left promiscuous mode [ 106.947071][ T136] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.071981][ T136] device veth1_macvtap left promiscuous mode [ 107.073641][ T136] device veth0_macvtap left promiscuous mode [ 107.075210][ T136] device veth1_vlan left promiscuous mode [ 107.076802][ T136] device veth0_vlan left promiscuous mode [ 107.285592][ T136] team0 (unregistering): Port device team_slave_1 removed [ 107.294624][ T136] team0 (unregistering): Port device team_slave_0 removed [ 107.304794][ T136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.338343][ T136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.478253][ T136] bond0 (unregistering): Released all slaves