last executing test programs: 9.269772538s ago: executing program 0 (id=541): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x2000000}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "0587a06a93f2aad4", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6d15608a32cbaa5bc", '\x00', "be0ea450d5a50003"}, 0x38) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 9.050718769s ago: executing program 0 (id=542): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x3c, &(0x7f0000000000)={0x0, 0x0}, 0x10) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r4, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}, 0x1, 0x0, 0x0, 0x40900}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) socket$xdp(0x2c, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3000a}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xffffffff, 0x9}}]}]}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) r6 = epoll_create(0x2) mmap(&(0x7f000062b000/0x2000)=nil, 0x2000, 0x2000004, 0x110, r6, 0xa51bd000) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r9, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r7, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x4, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) splice(r0, 0x0, r3, 0x0, 0x10d00, 0xf) 7.174160662s ago: executing program 0 (id=554): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0xd}}, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x14}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0380, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000100)={0x0, 0x3, 0x1, 0x7fff000, 0xfffffffa, 0xd67}, &(0x7f0000000140)=0x14) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000300)=r5) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 5.608828304s ago: executing program 0 (id=563): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r1, r3, 0x25, 0x2, @val=@perf_event={0x11}}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xa, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={r4, r5, 0x4, r1}, 0x6) unshare(0x6a040000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c00000020000100000000000000000002200000000000000000000005001500"], 0x5c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) recvmmsg(r0, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001d40)=""/4078, 0xfee}, {&(0x7f0000000340)=""/141, 0x8d}, {&(0x7f0000002d40)=""/4116, 0x1005}, {&(0x7f0000000400)=""/6, 0x6}, {&(0x7f0000000440)=""/231, 0xe7}], 0x5}}], 0x3ffffbd, 0x0, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x10000) 5.478496507s ago: executing program 2 (id=564): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001100)={0x0}, 0x1, 0x0, 0x0, 0x10005}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r3, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001680)=""/4091, 0xffb}, {&(0x7f00000003c0)=""/251, 0xfb}], 0x2}}], 0x1, 0x2000, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB="01002d"], 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x810) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x4000084) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x28, r5, 0x50dc85624ea6cf59, 0x0, 0x1, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c081}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f00000012c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x1c, r5, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x4000800) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc, 0x1f, 0x7}, @IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc, 0x1e, 0x2}]}}}]}, 0x4c}}, 0x0) readv(r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000005, 0x810, r8, 0x6400b000) accept$inet6(r8, 0x0, &(0x7f00000011c0)) r9 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x1c, 0x1, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000050}, 0x800) sendmsg$NFT_MSG_GETSET(r11, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000900)={0x14, 0xa, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x4000) ioctl$PPPIOCSNPMODE(r9, 0x4008744b, &(0x7f0000000000)={0x21, 0x3}) sendmsg$IPSET_CMD_SAVE(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040880}, 0x14) recvmsg$unix(r7, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100) 5.160545488s ago: executing program 0 (id=567): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000f00)={'dummy0\x00', &(0x7f0000000040)=@ethtool_perm_addr={0x4b, 0x39, "43720702ca0917b3352050360ad4bc4c3f954c58e8fe0252c0c4397d2471951bdd25f0d2b690ad5e137cee16de02d40b4fcdf2227f128a8dd1"}}) sendmsg$key(0xffffffffffffffff, 0x0, 0x40044) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000800000000000061"], 0x0, 0x28}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@alu={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0xb, r3, 0x8, 0x0, 0x0, 0x14, 0x0, 0x14}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x12, 0x2, 0x4, 0x2, 0x210, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r4}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r2}, 0x20) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r6, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) syz_emit_ethernet(0x3e, &(0x7f00000003c0)=ANY=[], 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="00000000140000002400128009000100626f6e6400000000140002800500130d0000000008001e"], 0x44}, 0x1, 0x2000000000000000}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r1) r7 = socket$nl_rdma(0x10, 0x3, 0x14) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000005000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x48002) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="440000001a00010000000000fdffd8029b740462", @ANYRES32=0x0, @ANYBLOB="0000990014000300070000000000000200000000fdff070014000100fc00"/44], 0x44}}, 0xd0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r10, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000000)={0x14, 0x21, 0xa, 0x401}, 0x14}}, 0x0) bind$netlink(r10, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x10000000}, 0xc) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0xb0, 0x1403, 0x1, 0x0, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bridge0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syzkaller1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'virt_wifi0\x00'}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x200c08a5}, 0x8000) 4.547620627s ago: executing program 4 (id=569): socket$xdp(0x2c, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r0, 0x8b21, &(0x7f0000000040)) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='mm_collapse_huge_page_isolate\x00', r5}, 0x18) syz_emit_ethernet(0x32, &(0x7f0000000140)=ANY=[@ANYRES16=r5], 0x0) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x400, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c633774262eb5ab2c7b9c5cff6ce78185d8c4dc064744e042", 0xffffffffffffffff}) r9 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r9, 0x402c542c, 0x0) ioctl$TIOCSTI(r9, 0x5412, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r8, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e681cdb9e581a38ebb0ddd5f307e56", r10}) r11 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r11, 0xc0285700, &(0x7f0000000000)={0xf, "c51fca0a5550cf9652a3f0b942747b193fd10d95793a0c159f6dca495afb8114"}) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 4.200262641s ago: executing program 2 (id=570): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f0000000f40)=""/4089, 0x26, 0xff9, 0x8, 0xfffffffa}, 0x28) 3.213881327s ago: executing program 2 (id=573): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) getpeername(r0, 0x0, 0x0) 3.213447627s ago: executing program 3 (id=574): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0xd71, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 3.212598627s ago: executing program 4 (id=576): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'gretap0\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000140)=0x8, 0x4) sendto$packet(r1, &(0x7f0000000340)="05030006e8fe091c6202a0ffffffff006003000000007f141434e3177f43055762cb80948864113b022543424aa608", 0xfef2, 0x0, &(0x7f0000000a80)={0x11, 0x88a8, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 3.08529372s ago: executing program 4 (id=578): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f00000007c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000280)={0x3, 0xff, 0x9, 0x4}, 0xc) listen(r0, 0xffffffff) 2.954696303s ago: executing program 4 (id=579): ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000080)=0x76960bb5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x1e8629867d7bdaee, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r4, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee1", 0xe) 2.954112543s ago: executing program 0 (id=580): socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) unshare(0x6a040000) unshare(0x44000000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) socket$pppoe(0x18, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b40)={&(0x7f0000000100)='kfree\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) close(r1) 2.924548906s ago: executing program 1 (id=581): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) close(r5) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x21, 0x0, 0x0) ioctl$TIOCMGET(r1, 0x541e, &(0x7f0000000040)) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1, 0x4, 0x101, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFULA_CFG_NLBUFSIZ={0x8}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_NLBUFSIZ={0x8}, @NFULA_CFG_MODE={0xa, 0x2, {0xb83, 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) 1.903694145s ago: executing program 1 (id=582): bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 1.762779579s ago: executing program 3 (id=583): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000047c0)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="180000007a00010600000000fbdbdf2507"], 0x18}], 0x1, 0x0, 0x0, 0x4000050}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, 0x0}, 0x24040084) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {0xffff, 0xfff2}, {0x0, 0xfff2}}}, 0x24}}, 0x4000090) 1.762557089s ago: executing program 2 (id=584): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f00000001c0)={0x0, 0x4f, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r1, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0xfffffef2, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 1.377542716s ago: executing program 1 (id=585): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x25dffbfb, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0xffffffffffffffd2, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0x8, 0x9}}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0x9, 0xa}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400d0}, 0x800) 1.23376542s ago: executing program 3 (id=586): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000000)=0x6, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20004000, &(0x7f0000000080)={0xa, 0x4e22, 0x40000000, @empty, 0x6}, 0x1c) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, 0x0, 0x0) 854.708967ms ago: executing program 2 (id=587): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, 0x0) close(r4) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) accept4(r8, 0x0, 0x0, 0x800) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x24dfdbfb, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0x10, 0xb}, {0x5, 0xa858712265c6c23}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x80000000}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 815.826201ms ago: executing program 3 (id=588): r0 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) setsockopt$sock_int(r0, 0x1, 0xb, &(0x7f00000000c0)=0x71, 0x4) 709.057581ms ago: executing program 1 (id=589): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8e32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0288a802008100080008004500002440000000032f907800006558001090784209"], 0x3a) 653.040517ms ago: executing program 4 (id=590): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r2, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) bind$netlink(r3, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfe, 0x10}, 0xc) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 450.930087ms ago: executing program 3 (id=591): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x405, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x1000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) 319.45062ms ago: executing program 3 (id=592): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x21018}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}]}, 0x50}}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, &(0x7f0000000240)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000300)=0x2c) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockname(r1, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) socket(0x10, 0x80002, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff3}}}, 0x24}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x2, 0x8, 0xff1, 0x41000, 0xffffffffffffffff, 0x82f, '\x00', r3, 0xffffffffffffffff, 0x5, 0x5, 0x4}, 0x50) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$igmp6(0xa, 0x3, 0x2) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r4) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x200000c1}, 0x8000850) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r4) pipe(0x0) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x41) 280.862403ms ago: executing program 1 (id=593): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)={0x38, r1, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVKEY={0x1c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_ID={0x4}]}]}, 0x38}}, 0x0) 192.481272ms ago: executing program 4 (id=594): recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0xa, 0x801, 0x84) setsockopt(0xffffffffffffffff, 0x84, 0x7d, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$packet(0x11, 0x3, 0x300) socket$unix(0x1, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$unix(0x1, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x1, 0x1}, 0x20) recvfrom$unix(r3, &(0x7f00000000c0)=""/34, 0x22, 0x100, &(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x30, 0x0, 0x0, 0x8000}, {0x6}]}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004b40)={&(0x7f00000003c0)=@newqdisc={0x12c, 0x24, 0xc00, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x6, 0xfff3}, {0x8, 0xd}, {0xc, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xffffffffffffff8c}, {0x60, 0x2, {{0x3, [0xb, 0x3, 0x10, 0x7, 0xc, 0xff, 0xc, 0x6, 0x1, 0x0, 0xb, 0x3, 0x0, 0x6, 0x8, 0x8], 0x0, [0xbbf, 0x5, 0x3, 0x1000, 0x8, 0xfffb, 0x2, 0x2, 0xa11, 0xa000, 0x101, 0x8, 0x5, 0x4, 0x4, 0x4], [0x3, 0x8000, 0x8, 0x3, 0x8, 0x8, 0x8001, 0xe2, 0x6, 0xeb, 0x2, 0x1, 0x7, 0x9, 0x5, 0x5]}, [@TCA_MQPRIO_MODE={0x6}]}}}, @TCA_RATE={0x6, 0x5, {0x8c, 0x7f}}, @TCA_STAB={0x50, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x1, 0x7, 0x9a0, 0x1, 0x5, 0x7, 0x1}}, {0x6, 0x2, [0xd6bb]}}, {{0x1c, 0x1, {0x1, 0x0, 0x4, 0xf, 0x2, 0x800005eb, 0x1, 0x4}}, {0xc, 0x2, [0x6, 0x1ff, 0x10, 0x8]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}, @TCA_RATE={0x6, 0x5, {0xe, 0x8}}, @qdisc_kind_options=@q_fq={{0x7}, {0x24, 0x2, [@TCA_FQ_PLIMIT={0x0, 0x1, 0x334b}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x2}, @TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x5}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x9}]}}, @TCA_INGRESS_BLOCK={0x8}]}, 0x12c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x400c854) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3800000010003904000000000000000000173a83", @ANYRES32=r6, @ANYBLOB="01980000000000001800128008000100677265000c00028008000700ac14"], 0x38}}, 0x20000080) sendto$packet(r1, &(0x7f0000000180)="892cf72d83", 0x5, 0x40, &(0x7f0000000200)={0x11, 0x8100, r6, 0x1, 0x9, 0x6, @broadcast}, 0x14) 14.711859ms ago: executing program 1 (id=595): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 0s ago: executing program 2 (id=596): ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, &(0x7f00000001c0)={0x9, {0x2a, 0x6, 0x6fb9, 0x2, 0xff}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={0xfffffffffffffffc, &(0x7f00000001c0)}}, 0x40) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.230' (ED25519) to the list of known hosts. [ 63.730939][ T4171] cgroup: Unknown subsys name 'net' [ 63.883822][ T4171] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.363693][ T4171] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 66.828266][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 66.894851][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 66.951206][ T4195] chnl_net:caif_netlink_parms(): no params data found [ 67.009133][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 67.035269][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.043756][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.051918][ T4182] device bridge_slave_0 entered promiscuous mode [ 67.064216][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.071374][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.079450][ T4182] device bridge_slave_1 entered promiscuous mode [ 67.092298][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 67.171991][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.181237][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.188929][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.196739][ T4183] device bridge_slave_0 entered promiscuous mode [ 67.223774][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.233122][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.240282][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.248769][ T4183] device bridge_slave_1 entered promiscuous mode [ 67.259139][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.266223][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.274736][ T4195] device bridge_slave_0 entered promiscuous mode [ 67.308332][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.315425][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.323843][ T4195] device bridge_slave_1 entered promiscuous mode [ 67.368199][ T4182] team0: Port device team_slave_0 added [ 67.384656][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.396161][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.405854][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.413151][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.421435][ T4188] device bridge_slave_0 entered promiscuous mode [ 67.437611][ T4182] team0: Port device team_slave_1 added [ 67.444960][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.469236][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.476312][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.484768][ T4188] device bridge_slave_1 entered promiscuous mode [ 67.501590][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.519235][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.526313][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.534340][ T4190] device bridge_slave_0 entered promiscuous mode [ 67.574292][ T4183] team0: Port device team_slave_0 added [ 67.580614][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.588209][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.596006][ T4190] device bridge_slave_1 entered promiscuous mode [ 67.610658][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.617810][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.643846][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.658087][ T4195] team0: Port device team_slave_0 added [ 67.664412][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.671600][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.697652][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.710364][ T4183] team0: Port device team_slave_1 added [ 67.729382][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.739740][ T4195] team0: Port device team_slave_1 added [ 67.746894][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.794646][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.801666][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.827681][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.840283][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.847478][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.873739][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.895587][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.907307][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.940201][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.947661][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.973652][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.005698][ T4188] team0: Port device team_slave_0 added [ 68.012326][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.019768][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.045824][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.069531][ T4182] device hsr_slave_0 entered promiscuous mode [ 68.076432][ T4182] device hsr_slave_1 entered promiscuous mode [ 68.101386][ T4188] team0: Port device team_slave_1 added [ 68.124353][ T4190] team0: Port device team_slave_0 added [ 68.132293][ T4190] team0: Port device team_slave_1 added [ 68.163964][ T4183] device hsr_slave_0 entered promiscuous mode [ 68.170841][ T4183] device hsr_slave_1 entered promiscuous mode [ 68.177618][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.185450][ T4183] Cannot create hsr debugfs directory [ 68.201595][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.208656][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.234964][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.280902][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.288164][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.314398][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.326775][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.334006][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.360021][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.381712][ T4195] device hsr_slave_0 entered promiscuous mode [ 68.388874][ T4195] device hsr_slave_1 entered promiscuous mode [ 68.395391][ T4195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.403066][ T4195] Cannot create hsr debugfs directory [ 68.416490][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.423605][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.450541][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.498125][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 68.498255][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 68.511193][ T13] Bluetooth: hci3: command 0x0409 tx timeout [ 68.517717][ T13] Bluetooth: hci1: command 0x0409 tx timeout [ 68.542719][ T4188] device hsr_slave_0 entered promiscuous mode [ 68.549749][ T4188] device hsr_slave_1 entered promiscuous mode [ 68.556322][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.564067][ T4188] Cannot create hsr debugfs directory [ 68.577457][ T13] Bluetooth: hci4: command 0x0409 tx timeout [ 68.664310][ T4190] device hsr_slave_0 entered promiscuous mode [ 68.671465][ T4190] device hsr_slave_1 entered promiscuous mode [ 68.678155][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.685712][ T4190] Cannot create hsr debugfs directory [ 68.883694][ T4182] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 68.895178][ T4182] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 68.914759][ T4182] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 68.924185][ T4182] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 68.961158][ T4195] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 68.976437][ T4195] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.003693][ T4195] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.014070][ T4195] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.083216][ T4190] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.092761][ T4190] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.105570][ T4190] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.116166][ T4190] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.164370][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.198979][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.212594][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.225901][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.255821][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.273886][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.281175][ T4188] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.290833][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.300010][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.313920][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.321231][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.331842][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.343004][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.351960][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.359094][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.367562][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.375353][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.384175][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.411719][ T4188] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.422700][ T4188] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.438843][ T1431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.448727][ T1431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.457759][ T1431] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.466877][ T1431] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.473987][ T1431] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.482979][ T1431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.491769][ T1431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.501209][ T1431] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.510226][ T1431] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.517351][ T1431] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.525883][ T1431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.534714][ T1431] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.543583][ T1431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.552922][ T1431] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.561314][ T1431] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.585480][ T4188] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.602468][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.614021][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.623223][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.633161][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.642541][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.654876][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.664598][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.682345][ T4183] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.695614][ T4183] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.711263][ T4183] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.722831][ T4183] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.732426][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.742512][ T1431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.754608][ T1431] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.797784][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.807868][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.816410][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.826042][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.835267][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.843751][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.854403][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.864457][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.941991][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.987343][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.996754][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.013612][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.074501][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.087939][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.101247][ T1265] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.108402][ T1265] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.128350][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.136539][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.148301][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.156719][ T1265] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.163830][ T1265] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.201453][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.209936][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.219488][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.227007][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.235296][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.256673][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.265523][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.273365][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.282628][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.291778][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.312641][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.340748][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.349234][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.358910][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.368756][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.377639][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.388009][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.401179][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.423636][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.433011][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.441760][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.451185][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.459871][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.469168][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.484327][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.495751][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.509260][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.520306][ T1431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.535030][ T1431] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.556916][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.578468][ T4253] Bluetooth: hci1: command 0x041b tx timeout [ 70.584838][ T4253] Bluetooth: hci3: command 0x041b tx timeout [ 70.591601][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.600210][ T4253] Bluetooth: hci2: command 0x041b tx timeout [ 70.606797][ T1265] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.613940][ T1265] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.622017][ T4253] Bluetooth: hci0: command 0x041b tx timeout [ 70.629965][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.639576][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.657554][ T4261] Bluetooth: hci4: command 0x041b tx timeout [ 70.671005][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.681261][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.690138][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.699306][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.709889][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.719111][ T1265] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.726206][ T1265] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.734924][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.745526][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.755184][ T1265] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.762354][ T1265] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.771707][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.780638][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.789501][ T1265] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.796575][ T1265] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.804538][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.814692][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.826366][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.835247][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.844698][ T4195] device veth0_vlan entered promiscuous mode [ 70.871070][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.881167][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.892556][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.902722][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.913202][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.926181][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.937602][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.946311][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.955019][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.963848][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.988988][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.008314][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.021516][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.043461][ T4195] device veth1_vlan entered promiscuous mode [ 71.056682][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.068099][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.076939][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.086191][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.095764][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.119236][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.145941][ T4183] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.162100][ T4183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.186890][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.195352][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.208391][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.216778][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.228009][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.228700][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.234697][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.248170][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.267657][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.281558][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.291429][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.311462][ T4182] device veth0_vlan entered promiscuous mode [ 71.333188][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.348163][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.367091][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.384170][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.400885][ T4195] device veth0_macvtap entered promiscuous mode [ 71.415828][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.424571][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.432784][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.448999][ T4182] device veth1_vlan entered promiscuous mode [ 71.460854][ T4195] device veth1_macvtap entered promiscuous mode [ 71.513087][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.523561][ T4190] device veth0_vlan entered promiscuous mode [ 71.533192][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.541812][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.553608][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.561814][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.569901][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.577798][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.586054][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.594981][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.603954][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.612955][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.622798][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.632055][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.640525][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.651796][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.661947][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.673183][ T4195] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.682415][ T4195] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.691751][ T4195] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.701210][ T4195] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.720412][ T4182] device veth0_macvtap entered promiscuous mode [ 71.727926][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.736005][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.745152][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.758466][ T4190] device veth1_vlan entered promiscuous mode [ 71.787280][ T4182] device veth1_macvtap entered promiscuous mode [ 71.816820][ T1431] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.825407][ T1431] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.834594][ T1431] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.843083][ T1431] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.851609][ T1431] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.884527][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.900698][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.914189][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.942155][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.950103][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.959355][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.968942][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.978456][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.987293][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.995805][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.006212][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.016851][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.029851][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.040978][ T4182] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.050032][ T4182] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.059850][ T4182] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.068872][ T4182] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.086430][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.096236][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.122774][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.131982][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.143166][ T4190] device veth0_macvtap entered promiscuous mode [ 72.163628][ T4188] device veth0_vlan entered promiscuous mode [ 72.173815][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.183002][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.203873][ T4190] device veth1_macvtap entered promiscuous mode [ 72.232693][ T4272] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.271144][ T4272] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.275064][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.295089][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.305287][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.317089][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.328610][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.336127][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.345568][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.355280][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.364196][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.373859][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.385290][ T4188] device veth1_vlan entered promiscuous mode [ 72.401203][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.414349][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.423633][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.435339][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.446020][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.456774][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.468426][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.479933][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.492438][ T4190] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.502041][ T4190] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.511237][ T4190] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.520080][ T4190] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.538098][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.546446][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.554336][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.563343][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.579285][ T4183] device veth0_vlan entered promiscuous mode [ 72.588554][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.596590][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.620771][ T1431] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.629269][ T1431] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.657474][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.665591][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.673765][ T4260] Bluetooth: hci0: command 0x040f tx timeout [ 72.681140][ T4183] device veth1_vlan entered promiscuous mode [ 72.687465][ T4260] Bluetooth: hci2: command 0x040f tx timeout [ 72.699339][ T4260] Bluetooth: hci3: command 0x040f tx timeout [ 72.705448][ T4260] Bluetooth: hci1: command 0x040f tx timeout [ 72.727628][ T1431] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.735792][ T1431] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.748156][ T4260] Bluetooth: hci4: command 0x040f tx timeout [ 72.751896][ T1431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.769170][ T1431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.789220][ T4188] device veth0_macvtap entered promiscuous mode [ 72.863070][ T4188] device veth1_macvtap entered promiscuous mode [ 72.914169][ T4183] device veth0_macvtap entered promiscuous mode [ 72.934359][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.945807][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.962356][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.973808][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.986816][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.999582][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.029522][ T4183] device veth1_macvtap entered promiscuous mode [ 73.033062][ T4272] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.042002][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.051067][ T4272] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.066536][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.076845][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.088428][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.100986][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.112136][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.124282][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.138016][ T4272] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.146024][ T4272] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.193964][ T1431] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.205273][ T1431] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.214250][ T1431] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.225419][ T1431] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.234863][ T1431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.296080][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.367263][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.389127][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.400061][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.410123][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.421320][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.433363][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.451116][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.466087][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.531232][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.799365][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.028489][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.039826][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.050090][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.060678][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.076060][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.087082][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.107492][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.123325][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.142599][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.152958][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.168504][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.189074][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.200605][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.214227][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.237752][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.249471][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.259291][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.269797][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.280886][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.295962][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.323853][ T4188] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.334871][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.353825][ T4188] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.365425][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.376302][ T4188] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.392226][ T4188] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.450136][ T4183] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.468932][ T4183] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.504416][ T4183] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.516113][ T4183] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.551054][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.748027][ T4253] Bluetooth: hci1: command 0x0419 tx timeout [ 74.754717][ T4253] Bluetooth: hci3: command 0x0419 tx timeout [ 74.775270][ T1265] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.793469][ T1265] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.808152][ T4253] Bluetooth: hci2: command 0x0419 tx timeout [ 74.945837][ T4253] Bluetooth: hci0: command 0x0419 tx timeout [ 74.956871][ T4173] Bluetooth: hci4: command 0x0419 tx timeout [ 74.978059][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 74.987046][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 75.013871][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.452784][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 75.539137][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 75.871793][ T4325] process 'syz.3.11' launched './file0' with NULL argv: empty string added [ 75.887793][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.898899][ T4323] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.925345][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.937958][ T4323] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.957439][ T1109] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 75.992405][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.022841][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.053133][ T4272] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.075255][ T4272] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.105123][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.185837][ T4333] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 76.257467][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 76.266458][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 76.275467][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10a!!! [ 76.284524][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10a!!! [ 76.293544][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #30a!!! [ 76.310068][ T4338] binder: 4331:4338 ioctl 0 200000000040 returned -22 [ 76.337714][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 77.294692][ T1109] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 77.522516][ T1109] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 78.057354][ T1109] usb 5-1: string descriptor 0 read error: -71 [ 78.097015][ T1109] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 78.124336][ T1109] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 78.218048][ T1109] usb 5-1: can't set config #1, error -71 [ 78.243739][ T1109] usb 5-1: USB disconnect, device number 2 [ 78.353016][ T4333] team0: Port device team_slave_1 removed [ 79.466714][ T4356] loop7: detected capacity change from 0 to 16384 [ 80.392665][ T4357] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19'. [ 84.109429][ T4359] loop_set_status: loop7 () has still dirty pages (nrpages=66) [ 84.379794][ T4376] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 87.164391][ T1106] cfg80211: failed to load regulatory.db [ 89.207126][ C0] sched: RT throttling activated [ 91.671796][ T4450] ODEBUG: Out of memory. ODEBUG disabled [ 92.420005][ T21] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 93.542600][ T4473] overlayfs: unrecognized mount option "uuid=null" or missing value [ 93.698290][ T21] usb 4-1: unable to get BOS descriptor or descriptor too short [ 94.374592][ T21] usb 4-1: config 1 has an invalid interface number: 48 but max is 0 [ 94.441544][ T4475] sctp: failed to load transform for md5: -2 [ 94.465556][ T4250] Bluetooth: hci4: command 0x0405 tx timeout [ 94.503573][ T21] usb 4-1: config 1 has an invalid descriptor of length 19, skipping remainder of the config [ 94.554906][ T21] usb 4-1: config 1 has no interface number 0 [ 94.587166][ T21] usb 4-1: config 1 interface 48 altsetting 3 has an invalid endpoint descriptor of length 5, skipping [ 94.610733][ T4242] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 94.620376][ T21] usb 4-1: config 1 interface 48 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 94.639405][ T21] usb 4-1: config 1 interface 48 has no altsetting 0 [ 94.681061][ T4492] loop2: detected capacity change from 0 to 7 [ 94.687522][ T21] usb 4-1: string descriptor 0 read error: -71 [ 94.702033][ T21] usb 4-1: New USB device found, idVendor=0499, idProduct=7010, bcdDevice=52.dd [ 94.729834][ T4201] Dev loop2: unable to read RDB block 7 [ 94.744023][ T4201] loop2: AHDI p1 p2 p3 [ 94.746012][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.759183][ T4201] loop2: partition table partially beyond EOD, truncated [ 94.943262][ T4201] loop2: p1 start 1601398130 is beyond EOD, truncated [ 95.776743][ T21] usb 4-1: can't set config #1, error -71 [ 95.785655][ T21] usb 4-1: USB disconnect, device number 2 [ 95.818071][ T4201] loop2: p2 start 1702059890 is beyond EOD, truncated [ 95.827401][ T4242] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.868022][ T4242] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.886309][ T4242] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 95.927391][ T4242] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 95.965891][ T4242] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.001912][ T4492] Dev loop2: unable to read RDB block 7 [ 96.011868][ T4242] usb 5-1: config 0 descriptor?? [ 96.021080][ T4492] loop2: AHDI p1 p2 p3 [ 96.031825][ T4492] loop2: partition table partially beyond EOD, truncated [ 96.045019][ T4492] loop2: p1 start 1601398130 is beyond EOD, truncated [ 96.066007][ T4492] loop2: p2 start 1702059890 is beyond EOD, truncated [ 96.445729][ T4517] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 96.980943][ T4242] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 98.304367][ T4242] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 98.655380][ T4242] usb 5-1: USB disconnect, device number 3 [ 103.989981][ T4536] fido_id[4536]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 108.978610][ T4612] kernel profiling enabled (shift: 9) [ 110.527754][ T4638] netlink: 8 bytes leftover after parsing attributes in process `syz.0.102'. [ 112.610519][ T1106] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 112.954030][ T4639] syz.2.101 (4639) used greatest stack depth: 20672 bytes left [ 112.965959][ T4668] overlayfs: failed to clone upperpath [ 113.228124][ T1106] usb 1-1: Using ep0 maxpacket: 32 [ 115.307309][ T4250] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 115.717290][ T1106] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 115.727511][ T1106] usb 1-1: can't read configurations, error -71 [ 116.070268][ T4250] usb 4-1: unable to get BOS descriptor or descriptor too short [ 116.457421][ T4250] usb 4-1: config 1 interface 0 altsetting 7 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 116.506609][ T4250] usb 4-1: config 1 interface 0 altsetting 7 endpoint 0x82 is Bulk; changing to Interrupt [ 116.524381][ T4250] usb 4-1: config 1 interface 0 altsetting 7 endpoint 0x3 is Bulk; changing to Interrupt [ 116.555061][ T4250] usb 4-1: config 1 interface 0 has no altsetting 0 [ 117.548346][ T4250] usb 4-1: string descriptor 0 read error: -22 [ 117.554680][ T4250] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 117.567433][ T4250] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.607569][ T4698] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 117.615114][ T4698] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 117.622350][ T4698] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 117.639508][ T4250] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 117.877242][ T4250] usb 4-1: USB disconnect, device number 3 [ 118.191313][ T4738] overlayfs: failed to clone upperpath [ 118.241304][ T4251] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 118.532560][ T26] audit: type=1326 audit(1760815529.637:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4743 comm="syz.3.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33ad73dfc9 code=0x7ffc0000 [ 118.574111][ T4754] device vlan0 entered promiscuous mode [ 118.580184][ T4754] device bond0 entered promiscuous mode [ 118.585823][ T4754] device bond_slave_0 entered promiscuous mode [ 118.592778][ T4754] device bond_slave_1 entered promiscuous mode [ 118.616094][ T26] audit: type=1326 audit(1760815529.657:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4743 comm="syz.3.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f33ad73dfc9 code=0x7ffc0000 [ 118.749219][ T26] audit: type=1326 audit(1760815529.657:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4743 comm="syz.3.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33ad73dfc9 code=0x7ffc0000 [ 118.779969][ T4756] netlink: 12 bytes leftover after parsing attributes in process `syz.0.140'. [ 118.817448][ T4251] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 118.941342][ T4756] netlink: 'syz.0.140': attribute type 12 has an invalid length. [ 118.954033][ T4251] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.973708][ T26] audit: type=1326 audit(1760815529.657:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4743 comm="syz.3.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f33ad73dfc9 code=0x7ffc0000 [ 118.995977][ T4251] usb 2-1: Product: syz [ 119.006735][ T4251] usb 2-1: Manufacturer: syz [ 119.011960][ T4251] usb 2-1: SerialNumber: syz [ 119.818124][ T26] audit: type=1326 audit(1760815529.657:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4743 comm="syz.3.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33ad73dfc9 code=0x7ffc0000 [ 119.826971][ T4756] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.849498][ T4756] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.858318][ T4756] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.867027][ T4756] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.896323][ T4756] netlink: 12 bytes leftover after parsing attributes in process `syz.0.140'. [ 119.900742][ T26] audit: type=1326 audit(1760815529.657:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4743 comm="syz.3.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f33ad73dfc9 code=0x7ffc0000 [ 119.927067][ C0] vkms_vblank_simulate: vblank timer overrun [ 119.927517][ T4756] netlink: 'syz.0.140': attribute type 12 has an invalid length. [ 119.952747][ T4756] Zero length message leads to an empty skb [ 120.007539][ T26] audit: type=1326 audit(1760815529.657:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4743 comm="syz.3.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33ad73dfc9 code=0x7ffc0000 [ 120.029575][ C0] vkms_vblank_simulate: vblank timer overrun [ 120.107594][ T26] audit: type=1326 audit(1760815529.657:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4743 comm="syz.3.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f33ad73dfc9 code=0x7ffc0000 [ 120.129609][ C0] vkms_vblank_simulate: vblank timer overrun [ 120.141805][ T4776] capability: warning: `syz.0.146' uses 32-bit capabilities (legacy support in use) [ 120.177168][ T26] audit: type=1326 audit(1760815529.657:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4743 comm="syz.3.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33ad73dfc9 code=0x7ffc0000 [ 120.283215][ T26] audit: type=1326 audit(1760815529.657:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4743 comm="syz.3.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f33ad73dfc9 code=0x7ffc0000 [ 120.438161][ T4251] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 120.473467][ T4251] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 120.772203][ T4251] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 120.792705][ T4251] lan78xx: probe of 2-1:1.0 failed with error -32 [ 122.123029][ T4173] usb 2-1: USB disconnect, device number 2 [ 122.262967][ T4800] 9pnet_virtio: no channels available for device syz [ 124.078750][ T4805] crypto_alloc_aead failed rc=-4 [ 125.497851][ T4848] netlink: 28 bytes leftover after parsing attributes in process `syz.1.165'. [ 125.511857][ T4848] netlink: 32 bytes leftover after parsing attributes in process `syz.1.165'. [ 125.522477][ T4848] netlink: 28 bytes leftover after parsing attributes in process `syz.1.165'. [ 125.539332][ T4848] netlink: 32 bytes leftover after parsing attributes in process `syz.1.165'. [ 126.663531][ T26] kauditd_printk_skb: 13 callbacks suppressed [ 126.663547][ T26] audit: type=1326 audit(1760815537.767:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4855 comm="syz.3.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33ad73dfc9 code=0x7ffc0000 [ 126.792776][ T26] audit: type=1326 audit(1760815537.767:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4855 comm="syz.3.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33ad73dfc9 code=0x7ffc0000 [ 126.797214][ T4250] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 127.247281][ T4877] program syz.3.175 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 128.047259][ T4250] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 128.056453][ T4250] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.088180][ T4250] usb 2-1: config 0 descriptor?? [ 129.507260][ T4896] netlink: 16 bytes leftover after parsing attributes in process `syz.0.179'. [ 130.347431][ T4900] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(13) [ 130.354380][ T4900] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 130.384142][ T4906] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(16) [ 130.390801][ T4906] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 130.410247][ T4906] vhci_hcd vhci_hcd.0: Device attached [ 130.447735][ T4906] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 130.637261][ T23] vhci_hcd: vhci_device speed not set [ 130.687424][ T4250] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 131.387190][ T4900] vhci_hcd vhci_hcd.0: Device attached [ 131.437324][ T23] usb 37-2: new full-speed USB device number 2 using vhci_hcd [ 131.450807][ T4250] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 131.459561][ T4900] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(15) [ 131.468972][ T4900] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 131.477355][ T4905] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(20) [ 131.483992][ T4905] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 131.500786][ T4900] vhci_hcd vhci_hcd.0: Device attached [ 131.532562][ T4250] asix: probe of 2-1:0.0 failed with error -71 [ 131.547308][ T4906] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(25) [ 131.553953][ T4906] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 131.577698][ T4250] usb 2-1: USB disconnect, device number 3 [ 131.620943][ T4905] vhci_hcd vhci_hcd.0: Device attached [ 131.645386][ T4906] vhci_hcd vhci_hcd.0: Device attached [ 131.719647][ T4915] vhci_hcd: connection closed [ 131.720314][ T4914] vhci_hcd: connection closed [ 131.725433][ T4907] vhci_hcd: connection reset by peer [ 131.736994][ T4903] vhci_hcd: connection closed [ 131.889799][ T4917] vhci_hcd: connection closed [ 131.897740][ T4272] vhci_hcd: stop threads [ 131.906749][ T4272] vhci_hcd: release socket [ 132.321898][ T4272] vhci_hcd: disconnect device [ 132.507863][ T4272] vhci_hcd: stop threads [ 132.528952][ T4272] vhci_hcd: release socket [ 132.674780][ T4272] vhci_hcd: disconnect device [ 132.689191][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.695875][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.702446][ T4525] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 132.734867][ T4272] vhci_hcd: stop threads [ 132.744872][ T4272] vhci_hcd: release socket [ 132.749456][ T4272] vhci_hcd: disconnect device [ 132.755874][ T4272] vhci_hcd: stop threads [ 132.817556][ T4272] vhci_hcd: release socket [ 132.827740][ T4272] vhci_hcd: disconnect device [ 132.845159][ T4272] vhci_hcd: stop threads [ 132.863047][ T4272] vhci_hcd: release socket [ 132.883529][ T4272] vhci_hcd: disconnect device [ 133.748972][ T4962] overlayfs: failed to clone upperpath [ 135.649341][ T4990] netlink: 4 bytes leftover after parsing attributes in process `syz.3.212'. [ 135.747400][ T4525] usb 1-1: unable to read config index 0 descriptor/all [ 135.754425][ T4525] usb 1-1: can't read configurations, error -71 [ 135.814947][ T4995] netlink: 12 bytes leftover after parsing attributes in process `syz.0.214'. [ 135.829890][ T5001] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 135.854661][ T4995] 8021q: adding VLAN 0 to HW filter on device bond1 [ 136.076622][ T5006] overlayfs: failed to clone upperpath [ 136.195783][ T5013] netlink: 16 bytes leftover after parsing attributes in process `syz.3.220'. [ 136.272853][ T5015] bond0: ARP monitoring cannot be used with MII monitoring [ 137.009142][ T5036] syz.4.230 uses obsolete (PF_INET,SOCK_PACKET) [ 137.027187][ T23] vhci_hcd: vhci_device speed not set [ 139.065316][ T4260] usb usb38-port1: Cannot enable. Maybe the USB cable is bad? [ 139.567893][ T4260] usb usb38-port1: Cannot enable. Maybe the USB cable is bad? [ 139.796875][ T4260] usb usb38-port1: attempt power cycle [ 139.877186][ T5090] ksmbd: Unknown IPC event: 6, ignore. [ 139.903682][ T5093] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 140.237511][ T4260] usb usb38-port1: Cannot enable. Maybe the USB cable is bad? [ 140.663384][ T5120] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 140.717947][ T4260] usb usb38-port1: Cannot enable. Maybe the USB cable is bad? [ 140.737532][ T4260] usb usb38-port1: unable to enumerate USB device [ 140.794093][ T5125] netlink: 12 bytes leftover after parsing attributes in process `syz.4.251'. [ 141.465878][ T5142] netlink: 8 bytes leftover after parsing attributes in process `syz.1.257'. [ 142.189459][ T5163] netlink: 'syz.2.262': attribute type 3 has an invalid length. [ 143.453998][ T5171] netlink: 'syz.2.264': attribute type 5 has an invalid length. [ 144.435048][ T5212] netlink: 24 bytes leftover after parsing attributes in process `syz.1.278'. [ 145.070273][ T5245] syz.1.287[5245] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 145.070389][ T5245] syz.1.287[5245] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 145.667040][ T5269] netlink: 'syz.3.295': attribute type 10 has an invalid length. [ 145.697347][ T5269] device dummy0 entered promiscuous mode [ 145.705282][ T5269] team0: Device dummy0 is up. Set it down before adding it as a team port [ 146.702510][ T5297] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.301'. [ 146.714577][ T5309] netlink: 'syz.0.310': attribute type 8 has an invalid length. [ 146.757408][ T5309] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 146.830495][ T5312] netlink: 44 bytes leftover after parsing attributes in process `syz.1.311'. [ 146.912161][ T5317] netlink: 4 bytes leftover after parsing attributes in process `syz.3.313'. [ 147.389441][ T5342] netlink: 20 bytes leftover after parsing attributes in process `syz.3.320'. [ 148.944549][ T5369] netlink: 16 bytes leftover after parsing attributes in process `syz.1.331'. [ 148.979237][ T5372] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 149.072154][ T5377] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 149.136692][ T5377] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 149.210733][ T5377] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 149.268711][ T5377] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 149.309551][ T5377] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 149.359698][ T5377] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 149.399317][ T5377] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 150.713245][ T5406] netlink: 16 bytes leftover after parsing attributes in process `syz.2.345'. [ 151.287234][ T5423] tipc: Started in network mode [ 151.298553][ T5423] tipc: Node identity ae2e3df1208c, cluster identity 4711 [ 151.313861][ T5423] tipc: Enabled bearer , priority 0 [ 151.333341][ T5423] device syzkaller0 entered promiscuous mode [ 151.405233][ T5423] tipc: Resetting bearer [ 151.452013][ T5422] tipc: Resetting bearer [ 151.495766][ T5422] tipc: Disabling bearer [ 151.803736][ T5437] netlink: 8 bytes leftover after parsing attributes in process `syz.4.354'. [ 151.863406][ T5442] device ip6gretap1 entered promiscuous mode [ 151.918065][ T5434] netlink: 8 bytes leftover after parsing attributes in process `syz.4.354'. [ 151.992847][ T5446] netlink: 12 bytes leftover after parsing attributes in process `syz.0.358'. [ 152.660751][ T5469] af_packet: tpacket_rcv: packet too big, clamped from 240 to 4294967272. macoff=96 [ 152.727725][ T5471] netlink: 4 bytes leftover after parsing attributes in process `syz.2.366'. [ 155.125831][ T5499] netlink: 4 bytes leftover after parsing attributes in process `syz.2.375'. [ 155.504831][ T5506] netlink: 'syz.0.380': attribute type 10 has an invalid length. [ 155.548624][ T5506] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.580321][ T5506] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 155.606802][ T5507] netlink: 'syz.0.380': attribute type 10 has an invalid length. [ 155.625973][ T5507] netlink: 40 bytes leftover after parsing attributes in process `syz.0.380'. [ 155.654697][ T5507] device batadv0 entered promiscuous mode [ 155.688646][ T5507] bond0: (slave batadv0): Releasing backup interface [ 155.721824][ T5507] bridge0: port 3(batadv0) entered blocking state [ 155.743938][ T5507] bridge0: port 3(batadv0) entered disabled state [ 156.114042][ T4341] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 156.123830][ T4341] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 156.471689][ T5542] netlink: 'syz.1.392': attribute type 4 has an invalid length. [ 156.507529][ T5542] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 157.666575][ T5559] netlink: 32 bytes leftover after parsing attributes in process `syz.2.397'. [ 157.702499][ T5559] device dummy0 entered promiscuous mode [ 159.039232][ T5582] netlink: 8 bytes leftover after parsing attributes in process `syz.1.408'. [ 160.434547][ T5609] tipc: Started in network mode [ 160.463920][ T5609] tipc: Node identity a6435fb9a4a, cluster identity 4711 [ 160.486981][ T5609] tipc: Enabled bearer , priority 0 [ 160.518774][ T5616] device syzkaller0 entered promiscuous mode [ 160.537001][ T5616] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 160.589313][ T5626] netlink: 8 bytes leftover after parsing attributes in process `syz.3.424'. [ 160.598526][ T5626] netlink: 8 bytes leftover after parsing attributes in process `syz.3.424'. [ 160.609052][ T5601] tipc: Resetting bearer [ 160.627754][ T5601] tipc: Disabling bearer [ 160.645878][ T5628] device syzkaller1 entered promiscuous mode [ 162.350012][ T5690] netlink: 28 bytes leftover after parsing attributes in process `syz.2.450'. [ 162.703835][ T5701] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 162.839261][ T5707] netlink: 'syz.0.456': attribute type 19 has an invalid length. [ 162.851361][ T5707] netlink: 4 bytes leftover after parsing attributes in process `syz.0.456'. [ 162.863343][ T5707] netlink: 'syz.0.456': attribute type 19 has an invalid length. [ 162.905567][ T5707] netlink: 4 bytes leftover after parsing attributes in process `syz.0.456'. [ 163.152599][ T5714] device syzkaller0 entered promiscuous mode [ 163.196601][ T5718] tipc: Started in network mode [ 163.211923][ T5718] tipc: Node identity 46b1dd3b13b1, cluster identity 4711 [ 163.237730][ T5718] tipc: Enabled bearer , priority 0 [ 163.266503][ T5723] device syzkaller0 entered promiscuous mode [ 163.451075][ T5718] tipc: Resetting bearer [ 163.484096][ T5717] tipc: Resetting bearer [ 163.532610][ T5717] tipc: Disabling bearer [ 164.852005][ T5783] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 164.923633][ T5787] netlink: 'syz.2.489': attribute type 1 has an invalid length. [ 167.159648][ T5841] netlink: 28 bytes leftover after parsing attributes in process `syz.4.510'. [ 167.206270][ T5841] netlink: 28 bytes leftover after parsing attributes in process `syz.4.510'. [ 167.230420][ T5848] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 167.293436][ T5847] netlink: 28 bytes leftover after parsing attributes in process `syz.4.510'. [ 167.304680][ T5847] netlink: 28 bytes leftover after parsing attributes in process `syz.4.510'. [ 168.503313][ T5878] syz.2.522[5878] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 168.503462][ T5878] syz.2.522[5878] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 168.974418][ T5888] tipc: Enabling of bearer rejected, failed to enable media [ 169.386573][ T5904] device veth1_macvtap left promiscuous mode [ 169.616940][ T5917] netlink: 'syz.3.539': attribute type 25 has an invalid length. [ 169.769039][ T5917] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 169.849228][ T5917] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 170.592039][ T5924] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 170.677564][ T5937] netlink: 'syz.0.542': attribute type 5 has an invalid length. [ 170.849373][ T5947] netlink: 36 bytes leftover after parsing attributes in process `syz.3.551'. [ 172.116737][ T5960] device syzkaller0 entered promiscuous mode [ 173.189091][ T4308] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 173.482190][ T5988] netlink: 12 bytes leftover after parsing attributes in process `syz.3.562'. [ 173.545114][ T5990] netlink: 56 bytes leftover after parsing attributes in process `syz.0.563'. [ 174.065506][ T6001] netlink: 'syz.0.567': attribute type 30 has an invalid length. [ 174.588932][ T6009] virt_wifi0 speed is unknown, defaulting to 1000 [ 174.800143][ T6009] virt_wifi0 speed is unknown, defaulting to 1000 [ 174.820684][ T6009] virt_wifi0 speed is unknown, defaulting to 1000 [ 175.449152][ T6009] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 175.502830][ T6021] netlink: 'syz.1.572': attribute type 1 has an invalid length. [ 175.580439][ T6021] netlink: 'syz.1.572': attribute type 1 has an invalid length. [ 175.645468][ T6009] virt_wifi0 speed is unknown, defaulting to 1000 [ 175.668284][ T6009] virt_wifi0 speed is unknown, defaulting to 1000 [ 175.698403][ T6009] virt_wifi0 speed is unknown, defaulting to 1000 [ 175.786007][ T6009] virt_wifi0 speed is unknown, defaulting to 1000 [ 175.842150][ T6009] virt_wifi0 speed is unknown, defaulting to 1000 [ 175.898196][ T6009] virt_wifi0 speed is unknown, defaulting to 1000 [ 175.915934][ T6009] virt_wifi0 speed is unknown, defaulting to 1000 [ 176.067808][ T6038] virt_wifi0 speed is unknown, defaulting to 1000 [ 176.185536][ T6041] virt_wifi0 speed is unknown, defaulting to 1000 [ 177.672649][ T6057] netlink: 20 bytes leftover after parsing attributes in process `syz.1.585'. [ 177.723380][ T6060] netlink: 16 bytes leftover after parsing attributes in process `syz.2.584'. [ 178.223706][ T6065] tipc: Started in network mode [ 178.300176][ T6065] tipc: Node identity 669fd946fe52, cluster identity 4711 [ 178.355004][ T6065] tipc: Enabled bearer , priority 0 [ 178.386974][ T6068] device syzkaller0 entered promiscuous mode [ 178.404927][ T6072] netlink: 'syz.4.590': attribute type 1 has an invalid length. [ 178.447431][ T6077] netlink: 8 bytes leftover after parsing attributes in process `syz.1.589'. [ 178.478917][ T6072] device gretap1 entered promiscuous mode [ 178.493317][ T6072] bond1: (slave gretap1): making interface the new active one [ 178.503458][ T6072] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 178.551903][ T6068] tipc: Resetting bearer [ 178.599695][ T6064] tipc: Resetting bearer [ 178.635091][ T6064] tipc: Disabling bearer [ 178.738604][ T6082] netlink: 4 bytes leftover after parsing attributes in process `syz.3.592'. [ 178.757707][ T6082] device bridge_slave_1 left promiscuous mode [ 178.765416][ T6082] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.792492][ T6082] device bridge_slave_0 left promiscuous mode [ 178.804586][ T6082] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.045778][ T21] bridge0 speed is unknown, defaulting to 1000 [ 179.063166][ T21] ================================================================== [ 179.071556][ T21] BUG: KASAN: use-after-free in siw_query_port+0x358/0x450 [ 179.078798][ T21] Read of size 4 at addr ffff888062abc0d8 by task kworker/1:0/21 [ 179.086543][ T21] [ 179.088899][ T21] CPU: 1 PID: 21 Comm: kworker/1:0 Not tainted syzkaller #0 [ 179.096196][ T21] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 179.106275][ T21] Workqueue: infiniband ib_cache_event_task [ 179.112223][ T21] Call Trace: [ 179.115522][ T21] [ 179.118480][ T21] dump_stack_lvl+0x168/0x230 [ 179.123199][ T21] ? show_regs_print_info+0x20/0x20 [ 179.128426][ T21] ? _printk+0xcc/0x110 [ 179.132628][ T21] ? load_image+0x3b0/0x3b0 [ 179.137163][ T21] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 179.142574][ T21] print_address_description+0x60/0x2d0 [ 179.148249][ T21] ? siw_query_port+0x358/0x450 [ 179.153134][ T21] kasan_report+0xdf/0x130 [ 179.157588][ T21] ? siw_query_port+0x358/0x450 [ 179.162469][ T21] ? _raw_spin_unlock+0x24/0x40 [ 179.167348][ T21] siw_query_port+0x358/0x450 [ 179.172067][ T21] ib_cache_update+0x1bb/0x980 [ 179.176873][ T21] ? ib_cache_setup_one+0x5d0/0x5d0 [ 179.182108][ T21] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 179.188116][ T21] ? read_lock_is_recursive+0x10/0x10 [ 179.193523][ T21] ib_cache_event_task+0xd4/0x1c0 [ 179.198572][ T21] process_one_work+0x863/0x1000 [ 179.203546][ T21] ? worker_detach_from_pool+0x240/0x240 [ 179.209369][ T21] ? lockdep_hardirqs_off+0x70/0x100 [ 179.214779][ T21] ? _raw_spin_lock_irq+0xab/0xe0 [ 179.219845][ T21] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 179.225252][ T21] ? wq_worker_running+0x97/0x170 [ 179.230300][ T21] worker_thread+0xaa8/0x12a0 [ 179.235033][ T21] kthread+0x436/0x520 [ 179.239117][ T21] ? rcu_lock_release+0x20/0x20 [ 179.243990][ T21] ? kthread_blkcg+0xd0/0xd0 [ 179.248606][ T21] ret_from_fork+0x1f/0x30 [ 179.253067][ T21] [ 179.256105][ T21] [ 179.258447][ T21] Allocated by task 4190: [ 179.262791][ T21] __kasan_kmalloc+0xb5/0xf0 [ 179.267415][ T21] kvmalloc_node+0x84/0x130 [ 179.271935][ T21] alloc_netdev_mqs+0x84/0xc40 [ 179.276724][ T21] rtnl_create_link+0x2fb/0xa90 [ 179.281599][ T21] rtnl_newlink+0x105e/0x17d0 [ 179.286296][ T21] rtnetlink_rcv_msg+0x9b9/0xe60 [ 179.291253][ T21] netlink_rcv_skb+0x1e0/0x430 [ 179.296044][ T21] netlink_unicast+0x774/0x920 [ 179.300830][ T21] netlink_sendmsg+0x8ab/0xbc0 [ 179.305614][ T21] __sys_sendto+0x423/0x580 [ 179.310140][ T21] __x64_sys_sendto+0xda/0xf0 [ 179.314839][ T21] do_syscall_64+0x4c/0xa0 [ 179.319273][ T21] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 179.325185][ T21] [ 179.327528][ T21] Freed by task 6082: [ 179.331515][ T21] kasan_set_track+0x4b/0x70 [ 179.336121][ T21] kasan_set_free_info+0x1f/0x40 [ 179.341076][ T21] ____kasan_slab_free+0xd5/0x110 [ 179.346117][ T21] slab_free_freelist_hook+0xea/0x170 [ 179.351510][ T21] kfree+0xef/0x2a0 [ 179.355330][ T21] device_release+0x92/0x1c0 [ 179.359938][ T21] kobject_put+0x21d/0x460 [ 179.364407][ T21] netdev_run_todo+0x8d0/0xa40 [ 179.369192][ T21] rtnetlink_rcv_msg+0x9c0/0xe60 [ 179.374148][ T21] netlink_rcv_skb+0x1e0/0x430 [ 179.378930][ T21] netlink_unicast+0x774/0x920 [ 179.383808][ T21] netlink_sendmsg+0x8ab/0xbc0 [ 179.388587][ T21] ____sys_sendmsg+0x5a2/0x8c0 [ 179.393463][ T21] ___sys_sendmsg+0x1f0/0x260 [ 179.398256][ T21] __se_sys_sendmsg+0x190/0x250 [ 179.403126][ T21] do_syscall_64+0x4c/0xa0 [ 179.407558][ T21] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 179.413467][ T21] [ 179.415808][ T21] Last potentially related work creation: [ 179.421534][ T21] kasan_save_stack+0x35/0x60 [ 179.426242][ T21] kasan_record_aux_stack+0xb8/0x100 [ 179.431578][ T21] insert_work+0x54/0x3d0 [ 179.435933][ T21] __queue_work+0x9c5/0xd50 [ 179.440457][ T21] queue_work_on+0x11d/0x1d0 [ 179.445071][ T21] rhashtable_remove_fast+0xba8/0xc60 [ 179.450474][ T21] br_multicast_dev_del+0x170/0x5f0 [ 179.455697][ T21] br_dev_uninit+0x1a/0x70 [ 179.460128][ T21] unregister_netdevice_many+0x131d/0x18f0 [ 179.465958][ T21] rtnl_dellink+0x3db/0x700 [ 179.470484][ T21] rtnetlink_rcv_msg+0x9b9/0xe60 [ 179.475443][ T21] netlink_rcv_skb+0x1e0/0x430 [ 179.480226][ T21] netlink_unicast+0x774/0x920 [ 179.485009][ T21] netlink_sendmsg+0x8ab/0xbc0 [ 179.489795][ T21] ____sys_sendmsg+0x5a2/0x8c0 [ 179.494585][ T21] ___sys_sendmsg+0x1f0/0x260 [ 179.499283][ T21] __se_sys_sendmsg+0x190/0x250 [ 179.504150][ T21] do_syscall_64+0x4c/0xa0 [ 179.508592][ T21] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 179.514503][ T21] [ 179.516862][ T21] Second to last potentially related work creation: [ 179.523452][ T21] kasan_save_stack+0x35/0x60 [ 179.528155][ T21] kasan_record_aux_stack+0xb8/0x100 [ 179.533465][ T21] insert_work+0x54/0x3d0 [ 179.537816][ T21] __queue_work+0x9c5/0xd50 [ 179.542345][ T21] queue_work_on+0x11d/0x1d0 [ 179.546963][ T21] br_multicast_dev_del+0x35c/0x5f0 [ 179.552192][ T21] br_dev_uninit+0x1a/0x70 [ 179.556629][ T21] unregister_netdevice_many+0x131d/0x18f0 [ 179.562456][ T21] rtnl_dellink+0x3db/0x700 [ 179.566983][ T21] rtnetlink_rcv_msg+0x9b9/0xe60 [ 179.571947][ T21] netlink_rcv_skb+0x1e0/0x430 [ 179.576745][ T21] netlink_unicast+0x774/0x920 [ 179.581535][ T21] netlink_sendmsg+0x8ab/0xbc0 [ 179.586307][ T21] ____sys_sendmsg+0x5a2/0x8c0 [ 179.591078][ T21] ___sys_sendmsg+0x1f0/0x260 [ 179.595770][ T21] __se_sys_sendmsg+0x190/0x250 [ 179.600627][ T21] do_syscall_64+0x4c/0xa0 [ 179.605045][ T21] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 179.610940][ T21] [ 179.613264][ T21] The buggy address belongs to the object at ffff888062abc000 [ 179.613264][ T21] which belongs to the cache kmalloc-cg-8k of size 8192 [ 179.627574][ T21] The buggy address is located 216 bytes inside of [ 179.627574][ T21] 8192-byte region [ffff888062abc000, ffff888062abe000) [ 179.640939][ T21] The buggy address belongs to the page: [ 179.646574][ T21] page:ffffea00018aae00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x62ab8 [ 179.656725][ T21] head:ffffea00018aae00 order:3 compound_mapcount:0 compound_pincount:0 [ 179.665047][ T21] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 179.673033][ T21] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff88801684c3c0 [ 179.681616][ T21] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000 [ 179.690371][ T21] page dumped because: kasan: bad access detected [ 179.696790][ T21] page_owner tracks the page as allocated [ 179.702516][ T21] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd60c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4188, ts 66848116253, free_ts 20709470542 [ 179.723355][ T21] get_page_from_freelist+0x1b77/0x1c60 [ 179.728906][ T21] __alloc_pages+0x1e1/0x470 [ 179.733505][ T21] new_slab+0xc0/0x4b0 [ 179.737587][ T21] ___slab_alloc+0x81e/0xdf0 [ 179.742183][ T21] __kmalloc_node+0x200/0x3b0 [ 179.746858][ T21] kvmalloc_node+0x84/0x130 [ 179.751366][ T21] alloc_netdev_mqs+0x618/0xc40 [ 179.756221][ T21] rtnl_create_link+0x2fb/0xa90 [ 179.761076][ T21] rtnl_newlink+0x105e/0x17d0 [ 179.765756][ T21] rtnetlink_rcv_msg+0x9b9/0xe60 [ 179.770698][ T21] netlink_rcv_skb+0x1e0/0x430 [ 179.775467][ T21] netlink_unicast+0x774/0x920 [ 179.780231][ T21] netlink_sendmsg+0x8ab/0xbc0 [ 179.784998][ T21] __sys_sendto+0x423/0x580 [ 179.789504][ T21] __x64_sys_sendto+0xda/0xf0 [ 179.794184][ T21] do_syscall_64+0x4c/0xa0 [ 179.798600][ T21] page last free stack trace: [ 179.803263][ T21] free_unref_page_prepare+0x637/0x6c0 [ 179.808724][ T21] free_unref_page+0x94/0x280 [ 179.813398][ T21] free_contig_range+0x96/0xf0 [ 179.818161][ T21] destroy_args+0x100/0xa20 [ 179.822695][ T21] debug_vm_pgtable+0x318/0x370 [ 179.827586][ T21] do_one_initcall+0x1ee/0x680 [ 179.832374][ T21] do_initcall_level+0x137/0x1f0 [ 179.837332][ T21] do_initcalls+0x4b/0x90 [ 179.841681][ T21] kernel_init_freeable+0x3ce/0x560 [ 179.846884][ T21] kernel_init+0x19/0x1b0 [ 179.851217][ T21] ret_from_fork+0x1f/0x30 [ 179.855637][ T21] [ 179.857969][ T21] Memory state around the buggy address: [ 179.863597][ T21] ffff888062abbf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 179.871657][ T21] ffff888062abc000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 179.879715][ T21] >ffff888062abc080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 179.887776][ T21] ^ [ 179.894712][ T21] ffff888062abc100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 179.902786][ T21] ffff888062abc180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 179.910844][ T21] ================================================================== [ 179.918905][ T21] Disabling lock debugging due to kernel taint [ 179.947170][ T21] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 179.954410][ T21] CPU: 1 PID: 21 Comm: kworker/1:0 Tainted: G B syzkaller #0 [ 179.963088][ T21] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 179.973138][ T21] Workqueue: infiniband ib_cache_event_task [ 179.979034][ T21] Call Trace: [ 179.982312][ T21] [ 179.985240][ T21] dump_stack_lvl+0x168/0x230 [ 179.989921][ T21] ? show_regs_print_info+0x20/0x20 [ 179.995120][ T21] ? load_image+0x3b0/0x3b0 [ 179.999630][ T21] panic+0x2c9/0x7f0 [ 180.003531][ T21] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 180.009698][ T21] ? bpf_jit_dump+0xd0/0xd0 [ 180.014232][ T21] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 180.020129][ T21] ? _raw_spin_unlock+0x40/0x40 [ 180.024980][ T21] ? siw_query_port+0x358/0x450 [ 180.029841][ T21] check_panic_on_warn+0x80/0xa0 [ 180.034780][ T21] ? siw_query_port+0x358/0x450 [ 180.039630][ T21] end_report+0x6d/0xf0 [ 180.043789][ T21] kasan_report+0x102/0x130 [ 180.048296][ T21] ? siw_query_port+0x358/0x450 [ 180.053144][ T21] ? _raw_spin_unlock+0x24/0x40 [ 180.057991][ T21] siw_query_port+0x358/0x450 [ 180.062672][ T21] ib_cache_update+0x1bb/0x980 [ 180.067441][ T21] ? ib_cache_setup_one+0x5d0/0x5d0 [ 180.072660][ T21] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 180.078643][ T21] ? read_lock_is_recursive+0x10/0x10 [ 180.084021][ T21] ib_cache_event_task+0xd4/0x1c0 [ 180.089062][ T21] process_one_work+0x863/0x1000 [ 180.094021][ T21] ? worker_detach_from_pool+0x240/0x240 [ 180.099664][ T21] ? lockdep_hardirqs_off+0x70/0x100 [ 180.104961][ T21] ? _raw_spin_lock_irq+0xab/0xe0 [ 180.109994][ T21] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 180.115373][ T21] ? wq_worker_running+0x97/0x170 [ 180.120397][ T21] worker_thread+0xaa8/0x12a0 [ 180.125084][ T21] kthread+0x436/0x520 [ 180.129155][ T21] ? rcu_lock_release+0x20/0x20 [ 180.134005][ T21] ? kthread_blkcg+0xd0/0xd0 [ 180.138593][ T21] ret_from_fork+0x1f/0x30 [ 180.143023][ T21] [ 180.146325][ T21] Kernel Offset: disabled [ 180.150673][ T21] Rebooting in 86400 seconds..