last executing test programs: 7.98761154s ago: executing program 3 (id=6): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, &(0x7f00000001c0)={0x40, 0x15, 0x1, '@'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000014c0)={0x34, &(0x7f0000001300)={0x40, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000001100)={0x44, &(0x7f0000000e40)={0x40, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.901722636s ago: executing program 3 (id=17): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0xa96) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e24, @remote}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0xf3a, 0x0) 4.76586911s ago: executing program 3 (id=18): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x21ac6, 0x51a23}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x7}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 4.338906834s ago: executing program 4 (id=19): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d00000300"], 0x50) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x30) bind$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e23}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @empty}]}}}]}, 0x50}}, 0x40800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000600)=""/102400, 0x19000) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x110) fcntl$notify(r2, 0x402, 0x5d) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000080)={0x7ff, 0x10, 0x8, 0x2}, 0x8) sendto$inet6(r3, &(0x7f0000000140)="9f", 0x34000, 0x44004, &(0x7f0000000040)={0xa, 0x4e24, 0x7, @loopback, 0xc5f}, 0x1c) 4.332412074s ago: executing program 3 (id=20): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r0) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x58, r1, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) 3.705560544s ago: executing program 3 (id=21): r0 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f00000011c0)={0x8000101c}) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, 0x0) r1 = getpid() r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r5 = userfaultfd(0x1) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) r6 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000480), 0xa6f81, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f0000000180)=0x6f) r7 = dup2(r6, r6) ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, &(0x7f00000001c0)=0x2) read$FUSE(r7, &(0x7f00000063c0)={0x2020}, 0x2020) r8 = syz_pidfd_open(r1, 0x0) setns(r8, 0x24020000) r9 = syz_pidfd_open(0x0, 0x0) setns(r9, 0x24020000) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000080)) 3.566522848s ago: executing program 2 (id=23): socket$inet6(0xa, 0x3, 0x8000000003c) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x400000001, 0x0, 0x2, 0x0) getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x182, 0x3}, 0x18, 0x0) landlock_restrict_self(r4, 0xa) 3.537328699s ago: executing program 0 (id=24): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x1, 0x0, 0x0, {{}, {}, {0x3, 0x14, 'syz0\x00'}}}, 0x28}}, 0x0) 3.470619251s ago: executing program 4 (id=25): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x4, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000002a80)=[{{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000014c0)="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", 0x672}], 0x1}}], 0x1, 0x42054) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 3.380080634s ago: executing program 0 (id=26): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg$sock(r0, &(0x7f0000007480)=[{{0x0, 0x0, &(0x7f00000051c0)=[{&(0x7f0000004fc0)="14733f9daa4e98c0c2", 0x9}], 0x1}}], 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) connect$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x1, {0x2, 0x0, 0x4}, 0xfe}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x74, r5, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2004012}, 0x20000050) 3.19239073s ago: executing program 4 (id=28): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000500)=@gcm_128={{0x303}, "a95972fc5ec50719", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) shutdown(r0, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000003c0)) syz_open_procfs$namespace(0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff004) 2.841554901s ago: executing program 1 (id=29): socket$netlink(0x10, 0x3, 0x0) socket(0x2a, 0x2, 0x0) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) socket(0x28, 0x5, 0x0) accept4$unix(r0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r2, @ANYBLOB="060015000700fdff0c00168008000100", @ANYRES32=r1], 0x38}}, 0x10) 2.426061374s ago: executing program 4 (id=30): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) 2.389103985s ago: executing program 2 (id=31): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a2a1}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x3, 0x80000001, 0x7}, 0x1d}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0000000024c1020000ff1107c2fb7fe0406e52534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 2.361117186s ago: executing program 0 (id=32): socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="060015000700fdff0c00168008000100", @ANYRES32=r0], 0x38}}, 0x10) 2.144407823s ago: executing program 0 (id=33): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=@newtfilter={0x90, 0x2c, 0xd27, 0x30bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0xfff5, 0x10}, {}, {0x8, 0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_gact={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x40, 0x5, 0x7, 0xffffffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x980, 0xfffffffffffffff3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r7) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r6, 0xe}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 1.948537378s ago: executing program 1 (id=34): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000700)={0x0, 0x2, 0x1ff, 0x0, 0x1, 0x52cc, 0x10, 0x1000, {0x0, @in6={{0xa, 0x4e20, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}}, 0xb069, 0xb, 0xb, 0x4, 0xb}}, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f00000009c0)=r1, 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000005180)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000bc0)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac539985bac8624c50b527c68b0ff250261953f2da79a78104c2d0000000086b124945aa9ab7581ebd385fb61210c410d799168ffc4b64677af924affd442035db81e18c2d2462d0bb25fff9d3b1ce903597992b2a4d59e5ac2d704fa2595b5d36400d0b2d119796726a223", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000025c0)="24acadd7f04daaa04e88680351d9ce53f67fd2afefe557d4bd561f02df2570f175951d4bdd97ec433ec583c79fa668922a61c8662e0890ce06996f5ba401e582dfb5197822bee50c6cd4b3a6f9d14f1fde9b1698ad6847d4fde0458282ece396a1e212cd02e6fb62599df5ecb5984843ee04e96eb26fa2a8100a0b7b2d032fff965485ded83b39d6c9835416a8db5414a6c54101693e6b05e652b49fceaf4a0cc2b7898034ff0eb5150b3e85b9ff5658ba346d0b6b5a3a71eb084311606cf6b8ccf7c45a79b319a201e9c5ae9f0aab5c4dd7a77de7f5ae2edb307892dbfa8377446d8cabb9302b27250c66ddaeb3988933df044b6ae4570671cf861484b9124827dbe78a0388eecac9e6ad371287ca014fa658c6f1308b046b2fc0cc3d5b8ba48f3b1319d5976bb45f3c630f01c77b93f07fe2b304a98383258a3779", 0x13c}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000cc0)="c7899b9fac93cacea12ca2d82021c1e83ad7f8a754218dad40bb320ebd0d9c7e8d921848d3a41342ebd0531fcc6659c11fbedd66105914e21c5babbfcaa17f70785c4b7c5567cc5426c01bdb34fe0a8964ba55198aa02449a94f483177dd361c62c590eb8b68f5e70a597e839e8a61d5a43b6bc252c0b2577575e878d814bd2e6f6c6dc960d7971acae97616e92f434806d7e2007bbefcf0a2eb69065780457446df9ccfc6d0cb3642e7b2d468666aae76c0e476f5babe6508ab2ca083bfc3462c4f183f59f4827c9f9a", 0xca}, {&(0x7f0000000940)="68424608bc80449c9fac69e6c19042ff825b876f21dc112444918ad53a63924767e7cc081c8aa81f76ad91240839f604771823eb7d843aaba34040d6d00952a7e68960d9a290", 0x46}], 0x2}}], 0x3, 0x2010) 1.848659352s ago: executing program 1 (id=35): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r1, 0x705, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000810) syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r0) 1.677668337s ago: executing program 1 (id=36): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d00000300"], 0x50) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x30) bind$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e23}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @empty}]}}}]}, 0x50}}, 0x40800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000600)=""/102400, 0x19000) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x110) fcntl$notify(r2, 0x402, 0x5d) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000080)={0x7ff, 0x10, 0x8, 0x2}, 0x8) sendto$inet6(r3, &(0x7f0000000140)="9f", 0x34000, 0x44004, &(0x7f0000000040)={0xa, 0x4e24, 0x7, @loopback, 0xc5f}, 0x1c) 1.084193806s ago: executing program 4 (id=37): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{0x1}, &(0x7f0000000200), 0x0}, 0x20) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'aead\x00', 0x11, 0x0, 'aegis256-generic\x00'}, 0x58) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x48000, &(0x7f0000000200)={0xa, 0x4e23, 0x3ff, @loopback, 0x10001}, 0x1c) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}}, 0x40040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x9c, 0x7, 0x0, 0x1, 0x7fd, 0xc, 0x9, {0x0, @in6={{0xa, 0x4e20, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10}}, 0x81, 0x3, 0x3, 0x4b, 0x9}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000044001280090001"], 0xc3}, 0x1, 0x100000000000000}, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func={0x0, 0x0, 0x0, 0xe}]}}, &(0x7f0000001f80)=""/237, 0x26, 0xed, 0x2}, 0x1a) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYRES8, @ANYBLOB="010026bd7000fddbdf2506000000140002002001000000000000000000000000000114000300fe88000000000000000000000000010108000400ac1414bb2b00070073797374656d5f753a6f626a6563745f723a7373685f"], 0x70}, 0x1, 0x0, 0x0, 0x4}, 0xc8a0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) 992.204049ms ago: executing program 2 (id=38): sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) sendmsg$kcm(0xffffffffffffffff, 0x0, 0xe07e872420dfefca) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000180)={&(0x7f0000003580)={0x20, 0x24, 0x107, 0x70bd2e, 0x25dfdbfb, {0x2, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) 898.980762ms ago: executing program 0 (id=39): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x1, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 854.941573ms ago: executing program 1 (id=40): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000000)=0x9, 0x4) 717.677428ms ago: executing program 2 (id=41): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r0, &(0x7f0000000100)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10, 0x0}}], 0x1, 0x20040804) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) socket$inet(0x2, 0x3, 0x30) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000500)='cdg', 0x3) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000140)=0xffff0000, 0x4) 676.472769ms ago: executing program 1 (id=42): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socket(0x10, 0x3, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 620.196941ms ago: executing program 0 (id=43): socketpair$nbd(0x1, 0x1, 0x0, 0x0) socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) close(0x4) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, r1, 0x215eb000) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, 0x0) socket(0x14, 0x2, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet(0x2, 0x3, 0x2) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4058587a, &(0x7f0000000340)={{0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240)={@align=0xd0a, {0x5, 0x40, 0x7, 0x5}}, 0xe, 0x0, 0x0}, {[0x4, 0x1ff, 0x10001, 0x8]}, 0x6, 0x0, 0x0}) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f0000000500)={'nat\x00', 0x0, 0x3, 0x0, [0x80000000, 0xfffffffffffffffd, 0x5, 0x6, 0x5, 0x4], 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x78) 619.720331ms ago: executing program 4 (id=44): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x800) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, 0x0, 0x0, 0x0) sendmsg$AUDIT_SET_FEATURE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x3fa, 0x4, 0x70bd2c, 0x25dfdbfe, {0x1, 0x1, 0x1, 0x1}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x20000044) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r3, 0x6, 0xc, 0x0, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f00000006c0)=0x40, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5}, 0x18) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) setsockopt$SO_J1939_ERRQUEUE(r4, 0x6b, 0x4, &(0x7f00000001c0)=0x1, 0x4) sendmmsg(r4, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000080)=0x2a02, 0x4) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001206", 0x2e}], 0x1}, 0x0) 209.805403ms ago: executing program 2 (id=45): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000780), r0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000100)={0x28, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0xc800) 63.543318ms ago: executing program 3 (id=46): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000740)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x4, 0x0, 0xfffffffe}, 0x10) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) r4 = fcntl$dupfd(r3, 0x0, r3) write$tun(r4, 0x0, 0x3db) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) 0s ago: executing program 2 (id=47): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.16' (ED25519) to the list of known hosts. [ 48.455978][ T4175] cgroup: Unknown subsys name 'net' [ 48.584852][ T4175] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 49.811060][ T4175] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 51.135514][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 51.172283][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 51.207109][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 51.241978][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 51.312344][ T4203] chnl_net:caif_netlink_parms(): no params data found [ 51.378196][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.386251][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.394383][ T4191] device bridge_slave_0 entered promiscuous mode [ 51.412296][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.419384][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.428155][ T4194] device bridge_slave_0 entered promiscuous mode [ 51.442788][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.449923][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.457851][ T4194] device bridge_slave_1 entered promiscuous mode [ 51.465714][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.475551][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.483351][ T4191] device bridge_slave_1 entered promiscuous mode [ 51.495130][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.502682][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.510416][ T4189] device bridge_slave_0 entered promiscuous mode [ 51.518238][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.525371][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.533365][ T4189] device bridge_slave_1 entered promiscuous mode [ 51.572126][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.590483][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.597572][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.605557][ T4190] device bridge_slave_0 entered promiscuous mode [ 51.622072][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.646774][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.654567][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.662448][ T4190] device bridge_slave_1 entered promiscuous mode [ 51.671429][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.687165][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.704842][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.727722][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.744438][ T4203] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.751686][ T4203] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.760354][ T4203] device bridge_slave_0 entered promiscuous mode [ 51.773077][ T4203] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.780716][ T4203] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.788349][ T4203] device bridge_slave_1 entered promiscuous mode [ 51.821684][ T4194] team0: Port device team_slave_0 added [ 51.837017][ T4189] team0: Port device team_slave_0 added [ 51.851777][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.863306][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.873438][ T4194] team0: Port device team_slave_1 added [ 51.882321][ T4191] team0: Port device team_slave_0 added [ 51.895734][ T4189] team0: Port device team_slave_1 added [ 51.903940][ T4203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.932172][ T4191] team0: Port device team_slave_1 added [ 51.940965][ T4190] team0: Port device team_slave_0 added [ 51.953812][ T4203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.970962][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.978067][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.004605][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.022559][ T4190] team0: Port device team_slave_1 added [ 52.046186][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.053244][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.079397][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.091264][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.098340][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.124421][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.141435][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.148398][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.175333][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.188776][ T4203] team0: Port device team_slave_0 added [ 52.196038][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.203258][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.229357][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.257305][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.264462][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.290909][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.303884][ T4203] team0: Port device team_slave_1 added [ 52.315776][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.328043][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.354439][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.366524][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.373694][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.399713][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.436527][ T4203] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.443974][ T4203] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.470135][ T4203] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.498816][ T4194] device hsr_slave_0 entered promiscuous mode [ 52.505702][ T4194] device hsr_slave_1 entered promiscuous mode [ 52.518427][ T4203] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.525763][ T4203] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.553261][ T4203] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.585996][ T4189] device hsr_slave_0 entered promiscuous mode [ 52.592771][ T4189] device hsr_slave_1 entered promiscuous mode [ 52.599644][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.607487][ T4189] Cannot create hsr debugfs directory [ 52.636999][ T4190] device hsr_slave_0 entered promiscuous mode [ 52.644333][ T4190] device hsr_slave_1 entered promiscuous mode [ 52.651560][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.660755][ T4190] Cannot create hsr debugfs directory [ 52.677960][ T4191] device hsr_slave_0 entered promiscuous mode [ 52.684687][ T4191] device hsr_slave_1 entered promiscuous mode [ 52.692896][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.700798][ T4191] Cannot create hsr debugfs directory [ 52.720535][ T4203] device hsr_slave_0 entered promiscuous mode [ 52.727140][ T4203] device hsr_slave_1 entered promiscuous mode [ 52.734034][ T4203] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.741898][ T4203] Cannot create hsr debugfs directory [ 52.870816][ T1325] Bluetooth: hci0: command 0x0409 tx timeout [ 52.870996][ T21] Bluetooth: hci3: command 0x0409 tx timeout [ 52.877478][ T1325] Bluetooth: hci1: command 0x0409 tx timeout [ 52.883049][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 52.949844][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 53.092403][ T4194] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 53.106740][ T4194] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 53.117133][ T4194] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 53.137265][ T4194] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 53.182770][ T4190] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 53.197108][ T4190] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 53.206777][ T4190] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 53.221384][ T4190] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 53.263126][ T4189] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 53.282708][ T4189] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 53.295008][ T4189] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 53.318551][ T4189] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 53.353479][ T4203] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 53.373231][ T4203] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 53.385657][ T4203] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 53.394921][ T4203] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 53.432383][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.473923][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.490099][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.500508][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.511245][ T4191] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 53.537709][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.548905][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.558915][ T302] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.566311][ T302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.577410][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.587653][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.596820][ T302] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.603974][ T302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.613562][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.623782][ T4191] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 53.634208][ T4191] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 53.653801][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.678344][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.686688][ T4191] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 53.702937][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.715403][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.725701][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.735469][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.744524][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.753548][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.764924][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.773228][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.781839][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.797926][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.805876][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.828981][ T4194] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.841577][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.852420][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.867717][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.876256][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.884793][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.893980][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.903261][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.932658][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.942570][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.952201][ T302] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.959288][ T302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.992940][ T4203] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.005131][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.016208][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.025376][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.033992][ T302] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.041106][ T302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.049300][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.058369][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.067408][ T302] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.074517][ T302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.082992][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.092431][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.102168][ T302] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.109657][ T302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.119981][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.148680][ T4203] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.158650][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.175986][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.185620][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.195082][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.204339][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.234481][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.255659][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.268085][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.276889][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.286562][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.295237][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.302334][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.310884][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.319584][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.327961][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.336663][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.345361][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.352462][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.360889][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.368787][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.379116][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.387690][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.412480][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.428038][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.441639][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.457003][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.466090][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.475774][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.484141][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.493068][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.501723][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.512021][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.521167][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.530177][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.538585][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.547392][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.561239][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.585077][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.596699][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.608439][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.618854][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.634821][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.648417][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.657911][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.666643][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.676310][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.686877][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.695968][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.719348][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.759908][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.767715][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.790108][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.798610][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.828389][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.837548][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.847043][ T302] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.854185][ T302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.863492][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.874109][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.883499][ T302] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.893215][ T302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.904158][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.913681][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.922546][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.932900][ T4203] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.950009][ T1111] Bluetooth: hci1: command 0x041b tx timeout [ 54.956207][ T1111] Bluetooth: hci2: command 0x041b tx timeout [ 54.970981][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.975162][ T1111] Bluetooth: hci3: command 0x041b tx timeout [ 54.981279][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.986222][ T1111] Bluetooth: hci0: command 0x041b tx timeout [ 54.997444][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.008867][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.018628][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.027790][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.036233][ T4232] Bluetooth: hci4: command 0x041b tx timeout [ 55.040545][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.050280][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.057745][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.067164][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.075958][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.096825][ T4191] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 55.114451][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.144478][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.163420][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.172313][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.182882][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.192126][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.200795][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.209981][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.217455][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.239598][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.249131][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.275336][ T4194] device veth0_vlan entered promiscuous mode [ 55.293646][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.314960][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.323531][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.336869][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.352968][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.371506][ T4194] device veth1_vlan entered promiscuous mode [ 55.391604][ T4203] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.402253][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.418248][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.426653][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.493650][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.502343][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.512659][ T4189] device veth0_vlan entered promiscuous mode [ 55.519250][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.528353][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.549118][ T4194] device veth0_macvtap entered promiscuous mode [ 55.576075][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.584734][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.602291][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.611750][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.621116][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.631345][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.638777][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.646711][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.662635][ T4194] device veth1_macvtap entered promiscuous mode [ 55.695268][ T4189] device veth1_vlan entered promiscuous mode [ 55.711551][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.727059][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.735671][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.750488][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.758886][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.767811][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.776010][ T4203] device veth0_vlan entered promiscuous mode [ 55.807138][ T4203] device veth1_vlan entered promiscuous mode [ 55.822367][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.834342][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.852036][ T4194] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.861290][ T4194] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.870898][ T4194] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.880153][ T4194] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.897817][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.907233][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.915683][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.924774][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.933574][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.942867][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.951612][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.960753][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.969328][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.978826][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.988398][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.001594][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.012388][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.057798][ T4189] device veth0_macvtap entered promiscuous mode [ 56.077495][ T4190] device veth0_vlan entered promiscuous mode [ 56.090918][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.099189][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.109234][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.118273][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.127044][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.136334][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.144818][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.153595][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.162221][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.170486][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.178225][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.187329][ T4191] device veth0_vlan entered promiscuous mode [ 56.202062][ T4189] device veth1_macvtap entered promiscuous mode [ 56.214319][ T4190] device veth1_vlan entered promiscuous mode [ 56.224449][ T4203] device veth0_macvtap entered promiscuous mode [ 56.236252][ T4191] device veth1_vlan entered promiscuous mode [ 56.267094][ T4203] device veth1_macvtap entered promiscuous mode [ 56.283951][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.294812][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.307778][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.338245][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.348814][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.358109][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.366421][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.375285][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.384052][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.392843][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.402194][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.411497][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.442838][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.454375][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.466601][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.487918][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.496925][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.506109][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.514766][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.524041][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.532964][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.545390][ T4191] device veth0_macvtap entered promiscuous mode [ 56.562015][ T4190] device veth0_macvtap entered promiscuous mode [ 56.569427][ T4203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.581692][ T4203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.591873][ T4203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.602429][ T4203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.614182][ T4203] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.630901][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.638879][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.649935][ T4191] device veth1_macvtap entered promiscuous mode [ 56.669010][ T4190] device veth1_macvtap entered promiscuous mode [ 56.677237][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.685848][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.694929][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.703129][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.711993][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.720558][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.729133][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.740498][ T4189] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.749204][ T4189] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.758418][ T4189] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.767261][ T4189] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.778555][ T4203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.789194][ T4203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.800225][ T4203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.810954][ T4203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.822357][ T4203] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.833949][ T4203] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.842987][ T4203] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.851780][ T4203] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.860810][ T4203] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.891832][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.900688][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.911718][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.922636][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.932685][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.943150][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.954522][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.965133][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.976106][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.995712][ T302] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.005186][ T302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.019080][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.029609][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.030246][ T4234] Bluetooth: hci0: command 0x040f tx timeout [ 57.038786][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.050589][ T4234] Bluetooth: hci3: command 0x040f tx timeout [ 57.057684][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.069869][ T4234] Bluetooth: hci2: command 0x040f tx timeout [ 57.069948][ T4234] Bluetooth: hci1: command 0x040f tx timeout [ 57.083316][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.093866][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.105226][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.111062][ T4234] Bluetooth: hci4: command 0x040f tx timeout [ 57.123288][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.133978][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.145266][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.157674][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.169207][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.179328][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.191009][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.201667][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.212180][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.222763][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.233505][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.244817][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.263153][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.273896][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.284079][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.292860][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.304542][ T4191] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.313841][ T4191] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.323462][ T4191] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.332474][ T4191] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.377627][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.393953][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.405783][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.421681][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.432818][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.444846][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.454710][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.465884][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.477209][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.523204][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.545371][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.560226][ T4190] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.580896][ T4190] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.591100][ T4190] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.600012][ T4190] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.646722][ T150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.656344][ T150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.709763][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.776221][ T4244] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.797914][ T4244] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.816831][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.837494][ T302] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.856205][ T302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.884144][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.909866][ T3084] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.918021][ T3084] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.931476][ T150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.965698][ T150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.981564][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.997626][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.023400][ T3084] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.046957][ T3084] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.085318][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.122429][ T302] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.134034][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.157624][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.168096][ T302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.183684][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.203428][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.312100][ T4272] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2'. [ 58.584498][ T4282] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8'. [ 58.669648][ T4230] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 59.013509][ T4230] usb 4-1: Using ep0 maxpacket: 16 [ 59.112585][ T13] Bluetooth: hci1: command 0x0419 tx timeout [ 59.442414][ T13] Bluetooth: hci2: command 0x0419 tx timeout [ 59.769937][ T4230] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 59.789724][ T13] Bluetooth: hci3: command 0x0419 tx timeout [ 59.795806][ T13] Bluetooth: hci0: command 0x0419 tx timeout [ 59.804221][ T13] Bluetooth: hci4: command 0x0419 tx timeout [ 59.986086][ T4296] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 59.996948][ T4296] device syzkaller0 entered promiscuous mode [ 60.275612][ T4299] netlink: 68 bytes leftover after parsing attributes in process `syz.4.11'. [ 60.297426][ T4230] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 60.985995][ T4230] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.994936][ T4230] usb 4-1: Product: syz [ 60.999998][ T4230] usb 4-1: Manufacturer: syz [ 61.005062][ T4230] usb 4-1: SerialNumber: syz [ 61.037977][ T4230] usb 4-1: config 0 descriptor?? [ 61.097711][ T4303] netlink: 28 bytes leftover after parsing attributes in process `syz.4.14'. [ 61.148781][ T4303] netlink: 'syz.4.14': attribute type 7 has an invalid length. [ 61.159374][ T4303] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14'. [ 61.192563][ T4230] usb 4-1: USB disconnect, device number 2 [ 61.278887][ T4303] device team0 entered promiscuous mode [ 61.312630][ T4311] MPTCP: addr_signal error, add_addr=1, echo=0 [ 61.315209][ T4303] device team_slave_0 entered promiscuous mode [ 61.398379][ T4303] device team_slave_1 entered promiscuous mode [ 61.463669][ T4303] device bond0 entered promiscuous mode [ 61.515651][ T4303] device bond_slave_0 entered promiscuous mode [ 61.579730][ T4303] device bond_slave_1 entered promiscuous mode [ 61.593858][ T4303] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 61.640815][ T4319] team0: Device ip6tnl1 is of different type [ 61.716082][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 62.584089][ T4339] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip_vti0, syncid = 2, id = 0 [ 62.798038][ T4349] netlink: 4 bytes leftover after parsing attributes in process `syz.0.26'. [ 63.904914][ T4386] device syzkaller0 entered promiscuous mode [ 63.968740][ T4389] netlink: 28 bytes leftover after parsing attributes in process `syz.4.30'. [ 64.050336][ T4389] netlink: 28 bytes leftover after parsing attributes in process `syz.4.30'. [ 64.190897][ T4389] device gretap0 entered promiscuous mode [ 64.259394][ T4389] device gretap0 left promiscuous mode [ 65.020000][ T4394] device syzkaller0 entered promiscuous mode [ 65.353231][ T4417] device syzkaller0 entered promiscuous mode [ 65.817619][ T4434] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.850047][ T4434] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.935348][ T4434] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.966476][ T4434] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.195026][ T4426] [ 66.197396][ T4426] ====================================================== [ 66.204415][ T4426] WARNING: possible circular locking dependency detected [ 66.211454][ T4426] syzkaller #0 Not tainted [ 66.215895][ T4426] ------------------------------------------------------ [ 66.222914][ T4426] syz.1.42/4426 is trying to acquire lock: [ 66.228723][ T4426] ffff88807db3cf98 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}, at: __flush_work+0xfa/0x210 [ 66.239198][ T4426] [ 66.239198][ T4426] but task is already holding lock: [ 66.248294][ T4426] ffff88807db3d3f0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x5f/0x1030 [ 66.257645][ T4426] [ 66.257645][ T4426] which lock already depends on the new lock. [ 66.257645][ T4426] [ 66.268671][ T4426] [ 66.268671][ T4426] the existing dependency chain (in reverse order) is: [ 66.277695][ T4426] [ 66.277695][ T4426] -> #3 (&hdev->req_lock){+.+.}-{3:3}: [ 66.285723][ T4426] __mutex_lock_common+0x1e3/0x2400 [ 66.291470][ T4426] mutex_lock_nested+0x17/0x20 [ 66.296862][ T4426] hci_dev_do_close+0x5f/0x1030 [ 66.302253][ T4426] hci_rfkill_set_block+0x10a/0x190 [ 66.307995][ T4426] rfkill_set_block+0x1c9/0x3d0 [ 66.313572][ T4426] rfkill_fop_write+0x452/0x560 [ 66.319047][ T4426] vfs_write+0x30b/0xd60 [ 66.324070][ T4426] ksys_write+0x152/0x260 [ 66.328964][ T4426] do_syscall_64+0x4c/0xa0 [ 66.333918][ T4426] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 66.340355][ T4426] [ 66.340355][ T4426] -> #2 (rfkill_global_mutex){+.+.}-{3:3}: [ 66.348372][ T4426] __mutex_lock_common+0x1e3/0x2400 [ 66.354120][ T4426] mutex_lock_nested+0x17/0x20 [ 66.359419][ T4426] rfkill_register+0x33/0x980 [ 66.364640][ T4426] hci_register_dev+0x452/0x970 [ 66.370033][ T4426] vhci_create_device+0x32c/0x5c0 [ 66.375596][ T4426] vhci_write+0x391/0x450 [ 66.380454][ T4426] vfs_write+0x745/0xd60 [ 66.385227][ T4426] ksys_write+0x152/0x260 [ 66.390096][ T4426] do_syscall_64+0x4c/0xa0 [ 66.395077][ T4426] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 66.401506][ T4426] [ 66.401506][ T4426] -> #1 (&data->open_mutex){+.+.}-{3:3}: [ 66.409461][ T4426] __mutex_lock_common+0x1e3/0x2400 [ 66.415952][ T4426] mutex_lock_nested+0x17/0x20 [ 66.421547][ T4426] vhci_send_frame+0x88/0x100 [ 66.426876][ T4426] hci_send_frame+0x1a9/0x2e0 [ 66.432090][ T4426] hci_tx_work+0x9f9/0x1710 [ 66.437106][ T4426] process_one_work+0x85f/0x1010 [ 66.442552][ T4426] worker_thread+0xaa6/0x1290 [ 66.447758][ T4426] kthread+0x436/0x520 [ 66.452347][ T4426] ret_from_fork+0x1f/0x30 [ 66.457269][ T4426] [ 66.457269][ T4426] -> #0 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 66.466448][ T4426] __lock_acquire+0x2c42/0x7d10 [ 66.471805][ T4426] lock_acquire+0x19e/0x400 [ 66.476811][ T4426] __flush_work+0x116/0x210 [ 66.481815][ T4426] hci_dev_do_close+0x1e7/0x1030 [ 66.487267][ T4426] hci_rfkill_set_block+0x10a/0x190 [ 66.493094][ T4426] rfkill_set_block+0x1c9/0x3d0 [ 66.498450][ T4426] rfkill_fop_write+0x452/0x560 [ 66.503888][ T4426] vfs_write+0x30b/0xd60 [ 66.508726][ T4426] ksys_write+0x152/0x260 [ 66.513581][ T4426] do_syscall_64+0x4c/0xa0 [ 66.518511][ T4426] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 66.525014][ T4426] [ 66.525014][ T4426] other info that might help us debug this: [ 66.525014][ T4426] [ 66.535771][ T4426] Chain exists of: [ 66.535771][ T4426] (work_completion)(&hdev->tx_work) --> rfkill_global_mutex --> &hdev->req_lock [ 66.535771][ T4426] [ 66.551063][ T4426] Possible unsafe locking scenario: [ 66.551063][ T4426] [ 66.558952][ T4426] CPU0 CPU1 [ 66.564477][ T4426] ---- ---- [ 66.569865][ T4426] lock(&hdev->req_lock); [ 66.574264][ T4426] lock(rfkill_global_mutex); [ 66.581789][ T4426] lock(&hdev->req_lock); [ 66.588901][ T4426] lock((work_completion)(&hdev->tx_work)); [ 66.594872][ T4426] [ 66.594872][ T4426] *** DEADLOCK *** [ 66.594872][ T4426] [ 66.603487][ T4426] 2 locks held by syz.1.42/4426: [ 66.608479][ T4426] #0: ffffffff8d6c73e8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x18b/0x560 [ 66.618724][ T4426] #1: ffff88807db3d3f0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x5f/0x1030 [ 66.628591][ T4426] [ 66.628591][ T4426] stack backtrace: [ 66.635032][ T4426] CPU: 1 PID: 4426 Comm: syz.1.42 Not tainted syzkaller #0 [ 66.642227][ T4426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 66.652768][ T4426] Call Trace: [ 66.656051][ T4426] [ 66.659091][ T4426] dump_stack_lvl+0x188/0x250 [ 66.663970][ T4426] ? load_image+0x400/0x400 [ 66.668465][ T4426] ? show_regs_print_info+0x20/0x20 [ 66.673823][ T4426] ? print_circular_bug+0x12b/0x1a0 [ 66.679094][ T4426] check_noncircular+0x296/0x330 [ 66.684187][ T4426] ? look_up_lock_class+0x71/0x110 [ 66.689285][ T4426] ? add_chain_block+0x940/0x940 [ 66.694376][ T4426] ? lockdep_lock+0xf1/0x1f0 [ 66.699817][ T4426] ? mark_lock+0x94/0x320 [ 66.704218][ T4426] __lock_acquire+0x2c42/0x7d10 [ 66.709050][ T4426] ? lockdep_unlock+0x143/0x2e0 [ 66.714855][ T4426] ? mark_lock+0x94/0x320 [ 66.719270][ T4426] ? verify_lock_unused+0x140/0x140 [ 66.724458][ T4426] ? __lock_acquire+0x12e8/0x7d10 [ 66.729493][ T4426] lock_acquire+0x19e/0x400 [ 66.734184][ T4426] ? __flush_work+0xfa/0x210 [ 66.738769][ T4426] ? verify_lock_unused+0x140/0x140 [ 66.743968][ T4426] ? __mutex_trylock_common+0x155/0x260 [ 66.749522][ T4426] ? read_lock_is_recursive+0x10/0x10 [ 66.755271][ T4426] __flush_work+0x116/0x210 [ 66.761616][ T4426] ? __flush_work+0xfa/0x210 [ 66.766285][ T4426] ? flush_work+0x20/0x20 [ 66.770617][ T4426] ? hci_leds_update_powered+0x148/0x160 [ 66.776411][ T4426] ? rcu_lock_release+0x5/0x20 [ 66.781301][ T4426] ? __lock_acquire+0x7d10/0x7d10 [ 66.786374][ T4426] hci_dev_do_close+0x1e7/0x1030 [ 66.791309][ T4426] ? _raw_spin_unlock+0x40/0x40 [ 66.796248][ T4426] hci_rfkill_set_block+0x10a/0x190 [ 66.801435][ T4426] ? rcu_lock_release+0x20/0x20 [ 66.806271][ T4426] rfkill_set_block+0x1c9/0x3d0 [ 66.811208][ T4426] rfkill_fop_write+0x452/0x560 [ 66.816062][ T4426] ? rfkill_fop_read+0x520/0x520 [ 66.821012][ T4426] ? common_file_perm+0xb0/0x1c0 [ 66.825955][ T4426] ? fsnotify_perm+0x5d/0x560 [ 66.830632][ T4426] ? security_file_permission+0x75/0xa0 [ 66.836160][ T4426] ? rfkill_fop_read+0x520/0x520 [ 66.841073][ T4426] vfs_write+0x30b/0xd60 [ 66.845294][ T4426] ? file_end_write+0x250/0x250 [ 66.850123][ T4426] ? __fget_files+0x40f/0x480 [ 66.854799][ T4426] ? __fdget_pos+0x1e2/0x370 [ 66.859363][ T4426] ? ksys_write+0x71/0x260 [ 66.863756][ T4426] ksys_write+0x152/0x260 [ 66.868062][ T4426] ? __ia32_sys_read+0x80/0x80 [ 66.872816][ T4426] ? lockdep_hardirqs_on+0x94/0x140 [ 66.878001][ T4426] do_syscall_64+0x4c/0xa0 [ 66.882402][ T4426] ? clear_bhb_loop+0x30/0x80 [ 66.887057][ T4426] ? clear_bhb_loop+0x30/0x80 [ 66.891710][ T4426] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 66.897594][ T4426] RIP: 0033:0x7fc6ba4abe59 [ 66.901988][ T4426] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.921600][ T4426] RSP: 002b:00007fc6b8705028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 66.930011][ T4426] RAX: ffffffffffffffda RBX: 00007fc6ba724fa0 RCX: 00007fc6ba4abe59 [ 66.937965][ T4426] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003 [ 66.945934][ T4426] RBP: 00007fc6ba541d6f R08: 0000000000000000 R09: 0000000000000000 [ 66.953891][ T4426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 66.961983][ T4426] R13: 00007fc6ba725038 R14: 00007fc6ba724fa0 R15: 00007ffc94de4598 [ 66.969962][ T4426] [ 66.987660][ T4447] netlink: 28 bytes leftover after parsing attributes in process `syz.2.47'. [ 67.039244][ T4447] netlink: 28 bytes leftover after parsing attributes in process `syz.2.47'. [ 67.084086][ T4447] device gretap0 entered promiscuous mode [ 67.106818][ T4447] device gretap0 left promiscuous mode [ 71.430973][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.437302][ T1422] ieee802154 phy1 wpan1: encryption failed: -22