last executing test programs: 3m11.77829832s ago: executing program 4 (id=149): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@generic={0x0}, 0x18) 3m11.677101882s ago: executing program 4 (id=151): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r4, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r6, 0x0) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r7, &(0x7f0000001600)={&(0x7f0000000400)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{0x0, 0x1000000}, {0x0}, &(0x7f0000000500)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f0000000380)=""/76, 0x4c}, {&(0x7f0000000800)=""/202, 0xca}, {&(0x7f0000000600)=""/188, 0xbc}], 0x4, 0x10, 0x4}}], 0x48, 0x40014}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x8, 0x3032, 0xffffffffffffffff, 0x54099000) ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) setsockopt$ax25_SO_BINDTODEVICE(r4, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) getsockopt$inet_tcp_buf(r1, 0x6, 0x14, 0x0, &(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2}}]}, 0x1c}}, 0x0) r9 = socket(0x10, 0x3, 0x0) write(r9, &(0x7f0000000240)="aefc00001a0025f01d85bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) ioctl$sock_x25_SIOCDELRT(r9, 0x890c, &(0x7f0000000240)={@null, 0x7, 'ipvlan0\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 3m11.160785232s ago: executing program 4 (id=157): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0xdd02}], 0xc, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=@newtaction={0x84, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x70, 0x1, [@m_tunnel_key={0x6c, 0x1, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0xe, @ipv4={'\x00', '\xff\xff', @broadcast}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000001680)}, 0x0) unshare(0x28040680) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) select(0x40, &(0x7f0000000000)={0x0, 0x5, 0x2, 0x81, 0x80, 0xd0f3, 0x8, 0x9}, 0x0, &(0x7f0000000140)={0x69f, 0xfffffffffffffffc, 0x3ff, 0x2, 0x7ff, 0xfffffffffffffffe, 0x101, 0x8001}, &(0x7f0000000200)) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000400)='dctcp\x00', 0x41) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x31, &(0x7f0000000040)=0x7, 0x4) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x3a, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaab2bbbbbbbbbb08004500002cffed00002011001890660400000007740002fdffffffffffffff000000000000000098000000000040a75831b350763a9708a3cdf08c7ff8d8ab6360f7b7d038570edae765135ce5f4f0600a9d7beeb2263caec09adc5fe6958cc0213c421b822b05dd452c0783678991eb4fcf54d8a0209978f2ed17dd7e1ec72d4d56ea97ec8bdaf8c64d4cab0302bcaee52e96fee37d6047c355ec6e38d39637007c7f98a486722f91f553efd3654f41cfc5e4b60eb90f1c94718bdae0797b8c98e61ea18198ec156f69739e2247b64e"], 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010000104008000"/20, @ANYRES32=0x0, @ANYBLOB="0380000000000000280012800a000100767863616e000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="274d107749f17dff"], 0x48}}, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, &(0x7f0000000880)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601020000050000000000020000000900020073797a310000000005000100070000002c000780180001801400024020010000000000000000000000000002060004404e1f00000500070088000000"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c1400001e0a05010000000000000000070000000900020073797a31000000000900010073797a300000000000140380300000802c000180250001"], 0x14b0}}, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000030601010000000000000000090000000500010095ef0000a584d0b45cc1646034649661fa96b70963f3621417e9869db66e3700e94c4194"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) 3m9.69445068s ago: executing program 4 (id=167): r0 = socket(0x10, 0x3, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18110000", @ANYRES32, @ANYBLOB="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"], 0x0, 0x8, 0x0, 0x0, 0x41000, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000}, 0x94) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x6d5) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000740)={0x28, 0x0, 0x0, @my=0x1}, 0x10) connect$vsock_stream(r2, &(0x7f00000001c0)={0x28, 0x0, 0x2711, @hyper}, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r4}) sendto$inet6(r3, &(0x7f00000003c0)="b440d734df3a6fd33f1a583a964423c74235b4d9c2a9b8f268b92a1b248c4d144e9893ec50374ac08a9b0df2096771d9900f0dcdf82f431e29c2fe6b4e8c97fd2bb1cf8ded1cfeaa5b753babce4d0230324f2904cc547ffe1b8b58a7a1da2f12cad1ea1bdb", 0x65, 0x80, 0x0, 0x0) socket(0x22, 0x2, 0x2) r5 = socket(0x22, 0x2, 0x1) close(r5) 3m9.249238649s ago: executing program 4 (id=172): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x1000040, @private1={0xfc, 0x1, '\x00', 0xa}, 0xae3c}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000200)={0x32}, 0x8) sendmmsg$inet6(r0, &(0x7f0000002940), 0x62, 0x0) 3m8.567891602s ago: executing program 4 (id=174): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="660a000000000000611149000000000095000000"], &(0x7f00000004c0)='GPL\x00'}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r4, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_msfilter(r6, 0x0, 0x23, &(0x7f0000004b00)=ANY=[@ANYBLOB="e0000808ac1414aa"], 0x10) r7 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x24}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000000, 0x10012, r0, 0x0) r9 = socket(0x10, 0x400000000080803, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x89f0, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r11 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r11, 0x84, 0x18, 0x0, 0x0) unshare(0x6a040000) socket(0x8, 0x3, 0x0) 2m52.819911993s ago: executing program 32 (id=174): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="660a000000000000611149000000000095000000"], &(0x7f00000004c0)='GPL\x00'}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r4, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_msfilter(r6, 0x0, 0x23, &(0x7f0000004b00)=ANY=[@ANYBLOB="e0000808ac1414aa"], 0x10) r7 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x24}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000000, 0x10012, r0, 0x0) r9 = socket(0x10, 0x400000000080803, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x89f0, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r11 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r11, 0x84, 0x18, 0x0, 0x0) unshare(0x6a040000) socket(0x8, 0x3, 0x0) 15.614224391s ago: executing program 5 (id=820): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) close(0x3) 15.489389364s ago: executing program 5 (id=823): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000220000000400000002"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r0, &(0x7f0000000040)}, 0x20) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, 0x0, 0x0) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, 0x0, 0x0) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000000000)={&(0x7f00000002c0)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@cswp={0x58, 0x114, 0x7, {{0x1, 0x3}, &(0x7f0000000140)=0x4, 0x0, 0x2, 0x3ff, 0x7, 0x8000000000000000, 0x8, 0x2}}, @mask_fadd={0x58, 0x114, 0x8, {{0xfffffff4, 0x5}, 0x0, 0x0, 0x1c4f, 0x5, 0x8, 0x8, 0x13}}], 0xb0}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[], 0x184}}, 0x0) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x40050) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x1, 0x0) r5 = socket$netlink(0x10, 0x3, 0x14) ioctl$BTRFS_IOC_GET_FEATURES(r4, 0x80189439, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x60, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan0\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40004}, 0x20000000) 15.256307958s ago: executing program 5 (id=825): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x80800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4040) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0xa, 0x922000000003, 0x11) recvmsg(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) close(r1) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, 0x0, 0x0) 14.390241475s ago: executing program 5 (id=829): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000100000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000003000000000000000000000000000000000000000200000000000000000000000000000000000000fbfffffffffffffffdffffffffffffff00000000000000000000000000000100000000000000000000135e6d58fff2674962da02edb9f7ddcfb44716606436835a72fc21e4a6d7bdeda901ecb8c397dea9c8d4f30daecf792a66c5d04a265b1974db23356ed3091ca526631e928f6bf8feadd1e37f604f0840d4d645299acd2fe62248b947ae59fe824e3ebf90791c5c12e1c16cd483d54ff6f6cdcf3f9bdc89a473f2b6a8b63da0145d4a05f8e1304e7666ff721112b3cdf247bf3262ea1eab50bb06b05c"], 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x4000000000000, 0x200000000000000}}}, 0xb8}}, 0x2c000010) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000008c0)=@updpolicy={0xb8, 0x15, 0x1, 0x800000, 0x300, {{@in=@multicast1=0xe0000002, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x0, 0x7, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0xfffffffffffffffc, 0x5}, {0x81}}}, 0xb8}}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r3, r5, 0x25, 0x4}, 0x14) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000380)={'gretap0\x00', 0x0, 0x8, 0x8, 0x7, 0x4, {{0x17, 0x4, 0x0, 0xa, 0x5c, 0x67, 0x0, 0xe, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@timestamp_prespec={0x44, 0x3c, 0xa4, 0x3, 0x2, [{@loopback, 0x80000001}, {@private=0xa010100, 0x101}, {@loopback, 0x9}, {@loopback, 0x2}, {@rand_addr=0x64010102, 0x4}, {@private=0xa010100, 0xae97}, {@loopback, 0x3}]}, @cipso={0x86, 0x9, 0x1, [{0x0, 0x3, "06"}]}]}}}}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000480)=0x14) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0xf, &(0x7f0000000580)={@private1, 0x0}, &(0x7f00000005c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000640)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000006c0)={'erspan0\x00', &(0x7f0000000680)={'gretap0\x00', 0x0, 0x790, 0x700, 0x5fe, 0x3, {{0x7, 0x4, 0x3, 0x2, 0x1c, 0x68, 0x0, 0x2, 0x2f, 0x0, @rand_addr=0x64010101, @private=0xa010101, {[@generic={0x7, 0x6, 'cnDA'}]}}}}}) r15 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r15, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r16, {}, {0xffff, 0xffff}, {0x1, 0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x11}, @TCA_FQ_PLIMIT={0x8}, @TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0x13}]}}]}, 0x48}}, 0x0) r17 = socket$netlink(0x10, 0x3, 0x10) r18 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r17, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r17, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r18, @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES32=r19, @ANYBLOB="b400028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004"], 0xd0}, 0x1, 0x0, 0x0, 0x24004000}, 0x24044880) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f0000000980)=ANY=[@ANYBLOB="e801", @ANYRES16=0x0, @ANYBLOB="200029bd7000fedbdf250b0000004800018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f746f5f626f6e6400000008000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="0800030001000000900001801400020076657468315f6d6163767461700000001400020064756d6d7930000000000000000000000800030002000000080003000000000008000100", @ANYRES32=r9, @ANYBLOB="140002007465618a5f730000080001000101000000000000", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="14000200766c616e31000000000000000000000014000200766972745f776966693000000000000054000180140002006261746164763000000000000000000008000100", @ANYRES32=r11, @ANYBLOB="140002007767300000000000000000000000000008000100", @ANYRES32=r12, @ANYBLOB="080003000200000008000100", @ANYRES32=r13, @ANYBLOB="08000100", @ANYRES32=r14, @ANYBLOB="2c000180140002006970766c616e31000000000000000000140002006873723000000000000000000000000030000180080003000200000008000300000000000800030002000000140002006272696467655f736c6176655f30000014000180080003000300000008000100", @ANYRES32=r16, @ANYBLOB="3800018008000100", @ANYRES32=r19, @ANYBLOB="140002006d6163766c616e3100000000000000000800030003000000080003000200000008000100", @ANYBLOB], 0x1e8}, 0x1, 0x0, 0x0, 0x8c0}, 0x20000000) syz_init_net_socket$rose(0xb, 0x5, 0x0) 13.410662704s ago: executing program 5 (id=834): bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d100000095"], &(0x7f0000000300)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = socket(0x8, 0x3, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000300)={'sit0\x00', 0x0}) syz_open_procfs$namespace(0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r2 = accept$alg(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)=""/64, 0x40}, {&(0x7f0000000440)=""/247, 0xf7}], 0x2}, 0x7fff}], 0x1, 0x2101, 0x0) unshare(0x6a040000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000001c0), &(0x7f00000002c0)=0x4) 5.597874213s ago: executing program 0 (id=877): io_uring_setup(0x60f7, &(0x7f0000000400)={0x0, 0x39bd, 0x2, 0x1, 0x3c0}) r0 = socket(0x11, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='sched_kthread_work_execute_start\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffefe}, 0x36) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r5}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="02017d29012918000e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb"], 0xdd12}], 0x1}, 0x0) 3.617911771s ago: executing program 0 (id=882): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_LOOKUP_BATCH(0x1b, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001200010003950000000100000a0900004001000000000000000000000000ffff000000"], 0x4c}}, 0x0) 3.430102165s ago: executing program 1 (id=883): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x80800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4040) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0xa, 0x922000000003, 0x11) recvmsg(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) close(r1) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000100), 0x0) 3.313277307s ago: executing program 2 (id=885): bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00'}, 0x10) r0 = fsopen(&(0x7f0000000080)='bpf\x00', 0x1) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f00000000c0)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @aes256, 0x0, '\x00', @a}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) symlinkat(&(0x7f0000000000)='.\x00', r2, &(0x7f0000000140)='./file0\x00') 2.345578765s ago: executing program 0 (id=888): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e24, 0x2, @empty, 0xfffffffc}, 0x1c, 0x0}}], 0x1, 0x20004808) recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/17, 0x11}, 0x9d39}], 0x1, 0x12141, 0x0) 2.193262088s ago: executing program 1 (id=889): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002ec0)=ANY=[@ANYBLOB="200000000000000029000000370000002600000000000000010000000000000014"], 0x38}}], 0x2, 0x0) 2.165791279s ago: executing program 0 (id=891): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeda}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) lseek(0xffffffffffffffff, 0x10000000005, 0x0) sync() 2.006466602s ago: executing program 1 (id=892): io_uring_setup(0x60f7, &(0x7f0000000400)={0x0, 0x39bd, 0x2, 0x1, 0x3c0}) r0 = socket(0x11, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='sched_kthread_work_execute_start\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffefe}, 0x36) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r5}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="02017d29012918000e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f8"], 0xdd12}], 0x1}, 0x0) 2.005878961s ago: executing program 2 (id=893): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x100, 0x10001, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_RATE={0x14, 0x6, {0x1, 0x5, 0x33, 0x5}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000804) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x4010004) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.317233525s ago: executing program 5 (id=894): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x1, 0x0) 1.216532277s ago: executing program 0 (id=895): r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000007800)=0xffffffff00000041, 0x8) bind$vsock_stream(r0, &(0x7f0000000940), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r3}, 0x18) 868.752483ms ago: executing program 0 (id=898): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_LOOKUP_BATCH(0x1b, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001200010003950000000100000a0900004001000000000000000000000000ffff000000"], 0x4c}}, 0x0) 868.160143ms ago: executing program 1 (id=899): sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="70010000", @ANYRES16, @ANYBLOB="010028bd7000fbdbdf250c0000004000028006000b000a00000008000400f681ffff14000100fe80000000000000000000000000001106000b000a0000000800090006000000080004000b0000005c00038008000300030000000600030009000000060007004e240000140006002001000000000000000000000000000208000100020000000800030001000000080003000300000014000600ff01000000000000000000000000000108000400000000004800028014000100ac1414bb000000000000000000000000080005000100000006000b00020000000800"], 0x170}, 0x1, 0x0, 0x0, 0x40884}, 0x804) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r1, @ANYBLOB='\x00\x00r\a\b\x00\b'], 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) 756.846195ms ago: executing program 2 (id=900): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) sendmsg$can_j1939(0xffffffffffffffff, 0x0, 0xee) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) 673.040697ms ago: executing program 1 (id=901): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x6, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x2, 0x1}]}]}, {0x0, [0x2e, 0x61, 0x2e, 0x20]}}, 0x0, 0x32, 0x0, 0x1, 0x7}, 0x28) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_buf(r1, 0x1, 0x38, 0x0, &(0x7f0000001700)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) sendto$unix(r3, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9e", 0x79, 0x800, 0x0, 0x0) recvfrom(r1, &(0x7f00000030c0)=""/4117, 0x1015, 0x1, 0x0, 0x0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008081}, 0x0) sendmsg$NFT_MSG_GETGEN(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0x10, 0xa, 0x407, 0x0, 0x0, {0x0, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x40) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0100000000000000000003000000300001"], 0x44}}, 0x0) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002e000100000000000010000004"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 586.088169ms ago: executing program 2 (id=903): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000000000000002000003f851000000600000018020000", @ANYRES32, @ANYBLOB="0000000000000000660002007fffffff180000000000000000000000000000009500040000000000360a020000001000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) 505.15064ms ago: executing program 1 (id=904): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0}, 0x94) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000140)) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) 478.018991ms ago: executing program 3 (id=905): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="9f2c3eadadc71fb1ef1a5cb2eb0100180000000000000024000000241d0698"], &(0x7f0000000a80)=""/172, 0x3e, 0xac, 0x9}, 0x28) socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x806000) readv(r0, 0x0, 0x0) write$tun(r0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$NFT_MSG_GETGEN(r1, 0x0, 0x40) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, 0x0, 0x48080) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, 0x0, 0x0) connect$inet(r2, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000010008188040f46ecdb4cb9cca7480ef43c000000e3bd6efb440009000e000a0010000000ba8000001201", 0x2e}], 0x1}, 0x0) 451.816121ms ago: executing program 2 (id=906): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$unix(0x1, 0x2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x5}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0xd, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4a1, 0x0, 0x5, 0x1, 0xc}, 0xb, 0x0, 0x8, 0x5, 0xc, 0x2, 0x9, 0xd, 0x2, 0x1, {0xffff1c72, 0x3, 0x3, 0x101, 0xfffffffc, 0x1}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 301.180905ms ago: executing program 3 (id=907): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2001000012001307"], 0x120}}, 0x0) close(0x4) 249.160245ms ago: executing program 3 (id=908): bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map, 0xffffffffffffffff, 0x26}, 0x20) 248.682795ms ago: executing program 3 (id=909): r0 = socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf20000000000000070000000f0000003d030100000000009500ffb1000000006926000000000000bf67000000000000160602000fff52007607000010000000d60600000ee60000bf050000000000001f63000000000000650700000200000007070000fbffffff2000000000000000bf54000000000000070400000410f900bd430100000000009500000000000000050000000000000095000000000000001c15a3ce747c693a74b62fd0758b15f09429c09074bc4b2bd2dc480dd7a064b8673e2060162cc4d6a5713bcb949e8f9000d885dfea2783835e29eb532ba8546fc020c1966f8b5f32b095f566edf66b7751828da9dbd5b996b9e8d897e461c01c697671d100000000400036c17fb01dde179c1f2686ef970d6482a2e7ddbf51c74ccac1c7b21bde7d1af255d6ebff9bff35e3888a0e356d82e43407a6d7fa94b2100204000000000000009ab62d7b07ba0a71a72145edade9941f04000000000000004ea9e4c70ef8b7407740ab3312edee62a4dc2fc85755d387bfa1bc8eb71fbe11b2216cc8d1f0160c237d929b49da28724b95555b74be2f76fb5f330b015a68587a75c01300"/454], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd74}, 0x48) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x2, 0x3, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "fd"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x60}, 0x1, 0x7}, 0x0) syz_emit_ethernet(0xfffffc69, &(0x7f0000000540)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaa2402544aadcccaba772be1cd1e6d43aa0308060000003c0000000003019078ac1e0001ac1e010144140a01ac1414f1cd8f7e620bb29b68cf5e1bf8bc5d0000000000e0000002000000000d00907800"/100], 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000005480)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000000206010300000000000000000000000005000100070000000900020073797a3100000036056b9b2ab75d9100"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000003c000701fcffffff00000000017c0000100036800c00020008000000007000000c000180"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x22}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r2}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000002940)=ANY=[@ANYBLOB="37d92ffcb92554620ac47b7e09918d211b54c0db44330d2d0dc500c456e457182fe5f1e564ff9e775b3a12daa61fe365b7068433a33012cbaf5e0de58c54f63fccf28bbce8bd51b9535164ffede7446f301d9900be35198d291bb1c076a50e0580cd3929e774a65e1bb316a2b98eae0676324c887a2f5b94dd5222271a60a312a7c6a581adae683a0c62eebb2505919f36bf6556482fc94f9048f03f7ffffba33740861a543c1b1a2c54c01f261434d0e6fef469cbb748cdcf6ce05eefd6cb5972eee4980dcbc506638e6303ef1a32cc281b74be25c800dd6aa66790e87280b43919235a1cdd5c8865591c2b5098067d45dc59afa9ae4ffafe4134cdf00e2ae11d0b42134f314a3e102ff12f6ef90b4907c7722b752980ea34a45f1d64564f3273f42df81311764118f38a137d060d941ce9ce336d9e103729cfb8f60f8cf952491e380a8bbebfc7124d23f8bb8a9a7d514e9b930987493397842634d93ddced4829536e6423e3375d4035afb63174c75d33e5d71211e26d316ddfcb0283e41c7f99f175683919f3f6228836bf7ffd6158f9024d44fc03ef0519370d921ff1a71f56b3035e155381b6a1c6ab224b332afb4e5e3e50a8cfc6841392868ee2443e6882ed6a94e0a4553a30cbd7c1520ea2c741c254102eb3525ab85740d3e0fa492607617d4cdccbd2607abe8bf127b66b88ef488e00b6b39fec4c68ac46f9c625fff87522c050aac22c8fd59bd6360772823fa2e5e92c7db1f3075ce6d118b613fe6915ec"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x40000, 0x0, 0x2, 0x1}}) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000480)={0x0, 0x9303, 0x30, 0x7, 0x4}, &(0x7f0000000500)=0x18) socket$kcm(0xf, 0x0, 0x2) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0x9, 0x4, 0x7, 0x4ae, 0x1, 0xf, 0x4, 0x6, 0xff, 0x7f, 0x7fffffffffffffff, 0xffffffffffff8001, 0x5}}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x3fa1dc947ffe4b82}) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x6a, &(0x7f00000002c0)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x6, 0x4, 0x0, 0x0, 0x5c, 0x300, 0x0, 0x0, 0x6c, 0x0, @private, @rand_addr, {[@ra={0x94, 0x4, 0x1000}]}}}}}}, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x44, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000020000100ecc200000000000002002000000000010000"], 0x38}, 0x1, 0x0, 0x0, 0x40008c4}, 0x8000) 173.840277ms ago: executing program 2 (id=910): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x420f40, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x3ffd, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x4811) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r2 = syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff}, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r1, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r2, 0x47f5, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@TCA_RATE={0x6, 0x5, {0xfe, 0xc}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8848}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, r8, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x0]}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x34}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) 77.616898ms ago: executing program 3 (id=911): r0 = socket$netlink(0x10, 0x3, 0x0) close(0x3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) unshare(0x20000400) sendmsg$nl_route(r0, 0x0, 0x4000) 0s ago: executing program 3 (id=912): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_lsm={0x4, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="7b0a00000000000061117c000000000085000000ce00000095"], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x1}, 0x94) bind$ax25(r3, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x4, 0x6, 0x4}) syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(r5, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x4080}, 0x10000001) setsockopt$netlink_NETLINK_PKTINFO(r5, 0x10e, 0x3, &(0x7f0000000300)=0x1, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0xa}]}}}, {0x14, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) r6 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={&(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x4e24, @private=0xa010101}, 0x4, 0x3, 0x4, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000000c0)='G', 0x1}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/4695], 0x1260}, 0x41) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 27.104369][ T3854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.118692][ T3854] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.22' (ED25519) to the list of known hosts. syzkaller login: [ 47.941215][ T4172] cgroup: Unknown subsys name 'net' [ 48.106467][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 49.321506][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 50.598707][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 50.688333][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 50.750701][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 50.767504][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.775613][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.784156][ T4192] device bridge_slave_0 entered promiscuous mode [ 50.813380][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.820468][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.828981][ T4192] device bridge_slave_1 entered promiscuous mode [ 50.845855][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.853506][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.862162][ T4184] device bridge_slave_0 entered promiscuous mode [ 50.870119][ T4197] chnl_net:caif_netlink_parms(): no params data found [ 50.899779][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.907043][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.915381][ T4184] device bridge_slave_1 entered promiscuous mode [ 50.943197][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.954454][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.978921][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 51.004979][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.032653][ T4192] team0: Port device team_slave_0 added [ 51.038634][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.045990][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.053961][ T4190] device bridge_slave_0 entered promiscuous mode [ 51.063928][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.081941][ T4192] team0: Port device team_slave_1 added [ 51.087915][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.095083][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.103297][ T4190] device bridge_slave_1 entered promiscuous mode [ 51.157701][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.164712][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.190848][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.212205][ T4184] team0: Port device team_slave_0 added [ 51.219541][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.240060][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.247141][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.273592][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.286703][ T4184] team0: Port device team_slave_1 added [ 51.293857][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.327868][ T4197] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.335120][ T4197] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.343303][ T4197] device bridge_slave_0 entered promiscuous mode [ 51.366310][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.373492][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.381105][ T4183] device bridge_slave_0 entered promiscuous mode [ 51.402810][ T4197] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.409885][ T4197] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.418215][ T4197] device bridge_slave_1 entered promiscuous mode [ 51.433361][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.440427][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.449007][ T4183] device bridge_slave_1 entered promiscuous mode [ 51.456647][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.463624][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.489546][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.502936][ T4190] team0: Port device team_slave_0 added [ 51.509209][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.516418][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.543051][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.574233][ T4190] team0: Port device team_slave_1 added [ 51.598077][ T4192] device hsr_slave_0 entered promiscuous mode [ 51.605067][ T4192] device hsr_slave_1 entered promiscuous mode [ 51.621034][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.640916][ T4197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.665196][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.683024][ T4197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.699299][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.706401][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.732623][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.754177][ T4184] device hsr_slave_0 entered promiscuous mode [ 51.760749][ T4184] device hsr_slave_1 entered promiscuous mode [ 51.767454][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 51.775341][ T4184] Cannot create hsr debugfs directory [ 51.792315][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.799274][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.825281][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.869229][ T4183] team0: Port device team_slave_0 added [ 51.877179][ T4197] team0: Port device team_slave_0 added [ 51.898601][ T4183] team0: Port device team_slave_1 added [ 51.905225][ T4197] team0: Port device team_slave_1 added [ 51.984878][ T4190] device hsr_slave_0 entered promiscuous mode [ 51.991757][ T4190] device hsr_slave_1 entered promiscuous mode [ 51.998186][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.006084][ T4190] Cannot create hsr debugfs directory [ 52.017604][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.024630][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.050532][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.062162][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.069107][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.095304][ T4197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.108455][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.115695][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.141844][ T4197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.162053][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.169023][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.195178][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.300205][ T4197] device hsr_slave_0 entered promiscuous mode [ 52.307424][ T4197] device hsr_slave_1 entered promiscuous mode [ 52.314189][ T4197] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.322853][ T4174] Bluetooth: hci0: command 0x0409 tx timeout [ 52.326481][ T4197] Cannot create hsr debugfs directory [ 52.329492][ T4174] Bluetooth: hci1: command 0x0409 tx timeout [ 52.336223][ T23] Bluetooth: hci3: command 0x0409 tx timeout [ 52.368494][ T4183] device hsr_slave_0 entered promiscuous mode [ 52.375331][ T4183] device hsr_slave_1 entered promiscuous mode [ 52.382965][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.390532][ T4183] Cannot create hsr debugfs directory [ 52.401823][ T4174] Bluetooth: hci2: command 0x0409 tx timeout [ 52.411385][ T23] Bluetooth: hci4: command 0x0409 tx timeout [ 52.511033][ T4192] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 52.522588][ T4192] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 52.539555][ T4192] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 52.565968][ T4192] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 52.637972][ T4184] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 52.660291][ T4184] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 52.669620][ T4184] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 52.682227][ T4190] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 52.699725][ T4184] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 52.720165][ T4190] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 52.736536][ T4190] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 52.746337][ T4190] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 52.795115][ T4197] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 52.824189][ T4197] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 52.835761][ T4197] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 52.853060][ T4197] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 52.875525][ T4183] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 52.897131][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.909101][ T4183] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 52.930013][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.939688][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.948003][ T4183] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 52.959785][ T4183] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 52.996635][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.020678][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.035067][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.045093][ T396] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.052350][ T396] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.060479][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.076543][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.093055][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.119773][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.128816][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.137553][ T396] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.144665][ T396] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.153114][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.163051][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.170717][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.178727][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.188058][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.197164][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.206449][ T396] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.213573][ T396] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.221885][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.230421][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.238862][ T396] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.245912][ T396] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.253705][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.262329][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.271014][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.279218][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.303041][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.313757][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.348117][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.357326][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.366230][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.376257][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.385013][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.394547][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.403052][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.412555][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.421391][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.429007][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.437131][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.447478][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.456015][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.474383][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.490714][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.500112][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.511991][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.520640][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.529945][ T1171] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.537059][ T1171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.547310][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.567106][ T4190] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 53.583522][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.626209][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.635880][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.647628][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.659876][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.674477][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.687478][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.698863][ T1171] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.705964][ T1171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.715301][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.723951][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.740203][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.771892][ T4197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.785380][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.797598][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.807047][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.816327][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.826126][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.838213][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.850748][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.859354][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.880543][ T4197] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.892060][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.900394][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.909877][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 53.917731][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 53.925767][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.934854][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.943876][ T396] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.950929][ T396] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.958961][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.971016][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.988819][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.998484][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.010079][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.020530][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.029679][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.038839][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.046486][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.054250][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.063267][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.072017][ T396] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.079048][ T396] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.100672][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.112407][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.123627][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.132472][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.144196][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.162421][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.180847][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.190193][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.198951][ T396] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.206074][ T396] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.215246][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.224021][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.232414][ T396] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.239441][ T396] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.247266][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.261286][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.274873][ T4192] device veth0_vlan entered promiscuous mode [ 54.283604][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.297003][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.327024][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.337667][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.346045][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.356800][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.365958][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.399852][ T4192] device veth1_vlan entered promiscuous mode [ 54.401939][ T4227] Bluetooth: hci3: command 0x041b tx timeout [ 54.418144][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 54.426571][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 54.436902][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.439747][ T4227] Bluetooth: hci1: command 0x041b tx timeout [ 54.448689][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.459940][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.461456][ T4227] Bluetooth: hci0: command 0x041b tx timeout [ 54.469603][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.484079][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.492828][ T4227] Bluetooth: hci4: command 0x041b tx timeout [ 54.493760][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.501431][ T4227] Bluetooth: hci2: command 0x041b tx timeout [ 54.507666][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.522079][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.530524][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.539198][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.547879][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.556941][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.565494][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.573980][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.582743][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.590929][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.599197][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.614304][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.627790][ T4190] device veth0_vlan entered promiscuous mode [ 54.643168][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.658724][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.668486][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.683092][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.690881][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.699627][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.708293][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.716075][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.730419][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.745790][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.764324][ T4190] device veth1_vlan entered promiscuous mode [ 54.772488][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 54.812296][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.820807][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.857359][ T4192] device veth0_macvtap entered promiscuous mode [ 54.880598][ T4192] device veth1_macvtap entered promiscuous mode [ 54.935283][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 54.953250][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 54.968281][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.977270][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.989404][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.996969][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.012171][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.021857][ T4190] device veth0_macvtap entered promiscuous mode [ 55.035508][ T4197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.059467][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.070795][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.096741][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.109748][ T4190] device veth1_macvtap entered promiscuous mode [ 55.123102][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.137092][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.145435][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.155568][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.166345][ T4192] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.176786][ T4192] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.185906][ T4192] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.194870][ T4192] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.216461][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.227222][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.238967][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.259917][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.271954][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.284466][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.297023][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.305632][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.314869][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.322809][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.330218][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.339072][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.364635][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.375365][ T4190] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.385773][ T4190] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.395314][ T4190] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.404904][ T4190] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.414931][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.424084][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.458090][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.467590][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.476987][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.485724][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.512152][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.520012][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.529429][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.538776][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.547518][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.555587][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.563826][ T4184] device veth0_vlan entered promiscuous mode [ 55.579271][ T4197] device veth0_vlan entered promiscuous mode [ 55.609608][ T4184] device veth1_vlan entered promiscuous mode [ 55.637571][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.645933][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.655462][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.664392][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.672816][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.699874][ T4183] device veth0_vlan entered promiscuous mode [ 55.709179][ T4197] device veth1_vlan entered promiscuous mode [ 55.717990][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.729255][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.737415][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.745579][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.754208][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.763763][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.777102][ T4184] device veth0_macvtap entered promiscuous mode [ 55.790715][ T4183] device veth1_vlan entered promiscuous mode [ 55.807583][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.818664][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.831712][ T4184] device veth1_macvtap entered promiscuous mode [ 55.883793][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.897086][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.907103][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.918099][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.930553][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.939287][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.948173][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.957208][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.966140][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.977286][ T4197] device veth0_macvtap entered promiscuous mode [ 55.989718][ T1275] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.995674][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.008503][ T1275] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.019531][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.029489][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.040103][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.053698][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.071633][ T4184] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.080350][ T4184] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.090765][ T4184] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.099618][ T4184] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.111530][ T4197] device veth1_macvtap entered promiscuous mode [ 56.112401][ T396] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.122604][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.130956][ T396] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.135231][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.148834][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.156871][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.167296][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.176335][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.189665][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.198558][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.231957][ T4183] device veth0_macvtap entered promiscuous mode [ 56.256578][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.267201][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.278901][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.289560][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.299453][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.310036][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.322049][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.346389][ T4183] device veth1_macvtap entered promiscuous mode [ 56.353900][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.362153][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.370008][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.379981][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.393327][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.393541][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.411447][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.418397][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.429101][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.439683][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.449569][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.460440][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.471584][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.482746][ T4197] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.491690][ T7] Bluetooth: hci1: command 0x040f tx timeout [ 56.497943][ T7] Bluetooth: hci3: command 0x040f tx timeout [ 56.504559][ T4197] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.514881][ T4197] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.523689][ T4197] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.543165][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.551548][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.560491][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.563064][ T7] Bluetooth: hci2: command 0x040f tx timeout [ 56.574383][ T396] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.581973][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.594147][ T7] Bluetooth: hci4: command 0x040f tx timeout [ 56.600321][ T396] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.603947][ T7] Bluetooth: hci0: command 0x040f tx timeout [ 56.610860][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.625123][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.638428][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.649066][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.659646][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.669665][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.680193][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.694729][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.728175][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.749036][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.758561][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.776532][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.797038][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.809387][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.820420][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.830347][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.840940][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.851011][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.863101][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.874348][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.889820][ T4183] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.899205][ T4183] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.909009][ T4183] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.917836][ T4183] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.947307][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.958335][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.020579][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.038805][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.075800][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.103703][ T1171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.143170][ T1275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.176983][ T1171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.185879][ T1275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.187721][ T396] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.208027][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.226299][ T396] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.232670][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.254921][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.275074][ T4280] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.296867][ T4280] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.318996][ T1275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.320075][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.332371][ T1275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.412253][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.475468][ T4308] device bond_slave_0 entered promiscuous mode [ 57.481905][ T4308] device bond_slave_1 entered promiscuous mode [ 57.519019][ T4308] device vlan2 entered promiscuous mode [ 57.555416][ T4308] device bond0 entered promiscuous mode [ 57.689132][ T4321] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 57.785115][ T4323] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 57.785219][ T4325] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14'. [ 57.845382][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 57.876724][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.910559][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.973454][ T4330] device bridge_slave_0 left promiscuous mode [ 57.980495][ T4330] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.048163][ T4330] device bridge_slave_1 left promiscuous mode [ 58.090659][ T4330] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.150921][ T4330] bond0: (slave bond_slave_0): Releasing backup interface [ 58.203896][ T4354] syz.4.24 uses obsolete (PF_INET,SOCK_PACKET) [ 58.220692][ T4330] bond0: (slave bond_slave_1): Releasing backup interface [ 58.325720][ T4330] team0: Port device team_slave_0 removed [ 58.387167][ T4330] team0: Port device team_slave_1 removed [ 58.423104][ T4330] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.431725][ T4330] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 58.455357][ T4330] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.469217][ T4330] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 58.499135][ T4336] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14'. [ 58.561909][ T4370] Bluetooth: hci3: command 0x0419 tx timeout [ 58.561934][ T4341] netlink: 'syz.0.16': attribute type 10 has an invalid length. [ 58.568718][ T4370] Bluetooth: hci1: command 0x0419 tx timeout [ 58.641542][ T4370] Bluetooth: hci0: command 0x0419 tx timeout [ 58.654953][ T4370] Bluetooth: hci4: command 0x0419 tx timeout [ 58.674703][ T4370] Bluetooth: hci2: command 0x0419 tx timeout [ 58.686155][ T4341] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 58.989773][ T4390] netlink: set zone limit has 8 unknown bytes [ 59.188005][ T4401] netlink: 4 bytes leftover after parsing attributes in process `syz.0.41'. [ 59.206968][ T4401] netlink: 12 bytes leftover after parsing attributes in process `syz.0.41'. [ 59.309402][ T4414] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 59.887433][ T4449] netlink: 24 bytes leftover after parsing attributes in process `syz.1.61'. [ 59.894231][ T4453] netlink: 64 bytes leftover after parsing attributes in process `syz.2.63'. [ 59.949149][ T4457] IPVS: stopping backup sync thread 4459 ... [ 59.950207][ T4459] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 60.376772][ T4477] netlink: 'syz.2.71': attribute type 1 has an invalid length. [ 60.528986][ T4489] netlink: 64 bytes leftover after parsing attributes in process `syz.2.77'. [ 61.142545][ T4522] netlink: 64 bytes leftover after parsing attributes in process `syz.4.93'. [ 61.262652][ T4531] netlink: 'syz.3.94': attribute type 29 has an invalid length. [ 61.342089][ T4531] netlink: 'syz.3.94': attribute type 29 has an invalid length. [ 61.491458][ T4537] netlink: 'syz.3.94': attribute type 29 has an invalid length. [ 63.009836][ T4591] device vlan2 entered promiscuous mode [ 63.029911][ T4591] device team0 entered promiscuous mode [ 63.088369][ T4591] device team_slave_0 entered promiscuous mode [ 63.123812][ T4591] device team_slave_1 entered promiscuous mode [ 63.214605][ T4592] Zero length message leads to an empty skb [ 64.674739][ T4637] loop4: detected capacity change from 0 to 1024 [ 64.798642][ T4650] netlink: 4 bytes leftover after parsing attributes in process `syz.1.136'. [ 65.829412][ T4666] netlink: 4 bytes leftover after parsing attributes in process `syz.2.141'. [ 66.055321][ T4666] Unsupported xt match [ 66.055995][ T4666] unable to load match [ 66.543133][ T4681] netlink: 4 bytes leftover after parsing attributes in process `syz.1.146'. [ 66.637148][ T4691] netlink: 4 bytes leftover after parsing attributes in process `syz.1.146'. [ 66.686444][ T4694] loop0: detected capacity change from 0 to 128 [ 66.841686][ T4694] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 66.872334][ T4694] ext4 filesystem being mounted at /30/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 68.240427][ T4713] device vxcan2 entered promiscuous mode [ 68.766978][ T4746] loop1: detected capacity change from 0 to 128 [ 68.817825][ T4746] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 68.830826][ T4746] ext4 filesystem being mounted at /32/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 69.864821][ T4765] netlink: 4 bytes leftover after parsing attributes in process `syz.4.174'. [ 70.653914][ T4780] tipc: Started in network mode [ 70.659151][ T4780] tipc: Node identity aeb3232a8124, cluster identity 4711 [ 70.668128][ T4780] tipc: Enabled bearer , priority 0 [ 70.677919][ T4780] device syzkaller0 entered promiscuous mode [ 70.694607][ T4780] tipc: Resetting bearer [ 70.702703][ T4765] netlink: 4 bytes leftover after parsing attributes in process `syz.4.174'. [ 71.226935][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.235244][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.627408][ T4785] tipc: Resetting bearer [ 71.715791][ T4785] tipc: Disabling bearer [ 71.748388][ T4798] loop3: detected capacity change from 0 to 128 [ 71.846078][ T4262] tipc: Node number set to 798434090 [ 72.029295][ T4798] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 72.057942][ T4798] ext4 filesystem being mounted at /35/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 74.727844][ T4836] tipc: Started in network mode [ 74.823384][ T4836] tipc: Node identity 7267463eabd3, cluster identity 4711 [ 74.993961][ T4836] tipc: Enabled bearer , priority 0 [ 75.187314][ T4840] device syzkaller0 entered promiscuous mode [ 75.375373][ T4845] loop2: detected capacity change from 0 to 128 [ 75.478513][ T4843] tipc: Resetting bearer [ 75.534074][ T4843] tipc: Disabling bearer [ 75.566610][ T4845] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 75.623101][ T4845] ext4 filesystem being mounted at /44/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 76.327795][ T1325] cfg80211: failed to load regulatory.db [ 77.452267][ T4872] tipc: Enabled bearer , priority 0 [ 77.492179][ T4872] device syzkaller0 entered promiscuous mode [ 77.538532][ T4872] sch_tbf: burst 9 is lower than device syzkaller0 mtu (1514) ! [ 77.642458][ T4882] tipc: Resetting bearer [ 77.678008][ T4876] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 77.886139][ T4871] tipc: Resetting bearer [ 78.032399][ T4871] tipc: Disabling bearer [ 78.585465][ T4896] loop0: detected capacity change from 0 to 128 [ 79.169711][ T4896] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 79.415377][ T4896] ext4 filesystem being mounted at /47/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 82.052425][ T4944] netlink: 96 bytes leftover after parsing attributes in process `syz.1.228'. [ 82.104077][ T4944] netlink: 40 bytes leftover after parsing attributes in process `syz.1.228'. [ 82.982867][ T4953] loop2: detected capacity change from 0 to 128 [ 83.092175][ T4953] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 83.103208][ T4953] ext4 filesystem being mounted at /54/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 84.542646][ T4951] netlink: 40 bytes leftover after parsing attributes in process `syz.0.232'. [ 85.518175][ T4980] tipc: Started in network mode [ 85.555972][ T4980] tipc: Node identity ee6eaa36758b, cluster identity 4711 [ 85.583027][ T4980] tipc: Enabled bearer , priority 0 [ 85.617515][ T4982] device syzkaller0 entered promiscuous mode [ 85.657155][ T4969] infiniband syz2: set down [ 85.688626][ T4969] infiniband syz2: added ipvlan0 [ 85.707332][ T4980] tipc: Resetting bearer [ 85.766560][ T4969] infiniband syz2: Couldn't open port 1 [ 85.782618][ T4979] tipc: Resetting bearer [ 85.981823][ T4979] tipc: Disabling bearer [ 85.998985][ T4969] RDS/IB: syz2: added [ 86.003916][ T4969] smc: adding ib device syz2 with port count 1 [ 86.010390][ T4969] smc: ib device syz2 port 1 has pnetid [ 87.028247][ T5004] netlink: 24 bytes leftover after parsing attributes in process `syz.3.244'. [ 88.016447][ T4235] Bluetooth: hci5: command 0x0409 tx timeout [ 88.778475][ T5030] netlink: 40 bytes leftover after parsing attributes in process `syz.0.251'. [ 88.875043][ T4990] chnl_net:caif_netlink_parms(): no params data found [ 89.262021][ T4990] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.269112][ T4990] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.580871][ T4990] device bridge_slave_0 entered promiscuous mode [ 89.794799][ T4990] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.936628][ T4990] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.981391][ T4990] device bridge_slave_1 entered promiscuous mode [ 90.077689][ T5044] netlink: 48 bytes leftover after parsing attributes in process `syz.3.255'. [ 90.131982][ T5048] loop0: detected capacity change from 0 to 128 [ 90.173864][ T4235] Bluetooth: hci5: command 0x041b tx timeout [ 90.230249][ T4990] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.237102][ T5051] netlink: 'syz.3.255': attribute type 83 has an invalid length. [ 90.252494][ T4990] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.268585][ T5048] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 90.311318][ T5048] ext4 filesystem being mounted at /57/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 90.367972][ T5044] IPv6: ADDRCONF(NETDEV_CHANGE): nr6: link becomes ready [ 90.599516][ T4990] team0: Port device team_slave_0 added [ 90.751287][ T4990] team0: Port device team_slave_1 added [ 91.294761][ T4990] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.310287][ T4990] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.981298][ T4990] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.028649][ T4990] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.035877][ T4990] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.068971][ T4990] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.162954][ T5070] tipc: Enabled bearer , priority 0 [ 92.241542][ T4228] Bluetooth: hci5: command 0x040f tx timeout [ 92.485561][ T4990] device hsr_slave_0 entered promiscuous mode [ 92.663718][ T4990] device hsr_slave_1 entered promiscuous mode [ 92.826565][ T4990] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.900906][ T4990] Cannot create hsr debugfs directory [ 92.926001][ T5070] tipc: Disabling bearer [ 92.941364][ T5084] netlink: 16 bytes leftover after parsing attributes in process `syz.0.266'. [ 93.157871][ T5089] netlink: 4 bytes leftover after parsing attributes in process `syz.0.268'. [ 93.359481][ T5096] netlink: 24 bytes leftover after parsing attributes in process `syz.1.270'. [ 93.825289][ T5107] loop0: detected capacity change from 0 to 128 [ 93.938193][ T396] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.132933][ T5107] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 94.321543][ T4235] Bluetooth: hci5: command 0x0419 tx timeout [ 94.345225][ T5107] ext4 filesystem being mounted at /61/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 94.550413][ T396] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.977966][ T396] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.578219][ T396] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.052251][ T5124] tipc: Enabled bearer , priority 0 [ 96.490191][ T5124] device syzkaller0 entered promiscuous mode [ 96.521572][ T5124] tipc: Resetting bearer [ 96.530833][ T5123] tipc: Resetting bearer [ 96.694352][ T5123] tipc: Disabling bearer [ 96.988962][ T4990] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 97.066521][ T4990] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 97.132040][ T4990] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 97.255841][ T4990] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 97.270403][ T5149] netlink: 16 bytes leftover after parsing attributes in process `syz.3.284'. [ 97.281888][ T5155] loop2: detected capacity change from 0 to 128 [ 97.307592][ T5147] device batadv0 entered promiscuous mode [ 97.339379][ T5147] device vlan3 entered promiscuous mode [ 98.092750][ T5155] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 98.333962][ T5155] ext4 filesystem being mounted at /68/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 99.792711][ T5197] rdma_rxe: rxe_register_device failed with error -23 [ 99.812572][ T5197] rdma_rxe: failed to add ipvlan0 [ 99.850437][ T4990] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.924422][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 99.969089][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 100.000717][ T4990] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.081847][ T4571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 100.097232][ T4571] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 100.114531][ T4571] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.121695][ T4571] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.470636][ T4571] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 100.707415][ T4571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 100.807784][ T4571] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 100.887932][ T4571] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.895093][ T4571] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.974871][ T4571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 101.045691][ T5227] loop3: detected capacity change from 0 to 128 [ 101.063449][ T5224] netlink: 4 bytes leftover after parsing attributes in process `syz.1.300'. [ 101.215465][ T5227] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 101.326346][ T5227] ext4 filesystem being mounted at /67/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 101.901251][ T5224] bond0: (slave bond_slave_1): Releasing backup interface [ 103.176616][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 103.287171][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 103.308058][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 103.425440][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 103.476947][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 103.668832][ T5254] netlink: 64 bytes leftover after parsing attributes in process `syz.1.307'. [ 103.709648][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 103.894701][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 104.102485][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 104.196492][ T4990] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 104.329571][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 104.338049][ T5250] netlink: 24 bytes leftover after parsing attributes in process `syz.3.305'. [ 104.367683][ T5260] tipc: Enabled bearer , priority 0 [ 104.386047][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 104.398052][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 105.137083][ T5260] tipc: Disabling bearer [ 105.265699][ T5280] netlink: 'syz.3.312': attribute type 10 has an invalid length. [ 105.318948][ T5280] team0: Port device netdevsim0 added [ 105.523823][ T5111] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 105.736074][ T5292] netlink: 64 bytes leftover after parsing attributes in process `syz.2.317'. [ 105.747777][ T5111] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 105.938475][ T4990] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.121857][ T5296] loop3: detected capacity change from 0 to 128 [ 106.205238][ T396] device hsr_slave_0 left promiscuous mode [ 106.249535][ T396] device hsr_slave_1 left promiscuous mode [ 106.418048][ T5296] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 106.434776][ T5296] ext4 filesystem being mounted at /71/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 106.451571][ T396] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.459103][ T396] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.982683][ T396] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.038538][ T396] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.083265][ T396] device bridge_slave_1 left promiscuous mode [ 107.131357][ T396] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.182151][ T396] device bridge_slave_0 left promiscuous mode [ 107.209792][ T396] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.312095][ T396] device veth1_macvtap left promiscuous mode [ 107.318734][ T396] device veth0_macvtap left promiscuous mode [ 107.510700][ T396] device veth1_vlan left promiscuous mode [ 107.534490][ T396] device veth0_vlan left promiscuous mode [ 108.403862][ T5340] loop1: detected capacity change from 0 to 128 [ 108.413220][ T5342] netlink: 64 bytes leftover after parsing attributes in process `syz.3.327'. [ 108.518031][ T5340] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 108.613228][ T5340] ext4 filesystem being mounted at /66/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 109.539486][ T396] team0 (unregistering): Port device team_slave_1 removed [ 109.587070][ T396] team0 (unregistering): Port device team_slave_0 removed [ 109.623917][ T396] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 109.688449][ T396] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 109.833674][ T396] bond0 (unregistering): Released all slaves [ 109.956568][ T5343] tipc: Enabled bearer , priority 0 [ 110.081008][ T5343] tipc: Disabling bearer [ 110.267323][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 110.312896][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 110.353608][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 110.376807][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 110.421314][ T4990] device veth0_vlan entered promiscuous mode [ 110.429520][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 110.456775][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 110.487155][ T4990] device veth1_vlan entered promiscuous mode [ 110.545436][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 110.614922][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 110.651874][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 110.671979][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888060576800: rx timeout, send abort [ 110.682081][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888060577800: rx timeout, send abort [ 110.690916][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888060576800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 110.706412][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888060577800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 110.764558][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 111.488186][ T4990] device veth0_macvtap entered promiscuous mode [ 111.545080][ T4990] device veth1_macvtap entered promiscuous mode [ 111.553994][ T5400] netlink: 64 bytes leftover after parsing attributes in process `syz.3.338'. [ 112.152632][ T4990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.234866][ T4990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.246218][ T4990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.256979][ T4990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.288398][ T4990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.299154][ T4990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.367478][ T4990] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.399814][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 112.439300][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 112.503324][ T4990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.539999][ T4990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.591046][ T4990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.639824][ T4990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.671428][ T4990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.690339][ T4990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.709807][ T4990] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.725388][ T5422] tipc: Enabled bearer , priority 0 [ 112.772365][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 112.805990][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 113.047382][ T5422] tipc: Disabling bearer [ 113.062523][ T4990] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.073629][ T4990] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.584785][ T5442] overlayfs: missing 'workdir' [ 115.011251][ T4990] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.019975][ T4990] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.740289][ T5452] netlink: 64 bytes leftover after parsing attributes in process `syz.0.353'. [ 116.064770][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.106460][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.168090][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 116.201015][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.251917][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.291016][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 116.579781][ T5475] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 117.206086][ T5499] overlayfs: missing 'workdir' [ 118.347902][ T5508] loop3: detected capacity change from 0 to 1024 [ 119.151387][ T5514] loop2: detected capacity change from 0 to 128 [ 119.662896][ T5514] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 119.817836][ T5514] ext4 filesystem being mounted at /88/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 120.056611][ T5523] tipc: Started in network mode [ 120.111323][ T5523] tipc: Node identity ae04ec77ca15, cluster identity 4711 [ 120.139046][ T5523] tipc: Enabled bearer , priority 0 [ 120.236331][ T5523] device syzkaller0 entered promiscuous mode [ 120.469717][ T5523] tipc: Resetting bearer [ 120.591082][ T5522] tipc: Resetting bearer [ 120.614776][ T5522] tipc: Disabling bearer [ 122.581335][ T1275] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.646532][ T1275] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.497442][ T5566] loop5: detected capacity change from 0 to 128 [ 123.504864][ T5563] loop0: detected capacity change from 0 to 128 [ 123.593414][ T5563] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 123.644697][ T5566] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 123.691702][ T5563] ext4 filesystem being mounted at /82/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 123.721649][ T5566] ext4 filesystem being mounted at /7/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 123.801586][ T5574] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 124.443839][ T5581] tipc: Enabled bearer , priority 0 [ 124.508989][ T5581] device syzkaller0 entered promiscuous mode [ 124.594803][ T5581] tipc: Resetting bearer [ 124.646204][ T5576] tipc: Resetting bearer [ 124.666646][ T5576] tipc: Disabling bearer [ 126.204745][ T5615] netlink: 'syz.3.399': attribute type 7 has an invalid length. [ 126.212589][ T5615] netlink: 32 bytes leftover after parsing attributes in process `syz.3.399'. [ 126.417760][ T5616] loop0: detected capacity change from 0 to 128 [ 126.731634][ T5616] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 126.835463][ T5620] loop3: detected capacity change from 0 to 128 [ 126.871605][ T5616] ext4 filesystem being mounted at /86/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 126.895131][ T5622] loop5: detected capacity change from 0 to 1024 [ 126.999721][ T5620] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 127.023371][ T5620] ext4 filesystem being mounted at /89/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 127.863771][ T5638] tipc: Enabled bearer , priority 0 [ 127.890546][ T5638] device syzkaller0 entered promiscuous mode [ 127.990834][ T5638] tipc: Resetting bearer [ 128.202839][ T5637] tipc: Resetting bearer [ 128.247890][ T5637] tipc: Disabling bearer [ 129.658370][ T5671] loop2: detected capacity change from 0 to 128 [ 129.667543][ T5667] netlink: 8 bytes leftover after parsing attributes in process `syz.1.415'. [ 129.699026][ T5667] netlink: 152 bytes leftover after parsing attributes in process `syz.1.415'. [ 129.942731][ T5667] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 129.949667][ T5672] loop3: detected capacity change from 0 to 128 [ 130.025069][ T5674] ieee802154 phy0 wpan0: encryption failed: -22 [ 130.120489][ T5671] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 130.133314][ T5672] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 130.150638][ T5671] ext4 filesystem being mounted at /93/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 130.151512][ T5672] ext4 filesystem being mounted at /92/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 131.079549][ T5703] netlink: 64 bytes leftover after parsing attributes in process `syz.2.426'. [ 131.108638][ T5698] netlink: 4 bytes leftover after parsing attributes in process `syz.1.423'. [ 131.144370][ T5698] device bridge_slave_1 left promiscuous mode [ 131.157467][ T5698] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.177392][ T5698] device bridge_slave_0 left promiscuous mode [ 131.185503][ T5698] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.601588][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.607945][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.709642][ T5722] rdma_rxe: rxe_register_device failed with error -23 [ 134.546042][ T5722] rdma_rxe: failed to add ipvlan0 [ 134.675396][ T5726] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 134.741074][ T5726] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 134.779772][ T5726] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 134.827994][ T5726] device bridge_slave_0 left promiscuous mode [ 134.861396][ T5726] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.897151][ T5726] device bridge_slave_1 left promiscuous mode [ 134.911329][ T5726] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.094193][ T5726] bond0: (slave bond_slave_0): Releasing backup interface [ 135.120571][ T5726] bond0: (slave bond_slave_1): Releasing backup interface [ 135.406889][ T5726] team0: Port device team_slave_0 removed [ 135.675129][ T5726] team0: Port device team_slave_1 removed [ 135.734884][ T5726] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.757486][ T5726] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.766562][ T5726] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.783476][ T5726] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.947970][ T5752] loop1: detected capacity change from 0 to 128 [ 135.989803][ T5753] loop0: detected capacity change from 0 to 1024 [ 136.156321][ T5752] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 136.397947][ T5752] ext4 filesystem being mounted at /92/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 136.916691][ T5761] loop2: detected capacity change from 0 to 128 [ 138.543008][ T5761] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 138.623968][ T5761] ext4 filesystem being mounted at /99/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 139.516233][ T5787] netlink: 64 bytes leftover after parsing attributes in process `syz.1.443'. [ 139.563640][ T5792] rdma_rxe: rxe_register_device failed with error -23 [ 139.570666][ T5792] rdma_rxe: failed to add ipvlan0 [ 139.589512][ T5790] tipc: Enabled bearer , priority 0 [ 139.826525][ T5794] device syzkaller0 entered promiscuous mode [ 140.183016][ T5790] tipc: Resetting bearer [ 140.282164][ T5786] tipc: Resetting bearer [ 140.330437][ T5786] tipc: Disabling bearer [ 140.521335][ T5800] tipc: Enabled bearer , priority 0 [ 140.528809][ T5800] device syzkaller0 entered promiscuous mode [ 141.239899][ T5800] tipc: Resetting bearer [ 141.271901][ T5798] tipc: Resetting bearer [ 141.319317][ T5798] tipc: Disabling bearer [ 142.526157][ T5820] loop2: detected capacity change from 0 to 128 [ 143.638836][ T5828] loop3: detected capacity change from 0 to 128 [ 143.973252][ T5820] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 144.086009][ T5820] ext4 filesystem being mounted at /102/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 144.441371][ T5838] rdma_rxe: already configured on ipvlan0 [ 144.641275][ T5828] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 144.745221][ T5828] ext4 filesystem being mounted at /96/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 147.633974][ T5880] tipc: Enabled bearer , priority 0 [ 147.740994][ T5880] tipc: Disabling bearer [ 147.866532][ T5888] rdma_rxe: rxe_register_device failed with error -23 [ 147.911509][ T5888] rdma_rxe: failed to add ipvlan0 [ 148.396069][ T5891] loop3: detected capacity change from 0 to 1024 [ 148.474222][ T5896] loop1: detected capacity change from 0 to 128 [ 148.554253][ T5895] tipc: Enabled bearer , priority 0 [ 148.579436][ T5894] tipc: Resetting bearer [ 148.878778][ T5890] tipc: Disabling bearer [ 148.885490][ T5896] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 148.924488][ T5903] loop0: detected capacity change from 0 to 128 [ 148.972618][ T5896] ext4 filesystem being mounted at /99/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 149.247734][ T5903] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 149.470197][ T5903] ext4 filesystem being mounted at /100/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 150.771155][ C0] sched: RT throttling activated [ 153.455694][ T5942] tipc: Enabling of bearer rejected, failed to enable media [ 153.524793][ T5946] rdma_rxe: rxe_register_device failed with error -23 [ 153.583970][ T5946] rdma_rxe: failed to add ipvlan0 [ 153.779678][ T5955] netlink: 16 bytes leftover after parsing attributes in process `syz.5.486'. [ 154.934218][ T5967] tipc: Started in network mode [ 154.961252][ T5967] tipc: Node identity 7675e2c07db6, cluster identity 4711 [ 155.149534][ T5967] tipc: Enabled bearer , priority 0 [ 155.572473][ T5973] device syzkaller0 entered promiscuous mode [ 155.744693][ T5982] loop5: detected capacity change from 0 to 128 [ 155.753792][ T5967] tipc: Resetting bearer [ 155.821422][ T5966] tipc: Resetting bearer [ 155.858459][ T5966] tipc: Disabling bearer [ 155.952608][ T5982] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 155.984902][ T5982] ext4 filesystem being mounted at /36/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 157.250433][ T5998] rdma_rxe: rxe_register_device failed with error -23 [ 157.276756][ T5998] rdma_rxe: failed to add ipvlan0 [ 159.162163][ T6015] tipc: Enabled bearer , priority 0 [ 159.181812][ T6015] device syzkaller0 entered promiscuous mode [ 159.292766][ T6015] tipc: Resetting bearer [ 159.433903][ T6013] tipc: Resetting bearer [ 160.635323][ T1108] tipc: Node number set to 1678896247 [ 160.892154][ T6013] tipc: Disabling bearer [ 161.280034][ T6032] loop1: detected capacity change from 0 to 1024 [ 161.299873][ T6040] loop0: detected capacity change from 0 to 128 [ 161.398973][ T6042] loop3: detected capacity change from 0 to 128 [ 161.526390][ T6044] rdma_rxe: rxe_register_device failed with error -23 [ 161.535840][ T6044] rdma_rxe: failed to add ipvlan0 [ 161.729957][ T6042] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 161.731976][ T6040] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 161.746038][ T6042] ext4 filesystem being mounted at /102/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 161.773753][ T6040] ext4 filesystem being mounted at /109/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 163.397579][ T6064] tipc: Enabled bearer , priority 0 [ 163.421126][ T6064] device syzkaller0 entered promiscuous mode [ 163.511877][ T6064] tipc: Resetting bearer [ 164.143457][ T6063] tipc: Resetting bearer [ 164.164015][ T6063] tipc: Disabling bearer [ 165.885331][ T6091] tipc: Enabled bearer , priority 0 [ 165.894961][ T6091] device syzkaller0 entered promiscuous mode [ 166.080950][ T6096] tipc: Resetting bearer [ 166.103551][ T6089] rdma_rxe: rxe_register_device failed with error -23 [ 166.154420][ T6089] rdma_rxe: failed to add ipvlan0 [ 166.166881][ T6090] tipc: Resetting bearer [ 166.409873][ T6090] tipc: Disabling bearer [ 167.528490][ T6111] loop2: detected capacity change from 0 to 128 [ 167.695537][ T6111] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 167.738539][ T6114] tipc: Enabled bearer , priority 0 [ 167.781463][ T6111] ext4 filesystem being mounted at /122/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 167.819302][ T6116] device syzkaller0 entered promiscuous mode [ 168.905768][ T6121] tipc: Enabled bearer , priority 0 [ 168.916338][ T4174] tipc: Node number set to 3652470334 [ 168.985613][ T6114] tipc: Resetting bearer [ 169.018834][ T6121] tipc: Resetting bearer [ 169.128145][ T6112] tipc: Resetting bearer [ 169.145914][ T6112] tipc: Disabling bearer [ 169.199825][ T6120] tipc: Disabling bearer [ 170.942694][ T6157] rdma_rxe: rxe_register_device failed with error -23 [ 171.156651][ T6157] rdma_rxe: failed to add ipvlan0 [ 171.312887][ T6162] loop0: detected capacity change from 0 to 128 [ 171.834523][ T6162] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 171.898124][ T6162] ext4 filesystem being mounted at /118/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 171.988828][ T6168] loop2: detected capacity change from 0 to 1024 [ 172.205605][ T6172] loop3: detected capacity change from 0 to 128 [ 173.481993][ T6172] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 173.521348][ T6172] ext4 filesystem being mounted at /107/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 174.101737][ T6186] tipc: Enabled bearer , priority 0 [ 174.135330][ T6186] device syzkaller0 entered promiscuous mode [ 174.219466][ T6186] tipc: Resetting bearer [ 174.436684][ T6185] tipc: Resetting bearer [ 174.459104][ T6185] tipc: Disabling bearer [ 175.691412][ T21] Bluetooth: hci3: command 0x0406 tx timeout [ 175.699506][ T21] Bluetooth: hci2: command 0x0406 tx timeout [ 175.821709][ T21] Bluetooth: hci4: command 0x0406 tx timeout [ 176.072980][ T6203] rdma_rxe: rxe_register_device failed with error -23 [ 176.120570][ T6203] rdma_rxe: failed to add ipvlan0 [ 178.423837][ T6224] tipc: Enabled bearer , priority 0 [ 178.489034][ T6222] tipc: Resetting bearer [ 178.528852][ T6220] tipc: Disabling bearer [ 178.657295][ T6236] loop1: detected capacity change from 0 to 128 [ 178.728339][ T6236] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 178.744460][ T6236] ext4 filesystem being mounted at /112/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 178.768161][ T6239] tipc: Enabled bearer , priority 0 [ 178.828488][ T6242] device syzkaller0 entered promiscuous mode [ 178.915043][ T6239] tipc: Resetting bearer [ 178.945525][ T6238] tipc: Resetting bearer [ 179.116019][ T6238] tipc: Disabling bearer [ 180.526248][ T6261] loop0: detected capacity change from 0 to 128 [ 180.789041][ T6261] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 180.986814][ T6261] ext4 filesystem being mounted at /122/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 181.384031][ T6267] rdma_rxe: already configured on ipvlan0 [ 182.717783][ T6281] loop0: detected capacity change from 0 to 1024 [ 183.332230][ T6284] tipc: Enabled bearer , priority 0 [ 183.339594][ T6284] device syzkaller0 entered promiscuous mode [ 183.522783][ T6284] tipc: Resetting bearer [ 183.554911][ T6283] tipc: Resetting bearer [ 183.576638][ T6283] tipc: Disabling bearer [ 183.635746][ T6291] loop0: detected capacity change from 0 to 128 [ 184.356154][ T6291] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 184.465179][ T6291] ext4 filesystem being mounted at /124/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 184.709800][ T6310] loop5: detected capacity change from 0 to 128 [ 185.097419][ T6311] rdma_rxe: already configured on ipvlan0 [ 185.238910][ T6310] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 185.488043][ T6310] ext4 filesystem being mounted at /47/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 187.347057][ T6333] loop0: detected capacity change from 0 to 1024 [ 187.455282][ T6335] tipc: Enabled bearer , priority 0 [ 187.488440][ T6335] device syzkaller0 entered promiscuous mode [ 187.568856][ T6335] tipc: Resetting bearer [ 187.677369][ T6334] tipc: Resetting bearer [ 187.766013][ T6334] tipc: Disabling bearer [ 188.715022][ T6359] rdma_rxe: rxe_register_device failed with error -23 [ 188.810269][ T6359] rdma_rxe: failed to add ipvlan0 [ 189.146604][ T6364] loop0: detected capacity change from 0 to 128 [ 189.466761][ T6367] tipc: Enabled bearer , priority 0 [ 189.542000][ T6364] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 189.581567][ T6371] device syzkaller0 entered promiscuous mode [ 189.589881][ T6364] ext4 filesystem being mounted at /127/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 189.627851][ T6373] loop3: detected capacity change from 0 to 128 [ 189.636109][ T6367] tipc: Resetting bearer [ 189.717101][ T6366] tipc: Resetting bearer [ 189.762127][ T6366] tipc: Disabling bearer [ 189.907993][ T6373] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 189.958186][ T6373] ext4 filesystem being mounted at /117/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 191.738787][ T6386] loop5: detected capacity change from 0 to 1024 [ 192.650640][ T6403] tipc: Enabled bearer , priority 0 [ 193.422822][ T6408] device syzkaller0 entered promiscuous mode [ 193.461862][ T6403] tipc: Resetting bearer [ 193.482889][ T6402] tipc: Resetting bearer [ 193.589536][ T6415] rdma_rxe: rxe_register_device failed with error -23 [ 193.607217][ T6402] tipc: Disabling bearer [ 193.637124][ T6415] rdma_rxe: failed to add ipvlan0 [ 193.644485][ T6418] loop5: detected capacity change from 0 to 128 [ 193.968442][ T6418] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 194.099351][ T6418] ext4 filesystem being mounted at /55/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 194.171951][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.180862][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.283470][ T6431] tipc: Enabled bearer , priority 0 [ 195.334726][ T6431] tipc: Resetting bearer [ 195.537749][ T6435] loop0: detected capacity change from 0 to 128 [ 195.559239][ T6427] tipc: Disabling bearer [ 195.682421][ T6435] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 195.712795][ T6437] loop5: detected capacity change from 0 to 1024 [ 195.728288][ T6435] ext4 filesystem being mounted at /131/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 198.087044][ T6468] rdma_rxe: rxe_register_device failed with error -23 [ 198.300309][ T6468] rdma_rxe: failed to add ipvlan0 [ 198.363487][ T6473] loop1: detected capacity change from 0 to 128 [ 200.247816][ T6473] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 200.258725][ T6473] ext4 filesystem being mounted at /123/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 200.424482][ T6487] tipc: Enabling of bearer rejected, failed to enable media [ 200.893703][ T6495] loop5: detected capacity change from 0 to 1024 [ 200.975871][ T6499] loop3: detected capacity change from 0 to 128 [ 201.344745][ T6499] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 201.611953][ T6499] ext4 filesystem being mounted at /121/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 202.076482][ T6513] tipc: Enabled bearer , priority 0 [ 202.574892][ T6513] device syzkaller0 entered promiscuous mode [ 202.768875][ T6513] tipc: Resetting bearer [ 203.391672][ T6509] tipc: Resetting bearer [ 203.858724][ T6509] tipc: Disabling bearer [ 204.996369][ T6547] loop5: detected capacity change from 0 to 128 [ 205.015354][ T6548] rdma_rxe: rxe_register_device failed with error -23 [ 205.026345][ T6548] rdma_rxe: failed to add ipvlan0 [ 205.072643][ T6547] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 205.108945][ T6550] loop1: detected capacity change from 0 to 1024 [ 205.131322][ T6547] ext4 filesystem being mounted at /63/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 208.033071][ T6583] loop1: detected capacity change from 0 to 128 [ 208.221505][ T6591] tipc: Enabled bearer , priority 0 [ 208.239149][ T6591] device syzkaller0 entered promiscuous mode [ 208.303932][ T6591] tipc: Resetting bearer [ 208.326710][ T6583] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 208.347152][ T6583] ext4 filesystem being mounted at /130/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 208.369303][ T6588] tipc: Resetting bearer [ 208.747872][ T6588] tipc: Disabling bearer [ 209.505840][ T6606] loop0: detected capacity change from 0 to 1024 [ 209.527030][ T6608] loop5: detected capacity change from 0 to 128 [ 209.778417][ T6608] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 209.826428][ T6608] ext4 filesystem being mounted at /67/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 211.839299][ T4261] Bluetooth: hci5: command 0x0406 tx timeout [ 212.563398][ T1275] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.569880][ T6643] rdma_rxe: rxe_register_device failed with error -23 [ 212.572092][ T1275] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.599663][ T6643] rdma_rxe: failed to add ipvlan0 [ 212.739802][ T6652] loop2: detected capacity change from 0 to 128 [ 212.760156][ T6650] tipc: Enabled bearer , priority 0 [ 212.786034][ T6650] device syzkaller0 entered promiscuous mode [ 212.851107][ T6650] tipc: Resetting bearer [ 212.894310][ T6652] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 212.942068][ T6648] tipc: Resetting bearer [ 212.948186][ T6652] ext4 filesystem being mounted at /155/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 212.977694][ T6648] tipc: Disabling bearer [ 213.018649][ T6660] loop3: detected capacity change from 0 to 1024 [ 213.062694][ T6662] loop5: detected capacity change from 0 to 128 [ 213.463701][ T6662] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 213.603380][ T6662] ext4 filesystem being mounted at /72/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 215.840757][ T6691] rdma_rxe: rxe_register_device failed with error -23 [ 215.874736][ T6691] rdma_rxe: failed to add ipvlan0 [ 216.666088][ T6706] loop1: detected capacity change from 0 to 128 [ 216.692965][ T6705] tipc: Enabled bearer , priority 0 [ 216.708327][ T6705] device syzkaller0 entered promiscuous mode [ 216.738617][ T6705] tipc: Resetting bearer [ 216.761715][ T6706] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 216.785859][ T6703] tipc: Resetting bearer [ 216.788250][ T6706] ext4 filesystem being mounted at /134/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 216.960560][ T6703] tipc: Disabling bearer [ 217.582104][ T6711] tipc: Enabled bearer , priority 0 [ 217.621650][ T6711] device syzkaller0 entered promiscuous mode [ 217.729712][ T6710] tipc: Resetting bearer [ 217.769329][ T6718] loop1: detected capacity change from 0 to 128 [ 217.785392][ T6710] tipc: Disabling bearer [ 217.867170][ T6718] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 217.931329][ T6718] ext4 filesystem being mounted at /135/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 220.244294][ T6745] loop0: detected capacity change from 0 to 128 [ 220.273095][ T6744] tipc: Enabled bearer , priority 0 [ 220.311530][ T6744] device syzkaller0 entered promiscuous mode [ 220.325944][ T6747] syz.1.694 (6747) used obsolete PPPIOCDETACH ioctl [ 220.384366][ T6744] tipc: Resetting bearer [ 220.463741][ T6743] tipc: Resetting bearer [ 220.517661][ T6743] tipc: Disabling bearer [ 220.532707][ T6745] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 220.559867][ T6745] ext4 filesystem being mounted at /149/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 220.759407][ T6756] tipc: Enabled bearer , priority 0 [ 220.785350][ T6756] device syzkaller0 entered promiscuous mode [ 220.816424][ T6755] tipc: Resetting bearer [ 220.846259][ T6755] tipc: Disabling bearer [ 220.906847][ T6760] loop3: detected capacity change from 0 to 128 [ 221.373074][ T6760] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 221.391431][ T6760] ext4 filesystem being mounted at /131/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 223.534665][ T6815] tipc: Enabled bearer , priority 0 [ 223.579574][ T6815] device syzkaller0 entered promiscuous mode [ 223.598509][ T6817] tipc: Enabled bearer , priority 0 [ 223.643840][ T6815] tipc: Resetting bearer [ 223.666449][ T6817] tipc: Resetting bearer [ 223.687669][ T6814] tipc: Resetting bearer [ 223.717040][ T6814] tipc: Disabling bearer [ 223.750680][ T6816] tipc: Disabling bearer [ 224.797204][ T6831] loop3: detected capacity change from 0 to 128 [ 224.912159][ T6831] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 224.953587][ T6831] ext4 filesystem being mounted at /135/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 226.437905][ T6870] tipc: Enabled bearer , priority 0 [ 226.743357][ T6867] tipc: Resetting bearer [ 227.132613][ T6866] tipc: Disabling bearer [ 227.948669][ T6889] loop3: detected capacity change from 0 to 128 [ 228.026192][ T6889] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 228.157951][ T6889] ext4 filesystem being mounted at /138/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 229.269452][ T6916] tipc: Enabled bearer , priority 0 [ 229.288018][ T6918] tipc: Enabled bearer , priority 0 [ 229.303690][ T6918] device syzkaller0 entered promiscuous mode [ 229.324385][ T6916] tipc: Resetting bearer [ 229.346969][ T6918] tipc: Resetting bearer [ 229.370427][ T6914] tipc: Disabling bearer [ 229.380695][ T6915] tipc: Resetting bearer [ 229.393350][ T6915] tipc: Disabling bearer [ 230.181215][ T6938] loop5: detected capacity change from 0 to 128 [ 230.420040][ T6938] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 230.440937][ T6938] ext4 filesystem being mounted at /88/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 231.498229][ T6960] tipc: Enabled bearer , priority 0 [ 231.553634][ T6964] device syzkaller0 entered promiscuous mode [ 231.576679][ T6960] device syzkaller0 entered promiscuous mode [ 231.630636][ T6960] tipc: Resetting bearer [ 231.700100][ T6958] tipc: Resetting bearer [ 231.717480][ T6958] tipc: Disabling bearer [ 232.066227][ T26] audit: type=1107 audit(1757151599.222:2): pid=6975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 232.088803][ T6979] netlink: set zone limit has 8 unknown bytes [ 232.418048][ T6987] loop5: detected capacity change from 0 to 128 [ 233.243497][ T6987] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 233.270968][ T6987] ext4 filesystem being mounted at /91/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 233.300283][ T6997] netlink: 8 bytes leftover after parsing attributes in process `syz.2.765'. [ 234.212770][ T7011] device syzkaller0 entered promiscuous mode [ 234.234943][ T7013] tipc: Enabled bearer , priority 0 [ 234.261441][ T7013] device syzkaller0 entered promiscuous mode [ 234.336041][ T7013] tipc: Resetting bearer [ 234.371030][ T7012] tipc: Resetting bearer [ 234.407545][ T7012] tipc: Disabling bearer [ 234.432890][ T7018] netlink: 40 bytes leftover after parsing attributes in process `syz.5.773'. [ 234.461723][ T7018] netlink: 'syz.5.773': attribute type 1 has an invalid length. [ 235.435882][ T7036] loop0: detected capacity change from 0 to 128 [ 235.689364][ T7036] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 235.711372][ T7036] ext4 filesystem being mounted at /167/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 236.453205][ T7052] device syzkaller0 entered promiscuous mode [ 236.597603][ T7054] netlink: 28 bytes leftover after parsing attributes in process `syz.0.783'. [ 236.636459][ T7054] netlink: 28 bytes leftover after parsing attributes in process `syz.0.783'. [ 238.229118][ T7066] tipc: Enabled bearer , priority 0 [ 238.270252][ T7066] device syzkaller0 entered promiscuous mode [ 238.299399][ T7066] tipc: Resetting bearer [ 238.320423][ T7065] tipc: Resetting bearer [ 238.359000][ T7065] tipc: Disabling bearer [ 239.274549][ T7090] loop1: detected capacity change from 0 to 128 [ 239.412045][ T7090] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 239.481368][ T7090] ext4 filesystem being mounted at /165/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 240.150670][ T7101] rdma_rxe: rxe_register_device failed with error -23 [ 240.307452][ T7101] rdma_rxe: failed to add ipvlan0 [ 240.630347][ T7114] netlink: 14544 bytes leftover after parsing attributes in process `syz.0.801'. [ 241.011074][ T7133] loop3: detected capacity change from 0 to 128 [ 241.095785][ T7135] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 241.126014][ T7133] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 241.126040][ T7137] rdma_rxe: rxe_register_device failed with error -23 [ 241.151392][ T7133] ext4 filesystem being mounted at /147/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 241.190580][ T7137] rdma_rxe: failed to add ipvlan0 [ 241.398030][ T7148] loop0: detected capacity change from 0 to 1024 [ 242.037949][ T7154] device syzkaller0 entered promiscuous mode [ 242.774481][ T7171] loop3: detected capacity change from 0 to 128 [ 242.850827][ T7174] rdma_rxe: rxe_register_device failed with error -23 [ 242.881472][ T7174] rdma_rxe: failed to add ipvlan0 [ 242.904113][ T7176] tipc: Enabled bearer , priority 0 [ 242.922529][ T7176] device syzkaller0 entered promiscuous mode [ 242.942600][ T7171] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 242.980151][ T7171] ext4 filesystem being mounted at /149/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 243.036928][ T7176] tipc: Resetting bearer [ 243.143654][ T7175] tipc: Resetting bearer [ 243.172874][ T7175] tipc: Disabling bearer [ 243.723988][ T7184] loop0: detected capacity change from 0 to 128 [ 243.798728][ T7184] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 243.828764][ T7186] loop1: detected capacity change from 0 to 1024 [ 243.835365][ T7184] ext4 filesystem being mounted at /183/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 243.898265][ T7189] netlink: 104 bytes leftover after parsing attributes in process `syz.5.829'. [ 243.961960][ T7189] netlink: 'syz.5.829': attribute type 1 has an invalid length. [ 244.044359][ T7189] 8021q: adding VLAN 0 to HW filter on device bond1 [ 244.889130][ T7210] netlink: 'syz.3.833': attribute type 9 has an invalid length. [ 245.136762][ T7218] tipc: Enabled bearer , priority 0 [ 245.153735][ T7224] loop3: detected capacity change from 0 to 128 [ 245.229647][ T7218] device syzkaller0 entered promiscuous mode [ 245.337168][ T7215] tipc: Resetting bearer [ 245.346149][ T7224] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 245.378611][ T7224] ext4 filesystem being mounted at /152/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 245.429544][ T7215] tipc: Disabling bearer [ 246.168242][ T7242] loop1: detected capacity change from 0 to 1024 [ 246.182288][ T7241] netlink: 'syz.0.840': attribute type 3 has an invalid length. [ 246.469648][ T7241] netlink: 8 bytes leftover after parsing attributes in process `syz.0.840'. [ 246.947272][ T7241] syzkaller0: create flow: hash 476130679 index 1 [ 247.088227][ T7] syzkaller0: tun_net_xmit 76 [ 247.093573][ T7] syzkaller0: tun_net_xmit 48 [ 247.103240][ T7244] netlink: 'syz.2.844': attribute type 10 has an invalid length. [ 247.111493][ T4248] syzkaller0: tun_net_xmit 76 [ 247.121666][ T7244] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 247.181338][ T4248] syzkaller0: tun_net_xmit 76 [ 247.260142][ T7237] syzkaller0: delete flow: hash 476130679 index 1 [ 247.341527][ T7267] netlink: 8 bytes leftover after parsing attributes in process `syz.3.849'. [ 247.350664][ T7267] netlink: del zone limit has 8 unknown bytes [ 247.456678][ T7276] loop3: detected capacity change from 0 to 128 [ 247.558371][ T7276] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 247.574570][ T7276] ext4 filesystem being mounted at /157/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 248.403672][ T7285] netlink: 4 bytes leftover after parsing attributes in process `syz.1.854'. [ 248.431543][ T7285] netlink: 'syz.1.854': attribute type 1 has an invalid length. [ 248.439206][ T7285] netlink: 20 bytes leftover after parsing attributes in process `syz.1.854'. [ 248.509732][ T7288] rdma_rxe: rxe_register_device failed with error -23 [ 248.549097][ T7286] tipc: Enabled bearer , priority 0 [ 248.578616][ T7288] rdma_rxe: failed to add ipvlan0 [ 248.587642][ T7286] device syzkaller0 entered promiscuous mode [ 248.609378][ T7286] tipc: Resetting bearer [ 248.699423][ T7284] tipc: Resetting bearer [ 248.711552][ T7290] loop3: detected capacity change from 0 to 1024 [ 248.733400][ T7284] tipc: Disabling bearer [ 248.943124][ T7298] tipc: Enabled bearer , priority 0 [ 249.314558][ T7301] device syzkaller0 entered promiscuous mode [ 249.808436][ T7308] netlink: 'syz.2.863': attribute type 3 has an invalid length. [ 249.912952][ T7298] tipc: Resetting bearer [ 250.451067][ T7298] tipc: Disabling bearer [ 250.630054][ T1108] syzkaller0: tun_net_xmit 76 [ 250.641507][ T1108] syzkaller0: tun_net_xmit 48 [ 250.651766][ T4228] syzkaller0: tun_net_xmit 76 [ 251.022396][ T7329] loop3: detected capacity change from 0 to 128 [ 251.132727][ T7329] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 251.166655][ T7329] ext4 filesystem being mounted at /160/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 252.452400][ T7351] loop3: detected capacity change from 0 to 1024 [ 254.796118][ T7373] netlink: 'syz.2.881': attribute type 10 has an invalid length. [ 255.004564][ T7386] loop2: detected capacity change from 0 to 128 [ 255.103101][ T7386] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 255.144544][ T7386] ext4 filesystem being mounted at /188/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 255.527150][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.893167][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.223842][ T7401] loop3: detected capacity change from 0 to 1024 [ 257.106659][ T7418] tipc: Enabled bearer , priority 0 [ 257.158724][ T7418] tipc: Resetting bearer [ 257.241977][ T7417] tipc: Disabling bearer [ 257.697413][ T7438] netlink: 8 bytes leftover after parsing attributes in process `syz.3.902'. [ 257.836637][ T7446] netlink: 'syz.3.905': attribute type 10 has an invalid length. [ 257.859076][ T7446] team0: Device ipvlan1 failed to register rx_handler [ 257.884649][ T7447] tipc: Enabled bearer , priority 0 [ 257.898453][ T7447] device syzkaller0 entered promiscuous mode [ 257.924223][ T7447] tipc: Resetting bearer [ 257.930054][ T7449] netlink: 272 bytes leftover after parsing attributes in process `syz.3.907'. [ 257.948864][ T7445] tipc: Resetting bearer [ 257.980019][ T7445] tipc: Disabling bearer [ 258.008327][ T7453] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 258.015914][ T7453] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 258.025151][ T7453] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.035635][ T7453] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 258.067882][ T7453] device veth0_to_team entered promiscuous mode [ 258.095403][ T7453] netlink: 8 bytes leftover after parsing attributes in process `syz.3.909'. [ 258.241782][ T7460] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 258.274269][ T7460] [ 258.276717][ T7460] ====================================================== [ 258.283734][ T7460] WARNING: possible circular locking dependency detected [ 258.290757][ T7460] syzkaller #0 Not tainted [ 258.295249][ T7460] ------------------------------------------------------ [ 258.302340][ T7460] syz.3.912/7460 is trying to acquire lock: [ 258.308222][ T7460] ffff888021e1f120 (sk_lock-AF_AX25){+.+.}-{0:0}, at: ax25_device_event+0x217/0x4f0 [ 258.317641][ T7460] [ 258.317641][ T7460] but task is already holding lock: [ 258.325095][ T7460] ffffffff8d237c88 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x54e/0xe50 [ 258.333365][ T7460] [ 258.333365][ T7460] which lock already depends on the new lock. [ 258.333365][ T7460] [ 258.343746][ T7460] [ 258.343746][ T7460] the existing dependency chain (in reverse order) is: [ 258.352736][ T7460] [ 258.352736][ T7460] -> #1 (rtnl_mutex){+.+.}-{3:3}: [ 258.359917][ T7460] __mutex_lock_common+0x1eb/0x2390 [ 258.365622][ T7460] mutex_lock_nested+0x17/0x20 [ 258.370885][ T7460] ax25_setsockopt+0x830/0xa40 [ 258.376146][ T7460] __sys_setsockopt+0x2bf/0x3d0 [ 258.381495][ T7460] __x64_sys_setsockopt+0xb1/0xc0 [ 258.387020][ T7460] do_syscall_64+0x4c/0xa0 [ 258.391934][ T7460] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 258.398325][ T7460] [ 258.398325][ T7460] -> #0 (sk_lock-AF_AX25){+.+.}-{0:0}: [ 258.405940][ T7460] __lock_acquire+0x2c33/0x7c60 [ 258.411291][ T7460] lock_acquire+0x197/0x3f0 [ 258.416294][ T7460] lock_sock_nested+0x44/0x100 [ 258.421558][ T7460] ax25_device_event+0x217/0x4f0 [ 258.427011][ T7460] raw_notifier_call_chain+0xcb/0x160 [ 258.432882][ T7460] __dev_notify_flags+0x178/0x2d0 [ 258.438403][ T7460] dev_change_flags+0xe3/0x1a0 [ 258.443660][ T7460] dev_ifsioc+0x147/0xe70 [ 258.448487][ T7460] dev_ioctl+0x55f/0xe50 [ 258.453229][ T7460] sock_do_ioctl+0x222/0x2f0 [ 258.458316][ T7460] sock_ioctl+0x4ed/0x6e0 [ 258.463140][ T7460] __se_sys_ioctl+0xfa/0x170 [ 258.468229][ T7460] do_syscall_64+0x4c/0xa0 [ 258.473140][ T7460] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 258.479528][ T7460] [ 258.479528][ T7460] other info that might help us debug this: [ 258.479528][ T7460] [ 258.489727][ T7460] Possible unsafe locking scenario: [ 258.489727][ T7460] [ 258.497147][ T7460] CPU0 CPU1 [ 258.502488][ T7460] ---- ---- [ 258.507826][ T7460] lock(rtnl_mutex); [ 258.511785][ T7460] lock(sk_lock-AF_AX25); [ 258.518698][ T7460] lock(rtnl_mutex); [ 258.525184][ T7460] lock(sk_lock-AF_AX25); [ 258.529581][ T7460] [ 258.529581][ T7460] *** DEADLOCK *** [ 258.529581][ T7460] [ 258.537704][ T7460] 1 lock held by syz.3.912/7460: [ 258.542613][ T7460] #0: ffffffff8d237c88 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x54e/0xe50 [ 258.551290][ T7460] [ 258.551290][ T7460] stack backtrace: [ 258.557159][ T7460] CPU: 1 PID: 7460 Comm: syz.3.912 Not tainted syzkaller #0 [ 258.564415][ T7460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 258.574456][ T7460] Call Trace: [ 258.577718][ T7460] [ 258.580635][ T7460] dump_stack_lvl+0x168/0x230 [ 258.585482][ T7460] ? load_image+0x3b0/0x3b0 [ 258.590064][ T7460] ? show_regs_print_info+0x20/0x20 [ 258.595241][ T7460] ? print_circular_bug+0x12b/0x1a0 [ 258.600417][ T7460] check_noncircular+0x274/0x310 [ 258.605333][ T7460] ? add_chain_block+0x940/0x940 [ 258.610244][ T7460] ? lockdep_lock+0xdc/0x1e0 [ 258.614814][ T7460] ? lockdep_unlock+0x134/0x2d0 [ 258.619646][ T7460] ? mark_lock+0x94/0x320 [ 258.623970][ T7460] __lock_acquire+0x2c33/0x7c60 [ 258.628803][ T7460] ? lock_chain_count+0x20/0x20 [ 258.633643][ T7460] ? mark_lock+0x94/0x320 [ 258.637947][ T7460] ? verify_lock_unused+0x140/0x140 [ 258.643121][ T7460] ? verify_lock_unused+0x140/0x140 [ 258.648300][ T7460] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 258.654259][ T7460] ? lockdep_hardirqs_on_prepare+0x760/0x760 [ 258.660218][ T7460] ? __local_bh_enable_ip+0x12a/0x1b0 [ 258.665577][ T7460] ? mark_lock+0x94/0x320 [ 258.669892][ T7460] lock_acquire+0x197/0x3f0 [ 258.674376][ T7460] ? ax25_device_event+0x217/0x4f0 [ 258.679475][ T7460] ? lock_chain_count+0x20/0x20 [ 258.684300][ T7460] ? read_lock_is_recursive+0x10/0x10 [ 258.689649][ T7460] ? __local_bh_enable_ip+0x12a/0x1b0 [ 258.695012][ T7460] ? lockdep_hardirqs_on+0x94/0x140 [ 258.700188][ T7460] ? __local_bh_enable_ip+0x12a/0x1b0 [ 258.705562][ T7460] ? _local_bh_enable+0xa0/0xa0 [ 258.710388][ T7460] lock_sock_nested+0x44/0x100 [ 258.715137][ T7460] ? ax25_device_event+0x217/0x4f0 [ 258.720223][ T7460] ax25_device_event+0x217/0x4f0 [ 258.725153][ T7460] raw_notifier_call_chain+0xcb/0x160 [ 258.730501][ T7460] __dev_notify_flags+0x178/0x2d0 [ 258.735503][ T7460] ? __dev_change_flags+0x6a0/0x6a0 [ 258.740673][ T7460] ? __dev_change_flags+0x4bb/0x6a0 [ 258.745847][ T7460] ? dev_get_flags+0x1c0/0x1c0 [ 258.750589][ T7460] ? dev_ioctl+0x54e/0xe50 [ 258.754982][ T7460] ? dev_ioctl+0x54e/0xe50 [ 258.759378][ T7460] dev_change_flags+0xe3/0x1a0 [ 258.764120][ T7460] dev_ifsioc+0x147/0xe70 [ 258.768428][ T7460] ? dev_ioctl+0xe50/0xe50 [ 258.772829][ T7460] ? apparmor_capable+0x12c/0x190 [ 258.777832][ T7460] ? full_name_hash+0x8e/0xe0 [ 258.782487][ T7460] dev_ioctl+0x55f/0xe50 [ 258.786738][ T7460] ? _copy_from_user+0x111/0x170 [ 258.791650][ T7460] sock_do_ioctl+0x222/0x2f0 [ 258.796223][ T7460] ? sock_show_fdinfo+0xb0/0xb0 [ 258.801066][ T7460] sock_ioctl+0x4ed/0x6e0 [ 258.805373][ T7460] ? sock_poll+0x3f0/0x3f0 [ 258.809768][ T7460] ? bpf_lsm_file_ioctl+0x5/0x10 [ 258.814684][ T7460] ? security_file_ioctl+0x7c/0xa0 [ 258.819775][ T7460] ? sock_poll+0x3f0/0x3f0 [ 258.824170][ T7460] __se_sys_ioctl+0xfa/0x170 [ 258.828737][ T7460] do_syscall_64+0x4c/0xa0 [ 258.833133][ T7460] ? clear_bhb_loop+0x30/0x80 [ 258.837784][ T7460] ? clear_bhb_loop+0x30/0x80 [ 258.842441][ T7460] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 258.848316][ T7460] RIP: 0033:0x7fdf42c2bbe9 [ 258.852722][ T7460] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 258.872421][ T7460] RSP: 002b:00007fdf40e93038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 258.880816][ T7460] RAX: ffffffffffffffda RBX: 00007fdf42e62fa0 RCX: 00007fdf42c2bbe9 [ 258.888772][ T7460] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000005 [ 258.896724][ T7460] RBP: 00007fdf42caee19 R08: 0000000000000000 R09: 0000000000000000 [ 258.904675][ T7460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 258.912624][ T7460] R13: 00007fdf42e63038 R14: 00007fdf42e62fa0 R15: 00007ffeb148ac18 [ 258.920576][ T7460] [ 259.165725][ T7460] ================================================================== [ 259.173817][ T7460] BUG: KASAN: use-after-free in ax25_dev_device_down+0x35e/0x520 [ 259.181538][ T7460] Write of size 4 at addr ffff888019b949b8 by task syz.3.912/7460 [ 259.189332][ T7460] [ 259.191644][ T7460] CPU: 1 PID: 7460 Comm: syz.3.912 Not tainted syzkaller #0 [ 259.198920][ T7460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 259.209000][ T7460] Call Trace: [ 259.212273][ T7460] [ 259.215194][ T7460] dump_stack_lvl+0x168/0x230 [ 259.219866][ T7460] ? show_regs_print_info+0x20/0x20 [ 259.225051][ T7460] ? load_image+0x3b0/0x3b0 [ 259.229540][ T7460] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 259.234903][ T7460] print_address_description+0x60/0x2d0 [ 259.240438][ T7460] ? ax25_dev_device_down+0x35e/0x520 [ 259.245795][ T7460] kasan_report+0xdf/0x130 [ 259.250200][ T7460] ? ax25_dev_device_down+0x35e/0x520 [ 259.255560][ T7460] ? kfree+0xef/0x2a0 [ 259.259529][ T7460] kasan_check_range+0x27b/0x290 [ 259.264465][ T7460] ax25_dev_device_down+0x35e/0x520 [ 259.269654][ T7460] ax25_device_event+0x4b4/0x4f0 [ 259.274582][ T7460] raw_notifier_call_chain+0xcb/0x160 [ 259.279943][ T7460] __dev_notify_flags+0x178/0x2d0 [ 259.284957][ T7460] ? __dev_change_flags+0x6a0/0x6a0 [ 259.290139][ T7460] ? __dev_change_flags+0x4bb/0x6a0 [ 259.295327][ T7460] ? dev_get_flags+0x1c0/0x1c0 [ 259.300076][ T7460] ? dev_ioctl+0x54e/0xe50 [ 259.304490][ T7460] ? dev_ioctl+0x54e/0xe50 [ 259.308906][ T7460] dev_change_flags+0xe3/0x1a0 [ 259.313662][ T7460] dev_ifsioc+0x147/0xe70 [ 259.317984][ T7460] ? dev_ioctl+0xe50/0xe50 [ 259.322394][ T7460] ? apparmor_capable+0x12c/0x190 [ 259.327495][ T7460] ? full_name_hash+0x8e/0xe0 [ 259.332169][ T7460] dev_ioctl+0x55f/0xe50 [ 259.336405][ T7460] ? _copy_from_user+0x111/0x170 [ 259.341329][ T7460] sock_do_ioctl+0x222/0x2f0 [ 259.345909][ T7460] ? sock_show_fdinfo+0xb0/0xb0 [ 259.350755][ T7460] sock_ioctl+0x4ed/0x6e0 [ 259.355076][ T7460] ? sock_poll+0x3f0/0x3f0 [ 259.359484][ T7460] ? bpf_lsm_file_ioctl+0x5/0x10 [ 259.364406][ T7460] ? security_file_ioctl+0x7c/0xa0 [ 259.369502][ T7460] ? sock_poll+0x3f0/0x3f0 [ 259.373904][ T7460] __se_sys_ioctl+0xfa/0x170 [ 259.378482][ T7460] do_syscall_64+0x4c/0xa0 [ 259.382883][ T7460] ? clear_bhb_loop+0x30/0x80 [ 259.387545][ T7460] ? clear_bhb_loop+0x30/0x80 [ 259.392219][ T7460] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 259.398099][ T7460] RIP: 0033:0x7fdf42c2bbe9 [ 259.402500][ T7460] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 259.422090][ T7460] RSP: 002b:00007fdf40e93038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 259.430697][ T7460] RAX: ffffffffffffffda RBX: 00007fdf42e62fa0 RCX: 00007fdf42c2bbe9 [ 259.438664][ T7460] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000005 [ 259.446627][ T7460] RBP: 00007fdf42caee19 R08: 0000000000000000 R09: 0000000000000000 [ 259.454588][ T7460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 259.462548][ T7460] R13: 00007fdf42e63038 R14: 00007fdf42e62fa0 R15: 00007ffeb148ac18 [ 259.470517][ T7460] [ 259.473520][ T7460] [ 259.475834][ T7460] Allocated by task 7460: [ 259.480142][ T7460] __kasan_kmalloc+0xb5/0xf0 [ 259.484722][ T7460] ax25_dev_device_up+0x50/0x580 [ 259.489645][ T7460] ax25_device_event+0x483/0x4f0 [ 259.494574][ T7460] raw_notifier_call_chain+0xcb/0x160 [ 259.499943][ T7460] __dev_notify_flags+0x178/0x2d0 [ 259.505054][ T7460] dev_change_flags+0xe3/0x1a0 [ 259.509810][ T7460] dev_ifsioc+0x147/0xe70 [ 259.514135][ T7460] dev_ioctl+0x55f/0xe50 [ 259.518373][ T7460] sock_do_ioctl+0x222/0x2f0 [ 259.522955][ T7460] sock_ioctl+0x4ed/0x6e0 [ 259.527269][ T7460] __se_sys_ioctl+0xfa/0x170 [ 259.531843][ T7460] do_syscall_64+0x4c/0xa0 [ 259.536241][ T7460] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 259.542118][ T7460] [ 259.544424][ T7460] Freed by task 7460: [ 259.548383][ T7460] kasan_set_track+0x4b/0x70 [ 259.552960][ T7460] kasan_set_free_info+0x1f/0x40 [ 259.557882][ T7460] ____kasan_slab_free+0xd5/0x110 [ 259.562895][ T7460] slab_free_freelist_hook+0xea/0x170 [ 259.568254][ T7460] kfree+0xef/0x2a0 [ 259.572046][ T7460] ax25_dev_device_down+0x1c0/0x520 [ 259.577229][ T7460] ax25_device_event+0x4b4/0x4f0 [ 259.582149][ T7460] raw_notifier_call_chain+0xcb/0x160 [ 259.587506][ T7460] __dev_notify_flags+0x178/0x2d0 [ 259.592519][ T7460] dev_change_flags+0xe3/0x1a0 [ 259.597265][ T7460] dev_ifsioc+0x147/0xe70 [ 259.601577][ T7460] dev_ioctl+0x55f/0xe50 [ 259.605802][ T7460] sock_do_ioctl+0x222/0x2f0 [ 259.610381][ T7460] sock_ioctl+0x4ed/0x6e0 [ 259.614696][ T7460] __se_sys_ioctl+0xfa/0x170 [ 259.619269][ T7460] do_syscall_64+0x4c/0xa0 [ 259.623668][ T7460] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 259.629558][ T7460] [ 259.631862][ T7460] Last potentially related work creation: [ 259.637553][ T7460] kasan_save_stack+0x35/0x60 [ 259.642210][ T7460] kasan_record_aux_stack+0xb8/0x100 [ 259.647482][ T7460] call_rcu+0x182/0x930 [ 259.651618][ T7460] inetdev_event+0x771/0x1360 [ 259.656280][ T7460] raw_notifier_call_chain+0xcb/0x160 [ 259.661635][ T7460] unregister_netdevice_many+0xf57/0x18f0 [ 259.667337][ T7460] sit_exit_batch_net+0x498/0x4e0 [ 259.672345][ T7460] cleanup_net+0x77b/0xb80 [ 259.676744][ T7460] process_one_work+0x863/0x1000 [ 259.681674][ T7460] worker_thread+0xaa8/0x12a0 [ 259.686333][ T7460] kthread+0x436/0x520 [ 259.690383][ T7460] ret_from_fork+0x1f/0x30 [ 259.694781][ T7460] [ 259.697085][ T7460] Second to last potentially related work creation: [ 259.703646][ T7460] kasan_save_stack+0x35/0x60 [ 259.708307][ T7460] kasan_record_aux_stack+0xb8/0x100 [ 259.713577][ T7460] insert_work+0x54/0x3d0 [ 259.717889][ T7460] __queue_work+0x9c5/0xd50 [ 259.722373][ T7460] queue_work_on+0x11d/0x1d0 [ 259.726946][ T7460] netdevice_event+0x803/0x900 [ 259.731693][ T7460] raw_notifier_call_chain+0xcb/0x160 [ 259.737049][ T7460] __dev_notify_flags+0x178/0x2d0 [ 259.742055][ T7460] dev_change_flags+0xe3/0x1a0 [ 259.746801][ T7460] dev_ifsioc+0x147/0xe70 [ 259.751115][ T7460] dev_ioctl+0x55f/0xe50 [ 259.755343][ T7460] sock_do_ioctl+0x222/0x2f0 [ 259.759916][ T7460] sock_ioctl+0x4ed/0x6e0 [ 259.764227][ T7460] __se_sys_ioctl+0xfa/0x170 [ 259.768803][ T7460] do_syscall_64+0x4c/0xa0 [ 259.773201][ T7460] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 259.779078][ T7460] [ 259.781382][ T7460] The buggy address belongs to the object at ffff888019b94900 [ 259.781382][ T7460] which belongs to the cache kmalloc-192 of size 192 [ 259.795503][ T7460] The buggy address is located 184 bytes inside of [ 259.795503][ T7460] 192-byte region [ffff888019b94900, ffff888019b949c0) [ 259.808760][ T7460] The buggy address belongs to the page: [ 259.814379][ T7460] page:ffffea000066e500 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x19b94 [ 259.824510][ T7460] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 259.832052][ T7460] raw: 00fff00000000200 ffffea000087c500 0000000500000005 ffff888016841a00 [ 259.840620][ T7460] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 259.849177][ T7460] page dumped because: kasan: bad access detected [ 259.855574][ T7460] page_owner tracks the page as allocated [ 259.861267][ T7460] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 1, ts 2201793512, free_ts 0 [ 259.876092][ T7460] get_page_from_freelist+0x1b77/0x1c60 [ 259.881630][ T7460] __alloc_pages+0x1e1/0x470 [ 259.886220][ T7460] alloc_page_interleave+0x24/0x1e0 [ 259.891421][ T7460] new_slab+0xc0/0x4b0 [ 259.895515][ T7460] ___slab_alloc+0x81e/0xdf0 [ 259.900129][ T7460] kmem_cache_alloc_trace+0x1a5/0x2a0 [ 259.905502][ T7460] call_usermodehelper_setup+0x8a/0x260 [ 259.911049][ T7460] kobject_uevent_env+0x65e/0x890 [ 259.916069][ T7460] kernel_add_sysfs_param+0xfb/0x120 [ 259.921349][ T7460] param_sysfs_builtin+0x164/0x1e0 [ 259.926549][ T7460] param_sysfs_init+0x66/0x70 [ 259.931224][ T7460] do_one_initcall+0x1ee/0x680 [ 259.935984][ T7460] do_initcall_level+0x137/0x1f0 [ 259.940917][ T7460] do_initcalls+0x4b/0x90 [ 259.945247][ T7460] kernel_init_freeable+0x3ce/0x560 [ 259.950443][ T7460] kernel_init+0x19/0x1b0 [ 259.954775][ T7460] page_owner free stack trace missing [ 259.960172][ T7460] [ 259.962482][ T7460] Memory state around the buggy address: [ 259.968108][ T7460] ffff888019b94880: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 259.976251][ T7460] ffff888019b94900: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 259.984285][ T7460] >ffff888019b94980: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 259.992315][ T7460] ^ [ 259.998176][ T7460] ffff888019b94a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 260.006207][ T7460] ffff888019b94a80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 260.014237][ T7460] ================================================================== [ 260.023539][ T7460] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 260.030748][ T7460] CPU: 0 PID: 7460 Comm: syz.3.912 Tainted: G B syzkaller #0 [ 260.039425][ T7460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 260.049488][ T7460] Call Trace: [ 260.052748][ T7460] [ 260.055659][ T7460] dump_stack_lvl+0x168/0x230 [ 260.060318][ T7460] ? show_regs_print_info+0x20/0x20 [ 260.065497][ T7460] ? load_image+0x3b0/0x3b0 [ 260.069996][ T7460] panic+0x2c9/0x7f0 [ 260.073870][ T7460] ? bpf_jit_dump+0xd0/0xd0 [ 260.078353][ T7460] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 260.084224][ T7460] ? _raw_spin_unlock+0x40/0x40 [ 260.089056][ T7460] ? ax25_dev_device_down+0x35e/0x520 [ 260.094413][ T7460] check_panic_on_warn+0x80/0xa0 [ 260.099357][ T7460] ? ax25_dev_device_down+0x35e/0x520 [ 260.104709][ T7460] end_report+0x6d/0xf0 [ 260.108847][ T7460] kasan_report+0x102/0x130 [ 260.113328][ T7460] ? ax25_dev_device_down+0x35e/0x520 [ 260.118677][ T7460] ? kfree+0xef/0x2a0 [ 260.122655][ T7460] kasan_check_range+0x27b/0x290 [ 260.127570][ T7460] ax25_dev_device_down+0x35e/0x520 [ 260.132750][ T7460] ax25_device_event+0x4b4/0x4f0 [ 260.137686][ T7460] raw_notifier_call_chain+0xcb/0x160 [ 260.143037][ T7460] __dev_notify_flags+0x178/0x2d0 [ 260.148040][ T7460] ? __dev_change_flags+0x6a0/0x6a0 [ 260.153219][ T7460] ? __dev_change_flags+0x4bb/0x6a0 [ 260.158391][ T7460] ? dev_get_flags+0x1c0/0x1c0 [ 260.163132][ T7460] ? dev_ioctl+0x54e/0xe50 [ 260.167525][ T7460] ? dev_ioctl+0x54e/0xe50 [ 260.171923][ T7460] dev_change_flags+0xe3/0x1a0 [ 260.176680][ T7460] dev_ifsioc+0x147/0xe70 [ 260.180990][ T7460] ? dev_ioctl+0xe50/0xe50 [ 260.185381][ T7460] ? apparmor_capable+0x12c/0x190 [ 260.190378][ T7460] ? full_name_hash+0x8e/0xe0 [ 260.195031][ T7460] dev_ioctl+0x55f/0xe50 [ 260.199252][ T7460] ? _copy_from_user+0x111/0x170 [ 260.204172][ T7460] sock_do_ioctl+0x222/0x2f0 [ 260.208760][ T7460] ? sock_show_fdinfo+0xb0/0xb0 [ 260.213592][ T7460] sock_ioctl+0x4ed/0x6e0 [ 260.217898][ T7460] ? sock_poll+0x3f0/0x3f0 [ 260.222309][ T7460] ? bpf_lsm_file_ioctl+0x5/0x10 [ 260.227225][ T7460] ? security_file_ioctl+0x7c/0xa0 [ 260.232338][ T7460] ? sock_poll+0x3f0/0x3f0 [ 260.236733][ T7460] __se_sys_ioctl+0xfa/0x170 [ 260.241309][ T7460] do_syscall_64+0x4c/0xa0 [ 260.245702][ T7460] ? clear_bhb_loop+0x30/0x80 [ 260.250354][ T7460] ? clear_bhb_loop+0x30/0x80 [ 260.255007][ T7460] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 260.260884][ T7460] RIP: 0033:0x7fdf42c2bbe9 [ 260.265285][ T7460] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 260.285063][ T7460] RSP: 002b:00007fdf40e93038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 260.293482][ T7460] RAX: ffffffffffffffda RBX: 00007fdf42e62fa0 RCX: 00007fdf42c2bbe9 [ 260.301440][ T7460] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000005 [ 260.309421][ T7460] RBP: 00007fdf42caee19 R08: 0000000000000000 R09: 0000000000000000 [ 260.317377][ T7460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 260.325333][ T7460] R13: 00007fdf42e63038 R14: 00007fdf42e62fa0 R15: 00007ffeb148ac18 [ 260.333301][ T7460] [ 260.336533][ T7460] Kernel Offset: disabled [ 260.340851][ T7460] Rebooting in 86400 seconds..