last executing test programs: 3.213876047s ago: executing program 0 (id=1): socket$igmp6(0xa, 0x3, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0xc0189436, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2710, &(0x7f0000032580)=""/102396, &(0x7f0000000000)=0x18ffc) 2.875355214s ago: executing program 3 (id=4): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x39011, 0x0) 2.868949324s ago: executing program 1 (id=6): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x4cfb}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x29) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000005000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) userfaultfd(0x801) 2.58254164s ago: executing program 1 (id=7): r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0xffffff5d}, 0x1c) listen(r0, 0x50) sendmsg$inet(r0, &(0x7f00000019c0)={&(0x7f0000000340)={0x2, 0x4e20, @remote}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000380)="8c", 0x1}], 0x1}, 0x4000) 2.484130532s ago: executing program 2 (id=3): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$rxrpc(0x21, 0x2, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = getpid() kcmp$KCMP_EPOLL_TFD(r3, r3, 0x7, 0xffffffffffffffff, &(0x7f0000000380)) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000340)={r4, r4, 0x8, 0x0, 0x0, 0x9, 0x1, 0xc45, 0x1012, 0xc7, 0x2, 0x7, 'syz0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d8000100000000000000000000000080012000200020000000000000000000600320003000000000020000000000010003300000000000000000000000000fc0200"/80], 0x80}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) 2.415428253s ago: executing program 4 (id=5): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x41, 0x8000, 0x0, 0xb49, 0x9, 0xc, 0x0, 0x3}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xb, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800122657ba9474d62400000000000095000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 2.031514771s ago: executing program 0 (id=8): bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x6e20, @broadcast}, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x9}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0x4000d4, 0x146, 0x61, 0x200002000001, 0x80000000, 0x2004c8, 0x0, 0x0, 0x36ae, 0x5, 0x5, 0x3, 0x400000000], 0x80a0000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.662493548s ago: executing program 0 (id=9): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_exit\x00', r0, 0x0, 0xbe}, 0x18) open(&(0x7f00009e1000)='./file0\x00', 0x48062, 0x0) link(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='./file1\x00') 1.652356128s ago: executing program 1 (id=10): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) r0 = socket(0x2, 0x80805, 0x0) open(0x0, 0x14507e, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getpriority(0x2, 0x0) getuid() mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 1.55360108s ago: executing program 0 (id=11): socket$netlink(0x10, 0x3, 0x10) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000013c0)={0x0, 0x3, 0x4, {0x5, @raw_data="ccfd30c81d0567a3509746496064a650db6ef560021f5495d39f62440e6ef61bfca3218e250c9d3883f817daabac3f99b238f3ae932f1022c1ed4a6495054cfdea70eae19a0070a6a5acdba93bbd32d1cc6a8d72d3b91445c8276acc116a18c6e45c7fd5869718dd53361c43b1e87e091bf9f421d3685968ef61bfd84ff2d454175deea505f995d1aed2a8bbc9683e29f9630245c8524d7728239963b50840bcd22d4d721777dfde0ebd044e4aa39c14dcca5ad4dfbb87978000"}, 0x5}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20008b}, 0x0) r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r0, &(0x7f0000000180)=ANY=[@ANYBLOB='SYNTH \'Mic\' 00000000000000000000\nIGAIN \'Capture Volume\' 0'], 0x86) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) dup3(r1, r0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) brk(0xd1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r2, &(0x7f000001aa40)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000084000000060a010400000000000000000100000008000b40000000005c0004802c000180090001007866726d000000001c0002800800024000000004050003000000000008000140000000092c00018008000100636d7000200002800c00038005000100ac000000080001400000000c08000240000000000900010073797a300000000014000000110001"], 0xf8}, 0x1, 0x0, 0x0, 0x40010}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x20000000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000040) 518.33574ms ago: executing program 0 (id=12): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0xa, 0x3, 0x3a) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000340)={'pim6reg\x00', 0x2}) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) syz_emit_ethernet(0x56, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040f610100039108"], 0x7) shmctl$SHM_INFO(0x0, 0xe, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f00000001c0), 0xa00, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x200000, @empty, 0x1}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x14, 0x2, 0x8, 0x3, 0x0, 0x0, {0xa, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x10) 517.86667ms ago: executing program 1 (id=13): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x1c000) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f00000001c0)={0x4000000, 0x2}) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000040)={0x4000000}) close_range(r0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$unix(0x1, 0x5, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$unix(0x1, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newsa={0x20c, 0x10, 0x100, 0x70bd2c, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x43}, @in=@local, 0x4e23, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, {@in6=@remote, 0x0, 0x32}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x0, 0x1, 0x8, 0x100000001, 0x6}, {0x0, 0x0, 0x2, 0xfffffffffffffffc}, {0xc}, 0x70bd29, 0x0, 0x2}, [@algo_aead={0x11e, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x690, 0x80, "c4c47ffe947f9bedceb1fd6f7deb280b72f9552bdb77d528c814e5c9428da78f8db9930ea4b1c29b40fb4e5b5e675462bdd4200368fa1cba392bb6d3ed4b835307d1e66ca55d745255c5c0b5570b149c434070c5e41bc5515f9e621c3947faf4f8d659bfa42bfff9c4f1e7dd7c4c9be6a65d99de68b6ad3403ffbffa5ab1c606e40b3a748f0a00000090571e3ad618f06e5a5b99fda3478e5ef6189fc90675ecd7f43b8fbcb7179b467ba88fec5b64d29cf9e3b15d82666872bdc78815d37c0b9afc1e0b6c0ef1ad5c86d5a6e5f938da5e23"}}]}, 0x20c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffffffff, 0x0, &(0x7f0000000540)=0x2) lseek(r4, 0xa, 0x4) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x17) userfaultfd(0x801) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x1) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000480), 0x1, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) 199.554606ms ago: executing program 1 (id=14): socket$pppl2tp(0x18, 0x1, 0x1) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, 0x0) r0 = io_uring_setup(0x177f, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xfffffffd}) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x1, 0x0) fcntl$setpipe(r1, 0x408, 0x7) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=15): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r2, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.30' (ED25519) to the list of known hosts. [ 51.281967][ T4172] cgroup: Unknown subsys name 'net' [ 51.415861][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 52.743613][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 54.593148][ T4197] chnl_net:caif_netlink_parms(): no params data found [ 54.637901][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 54.661759][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 54.686736][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 54.747489][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 54.784076][ T4197] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.791773][ T4197] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.799580][ T4197] device bridge_slave_0 entered promiscuous mode [ 54.829256][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.836553][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.844675][ T4190] device bridge_slave_0 entered promiscuous mode [ 54.852533][ T4197] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.859581][ T4197] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.867457][ T4197] device bridge_slave_1 entered promiscuous mode [ 54.889311][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.896532][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.904488][ T4190] device bridge_slave_1 entered promiscuous mode [ 54.924010][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.931331][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.939012][ T4188] device bridge_slave_0 entered promiscuous mode [ 54.969856][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.977042][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.985064][ T4188] device bridge_slave_1 entered promiscuous mode [ 54.999029][ T4197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.010121][ T4197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.042124][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.063408][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.070464][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.078305][ T4183] device bridge_slave_0 entered promiscuous mode [ 55.095112][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.111618][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.120889][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.127916][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.136205][ T4183] device bridge_slave_1 entered promiscuous mode [ 55.143171][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.150216][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.158290][ T4182] device bridge_slave_0 entered promiscuous mode [ 55.174997][ T4197] team0: Port device team_slave_0 added [ 55.182804][ T4197] team0: Port device team_slave_1 added [ 55.189812][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.210564][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.217978][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.225920][ T4182] device bridge_slave_1 entered promiscuous mode [ 55.255953][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.281541][ T4190] team0: Port device team_slave_0 added [ 55.296053][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.307202][ T4188] team0: Port device team_slave_0 added [ 55.321579][ T4190] team0: Port device team_slave_1 added [ 55.328742][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.338843][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.345928][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.372920][ T4197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.391188][ T4188] team0: Port device team_slave_1 added [ 55.411836][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.422191][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.429146][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.455236][ T4197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.468455][ T4183] team0: Port device team_slave_0 added [ 55.498190][ T4183] team0: Port device team_slave_1 added [ 55.518901][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.526345][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.552375][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.573633][ T4182] team0: Port device team_slave_0 added [ 55.587487][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.594527][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.620550][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.638175][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.645652][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.671850][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.694651][ T4182] team0: Port device team_slave_1 added [ 55.707920][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.714912][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.740991][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.752561][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.759530][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.786335][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.817476][ T4197] device hsr_slave_0 entered promiscuous mode [ 55.824203][ T4197] device hsr_slave_1 entered promiscuous mode [ 55.831661][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.838603][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.864661][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.897549][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.904707][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.931147][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.943147][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.950092][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.976397][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.989533][ T4190] device hsr_slave_0 entered promiscuous mode [ 55.996474][ T4190] device hsr_slave_1 entered promiscuous mode [ 56.003308][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.011202][ T4190] Cannot create hsr debugfs directory [ 56.059071][ T4188] device hsr_slave_0 entered promiscuous mode [ 56.066014][ T4188] device hsr_slave_1 entered promiscuous mode [ 56.072788][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.080345][ T4188] Cannot create hsr debugfs directory [ 56.102052][ T4183] device hsr_slave_0 entered promiscuous mode [ 56.108736][ T4183] device hsr_slave_1 entered promiscuous mode [ 56.115753][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.123507][ T4183] Cannot create hsr debugfs directory [ 56.201097][ T4182] device hsr_slave_0 entered promiscuous mode [ 56.207738][ T4182] device hsr_slave_1 entered promiscuous mode [ 56.217464][ T4182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.225669][ T4182] Cannot create hsr debugfs directory [ 56.321518][ T4198] Bluetooth: hci1: command 0x0409 tx timeout [ 56.321636][ T4185] Bluetooth: hci3: command 0x0409 tx timeout [ 56.328114][ T4198] Bluetooth: hci0: command 0x0409 tx timeout [ 56.334090][ T4185] Bluetooth: hci2: command 0x0409 tx timeout [ 56.410962][ T1107] Bluetooth: hci4: command 0x0409 tx timeout [ 56.464293][ T4188] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.474594][ T4188] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.484708][ T4188] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.496374][ T4188] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.528247][ T4197] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 56.539389][ T4197] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 56.551446][ T4197] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 56.560519][ T4197] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 56.625076][ T4183] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 56.646626][ T4183] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 56.670492][ T4183] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 56.681076][ T4183] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 56.700452][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.733253][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.743836][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.752476][ T4182] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 56.771082][ T4182] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 56.783244][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.804252][ T4182] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 56.814860][ T4182] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 56.824490][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.837392][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.846433][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.853664][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.878148][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.887458][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.896868][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.906399][ T3038] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.913477][ T3038] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.943312][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.952091][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.967349][ T4190] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 56.976598][ T4190] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 56.997126][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.007249][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.016184][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.025136][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.033948][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.043063][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.052276][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.060621][ T4190] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 57.069249][ T4190] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 57.095030][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.106962][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.127350][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.136159][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.155059][ T4197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.171319][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.179093][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.194878][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.205462][ T4197] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.244483][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.257306][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.267749][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.276775][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.285921][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.292993][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.301002][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.315944][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.326343][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.336578][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.345356][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.352444][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.368578][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.413237][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.426419][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.436056][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.447650][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.456331][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.463426][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.471855][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.480336][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.489082][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.496153][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.505116][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.514132][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.525524][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.534341][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.543524][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.555318][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.572776][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.580579][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.588635][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.600417][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.609115][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.617651][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.629898][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.639997][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.650544][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.659020][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.667413][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.680358][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.699236][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.716607][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.725197][ T4197] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.738278][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.746828][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.755972][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.764737][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.786991][ T4183] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 57.798182][ T4183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.816990][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.826081][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.842868][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.857314][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.866071][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.873161][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.881204][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.889497][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.898089][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.907072][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.915494][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.922586][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.936550][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.944570][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.952585][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.962750][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.979290][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.992079][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.000547][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.024662][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.035415][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.074866][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.083267][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.094192][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.103429][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.112768][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.121399][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.128743][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.137303][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.146092][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.154628][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.164013][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.172606][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.179786][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.187422][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.196711][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.205633][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.215480][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.225206][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.240543][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.249704][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.262286][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.307083][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.324535][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.339189][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.348043][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.362384][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.372001][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.380416][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.388516][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.396207][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.404769][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.409707][ T4232] Bluetooth: hci2: command 0x041b tx timeout [ 58.412737][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.418706][ T4232] Bluetooth: hci0: command 0x041b tx timeout [ 58.437347][ T4232] Bluetooth: hci3: command 0x041b tx timeout [ 58.437917][ T4190] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 58.443749][ T4232] Bluetooth: hci1: command 0x041b tx timeout [ 58.461597][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.478334][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.487787][ T4188] device veth0_vlan entered promiscuous mode [ 58.494733][ T1324] Bluetooth: hci4: command 0x041b tx timeout [ 58.510159][ T4197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.521964][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.530298][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.540422][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.555396][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.567007][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.574858][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.583207][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.606489][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.621448][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.647266][ T4188] device veth1_vlan entered promiscuous mode [ 58.673046][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.692358][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.708186][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.734746][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.757054][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.776432][ T4183] device veth0_vlan entered promiscuous mode [ 58.790524][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.799809][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.822512][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.830290][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.839014][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.848342][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.863741][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.872524][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.900074][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.910107][ T4183] device veth1_vlan entered promiscuous mode [ 58.926945][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.936811][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.944672][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.956873][ T4182] device veth0_vlan entered promiscuous mode [ 58.964096][ T4188] device veth0_macvtap entered promiscuous mode [ 58.974504][ T4188] device veth1_macvtap entered promiscuous mode [ 58.986879][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.995620][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.004512][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.012801][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.022028][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.030241][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.038091][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.058339][ T4182] device veth1_vlan entered promiscuous mode [ 59.092342][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.099824][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.109299][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.118069][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.126997][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.135839][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.145160][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.156283][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.164957][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.178097][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.187110][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.199532][ T4183] device veth0_macvtap entered promiscuous mode [ 59.215176][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.232556][ T4188] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.242712][ T4188] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.252319][ T4188] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.261868][ T4188] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.272725][ T4183] device veth1_macvtap entered promiscuous mode [ 59.279935][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.289200][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.297230][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.305878][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.319728][ T4182] device veth0_macvtap entered promiscuous mode [ 59.335914][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.345210][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.354797][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.365242][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.374685][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.383142][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.392072][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.400004][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.408010][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.416060][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.423817][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.447435][ T4197] device veth0_vlan entered promiscuous mode [ 59.455541][ T4190] device veth0_vlan entered promiscuous mode [ 59.467387][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.480515][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.493250][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.503974][ T4182] device veth1_macvtap entered promiscuous mode [ 59.529474][ T4197] device veth1_vlan entered promiscuous mode [ 59.537954][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.547464][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.556768][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.565536][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.576604][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.587301][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.600840][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.632017][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.640331][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.649288][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.658986][ T4183] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.668144][ T4183] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.677229][ T4183] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.688421][ T4183] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.704403][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.713579][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.725641][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.736222][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.747119][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.757713][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.769559][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.803447][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.813241][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.825034][ T4190] device veth1_vlan entered promiscuous mode [ 59.836328][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.847528][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.857994][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.868604][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.879796][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.893012][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.895960][ T4182] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.910224][ T4182] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.914696][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.919620][ T4182] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.940559][ T4182] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.961572][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.970105][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.979409][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.996774][ T4197] device veth0_macvtap entered promiscuous mode [ 60.045165][ T4197] device veth1_macvtap entered promiscuous mode [ 60.063349][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.074471][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.105123][ T4190] device veth0_macvtap entered promiscuous mode [ 60.115936][ T4225] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.125497][ T4225] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.156840][ T4190] device veth1_macvtap entered promiscuous mode [ 60.165987][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.169793][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.174393][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.193995][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.203956][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.214641][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.224538][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.235640][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.246832][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.254693][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.263570][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.272087][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.279922][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.287941][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.296616][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.319593][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.332171][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.342318][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.352845][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.363040][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.373541][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.383460][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.394149][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.406824][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.418846][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.429639][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.440198][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.450663][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.461564][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.472221][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.482702][ T1324] Bluetooth: hci1: command 0x040f tx timeout [ 60.488828][ T1324] Bluetooth: hci3: command 0x040f tx timeout [ 60.495544][ T1324] Bluetooth: hci0: command 0x040f tx timeout [ 60.503433][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.506805][ T1324] Bluetooth: hci2: command 0x040f tx timeout [ 60.521998][ T4190] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.536269][ T4190] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.545648][ T4190] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.559476][ T4190] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.569919][ T1324] Bluetooth: hci4: command 0x040f tx timeout [ 60.589193][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.598795][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.609118][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.618453][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.628178][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.640204][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.652741][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.663202][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.673488][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.684583][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.694492][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.704963][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.716116][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.751107][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.753249][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.759060][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.773361][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.817738][ T4225] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.832493][ T4225] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.845937][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.854334][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.868952][ T4197] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.878822][ T4197] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.889055][ T4197] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.898154][ T4197] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.939705][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.994100][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.013882][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.092400][ T4298] binder: 4297:4298 unknown command 0 [ 61.097841][ T4298] binder: 4297:4298 ioctl c0306201 200000000080 returned -22 [ 61.168875][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.200159][ T4225] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.202675][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.242523][ T4225] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.282001][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.318350][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.323039][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.350337][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.366189][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.381826][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.392826][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.459267][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.065414][ T4321] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 62.403333][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 62.412259][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 62.460743][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 62.563779][ T4332] fuse: Bad value for 'fd' [ 62.641248][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 62.650251][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 62.659360][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 62.668366][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 62.677399][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 62.686416][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 62.695532][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 63.285082][ T1324] Bluetooth: hci2: command 0x0419 tx timeout [ 63.390567][ T1324] Bluetooth: hci0: command 0x0419 tx timeout [ 63.420268][ T1324] Bluetooth: hci3: command 0x0419 tx timeout [ 63.506438][ T1324] Bluetooth: hci1: command 0x0419 tx timeout [ 63.570315][ T1324] Bluetooth: hci4: command 0x0419 tx timeout [ 64.080376][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 64.132476][ T4348] [ 64.134841][ T4348] ====================================================== [ 64.141841][ T4348] WARNING: possible circular locking dependency detected [ 64.148844][ T4348] syzkaller #0 Not tainted [ 64.153238][ T4348] ------------------------------------------------------ [ 64.160240][ T4348] syz.1.15/4348 is trying to acquire lock: [ 64.166041][ T4348] ffff88807e36f120 (sk_lock-AF_AX25){+.+.}-{0:0}, at: ax25_device_event+0x217/0x4f0 [ 64.175426][ T4348] [ 64.175426][ T4348] but task is already holding lock: [ 64.182768][ T4348] ffffffff8d238048 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x54e/0xe50 [ 64.191018][ T4348] [ 64.191018][ T4348] which lock already depends on the new lock. [ 64.191018][ T4348] [ 64.201413][ T4348] [ 64.201413][ T4348] the existing dependency chain (in reverse order) is: [ 64.210420][ T4348] [ 64.210420][ T4348] -> #1 (rtnl_mutex){+.+.}-{3:3}: [ 64.217622][ T4348] __mutex_lock_common+0x1eb/0x2390 [ 64.223339][ T4348] mutex_lock_nested+0x17/0x20 [ 64.228618][ T4348] ax25_setsockopt+0x830/0xa40 [ 64.233889][ T4348] __sys_setsockopt+0x2bf/0x3d0 [ 64.239271][ T4348] __x64_sys_setsockopt+0xb1/0xc0 [ 64.244804][ T4348] do_syscall_64+0x4c/0xa0 [ 64.249739][ T4348] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 64.256137][ T4348] [ 64.256137][ T4348] -> #0 (sk_lock-AF_AX25){+.+.}-{0:0}: [ 64.263786][ T4348] __lock_acquire+0x2c33/0x7c60 [ 64.269150][ T4348] lock_acquire+0x197/0x3f0 [ 64.274159][ T4348] lock_sock_nested+0x44/0x100 [ 64.279429][ T4348] ax25_device_event+0x217/0x4f0 [ 64.284874][ T4348] raw_notifier_call_chain+0xcb/0x160 [ 64.290761][ T4348] __dev_notify_flags+0x178/0x2d0 [ 64.296306][ T4348] dev_change_flags+0xe3/0x1a0 [ 64.301583][ T4348] dev_ifsioc+0x147/0xe70 [ 64.306424][ T4348] dev_ioctl+0x55f/0xe50 [ 64.311286][ T4348] sock_do_ioctl+0x222/0x2f0 [ 64.316390][ T4348] sock_ioctl+0x4ed/0x6e0 [ 64.321230][ T4348] __se_sys_ioctl+0xfa/0x170 [ 64.326330][ T4348] do_syscall_64+0x4c/0xa0 [ 64.331254][ T4348] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 64.337657][ T4348] [ 64.337657][ T4348] other info that might help us debug this: [ 64.337657][ T4348] [ 64.347870][ T4348] Possible unsafe locking scenario: [ 64.347870][ T4348] [ 64.355306][ T4348] CPU0 CPU1 [ 64.360657][ T4348] ---- ---- [ 64.366012][ T4348] lock(rtnl_mutex); [ 64.369981][ T4348] lock(sk_lock-AF_AX25); [ 64.376905][ T4348] lock(rtnl_mutex); [ 64.383394][ T4348] lock(sk_lock-AF_AX25); [ 64.387801][ T4348] [ 64.387801][ T4348] *** DEADLOCK *** [ 64.387801][ T4348] [ 64.395930][ T4348] 1 lock held by syz.1.15/4348: [ 64.400764][ T4348] #0: ffffffff8d238048 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x54e/0xe50 [ 64.409459][ T4348] [ 64.409459][ T4348] stack backtrace: [ 64.415341][ T4348] CPU: 1 PID: 4348 Comm: syz.1.15 Not tainted syzkaller #0 [ 64.422523][ T4348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 64.432570][ T4348] Call Trace: [ 64.435836][ T4348] [ 64.438784][ T4348] dump_stack_lvl+0x168/0x230 [ 64.443453][ T4348] ? load_image+0x3b0/0x3b0 [ 64.447946][ T4348] ? show_regs_print_info+0x20/0x20 [ 64.453135][ T4348] ? print_circular_bug+0x12b/0x1a0 [ 64.458319][ T4348] check_noncircular+0x274/0x310 [ 64.463242][ T4348] ? add_chain_block+0x940/0x940 [ 64.468164][ T4348] ? lockdep_lock+0xdc/0x1e0 [ 64.472744][ T4348] ? lockdep_unlock+0x134/0x2d0 [ 64.477583][ T4348] ? mark_lock+0x94/0x320 [ 64.481899][ T4348] __lock_acquire+0x2c33/0x7c60 [ 64.486744][ T4348] ? lock_chain_count+0x20/0x20 [ 64.491599][ T4348] ? mark_lock+0x94/0x320 [ 64.495933][ T4348] ? verify_lock_unused+0x140/0x140 [ 64.501124][ T4348] ? verify_lock_unused+0x140/0x140 [ 64.506311][ T4348] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 64.512281][ T4348] ? lockdep_hardirqs_on_prepare+0x760/0x760 [ 64.518250][ T4348] ? __local_bh_enable_ip+0x12a/0x1b0 [ 64.523624][ T4348] ? mark_lock+0x94/0x320 [ 64.527943][ T4348] lock_acquire+0x197/0x3f0 [ 64.532437][ T4348] ? ax25_device_event+0x217/0x4f0 [ 64.537530][ T4348] ? lock_chain_count+0x20/0x20 [ 64.542454][ T4348] ? read_lock_is_recursive+0x10/0x10 [ 64.547811][ T4348] ? __local_bh_enable_ip+0x12a/0x1b0 [ 64.553168][ T4348] ? lockdep_hardirqs_on+0x94/0x140 [ 64.558354][ T4348] ? __local_bh_enable_ip+0x12a/0x1b0 [ 64.563723][ T4348] ? _local_bh_enable+0xa0/0xa0 [ 64.568558][ T4348] lock_sock_nested+0x44/0x100 [ 64.573311][ T4348] ? ax25_device_event+0x217/0x4f0 [ 64.578410][ T4348] ax25_device_event+0x217/0x4f0 [ 64.583334][ T4348] raw_notifier_call_chain+0xcb/0x160 [ 64.588695][ T4348] __dev_notify_flags+0x178/0x2d0 [ 64.593709][ T4348] ? __dev_change_flags+0x6a0/0x6a0 [ 64.598911][ T4348] ? __dev_change_flags+0x4bb/0x6a0 [ 64.604103][ T4348] ? dev_get_flags+0x1c0/0x1c0 [ 64.608859][ T4348] ? dev_ioctl+0x54e/0xe50 [ 64.613266][ T4348] ? dev_ioctl+0x54e/0xe50 [ 64.617670][ T4348] dev_change_flags+0xe3/0x1a0 [ 64.622425][ T4348] dev_ifsioc+0x147/0xe70 [ 64.626751][ T4348] ? dev_ioctl+0xe50/0xe50 [ 64.631191][ T4348] ? apparmor_capable+0x12c/0x190 [ 64.636241][ T4348] ? full_name_hash+0x8e/0xe0 [ 64.640919][ T4348] dev_ioctl+0x55f/0xe50 [ 64.645166][ T4348] ? _copy_from_user+0x111/0x170 [ 64.650093][ T4348] sock_do_ioctl+0x222/0x2f0 [ 64.654675][ T4348] ? sock_show_fdinfo+0xb0/0xb0 [ 64.659514][ T4348] sock_ioctl+0x4ed/0x6e0 [ 64.663826][ T4348] ? sock_poll+0x3f0/0x3f0 [ 64.668234][ T4348] ? bpf_lsm_file_ioctl+0x5/0x10 [ 64.673160][ T4348] ? security_file_ioctl+0x7c/0xa0 [ 64.678254][ T4348] ? sock_poll+0x3f0/0x3f0 [ 64.682653][ T4348] __se_sys_ioctl+0xfa/0x170 [ 64.687231][ T4348] do_syscall_64+0x4c/0xa0 [ 64.691634][ T4348] ? clear_bhb_loop+0x30/0x80 [ 64.696309][ T4348] ? clear_bhb_loop+0x30/0x80 [ 64.700970][ T4348] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 64.706857][ T4348] RIP: 0033:0x7fc462de4ba9 [ 64.711258][ T4348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.730849][ T4348] RSP: 002b:00007fc46104c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 64.739242][ T4348] RAX: ffffffffffffffda RBX: 00007fc46302bfa0 RCX: 00007fc462de4ba9 [ 64.747203][ T4348] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000004 [ 64.755162][ T4348] RBP: 00007fc462e67e19 R08: 0000000000000000 R09: 0000000000000000 [ 64.763118][ T4348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 64.771073][ T4348] R13: 00007fc46302c038 R14: 00007fc46302bfa0 R15: 00007fff650fecb8 [ 64.779122][ T4348] [ 64.782159][ C1] vkms_vblank_simulate: vblank timer overrun [ 64.872202][ T4348] ================================================================== [ 64.880285][ T4348] BUG: KASAN: use-after-free in ax25_dev_device_down+0x35e/0x520 [ 64.887994][ T4348] Write of size 4 at addr ffff88801e7c88b8 by task syz.1.15/4348 [ 64.895693][ T4348] [ 64.898004][ T4348] CPU: 0 PID: 4348 Comm: syz.1.15 Not tainted syzkaller #0 [ 64.905181][ T4348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 64.915223][ T4348] Call Trace: [ 64.918490][ T4348] [ 64.921409][ T4348] dump_stack_lvl+0x168/0x230 [ 64.926091][ T4348] ? show_regs_print_info+0x20/0x20 [ 64.931275][ T4348] ? load_image+0x3b0/0x3b0 [ 64.935761][ T4348] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 64.941135][ T4348] print_address_description+0x60/0x2d0 [ 64.946681][ T4348] ? ax25_dev_device_down+0x35e/0x520 [ 64.952037][ T4348] kasan_report+0xdf/0x130 [ 64.956445][ T4348] ? ax25_dev_device_down+0x35e/0x520 [ 64.961803][ T4348] ? kfree+0xef/0x2a0 [ 64.965771][ T4348] kasan_check_range+0x27b/0x290 [ 64.970695][ T4348] ax25_dev_device_down+0x35e/0x520 [ 64.975894][ T4348] ax25_device_event+0x4b4/0x4f0 [ 64.980820][ T4348] raw_notifier_call_chain+0xcb/0x160 [ 64.986176][ T4348] __dev_notify_flags+0x178/0x2d0 [ 64.991190][ T4348] ? __dev_change_flags+0x6a0/0x6a0 [ 64.996392][ T4348] ? __dev_change_flags+0x4bb/0x6a0 [ 65.001576][ T4348] ? dev_get_flags+0x1c0/0x1c0 [ 65.006324][ T4348] ? dev_ioctl+0x54e/0xe50 [ 65.010737][ T4348] ? dev_ioctl+0x54e/0xe50 [ 65.015152][ T4348] dev_change_flags+0xe3/0x1a0 [ 65.019905][ T4348] dev_ifsioc+0x147/0xe70 [ 65.024229][ T4348] ? dev_ioctl+0xe50/0xe50 [ 65.028628][ T4348] ? apparmor_capable+0x12c/0x190 [ 65.033639][ T4348] ? full_name_hash+0x8e/0xe0 [ 65.038311][ T4348] dev_ioctl+0x55f/0xe50 [ 65.042558][ T4348] ? _copy_from_user+0x111/0x170 [ 65.047486][ T4348] sock_do_ioctl+0x222/0x2f0 [ 65.052064][ T4348] ? sock_show_fdinfo+0xb0/0xb0 [ 65.056904][ T4348] sock_ioctl+0x4ed/0x6e0 [ 65.061221][ T4348] ? sock_poll+0x3f0/0x3f0 [ 65.065626][ T4348] ? bpf_lsm_file_ioctl+0x5/0x10 [ 65.070546][ T4348] ? security_file_ioctl+0x7c/0xa0 [ 65.075641][ T4348] ? sock_poll+0x3f0/0x3f0 [ 65.080042][ T4348] __se_sys_ioctl+0xfa/0x170 [ 65.084625][ T4348] do_syscall_64+0x4c/0xa0 [ 65.089029][ T4348] ? clear_bhb_loop+0x30/0x80 [ 65.093696][ T4348] ? clear_bhb_loop+0x30/0x80 [ 65.098356][ T4348] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 65.104238][ T4348] RIP: 0033:0x7fc462de4ba9 [ 65.108646][ T4348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.128246][ T4348] RSP: 002b:00007fc46104c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 65.136656][ T4348] RAX: ffffffffffffffda RBX: 00007fc46302bfa0 RCX: 00007fc462de4ba9 [ 65.144615][ T4348] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000004 [ 65.152573][ T4348] RBP: 00007fc462e67e19 R08: 0000000000000000 R09: 0000000000000000 [ 65.160529][ T4348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 65.168485][ T4348] R13: 00007fc46302c038 R14: 00007fc46302bfa0 R15: 00007fff650fecb8 [ 65.176450][ T4348] [ 65.179456][ T4348] [ 65.181764][ T4348] Allocated by task 4348: [ 65.186071][ T4348] __kasan_kmalloc+0xb5/0xf0 [ 65.190678][ T4348] ax25_dev_device_up+0x50/0x580 [ 65.195618][ T4348] ax25_device_event+0x483/0x4f0 [ 65.200561][ T4348] raw_notifier_call_chain+0xcb/0x160 [ 65.205935][ T4348] __dev_notify_flags+0x178/0x2d0 [ 65.210956][ T4348] dev_change_flags+0xe3/0x1a0 [ 65.215719][ T4348] dev_ifsioc+0x147/0xe70 [ 65.220119][ T4348] dev_ioctl+0x55f/0xe50 [ 65.224343][ T4348] sock_do_ioctl+0x222/0x2f0 [ 65.228915][ T4348] sock_ioctl+0x4ed/0x6e0 [ 65.233226][ T4348] __se_sys_ioctl+0xfa/0x170 [ 65.237801][ T4348] do_syscall_64+0x4c/0xa0 [ 65.242198][ T4348] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 65.248076][ T4348] [ 65.250386][ T4348] Freed by task 4348: [ 65.254345][ T4348] kasan_set_track+0x4b/0x70 [ 65.258957][ T4348] kasan_set_free_info+0x1f/0x40 [ 65.263879][ T4348] ____kasan_slab_free+0xd5/0x110 [ 65.268889][ T4348] slab_free_freelist_hook+0xea/0x170 [ 65.274262][ T4348] kfree+0xef/0x2a0 [ 65.278052][ T4348] ax25_dev_device_down+0x1c0/0x520 [ 65.283233][ T4348] ax25_device_event+0x4b4/0x4f0 [ 65.288154][ T4348] raw_notifier_call_chain+0xcb/0x160 [ 65.293516][ T4348] __dev_notify_flags+0x178/0x2d0 [ 65.298541][ T4348] dev_change_flags+0xe3/0x1a0 [ 65.303284][ T4348] dev_ifsioc+0x147/0xe70 [ 65.307599][ T4348] dev_ioctl+0x55f/0xe50 [ 65.311828][ T4348] sock_do_ioctl+0x222/0x2f0 [ 65.316403][ T4348] sock_ioctl+0x4ed/0x6e0 [ 65.320717][ T4348] __se_sys_ioctl+0xfa/0x170 [ 65.325306][ T4348] do_syscall_64+0x4c/0xa0 [ 65.329703][ T4348] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 65.335578][ T4348] [ 65.337885][ T4348] The buggy address belongs to the object at ffff88801e7c8800 [ 65.337885][ T4348] which belongs to the cache kmalloc-192 of size 192 [ 65.351921][ T4348] The buggy address is located 184 bytes inside of [ 65.351921][ T4348] 192-byte region [ffff88801e7c8800, ffff88801e7c88c0) [ 65.365181][ T4348] The buggy address belongs to the page: [ 65.370815][ T4348] page:ffffea000079f200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1e7c8 [ 65.380967][ T4348] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 65.388504][ T4348] raw: 00fff00000000200 dead000000000100 dead000000000122 ffff888016841a00 [ 65.397074][ T4348] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 65.405657][ T4348] page dumped because: kasan: bad access detected [ 65.412062][ T4348] page_owner tracks the page as allocated [ 65.417765][ T4348] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 4342, ts 63836530703, free_ts 63744946317 [ 65.433720][ T4348] get_page_from_freelist+0x1b77/0x1c60 [ 65.439261][ T4348] __alloc_pages+0x1e1/0x470 [ 65.443840][ T4348] new_slab+0xb6/0x4b0 [ 65.447899][ T4348] ___slab_alloc+0x81e/0xdf0 [ 65.452480][ T4348] __kmalloc_node+0x200/0x3b0 [ 65.457140][ T4348] memcg_alloc_page_obj_cgroups+0x81/0x120 [ 65.462933][ T4348] slab_post_alloc_hook+0xba/0x380 [ 65.468066][ T4348] kmem_cache_alloc+0x100/0x290 [ 65.472916][ T4348] __d_alloc+0x2a/0x6f0 [ 65.477077][ T4348] d_alloc+0x47/0x1a0 [ 65.481046][ T4348] lookup_one_qstr_excl+0xc6/0x240 [ 65.486142][ T4348] filename_create+0x21e/0x450 [ 65.490889][ T4348] do_symlinkat+0xb3/0x6c0 [ 65.495289][ T4348] __x64_sys_symlinkat+0x95/0xa0 [ 65.500214][ T4348] do_syscall_64+0x4c/0xa0 [ 65.504626][ T4348] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 65.510501][ T4348] page last free stack trace: [ 65.515152][ T4348] free_unref_page_prepare+0x637/0x6c0 [ 65.520598][ T4348] free_unref_page+0x94/0x280 [ 65.525260][ T4348] __unfreeze_partials+0x1a5/0x200 [ 65.530360][ T4348] put_cpu_partial+0x12d/0x190 [ 65.535106][ T4348] qlist_free_all+0x35/0x90 [ 65.539595][ T4348] kasan_quarantine_reduce+0x150/0x160 [ 65.545057][ T4348] __kasan_slab_alloc+0x2f/0xd0 [ 65.549888][ T4348] slab_post_alloc_hook+0x4c/0x380 [ 65.554979][ T4348] __kmalloc_node+0x15a/0x3b0 [ 65.559645][ T4348] kvmalloc_node+0x84/0x130 [ 65.564127][ T4348] alloc_netdev_mqs+0x84/0xc40 [ 65.568876][ T4348] mif6_add+0x400/0xc20 [ 65.573013][ T4348] ip6_mroute_setsockopt+0xf85/0x11e0 [ 65.578374][ T4348] ipv6_setsockopt+0x42a/0x3890 [ 65.583210][ T4348] rawv6_setsockopt+0x263/0x620 [ 65.588045][ T4348] __sys_setsockopt+0x2bf/0x3d0 [ 65.592886][ T4348] [ 65.595196][ T4348] Memory state around the buggy address: [ 65.600833][ T4348] ffff88801e7c8780: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 65.608886][ T4348] ffff88801e7c8800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 65.616947][ T4348] >ffff88801e7c8880: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 65.625007][ T4348] ^ [ 65.630878][ T4348] ffff88801e7c8900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 65.638924][ T4348] ffff88801e7c8980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 65.646990][ T4348] ================================================================== [ 65.837826][ T4348] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 65.845044][ T4348] CPU: 0 PID: 4348 Comm: syz.1.15 Tainted: G B syzkaller #0 [ 65.853617][ T4348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 65.863674][ T4348] Call Trace: [ 65.866939][ T4348] [ 65.869857][ T4348] dump_stack_lvl+0x168/0x230 [ 65.874522][ T4348] ? show_regs_print_info+0x20/0x20 [ 65.879730][ T4348] ? load_image+0x3b0/0x3b0 [ 65.884224][ T4348] panic+0x2c9/0x7f0 [ 65.888109][ T4348] ? bpf_jit_dump+0xd0/0xd0 [ 65.892601][ T4348] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 65.898496][ T4348] ? _raw_spin_unlock+0x40/0x40 [ 65.903334][ T4348] ? ax25_dev_device_down+0x35e/0x520 [ 65.908690][ T4348] check_panic_on_warn+0x80/0xa0 [ 65.913616][ T4348] ? ax25_dev_device_down+0x35e/0x520 [ 65.918984][ T4348] end_report+0x6d/0xf0 [ 65.923127][ T4348] kasan_report+0x102/0x130 [ 65.927631][ T4348] ? ax25_dev_device_down+0x35e/0x520 [ 65.932984][ T4348] ? kfree+0xef/0x2a0 [ 65.936951][ T4348] kasan_check_range+0x27b/0x290 [ 65.941875][ T4348] ax25_dev_device_down+0x35e/0x520 [ 65.947061][ T4348] ax25_device_event+0x4b4/0x4f0 [ 65.951982][ T4348] raw_notifier_call_chain+0xcb/0x160 [ 65.957339][ T4348] __dev_notify_flags+0x178/0x2d0 [ 65.962349][ T4348] ? __dev_change_flags+0x6a0/0x6a0 [ 65.967531][ T4348] ? __dev_change_flags+0x4bb/0x6a0 [ 65.972720][ T4348] ? dev_get_flags+0x1c0/0x1c0 [ 65.977469][ T4348] ? dev_ioctl+0x54e/0xe50 [ 65.981876][ T4348] ? dev_ioctl+0x54e/0xe50 [ 65.986301][ T4348] dev_change_flags+0xe3/0x1a0 [ 65.991056][ T4348] dev_ifsioc+0x147/0xe70 [ 65.995372][ T4348] ? dev_ioctl+0xe50/0xe50 [ 65.999775][ T4348] ? apparmor_capable+0x12c/0x190 [ 66.004785][ T4348] ? full_name_hash+0x8e/0xe0 [ 66.009451][ T4348] dev_ioctl+0x55f/0xe50 [ 66.013681][ T4348] ? _copy_from_user+0x111/0x170 [ 66.018606][ T4348] sock_do_ioctl+0x222/0x2f0 [ 66.023182][ T4348] ? sock_show_fdinfo+0xb0/0xb0 [ 66.028023][ T4348] sock_ioctl+0x4ed/0x6e0 [ 66.032336][ T4348] ? sock_poll+0x3f0/0x3f0 [ 66.036741][ T4348] ? bpf_lsm_file_ioctl+0x5/0x10 [ 66.041663][ T4348] ? security_file_ioctl+0x7c/0xa0 [ 66.046763][ T4348] ? sock_poll+0x3f0/0x3f0 [ 66.051162][ T4348] __se_sys_ioctl+0xfa/0x170 [ 66.055737][ T4348] do_syscall_64+0x4c/0xa0 [ 66.060134][ T4348] ? clear_bhb_loop+0x30/0x80 [ 66.064793][ T4348] ? clear_bhb_loop+0x30/0x80 [ 66.069452][ T4348] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 66.075331][ T4348] RIP: 0033:0x7fc462de4ba9 [ 66.079733][ T4348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.099327][ T4348] RSP: 002b:00007fc46104c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 66.107734][ T4348] RAX: ffffffffffffffda RBX: 00007fc46302bfa0 RCX: 00007fc462de4ba9 [ 66.115700][ T4348] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000004 [ 66.123661][ T4348] RBP: 00007fc462e67e19 R08: 0000000000000000 R09: 0000000000000000 [ 66.131625][ T4348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 66.139607][ T4348] R13: 00007fc46302c038 R14: 00007fc46302bfa0 R15: 00007fff650fecb8 [ 66.147576][ T4348] [ 66.150897][ T4348] Kernel Offset: disabled [ 66.155229][ T4348] Rebooting in 86400 seconds..