last executing test programs: 4.254022939s ago: executing program 2 (id=849): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="70000000ffffffffffffaaaaaaaaaabb08004500"], 0xfdef) 3.942116905s ago: executing program 2 (id=854): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x800000000006}, 0x18) syz_emit_ethernet(0x66, 0x0, 0x0) syz_emit_ethernet(0x1000e, &(0x7f0000000080)=ANY=[], 0x0) 3.825695817s ago: executing program 2 (id=856): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2, 0x0, {}, 0xfd}, 0x18) connect$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x0, {0x0, 0xf0, 0x2}, 0xfe}, 0x18) sendmsg$can_j1939(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e00)={&(0x7f0000000980)='sys_exit\x00', r3}, 0x10) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r5) socket$netlink(0x10, 0x3, 0x4) close(0x4) r6 = bpf$ITER_CREATE(0xb, &(0x7f00000000c0)={r4}, 0x14) write$cgroup_int(r6, &(0x7f00000001c0), 0xfffffdef) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) sendmsg$ETHTOOL_MSG_FEATURES_GET(r6, 0x0, 0x8004) 3.782392898s ago: executing program 2 (id=857): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000740)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000001fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000009a5ab6e10c00000000000000040000000000000000000000000000000000000000000000ffffffffffffffff000000000020000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008000000000000000001000000000000004400050000000000000000000000000000000000000000003c00000002000000ffffffff0002000000000000000000000600000004010000"], 0xfc}}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x432, @loopback, 0xb}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x10, &(0x7f0000000140)=0x5, 0x4) sendto$inet6(r1, &(0x7f0000000040)="3898", 0x2, 0x1400c894, 0x0, 0x0) 3.617662731s ago: executing program 2 (id=859): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @func, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96}, 0x20) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000002000000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r1, 0xd8, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) 3.437435934s ago: executing program 2 (id=865): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x2}, 0x18) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000340)=ANY=[@ANYRES16, @ANYRES32, @ANYBLOB="67f48fd0dc64eb9da54aeb1e3604470c5322b8094632923c469beea4244656bb328489c7cffa75a56b4086ca3cb0"], 0x30}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f00000000c0)="1c721c3eba50892646093830c21739b7bd", 0x11) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r1, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4040801}, 0x20008840) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) recvmmsg(r1, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x3ffffffffffff2e, 0x1000400000de, 0x0) 2.1136913s ago: executing program 4 (id=885): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000100)="89e73d5521fe62a3b47380c988ca4b5e", 0x10}, {&(0x7f0000000540)="60827ec40346450101cd0583dcd1035dcc5068fda1f698768c301fb92422ebd84ef781", 0x23}, {&(0x7f0000000080)="ae01c8", 0x3}], 0x3) 2.10352872s ago: executing program 3 (id=886): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e000000040000000800"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='contention_end\x00', r1}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000140)="2e9b5b00070ed3e03dd65193dfb6c575963f86dd606712e90032040003000000013e9c6d30ba44c068586dbd753c000000eaebfd2607", 0x27}, {&(0x7f0000000100)="b700"/12, 0xc}, {&(0x7f0000000040), 0x5}, {&(0x7f0000000040)="3de496b26cb156fc17de651bb0059979575c10b71057fbfd852720c6e5289eca40ab309686d254294c897675e9545fd0c4559f374d", 0x35}, {&(0x7f00000001c0)="42569e24e088cf56a9bb2f2ad9cb95ec1c0bf4d6aa16b931209947fc55a13ccabe2774b4c08430f730e97576c072cad2d2fc782f45884ed5998c7cd3f2d2e7fb992e994dd2ccdf8e78182bb603f17fec26bbf743506dee0e121c25018347e315820defb195585ed4a08482fa5b982a989cbe"}, {&(0x7f0000000280)="da9e11b5cdcb2aa5a2928c2c7208a8cd9ff31b8700d7c0a2f59093f99db10f4eb6de4823036b570d3b4e49e3a7e82c2ceca1b8fe72840d8d2c95810bcd61a361d4d5ecb54356e5669cde20b2af4243be92b5533f5036e41a88fe0bb69f9d9a70f524a45d5bb4bd75bd416c4410c99aba391de283839032302c542e6a2b93f6dc5b6a17093b4d9c0cc66cd22f13030187632815cf48d2422a5c3407a1b72ed9d59258dbafeebd"}, {0x0}, {&(0x7f0000000340)="2ce06e71ac3f5c5980c1b529901ac8307bbde18620b55c321ff60def4b31399bacb7540deeece3bc214b662648a021e8b6663fd356ac742a4ebe2b71ab853244d8c84ec68b8ae418d8a00b79b53efc736d3df53078ed62bd59f9c87c62"}], 0x49) 1.634083239s ago: executing program 3 (id=891): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x11}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/60}]}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f0000001b00)=""/118}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f00000014c0)=""/101}, {&(0x7f0000001780)=""/171}], 0x0, &(0x7f00000018c0)=""/176}}], 0x15cbc1ab4c0933f, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) unshare(0x20400) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) 1.633940039s ago: executing program 4 (id=892): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0xfffd, 0x0, @empty}, 0x1c) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x400c050}, 0x50) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) connect$rds(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a0000000000000000005b0008000400", @ANYRES32=r2, @ANYBLOB="06001500070000000c0016800800", @ANYRES64], 0x38}}, 0x10) 1.477618272s ago: executing program 4 (id=894): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x9dfa, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x1}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, 0x0) unshare(0x6a060000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) accept(r1, 0x0, &(0x7f0000000200)) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) connect(r1, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1.369531914s ago: executing program 0 (id=898): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="030000000400000004000000b5"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000180)="c1dfb080cd21d308098ee68886dd", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.209738958s ago: executing program 1 (id=899): r0 = socket$rds(0x15, 0x5, 0x0) unshare(0x2c020400) setsockopt$RDS_RECVERR(r0, 0x114, 0x5, 0x0, 0x0) 1.114878829s ago: executing program 1 (id=900): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x40000}, [@call={0x85, 0x0, 0x0, 0x7b}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000080)=r2, 0x4) write$tun(r0, &(0x7f0000003880)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, 'Ii3', 0x44, 0x2f, 0xff, @loopback, @dev={0xfe, 0x80, '\x00', 0x33}, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x8, 0x88be, 0x2, {{0x9, 0x1, 0x9, 0x0, 0x1, 0x3, 0x0, 0xb}, 0x1, {0xfffffeca}}}, {0x8, 0x22eb, 0x1, {{0xd, 0x2, 0x3, 0x2, 0x1, 0x0, 0x1, 0x1}, 0x2, {0xed, 0x1, 0x2, 0x4, 0x1, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x4}}}}}}, 0x7a) 1.07675159s ago: executing program 0 (id=901): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000240)={0xa0000004}) 869.681474ms ago: executing program 1 (id=902): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x1feffe}, {{0x0, 0x0, 0x0}, 0x1000005}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000003e00)=""/4098, 0x1002}, {&(0x7f0000000540)=""/229, 0xe5}, {&(0x7f00000002c0)=""/34, 0x22}, {&(0x7f0000000480)=""/100, 0x64}, {&(0x7f0000000900)=""/230, 0xe6}, {&(0x7f0000000a00)=""/206, 0xce}, {&(0x7f00000003c0)=""/133, 0x85}, {&(0x7f0000000800)=""/187, 0xbb}, {&(0x7f0000000740)=""/163, 0xa3}, {&(0x7f0000000dc0)=""/150, 0x96}], 0xa}, 0x101}], 0x4, 0x40010022, 0x0) 838.954865ms ago: executing program 0 (id=903): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000080)={0x1, 0xfffa, 0x4, 0x4, 0x3, 0xb2, 0x5}, 0xc) connect$bt_l2cap(r0, &(0x7f0000000700)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}, 0xe) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8008}, 0x884) 773.435556ms ago: executing program 1 (id=904): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='veno', 0x54) sendmmsg$inet(r0, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000ac0)="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", 0x843}], 0x1}}], 0x1, 0x40) 686.252587ms ago: executing program 3 (id=905): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x1, {0x0, 0xf0, 0x4}}, 0x18) sendmmsg$inet(r2, &(0x7f0000003b80)=[{{&(0x7f0000000280)={0x2, 0x4e23, @local}, 0x10, 0x0}}], 0x1, 0x80) 685.575677ms ago: executing program 1 (id=906): socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000740)={r3, 0xffffffffffffffff, 0x39, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x7fff, 0x0, 0x1}}, 0x40) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r6, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) listen(r6, 0x200204) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a98000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) pipe(&(0x7f0000000080)={0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000040)=[{&(0x7f00000003c0)="89a25031b0f94f0cd90348a0d21ee413fa36ee8608f0844238e86d19f73752712e44cf133f8e6f0d32d614bbc3926a2e37f261021dd991c941e3e6f1f3856cc68dfe41ae7eaf23ba91d8cbfbb99cae9c90c9dcac5cf843794592a5d408bd312d70e145a62181e3aaa9c243d775a318fc99b7", 0x72}, {&(0x7f0000000480)="b21b824db48cb6a14779dcb79214c546b4f4728c976c59e106ff28ecffa91b2e68bd67bf9882d6939c7c4e4727f8d8979ce9bb883f9213faf51834517bed4d0bfc521236439a9e127fdb471c239215fcfc4dd80b3e53f4cb004d8328aaa6b41d237e66", 0x63}, {&(0x7f0000002c40)="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", 0xf9f}], 0x3, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x4, &(0x7f0000000d80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x697, 0x0, 0x0, 0x0, 0xb}, [@func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 617.608129ms ago: executing program 0 (id=907): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0xf, 0x0, 0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 570.92604ms ago: executing program 4 (id=908): unshare(0x2c020400) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 526.62442ms ago: executing program 3 (id=909): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x403, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20101}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x87cb}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}]}, 0x44}, 0x1, 0xba01}, 0x810) 329.595124ms ago: executing program 4 (id=910): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) connect$pppoe(r1, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x80805, 0x0) shutdown(0xffffffffffffffff, 0x0) r3 = socket(0x840000000002, 0x3, 0xfa) sendmmsg$inet(r3, &(0x7f0000002e40)=[{{&(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10, 0x0}}, {{&(0x7f00000029c0)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, 0x0, 0x0, &(0x7f0000002c80)=ANY=[], 0x178}}], 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newtfilter={0x60, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xf}, {}, {0x1, 0xfff3}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x30, 0x2, [@TCA_CGROUP_EMATCHES={0x2c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0xb, 0x1, 0x0, 0x0, {{0xff, 0x2, 0x1}, {0xfff8, 0x0, 0x2}}}, @TCF_EM_CONTAINER={0xc, 0x3, 0x0, 0x0, {{0x7, 0x0, 0xc}}}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x81}, 0x800) 329.466654ms ago: executing program 3 (id=911): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xc}, 0x48) unshare(0x2040400) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) 277.384195ms ago: executing program 1 (id=912): pipe(&(0x7f0000000740)={0xffffffffffffffff}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800), r1) ioctl$FICLONERANGE(r0, 0x4020940d, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, 0x0, 0x8, 0x2}}) 272.677565ms ago: executing program 0 (id=913): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000005c0)) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 145.586148ms ago: executing program 3 (id=914): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00') unshare(0x6a040000) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000140)={0x34, r1, 0xf1aad47e89fb43b5, 0x0, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) 118.783758ms ago: executing program 0 (id=915): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3}, 0xa) shutdown(r0, 0x1) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r4 = socket(0x2, 0x3, 0xff) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r4) bind$ax25(r3, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x40) 0s ago: executing program 4 (id=916): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='veno', 0x54) sendmmsg$inet(r0, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000ac0)="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", 0x843}], 0x1}}], 0x1, 0x40) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.74' (ED25519) to the list of known hosts. [ 57.366545][ T4171] cgroup: Unknown subsys name 'net' [ 57.498780][ T4171] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 58.996902][ T4171] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 60.369406][ T4196] chnl_net:caif_netlink_parms(): no params data found [ 60.462794][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 60.524027][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 60.591874][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.599862][ T4196] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.608588][ T4196] device bridge_slave_0 entered promiscuous mode [ 60.616913][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 60.635996][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 60.648179][ T4196] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.655414][ T4196] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.663518][ T4196] device bridge_slave_1 entered promiscuous mode [ 60.710637][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.717808][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.725798][ T4182] device bridge_slave_0 entered promiscuous mode [ 60.755120][ T4196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.764732][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.771808][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.779821][ T4182] device bridge_slave_1 entered promiscuous mode [ 60.806208][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.813422][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.821399][ T4183] device bridge_slave_0 entered promiscuous mode [ 60.830437][ T4196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.867909][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.875163][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.883412][ T4183] device bridge_slave_1 entered promiscuous mode [ 60.892931][ T4196] team0: Port device team_slave_0 added [ 60.922989][ T4196] team0: Port device team_slave_1 added [ 60.938557][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.967270][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.978263][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.017310][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.041763][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.049151][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.057305][ T4187] device bridge_slave_0 entered promiscuous mode [ 61.066161][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.073283][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.099366][ T4196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.121193][ T4182] team0: Port device team_slave_0 added [ 61.127498][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.134652][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.142967][ T4190] device bridge_slave_0 entered promiscuous mode [ 61.150361][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.157656][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.166027][ T4187] device bridge_slave_1 entered promiscuous mode [ 61.174065][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.181129][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.207122][ T4196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.225512][ T4182] team0: Port device team_slave_1 added [ 61.234215][ T4183] team0: Port device team_slave_0 added [ 61.240243][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.247401][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.255874][ T4190] device bridge_slave_1 entered promiscuous mode [ 61.289154][ T4183] team0: Port device team_slave_1 added [ 61.310630][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.329886][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.336932][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.363094][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.383416][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.394024][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.411798][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.418890][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.445449][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.465039][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.505190][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.512228][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.538538][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.572330][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.579384][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.605352][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.618914][ T4190] team0: Port device team_slave_0 added [ 61.627139][ T4187] team0: Port device team_slave_0 added [ 61.645082][ T4196] device hsr_slave_0 entered promiscuous mode [ 61.651826][ T4196] device hsr_slave_1 entered promiscuous mode [ 61.663261][ T4190] team0: Port device team_slave_1 added [ 61.670378][ T4187] team0: Port device team_slave_1 added [ 61.686004][ T4182] device hsr_slave_0 entered promiscuous mode [ 61.693388][ T4182] device hsr_slave_1 entered promiscuous mode [ 61.699955][ T4182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.707807][ T4182] Cannot create hsr debugfs directory [ 61.753003][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.760149][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.786117][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.813162][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.820110][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.846023][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.865831][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.872949][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.899056][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.924969][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.931927][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.958215][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.971730][ T4183] device hsr_slave_0 entered promiscuous mode [ 61.978995][ T4183] device hsr_slave_1 entered promiscuous mode [ 61.985600][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.993491][ T4183] Cannot create hsr debugfs directory [ 62.122887][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 62.129680][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 62.132087][ T1346] Bluetooth: hci3: command 0x0409 tx timeout [ 62.141913][ T1346] Bluetooth: hci2: command 0x0409 tx timeout [ 62.142933][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 62.177654][ T4190] device hsr_slave_0 entered promiscuous mode [ 62.184474][ T4190] device hsr_slave_1 entered promiscuous mode [ 62.190984][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.201510][ T4190] Cannot create hsr debugfs directory [ 62.219218][ T4187] device hsr_slave_0 entered promiscuous mode [ 62.226041][ T4187] device hsr_slave_1 entered promiscuous mode [ 62.232817][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.240387][ T4187] Cannot create hsr debugfs directory [ 62.396935][ T4182] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 62.428373][ T4182] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 62.449597][ T4182] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 62.466467][ T4182] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 62.513609][ T4196] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 62.523138][ T4196] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 62.556092][ T4196] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 62.576303][ T4196] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 62.628153][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.637823][ T4183] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.658134][ T4183] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.678209][ T1207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.687407][ T1207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.696250][ T4183] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.711329][ T4183] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.729033][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.759769][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.768564][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.778214][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.785481][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.804411][ T4190] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.817120][ T4190] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.828308][ T4190] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.839036][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.865536][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.875877][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.885480][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.892582][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.900352][ T4190] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.936550][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.952137][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.964053][ T4187] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 62.975254][ T4187] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 62.985597][ T4187] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 62.995214][ T4187] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 63.034584][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.045081][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.055052][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.067096][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.076122][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.086250][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.102901][ T4196] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.134351][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.143875][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.151524][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.160854][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.170849][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.179325][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.195864][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.204840][ T1207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.215226][ T1207] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.224002][ T1207] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.231081][ T1207] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.242611][ T1207] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.294209][ T1207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.304497][ T1207] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.314450][ T1207] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.321536][ T1207] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.330543][ T1207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.340400][ T1207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.349649][ T1207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.359001][ T1207] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.368305][ T1207] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.390324][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.401772][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.416981][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.449875][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.470877][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.479671][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.500442][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.509177][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.525440][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.538749][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.552381][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.559290][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.568506][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.577156][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.587012][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.595236][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.604495][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.613264][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.620323][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.628608][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.638165][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.669159][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.680724][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.690162][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.699089][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.708896][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.718828][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.729975][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.737122][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.751496][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.760406][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.769620][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.778229][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.786118][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.795190][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.804522][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.811592][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.819350][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.829308][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.840883][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.854594][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.876621][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.888393][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.897604][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.904757][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.913973][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.929130][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.938123][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.945246][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.958231][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.967318][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.977179][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.985867][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.992972][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.001265][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.010383][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.019869][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.053353][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.063386][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.071779][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.086401][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.096130][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.104813][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.113911][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.122362][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.129786][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.137897][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.158010][ T4183] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 64.169517][ T4183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.185812][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.195600][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.204123][ T4239] Bluetooth: hci0: command 0x041b tx timeout [ 64.210454][ T4239] Bluetooth: hci2: command 0x041b tx timeout [ 64.216545][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.217147][ T4239] Bluetooth: hci1: command 0x041b tx timeout [ 64.225660][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.230872][ T4239] Bluetooth: hci3: command 0x041b tx timeout [ 64.244915][ T4239] Bluetooth: hci4: command 0x041b tx timeout [ 64.247668][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.260233][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.268907][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.278243][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.287472][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.296059][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.304231][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.314687][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.323132][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.343598][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.353984][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.362610][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.370887][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.380300][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.389966][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.420457][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.429831][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.452177][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.460934][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.473609][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.482624][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.495074][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.504170][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.531586][ T4196] device veth0_vlan entered promiscuous mode [ 64.548984][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.563006][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.579045][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.595017][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.604531][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.613046][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.637732][ T4196] device veth1_vlan entered promiscuous mode [ 64.655262][ T4182] device veth0_vlan entered promiscuous mode [ 64.717141][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.728421][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.745200][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.753155][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.766131][ T4182] device veth1_vlan entered promiscuous mode [ 64.777586][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.796932][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.807831][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.821709][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.833089][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.844975][ T4196] device veth0_macvtap entered promiscuous mode [ 64.861458][ T4196] device veth1_macvtap entered promiscuous mode [ 64.871918][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.880813][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.889676][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.897496][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.917873][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.929184][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.948377][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.957653][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.968779][ T4182] device veth0_macvtap entered promiscuous mode [ 64.995493][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.004574][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.014083][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.021512][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.029258][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.038063][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.048214][ T4182] device veth1_macvtap entered promiscuous mode [ 65.060321][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.071280][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.098044][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.117985][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.130281][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.141682][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.156110][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.165941][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.178554][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.186588][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.205765][ T4196] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.214809][ T4196] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.223879][ T4196] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.232848][ T4196] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.248240][ T4183] device veth0_vlan entered promiscuous mode [ 65.258706][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.270826][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.286187][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.312451][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.321320][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.331588][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.340613][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.355233][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.365884][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.378106][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.398079][ T4190] device veth0_vlan entered promiscuous mode [ 65.408691][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.417728][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.426722][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.435395][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.452666][ T4182] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.461371][ T4182] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.470568][ T4182] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.489359][ T4182] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.510039][ T4183] device veth1_vlan entered promiscuous mode [ 65.530525][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.539426][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.547672][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.566671][ T4190] device veth1_vlan entered promiscuous mode [ 65.677897][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.687245][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.696383][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.705060][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.727058][ T4183] device veth0_macvtap entered promiscuous mode [ 65.758663][ T4187] device veth0_vlan entered promiscuous mode [ 65.765778][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.774415][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.787581][ T4183] device veth1_macvtap entered promiscuous mode [ 65.795205][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.803924][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.811924][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.821467][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.830326][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.839142][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.848386][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.857294][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.866273][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.877839][ T4190] device veth0_macvtap entered promiscuous mode [ 65.909399][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.922208][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.933354][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.944281][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.956532][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.971076][ T4187] device veth1_vlan entered promiscuous mode [ 65.983585][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.998985][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.006710][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.009703][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.023486][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.024269][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.039364][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.048351][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.058121][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.066255][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.078654][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.089884][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.101068][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.111744][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.124412][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.137516][ T4183] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.146342][ T4183] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.155710][ T4183] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.164909][ T4183] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.180678][ T4190] device veth1_macvtap entered promiscuous mode [ 66.194767][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.203519][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.211518][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.220774][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.257012][ T1207] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.269153][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.280410][ T1207] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.287049][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.299787][ T4245] Bluetooth: hci0: command 0x040f tx timeout [ 66.302220][ T23] Bluetooth: hci4: command 0x040f tx timeout [ 66.309406][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.314576][ T23] Bluetooth: hci3: command 0x040f tx timeout [ 66.323931][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.328307][ T23] Bluetooth: hci1: command 0x040f tx timeout [ 66.338421][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.350807][ T23] Bluetooth: hci2: command 0x040f tx timeout [ 66.355664][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.380210][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.421208][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.439892][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.450631][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.501383][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.518994][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.529573][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.541427][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.551507][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.562308][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.574388][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.585568][ T4187] device veth0_macvtap entered promiscuous mode [ 66.593366][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.605197][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.613991][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.623464][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.654677][ T4187] device veth1_macvtap entered promiscuous mode [ 66.683597][ T4190] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.702767][ T4190] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.720925][ T4190] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.729907][ T4190] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.740612][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.764616][ T4291] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.774292][ T4291] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.787316][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.803599][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.813716][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.824775][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.834699][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.845931][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.856251][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.866964][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.878294][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.897087][ T1207] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.905392][ T1207] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.914853][ T1207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.937905][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.949013][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.959134][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.970531][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.980616][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.991379][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.001581][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.013906][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.025545][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.083801][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.093329][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.117367][ T4187] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.126254][ T4187] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.136672][ T4187] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.145844][ T4187] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.193054][ T1207] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.201042][ T1207] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.264943][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.294055][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.334074][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.358180][ T1207] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.461823][ T1207] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.470582][ T4291] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.479900][ T1207] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.495051][ T4291] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.533321][ T1207] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.547202][ T1207] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.611775][ T4302] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2'. [ 67.633501][ T4291] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.641517][ T4291] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.710537][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.980001][ T4323] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10'. [ 68.156005][ T4329] device syzkaller0 entered promiscuous mode [ 68.377443][ T4300] Bluetooth: hci2: command 0x0419 tx timeout [ 68.386182][ T4300] Bluetooth: hci1: command 0x0419 tx timeout [ 68.404640][ T4300] Bluetooth: hci3: command 0x0419 tx timeout [ 68.414779][ T4300] Bluetooth: hci4: command 0x0419 tx timeout [ 68.428241][ T4300] Bluetooth: hci0: command 0x0419 tx timeout [ 69.514164][ T4386] netlink: 8 bytes leftover after parsing attributes in process `syz.3.33'. [ 69.527496][ T4386] device ip6gretap1 entered promiscuous mode [ 69.542513][ T4385] netlink: 'syz.1.32': attribute type 10 has an invalid length. [ 69.679741][ T4385] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 70.370991][ T4426] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.409594][ T4426] Zero length message leads to an empty skb [ 70.908126][ T4447] device syzkaller1 entered promiscuous mode [ 71.166671][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.173371][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.493499][ T4300] Bluetooth: hci2: command 0x0401 tx timeout [ 71.815415][ T4495] netlink: 12 bytes leftover after parsing attributes in process `syz.2.76'. [ 71.878854][ T4495] device vlan2 entered promiscuous mode [ 71.903166][ T4495] device team0 entered promiscuous mode [ 71.909368][ T4495] device team_slave_0 entered promiscuous mode [ 71.918204][ T4495] device team_slave_1 entered promiscuous mode [ 72.069258][ T4503] netlink: 4 bytes leftover after parsing attributes in process `syz.1.79'. [ 72.588583][ T4528] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 73.044364][ T4546] device syzkaller0 entered promiscuous mode [ 73.903341][ T4584] bridge0: port 3(bond0) entered blocking state [ 73.935232][ T4588] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 73.954604][ T4584] bridge0: port 3(bond0) entered disabled state [ 73.974080][ T4584] device bond0 entered promiscuous mode [ 73.982812][ T4584] device bond_slave_0 entered promiscuous mode [ 73.997987][ T4584] device bond_slave_1 entered promiscuous mode [ 74.008700][ T4584] bridge0: port 3(bond0) entered blocking state [ 74.015346][ T4584] bridge0: port 3(bond0) entered forwarding state [ 74.097954][ T4592] netlink: 'syz.2.111': attribute type 1 has an invalid length. [ 74.358465][ T4607] vxcan0: tx drop: invalid sa for name 0x0000000000000003 [ 74.600335][ T4617] netlink: 'syz.3.121': attribute type 6 has an invalid length. [ 74.805493][ T4621] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 74.857817][ C1] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 75.327052][ T4639] netlink: 20 bytes leftover after parsing attributes in process `syz.2.131'. [ 75.672841][ T4656] netlink: 16 bytes leftover after parsing attributes in process `syz.2.137'. [ 75.720385][ T4645] netlink: 4 bytes leftover after parsing attributes in process `syz.1.134'. [ 75.782579][ T4645] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.903529][ T4645] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 76.149877][ T4670] raw_sendmsg: syz.4.142 forgot to set AF_INET. Fix it! [ 76.278501][ T4674] syz.0.144 uses obsolete (PF_INET,SOCK_PACKET) [ 76.290051][ T4676] netlink: 'syz.2.146': attribute type 1 has an invalid length. [ 76.301234][ T4678] netlink: 828 bytes leftover after parsing attributes in process `syz.4.145'. [ 76.515840][ T4683] netlink: 8 bytes leftover after parsing attributes in process `syz.2.148'. [ 76.614337][ T4692] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 76.738211][ T4700] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 76.757930][ T4699] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge0, syncid = 4, id = 0 [ 77.140560][ T4711] team0 (unregistering): Port device team_slave_0 removed [ 77.246470][ T4711] team0 (unregistering): Port device team_slave_1 removed [ 77.375382][ T4725] netlink: 'syz.2.163': attribute type 10 has an invalid length. [ 77.472435][ T4725] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.508206][ T4725] bond0: (slave team0): Enslaving as an active interface with an up link [ 77.583263][ T4725] syz.2.163 (4725) used greatest stack depth: 20864 bytes left [ 77.774597][ T4748] device bridge0 entered promiscuous mode [ 77.836841][ T4746] device bridge0 left promiscuous mode [ 77.850140][ T4752] netlink: 56 bytes leftover after parsing attributes in process `syz.1.173'. [ 77.893897][ T4752] netlink: 8 bytes leftover after parsing attributes in process `syz.1.173'. [ 78.052663][ T4761] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 78.058735][ T4762] netlink: 8 bytes leftover after parsing attributes in process `syz.0.175'. [ 78.229116][ T4767] netlink: 8 bytes leftover after parsing attributes in process `syz.4.180'. [ 78.325336][ T4767] device syz_tun entered promiscuous mode [ 78.360237][ T4767] device syz_tun left promiscuous mode [ 79.094475][ T4797] device veth1_macvtap left promiscuous mode [ 79.164274][ T4807] tipc: Started in network mode [ 79.174985][ T4807] tipc: Node identity 1e4276dcf627, cluster identity 4711 [ 79.183486][ T4807] tipc: Enabled bearer , priority 0 [ 79.206673][ T4807] device syzkaller0 entered promiscuous mode [ 79.259991][ T4807] tipc: Resetting bearer [ 79.289551][ T4806] tipc: Resetting bearer [ 79.330528][ T4806] tipc: Disabling bearer [ 79.939978][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805f264400: rx timeout, send abort [ 79.950496][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805f264400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 80.040197][ T4858] tipc: Failed to remove unknown binding: 66,1,1/0:404529563/404529565 [ 80.071692][ T4858] tipc: Failed to remove unknown binding: 66,1,1/0:404529563/404529565 [ 80.308965][ T4866] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 81.207148][ T4891] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.211528][ T4906] netlink: 12 bytes leftover after parsing attributes in process `syz.0.228'. [ 81.240278][ T4906] netlink: 24 bytes leftover after parsing attributes in process `syz.0.228'. [ 81.407754][ T1107] cfg80211: failed to load regulatory.db [ 82.030284][ T4891] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.095578][ T4891] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.480569][ T4809] Bluetooth: hci4: command 0x0401 tx timeout [ 82.583601][ T4891] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.598685][ T4891] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.609480][ T4891] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.619028][ T4891] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.862481][ T4891] syz.2.224 (4891) used greatest stack depth: 20320 bytes left [ 83.181457][ T4941] netlink: 'syz.3.242': attribute type 10 has an invalid length. [ 83.283595][ T4941] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.310753][ T4941] bond0: (slave team0): Enslaving as an active interface with an up link [ 83.382084][ T4944] netlink: 'syz.1.243': attribute type 6 has an invalid length. [ 83.461720][ T4954] netlink: 12 bytes leftover after parsing attributes in process `syz.4.246'. [ 83.679388][ T4969] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 83.738287][ C0] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 83.835867][ T4975] netlink: 28 bytes leftover after parsing attributes in process `syz.4.254'. [ 84.195940][ T5002] netlink: 12 bytes leftover after parsing attributes in process `syz.0.263'. [ 84.212223][ T5002] 8021q: VLANs not supported on vcan0 [ 85.302480][ T5045] netlink: 'syz.3.280': attribute type 1 has an invalid length. [ 85.378043][ T5053] netlink: 4 bytes leftover after parsing attributes in process `syz.4.281'. [ 85.392649][ T5053] device bridge_slave_1 left promiscuous mode [ 85.399047][ T5053] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.443215][ T5053] device bridge_slave_0 left promiscuous mode [ 85.461108][ T5053] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.652821][ T5052] netlink: 180 bytes leftover after parsing attributes in process `syz.0.283'. [ 85.837957][ T5063] netlink: 12 bytes leftover after parsing attributes in process `syz.0.287'. [ 86.176012][ T5072] netlink: 277 bytes leftover after parsing attributes in process `syz.1.291'. [ 87.112276][ T5121] syz.3.312[5121] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 87.112449][ T5121] syz.3.312[5121] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 87.419926][ T5145] netlink: 277 bytes leftover after parsing attributes in process `syz.1.319'. [ 87.694056][ T5157] tipc: Enabled bearer , priority 0 [ 87.809439][ T5157] device syzkaller0 entered promiscuous mode [ 87.819048][ T5169] netlink: 4 bytes leftover after parsing attributes in process `syz.4.325'. [ 87.852546][ T5157] tipc: Resetting bearer [ 87.952551][ T5152] tipc: Resetting bearer [ 87.994699][ T5152] tipc: Disabling bearer [ 88.037046][ T5179] tipc: Started in network mode [ 88.051893][ T5179] tipc: Node identity 892, cluster identity 9 [ 88.059274][ T5179] tipc: Node number set to 2194 [ 88.432330][ T5202] netlink: 448 bytes leftover after parsing attributes in process `syz.0.339'. [ 89.302912][ T5234] netlink: 60 bytes leftover after parsing attributes in process `syz.1.352'. [ 89.344334][ T5238] netlink: 60 bytes leftover after parsing attributes in process `syz.1.352'. [ 89.356941][ T5238] netlink: 60 bytes leftover after parsing attributes in process `syz.1.352'. [ 89.535276][ T5246] team0: Device gtp0 is of different type [ 89.616009][ T5253] netlink: 'syz.0.358': attribute type 29 has an invalid length. [ 89.664660][ T5253] netlink: 'syz.0.358': attribute type 29 has an invalid length. [ 89.689644][ T5257] netlink: 'syz.0.358': attribute type 29 has an invalid length. [ 90.596444][ T5255] netlink: 40 bytes leftover after parsing attributes in process `syz.4.355'. [ 90.632176][ T5255] netlink: 40 bytes leftover after parsing attributes in process `syz.4.355'. [ 90.691822][ T5289] netlink: 16 bytes leftover after parsing attributes in process `syz.0.372'. [ 90.725264][ T5291] netlink: 4 bytes leftover after parsing attributes in process `syz.3.373'. [ 93.289060][ T5388] netlink: 212864 bytes leftover after parsing attributes in process `syz.2.414'. [ 93.478336][ T5393] netlink: 40 bytes leftover after parsing attributes in process `syz.2.416'. [ 93.508073][ T5397] netlink: 20 bytes leftover after parsing attributes in process `syz.1.417'. [ 93.551332][ T5397] device wlan0 entered promiscuous mode [ 93.586603][ T5397] device wlan0 left promiscuous mode [ 93.995495][ T5405] crypto_alloc_aead failed rc=-2 [ 94.839816][ T5455] netlink: 40 bytes leftover after parsing attributes in process `syz.0.439'. [ 95.208299][ T5478] netlink: 40 bytes leftover after parsing attributes in process `syz.3.450'. [ 95.218590][ T5479] netlink: 12 bytes leftover after parsing attributes in process `syz.0.449'. [ 95.391494][ T5487] netlink: 8 bytes leftover after parsing attributes in process `syz.1.453'. [ 95.643926][ T5501] netlink: 8 bytes leftover after parsing attributes in process `syz.0.460'. [ 96.004500][ T5521] batman_adv: batadv0: Adding interface: dummy0 [ 96.022194][ T5521] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.142790][ T5521] batman_adv: batadv0: Interface activated: dummy0 [ 96.324008][ T5531] netlink: 'syz.0.471': attribute type 10 has an invalid length. [ 96.382373][ T5531] bridge0: port 3(bond0) entered disabled state [ 96.388954][ T5531] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.396365][ T5531] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.445731][ T5531] bridge0: port 3(bond0) entered blocking state [ 96.452317][ T5531] bridge0: port 3(bond0) entered forwarding state [ 96.458927][ T5531] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.466072][ T5531] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.473489][ T5531] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.480597][ T5531] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.529258][ T5531] bridge0: port 3(bond0) entered disabled state [ 96.535830][ T5531] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.543069][ T5531] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.789302][ T5542] netlink: 8 bytes leftover after parsing attributes in process `syz.4.476'. [ 96.803080][ T5544] netlink: 12 bytes leftover after parsing attributes in process `syz.0.475'. [ 99.677495][ T5646] device batadv_slave_0 entered promiscuous mode [ 99.693457][ T5646] __nla_validate_parse: 1 callbacks suppressed [ 99.693472][ T5646] netlink: 8 bytes leftover after parsing attributes in process `syz.2.517'. [ 99.736844][ T5649] netlink: 20 bytes leftover after parsing attributes in process `syz.3.518'. [ 100.347736][ T5611] netlink: 8 bytes leftover after parsing attributes in process `syz.4.501'. [ 101.295670][ T5698] netlink: 8 bytes leftover after parsing attributes in process `syz.4.538'. [ 101.786223][ T5737] netlink: 60 bytes leftover after parsing attributes in process `syz.4.551'. [ 102.405254][ T5766] netlink: 'syz.4.558': attribute type 11 has an invalid length. [ 102.605972][ T5755] netlink: 8 bytes leftover after parsing attributes in process `syz.3.555'. [ 102.841183][ T5787] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan1, syncid = 3, id = 0 [ 103.181410][ T5547] Set syz1 is full, maxelem 65536 reached [ 103.439425][ T5800] netlink: 104 bytes leftover after parsing attributes in process `syz.1.573'. [ 103.652004][ T4288] Bluetooth: hci4: command 0x0405 tx timeout [ 103.714348][ T5812] netlink: 8 bytes leftover after parsing attributes in process `syz.3.577'. [ 103.968529][ T5820] device syzkaller0 entered promiscuous mode [ 104.399085][ T5840] netlink: 8 bytes leftover after parsing attributes in process `syz.2.591'. [ 105.132714][ T5864] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551612) [ 105.189234][ T5864] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 107.520422][ T4191] Bluetooth: hci4: link tx timeout [ 107.525986][ T4191] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 107.550256][ T4191] Bluetooth: hci4: link tx timeout [ 107.556204][ T4191] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 107.632074][ T4191] Bluetooth: hci4: link tx timeout [ 107.637230][ T4191] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 107.669549][ T4191] Bluetooth: hci4: link tx timeout [ 107.675013][ T4191] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 107.952469][ T4191] Bluetooth: hci4: link tx timeout [ 107.957628][ T4191] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 108.630445][ T4191] Bluetooth: hci4: link tx timeout [ 108.635685][ T4191] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 108.984095][ T5989] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 109.028778][ C0] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 109.049665][ T4191] Bluetooth: hci4: link tx timeout [ 109.054941][ T4191] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 109.178762][ T5992] tipc: Started in network mode [ 109.209250][ T5992] tipc: Node identity 4a9181e4685, cluster identity 4711 [ 109.228249][ T5992] tipc: Enabled bearer , priority 0 [ 109.264644][ T5995] device syzkaller0 entered promiscuous mode [ 109.335668][ T5992] tipc: Resetting bearer [ 109.385925][ T5991] tipc: Resetting bearer [ 109.425065][ T5991] tipc: Disabling bearer [ 109.572698][ T4810] Bluetooth: hci4: command 0x0406 tx timeout [ 109.650077][ T4191] Bluetooth: hci4: link tx timeout [ 109.655439][ T4191] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 109.933865][ T4191] Bluetooth: hci4: link tx timeout [ 109.939026][ T4191] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 109.963925][ T5878] netlink: 8 bytes leftover after parsing attributes in process `syz.4.606'. [ 110.092793][ T6015] tipc: Started in network mode [ 110.103642][ T6015] tipc: Node identity 4, cluster identity 4711 [ 110.127947][ T6015] tipc: Node number set to 4 [ 110.453933][ T4191] Bluetooth: hci4: link tx timeout [ 110.459091][ T4191] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.801171][ T6049] netlink: 12 bytes leftover after parsing attributes in process `syz.3.656'. [ 110.832775][ T6039] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 110.840112][ T6049] netlink: 24 bytes leftover after parsing attributes in process `syz.3.656'. [ 110.954207][ T6057] delete_channel: no stack [ 111.171045][ T6060] IPVS: Scheduler module ip_vs_sip not found [ 111.243957][ T6068] netlink: 32 bytes leftover after parsing attributes in process `syz.1.669'. [ 111.741169][ T6088] syz.3.677[6088] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 111.741313][ T6088] syz.3.677[6088] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 111.808983][ T6090] netlink: 20 bytes leftover after parsing attributes in process `syz.1.679'. [ 112.131202][ T6095] netlink: 4 bytes leftover after parsing attributes in process `syz.1.679'. [ 112.194462][ T6095] device bridge_slave_1 left promiscuous mode [ 112.211005][ T6095] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.240932][ T6095] device bridge_slave_0 left promiscuous mode [ 112.257651][ T6095] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.520472][ T6106] team0: Port device team_slave_0 removed [ 112.535706][ T6116] netlink: 4 bytes leftover after parsing attributes in process `syz.4.689'. [ 112.884798][ T6134] netlink: 20824 bytes leftover after parsing attributes in process `syz.4.696'. [ 113.298385][ T6153] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 113.575172][ T4191] Bluetooth: hci4: link tx timeout [ 113.580336][ T4191] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 113.592077][ T4191] Bluetooth: hci4: link tx timeout [ 113.597214][ T4191] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 113.609887][ T4191] Bluetooth: hci4: link tx timeout [ 113.615162][ T4191] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 113.622904][ T4191] Bluetooth: hci4: link tx timeout [ 113.628051][ T4191] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 113.780645][ T4191] Bluetooth: hci4: link tx timeout [ 113.785897][ T4191] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 114.070207][ T4191] Bluetooth: hci4: link tx timeout [ 114.075429][ T4191] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 114.279609][ T6192] netlink: 'syz.1.721': attribute type 1 has an invalid length. [ 114.371198][ T6192] 8021q: adding VLAN 0 to HW filter on device bond1 [ 114.447580][ T4191] Bluetooth: hci4: link tx timeout [ 114.452971][ T4191] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 114.504269][ T6197] bond1: (slave ip6gretap1): making interface the new active one [ 114.606804][ T6197] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 114.668901][ T6200] device veth3 entered promiscuous mode [ 114.695108][ T6200] bond1: (slave veth3): Enslaving as an active interface with a down link [ 114.766452][ T6192] bond1: (slave erspan0): Enslaving as an active interface with an up link [ 114.805175][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 115.296233][ T6235] netlink: 8 bytes leftover after parsing attributes in process `syz.1.735'. [ 115.369436][ T4191] Bluetooth: hci4: link tx timeout [ 115.374803][ T4191] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 115.638328][ T6244] netlink: 184 bytes leftover after parsing attributes in process `syz.4.738'. [ 116.291741][ T6268] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 116.327892][ T6268] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 116.430729][ T6268] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 116.477519][ T6268] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 116.488652][ T6268] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 116.513259][ T6268] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 116.534007][ T6268] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 116.962104][ T4191] Bluetooth: hci4: link tx timeout [ 116.967320][ T4191] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 116.976398][ T4191] Bluetooth: hci4: link tx timeout [ 116.981721][ T4191] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 117.081648][ T6268] syz.4.749 (6268) used greatest stack depth: 20192 bytes left [ 117.156146][ T6308] netlink: 212916 bytes leftover after parsing attributes in process `syz.2.769'. [ 117.564896][ T6331] netlink: 24 bytes leftover after parsing attributes in process `syz.4.778'. [ 117.992692][ T6349] netlink: 12 bytes leftover after parsing attributes in process `syz.0.787'. [ 118.078381][ T6352] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 118.447261][ T4191] Bluetooth: hci4: link tx timeout [ 118.452670][ T4191] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 118.460746][ T4191] Bluetooth: hci4: link tx timeout [ 118.466656][ T4191] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 118.695045][ T6384] Set syz1 is full, maxelem 65536 reached [ 118.961558][ T4191] Bluetooth: hci4: link tx timeout [ 118.967481][ T4191] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 118.975324][ T4191] Bluetooth: hci4: link tx timeout [ 118.980482][ T4191] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 119.005927][ T23] Bluetooth: hci4: command 0x0406 tx timeout [ 119.890290][ T6432] netlink: 8 bytes leftover after parsing attributes in process `syz.0.817'. [ 119.958774][ T6432] netlink: 4 bytes leftover after parsing attributes in process `syz.0.817'. [ 120.029402][ T6432] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.038730][ T6432] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.047578][ T6432] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.056659][ T6432] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.179959][ T6441] netlink: 51 bytes leftover after parsing attributes in process `syz.3.818'. [ 121.016231][ T6478] netlink: 'syz.4.830': attribute type 29 has an invalid length. [ 121.056964][ T6478] netlink: 'syz.4.830': attribute type 29 has an invalid length. [ 121.101370][ T6481] netlink: 'syz.4.830': attribute type 29 has an invalid length. [ 121.393368][ T4191] Bluetooth: hci4: link tx timeout [ 121.398561][ T4191] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 121.412889][ T4191] Bluetooth: hci4: link tx timeout [ 121.418143][ T4191] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 121.705915][ T6514] netlink: 212916 bytes leftover after parsing attributes in process `syz.2.845'. [ 121.984665][ T6530] netlink: 8 bytes leftover after parsing attributes in process `syz.2.849'. [ 122.448530][ T4191] Bluetooth: hci4: link tx timeout [ 122.454020][ T4191] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 122.461680][ T4191] Bluetooth: hci4: link tx timeout [ 122.467717][ T4191] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 122.695706][ T6570] MPTCP: kernel_bind error, err=-22 [ 122.743703][ T4191] Bluetooth: hci4: link tx timeout [ 122.754239][ T4191] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 122.761902][ T4191] Bluetooth: hci4: link tx timeout [ 122.768277][ T4191] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 123.197976][ T6588] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 123.841732][ T6615] tipc: Started in network mode [ 123.871862][ T6615] tipc: Node identity f2bf3b8d43da, cluster identity 4711 [ 123.888752][ T6615] tipc: Enabled bearer , priority 0 [ 123.909431][ T6620] device syzkaller0 entered promiscuous mode [ 123.967064][ T6615] tipc: Resetting bearer [ 124.025450][ T6614] tipc: Resetting bearer [ 124.045799][ T6614] tipc: Disabling bearer [ 124.080247][ T6625] tipc: Enabled bearer , priority 0 [ 124.161289][ T6622] device syzkaller0 entered promiscuous mode [ 124.200899][ T6621] tipc: Resetting bearer [ 124.304660][ T6621] tipc: Disabling bearer [ 124.532029][ T4810] Bluetooth: hci4: command 0x0405 tx timeout [ 124.652131][ T6646] netlink: 44 bytes leftover after parsing attributes in process `syz.0.895'. [ 125.058509][ T6657] device syzkaller1 entered promiscuous mode [ 126.144141][ T6695] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 126.206293][ T6695] [ 126.208654][ T6695] ====================================================== [ 126.215680][ T6695] WARNING: possible circular locking dependency detected [ 126.222695][ T6695] syzkaller #0 Not tainted [ 126.227110][ T6695] ------------------------------------------------------ [ 126.234149][ T6695] syz.0.915/6695 is trying to acquire lock: [ 126.240039][ T6695] ffff888074455120 (sk_lock-AF_AX25){+.+.}-{0:0}, at: ax25_device_event+0x217/0x4f0 [ 126.249465][ T6695] [ 126.249465][ T6695] but task is already holding lock: [ 126.256822][ T6695] ffffffff8d238048 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x54e/0xe50 [ 126.265090][ T6695] [ 126.265090][ T6695] which lock already depends on the new lock. [ 126.265090][ T6695] [ 126.275494][ T6695] [ 126.275494][ T6695] the existing dependency chain (in reverse order) is: [ 126.284499][ T6695] [ 126.284499][ T6695] -> #1 (rtnl_mutex){+.+.}-{3:3}: [ 126.291707][ T6695] __mutex_lock_common+0x1eb/0x2390 [ 126.297438][ T6695] mutex_lock_nested+0x17/0x20 [ 126.302720][ T6695] ax25_setsockopt+0x830/0xa40 [ 126.308006][ T6695] __sys_setsockopt+0x2bf/0x3d0 [ 126.313382][ T6695] __x64_sys_setsockopt+0xb1/0xc0 [ 126.318943][ T6695] do_syscall_64+0x4c/0xa0 [ 126.323877][ T6695] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 126.330298][ T6695] [ 126.330298][ T6695] -> #0 (sk_lock-AF_AX25){+.+.}-{0:0}: [ 126.337944][ T6695] __lock_acquire+0x2c33/0x7c60 [ 126.343401][ T6695] lock_acquire+0x197/0x3f0 [ 126.348508][ T6695] lock_sock_nested+0x44/0x100 [ 126.353809][ T6695] ax25_device_event+0x217/0x4f0 [ 126.359380][ T6695] raw_notifier_call_chain+0xcb/0x160 [ 126.365307][ T6695] __dev_notify_flags+0x178/0x2d0 [ 126.370851][ T6695] dev_change_flags+0xe3/0x1a0 [ 126.376131][ T6695] dev_ifsioc+0x147/0xe70 [ 126.380981][ T6695] dev_ioctl+0x55f/0xe50 [ 126.385738][ T6695] sock_do_ioctl+0x222/0x2f0 [ 126.390846][ T6695] sock_ioctl+0x4ed/0x6e0 [ 126.395706][ T6695] __se_sys_ioctl+0xfa/0x170 [ 126.400825][ T6695] do_syscall_64+0x4c/0xa0 [ 126.405780][ T6695] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 126.412194][ T6695] [ 126.412194][ T6695] other info that might help us debug this: [ 126.412194][ T6695] [ 126.422499][ T6695] Possible unsafe locking scenario: [ 126.422499][ T6695] [ 126.430290][ T6695] CPU0 CPU1 [ 126.435644][ T6695] ---- ---- [ 126.441004][ T6695] lock(rtnl_mutex); [ 126.444981][ T6695] lock(sk_lock-AF_AX25); [ 126.451906][ T6695] lock(rtnl_mutex); [ 126.458401][ T6695] lock(sk_lock-AF_AX25); [ 126.462825][ T6695] [ 126.462825][ T6695] *** DEADLOCK *** [ 126.462825][ T6695] [ 126.470960][ T6695] 1 lock held by syz.0.915/6695: [ 126.475893][ T6695] #0: ffffffff8d238048 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x54e/0xe50 [ 126.484686][ T6695] [ 126.484686][ T6695] stack backtrace: [ 126.490597][ T6695] CPU: 0 PID: 6695 Comm: syz.0.915 Not tainted syzkaller #0 [ 126.497885][ T6695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 126.508004][ T6695] Call Trace: [ 126.511285][ T6695] [ 126.514215][ T6695] dump_stack_lvl+0x168/0x230 [ 126.518986][ T6695] ? load_image+0x3b0/0x3b0 [ 126.523488][ T6695] ? show_regs_print_info+0x20/0x20 [ 126.528718][ T6695] ? print_circular_bug+0x12b/0x1a0 [ 126.533916][ T6695] check_noncircular+0x274/0x310 [ 126.538852][ T6695] ? add_chain_block+0x940/0x940 [ 126.543787][ T6695] ? lockdep_lock+0xdc/0x1e0 [ 126.548380][ T6695] ? lockdep_unlock+0x134/0x2d0 [ 126.553225][ T6695] ? mark_lock+0x94/0x320 [ 126.557555][ T6695] __lock_acquire+0x2c33/0x7c60 [ 126.562413][ T6695] ? lock_chain_count+0x20/0x20 [ 126.567264][ T6695] ? mark_lock+0x94/0x320 [ 126.571591][ T6695] ? verify_lock_unused+0x140/0x140 [ 126.576787][ T6695] ? verify_lock_unused+0x140/0x140 [ 126.581981][ T6695] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 126.588163][ T6695] ? lockdep_hardirqs_on_prepare+0x760/0x760 [ 126.594145][ T6695] ? __local_bh_enable_ip+0x12a/0x1b0 [ 126.599543][ T6695] ? mark_lock+0x94/0x320 [ 126.603872][ T6695] lock_acquire+0x197/0x3f0 [ 126.608376][ T6695] ? ax25_device_event+0x217/0x4f0 [ 126.613482][ T6695] ? lock_chain_count+0x20/0x20 [ 126.618333][ T6695] ? read_lock_is_recursive+0x10/0x10 [ 126.623702][ T6695] ? __local_bh_enable_ip+0x12a/0x1b0 [ 126.629067][ T6695] ? lockdep_hardirqs_on+0x94/0x140 [ 126.634261][ T6695] ? __local_bh_enable_ip+0x12a/0x1b0 [ 126.639628][ T6695] ? _local_bh_enable+0xa0/0xa0 [ 126.644482][ T6695] lock_sock_nested+0x44/0x100 [ 126.649243][ T6695] ? ax25_device_event+0x217/0x4f0 [ 126.654350][ T6695] ax25_device_event+0x217/0x4f0 [ 126.659291][ T6695] raw_notifier_call_chain+0xcb/0x160 [ 126.664662][ T6695] __dev_notify_flags+0x178/0x2d0 [ 126.669693][ T6695] ? __dev_change_flags+0x6a0/0x6a0 [ 126.674886][ T6695] ? __dev_change_flags+0x4bb/0x6a0 [ 126.680092][ T6695] ? dev_get_flags+0x1c0/0x1c0 [ 126.684851][ T6695] ? dev_ioctl+0x54e/0xe50 [ 126.689269][ T6695] ? dev_ioctl+0x54e/0xe50 [ 126.693693][ T6695] dev_change_flags+0xe3/0x1a0 [ 126.698470][ T6695] dev_ifsioc+0x147/0xe70 [ 126.702799][ T6695] ? dev_ioctl+0xe50/0xe50 [ 126.707213][ T6695] ? apparmor_capable+0x12c/0x190 [ 126.712238][ T6695] ? full_name_hash+0x8e/0xe0 [ 126.716943][ T6695] dev_ioctl+0x55f/0xe50 [ 126.721194][ T6695] ? _copy_from_user+0x111/0x170 [ 126.726130][ T6695] sock_do_ioctl+0x222/0x2f0 [ 126.730728][ T6695] ? sock_show_fdinfo+0xb0/0xb0 [ 126.735588][ T6695] sock_ioctl+0x4ed/0x6e0 [ 126.739915][ T6695] ? sock_poll+0x3f0/0x3f0 [ 126.744340][ T6695] ? bpf_lsm_file_ioctl+0x5/0x10 [ 126.749279][ T6695] ? security_file_ioctl+0x7c/0xa0 [ 126.754392][ T6695] ? sock_poll+0x3f0/0x3f0 [ 126.758819][ T6695] __se_sys_ioctl+0xfa/0x170 [ 126.763417][ T6695] do_syscall_64+0x4c/0xa0 [ 126.767828][ T6695] ? clear_bhb_loop+0x30/0x80 [ 126.772521][ T6695] ? clear_bhb_loop+0x30/0x80 [ 126.777193][ T6695] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 126.783229][ T6695] RIP: 0033:0x7f07e0e09ec9 [ 126.787665][ T6695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.807284][ T6695] RSP: 002b:00007f07df050038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 126.815709][ T6695] RAX: ffffffffffffffda RBX: 00007f07e1061090 RCX: 00007f07e0e09ec9 [ 126.823679][ T6695] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000005 [ 126.831649][ T6695] RBP: 00007f07e0e8cf91 R08: 0000000000000000 R09: 0000000000000000 [ 126.839613][ T6695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.847585][ T6695] R13: 00007f07e1061128 R14: 00007f07e1061090 R15: 00007fffea2fbff8 [ 126.855656][ T6695] [ 126.944809][ T6695] ================================================================== [ 126.952912][ T6695] BUG: KASAN: use-after-free in ax25_dev_device_down+0x35e/0x520 [ 126.960659][ T6695] Write of size 4 at addr ffff88802a6623b8 by task syz.0.915/6695 [ 126.968470][ T6695] [ 126.970803][ T6695] CPU: 1 PID: 6695 Comm: syz.0.915 Not tainted syzkaller #0 [ 126.978097][ T6695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 126.988161][ T6695] Call Trace: [ 126.991446][ T6695] [ 126.994389][ T6695] dump_stack_lvl+0x168/0x230 [ 126.999088][ T6695] ? show_regs_print_info+0x20/0x20 [ 127.004432][ T6695] ? load_image+0x3b0/0x3b0 [ 127.008952][ T6695] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 127.014348][ T6695] print_address_description+0x60/0x2d0 [ 127.020094][ T6695] ? ax25_dev_device_down+0x35e/0x520 [ 127.025493][ T6695] kasan_report+0xdf/0x130 [ 127.029938][ T6695] ? ax25_dev_device_down+0x35e/0x520 [ 127.035329][ T6695] ? kfree+0xef/0x2a0 [ 127.039350][ T6695] kasan_check_range+0x27b/0x290 [ 127.044308][ T6695] ax25_dev_device_down+0x35e/0x520 [ 127.049527][ T6695] ax25_device_event+0x4b4/0x4f0 [ 127.054481][ T6695] raw_notifier_call_chain+0xcb/0x160 [ 127.059873][ T6695] __dev_notify_flags+0x178/0x2d0 [ 127.064916][ T6695] ? __dev_change_flags+0x6a0/0x6a0 [ 127.070128][ T6695] ? __dev_change_flags+0x4bb/0x6a0 [ 127.075343][ T6695] ? dev_get_flags+0x1c0/0x1c0 [ 127.080125][ T6695] ? dev_ioctl+0x54e/0xe50 [ 127.084560][ T6695] ? dev_ioctl+0x54e/0xe50 [ 127.089003][ T6695] dev_change_flags+0xe3/0x1a0 [ 127.093789][ T6695] dev_ifsioc+0x147/0xe70 [ 127.098136][ T6695] ? dev_ioctl+0xe50/0xe50 [ 127.102563][ T6695] ? apparmor_capable+0x12c/0x190 [ 127.107596][ T6695] ? full_name_hash+0x8e/0xe0 [ 127.112302][ T6695] dev_ioctl+0x55f/0xe50 [ 127.116561][ T6695] ? _copy_from_user+0x111/0x170 [ 127.121509][ T6695] sock_do_ioctl+0x222/0x2f0 [ 127.126109][ T6695] ? sock_show_fdinfo+0xb0/0xb0 [ 127.131001][ T6695] sock_ioctl+0x4ed/0x6e0 [ 127.135342][ T6695] ? sock_poll+0x3f0/0x3f0 [ 127.139779][ T6695] ? bpf_lsm_file_ioctl+0x5/0x10 [ 127.144740][ T6695] ? security_file_ioctl+0x7c/0xa0 [ 127.149881][ T6695] ? sock_poll+0x3f0/0x3f0 [ 127.154312][ T6695] __se_sys_ioctl+0xfa/0x170 [ 127.158935][ T6695] do_syscall_64+0x4c/0xa0 [ 127.163365][ T6695] ? clear_bhb_loop+0x30/0x80 [ 127.168066][ T6695] ? clear_bhb_loop+0x30/0x80 [ 127.172756][ T6695] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 127.178675][ T6695] RIP: 0033:0x7f07e0e09ec9 [ 127.183097][ T6695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.202731][ T6695] RSP: 002b:00007f07df050038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 127.211163][ T6695] RAX: ffffffffffffffda RBX: 00007f07e1061090 RCX: 00007f07e0e09ec9 [ 127.219142][ T6695] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000005 [ 127.227125][ T6695] RBP: 00007f07e0e8cf91 R08: 0000000000000000 R09: 0000000000000000 [ 127.235110][ T6695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.243097][ T6695] R13: 00007f07e1061128 R14: 00007f07e1061090 R15: 00007fffea2fbff8 [ 127.251090][ T6695] [ 127.254123][ T6695] [ 127.256464][ T6695] Allocated by task 6695: [ 127.260802][ T6695] __kasan_kmalloc+0xb5/0xf0 [ 127.265414][ T6695] ax25_dev_device_up+0x50/0x580 [ 127.270368][ T6695] ax25_device_event+0x483/0x4f0 [ 127.275321][ T6695] raw_notifier_call_chain+0xcb/0x160 [ 127.280706][ T6695] __dev_notify_flags+0x178/0x2d0 [ 127.285739][ T6695] dev_change_flags+0xe3/0x1a0 [ 127.290600][ T6695] dev_ifsioc+0x147/0xe70 [ 127.294941][ T6695] dev_ioctl+0x55f/0xe50 [ 127.299196][ T6695] sock_do_ioctl+0x222/0x2f0 [ 127.303791][ T6695] sock_ioctl+0x4ed/0x6e0 [ 127.308136][ T6695] __se_sys_ioctl+0xfa/0x170 [ 127.312739][ T6695] do_syscall_64+0x4c/0xa0 [ 127.317165][ T6695] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 127.323064][ T6695] [ 127.325394][ T6695] Freed by task 6695: [ 127.329375][ T6695] kasan_set_track+0x4b/0x70 [ 127.333987][ T6695] kasan_set_free_info+0x1f/0x40 [ 127.338944][ T6695] ____kasan_slab_free+0xd5/0x110 [ 127.343982][ T6695] slab_free_freelist_hook+0xea/0x170 [ 127.349372][ T6695] kfree+0xef/0x2a0 [ 127.353189][ T6695] ax25_dev_device_down+0x1c0/0x520 [ 127.358399][ T6695] ax25_device_event+0x4b4/0x4f0 [ 127.363343][ T6695] raw_notifier_call_chain+0xcb/0x160 [ 127.368728][ T6695] __dev_notify_flags+0x178/0x2d0 [ 127.373768][ T6695] dev_change_flags+0xe3/0x1a0 [ 127.378546][ T6695] dev_ifsioc+0x147/0xe70 [ 127.382882][ T6695] dev_ioctl+0x55f/0xe50 [ 127.387138][ T6695] sock_do_ioctl+0x222/0x2f0 [ 127.391733][ T6695] sock_ioctl+0x4ed/0x6e0 [ 127.396071][ T6695] __se_sys_ioctl+0xfa/0x170 [ 127.400675][ T6695] do_syscall_64+0x4c/0xa0 [ 127.405094][ T6695] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 127.411016][ T6695] [ 127.413445][ T6695] Last potentially related work creation: [ 127.419164][ T6695] kasan_save_stack+0x35/0x60 [ 127.423858][ T6695] kasan_record_aux_stack+0xb8/0x100 [ 127.429158][ T6695] kvfree_call_rcu+0x10a/0x7c0 [ 127.433942][ T6695] hash_netnet4_add+0x264a/0x32b0 [ 127.439072][ T6695] hash_netnet4_uadt+0xabc/0xdc0 [ 127.444025][ T6695] call_ad+0x337/0x990 [ 127.448103][ T6695] ip_set_ad+0x783/0x930 [ 127.452351][ T6695] nfnetlink_rcv_msg+0xacb/0x1040 [ 127.457388][ T6695] netlink_rcv_skb+0x1e0/0x430 [ 127.462165][ T6695] nfnetlink_rcv+0x26b/0x2160 [ 127.466850][ T6695] netlink_unicast+0x774/0x920 [ 127.471625][ T6695] netlink_sendmsg+0x8ab/0xbc0 [ 127.476395][ T6695] ____sys_sendmsg+0x5a2/0x8c0 [ 127.481169][ T6695] ___sys_sendmsg+0x1f0/0x260 [ 127.485861][ T6695] __se_sys_sendmsg+0x190/0x250 [ 127.490724][ T6695] do_syscall_64+0x4c/0xa0 [ 127.495158][ T6695] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 127.501071][ T6695] [ 127.503402][ T6695] Second to last potentially related work creation: [ 127.509973][ T6695] kasan_save_stack+0x35/0x60 [ 127.514660][ T6695] kasan_record_aux_stack+0xb8/0x100 [ 127.519939][ T6695] insert_work+0x54/0x3d0 [ 127.524264][ T6695] __queue_work+0x9c5/0xd50 [ 127.528781][ T6695] queue_work_on+0x11d/0x1d0 [ 127.533449][ T6695] netdevice_event+0x803/0x900 [ 127.538206][ T6695] raw_notifier_call_chain+0xcb/0x160 [ 127.543577][ T6695] dev_set_mac_address+0x2c4/0x3d0 [ 127.548685][ T6695] dev_set_mac_address_user+0x2d/0x50 [ 127.554052][ T6695] do_setlink+0x80d/0x3980 [ 127.558485][ T6695] rtnl_newlink+0x1419/0x17d0 [ 127.563157][ T6695] rtnetlink_rcv_msg+0x9b9/0xe60 [ 127.568111][ T6695] netlink_rcv_skb+0x1e0/0x430 [ 127.572870][ T6695] netlink_unicast+0x774/0x920 [ 127.577660][ T6695] netlink_sendmsg+0x8ab/0xbc0 [ 127.582413][ T6695] __sys_sendto+0x423/0x580 [ 127.586923][ T6695] __x64_sys_sendto+0xda/0xf0 [ 127.591588][ T6695] do_syscall_64+0x4c/0xa0 [ 127.595997][ T6695] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 127.601899][ T6695] [ 127.604220][ T6695] The buggy address belongs to the object at ffff88802a662300 [ 127.604220][ T6695] which belongs to the cache kmalloc-192 of size 192 [ 127.618346][ T6695] The buggy address is located 184 bytes inside of [ 127.618346][ T6695] 192-byte region [ffff88802a662300, ffff88802a6623c0) [ 127.631779][ T6695] The buggy address belongs to the page: [ 127.637407][ T6695] page:ffffea0000a99880 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2a662 [ 127.647582][ T6695] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 127.655123][ T6695] raw: 00fff00000000200 dead000000000100 dead000000000122 ffff888016841a00 [ 127.663702][ T6695] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 127.672367][ T6695] page dumped because: kasan: bad access detected [ 127.678807][ T6695] page_owner tracks the page as allocated [ 127.684508][ T6695] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 1, ts 18180945951, free_ts 0 [ 127.699429][ T6695] get_page_from_freelist+0x1b77/0x1c60 [ 127.704973][ T6695] __alloc_pages+0x1e1/0x470 [ 127.709562][ T6695] alloc_page_interleave+0x24/0x1e0 [ 127.714747][ T6695] new_slab+0xc0/0x4b0 [ 127.718816][ T6695] ___slab_alloc+0x81e/0xdf0 [ 127.723395][ T6695] __kmalloc_track_caller+0x1cb/0x330 [ 127.728790][ T6695] kmemdup+0x22/0x50 [ 127.732695][ T6695] neigh_parms_alloc+0x86/0x4b0 [ 127.737550][ T6695] inetdev_init+0x127/0x4d0 [ 127.742052][ T6695] inetdev_event+0x280/0x1360 [ 127.746735][ T6695] raw_notifier_call_chain+0xcb/0x160 [ 127.752100][ T6695] register_netdevice+0x1275/0x16b0 [ 127.757300][ T6695] register_netdev+0x37/0x50 [ 127.761884][ T6695] nr_proto_init+0x164/0x7e0 [ 127.766470][ T6695] do_one_initcall+0x1ee/0x680 [ 127.771227][ T6695] do_initcall_level+0x137/0x1f0 [ 127.776168][ T6695] page_owner free stack trace missing [ 127.781518][ T6695] [ 127.783843][ T6695] Memory state around the buggy address: [ 127.789460][ T6695] ffff88802a662280: 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc [ 127.797516][ T6695] ffff88802a662300: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 127.805564][ T6695] >ffff88802a662380: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 127.813697][ T6695] ^ [ 127.819582][ T6695] ffff88802a662400: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 127.827660][ T6695] ffff88802a662480: 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 127.835707][ T6695] ================================================================== [ 127.845564][ T6695] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 127.846040][ T4290] Bluetooth: hci4: command 0x0405 tx timeout [ 127.852779][ T6695] CPU: 0 PID: 6695 Comm: syz.0.915 Tainted: G B syzkaller #0 [ 127.852800][ T6695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 127.852812][ T6695] Call Trace: [ 127.852818][ T6695] [ 127.883684][ T6695] dump_stack_lvl+0x168/0x230 [ 127.888366][ T6695] ? show_regs_print_info+0x20/0x20 [ 127.893651][ T6695] ? load_image+0x3b0/0x3b0 [ 127.898152][ T6695] panic+0x2c9/0x7f0 [ 127.902067][ T6695] ? bpf_jit_dump+0xd0/0xd0 [ 127.906575][ T6695] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 127.912487][ T6695] ? _raw_spin_unlock+0x40/0x40 [ 127.917330][ T6695] ? ax25_dev_device_down+0x35e/0x520 [ 127.922711][ T6695] check_panic_on_warn+0x80/0xa0 [ 127.927648][ T6695] ? ax25_dev_device_down+0x35e/0x520 [ 127.933008][ T6695] end_report+0x6d/0xf0 [ 127.937170][ T6695] kasan_report+0x102/0x130 [ 127.941669][ T6695] ? ax25_dev_device_down+0x35e/0x520 [ 127.947068][ T6695] ? kfree+0xef/0x2a0 [ 127.951065][ T6695] kasan_check_range+0x27b/0x290 [ 127.955996][ T6695] ax25_dev_device_down+0x35e/0x520 [ 127.961185][ T6695] ax25_device_event+0x4b4/0x4f0 [ 127.966108][ T6695] raw_notifier_call_chain+0xcb/0x160 [ 127.971471][ T6695] __dev_notify_flags+0x178/0x2d0 [ 127.976488][ T6695] ? __dev_change_flags+0x6a0/0x6a0 [ 127.981763][ T6695] ? __dev_change_flags+0x4bb/0x6a0 [ 127.986954][ T6695] ? dev_get_flags+0x1c0/0x1c0 [ 127.991707][ T6695] ? dev_ioctl+0x54e/0xe50 [ 127.996113][ T6695] ? dev_ioctl+0x54e/0xe50 [ 128.000537][ T6695] dev_change_flags+0xe3/0x1a0 [ 128.005287][ T6695] dev_ifsioc+0x147/0xe70 [ 128.009626][ T6695] ? dev_ioctl+0xe50/0xe50 [ 128.014066][ T6695] ? apparmor_capable+0x12c/0x190 [ 128.019097][ T6695] ? full_name_hash+0x8e/0xe0 [ 128.023777][ T6695] dev_ioctl+0x55f/0xe50 [ 128.028023][ T6695] ? _copy_from_user+0x111/0x170 [ 128.032970][ T6695] sock_do_ioctl+0x222/0x2f0 [ 128.037554][ T6695] ? sock_show_fdinfo+0xb0/0xb0 [ 128.042402][ T6695] sock_ioctl+0x4ed/0x6e0 [ 128.046725][ T6695] ? sock_poll+0x3f0/0x3f0 [ 128.051153][ T6695] ? bpf_lsm_file_ioctl+0x5/0x10 [ 128.056079][ T6695] ? security_file_ioctl+0x7c/0xa0 [ 128.061179][ T6695] ? sock_poll+0x3f0/0x3f0 [ 128.065583][ T6695] __se_sys_ioctl+0xfa/0x170 [ 128.070175][ T6695] do_syscall_64+0x4c/0xa0 [ 128.074597][ T6695] ? clear_bhb_loop+0x30/0x80 [ 128.079269][ T6695] ? clear_bhb_loop+0x30/0x80 [ 128.083950][ T6695] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 128.089849][ T6695] RIP: 0033:0x7f07e0e09ec9 [ 128.094260][ T6695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.113858][ T6695] RSP: 002b:00007f07df050038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 128.122265][ T6695] RAX: ffffffffffffffda RBX: 00007f07e1061090 RCX: 00007f07e0e09ec9 [ 128.130226][ T6695] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000005 [ 128.138187][ T6695] RBP: 00007f07e0e8cf91 R08: 0000000000000000 R09: 0000000000000000 [ 128.146167][ T6695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.154148][ T6695] R13: 00007f07e1061128 R14: 00007f07e1061090 R15: 00007fffea2fbff8 [ 128.162139][ T6695] [ 128.165467][ T6695] Kernel Offset: disabled [ 128.169803][ T6695] Rebooting in 86400 seconds..