last executing test programs: 2.240031641s ago: executing program 3 (id=225): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f65, 0xfffffffd, 0xc5, 0xe23, 0x5, 0x1, 0x7fff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24008885}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b92a, 0x25dfdc01, {0x0, 0x0, 0x0, r10, {0x0, 0xd}, {0xffff, 0xb}, {0xe, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}}, 0x200048d0) sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000580)=@xdp={0x2c, 0x8, r8, 0x3e}, 0x80, &(0x7f0000000700)=[{&(0x7f00000004c0)='\'', 0x14}], 0x1}, 0x40084) 1.686276823s ago: executing program 0 (id=234): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000002f00)=0x3, 0x4) sendmmsg$inet(r0, &(0x7f0000004f80)=[{{&(0x7f0000003940)={0x2, 0x4e21, @local}, 0x10, 0x0}}], 0x1, 0xc802) 1.592740575s ago: executing program 0 (id=235): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x2, 0x200000}}) 1.590020615s ago: executing program 1 (id=236): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$inet(r0, &(0x7f0000001d00)={&(0x7f0000000300)={0x2, 0x4e24, @multicast2}, 0x10, 0x0}, 0x40040) 1.558827809s ago: executing program 3 (id=237): socket$rds(0x15, 0x5, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$inet6(r0, &(0x7f0000000700)={&(0x7f0000000000)={0xa, 0x0, 0x4, @mcast2, 0x7f}, 0x1c, 0x0, 0x0, &(0x7f0000000440)=[@flowinfo={{0x14, 0x29, 0xb, 0x8d2}}], 0x18}, 0x24004800) 1.462362552s ago: executing program 1 (id=238): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xf, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x87c, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0xb, 0xfff3}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x2, 0x3, 0x8, 0x2000008, {0x8, 0x0, 0x6, 0x3ff, 0x1, 0x7ff}, {0x4, 0x2, 0x0, 0x100, 0xfae5, 0x1}, 0x18, 0x6c, 0x1}}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x6, 0xed08, 0xe8f, 0x4, 0x8, 0x2, 0x8, 0x2, 0x40, 0x94f, 0x9, 0x5, 0x4, 0x4, 0x9, 0x1000, 0x0, 0x9, 0xfffffff9, 0x300, 0x81, 0x1, 0x5, 0x0, 0x1ff, 0x65d, 0x4, 0x4, 0xa9c3, 0x4, 0x80000001, 0x9, 0x7, 0x2, 0x401, 0x2c440000, 0xc, 0x0, 0x7, 0x3, 0x8, 0x0, 0x2, 0x0, 0xfffffff7, 0x3, 0x5, 0x7, 0xfffff170, 0x7, 0x0, 0x0, 0x5, 0x2, 0x2, 0x7b, 0x1, 0x3, 0x401, 0x9, 0x80000001, 0x1aef, 0x6, 0xffff, 0x3, 0x9, 0x0, 0x8, 0xffffff80, 0x4000000, 0x10, 0x4, 0x1, 0x4, 0x8, 0x6, 0x68f0, 0x3, 0x9, 0x1, 0xf11, 0x7, 0x0, 0x8, 0x9237, 0x7, 0x7fffffff, 0xffffffa4, 0x2, 0x8, 0x9, 0x80000000, 0x1, 0x1, 0x8, 0x10000, 0x1, 0xfffffff7, 0x8, 0x800, 0x5, 0x0, 0x3b57, 0x2, 0x6, 0x2, 0x2fa4, 0x8, 0x80000000, 0x9, 0x45, 0x8, 0x0, 0x240c554f, 0xdf42, 0x7fffffff, 0x80, 0x10, 0x6, 0x5, 0xb9a, 0xc, 0x8001, 0x7, 0xff, 0x5, 0x10001, 0x38f9, 0x1, 0x10, 0xffff, 0x1c8, 0x5, 0x8000, 0x702ce66, 0x1, 0x8001, 0x0, 0x5, 0x200000, 0xff, 0x33, 0x8, 0x0, 0x4, 0x6, 0x61d, 0x2, 0xf, 0x1, 0x80000000, 0x1, 0x2, 0x80000000, 0x6, 0x7, 0x10c, 0xffffffff, 0xc, 0x9, 0x10, 0x7, 0xffffffdb, 0x1, 0x0, 0x1, 0x5, 0xff, 0x3, 0x7f, 0x80000001, 0x2, 0x4, 0x3, 0xd5, 0x8, 0xffffffcd, 0xd, 0x8, 0x3, 0x4, 0x5, 0x400, 0x7501, 0x4, 0xfffffffd, 0x7, 0x10000, 0x4, 0x8, 0x406, 0x8, 0x8000, 0x7fffffff, 0x0, 0x7, 0x7, 0x3ff, 0x1, 0x5bb92b8f, 0x9, 0x6, 0x6, 0x8, 0x0, 0x0, 0x6, 0x1, 0x1d, 0x2, 0x1bb4, 0x6, 0x7ad, 0x50, 0x0, 0x5, 0xffffffff, 0x3, 0x4e2, 0x7, 0x2, 0x6, 0x4, 0x10001, 0xff, 0xd3, 0x7f, 0x8, 0x9, 0x10, 0xffffffff, 0x200, 0x1, 0xf, 0x6, 0xfffff58b, 0x202, 0x4, 0x120, 0x9, 0x0, 0x3, 0xa, 0x4, 0x4, 0x5, 0x7, 0x4, 0x8, 0x4, 0x6f, 0x5, 0x8, 0x4, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0xf, 0x7f, 0xc1fc, 0x3, 0x3, 0x200, 0x77c0, 0x50c71046, 0x6, 0x4, 0x8, 0x67, 0xfffffffa, 0x39a, 0x4, 0xffffffff, 0x3, 0x8, 0xfffffffc, 0x1, 0x2, 0x3, 0x2, 0x9, 0x8, 0xfffffff8, 0x9, 0xffffffff, 0x7ff, 0x7, 0x8001, 0x5364, 0x6ec, 0x401, 0x1, 0x8001, 0x3, 0xc0, 0x117, 0x200, 0x4, 0x5, 0x6, 0x5, 0x4, 0x4040000, 0xffffffbc, 0x5, 0x10, 0xffff, 0xb65, 0x6, 0x2, 0x2, 0xfffffffd, 0x8, 0x9, 0x4, 0x6, 0xe800, 0x9, 0x80000001, 0x80000000, 0xa, 0x0, 0x2, 0x80000001, 0x8001, 0x8, 0x29d1, 0x0, 0x200, 0xfff, 0x0, 0x3, 0x3a1, 0x1, 0x1, 0x7ff, 0x5, 0x4, 0x800, 0x5, 0x2, 0x0, 0x6, 0xffff, 0x100, 0xef9e, 0x4, 0x5, 0x6fbb, 0x7, 0x8001, 0x9, 0x7e, 0x8, 0xe3c, 0x0, 0x4, 0x8001, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x6, 0x0, 0x8, 0x101, 0x2, 0x0, 0x2, 0x1, 0x1, 0x4, 0x9, 0x4, 0x7, 0x9, 0xee, 0x8ee1, 0x9, 0x1, 0x9, 0x0, 0x60cd7584, 0x6, 0x553, 0x58ff, 0x9, 0xffffff80, 0xffff91c6, 0x8d, 0x9, 0x2, 0x6, 0x3, 0x4, 0x7f, 0x1, 0x800, 0x100, 0x71ef, 0xffffff9d, 0x6, 0x9, 0xebae, 0xfffffb39, 0xff, 0x2, 0x6, 0xfff, 0x4, 0x7, 0x200, 0x7ff, 0x7, 0x80000000, 0xfffffffa, 0x8, 0x8, 0x8001, 0x80, 0x3, 0xe70, 0x5, 0x9, 0x8, 0x5, 0x6, 0x9, 0xff0, 0x8, 0x7, 0x3, 0x102, 0x101, 0x424, 0x6, 0xffff208f, 0x4, 0x1, 0x81, 0x11c, 0x6, 0xfffff9e2, 0x3, 0x8, 0x400, 0x7fff, 0x6, 0x2, 0x80, 0xece, 0x8, 0xc, 0x0, 0x6842a920, 0xd3, 0x7, 0x7, 0x2, 0x7, 0x2, 0x2, 0x9, 0x1, 0x2, 0xc, 0x7, 0x7f, 0x0, 0xffffffff, 0xfff, 0xff, 0x7, 0x2, 0x7e84, 0x0, 0x1, 0xb, 0x5, 0x0, 0x0, 0x0, 0x7, 0x8, 0x5, 0x40, 0x8, 0xffffffff, 0xfffffff9, 0xfffffffb, 0xd, 0xfffffffe, 0x9, 0x1000, 0x8001, 0x7fffffff, 0x3, 0xff, 0x200, 0x5, 0xd894, 0x3, 0x3, 0x8, 0x7, 0x8, 0xe1, 0x81, 0x9, 0x6]}]}]}}]}, 0x87c}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000004c0)="f058fe7dad777f8f", 0x300}], 0x2}, 0x5) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x74, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0xb, 0xfff3}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x2, 0x3, 0x8, 0x2000008, {0x8, 0x0, 0x6, 0x3ff, 0x1, 0x7ff}, {0x4, 0x2, 0x0, 0x100, 0xfae5, 0x1}, 0x18, 0x6c, 0x1}}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.356659415s ago: executing program 3 (id=239): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="cf0000000000100000001200000008000300", @ANYRES32=r3, @ANYBLOB="0a00060008021100000100000500c2"], 0x30}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 1.356327646s ago: executing program 2 (id=240): pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2}) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r2, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400000200000200080001000300000005000200030000000500020008"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) 1.356072456s ago: executing program 0 (id=241): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r9, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3d1, 0x3, 0x0, 0x6, 0x6}, 0x67}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}}, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) sendmmsg$inet(r4, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x0) 1.168194419s ago: executing program 4 (id=242): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d50633"], 0x6f4}}, 0x0) 1.147689363s ago: executing program 3 (id=243): socket$inet6(0xa, 0x2, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000040)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0) 1.084548111s ago: executing program 2 (id=244): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) 1.071898142s ago: executing program 3 (id=245): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x94}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)={0x5c, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x3, 0x7c}, [@nested={0x4, 0x145}, @nested={0x44, 0x1, 0x0, 0x1, [@nested={0x4, 0x1d}, @nested={0x3c, 0x64, 0x0, 0x1, [@nested={0x38, 0xcd, 0x0, 0x1, [@typed={0x8, 0x13d, 0x0, 0x0, @uid}, @nested={0x4, 0x62}, @typed={0x14, 0x90, 0x0, 0x0, @ipv6=@mcast2}, @typed={0x8, 0x145, 0x0, 0x0, @fd}, @nested={0xc, 0x145, 0x0, 0x1, [@typed={0x8, 0x146, 0x0, 0x0, @ipv4=@multicast2}]}]}]}]}]}, 0x5c}}, 0xc000) r3 = socket$unix(0x1, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)={0x3c, r5, 0x1, 0x0, 0x0, {0x34}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) bind$unix(r3, &(0x7f0000000100)=@abs={0x1}, 0x6e) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, 0x1404, 0x1, 0x70bd2c, 0x1, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}}, 0x20004018) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f903", 0x11}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bind$unix(r3, &(0x7f0000000840)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000003b005000128009000100766c616e000000004000028006000100000000000c00020000000000000000000c00020000000000000000001c0004800c00060004000000000800000a0001"], 0x80}, 0x1, 0xba01}, 0x0) 971.460775ms ago: executing program 2 (id=246): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r1, 0x9) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000600)=""/133, 0x85}], 0x1) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000000140011f225bd7000fddbcf250284", @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x40) 916.658652ms ago: executing program 4 (id=247): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x3, 0x0, {0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}}}, 0x32) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e21, 0xe00, @mcast2, 0x7}, 0x1c) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x8, 0x1, 0x400, 0x0, {0xa, 0x0, 0xe38, @private0}}}, 0x32) 849.328881ms ago: executing program 4 (id=248): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x3a) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00318e", 0x38, 0x3a, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x1, 0x0, 0x4, '\x00', {0x0, 0x6, "000006", 0xda34, 0x3a, 0xff, @rand_addr=' \x01\x00', @empty, [], "ccd151d71f80b0c9"}}}}}}}, 0x0) 787.802459ms ago: executing program 3 (id=249): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x12d, &(0x7f0000000800)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60e20f0000f71101fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e204e2200f79078"], 0x0) 696.639101ms ago: executing program 2 (id=250): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000006c0)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x80) 616.352551ms ago: executing program 1 (id=251): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) 506.816435ms ago: executing program 1 (id=252): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000080)=@bpq0, 0x10) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) 392.67005ms ago: executing program 4 (id=253): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @dev}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e1e, 0x5, @empty, 0x200}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000080)="580000001400add4050000000000000002117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ffff0100f5c71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 392.21439ms ago: executing program 0 (id=254): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = accept4$rose(0xffffffffffffffff, 0x0, 0x0, 0x400) sendto$rose(r0, 0x0, 0x0, 0x91, 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x380000, @loopback}, 0x1c) 391.91039ms ago: executing program 2 (id=255): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x2d0, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x100, 0x130, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x330) syz_emit_ethernet(0x92, &(0x7f0000000080)={@random="e3311049dbfd", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x5c, 0x3a, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, {[], @echo_reply={0x81, 0x0, 0x0, 0x80, 0x4, "aca9fa490b2a3c9f82da7f04ce1d7151fb6c03127f126893e0e817738b008622ee4afb64f28091069231a9319602d961b96e8858675fb4a8b88e07c1c265dc4e291a686d14ae378506c93f615875b149d95c313d"}}}}}}, 0x0) 310.02766ms ago: executing program 4 (id=256): sendmsg$802154_dgram(0xffffffffffffffff, 0x0, 0x20004080) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x5f8, 0x2c8, 0x1d0, 0x468, 0x468, 0x1d0, 0x550, 0x550, 0x550, 0x550, 0x550, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@ipv6={@loopback, @dev, [], [], 'batadv_slave_0\x00', 'macvlan1\x00', {}, {}, 0x2b}, 0x0, 0xa8, 0xd0, 0x7400}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x1, @ipv6=@mcast2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x658) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x24, 0x4, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) syz_emit_ethernet(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 302.544301ms ago: executing program 1 (id=257): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000003c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='illinois', 0x8) sendmsg$inet(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000001dc0)="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", 0x2e1}], 0x1}, 0x94) shutdown(r0, 0x1) 244.490969ms ago: executing program 2 (id=258): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[], 0x48}}, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r2, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8914, &(0x7f0000000000)) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) recvfrom$ax25(r2, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) 244.167149ms ago: executing program 0 (id=259): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, 0x0, 0x20000015) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="18020000d60000000000000000000000850000004100000085"], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_bt_hci(r0, 0x400448c9, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b70800", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a800000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1ffffffffffe) socket$alg(0x26, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000280)=[{0x80, 0x1f, 0x40, 0x5ae9}, {0x6, 0x0, 0x7, 0x20000007}]}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macsec0\x00', 0x0}) r4 = gettid() r5 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, r3, 0x19c04, 0x55007}, [@IFLA_NET_NS_PID={0x8, 0x13, r4}, @IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) 174.700268ms ago: executing program 4 (id=260): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x2c}, 0x94) unshare(0x20000400) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 108.371417ms ago: executing program 1 (id=261): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r0, 0x0, 0x0, 0x24004041, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x18}, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), r1) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) 0s ago: executing program 0 (id=262): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$alg(0x26, 0x5, 0x0) accept4(r4, 0x0, 0x0, 0x800) sendmsg$nl_xfrm(r3, 0x0, 0x0) socket(0x10, 0x3, 0x0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x2c, r1, 0x11, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xfb}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}]}, 0x2c}}, 0x4000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.155' (ED25519) to the list of known hosts. [ 57.084360][ T4171] cgroup: Unknown subsys name 'net' [ 57.244313][ T4171] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 58.601919][ T4171] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 60.676268][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 60.768713][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 60.839566][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 60.861754][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.869070][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.877289][ T4188] device bridge_slave_0 entered promiscuous mode [ 60.892919][ T4195] chnl_net:caif_netlink_parms(): no params data found [ 60.907469][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.917031][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.927388][ T4188] device bridge_slave_1 entered promiscuous mode [ 60.991330][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.018905][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.028094][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 61.067790][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.075444][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.083700][ T4182] device bridge_slave_0 entered promiscuous mode [ 61.091250][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.098494][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.106480][ T4183] device bridge_slave_0 entered promiscuous mode [ 61.129043][ T4188] team0: Port device team_slave_0 added [ 61.143470][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.150683][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.159147][ T4182] device bridge_slave_1 entered promiscuous mode [ 61.166155][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.173323][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.181755][ T4183] device bridge_slave_1 entered promiscuous mode [ 61.190582][ T4188] team0: Port device team_slave_1 added [ 61.240983][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.248077][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.256479][ T4195] device bridge_slave_0 entered promiscuous mode [ 61.280932][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.290849][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.297827][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.324142][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.339710][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.346786][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.355280][ T4195] device bridge_slave_1 entered promiscuous mode [ 61.363844][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.374963][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.384968][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.392019][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.418331][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.434726][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.519238][ T4182] team0: Port device team_slave_0 added [ 61.525222][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.532510][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.540931][ T4194] device bridge_slave_0 entered promiscuous mode [ 61.549987][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.561312][ T4183] team0: Port device team_slave_0 added [ 61.568767][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.583341][ T4188] device hsr_slave_0 entered promiscuous mode [ 61.590067][ T4188] device hsr_slave_1 entered promiscuous mode [ 61.599448][ T4182] team0: Port device team_slave_1 added [ 61.605560][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.613252][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.621624][ T4194] device bridge_slave_1 entered promiscuous mode [ 61.643562][ T4183] team0: Port device team_slave_1 added [ 61.703238][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.711184][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.737309][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.758044][ T4195] team0: Port device team_slave_0 added [ 61.771837][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.778957][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.805105][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.816631][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.825642][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.852040][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.865025][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.876014][ T4195] team0: Port device team_slave_1 added [ 61.885732][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.892852][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.919428][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.935874][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.996271][ T4194] team0: Port device team_slave_0 added [ 62.002685][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.010562][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.036556][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.063335][ T4194] team0: Port device team_slave_1 added [ 62.077442][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.084531][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.110567][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.151138][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.158375][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.184730][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.199311][ T4182] device hsr_slave_0 entered promiscuous mode [ 62.206022][ T4182] device hsr_slave_1 entered promiscuous mode [ 62.213094][ T4182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.221305][ T4182] Cannot create hsr debugfs directory [ 62.237908][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.245893][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.271921][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.308428][ T4183] device hsr_slave_0 entered promiscuous mode [ 62.315060][ T4183] device hsr_slave_1 entered promiscuous mode [ 62.321852][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.329502][ T4183] Cannot create hsr debugfs directory [ 62.346723][ T4195] device hsr_slave_0 entered promiscuous mode [ 62.359812][ T4195] device hsr_slave_1 entered promiscuous mode [ 62.366514][ T4195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.374228][ T4195] Cannot create hsr debugfs directory [ 62.380315][ T1108] Bluetooth: hci1: command 0x0409 tx timeout [ 62.380315][ T4173] Bluetooth: hci0: command 0x0409 tx timeout [ 62.398384][ T4173] Bluetooth: hci2: command 0x0409 tx timeout [ 62.458946][ T1109] Bluetooth: hci4: command 0x0409 tx timeout [ 62.460154][ T21] Bluetooth: hci3: command 0x0409 tx timeout [ 62.500206][ T4194] device hsr_slave_0 entered promiscuous mode [ 62.507004][ T4194] device hsr_slave_1 entered promiscuous mode [ 62.513678][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.521468][ T4194] Cannot create hsr debugfs directory [ 62.634267][ T4188] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 62.648712][ T4188] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 62.680492][ T4188] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 62.691447][ T4188] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 62.803920][ T4195] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 62.819785][ T4195] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 62.839703][ T4195] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 62.850674][ T4195] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 62.900797][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.942558][ T4182] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.952956][ T4182] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.963050][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.973080][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.983217][ T4194] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 62.993728][ T4182] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.006795][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.025279][ T4194] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 63.035466][ T4194] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 63.045257][ T4182] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.059556][ T4194] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 63.078605][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.087780][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.097573][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.104930][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.115582][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.164775][ T4183] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.175790][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.185919][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.194859][ T1276] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.201964][ T1276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.210775][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.236866][ T4183] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.246190][ T4183] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.260595][ T4183] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.278966][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.293187][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.302910][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.313299][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.338749][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.347251][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.359735][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.375233][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.391799][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.400011][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.407784][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.416783][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.425517][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.432626][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.442922][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.451869][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.464811][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.493319][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.505310][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.518807][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.527671][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.536288][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.543408][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.554120][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.563658][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.573019][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.590691][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.622047][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.636527][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.652171][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.691851][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.702899][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.712916][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.721625][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.735646][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.762290][ T4195] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.779927][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.792072][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.811277][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.825866][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.837644][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.847111][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.866316][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.885101][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.920218][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.930341][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.950721][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.960328][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.969414][ T1276] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.976482][ T1276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.987010][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.996302][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.006058][ T1276] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.013208][ T1276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.022328][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.031398][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.044760][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.069570][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.078205][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.089358][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.097285][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.107841][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.118088][ T1276] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.125259][ T1276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.138759][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.147547][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.163065][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.172755][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.181862][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.190778][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.199382][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.207786][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.216387][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.224619][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.233365][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.241263][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.260126][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.269740][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.278182][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.285305][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.294775][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.304855][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.313503][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.320644][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.330763][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.340102][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.353083][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.371075][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.388255][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.397242][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.410436][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.420344][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.429692][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.438055][ T1276] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.445161][ T1276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.453186][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.459935][ T4230] Bluetooth: hci1: command 0x041b tx timeout [ 64.466707][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.478635][ T4230] Bluetooth: hci2: command 0x041b tx timeout [ 64.488787][ T4230] Bluetooth: hci0: command 0x041b tx timeout [ 64.510777][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.526891][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.537736][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.542155][ T2240] Bluetooth: hci3: command 0x041b tx timeout [ 64.555045][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.559372][ T2240] Bluetooth: hci4: command 0x041b tx timeout [ 64.570162][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.583671][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.594187][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.611634][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.635476][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.644790][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.656727][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.666237][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.680652][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.695476][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.726647][ T4188] device veth0_vlan entered promiscuous mode [ 64.735916][ T4183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.748050][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.758143][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.766035][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.775052][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.783636][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.792684][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.801835][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.811564][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.821434][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.830121][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.844595][ T4194] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.856159][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.874528][ T4188] device veth1_vlan entered promiscuous mode [ 64.886323][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.895923][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.913085][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.924998][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.981439][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.992526][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.006359][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.032750][ T4195] device veth0_vlan entered promiscuous mode [ 65.041060][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.059180][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.102311][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.112171][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.121200][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.130318][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.149764][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.164438][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.177018][ T4188] device veth0_macvtap entered promiscuous mode [ 65.188905][ T4195] device veth1_vlan entered promiscuous mode [ 65.220649][ T4188] device veth1_macvtap entered promiscuous mode [ 65.252471][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.262542][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.271984][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.280884][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.290775][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.299584][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.306993][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.314662][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.323666][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.332587][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.340775][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.357152][ T4182] device veth0_vlan entered promiscuous mode [ 65.373727][ T4182] device veth1_vlan entered promiscuous mode [ 65.391653][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.405488][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.433843][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.442935][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.452413][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.461401][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.471258][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.480296][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.489265][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.497869][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.509455][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.519596][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.528678][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.537454][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.546332][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.555716][ T4195] device veth0_macvtap entered promiscuous mode [ 65.566322][ T4188] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.577167][ T4188] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.586636][ T4188] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.595845][ T4188] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.623527][ T4195] device veth1_macvtap entered promiscuous mode [ 65.631997][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.642573][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.651139][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.660762][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.686746][ T4183] device veth0_vlan entered promiscuous mode [ 65.719400][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.733392][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.771402][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.794674][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.807176][ T4183] device veth1_vlan entered promiscuous mode [ 65.819975][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.831657][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.844654][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.853851][ T4182] device veth0_macvtap entered promiscuous mode [ 65.872107][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.887481][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.896734][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.917559][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.929304][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.942393][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.953166][ T4182] device veth1_macvtap entered promiscuous mode [ 65.973150][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.983285][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.996386][ T4195] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.010610][ T4195] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.021509][ T4195] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.030903][ T4195] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.056887][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.069406][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.077969][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.090371][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.101348][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.112046][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.123788][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.138130][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.149771][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.160151][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.171062][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.182698][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.200963][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.211621][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.222427][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.231237][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.241071][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.263729][ T4182] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.274015][ T4182] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.283340][ T4182] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.292106][ T4182] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.312750][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.327183][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.389630][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.398071][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.409631][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.418119][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.427292][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.435428][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.451750][ T4183] device veth0_macvtap entered promiscuous mode [ 66.460193][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.468153][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.476001][ T4194] device veth0_vlan entered promiscuous mode [ 66.486121][ T4274] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.503867][ T4274] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.517500][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.534490][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.543034][ T4284] Bluetooth: hci0: command 0x040f tx timeout [ 66.547539][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.549830][ T4284] Bluetooth: hci2: command 0x040f tx timeout [ 66.563637][ T4284] Bluetooth: hci1: command 0x040f tx timeout [ 66.578910][ T4183] device veth1_macvtap entered promiscuous mode [ 66.610850][ T4194] device veth1_vlan entered promiscuous mode [ 66.618827][ T4230] Bluetooth: hci4: command 0x040f tx timeout [ 66.624990][ T4230] Bluetooth: hci3: command 0x040f tx timeout [ 66.684074][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.686464][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.705151][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.716130][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.717846][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.727132][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.744508][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.755903][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.767433][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.781176][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.791945][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.802166][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.812886][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.823600][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.834247][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.847337][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.871329][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.894969][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.911252][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.929570][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.948017][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.957410][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.967901][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.977294][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.986650][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.996033][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.006608][ T4194] device veth0_macvtap entered promiscuous mode [ 67.032674][ T4183] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.050278][ T4183] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.064487][ T4183] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.078602][ T4183] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.110392][ T4194] device veth1_macvtap entered promiscuous mode [ 67.118576][ T1276] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.126640][ T1276] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.205922][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.237513][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.275689][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.289057][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.297046][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.301915][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.328069][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.349184][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.359555][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.370517][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.380998][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.393524][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.406126][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.422532][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.436510][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.446228][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.477393][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.498151][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.510070][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.520919][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.531147][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.542968][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.553430][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.564251][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.587932][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.621424][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.663649][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.676383][ T4194] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.706971][ T4194] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.728291][ T4194] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.737094][ T4194] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.786857][ T1276] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1 [ 67.811321][ T4274] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.828576][ T4274] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.839029][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.025999][ T1276] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.048063][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.066561][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.074137][ T1276] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.082300][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.155115][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.163159][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.178805][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.203767][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.244760][ T4330] netlink: 36 bytes leftover after parsing attributes in process `syz.3.16'. [ 68.311609][ T4327] syz.0.15 (4327) used greatest stack depth: 19872 bytes left [ 68.443108][ T4334] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 68.597781][ T4346] device syzkaller1 entered promiscuous mode [ 68.618877][ T4223] Bluetooth: hci1: command 0x0419 tx timeout [ 68.624991][ T4223] Bluetooth: hci2: command 0x0419 tx timeout [ 68.632262][ T4223] Bluetooth: hci0: command 0x0419 tx timeout [ 68.700684][ T4284] Bluetooth: hci3: command 0x0419 tx timeout [ 68.706909][ T4284] Bluetooth: hci4: command 0x0419 tx timeout [ 68.921312][ T4365] Zero length message leads to an empty skb [ 68.999361][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 69.114427][ T4377] netlink: 'syz.2.35': attribute type 1 has an invalid length. [ 69.163807][ T4378] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 69.399874][ T4396] syz.1.42 uses obsolete (PF_INET,SOCK_PACKET) [ 69.457945][ T4399] xt_hashlimit: size too large, truncated to 1048576 [ 70.880152][ T4420] loop2: detected capacity change from 0 to 32768 [ 70.909516][ T4420] ======================================================= [ 70.909516][ T4420] WARNING: The mand mount option has been deprecated and [ 70.909516][ T4420] and is ignored by this kernel. Remove the mand [ 70.909516][ T4420] option from the mount to silence this warning. [ 70.909516][ T4420] ======================================================= [ 71.010192][ T4459] netlink: 'syz.1.72': attribute type 3 has an invalid length. [ 71.063895][ T4459] netlink: 1644 bytes leftover after parsing attributes in process `syz.1.72'. [ 71.253345][ T4468] device veth1_macvtap left promiscuous mode [ 71.263687][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.270495][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.298707][ T4173] Bluetooth: hci4: command 0x0405 tx timeout [ 71.896606][ T4498] netlink: 8 bytes leftover after parsing attributes in process `syz.4.88'. [ 72.188554][ T4504] netlink: 12 bytes leftover after parsing attributes in process `syz.4.91'. [ 72.412107][ T4508] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 72.418985][ T4508] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 72.478067][ T4500] device erspan0 entered promiscuous mode [ 72.729359][ T4516] device syzkaller0 entered promiscuous mode [ 73.259794][ T4541] netlink: 60 bytes leftover after parsing attributes in process `syz.3.105'. [ 73.700773][ T4556] netlink: 40 bytes leftover after parsing attributes in process `syz.3.112'. [ 73.749710][ T4556] netlink: 40 bytes leftover after parsing attributes in process `syz.3.112'. [ 73.759098][ T4556] netlink: 40 bytes leftover after parsing attributes in process `syz.3.112'. [ 73.820700][ T4559] device syzkaller0 entered promiscuous mode [ 73.970944][ T4562] xt_hashlimit: size too large, truncated to 1048576 [ 74.016751][ T4564] device syzkaller0 entered promiscuous mode [ 74.351550][ T4543] netlink: 28 bytes leftover after parsing attributes in process `syz.4.106'. [ 74.931172][ T4593] netlink: 8 bytes leftover after parsing attributes in process `syz.0.127'. [ 75.176631][ T4604] netlink: 'syz.0.134': attribute type 1 has an invalid length. [ 76.416827][ T4646] team0: No ports can be present during mode change [ 76.977090][ T4672] netlink: 4 bytes leftover after parsing attributes in process `syz.0.164'. [ 77.035934][ T4672] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.045146][ T4672] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.054005][ T4672] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.062801][ T4672] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.081362][ T4672] netlink: 4 bytes leftover after parsing attributes in process `syz.0.164'. [ 77.193979][ T4683] netlink: 12 bytes leftover after parsing attributes in process `syz.0.166'. [ 77.995133][ T4697] device syzkaller0 entered promiscuous mode [ 78.087056][ T4711] netlink: 20 bytes leftover after parsing attributes in process `syz.2.177'. [ 78.112007][ T9] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1 [ 78.565236][ T4718] device syzkaller0 entered promiscuous mode [ 78.694793][ T4745] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 78.699335][ T4173] Bluetooth: hci4: command 0x0405 tx timeout [ 78.879772][ T4754] tls_set_device_offload_rx: netdev not found [ 78.925333][ T4758] tipc: Started in network mode [ 78.942494][ T4758] tipc: Node identity eea26aeac8a7, cluster identity 4711 [ 78.978694][ T4758] tipc: Enabled bearer , priority 0 [ 79.005002][ T4761] device syzkaller0 entered promiscuous mode [ 79.039070][ T4758] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 79.110303][ T4761] tipc: Resetting bearer [ 79.149610][ T4757] tipc: Resetting bearer [ 79.254668][ T4757] tipc: Disabling bearer [ 79.645176][ T4800] device bond_slave_0 entered promiscuous mode [ 80.394622][ T4841] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 80.675465][ T4851] __nla_validate_parse: 1 callbacks suppressed [ 80.675481][ T4851] netlink: 4 bytes leftover after parsing attributes in process `syz.4.223'. [ 80.744859][ T4851] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.753881][ T4851] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.763326][ T4851] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.772277][ T4851] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.795966][ T4851] netlink: 4 bytes leftover after parsing attributes in process `syz.4.223'. [ 80.929517][ T4855] device syzkaller0 entered promiscuous mode [ 81.502113][ T23] cfg80211: failed to load regulatory.db [ 81.806906][ T4891] device syzkaller0 entered promiscuous mode [ 82.047105][ T4914] netlink: 16 bytes leftover after parsing attributes in process `syz.3.245'. [ 82.197259][ T4929] xt_hashlimit: size too large, truncated to 1048576 [ 82.347314][ T4931] netlink: 'syz.2.250': attribute type 10 has an invalid length. [ 82.377685][ T4931] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.396525][ T4931] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 82.775771][ T4951] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 82.907321][ T4952] [ 82.909792][ T4952] ====================================================== [ 82.916823][ T4952] WARNING: possible circular locking dependency detected [ 82.923863][ T4952] syzkaller #0 Not tainted [ 82.928298][ T4952] ------------------------------------------------------ [ 82.935055][ T4958] netlink: 8 bytes leftover after parsing attributes in process `syz.1.261'. [ 82.935328][ T4952] syz.2.258/4952 is trying to acquire lock: [ 82.935340][ T4952] ffff88807ac7b120 (sk_lock-AF_AX25){+.+.}-{0:0}, at: ax25_device_event+0x217/0x4f0 [ 82.959502][ T4952] [ 82.959502][ T4952] but task is already holding lock: [ 82.966882][ T4952] ffffffff8d232788 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x54e/0xe50 [ 82.975179][ T4952] [ 82.975179][ T4952] which lock already depends on the new lock. [ 82.975179][ T4952] [ 82.985623][ T4952] [ 82.985623][ T4952] the existing dependency chain (in reverse order) is: [ 82.994655][ T4952] [ 82.994655][ T4952] -> #1 (rtnl_mutex){+.+.}-{3:3}: [ 83.001902][ T4952] __mutex_lock_common+0x1eb/0x2390 [ 83.007671][ T4952] mutex_lock_nested+0x17/0x20 [ 83.013086][ T4952] ax25_setsockopt+0x830/0xa40 [ 83.018398][ T4952] __sys_setsockopt+0x2bf/0x3d0 [ 83.023785][ T4952] __x64_sys_setsockopt+0xb1/0xc0 [ 83.029350][ T4952] do_syscall_64+0x4c/0xa0 [ 83.034304][ T4952] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 83.040749][ T4952] [ 83.040749][ T4952] -> #0 (sk_lock-AF_AX25){+.+.}-{0:0}: [ 83.048431][ T4952] __lock_acquire+0x2c33/0x7c60 [ 83.053873][ T4952] lock_acquire+0x197/0x3f0 [ 83.058950][ T4952] lock_sock_nested+0x44/0x100 [ 83.064293][ T4952] ax25_device_event+0x217/0x4f0 [ 83.069901][ T4952] raw_notifier_call_chain+0xcb/0x160 [ 83.075834][ T4952] __dev_notify_flags+0x178/0x2d0 [ 83.081437][ T4952] dev_change_flags+0xe3/0x1a0 [ 83.086767][ T4952] dev_ifsioc+0x147/0xe70 [ 83.091792][ T4952] dev_ioctl+0x55f/0xe50 [ 83.096699][ T4952] sock_do_ioctl+0x222/0x2f0 [ 83.101846][ T4952] sock_ioctl+0x4ed/0x6e0 [ 83.106727][ T4952] __se_sys_ioctl+0xfa/0x170 [ 83.111876][ T4952] do_syscall_64+0x4c/0xa0 [ 83.116857][ T4952] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 83.123304][ T4952] [ 83.123304][ T4952] other info that might help us debug this: [ 83.123304][ T4952] [ 83.133581][ T4952] Possible unsafe locking scenario: [ 83.133581][ T4952] [ 83.141062][ T4952] CPU0 CPU1 [ 83.146455][ T4952] ---- ---- [ 83.151839][ T4952] lock(rtnl_mutex); [ 83.155867][ T4952] lock(sk_lock-AF_AX25); [ 83.162834][ T4952] lock(rtnl_mutex); [ 83.169371][ T4952] lock(sk_lock-AF_AX25); [ 83.173818][ T4952] [ 83.173818][ T4952] *** DEADLOCK *** [ 83.173818][ T4952] [ 83.181989][ T4952] 1 lock held by syz.2.258/4952: [ 83.186954][ T4952] #0: ffffffff8d232788 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x54e/0xe50 [ 83.195710][ T4952] [ 83.195710][ T4952] stack backtrace: [ 83.201754][ T4952] CPU: 1 PID: 4952 Comm: syz.2.258 Not tainted syzkaller #0 [ 83.209074][ T4952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 83.219177][ T4952] Call Trace: [ 83.222480][ T4952] [ 83.225436][ T4952] dump_stack_lvl+0x168/0x230 [ 83.230142][ T4952] ? load_image+0x3b0/0x3b0 [ 83.234678][ T4952] ? show_regs_print_info+0x20/0x20 [ 83.239910][ T4952] ? print_circular_bug+0x12b/0x1a0 [ 83.245134][ T4952] check_noncircular+0x274/0x310 [ 83.250097][ T4952] ? add_chain_block+0x940/0x940 [ 83.255056][ T4952] ? lockdep_lock+0xdc/0x1e0 [ 83.259669][ T4952] ? lockdep_unlock+0x134/0x2d0 [ 83.264561][ T4952] ? mark_lock+0x94/0x320 [ 83.268916][ T4952] __lock_acquire+0x2c33/0x7c60 [ 83.273803][ T4952] ? lock_chain_count+0x20/0x20 [ 83.278682][ T4952] ? mark_lock+0x94/0x320 [ 83.283051][ T4952] ? verify_lock_unused+0x140/0x140 [ 83.288278][ T4952] ? verify_lock_unused+0x140/0x140 [ 83.293503][ T4952] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 83.299512][ T4952] ? lockdep_hardirqs_on_prepare+0x760/0x760 [ 83.305523][ T4952] ? __local_bh_enable_ip+0x12a/0x1b0 [ 83.310927][ T4952] ? mark_lock+0x94/0x320 [ 83.315290][ T4952] lock_acquire+0x197/0x3f0 [ 83.319833][ T4952] ? ax25_device_event+0x217/0x4f0 [ 83.324972][ T4952] ? lock_chain_count+0x20/0x20 [ 83.329855][ T4952] ? read_lock_is_recursive+0x10/0x10 [ 83.335267][ T4952] ? __local_bh_enable_ip+0x12a/0x1b0 [ 83.340664][ T4952] ? lockdep_hardirqs_on+0x94/0x140 [ 83.345892][ T4952] ? __local_bh_enable_ip+0x12a/0x1b0 [ 83.351315][ T4952] ? _local_bh_enable+0xa0/0xa0 [ 83.356196][ T4952] lock_sock_nested+0x44/0x100 [ 83.360990][ T4952] ? ax25_device_event+0x217/0x4f0 [ 83.366132][ T4952] ax25_device_event+0x217/0x4f0 [ 83.371106][ T4952] raw_notifier_call_chain+0xcb/0x160 [ 83.376524][ T4952] __dev_notify_flags+0x178/0x2d0 [ 83.381573][ T4952] ? __dev_change_flags+0x6a0/0x6a0 [ 83.386803][ T4952] ? __dev_change_flags+0x4bb/0x6a0 [ 83.392025][ T4952] ? dev_get_flags+0x1c0/0x1c0 [ 83.396811][ T4952] ? do_raw_spin_unlock+0x11d/0x230 [ 83.402026][ T4952] dev_change_flags+0xe3/0x1a0 [ 83.406826][ T4952] dev_ifsioc+0x147/0xe70 [ 83.411258][ T4952] ? dev_ioctl+0x54e/0xe50 [ 83.415693][ T4952] ? dev_ioctl+0xe50/0xe50 [ 83.420134][ T4952] ? apparmor_capable+0x12c/0x190 [ 83.425200][ T4952] ? full_name_hash+0x8e/0xe0 [ 83.429904][ T4952] dev_ioctl+0x55f/0xe50 [ 83.434214][ T4952] ? _copy_from_user+0x111/0x170 [ 83.439225][ T4952] sock_do_ioctl+0x222/0x2f0 [ 83.443844][ T4952] ? sock_show_fdinfo+0xb0/0xb0 [ 83.448727][ T4952] sock_ioctl+0x4ed/0x6e0 [ 83.453082][ T4952] ? sock_poll+0x3f0/0x3f0 [ 83.457535][ T4952] ? bpf_lsm_file_ioctl+0x5/0x10 [ 83.462511][ T4952] ? security_file_ioctl+0x7c/0xa0 [ 83.467655][ T4952] ? sock_poll+0x3f0/0x3f0 [ 83.472098][ T4952] __se_sys_ioctl+0xfa/0x170 [ 83.476723][ T4952] do_syscall_64+0x4c/0xa0 [ 83.481165][ T4952] ? clear_bhb_loop+0x30/0x80 [ 83.485869][ T4952] ? clear_bhb_loop+0x30/0x80 [ 83.490572][ T4952] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 83.496503][ T4952] RIP: 0033:0x7f9f694c8749 [ 83.500939][ T4952] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.520581][ T4952] RSP: 002b:00007f9f6770e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 83.529037][ T4952] RAX: ffffffffffffffda RBX: 00007f9f6971f090 RCX: 00007f9f694c8749 [ 83.537044][ T4952] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000004 [ 83.545041][ T4952] RBP: 00007f9f6954cf91 R08: 0000000000000000 R09: 0000000000000000 [ 83.553071][ T4952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 83.561075][ T4952] R13: 00007f9f6971f128 R14: 00007f9f6971f090 R15: 00007ffff4edde48 [ 83.569090][ T4952] [ 83.644771][ T4952] ================================================================== [ 83.652905][ T4952] BUG: KASAN: use-after-free in ax25_unregister_dev_sysctl+0x33/0xa0 [ 83.661030][ T4952] Read of size 8 at addr ffff888023506718 by task syz.2.258/4952 [ 83.668764][ T4952] [ 83.671116][ T4952] CPU: 1 PID: 4952 Comm: syz.2.258 Not tainted syzkaller #0 [ 83.678428][ T4952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 83.688497][ T4952] Call Trace: [ 83.691809][ T4952] [ 83.694755][ T4952] dump_stack_lvl+0x168/0x230 [ 83.699460][ T4952] ? show_regs_print_info+0x20/0x20 [ 83.704679][ T4952] ? _printk+0xcc/0x110 [ 83.708867][ T4952] ? load_image+0x3b0/0x3b0 [ 83.713385][ T4952] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 83.718781][ T4952] ? rcu_is_watching+0x11/0xa0 [ 83.723563][ T4952] ? lock_chain_count+0x20/0x20 [ 83.728437][ T4952] print_address_description+0x60/0x2d0 [ 83.734003][ T4952] ? ax25_unregister_dev_sysctl+0x33/0xa0 [ 83.739759][ T4952] kasan_report+0xdf/0x130 [ 83.744194][ T4952] ? ax25_unregister_dev_sysctl+0x33/0xa0 [ 83.749936][ T4952] ax25_unregister_dev_sysctl+0x33/0xa0 [ 83.755536][ T4952] ax25_dev_device_down+0x5b/0x520 [ 83.760669][ T4952] ax25_device_event+0x4b4/0x4f0 [ 83.765634][ T4952] raw_notifier_call_chain+0xcb/0x160 [ 83.771038][ T4952] __dev_notify_flags+0x178/0x2d0 [ 83.776094][ T4952] ? __dev_change_flags+0x6a0/0x6a0 [ 83.781324][ T4952] ? __dev_change_flags+0x4bb/0x6a0 [ 83.786540][ T4952] ? dev_get_flags+0x1c0/0x1c0 [ 83.791320][ T4952] ? do_raw_spin_unlock+0x11d/0x230 [ 83.796542][ T4952] dev_change_flags+0xe3/0x1a0 [ 83.801324][ T4952] dev_ifsioc+0x147/0xe70 [ 83.805671][ T4952] ? dev_ioctl+0x54e/0xe50 [ 83.810123][ T4952] ? dev_ioctl+0xe50/0xe50 [ 83.814560][ T4952] ? apparmor_capable+0x12c/0x190 [ 83.819605][ T4952] ? full_name_hash+0x8e/0xe0 [ 83.824357][ T4952] dev_ioctl+0x55f/0xe50 [ 83.828625][ T4952] ? _copy_from_user+0x111/0x170 [ 83.833593][ T4952] sock_do_ioctl+0x222/0x2f0 [ 83.838208][ T4952] ? sock_show_fdinfo+0xb0/0xb0 [ 83.843083][ T4952] sock_ioctl+0x4ed/0x6e0 [ 83.847434][ T4952] ? sock_poll+0x3f0/0x3f0 [ 83.851892][ T4952] ? bpf_lsm_file_ioctl+0x5/0x10 [ 83.856864][ T4952] ? security_file_ioctl+0x7c/0xa0 [ 83.862008][ T4952] ? sock_poll+0x3f0/0x3f0 [ 83.866437][ T4952] __se_sys_ioctl+0xfa/0x170 [ 83.871045][ T4952] do_syscall_64+0x4c/0xa0 [ 83.875496][ T4952] ? clear_bhb_loop+0x30/0x80 [ 83.880187][ T4952] ? clear_bhb_loop+0x30/0x80 [ 83.884888][ T4952] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 83.890805][ T4952] RIP: 0033:0x7f9f694c8749 [ 83.895244][ T4952] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.914908][ T4952] RSP: 002b:00007f9f6770e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 83.923350][ T4952] RAX: ffffffffffffffda RBX: 00007f9f6971f090 RCX: 00007f9f694c8749 [ 83.931340][ T4952] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000004 [ 83.939338][ T4952] RBP: 00007f9f6954cf91 R08: 0000000000000000 R09: 0000000000000000 [ 83.947334][ T4952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 83.955323][ T4952] R13: 00007f9f6971f128 R14: 00007f9f6971f090 R15: 00007ffff4edde48 [ 83.963336][ T4952] [ 83.966378][ T4952] [ 83.968724][ T4952] Allocated by task 4370: [ 83.973072][ T4952] __kasan_kmalloc+0xb5/0xf0 [ 83.977696][ T4952] ax25_dev_device_up+0x50/0x580 [ 83.982661][ T4952] ax25_device_event+0x483/0x4f0 [ 83.987613][ T4952] raw_notifier_call_chain+0xcb/0x160 [ 83.993033][ T4952] __dev_notify_flags+0x178/0x2d0 [ 83.998082][ T4952] dev_change_flags+0xe3/0x1a0 [ 84.002862][ T4952] dev_ifsioc+0x147/0xe70 [ 84.007219][ T4952] dev_ioctl+0x55f/0xe50 [ 84.011489][ T4952] sock_do_ioctl+0x222/0x2f0 [ 84.016092][ T4952] sock_ioctl+0x4ed/0x6e0 [ 84.020435][ T4952] __se_sys_ioctl+0xfa/0x170 [ 84.025046][ T4952] do_syscall_64+0x4c/0xa0 [ 84.029474][ T4952] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 84.035389][ T4952] [ 84.037721][ T4952] Freed by task 4946: [ 84.041711][ T4952] kasan_set_track+0x4b/0x70 [ 84.046316][ T4952] kasan_set_free_info+0x1f/0x40 [ 84.051280][ T4952] ____kasan_slab_free+0xd5/0x110 [ 84.056328][ T4952] slab_free_freelist_hook+0xea/0x170 [ 84.061737][ T4952] kfree+0xef/0x2a0 [ 84.065563][ T4952] ax25_release+0x661/0x870 [ 84.070102][ T4952] sock_close+0xd5/0x240 [ 84.074368][ T4952] __fput+0x234/0x930 [ 84.078361][ T4952] task_work_run+0x125/0x1a0 [ 84.082963][ T4952] get_signal+0x1222/0x12c0 [ 84.087476][ T4952] arch_do_signal_or_restart+0xc1/0x1300 [ 84.093124][ T4952] exit_to_user_mode_loop+0x9e/0x130 [ 84.098436][ T4952] exit_to_user_mode_prepare+0xee/0x180 [ 84.104004][ T4952] syscall_exit_to_user_mode+0x16/0x40 [ 84.109490][ T4952] do_syscall_64+0x58/0xa0 [ 84.113959][ T4952] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 84.119870][ T4952] [ 84.122204][ T4952] The buggy address belongs to the object at ffff888023506700 [ 84.122204][ T4952] which belongs to the cache kmalloc-192 of size 192 [ 84.136268][ T4952] The buggy address is located 24 bytes inside of [ 84.136268][ T4952] 192-byte region [ffff888023506700, ffff8880235067c0) [ 84.149496][ T4952] The buggy address belongs to the page: [ 84.155261][ T4952] page:ffffea00008d4180 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888023506800 pfn:0x23506 [ 84.166737][ T4952] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 84.174327][ T4952] raw: 00fff00000000200 ffffea00008fb288 ffffea0000887ec8 ffff888016841a00 [ 84.182934][ T4952] raw: ffff888023506800 000000000010000f 00000001ffffffff 0000000000000000 [ 84.191528][ T4952] page dumped because: kasan: bad access detected [ 84.197960][ T4952] page_owner tracks the page as allocated [ 84.203693][ T4952] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 4182, ts 68890401917, free_ts 68888969821 [ 84.219680][ T4952] get_page_from_freelist+0x1b77/0x1c60 [ 84.225266][ T4952] __alloc_pages+0x1e1/0x470 [ 84.229871][ T4952] new_slab+0xb6/0x4b0 [ 84.233986][ T4952] ___slab_alloc+0x81e/0xdf0 [ 84.238615][ T4952] __kmalloc_node+0x200/0x3b0 [ 84.243307][ T4952] memcg_alloc_page_obj_cgroups+0x81/0x120 [ 84.249133][ T4952] slab_post_alloc_hook+0xba/0x380 [ 84.254261][ T4952] kmem_cache_alloc+0x100/0x290 [ 84.259130][ T4952] __d_alloc+0x2a/0x6f0 [ 84.263300][ T4952] d_alloc+0x4a/0x250 [ 84.267314][ T4952] lookup_one_qstr_excl+0xc6/0x240 [ 84.272443][ T4952] filename_create+0x21e/0x450 [ 84.277229][ T4952] do_mkdirat+0x9d/0x5a0 [ 84.281491][ T4952] __x64_sys_mkdirat+0x85/0x90 [ 84.286263][ T4952] do_syscall_64+0x4c/0xa0 [ 84.290693][ T4952] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 84.296608][ T4952] page last free stack trace: [ 84.301289][ T4952] free_unref_page_prepare+0x637/0x6c0 [ 84.306768][ T4952] free_unref_page+0x94/0x280 [ 84.311459][ T4952] qlist_free_all+0x35/0x90 [ 84.315975][ T4952] kasan_quarantine_reduce+0x150/0x160 [ 84.321453][ T4952] __kasan_slab_alloc+0x2f/0xd0 [ 84.326313][ T4952] slab_post_alloc_hook+0x4c/0x380 [ 84.331434][ T4952] kmem_cache_alloc+0x100/0x290 [ 84.336297][ T4952] __d_alloc+0x2a/0x6f0 [ 84.340473][ T4952] d_alloc_cursor+0x40/0xd0 [ 84.344996][ T4952] dcache_dir_open+0x37/0x70 [ 84.349605][ T4952] do_dentry_open+0x7ff/0xf80 [ 84.354296][ T4952] path_openat+0x2682/0x2f30 [ 84.358900][ T4952] do_filp_open+0x1b3/0x3e0 [ 84.363434][ T4952] do_sys_openat2+0x142/0x4a0 [ 84.368134][ T4952] __x64_sys_openat+0x135/0x160 [ 84.373007][ T4952] do_syscall_64+0x4c/0xa0 [ 84.377440][ T4952] [ 84.379787][ T4952] Memory state around the buggy address: [ 84.385444][ T4952] ffff888023506600: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 84.393531][ T4952] ffff888023506680: 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc [ 84.401606][ T4952] >ffff888023506700: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 84.409673][ T4952] ^ [ 84.414554][ T4952] ffff888023506780: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 84.422632][ T4952] ffff888023506800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 84.430705][ T4952] ================================================================== [ 84.462582][ T4952] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 84.469871][ T4952] CPU: 1 PID: 4952 Comm: syz.2.258 Tainted: G B syzkaller #0 [ 84.478568][ T4952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 84.488643][ T4952] Call Trace: [ 84.492030][ T4952] [ 84.494975][ T4952] dump_stack_lvl+0x168/0x230 [ 84.499692][ T4952] ? show_regs_print_info+0x20/0x20 [ 84.504912][ T4952] ? load_image+0x3b0/0x3b0 [ 84.509444][ T4952] panic+0x2c9/0x7f0 [ 84.513373][ T4952] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 84.519573][ T4952] ? bpf_jit_dump+0xd0/0xd0 [ 84.524114][ T4952] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 84.530060][ T4952] ? _raw_spin_unlock+0x40/0x40 [ 84.534963][ T4952] ? ax25_unregister_dev_sysctl+0x33/0xa0 [ 84.540714][ T4952] check_panic_on_warn+0x80/0xa0 [ 84.545682][ T4952] ? ax25_unregister_dev_sysctl+0x33/0xa0 [ 84.551432][ T4952] end_report+0x6d/0xf0 [ 84.555606][ T4952] kasan_report+0x102/0x130 [ 84.560135][ T4952] ? ax25_unregister_dev_sysctl+0x33/0xa0 [ 84.565893][ T4952] ax25_unregister_dev_sysctl+0x33/0xa0 [ 84.571459][ T4952] ax25_dev_device_down+0x5b/0x520 [ 84.576593][ T4952] ax25_device_event+0x4b4/0x4f0 [ 84.581586][ T4952] raw_notifier_call_chain+0xcb/0x160 [ 84.586983][ T4952] __dev_notify_flags+0x178/0x2d0 [ 84.592026][ T4952] ? __dev_change_flags+0x6a0/0x6a0 [ 84.597248][ T4952] ? __dev_change_flags+0x4bb/0x6a0 [ 84.602471][ T4952] ? dev_get_flags+0x1c0/0x1c0 [ 84.607269][ T4952] ? do_raw_spin_unlock+0x11d/0x230 [ 84.612495][ T4952] dev_change_flags+0xe3/0x1a0 [ 84.617282][ T4952] dev_ifsioc+0x147/0xe70 [ 84.621637][ T4952] ? dev_ioctl+0x54e/0xe50 [ 84.626074][ T4952] ? dev_ioctl+0xe50/0xe50 [ 84.630512][ T4952] ? apparmor_capable+0x12c/0x190 [ 84.635574][ T4952] ? full_name_hash+0x8e/0xe0 [ 84.640276][ T4952] dev_ioctl+0x55f/0xe50 [ 84.644554][ T4952] ? _copy_from_user+0x111/0x170 [ 84.649519][ T4952] sock_do_ioctl+0x222/0x2f0 [ 84.654148][ T4952] ? sock_show_fdinfo+0xb0/0xb0 [ 84.659049][ T4952] sock_ioctl+0x4ed/0x6e0 [ 84.663396][ T4952] ? sock_poll+0x3f0/0x3f0 [ 84.667836][ T4952] ? bpf_lsm_file_ioctl+0x5/0x10 [ 84.672787][ T4952] ? security_file_ioctl+0x7c/0xa0 [ 84.677930][ T4952] ? sock_poll+0x3f0/0x3f0 [ 84.682362][ T4952] __se_sys_ioctl+0xfa/0x170 [ 84.686982][ T4952] do_syscall_64+0x4c/0xa0 [ 84.691445][ T4952] ? clear_bhb_loop+0x30/0x80 [ 84.696161][ T4952] ? clear_bhb_loop+0x30/0x80 [ 84.700866][ T4952] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 84.706789][ T4952] RIP: 0033:0x7f9f694c8749 [ 84.711216][ T4952] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.730894][ T4952] RSP: 002b:00007f9f6770e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 84.739354][ T4952] RAX: ffffffffffffffda RBX: 00007f9f6971f090 RCX: 00007f9f694c8749 [ 84.747349][ T4952] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000004 [ 84.755342][ T4952] RBP: 00007f9f6954cf91 R08: 0000000000000000 R09: 0000000000000000 [ 84.763339][ T4952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.771320][ T4952] R13: 00007f9f6971f128 R14: 00007f9f6971f090 R15: 00007ffff4edde48 [ 84.779320][ T4952] [ 84.782667][ T4952] Kernel Offset: disabled [ 84.787015][ T4952] Rebooting in 86400 seconds..