last executing test programs: 2.984724291s ago: executing program 3 (id=1244): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x42280, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0xb3}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c961}, 0x4008080) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.495810631s ago: executing program 1 (id=1246): sendmmsg(0xffffffffffffffff, &(0x7f0000003300)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="b143e9685b9ff740cceddd593a674ee0a25f11efcd98314cfc63ef8778c526ac382ce77b77c6f956a8c853911fbd4954e8431e46dc0977e2497e9faf55fb9555c601817590529f36d3ef8b9c183114554292194ff9720241023bb48dfbb6dceebaf32f9b3377f5baa09935ada6d0eab3abaedc97f6084c040e83ceabd6794b532f726eba28a70b837b96d8bc7cd3cd38d2613fd82d618ccf1e94ced9a627ba9e7afb7f9ce30d1e0d6184d6030f4a49c8", 0xb0}, {&(0x7f0000000240)="e536f7deb3", 0x5}], 0x2}}], 0x1, 0x40) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0xf00) bind$can_raw(r0, &(0x7f0000000080), 0x10) 2.289916495s ago: executing program 3 (id=1250): poll(0x0, 0x0, 0xfff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x12) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) 2.251206096s ago: executing program 1 (id=1251): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r1, 0x5, 0x3, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f00000002800000", 0x2c}], 0x1}, 0x0) r9 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r9, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="00ff00", 'bond0\x00'}}, 0x1e) sendmmsg(r9, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r11, 0x21eae}}, 0x20}}, 0x0) 2.097122249s ago: executing program 1 (id=1253): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r1, 0x5, 0x3, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f00000002800000", 0x2c}], 0x1}, 0x0) r9 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r9, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="00ff00", 'bond0\x00'}}, 0x1e) sendmmsg(r9, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000020000210d0000aaa8fa017242ba9380d412000000000000002900000003000000", 0xeb0e7a7d4c6f0553) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) 1.597190229s ago: executing program 1 (id=1266): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r1, 0x5, 0x3, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f00000002800000", 0x2c}], 0x1}, 0x0) r9 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r9, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="00ff00", 'bond0\x00'}}, 0x1e) sendmmsg(r9, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000020000210d0000aaa8fa017242ba9380d412000000000000002900000003000000", 0xeb0e7a7d4c6f0553) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) 1.391856802s ago: executing program 3 (id=1260): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x42280, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0xb3}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c961}, 0x4008080) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.241297175s ago: executing program 4 (id=1261): sendmmsg(0xffffffffffffffff, &(0x7f0000003300)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="b143e9685b9ff740cceddd593a674ee0a25f11efcd98314cfc63ef8778c526ac382ce77b77c6f956a8c853911fbd4954e8431e46dc0977e2497e9faf55fb9555c601817590529f36d3ef8b9c183114554292194ff9720241023bb48dfbb6dceebaf32f9b3377f5baa09935ada6d0eab3abaedc97f6084c040e83ceabd6794b532f726eba28a70b837b96d8bc7cd3cd38d2613fd82d618ccf1e94ced9a627ba9e7afb7f9ce30d1e0d6184d6030f4a49c8", 0xb0}, {&(0x7f0000000240)="e536f7deb3", 0x5}], 0x2}}], 0x1, 0x40) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0xf00) bind$can_raw(r0, &(0x7f0000000080), 0x10) 1.240015046s ago: executing program 1 (id=1262): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffefd, 0x40000006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0x8, 0x4, 0x7, 0x1, 0x7}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x7}}]}, 0x40}}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.210948356s ago: executing program 2 (id=1263): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r1, 0x5, 0x3, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f00000002800000", 0x2c}], 0x1}, 0x0) r9 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r9, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="00ff00", 'bond0\x00'}}, 0x1e) sendmmsg(r9, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r11, 0x21eae}}, 0x20}}, 0x0) 1.129274898s ago: executing program 3 (id=1264): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="b4000000", @ANYRES16=r1, @ANYBLOB="05043fbd7000fddbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="9800028040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f6164636173"], 0xb4}, 0x1, 0x0, 0x0, 0x20000401}, 0x44084) 1.111938728s ago: executing program 0 (id=1265): unshare(0x24020400) r0 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r0, &(0x7f0000000080)={0x1d, 0x0, 0xffffffffffffffff, {0x1}}, 0x18) 1.01008609s ago: executing program 0 (id=1267): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2c2b01, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x8000000, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x1000100, 0x7, 0x6361, 0x805, 0x9, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008050}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56441, 0x70bd29, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0x11}, {0xffe6, 0xb}, {0xb, 0x4}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x34, 0x2, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xa47c}, @TCA_FQ_PIE_BYTEMODE={0x8, 0xb, 0x1}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x9}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x2}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x1}, @TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x5f}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x30004061}, 0x4000000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.00991531s ago: executing program 3 (id=1268): unshare(0x24020400) r0 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvfrom$packet(r0, 0x0, 0x0, 0x40000000, &(0x7f0000000440)={0x11, 0x1c, 0x0, 0x1, 0x6, 0x6, @multicast}, 0x14) 994.1166ms ago: executing program 1 (id=1269): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000002d00)={0x9, {{0xa, 0x4e23, 0x1000, @mcast2, 0x3}}, {{0xa, 0x4e22, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0xb0}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f00000005c0)={0x8, {{0xa, 0x4e24, 0x5, @mcast2, 0x6d00}}, {{0xa, 0x4620, 0xfffffff8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000}}}, 0x108) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000400)={0x0, @local, @multicast2}, &(0x7f0000000440)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000480)) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x37, 0x800000, 0x8, 0x9, 0x8000}) write$bt_hci(r1, &(0x7f0000000080)=ANY=[], 0x6) 960.097991ms ago: executing program 4 (id=1270): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001080)={0x18, 0x19, 0x1, 0x0, 0x25dfdbfb, {0x1d, 0xd601, 0x9}, [@nested={0x4, 0x6}]}, 0x18}, 0x1, 0x0, 0x0, 0x5}, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'macvlan1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001380)=@newchain={0x24, 0x64, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x10, 0x1}, {0xe, 0x9}, {0x5, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x44851}, 0x20040054) 866.123683ms ago: executing program 3 (id=1271): socket$netlink(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x10f, 0x82, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000002000000000000000000001e95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7336b5d}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f00000002c0)="fef351f6b11f421a5b4e415288ca", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}, 0x50) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000004c0)={0x5, 0x40000}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x20000000, 0x0, 0x0, 0x1, 0x3}, {0xfffffffffffffffc, 0x0, 0x1000000}, 0xffffffff, 0x0, 0x1}, {{@in=@empty, 0x2, 0x33}, 0x0, @in=@multicast2, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_init_net_socket$ax25(0x3, 0x3, 0xcf) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r7, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) setsockopt$ax25_SO_BINDTODEVICE(r6, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="300000004a00010025bd7000fcdbdf250a008000", @ANYRES32=0x0, @ANYBLOB="0100000014000100ff"], 0x30}}, 0x40080) r8 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r8, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfc, 0x100000}, 0xc) 841.513163ms ago: executing program 4 (id=1273): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(0x0, r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) close(r8) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r8, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffe6, 0xb}, {0xffe0, 0xa858712265c6c23}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 793.605754ms ago: executing program 2 (id=1274): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x81}]}}]}, 0x3c}}, 0x0) 679.827846ms ago: executing program 0 (id=1275): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x10) socket$kcm(0x29, 0x5, 0x0) socket$inet(0x2b, 0x801, 0x0) epoll_create1(0x0) socket(0x1d, 0x2, 0x6) socket$netlink(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000c7aa00859d37040e1a8bd30000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x48) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000010651fbe347b2c2b00000c00018008000100", @ANYRES8=r3], 0x20}}, 0x0) 542.105959ms ago: executing program 2 (id=1276): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x42280, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0xb3}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c961}, 0x4008080) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 538.560239ms ago: executing program 0 (id=1277): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r1, 0x5, 0x3, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f0000000280000012", 0x2d}], 0x1}, 0x0) r9 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r9, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="00ff00", 'bond0\x00'}}, 0x1e) sendmmsg(r9, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000020000210d0000aaa8fa017242ba9380d412000000000000002900000003000000", 0xeb0e7a7d4c6f0553) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) 485.5534ms ago: executing program 4 (id=1278): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e1d, 0x3, @remote, 0x2}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x2, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 445.328361ms ago: executing program 0 (id=1279): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x2, 0x9}, &(0x7f00000000c0)=0x90) 330.137003ms ago: executing program 0 (id=1280): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffefd, 0x40000006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0x8, 0x4, 0x7, 0x1, 0x7}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x7}}]}, 0x40}}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 329.835883ms ago: executing program 4 (id=1281): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@deltfilter={0x24, 0x2d, 0x8, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xc, 0x3}, {0xb, 0x2}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0xf, 0x3}, {0x8, 0xffe0}, {0x0, 0x10}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x807f}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x9}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 275.210355ms ago: executing program 2 (id=1282): unshare(0x24020400) r0 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvfrom$packet(r0, 0x0, 0x0, 0x40000000, &(0x7f0000000440)={0x11, 0x1c, 0x0, 0x1, 0x6, 0x6, @multicast}, 0x14) 113.334887ms ago: executing program 2 (id=1283): syz_emit_ethernet(0x5e, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0xf, 0x4, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x5, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, {[@timestamp_addr={0x44, 0x14, 0x9, 0x3, 0x0, [{@empty}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x4000}]}, @ssrr={0x89, 0xf, 0xce, [@multicast2, @loopback, @loopback]}, @generic={0x83, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) 34.082539ms ago: executing program 4 (id=1284): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r1, 0x5, 0x3, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f00000002800000", 0x2c}], 0x1}, 0x0) r9 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r9, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="00ff00", 'bond0\x00'}}, 0x1e) sendmmsg(r9, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r11, 0x21eae}}, 0x20}}, 0x0) 0s ago: executing program 2 (id=1285): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa006}, 0x4) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r1, &(0x7f0000002140)={0xa, 0x4e28, 0x8, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00) kernel console output (not intermixed with test programs): tx timeout [ 175.281366][ T4219] device hsr_slave_1 entered promiscuous mode [ 175.284741][ T1108] Bluetooth: hci1: command 0x0409 tx timeout [ 175.299537][ T4219] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 175.307166][ T4219] Cannot create hsr debugfs directory [ 175.344479][ T13] Bluetooth: hci3: command 0x0409 tx timeout [ 175.366518][ T4215] device hsr_slave_0 entered promiscuous mode [ 175.373216][ T4215] device hsr_slave_1 entered promiscuous mode [ 175.381666][ T4215] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 175.389979][ T4215] Cannot create hsr debugfs directory [ 175.700924][ T4210] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 175.717763][ T4210] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 175.728241][ T4210] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 175.742248][ T4210] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 175.759987][ T4222] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 175.781959][ T4222] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 175.793551][ T4222] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 175.803970][ T4222] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 175.860703][ T4211] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 175.897341][ T4211] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 175.915029][ T4211] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 175.943053][ T4211] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 175.986670][ T4210] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.019709][ T4222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.028788][ T4215] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 176.050519][ T4215] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 176.060487][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 176.070283][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 176.082822][ T4210] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.090776][ T4215] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 176.115304][ T4215] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 176.142498][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 176.151436][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 176.164732][ T4240] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.172116][ T4240] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.191829][ T4222] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.209217][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 176.223051][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 176.233628][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 176.244288][ T4240] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.251362][ T4240] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.259627][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 176.268244][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 176.293741][ T4219] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 176.303765][ T4219] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 176.313985][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 176.323644][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 176.333114][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 176.343450][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 176.352763][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 176.361756][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 176.370718][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 176.379352][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 176.390812][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 176.411154][ T4210] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 176.425695][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 176.433631][ T4219] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 176.443540][ T4219] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 176.453532][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 176.463378][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 176.472850][ T4240] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.479949][ T4240] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.488023][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 176.496999][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 176.505533][ T4240] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.512572][ T4240] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.520464][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 176.529904][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 176.540703][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 176.550698][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 176.584712][ T813] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 176.619973][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 176.631940][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 176.691857][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 176.701743][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 176.719023][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 176.732156][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 176.741145][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 176.751853][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 176.761112][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 176.772256][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 176.788268][ T4211] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.844477][ T813] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 176.852087][ T813] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 176.871711][ T4211] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.890936][ T4215] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.903553][ T813] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 176.911965][ T813] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 176.931032][ T4210] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.949442][ T4215] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.970135][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 176.984737][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 177.004920][ T4240] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.012037][ T4240] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.020214][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 177.028582][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 177.060534][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 177.070626][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 177.080771][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 177.091613][ T4240] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.098756][ T4240] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.107531][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 177.116831][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 177.126071][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 177.134996][ T4240] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.142055][ T4240] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.170064][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 177.180253][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 177.199607][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 177.210128][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 177.220292][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 177.229585][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 177.238987][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 177.249704][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 177.258553][ T4240] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.265681][ T4240] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.274065][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 177.283939][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 177.292077][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 177.310818][ T4211] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 177.322993][ T4211] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 177.341968][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 177.344799][ T4270] Bluetooth: hci0: command 0x041b tx timeout [ 177.350669][ T4292] Bluetooth: hci1: command 0x041b tx timeout [ 177.368506][ T4292] Bluetooth: hci4: command 0x041b tx timeout [ 177.375507][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 177.376222][ T4292] Bluetooth: hci2: command 0x041b tx timeout [ 177.396109][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 177.411231][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 177.420519][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 177.429649][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 177.437868][ T4292] Bluetooth: hci3: command 0x041b tx timeout [ 177.439177][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 177.466130][ T4222] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.483394][ T4219] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.493456][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 177.510768][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 177.520887][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 177.531077][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 177.570710][ T4215] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 177.582306][ T4215] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 177.606663][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 177.615643][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 177.628212][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 177.640662][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 177.650062][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 177.658900][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 177.668389][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 177.676988][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 177.686325][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 177.695664][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 177.709082][ T4219] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.755140][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 177.769415][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 177.778929][ T1228] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.786082][ T1228] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.795084][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 177.802658][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 177.810698][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 177.819709][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 177.834038][ T4211] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.845552][ T4222] device veth0_vlan entered promiscuous mode [ 177.868304][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 177.882867][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 177.892809][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 177.905234][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 177.914158][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 177.941516][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 177.951274][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 177.960141][ T1228] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.967249][ T1228] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.980091][ T4222] device veth1_vlan entered promiscuous mode [ 178.018519][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 178.026950][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 178.035788][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 178.044188][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 178.056164][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 178.066738][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 178.076206][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 178.085195][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 178.093832][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 178.103029][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 178.111316][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 178.119813][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 178.138369][ T4210] device veth0_vlan entered promiscuous mode [ 178.159677][ T4210] device veth1_vlan entered promiscuous mode [ 178.166884][ T813] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 178.175722][ T813] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 178.183796][ T813] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 178.191898][ T813] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 178.199684][ T813] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 178.210642][ T813] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 178.225656][ T4215] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.247699][ T813] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 178.257192][ T813] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 178.279528][ T4222] device veth0_macvtap entered promiscuous mode [ 178.295654][ T813] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 178.303919][ T813] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 178.314154][ T813] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 178.324999][ T813] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 178.333466][ T813] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 178.342812][ T813] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 178.351448][ T813] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 178.361487][ T813] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 178.369945][ T813] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 178.379784][ T813] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 178.392129][ T4222] device veth1_macvtap entered promiscuous mode [ 178.401834][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 178.413362][ T4211] device veth0_vlan entered promiscuous mode [ 178.438221][ T4222] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.454845][ T813] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 178.463093][ T813] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 178.480349][ T813] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 178.492555][ T813] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 178.506586][ T813] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 178.522332][ T4210] device veth0_macvtap entered promiscuous mode [ 178.533553][ T4222] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.551301][ T4211] device veth1_vlan entered promiscuous mode [ 178.563094][ T4210] device veth1_macvtap entered promiscuous mode [ 178.571757][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 178.581188][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 178.590687][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 178.599267][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 178.609781][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 178.627839][ T4222] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.638094][ T4222] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.647449][ T4222] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.657735][ T4222] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.696602][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 178.706043][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 178.716191][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 178.725162][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 178.733331][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 178.749784][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 178.759316][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 178.767713][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 178.775655][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 178.788347][ T4210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.799501][ T4210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.811592][ T4210] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.838926][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 178.848558][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 178.865753][ T4215] device veth0_vlan entered promiscuous mode [ 178.877832][ T4219] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.894501][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 178.908014][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 178.919756][ T4211] device veth0_macvtap entered promiscuous mode [ 178.928642][ T4210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.939341][ T4210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.951384][ T4210] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.999851][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 179.008657][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 179.019260][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 179.029945][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 179.039897][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 179.052370][ T4210] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.062536][ T4210] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.071370][ T4210] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.080563][ T4210] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.100606][ T4215] device veth1_vlan entered promiscuous mode [ 179.111492][ T4211] device veth1_macvtap entered promiscuous mode [ 179.130685][ T4219] device veth0_vlan entered promiscuous mode [ 179.142534][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 179.153345][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 179.163003][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 179.171905][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 179.180517][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 179.200286][ T4219] device veth1_vlan entered promiscuous mode [ 179.239592][ T4211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.251007][ T4211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.264514][ T4211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.277072][ T4211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.288650][ T4211] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.317220][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 179.328050][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 179.338074][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 179.347780][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 179.359449][ T4211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.370179][ T4211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.380288][ T4211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.390944][ T4211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.403278][ T4211] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.414671][ T4211] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.423396][ T4211] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.432731][ T4281] Bluetooth: hci2: command 0x040f tx timeout [ 179.437561][ T4211] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.439079][ T4281] Bluetooth: hci4: command 0x040f tx timeout [ 179.452010][ T4211] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.453729][ T4281] Bluetooth: hci1: command 0x040f tx timeout [ 179.468691][ T4281] Bluetooth: hci0: command 0x040f tx timeout [ 179.478846][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.487308][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.504903][ T4292] Bluetooth: hci3: command 0x040f tx timeout [ 179.505244][ T4219] device veth0_macvtap entered promiscuous mode [ 179.518614][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 179.528068][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 179.538677][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 179.546989][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 179.556055][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 179.565629][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 179.605657][ T4219] device veth1_macvtap entered promiscuous mode [ 179.648678][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.658060][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.677150][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 179.686452][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 179.694512][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 179.703133][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 179.721267][ T4215] device veth0_macvtap entered promiscuous mode [ 179.740089][ T4219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.752914][ T4219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.765000][ T4219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.775751][ T4219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.785797][ T4219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.796285][ T4219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.808192][ T4219] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.838281][ T4215] device veth1_macvtap entered promiscuous mode [ 179.853440][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 179.865294][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 179.875932][ T813] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.879275][ T4219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.883890][ T813] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.898628][ T4219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.913003][ T4219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.923819][ T4219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.940860][ T4219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.952119][ T4219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.970205][ T4219] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.001128][ T813] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 180.011972][ T813] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 180.021899][ T813] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 180.035410][ T4219] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.044149][ T4219] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.060211][ T4219] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.080070][ T4219] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.142973][ T1228] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.152436][ T1228] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.190351][ T813] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 180.205309][ T813] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.213318][ T813] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.237824][ T4322] tipc: Started in network mode [ 180.247497][ T4322] tipc: Node identity 12128bb4e015, cluster identity 4711 [ 180.255435][ T4322] tipc: Enabled bearer , priority 0 [ 180.263556][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 180.278172][ T1228] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.287373][ T1228] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.299081][ T4323] device syzkaller0 entered promiscuous mode [ 180.312223][ T4215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.325463][ T4215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.340473][ T4215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.351492][ T4215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.361470][ T4215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.371969][ T4215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.382640][ T4215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.393804][ T4215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.406916][ T4215] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.423341][ T4215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.435584][ T4215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.446028][ T4215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.457226][ T4215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.467389][ T4215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.479220][ T4215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.489372][ T4215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.500151][ T4215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.513491][ T4215] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.532370][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 180.542767][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 180.553045][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 180.562448][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 180.571841][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 180.597972][ T4323] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4'. [ 180.612952][ T4324] tipc: Resetting bearer [ 180.626950][ T4215] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.645253][ T4215] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.654101][ T4215] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.664545][ T4215] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.696718][ T4321] tipc: Resetting bearer [ 180.732102][ T4321] tipc: Disabling bearer [ 180.806157][ T1228] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.815474][ T1228] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.851042][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 180.929985][ T1228] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.951548][ T1228] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.993194][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 181.052060][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.070414][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.137625][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 181.210206][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.236866][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.343710][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 181.376148][ T4345] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 181.393557][ T4345] tipc: Enabled bearer , priority 10 [ 181.535270][ T4281] Bluetooth: hci0: command 0x0419 tx timeout [ 181.554278][ T4281] Bluetooth: hci1: command 0x0419 tx timeout [ 181.574060][ T4281] Bluetooth: hci4: command 0x0419 tx timeout [ 181.595511][ T4281] Bluetooth: hci2: command 0x0419 tx timeout [ 181.622026][ T4281] Bluetooth: hci3: command 0x0419 tx timeout [ 181.847905][ T4363] device geneve2 entered promiscuous mode [ 181.968807][ T4367] tipc: Started in network mode [ 181.973846][ T4367] tipc: Node identity a28ac184f5eb, cluster identity 4711 [ 181.991088][ T4367] tipc: Enabled bearer , priority 0 [ 182.000358][ T4336] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8'. [ 182.017820][ T4336] device vlan2 entered promiscuous mode [ 182.023410][ T4336] device gretap0 entered promiscuous mode [ 182.040460][ T4372] device syzkaller0 entered promiscuous mode [ 182.052293][ T4374] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 182.217004][ T4367] tipc: Resetting bearer [ 182.243055][ T4366] tipc: Resetting bearer [ 182.289039][ T4366] tipc: Disabling bearer [ 182.428133][ T4384] netlink: 40 bytes leftover after parsing attributes in process `syz.1.26'. [ 182.441456][ T4386] netlink: 'syz.4.24': attribute type 1 has an invalid length. [ 182.504079][ T4392] syz.3.29 uses obsolete (PF_INET,SOCK_PACKET) [ 182.506135][ T4271] tipc: Node number set to 4060580788 [ 182.545560][ T4392] device syzkaller1 entered promiscuous mode [ 182.620762][ T4396] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 182.681216][ T4391] tipc: Enabled bearer , priority 0 [ 182.695186][ T4393] device syzkaller0 entered promiscuous mode [ 182.835277][ T4393] tipc: Resetting bearer [ 182.868087][ T4407] tipc: Enabled bearer , priority 0 [ 182.898456][ T4407] device syzkaller0 entered promiscuous mode [ 182.918194][ T4390] tipc: Resetting bearer [ 182.940514][ T4390] tipc: Disabling bearer [ 182.972478][ T4407] tipc: Resetting bearer [ 182.990557][ T4416] device geneve2 entered promiscuous mode [ 183.001899][ T4406] tipc: Resetting bearer [ 183.020659][ T4406] tipc: Disabling bearer [ 183.318536][ T4420] tipc: Enabled bearer , priority 10 [ 183.515942][ T4427] tipc: Started in network mode [ 183.520919][ T4427] tipc: Node identity b606ace2ffed, cluster identity 4711 [ 183.570281][ T4427] tipc: Enabled bearer , priority 0 [ 183.611927][ T4433] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 183.631600][ T4431] device syzkaller0 entered promiscuous mode [ 183.702240][ T4427] tipc: Resetting bearer [ 183.719692][ T4436] tipc: Started in network mode [ 183.729572][ T4436] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 183.766827][ T4436] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 183.785011][ T4436] tipc: Enabled bearer , priority 10 [ 183.820719][ T4426] tipc: Resetting bearer [ 183.855143][ T4439] netlink: 'syz.0.42': attribute type 1 has an invalid length. [ 183.863874][ T4426] tipc: Disabling bearer [ 184.077136][ T4443] device syzkaller1 entered promiscuous mode [ 184.444352][ T1111] tipc: Node number set to 1466024324 [ 184.501216][ T4456] netlink: 'syz.1.51': attribute type 10 has an invalid length. [ 184.679264][ T4456] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 184.752008][ T4462] netlink: 'syz.4.52': attribute type 10 has an invalid length. [ 184.796150][ T4462] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 184.811063][ T4467] netlink: 'syz.3.53': attribute type 10 has an invalid length. [ 184.827885][ T4467] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 184.904345][ T23] tipc: Node number set to 1 [ 185.803787][ T4474] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.812259][ T4474] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.387067][ T4474] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.440470][ T4474] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.021502][ T4474] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.030555][ T4474] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.039730][ T4474] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.048872][ T4474] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.112275][ T4496] netlink: 20 bytes leftover after parsing attributes in process `syz.0.64'. [ 187.143283][ T4496] device vlan2 entered promiscuous mode [ 187.184555][ T4496] device gretap0 entered promiscuous mode [ 187.450760][ T4527] Zero length message leads to an empty skb [ 188.311146][ T4551] netlink: 'syz.4.81': attribute type 10 has an invalid length. [ 188.358890][ T4552] netlink: 'syz.0.82': attribute type 10 has an invalid length. [ 188.395691][ T4552] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 188.529345][ T4556] netlink: 'syz.4.83': attribute type 10 has an invalid length. [ 188.941436][ T4569] netlink: 'syz.3.99': attribute type 10 has an invalid length. [ 189.158230][ T4580] netlink: 'syz.0.93': attribute type 10 has an invalid length. [ 189.448098][ T4588] netlink: 'syz.3.96': attribute type 10 has an invalid length. [ 189.692826][ T4593] tipc: Enabled bearer , priority 0 [ 189.726210][ T4593] device syzkaller0 entered promiscuous mode [ 189.795351][ T4593] netlink: 20 bytes leftover after parsing attributes in process `syz.0.98'. [ 189.875115][ T4593] tipc: Resetting bearer [ 189.905031][ T4591] tipc: Resetting bearer [ 189.957339][ T4591] tipc: Disabling bearer [ 190.314016][ T4609] netlink: 'syz.3.106': attribute type 10 has an invalid length. [ 190.426186][ T4615] netlink: 'syz.0.109': attribute type 10 has an invalid length. [ 190.490182][ T4618] tipc: Enabled bearer , priority 0 [ 190.516555][ T4618] device syzkaller0 entered promiscuous mode [ 190.571088][ T4618] tipc: Resetting bearer [ 190.598716][ T4617] tipc: Resetting bearer [ 190.668885][ T4617] tipc: Disabling bearer [ 190.746091][ T4620] tipc: Enabled bearer , priority 0 [ 190.796314][ T4620] device syzkaller0 entered promiscuous mode [ 190.831008][ T4622] netlink: 'syz.0.112': attribute type 1 has an invalid length. [ 190.856941][ T4620] tipc: Resetting bearer [ 190.930189][ T4619] tipc: Resetting bearer [ 190.979620][ T4619] tipc: Disabling bearer [ 191.000717][ T4624] netlink: 'syz.1.113': attribute type 10 has an invalid length. [ 191.023218][ T4626] tipc: Enabled bearer , priority 0 [ 191.054713][ T4626] device syzkaller0 entered promiscuous mode [ 191.159821][ T4626] tipc: Resetting bearer [ 191.235860][ T4625] tipc: Resetting bearer [ 191.281952][ T4625] tipc: Disabling bearer [ 191.896456][ T4652] tipc: Enabled bearer , priority 0 [ 191.909272][ T4652] device syzkaller0 entered promiscuous mode [ 191.960705][ T4652] tipc: Resetting bearer [ 191.999150][ T4650] tipc: Resetting bearer [ 192.045581][ T4650] tipc: Disabling bearer [ 192.193214][ T4655] tipc: Enabled bearer , priority 0 [ 192.250116][ T4658] device syzkaller0 entered promiscuous mode [ 192.295354][ T4655] tipc: Resetting bearer [ 192.381234][ T4654] tipc: Resetting bearer [ 192.444977][ T4654] tipc: Disabling bearer [ 192.715342][ T4674] tipc: Enabled bearer , priority 0 [ 192.744929][ T4674] device syzkaller0 entered promiscuous mode [ 192.837991][ T4674] tipc: Resetting bearer [ 192.839099][ T4679] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.135'. [ 192.900880][ T4672] tipc: Resetting bearer [ 192.930947][ T4672] tipc: Disabling bearer [ 193.276088][ T4695] tipc: Enabled bearer , priority 0 [ 193.308778][ T4695] device syzkaller0 entered promiscuous mode [ 193.325527][ T4699] validate_nla: 7 callbacks suppressed [ 193.325556][ T4699] netlink: 'syz.0.141': attribute type 1 has an invalid length. [ 193.360355][ T4695] tipc: Resetting bearer [ 193.376975][ T4694] tipc: Resetting bearer [ 193.405834][ T4694] tipc: Disabling bearer [ 193.703922][ T4709] tipc: Enabled bearer , priority 0 [ 193.722100][ T4709] device syzkaller0 entered promiscuous mode [ 193.784463][ T4709] tipc: Resetting bearer [ 193.792357][ T4708] tipc: Resetting bearer [ 193.812088][ T4708] tipc: Disabling bearer [ 193.831342][ T4713] netlink: 'syz.0.147': attribute type 10 has an invalid length. [ 194.033289][ T4718] tipc: Enabled bearer , priority 0 [ 194.070256][ T4718] device syzkaller0 entered promiscuous mode [ 194.135400][ T4718] tipc: Resetting bearer [ 194.171008][ T4717] tipc: Resetting bearer [ 194.234961][ T4717] tipc: Disabling bearer [ 194.267075][ T4726] netlink: 'syz.4.153': attribute type 1 has an invalid length. [ 194.275866][ T4722] netlink: 'syz.0.151': attribute type 10 has an invalid length. [ 194.298334][ T4725] netlink: 'syz.3.152': attribute type 10 has an invalid length. [ 194.461157][ T4728] tipc: Enabled bearer , priority 0 [ 194.504186][ T4728] device syzkaller0 entered promiscuous mode [ 194.562583][ T4728] tipc: Resetting bearer [ 194.586475][ T4727] tipc: Resetting bearer [ 194.617601][ T4727] tipc: Disabling bearer [ 194.711296][ T4735] tipc: Enabled bearer , priority 0 [ 194.735359][ T4735] device syzkaller0 entered promiscuous mode [ 194.780538][ T4735] tipc: Resetting bearer [ 194.806540][ T4734] tipc: Resetting bearer [ 194.827526][ T4734] tipc: Disabling bearer [ 194.850808][ T4742] tipc: Enabled bearer , priority 0 [ 194.863595][ T4742] device syzkaller0 entered promiscuous mode [ 194.899240][ T4742] tipc: Resetting bearer [ 194.918689][ T4741] tipc: Resetting bearer [ 194.944040][ T4741] tipc: Disabling bearer [ 195.006865][ T4747] netlink: 'syz.0.161': attribute type 10 has an invalid length. [ 195.321764][ T4756] netlink: 'syz.0.164': attribute type 1 has an invalid length. [ 195.543673][ T4764] netlink: 'syz.1.167': attribute type 10 has an invalid length. [ 195.587251][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.594015][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.670872][ T4766] netlink: 'syz.3.168': attribute type 10 has an invalid length. [ 195.868540][ T4772] tipc: Enabled bearer , priority 0 [ 195.888669][ T4772] device syzkaller0 entered promiscuous mode [ 195.910554][ T4773] tipc: Enabled bearer , priority 0 [ 195.943406][ T4772] tipc: Resetting bearer [ 195.972595][ T4773] device syzkaller0 entered promiscuous mode [ 195.992066][ T4771] tipc: Resetting bearer [ 196.018028][ T4771] tipc: Disabling bearer [ 196.059492][ T4773] tipc: Resetting bearer [ 196.075729][ T4775] tipc: Enabled bearer , priority 0 [ 196.084086][ T4770] tipc: Resetting bearer [ 196.118232][ T4770] tipc: Disabling bearer [ 196.127175][ T4779] tipc: Started in network mode [ 196.132135][ T4779] tipc: Node identity 3e7a92513e7e, cluster identity 4711 [ 196.139965][ T4779] tipc: Enabled bearer , priority 0 [ 196.148602][ T4775] device syzkaller0 entered promiscuous mode [ 196.158666][ T4782] device syzkaller0 entered promiscuous mode [ 196.191495][ T4775] tipc: Resetting bearer [ 196.207683][ T4781] netlink: 'syz.1.174': attribute type 10 has an invalid length. [ 196.251731][ T4774] tipc: Resetting bearer [ 196.293429][ T4774] tipc: Disabling bearer [ 196.335405][ T4782] tipc: Resetting bearer [ 196.349860][ T4777] tipc: Resetting bearer [ 196.387920][ T4777] tipc: Disabling bearer [ 196.423497][ T4791] netlink: 4 bytes leftover after parsing attributes in process `syz.4.178'. [ 196.442377][ T4794] tipc: Can't bind to reserved service type 1 [ 196.457836][ T4791] IPv6: Can't replace route, no match found [ 196.737400][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 196.752252][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 196.760251][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 196.775904][ T4810] device bridge_slave_0 left promiscuous mode [ 196.783343][ T4810] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.812182][ T4810] device bridge_slave_1 left promiscuous mode [ 196.823974][ T4810] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.848771][ T4810] bond0: (slave bond_slave_0): Releasing backup interface [ 196.883862][ T4810] bond0: (slave bond_slave_1): Releasing backup interface [ 196.948684][ T4810] team0: Port device team_slave_0 removed [ 196.974404][ T4810] team0: Port device team_slave_1 removed [ 196.980833][ T4810] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.988707][ T4810] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 196.998617][ T4810] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.006714][ T4810] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 197.023017][ T4810] bond0: (slave wlan1): Releasing backup interface [ 197.050300][ T4806] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 197.071999][ T4815] tipc: Enabled bearer , priority 0 [ 197.126063][ T4815] tipc: Disabling bearer [ 197.202845][ T4821] tipc: Enabled bearer , priority 0 [ 197.220801][ T4821] device syzkaller0 entered promiscuous mode [ 197.263656][ T4821] tipc: Resetting bearer [ 197.317482][ T4826] tipc: Enabled bearer , priority 0 [ 197.342218][ T4820] tipc: Resetting bearer [ 197.387011][ T4820] tipc: Disabling bearer [ 197.408488][ T4826] device syzkaller0 entered promiscuous mode [ 197.484387][ T4838] tipc: Resetting bearer [ 197.498931][ T4825] tipc: Resetting bearer [ 197.552095][ T4825] tipc: Disabling bearer [ 197.578839][ T4834] tipc: Enabled bearer , priority 0 [ 197.623288][ T4839] device syzkaller0 entered promiscuous mode [ 197.667230][ T4846] tipc: Resetting bearer [ 197.676050][ T4833] tipc: Resetting bearer [ 197.694101][ T4833] tipc: Disabling bearer [ 197.828593][ T4856] tipc: Enabled bearer , priority 0 [ 197.859911][ T4856] device syzkaller0 entered promiscuous mode [ 198.290261][ T4870] tipc: Resetting bearer [ 198.317169][ T4870] tipc: Disabling bearer [ 198.334403][ T4871] tipc: Enabled bearer , priority 0 [ 198.342117][ T4871] device syzkaller0 entered promiscuous mode [ 198.363324][ T4873] validate_nla: 8 callbacks suppressed [ 198.363341][ T4873] netlink: 'syz.0.207': attribute type 10 has an invalid length. [ 198.422419][ T4873] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 198.471728][ T4871] tipc: Resetting bearer [ 198.508199][ T4869] tipc: Resetting bearer [ 198.566952][ T4869] tipc: Disabling bearer [ 198.700368][ T4884] tipc: Enabled bearer , priority 0 [ 198.735379][ T4884] device syzkaller0 entered promiscuous mode [ 198.773454][ T4884] netlink: 20 bytes leftover after parsing attributes in process `syz.4.211'. [ 198.839608][ T4884] tipc: Resetting bearer [ 198.847886][ T4890] netlink: 'syz.2.212': attribute type 10 has an invalid length. [ 198.875810][ T4888] tipc: Enabled bearer , priority 0 [ 198.920689][ T4883] tipc: Resetting bearer [ 198.976253][ T4883] tipc: Disabling bearer [ 198.999728][ T4888] device syzkaller0 entered promiscuous mode [ 199.043410][ T4896] tipc: Resetting bearer [ 199.101687][ T4885] tipc: Resetting bearer [ 199.109088][ T4899] netlink: 'syz.1.217': attribute type 1 has an invalid length. [ 199.141093][ T4885] tipc: Disabling bearer [ 199.183241][ T4895] netlink: 'syz.0.216': attribute type 10 has an invalid length. [ 199.399875][ T4906] tipc: Enabled bearer , priority 0 [ 199.455467][ T4914] device syzkaller0 entered promiscuous mode [ 199.524960][ T4906] tipc: Resetting bearer [ 199.585328][ T4905] tipc: Resetting bearer [ 199.608037][ T4905] tipc: Disabling bearer [ 199.645345][ T4917] tipc: Enabled bearer , priority 0 [ 199.662640][ T4924] device syzkaller0 entered promiscuous mode [ 199.675018][ T4922] netlink: 'syz.3.227': attribute type 10 has an invalid length. [ 199.720450][ T4917] tipc: Resetting bearer [ 199.758741][ T4926] netlink: 'syz.2.228': attribute type 10 has an invalid length. [ 199.831765][ T4916] tipc: Resetting bearer [ 199.867472][ T4929] netlink: 'syz.4.229': attribute type 1 has an invalid length. [ 199.877634][ T4916] tipc: Disabling bearer [ 200.150291][ T4933] tipc: Enabled bearer , priority 0 [ 200.184810][ T4933] device syzkaller0 entered promiscuous mode [ 200.233045][ T4933] netlink: 20 bytes leftover after parsing attributes in process `syz.4.231'. [ 200.288346][ T4933] tipc: Resetting bearer [ 200.300127][ T4936] tipc: Enabled bearer , priority 0 [ 200.320013][ T4936] device syzkaller0 entered promiscuous mode [ 200.329987][ T4931] tipc: Resetting bearer [ 200.346872][ T4931] tipc: Disabling bearer [ 200.367768][ T4936] tipc: Resetting bearer [ 200.383479][ T4938] tipc: Enabled bearer , priority 0 [ 200.418184][ T4938] device syzkaller0 entered promiscuous mode [ 200.462171][ T4935] tipc: Resetting bearer [ 200.518898][ T4935] tipc: Disabling bearer [ 200.545301][ T4945] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 200.564980][ T4944] netlink: 'syz.0.235': attribute type 10 has an invalid length. [ 200.616643][ T4938] tipc: Resetting bearer [ 200.674745][ T4937] tipc: Resetting bearer [ 200.726767][ T4937] tipc: Disabling bearer [ 200.808128][ T4952] tipc: Enabled bearer , priority 0 [ 200.839882][ T4952] device syzkaller0 entered promiscuous mode [ 200.860764][ T4957] tipc: Enabled bearer , priority 0 [ 200.943490][ T4958] device syzkaller0 entered promiscuous mode [ 200.985151][ T4957] tipc: Resetting bearer [ 200.991389][ T4961] netlink: 'syz.2.243': attribute type 10 has an invalid length. [ 201.012482][ T4952] tipc: Resetting bearer [ 201.043521][ T4964] netlink: 'syz.0.242': attribute type 10 has an invalid length. [ 201.061969][ T4956] tipc: Resetting bearer [ 201.118534][ T4956] tipc: Disabling bearer [ 201.157069][ T4951] tipc: Resetting bearer [ 201.195504][ T4951] tipc: Disabling bearer [ 201.421854][ T4974] tipc: Enabled bearer , priority 0 [ 201.442830][ T4974] device syzkaller0 entered promiscuous mode [ 201.496545][ T4974] tipc: Resetting bearer [ 201.510169][ T4979] tipc: Enabled bearer , priority 0 [ 201.526102][ T4972] tipc: Resetting bearer [ 201.564716][ T4972] tipc: Disabling bearer [ 201.598206][ T4979] device syzkaller0 entered promiscuous mode [ 201.611938][ T4980] tipc: Enabled bearer , priority 0 [ 201.621046][ T4984] device syzkaller0 entered promiscuous mode [ 201.647637][ T4985] netlink: 20 bytes leftover after parsing attributes in process `syz.0.249'. [ 201.709479][ T4979] tipc: Resetting bearer [ 201.729385][ T4980] tipc: Resetting bearer [ 201.758746][ T4977] tipc: Resetting bearer [ 201.801843][ T4977] tipc: Disabling bearer [ 201.819839][ T4978] tipc: Resetting bearer [ 201.843997][ T4978] tipc: Disabling bearer [ 202.230479][ T5003] tipc: Enabled bearer , priority 0 [ 202.248575][ T5003] device syzkaller0 entered promiscuous mode [ 202.345131][ T5003] tipc: Resetting bearer [ 202.380075][ T5002] tipc: Resetting bearer [ 202.417302][ T5002] tipc: Disabling bearer [ 202.510630][ T5013] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 202.528953][ T5013] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 202.549624][ T5013] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 202.573385][ T5015] tipc: Enabled bearer , priority 0 [ 202.584839][ T5011] device syzkaller0 entered promiscuous mode [ 202.706329][ T5022] tipc: Resetting bearer [ 202.759084][ T5022] tipc: Disabling bearer [ 203.121671][ T5037] tipc: Enabled bearer , priority 0 [ 203.180261][ T5037] device syzkaller0 entered promiscuous mode [ 203.224061][ T5037] tipc: Resetting bearer [ 203.247566][ T5035] tipc: Resetting bearer [ 203.275912][ T5035] tipc: Disabling bearer [ 203.447645][ T5046] validate_nla: 7 callbacks suppressed [ 203.447661][ T5046] netlink: 'syz.0.272': attribute type 10 has an invalid length. [ 203.567238][ T5048] tipc: Enabled bearer , priority 0 [ 203.605125][ T5048] device syzkaller0 entered promiscuous mode [ 203.642454][ T5048] netlink: 20 bytes leftover after parsing attributes in process `syz.1.273'. [ 203.689926][ T5048] tipc: Resetting bearer [ 203.718785][ T5047] tipc: Resetting bearer [ 203.754714][ T5047] tipc: Disabling bearer [ 203.813715][ T5050] tipc: Enabled bearer , priority 0 [ 203.830535][ T26] audit: type=1107 audit(1757582187.447:2): pid=5051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 203.875787][ T5053] device syzkaller0 entered promiscuous mode [ 203.955048][ T5050] tipc: Resetting bearer [ 204.008663][ T5057] tipc: Enabled bearer , priority 0 [ 204.037354][ T5049] tipc: Resetting bearer [ 204.067722][ T5049] tipc: Disabling bearer [ 204.120171][ T5057] device syzkaller0 entered promiscuous mode [ 204.186958][ T5060] tipc: Resetting bearer [ 204.254491][ T5056] tipc: Resetting bearer [ 204.299852][ T5056] tipc: Disabling bearer [ 204.344065][ T5076] netlink: 'syz.4.284': attribute type 10 has an invalid length. [ 204.389498][ T5075] netlink: 'syz.3.285': attribute type 10 has an invalid length. [ 204.411276][ T5073] netlink: 'syz.2.283': attribute type 10 has an invalid length. [ 204.460216][ T5080] tipc: Enabled bearer , priority 0 [ 204.502827][ T5080] device syzkaller0 entered promiscuous mode [ 204.605982][ T5081] tipc: Resetting bearer [ 204.684566][ T5079] tipc: Resetting bearer [ 204.735283][ T5079] tipc: Disabling bearer [ 204.767615][ T5090] tipc: Enabled bearer , priority 0 [ 204.787742][ T5085] device syzkaller0 entered promiscuous mode [ 204.833136][ T5085] netlink: 20 bytes leftover after parsing attributes in process `syz.0.288'. [ 204.888641][ T5085] tipc: Resetting bearer [ 204.925246][ T5083] tipc: Resetting bearer [ 204.989260][ T5083] tipc: Disabling bearer [ 205.048583][ T5097] netlink: 28 bytes leftover after parsing attributes in process `syz.1.293'. [ 205.114581][ T5097] netlink: 8 bytes leftover after parsing attributes in process `syz.1.293'. [ 205.313384][ T5114] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 205.337136][ T5110] tipc: Enabled bearer , priority 0 [ 205.360987][ T5111] netlink: 'syz.2.297': attribute type 10 has an invalid length. [ 205.423607][ T5110] tipc: Disabling bearer [ 205.497545][ T5118] netlink: 'syz.0.299': attribute type 10 has an invalid length. [ 205.655566][ T5120] tipc: Enabled bearer , priority 0 [ 205.708535][ T5125] device syzkaller0 entered promiscuous mode [ 205.754703][ T5124] netlink: 'syz.3.302': attribute type 10 has an invalid length. [ 205.780641][ T5120] tipc: Resetting bearer [ 205.800241][ T5119] tipc: Resetting bearer [ 205.840809][ T5119] tipc: Disabling bearer [ 205.991759][ T5127] netlink: 32 bytes leftover after parsing attributes in process `syz.2.303'. [ 206.041112][ T5133] tipc: Enabled bearer , priority 0 [ 206.097974][ T5133] device syzkaller0 entered promiscuous mode [ 206.145128][ T5133] tipc: Resetting bearer [ 206.151098][ T5138] netlink: 8 bytes leftover after parsing attributes in process `syz.4.306'. [ 206.174605][ T5131] tipc: Resetting bearer [ 206.232319][ T5131] tipc: Disabling bearer [ 206.265035][ T5142] netlink: 'syz.2.307': attribute type 5 has an invalid length. [ 206.310792][ T5142] netlink: 'syz.2.307': attribute type 5 has an invalid length. [ 206.353887][ T5146] tipc: Enabled bearer , priority 0 [ 206.414159][ T5146] device syzkaller0 entered promiscuous mode [ 206.427343][ T5148] tipc: Enabled bearer , priority 0 [ 206.450192][ T5146] netlink: 20 bytes leftover after parsing attributes in process `syz.3.309'. [ 206.483546][ T5148] device syzkaller0 entered promiscuous mode [ 206.500279][ T5148] tipc: Resetting bearer [ 206.520928][ T5153] netlink: 'syz.1.311': attribute type 10 has an invalid length. [ 206.531590][ T5146] tipc: Resetting bearer [ 206.555533][ T5156] IPVS: stopping backup sync thread 5157 ... [ 206.568004][ T5157] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 206.579057][ T5147] tipc: Resetting bearer [ 206.610106][ T5147] tipc: Disabling bearer [ 206.649702][ T5145] tipc: Resetting bearer [ 206.691278][ T5145] tipc: Disabling bearer [ 206.888583][ T5164] tipc: Enabled bearer , priority 0 [ 206.918754][ T5164] device syzkaller0 entered promiscuous mode [ 206.984608][ T5164] tipc: Resetting bearer [ 207.055043][ T5163] tipc: Resetting bearer [ 207.078866][ T5163] tipc: Disabling bearer [ 207.313893][ T5177] tipc: Enabled bearer , priority 0 [ 207.371248][ T5181] device syzkaller0 entered promiscuous mode [ 207.445250][ T5177] tipc: Resetting bearer [ 207.475908][ T5175] tipc: Resetting bearer [ 207.507810][ T5175] tipc: Disabling bearer [ 207.570316][ T5194] tipc: Enabled bearer , priority 0 [ 207.606440][ T5190] tipc: Enabled bearer , priority 0 [ 207.629660][ T5189] device syzkaller0 entered promiscuous mode [ 207.661045][ T5190] device syzkaller0 entered promiscuous mode [ 207.705022][ T5189] tipc: Resetting bearer [ 207.762291][ T5187] tipc: Resetting bearer [ 207.819427][ T5187] tipc: Disabling bearer [ 207.861916][ T5190] tipc: Resetting bearer [ 207.902060][ T5188] tipc: Resetting bearer [ 207.926205][ T5188] tipc: Disabling bearer [ 207.976601][ T5208] tipc: Enabled bearer , priority 0 [ 207.990343][ T5207] device syzkaller0 entered promiscuous mode [ 208.034129][ T5207] tipc: Resetting bearer [ 208.067451][ T5206] tipc: Resetting bearer [ 208.101046][ T5206] tipc: Disabling bearer [ 208.410036][ T5224] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 208.447432][ T5224] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 208.470911][ T5224] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 208.712052][ T5229] tipc: Enabled bearer , priority 0 [ 208.740059][ T5229] device syzkaller0 entered promiscuous mode [ 208.796571][ T5229] tipc: Resetting bearer [ 208.822096][ T5232] validate_nla: 5 callbacks suppressed [ 208.822113][ T5232] netlink: 'syz.0.344': attribute type 10 has an invalid length. [ 208.886574][ T5227] tipc: Resetting bearer [ 208.912108][ T5227] tipc: Disabling bearer [ 208.966529][ T5235] tipc: Enabled bearer , priority 0 [ 208.982743][ T5235] device syzkaller0 entered promiscuous mode [ 209.061013][ T5235] tipc: Resetting bearer [ 209.099735][ T5234] tipc: Resetting bearer [ 209.150868][ T5234] tipc: Disabling bearer [ 209.171504][ T5240] tipc: Enabled bearer , priority 0 [ 209.207400][ T5238] device syzkaller0 entered promiscuous mode [ 209.241609][ T5238] tipc: Resetting bearer [ 209.304976][ T5237] tipc: Resetting bearer [ 209.357756][ T5237] tipc: Disabling bearer [ 209.453583][ T5246] netlink: 'syz.0.349': attribute type 10 has an invalid length. [ 209.505979][ T5242] syz.3.348 (5242) used greatest stack depth: 17216 bytes left [ 209.602667][ T5253] tipc: Enabled bearer , priority 0 [ 209.625192][ T5253] device syzkaller0 entered promiscuous mode [ 209.661747][ T5254] tipc: Enabled bearer , priority 0 [ 209.686371][ T5252] device syzkaller0 entered promiscuous mode [ 209.733763][ T5253] tipc: Resetting bearer [ 209.760155][ T5252] tipc: Resetting bearer [ 209.785845][ T5251] tipc: Resetting bearer [ 209.812420][ T5251] tipc: Disabling bearer [ 209.861850][ T5258] netlink: 'syz.3.353': attribute type 10 has an invalid length. [ 209.889959][ T5250] tipc: Resetting bearer [ 209.910898][ T5250] tipc: Disabling bearer [ 209.938941][ T5261] bridge0: port 1(syz_tun) entered blocking state [ 209.967987][ T5261] bridge0: port 1(syz_tun) entered disabled state [ 209.988249][ T5261] device syz_tun entered promiscuous mode [ 210.024559][ T5261] bridge0: port 1(syz_tun) entered blocking state [ 210.031866][ T5261] bridge0: port 1(syz_tun) entered forwarding state [ 210.272745][ T5270] netlink: set zone limit has 4 unknown bytes [ 210.304442][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.314059][ T5267] tipc: Enabled bearer , priority 0 [ 210.350255][ T5267] device syzkaller0 entered promiscuous mode [ 210.382875][ T5272] netlink: 'syz.1.360': attribute type 10 has an invalid length. [ 210.413045][ T5267] tipc: Resetting bearer [ 210.459868][ T5266] tipc: Resetting bearer [ 210.489349][ T5266] tipc: Disabling bearer [ 210.558932][ T5275] tipc: Enabled bearer , priority 0 [ 210.599042][ T5275] device syzkaller0 entered promiscuous mode [ 210.653117][ T5274] tipc: Resetting bearer [ 210.742961][ T5274] tipc: Disabling bearer [ 210.772986][ T5277] tipc: Enabled bearer , priority 0 [ 210.796320][ T5277] device syzkaller0 entered promiscuous mode [ 210.840969][ T5277] tipc: Resetting bearer [ 210.870015][ T5276] tipc: Resetting bearer [ 210.900306][ T5276] tipc: Disabling bearer [ 211.128691][ T5284] tipc: Enabled bearer , priority 0 [ 211.156598][ T5284] device syzkaller0 entered promiscuous mode [ 211.184490][ T5287] netlink: 'syz.0.365': attribute type 10 has an invalid length. [ 211.232922][ T5284] tipc: Resetting bearer [ 211.298894][ T5283] tipc: Resetting bearer [ 211.375410][ T5283] tipc: Disabling bearer [ 211.553560][ T5295] netlink: 'syz.3.369': attribute type 10 has an invalid length. [ 211.782118][ T5304] netlink: 12 bytes leftover after parsing attributes in process `syz.4.371'. [ 211.965050][ T5307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.055862][ T5307] bond0: (slave rose0): Enslaving as an active interface with an up link [ 212.136501][ T5313] tipc: Enabled bearer , priority 0 [ 212.143210][ T5316] netlink: 'syz.1.374': attribute type 10 has an invalid length. [ 212.235447][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 212.246771][ T5326] tipc: Enabled bearer , priority 0 [ 212.317577][ T5313] tipc: Disabling bearer [ 212.361819][ T5320] device syzkaller0 entered promiscuous mode [ 212.443569][ T5319] tipc: Resetting bearer [ 212.536464][ T5319] tipc: Disabling bearer [ 212.660535][ T5331] tipc: Enabled bearer , priority 0 [ 212.702026][ T5332] device syzkaller0 entered promiscuous mode [ 212.823417][ T5349] netlink: 'syz.1.380': attribute type 10 has an invalid length. [ 212.894577][ T5340] tipc: Resetting bearer [ 212.992059][ T5340] tipc: Disabling bearer [ 213.027956][ T5356] tipc: Enabled bearer , priority 0 [ 213.060387][ T5356] device syzkaller0 entered promiscuous mode [ 213.175039][ T5356] tipc: Resetting bearer [ 213.230147][ T5353] tipc: Resetting bearer [ 213.288682][ T5353] tipc: Disabling bearer [ 213.426098][ T5366] netlink: 'syz.4.385': attribute type 10 has an invalid length. [ 213.457182][ T5373] netlink: 'syz.3.387': attribute type 10 has an invalid length. [ 213.497912][ T5368] tipc: Enabled bearer , priority 0 [ 213.524543][ T5372] device syzkaller0 entered promiscuous mode [ 213.610676][ T5379] tipc: Enabled bearer , priority 0 [ 213.645240][ T5368] tipc: Resetting bearer [ 213.656227][ T5367] tipc: Resetting bearer [ 213.716003][ T5367] tipc: Disabling bearer [ 213.768365][ T5379] device syzkaller0 entered promiscuous mode [ 213.800060][ T5378] tipc: Resetting bearer [ 213.881545][ T5378] tipc: Disabling bearer [ 214.056463][ T5394] tipc: Enabled bearer , priority 0 [ 214.110597][ T5399] tipc: Enabled bearer , priority 0 [ 214.137753][ T5394] device syzkaller0 entered promiscuous mode [ 214.150721][ T5399] device syzkaller0 entered promiscuous mode [ 214.175819][ T5393] tipc: Resetting bearer [ 214.280317][ T5393] tipc: Disabling bearer [ 214.300015][ T5405] netlink: 20 bytes leftover after parsing attributes in process `syz.4.394'. [ 214.330112][ T5407] tipc: Resetting bearer [ 214.423810][ T5397] tipc: Resetting bearer [ 214.473430][ T5397] tipc: Disabling bearer [ 214.496687][ T5412] netlink: 'syz.0.397': attribute type 10 has an invalid length. [ 214.663452][ T5418] netlink: 'syz.1.398': attribute type 10 has an invalid length. [ 214.723044][ T5420] tipc: Enabled bearer , priority 0 [ 214.753448][ T5420] device syzkaller0 entered promiscuous mode [ 214.795705][ T5420] tipc: Resetting bearer [ 214.839872][ T5419] tipc: Resetting bearer [ 214.915342][ T5419] tipc: Disabling bearer [ 215.096133][ T5432] netlink: 'syz.4.402': attribute type 10 has an invalid length. [ 215.137424][ T5434] netlink: 12 bytes leftover after parsing attributes in process `syz.1.403'. [ 215.231615][ T5439] tipc: Enabled bearer , priority 0 [ 215.269802][ T5439] device syzkaller0 entered promiscuous mode [ 215.345496][ T5438] tipc: Resetting bearer [ 215.393285][ T5438] tipc: Disabling bearer [ 215.421635][ T5447] vcan0: tx drop: invalid sa for name 0x0000800000000001 [ 215.453250][ T5446] tipc: Enabled bearer , priority 0 [ 215.486057][ T5446] device syzkaller0 entered promiscuous mode [ 215.517123][ T5449] batman_adv: batadv0: Adding interface: dummy0 [ 215.550751][ T5449] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.588170][ T5449] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 215.609445][ T5443] tipc: Resetting bearer [ 215.637935][ T5443] tipc: Disabling bearer [ 215.646940][ T5454] netlink: 'syz.0.411': attribute type 10 has an invalid length. [ 215.679113][ T5459] tipc: Enabled bearer , priority 0 [ 215.705675][ T5459] device syzkaller0 entered promiscuous mode [ 215.769368][ T5459] tipc: Resetting bearer [ 215.791038][ T5458] tipc: Resetting bearer [ 215.826831][ T5458] tipc: Disabling bearer [ 215.849452][ T5464] netlink: 'syz.1.414': attribute type 10 has an invalid length. [ 215.861265][ T5462] tipc: Enabled bearer , priority 0 [ 215.880169][ T5462] device syzkaller0 entered promiscuous mode [ 215.913740][ T5462] netlink: 20 bytes leftover after parsing attributes in process `syz.4.413'. [ 215.989783][ T5462] tipc: Resetting bearer [ 216.013544][ T5461] tipc: Resetting bearer [ 216.035373][ T5461] tipc: Disabling bearer [ 216.081929][ T5470] netlink: 'syz.2.416': attribute type 10 has an invalid length. [ 216.764095][ T5475] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.771737][ T5475] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.255352][ T5475] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.308924][ T5475] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.770589][ T5475] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.779860][ T5475] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.789525][ T5475] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.798509][ T5475] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.909111][ T5493] tipc: Enabled bearer , priority 0 [ 218.014663][ T5493] tipc: Disabling bearer [ 218.045327][ T5499] tipc: Enabled bearer , priority 0 [ 218.052954][ T5501] netlink: 'syz.3.425': attribute type 10 has an invalid length. [ 218.079942][ T5499] device syzkaller0 entered promiscuous mode [ 218.136431][ T5496] tipc: Resetting bearer [ 218.205598][ T5496] tipc: Disabling bearer [ 218.232619][ T5503] pimreg: tun_chr_ioctl cmd 1074025675 [ 218.244331][ T5503] pimreg: persist disabled [ 218.284010][ T5508] netlink: 'syz.0.428': attribute type 10 has an invalid length. [ 218.339517][ T5511] tipc: Enabled bearer , priority 0 [ 218.358856][ T5511] device syzkaller0 entered promiscuous mode [ 218.431259][ T5511] tipc: Resetting bearer [ 218.470606][ T5515] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 218.542048][ T5510] tipc: Resetting bearer [ 218.567192][ T5510] tipc: Disabling bearer [ 218.577888][ T5512] tipc: Enabled bearer , priority 0 [ 218.587442][ T5518] device syzkaller0 entered promiscuous mode [ 218.590011][ T5520] netlink: 84 bytes leftover after parsing attributes in process `syz.0.433'. [ 218.604051][ T5523] netlink: 'syz.3.432': attribute type 10 has an invalid length. [ 218.614015][ T5512] netlink: 20 bytes leftover after parsing attributes in process `syz.4.430'. [ 218.684971][ T5512] tipc: Resetting bearer [ 218.778593][ T5509] tipc: Resetting bearer [ 218.805184][ T5509] tipc: Disabling bearer [ 218.842297][ T5529] netlink: 4 bytes leftover after parsing attributes in process `syz.2.434'. [ 219.082170][ T5536] tipc: Enabled bearer , priority 0 [ 219.100140][ T5536] device syzkaller0 entered promiscuous mode [ 219.145949][ T5535] tipc: Resetting bearer [ 219.179263][ T5535] tipc: Disabling bearer [ 219.191006][ T5542] netlink: 104 bytes leftover after parsing attributes in process `syz.3.441'. [ 219.208037][ T5540] tipc: Enabled bearer , priority 0 [ 219.221004][ T5540] device syzkaller0 entered promiscuous mode [ 219.234020][ T5539] tipc: Resetting bearer [ 219.296888][ T5539] tipc: Disabling bearer [ 219.400931][ T5547] netlink: 'syz.3.443': attribute type 10 has an invalid length. [ 219.551027][ T5552] tipc: Enabled bearer , priority 0 [ 219.572015][ T5552] device syzkaller0 entered promiscuous mode [ 219.615320][ T5552] tipc: Resetting bearer [ 219.626386][ T5551] tipc: Resetting bearer [ 219.663653][ T5551] tipc: Disabling bearer [ 219.883215][ T5560] tipc: Enabled bearer , priority 0 [ 219.893093][ T5563] validate_nla: 1 callbacks suppressed [ 219.893107][ T5563] netlink: 'syz.1.449': attribute type 10 has an invalid length. [ 219.946507][ T5560] device syzkaller0 entered promiscuous mode [ 219.966399][ T5560] netlink: 20 bytes leftover after parsing attributes in process `syz.2.450'. [ 220.023752][ T5560] tipc: Resetting bearer [ 220.056447][ T5571] tipc: Enabled bearer , priority 0 [ 220.063597][ T5559] tipc: Resetting bearer [ 220.088302][ T5559] tipc: Disabling bearer [ 220.120755][ T5575] netlink: 'syz.1.456': attribute type 10 has an invalid length. [ 220.140931][ T5576] device syzkaller0 entered promiscuous mode [ 220.161216][ T5573] tipc: Enabled bearer , priority 0 [ 220.228321][ T5573] tipc: Resetting bearer [ 220.301039][ T5569] tipc: Resetting bearer [ 220.342809][ T5569] tipc: Disabling bearer [ 220.358729][ T5572] tipc: Disabling bearer [ 220.377357][ T5584] netlink: 'syz.2.459': attribute type 10 has an invalid length. [ 220.562046][ T5591] tipc: Enabled bearer , priority 0 [ 220.588685][ T5591] device syzkaller0 entered promiscuous mode [ 220.674028][ T5591] tipc: Resetting bearer [ 220.701353][ T5590] tipc: Resetting bearer [ 220.743188][ T5590] tipc: Disabling bearer [ 220.947197][ T5605] netlink: 'syz.0.466': attribute type 10 has an invalid length. [ 220.955838][ T5606] netlink: 'syz.4.468': attribute type 10 has an invalid length. [ 221.176270][ T5612] tipc: Enabled bearer , priority 0 [ 221.196642][ T5612] device syzkaller0 entered promiscuous mode [ 221.219831][ T5612] netlink: 20 bytes leftover after parsing attributes in process `syz.4.470'. [ 221.243497][ T5611] tipc: Resetting bearer [ 221.294014][ T5611] tipc: Disabling bearer [ 221.461000][ T5618] tipc: Enabled bearer , priority 0 [ 221.491544][ T5616] tipc: Enabled bearer , priority 0 [ 221.508197][ T5618] tipc: Resetting bearer [ 221.519709][ T5616] device syzkaller0 entered promiscuous mode [ 221.562050][ T5622] netlink: 'syz.4.475': attribute type 10 has an invalid length. [ 221.577590][ T5624] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 221.609171][ T5615] tipc: Resetting bearer [ 221.680707][ T5615] tipc: Disabling bearer [ 221.731555][ T5617] tipc: Disabling bearer [ 221.772858][ T5626] tipc: Enabled bearer , priority 0 [ 221.790849][ T5626] device syzkaller0 entered promiscuous mode [ 221.899310][ T5626] tipc: Resetting bearer [ 221.928152][ T5633] netlink: 'syz.2.479': attribute type 10 has an invalid length. [ 221.953622][ T5625] tipc: Resetting bearer [ 221.979690][ T5625] tipc: Disabling bearer [ 222.028246][ T5637] netlink: 'syz.0.481': attribute type 10 has an invalid length. [ 222.153184][ T5642] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 222.444861][ T5653] tipc: Enabled bearer , priority 0 [ 222.462600][ T5649] device syzkaller0 entered promiscuous mode [ 222.520545][ T5649] netlink: 20 bytes leftover after parsing attributes in process `syz.3.485'. [ 222.539220][ T5655] netlink: 'syz.2.487': attribute type 10 has an invalid length. [ 222.648569][ T5647] tipc: Resetting bearer [ 222.715535][ T5647] tipc: Disabling bearer [ 222.947522][ T5666] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 223.011619][ T5672] netlink: 8 bytes leftover after parsing attributes in process `syz.0.489'. [ 223.124525][ T5672] netlink: 20 bytes leftover after parsing attributes in process `syz.0.489'. [ 223.237279][ T5672] tipc: Invalid UDP bearer configuration [ 223.237330][ T5672] tipc: Enabling of bearer rejected, failed to enable media [ 223.347638][ T5689] netlink: 4 bytes leftover after parsing attributes in process `syz.4.493'. [ 223.390889][ T5689] device wlan0 entered promiscuous mode [ 223.404966][ T5689] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 223.502085][ T5695] netlink: 'syz.1.494': attribute type 10 has an invalid length. [ 223.656900][ T5702] tipc: Enabled bearer , priority 0 [ 223.687418][ T5702] device syzkaller0 entered promiscuous mode [ 223.804393][ T5702] tipc: Resetting bearer [ 223.819576][ T5698] tipc: Resetting bearer [ 223.961202][ T5698] tipc: Disabling bearer [ 224.013188][ T5721] tipc: Enabled bearer , priority 0 [ 224.237584][ T5729] tipc: Disabling bearer [ 224.451350][ T5742] tipc: Enabled bearer , priority 0 [ 224.471287][ T5741] device syzkaller0 entered promiscuous mode [ 224.518917][ T5742] tipc: Resetting bearer [ 224.560793][ T5740] tipc: Disabling bearer [ 224.822440][ T5758] tipc: Enabled bearer , priority 0 [ 224.830180][ T5758] device syzkaller0 entered promiscuous mode [ 224.857496][ T5758] tipc: Resetting bearer [ 224.891212][ T5757] tipc: Resetting bearer [ 224.933907][ T5757] tipc: Disabling bearer [ 224.986119][ T5764] validate_nla: 3 callbacks suppressed [ 224.986134][ T5764] netlink: 'syz.0.515': attribute type 10 has an invalid length. [ 225.036037][ T5765] netlink: 'syz.3.514': attribute type 10 has an invalid length. [ 225.188151][ T5776] tipc: Enabled bearer , priority 0 [ 225.235308][ T5776] device syzkaller0 entered promiscuous mode [ 225.282624][ T5776] netlink: 20 bytes leftover after parsing attributes in process `syz.2.517'. [ 225.336575][ T5775] tipc: Resetting bearer [ 225.446635][ T5775] tipc: Disabling bearer [ 225.581037][ T5791] tipc: Enabled bearer , priority 0 [ 225.600226][ T5790] netlink: 'syz.4.520': attribute type 10 has an invalid length. [ 225.621978][ T5793] device syzkaller0 entered promiscuous mode [ 225.653075][ T5791] tipc: Resetting bearer [ 225.757040][ T5789] tipc: Disabling bearer [ 226.142794][ T5818] tipc: Enabled bearer , priority 0 [ 226.150761][ T5818] device syzkaller0 entered promiscuous mode [ 226.161009][ T5815] netlink: 'syz.1.529': attribute type 10 has an invalid length. [ 226.201943][ T5818] tipc: Resetting bearer [ 226.218393][ T5821] netlink: 'syz.0.531': attribute type 10 has an invalid length. [ 226.245878][ T5816] tipc: Resetting bearer [ 226.288267][ T5816] tipc: Disabling bearer [ 226.345858][ T5827] netlink: 24 bytes leftover after parsing attributes in process `syz.1.532'. [ 226.519002][ T5833] tipc: Enabled bearer , priority 0 [ 226.562072][ T5833] device syzkaller0 entered promiscuous mode [ 226.591620][ T5836] netlink: 'syz.1.535': attribute type 10 has an invalid length. [ 226.674146][ T5839] netlink: 20 bytes leftover after parsing attributes in process `syz.3.534'. [ 226.725087][ T5830] tipc: Resetting bearer [ 226.763949][ T5842] ieee802154 phy0 wpan0: encryption failed: -22 [ 226.830728][ T5830] tipc: Disabling bearer [ 226.994113][ T5854] device syzkaller0 entered promiscuous mode [ 227.046079][ T5857] device syzkaller0 entered promiscuous mode [ 227.401683][ T5876] netlink: 'syz.4.543': attribute type 10 has an invalid length. [ 227.677551][ T5891] tipc: Enabled bearer , priority 0 [ 227.753074][ T5898] device syzkaller0 entered promiscuous mode [ 227.905085][ T5891] tipc: Resetting bearer [ 227.958449][ T5906] netlink: 'syz.1.547': attribute type 10 has an invalid length. [ 227.968608][ T5904] netlink: 'syz.3.548': attribute type 10 has an invalid length. [ 228.010192][ T5888] tipc: Resetting bearer [ 228.060608][ T5888] tipc: Disabling bearer [ 228.298506][ T5917] tipc: Enabled bearer , priority 0 [ 228.326361][ T5917] device syzkaller0 entered promiscuous mode [ 228.385038][ T5917] netlink: 20 bytes leftover after parsing attributes in process `syz.0.551'. [ 228.439153][ T5916] tipc: Resetting bearer [ 228.512146][ T5916] tipc: Disabling bearer [ 228.538463][ T5922] device syzkaller0 entered promiscuous mode [ 228.555391][ T5924] device syzkaller0 entered promiscuous mode [ 228.893577][ T5938] netlink: 'syz.2.556': attribute type 10 has an invalid length. [ 229.100871][ T5950] netlink: 24 bytes leftover after parsing attributes in process `syz.4.561'. [ 229.233033][ T5952] tipc: Enabled bearer , priority 0 [ 229.283637][ T5956] device syzkaller0 entered promiscuous mode [ 229.357328][ T5952] tipc: Resetting bearer [ 229.414654][ T5951] tipc: Resetting bearer [ 229.465170][ T5951] tipc: Disabling bearer [ 229.520083][ T5965] tipc: Enabled bearer , priority 0 [ 229.535970][ T5965] netlink: 20 bytes leftover after parsing attributes in process `syz.2.565'. [ 229.577346][ T5965] tipc: Resetting bearer [ 229.674444][ T5964] tipc: Disabling bearer [ 229.761993][ T5973] device syzkaller0 entered promiscuous mode [ 229.851722][ T5978] device syzkaller0 entered promiscuous mode [ 230.240061][ T5993] validate_nla: 2 callbacks suppressed [ 230.240078][ T5993] netlink: 'syz.1.575': attribute type 10 has an invalid length. [ 230.324675][ T5997] netlink: 'syz.0.576': attribute type 10 has an invalid length. [ 230.519594][ T6002] netlink: 'syz.1.578': attribute type 10 has an invalid length. [ 230.631891][ T6004] tipc: Enabled bearer , priority 0 [ 230.642977][ T6006] netlink: 8 bytes leftover after parsing attributes in process `syz.0.580'. [ 230.653066][ T6004] device syzkaller0 entered promiscuous mode [ 230.682311][ T6008] tipc: Enabled bearer , priority 0 [ 230.690149][ T6003] tipc: Resetting bearer [ 230.707624][ T6003] tipc: Disabling bearer [ 230.723754][ T6009] netlink: 71 bytes leftover after parsing attributes in process `syz.0.580'. [ 230.739073][ T6009] netlink: 'syz.0.580': attribute type 39 has an invalid length. [ 230.771515][ T6008] netlink: 20 bytes leftover after parsing attributes in process `syz.1.581'. [ 230.796057][ T6010] tipc: Resetting bearer [ 230.832559][ T6007] tipc: Disabling bearer [ 230.970458][ T6020] device syzkaller0 entered promiscuous mode [ 231.057081][ T6023] device syzkaller0 entered promiscuous mode [ 231.299535][ T6025] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.456924][ T6025] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.501936][ T6034] device syzkaller0 entered promiscuous mode [ 231.607415][ T6025] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.632599][ T6043] netlink: 'syz.3.589': attribute type 10 has an invalid length. [ 231.848642][ T6025] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.929638][ T6049] netlink: 'syz.4.591': attribute type 10 has an invalid length. [ 232.119681][ T6025] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.200772][ T6025] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.253215][ T6025] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.300188][ T6025] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.546674][ T6070] tipc: Enabled bearer , priority 0 [ 232.568429][ T6070] device syzkaller0 entered promiscuous mode [ 232.659090][ T6063] tipc: Resetting bearer [ 232.711659][ T6063] tipc: Disabling bearer [ 232.946828][ T6078] tipc: Enabled bearer , priority 0 [ 232.976661][ T6078] netlink: 20 bytes leftover after parsing attributes in process `syz.1.597'. [ 233.006843][ T6078] tipc: Resetting bearer [ 233.022152][ T6077] tipc: Disabling bearer [ 233.193791][ T6080] device syzkaller0 entered promiscuous mode [ 233.459972][ T6084] netlink: 28 bytes leftover after parsing attributes in process `syz.1.600'. [ 233.493409][ T6084] netlink: 28 bytes leftover after parsing attributes in process `syz.1.600'. [ 233.671327][ T6092] netlink: 'syz.3.604': attribute type 10 has an invalid length. [ 233.745217][ T6098] netlink: 'syz.0.603': attribute type 10 has an invalid length. [ 233.950429][ T6105] device syzkaller0 entered promiscuous mode [ 234.213822][ T6110] device syzkaller0 entered promiscuous mode [ 234.312218][ T6115] device syzkaller0 entered promiscuous mode [ 234.336268][ T6115] netlink: 20 bytes leftover after parsing attributes in process `syz.3.611'. [ 234.687833][ T6132] netlink: 'syz.4.618': attribute type 10 has an invalid length. [ 234.782535][ T6135] netlink: 'syz.3.620': attribute type 10 has an invalid length. [ 234.998288][ T6142] netlink: 277 bytes leftover after parsing attributes in process `syz.4.621'. [ 235.083436][ T6146] netlink: 8 bytes leftover after parsing attributes in process `syz.4.624'. [ 235.214115][ T6150] device syzkaller0 entered promiscuous mode [ 235.225748][ T6150] netlink: 20 bytes leftover after parsing attributes in process `syz.0.626'. [ 235.329030][ T6157] netlink: 'syz.3.629': attribute type 10 has an invalid length. [ 235.527619][ T6153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 235.611997][ T6172] netlink: 'syz.3.632': attribute type 10 has an invalid length. [ 235.747746][ T6177] netlink: 12 bytes leftover after parsing attributes in process `syz.3.634'. [ 235.762808][ T6177] netlink: 20 bytes leftover after parsing attributes in process `syz.3.634'. [ 235.820152][ T6177] netlink: 20 bytes leftover after parsing attributes in process `syz.3.634'. [ 235.832583][ T6177] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 236.159060][ T6184] tipc: Enabled bearer , priority 0 [ 236.177537][ T6184] tipc: Resetting bearer [ 236.185886][ T6183] tipc: Disabling bearer [ 236.560581][ T6200] netlink: 'syz.4.642': attribute type 10 has an invalid length. [ 236.591834][ T6201] device syzkaller0 entered promiscuous mode [ 236.627556][ T6201] netlink: 20 bytes leftover after parsing attributes in process `syz.1.641'. [ 236.709623][ T6205] netlink: 'syz.0.644': attribute type 10 has an invalid length. [ 236.841313][ T6212] syz.4.647[6212] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 236.841479][ T6212] syz.4.647[6212] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 236.963095][ T6219] tipc: Enabled bearer , priority 0 [ 237.019810][ T6219] tipc: Resetting bearer [ 237.041684][ T6217] tipc: Disabling bearer [ 237.068182][ T6223] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 237.233551][ T6231] netlink: 'syz.0.655': attribute type 10 has an invalid length. [ 237.519420][ T6237] device syzkaller0 entered promiscuous mode [ 237.550371][ T6237] netlink: 20 bytes leftover after parsing attributes in process `syz.2.657'. [ 237.747379][ T6241] netlink: 'syz.1.659': attribute type 10 has an invalid length. [ 237.878538][ T6248] tipc: Enabled bearer , priority 0 [ 237.918132][ T6248] tipc: Resetting bearer [ 237.943167][ T6244] tipc: Disabling bearer [ 238.071180][ T6256] netlink: 'syz.2.666': attribute type 10 has an invalid length. [ 238.094006][ T6257] tipc: Enabled bearer , priority 0 [ 238.125209][ T6257] device syzkaller0 entered promiscuous mode [ 238.193529][ T6255] tipc: Resetting bearer [ 238.261099][ T6255] tipc: Disabling bearer [ 238.287149][ T6268] device syzkaller0 entered promiscuous mode [ 238.327370][ T6264] netlink: 20 bytes leftover after parsing attributes in process `syz.0.670'. [ 238.541700][ T6278] netlink: 'syz.2.673': attribute type 10 has an invalid length. [ 238.584611][ T6280] netlink: 12 bytes leftover after parsing attributes in process `syz.4.674'. [ 238.624515][ T6284] netlink: 308 bytes leftover after parsing attributes in process `syz.3.675'. [ 238.680910][ T6284] netlink: 8 bytes leftover after parsing attributes in process `syz.3.675'. [ 238.735594][ T6288] netlink: 68 bytes leftover after parsing attributes in process `syz.3.675'. [ 238.992661][ T6305] tipc: Enabled bearer , priority 0 [ 239.009044][ T6303] tipc: Enabled bearer , priority 0 [ 239.022850][ T6305] device syzkaller0 entered promiscuous mode [ 239.044266][ T6303] tipc: Resetting bearer [ 239.064883][ T6304] tipc: Resetting bearer [ 239.107115][ T6304] tipc: Disabling bearer [ 239.128347][ T6302] tipc: Disabling bearer [ 239.299201][ T6313] netlink: 'syz.0.683': attribute type 10 has an invalid length. [ 239.474725][ T6325] device syzkaller0 entered promiscuous mode [ 239.774724][ T6337] tipc: Enabled bearer , priority 0 [ 239.782088][ T6332] device bridge_slave_1 left promiscuous mode [ 239.790415][ T6332] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.830039][ T6332] device bridge_slave_0 left promiscuous mode [ 239.843825][ T6332] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.917408][ T6342] netlink: 'syz.4.691': attribute type 10 has an invalid length. [ 239.936599][ T6341] tipc: Resetting bearer [ 239.942621][ T6346] tipc: Enabled bearer , priority 0 [ 239.956223][ T6346] device syzkaller0 entered promiscuous mode [ 239.984169][ T6330] tipc: Disabling bearer [ 240.040368][ T6351] tipc: Enabled bearer , priority 0 [ 240.052600][ T6345] tipc: Resetting bearer [ 240.101085][ T6345] tipc: Disabling bearer [ 240.130104][ T6351] tipc: Resetting bearer [ 240.191829][ T6349] tipc: Disabling bearer [ 240.216067][ T6359] ax25_connect(): syz.1.699 uses autobind, please contact jreuter@yaina.de [ 240.493719][ T6373] netlink: 'syz.3.704': attribute type 10 has an invalid length. [ 240.696652][ T6380] netlink: 'syz.1.708': attribute type 10 has an invalid length. [ 240.765439][ T6382] tipc: Enabled bearer , priority 0 [ 240.790919][ T6382] tipc: Resetting bearer [ 240.820825][ T6384] tipc: Enabled bearer , priority 0 [ 240.831724][ T6381] tipc: Disabling bearer [ 240.846938][ T6384] device syzkaller0 entered promiscuous mode [ 240.890922][ T6383] tipc: Resetting bearer [ 240.959938][ T6383] tipc: Disabling bearer [ 240.996252][ T6391] tipc: Enabled bearer , priority 0 [ 241.015643][ T6391] tipc: Resetting bearer [ 241.024005][ T6389] tipc: Disabling bearer [ 241.299145][ T6400] __nla_validate_parse: 4 callbacks suppressed [ 241.299173][ T6400] netlink: 20 bytes leftover after parsing attributes in process `syz.0.718'. [ 241.434758][ T6406] netlink: 'syz.4.721': attribute type 10 has an invalid length. [ 241.477044][ T6410] netlink: 'syz.1.722': attribute type 10 has an invalid length. [ 241.528196][ T6412] tipc: Enabled bearer , priority 0 [ 241.560026][ T6412] tipc: Resetting bearer [ 241.581066][ T6411] tipc: Disabling bearer [ 241.644532][ T6416] tipc: Enabled bearer , priority 0 [ 241.664340][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.761729][ T6418] tipc: Enabling of bearer rejected, failed to enable media [ 241.778499][ T6416] tipc: Resetting bearer [ 241.815056][ T6413] tipc: Disabling bearer [ 242.178861][ T6447] netlink: 'syz.0.734': attribute type 10 has an invalid length. [ 242.284858][ T6450] netlink: 20 bytes leftover after parsing attributes in process `syz.1.735'. [ 242.296821][ T6452] netlink: 'syz.4.736': attribute type 10 has an invalid length. [ 242.569768][ T6458] tipc: Enabled bearer , priority 0 [ 242.589873][ T6461] netlink: 244 bytes leftover after parsing attributes in process `syz.0.741'. [ 242.620490][ T6458] tipc: Resetting bearer [ 242.632863][ T6461] netlink: 244 bytes leftover after parsing attributes in process `syz.0.741'. [ 242.653511][ T6457] tipc: Disabling bearer [ 242.716638][ T6464] tipc: Enabled bearer , priority 0 [ 242.776425][ T6464] tipc: Resetting bearer [ 242.817180][ T6463] tipc: Disabling bearer [ 242.842579][ T6466] netlink: 9 bytes leftover after parsing attributes in process `syz.0.743'. [ 242.932690][ T6474] tipc: Enabling of bearer rejected, failed to enable media [ 243.094622][ T6479] netlink: 'syz.1.747': attribute type 10 has an invalid length. [ 243.316342][ T6487] tipc: Enabled bearer , priority 0 [ 243.355665][ T6487] netlink: 20 bytes leftover after parsing attributes in process `syz.1.749'. [ 243.385725][ T6487] tipc: Resetting bearer [ 243.396717][ T6486] tipc: Disabling bearer [ 243.454935][ T6493] netlink: 24 bytes leftover after parsing attributes in process `syz.0.750'. [ 243.462359][ T6494] netlink: 'syz.4.752': attribute type 10 has an invalid length. [ 243.619793][ T6500] tipc: Enabled bearer , priority 0 [ 243.660154][ T6500] tipc: Resetting bearer [ 243.691972][ T6499] tipc: Disabling bearer [ 244.402713][ T6516] tipc: Enabled bearer , priority 0 [ 244.440407][ T6516] tipc: Resetting bearer [ 244.475045][ T6515] tipc: Disabling bearer [ 244.571228][ T6518] netlink: 'syz.1.759': attribute type 10 has an invalid length. [ 244.691104][ T6527] tipc: Enabling of bearer rejected, failed to enable media [ 244.741149][ T6529] netlink: 556 bytes leftover after parsing attributes in process `syz.1.764'. [ 244.815933][ T6533] netlink: 'syz.4.765': attribute type 10 has an invalid length. [ 245.014661][ T6540] tipc: Enabled bearer , priority 0 [ 245.026090][ T6542] tipc: Enabled bearer , priority 0 [ 245.046802][ T6540] tipc: Resetting bearer [ 245.062486][ T6542] netlink: 20 bytes leftover after parsing attributes in process `syz.4.767'. [ 245.088834][ T6539] tipc: Disabling bearer [ 245.116435][ T6542] tipc: Resetting bearer [ 245.146005][ T6538] tipc: Disabling bearer [ 245.391501][ T6556] device syzkaller0 entered promiscuous mode [ 245.502511][ T6558] netlink: 'syz.1.774': attribute type 10 has an invalid length. [ 245.649854][ T6564] device xfrm0 entered promiscuous mode [ 245.885619][ T6572] netlink: 'syz.1.778': attribute type 10 has an invalid length. [ 246.119451][ T6578] tipc: Enabling of bearer rejected, failed to enable media [ 246.170627][ T6582] tipc: Enabling of bearer rejected, failed to enable media [ 246.510777][ T6611] tipc: Enabled bearer , priority 0 [ 246.554504][ T6614] netlink: 8 bytes leftover after parsing attributes in process `syz.3.785'. [ 246.595129][ T6611] netlink: 20 bytes leftover after parsing attributes in process `syz.4.784'. [ 246.649841][ T6616] tipc: Resetting bearer [ 246.785508][ T6609] tipc: Disabling bearer [ 246.824355][ T6621] netlink: 'syz.1.787': attribute type 10 has an invalid length. [ 246.959908][ T6624] device syzkaller0 entered promiscuous mode [ 246.984816][ T6624] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 247.100328][ T6630] netlink: 'syz.1.790': attribute type 10 has an invalid length. [ 247.609642][ T6646] tipc: Enabling of bearer rejected, failed to enable media [ 247.675559][ T6648] ax25_connect(): syz.0.796 uses autobind, please contact jreuter@yaina.de [ 247.730570][ T6648] netlink: 256 bytes leftover after parsing attributes in process `syz.0.796'. [ 247.994993][ T6659] tipc: Enabling of bearer rejected, failed to enable media [ 248.093814][ T6662] tipc: Enabled bearer , priority 0 [ 248.153411][ T6662] netlink: 20 bytes leftover after parsing attributes in process `syz.4.799'. [ 248.213743][ T6668] tipc: Resetting bearer [ 248.265947][ T6672] netlink: 'syz.3.800': attribute type 10 has an invalid length. [ 248.289224][ T6660] tipc: Disabling bearer [ 248.693142][ T6679] device syzkaller0 entered promiscuous mode [ 248.727930][ T6681] netlink: 8 bytes leftover after parsing attributes in process `syz.0.804'. [ 248.870231][ T6684] netlink: 'syz.3.805': attribute type 10 has an invalid length. [ 249.016350][ T6689] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 249.202420][ T6692] bond0: (slave wlan1): Error: Slave device does not support XDP [ 249.285824][ T6692] netlink: 14 bytes leftover after parsing attributes in process `syz.1.808'. [ 249.364831][ T6692] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 249.384710][ T6692] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 249.413125][ T6692] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 249.451815][ T6692] bond0 (unregistering): Released all slaves [ 249.532139][ T6701] tipc: Enabling of bearer rejected, failed to enable media [ 249.809129][ T6717] tipc: Enabled bearer , priority 0 [ 249.836886][ T6717] netlink: 20 bytes leftover after parsing attributes in process `syz.3.813'. [ 249.908691][ T6721] tipc: Resetting bearer [ 249.927778][ T6720] netlink: 'syz.0.815': attribute type 10 has an invalid length. [ 249.943167][ T6715] tipc: Disabling bearer [ 250.154905][ T6729] netlink: 'syz.3.816': attribute type 8 has an invalid length. [ 250.292869][ T6731] device syzkaller0 entered promiscuous mode [ 250.352318][ T6734] device syzkaller1 entered promiscuous mode [ 250.378786][ T6734] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 250.387242][ T6732] netlink: 56 bytes leftover after parsing attributes in process `syz.1.817'. [ 250.511779][ T6739] netlink: 'syz.0.821': attribute type 10 has an invalid length. [ 250.702761][ T6744] tipc: Enabled bearer , priority 0 [ 250.738023][ T6744] device syzkaller0 entered promiscuous mode [ 250.839037][ T6744] tipc: Resetting bearer [ 250.886012][ T6749] tipc: Enabling of bearer rejected, failed to enable media [ 250.903232][ T6743] tipc: Resetting bearer [ 250.931043][ T6743] tipc: Disabling bearer [ 250.970806][ T6751] tipc: Enabled bearer , priority 0 [ 251.034960][ T6759] netlink: 20 bytes leftover after parsing attributes in process `syz.1.826'. [ 251.069942][ T6751] tipc: Resetting bearer [ 251.127361][ T6750] tipc: Disabling bearer [ 251.340790][ T6774] netlink: 'syz.1.831': attribute type 10 has an invalid length. [ 251.375198][ T6772] device syzkaller0 entered promiscuous mode [ 251.389712][ T6776] tipc: Enabled bearer , priority 10 [ 251.588970][ T6782] netlink: 'syz.3.835': attribute type 13 has an invalid length. [ 251.615932][ T6782] netlink: 'syz.3.835': attribute type 17 has an invalid length. [ 251.945333][ T6782] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 251.983681][ T6782] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 252.006339][ T6785] kthread_run failed with err -4 [ 252.179261][ T6800] tipc: Enabled bearer , priority 0 [ 252.242800][ T6808] device syzkaller0 entered promiscuous mode [ 252.290596][ T6810] tipc: Enabling of bearer rejected, failed to enable media [ 252.330800][ T6809] tipc: Enabling of bearer rejected, failed to enable media [ 252.370365][ T6800] tipc: Resetting bearer [ 252.430071][ T6799] tipc: Resetting bearer [ 252.480841][ T6799] tipc: Disabling bearer [ 252.625893][ T6824] netlink: 'syz.1.845': attribute type 10 has an invalid length. [ 252.829445][ T6832] device syzkaller0 entered promiscuous mode [ 253.184845][ T6844] netlink: 4 bytes leftover after parsing attributes in process `syz.3.852'. [ 253.244592][ T6844] device dummy0 entered promiscuous mode [ 253.252753][ T6844] device macvtap1 entered promiscuous mode [ 253.262687][ T6849] netlink: 4 bytes leftover after parsing attributes in process `syz.3.852'. [ 253.309741][ T6849] device dummy0 left promiscuous mode [ 253.373337][ T6843] netlink: 'syz.2.851': attribute type 10 has an invalid length. [ 253.419524][ T6855] tipc: Enabling of bearer rejected, failed to enable media [ 253.506826][ T6857] tipc: Enabling of bearer rejected, failed to enable media [ 253.567447][ T6864] netlink: 20 bytes leftover after parsing attributes in process `syz.0.856'. [ 253.796746][ T6875] netlink: 'syz.1.859': attribute type 10 has an invalid length. [ 253.849083][ T6876] tipc: Enabled bearer , priority 0 [ 253.864348][ T6876] device syzkaller0 entered promiscuous mode [ 253.929409][ T6876] tipc: Resetting bearer [ 253.976038][ T6874] tipc: Resetting bearer [ 254.036808][ T6874] tipc: Disabling bearer [ 254.334640][ T6904] netlink: 104 bytes leftover after parsing attributes in process `syz.3.867'. [ 254.423735][ T6909] netlink: 'syz.4.871': attribute type 10 has an invalid length. [ 254.479438][ T6908] netlink: 'syz.0.872': attribute type 10 has an invalid length. [ 254.521772][ T6911] tipc: Enabling of bearer rejected, failed to enable media [ 254.599199][ T6915] tipc: Enabling of bearer rejected, failed to enable media [ 254.684835][ T6919] netlink: 20 bytes leftover after parsing attributes in process `syz.3.873'. [ 255.024401][ T6937] netlink: 20 bytes leftover after parsing attributes in process `syz.0.877'. [ 255.063016][ T6937] netlink: 152 bytes leftover after parsing attributes in process `syz.0.877'. [ 255.085235][ T6937] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 255.104806][ T6938] tipc: Enabling of bearer rejected, failed to enable media [ 255.230605][ T6944] tipc: Enabled bearer , priority 0 [ 255.315109][ T6951] device syzkaller0 entered promiscuous mode [ 255.401508][ T6944] tipc: Resetting bearer [ 255.435218][ T6943] tipc: Resetting bearer [ 255.470466][ T6943] tipc: Disabling bearer [ 255.663575][ T6963] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 255.692087][ T6961] netlink: 'syz.1.884': attribute type 10 has an invalid length. [ 255.815978][ T6966] netlink: 'syz.3.888': attribute type 10 has an invalid length. [ 255.917484][ T6972] tipc: Enabling of bearer rejected, failed to enable media [ 256.197890][ T6986] tipc: Enabling of bearer rejected, failed to enable media [ 256.305044][ T6991] tipc: Enabling of bearer rejected, failed to enable media [ 256.352778][ T6986] netlink: 20 bytes leftover after parsing attributes in process `syz.0.892'. [ 256.923739][ T7032] netlink: 'syz.0.903': attribute type 10 has an invalid length. [ 257.027225][ T1428] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 257.036859][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.043333][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.118527][ T7038] tipc: Enabling of bearer rejected, failed to enable media [ 257.162027][ T4292] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 257.170846][ T4292] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 257.176383][ T7039] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 257.184600][ T23] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 257.363631][ T4292] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 257.367590][ T7053] netlink: 20 bytes leftover after parsing attributes in process `syz.2.908'. [ 257.450288][ T7055] tipc: Enabled bearer , priority 0 [ 257.473690][ T7057] tipc: Enabling of bearer rejected, failed to enable media [ 257.501376][ T7055] tipc: Resetting bearer [ 257.540568][ T7054] tipc: Disabling bearer [ 257.556734][ T7060] tipc: Enabling of bearer rejected, failed to enable media [ 257.673433][ T7072] netlink: 20 bytes leftover after parsing attributes in process `syz.4.911'. [ 257.967686][ T7087] !: renamed from dummy0 [ 257.988526][ T7086] netlink: 'syz.1.917': attribute type 10 has an invalid length. [ 258.139872][ T7091] tipc: Enabling of bearer rejected, failed to enable media [ 258.144703][ T4292] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 258.493408][ T7110] tipc: Enabled bearer , priority 0 [ 258.548705][ T7110] tipc: Resetting bearer [ 258.595873][ T7109] tipc: Disabling bearer [ 258.636017][ T7114] tipc: Enabling of bearer rejected, failed to enable media [ 258.658952][ T7116] tipc: Enabling of bearer rejected, failed to enable media [ 258.781564][ T7129] __nla_validate_parse: 1 callbacks suppressed [ 258.781580][ T7129] netlink: 20 bytes leftover after parsing attributes in process `syz.3.926'. [ 259.308804][ T7152] tipc: Enabling of bearer rejected, failed to enable media [ 259.561892][ T7167] netlink: 'syz.2.940': attribute type 3 has an invalid length. [ 259.585478][ T7165] tipc: Enabled bearer , priority 0 [ 259.627487][ T7165] tipc: Resetting bearer [ 259.709798][ T7164] tipc: Disabling bearer [ 259.901698][ T7176] tipc: Enabling of bearer rejected, failed to enable media [ 260.055874][ T7183] netlink: 20 bytes leftover after parsing attributes in process `syz.0.943'. [ 260.117206][ T7187] tipc: Enabling of bearer rejected, failed to enable media [ 260.181346][ T7189] netlink: 32 bytes leftover after parsing attributes in process `syz.1.946'. [ 260.227898][ T7195] netlink: 32 bytes leftover after parsing attributes in process `syz.1.946'. [ 260.750498][ T7213] device vlan3 entered promiscuous mode [ 260.792576][ T7213] device team0 entered promiscuous mode [ 260.864383][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 260.885304][ T7222] tipc: Enabling of bearer rejected, failed to enable media [ 260.935290][ T7224] tipc: Enabled bearer , priority 0 [ 260.999197][ T7224] tipc: Resetting bearer [ 261.070376][ T7223] tipc: Disabling bearer [ 261.319397][ T7245] tipc: Enabling of bearer rejected, failed to enable media [ 261.393395][ T7249] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 261.457293][ T7253] netlink: 20 bytes leftover after parsing attributes in process `syz.2.958'. [ 261.827877][ T7265] tipc: Enabling of bearer rejected, failed to enable media [ 262.180576][ T7284] tipc: Enabled bearer , priority 0 [ 262.225143][ T7286] tipc: Enabled bearer , priority 0 [ 262.246583][ T7284] tipc: Resetting bearer [ 262.256052][ T7286] tipc: Resetting bearer [ 262.281165][ T7282] tipc: Disabling bearer [ 262.332055][ T7285] tipc: Disabling bearer [ 262.638806][ T7305] tipc: Enabling of bearer rejected, failed to enable media [ 262.782357][ T7311] netlink: 20 bytes leftover after parsing attributes in process `syz.1.975'. [ 262.889332][ T7318] tipc: Enabled bearer , priority 0 [ 262.932523][ T7318] tipc: Resetting bearer [ 262.973460][ T7315] tipc: Disabling bearer [ 263.170742][ T7328] tipc: Enabled bearer , priority 0 [ 263.197426][ T7328] tipc: Resetting bearer [ 263.234035][ T7327] tipc: Disabling bearer [ 263.402858][ T7337] netlink: 104 bytes leftover after parsing attributes in process `syz.1.987'. [ 263.428399][ T7339] tipc: Enabled bearer , priority 0 [ 263.442043][ T7337] netlink: 28 bytes leftover after parsing attributes in process `syz.1.987'. [ 263.462482][ T7339] tipc: Resetting bearer [ 263.506817][ T7335] tipc: Disabling bearer [ 263.605990][ T7347] tipc: Enabling of bearer rejected, failed to enable media [ 263.676892][ T7350] tipc: Enabled bearer , priority 0 [ 263.721921][ T7350] tipc: Resetting bearer [ 263.810633][ T7349] tipc: Disabling bearer [ 263.984682][ T4292] Bluetooth: hci4: command 0x0405 tx timeout [ 264.033679][ T7373] tipc: Enabling of bearer rejected, failed to enable media [ 264.487970][ T7403] tipc: Enabled bearer , priority 0 [ 264.514143][ T7403] tipc: Resetting bearer [ 264.531316][ T7402] tipc: Disabling bearer [ 265.110884][ T7434] tipc: Enabled bearer , priority 0 [ 265.129612][ T7434] tipc: Resetting bearer [ 265.161646][ T7433] tipc: Disabling bearer [ 265.191144][ T7439] tipc: Enabling of bearer rejected, failed to enable media [ 265.315665][ T7448] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1010'. [ 265.588819][ T7462] tipc: Enabling of bearer rejected, failed to enable media [ 265.636850][ T7465] netlink: 'syz.4.1016': attribute type 10 has an invalid length. [ 265.747433][ T7472] device syzkaller0 entered promiscuous mode [ 266.111799][ T7476] crypto_alloc_aead failed rc=-4 [ 266.161931][ T7501] device syzkaller0 entered promiscuous mode [ 266.526979][ T7515] tipc: Enabling of bearer rejected, failed to enable media [ 266.568125][ T7517] netlink: 'syz.1.1028': attribute type 10 has an invalid length. [ 266.672447][ T7523] netlink: 'syz.1.1029': attribute type 1 has an invalid length. [ 266.683727][ T7524] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1027'. [ 266.803798][ T7529] tipc: Enabling of bearer rejected, failed to enable media [ 266.968602][ T7539] device syzkaller0 entered promiscuous mode [ 267.321585][ T7551] device syzkaller0 entered promiscuous mode [ 267.465439][ T7559] netlink: 'syz.4.1039': attribute type 10 has an invalid length. [ 267.584486][ T4548] Bluetooth: hci4: command 0x0401 tx timeout [ 267.631509][ T7566] tipc: Enabled bearer , priority 0 [ 267.669678][ T7566] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1041'. [ 267.712356][ T7566] tipc: Resetting bearer [ 267.761435][ T7563] tipc: Disabling bearer [ 267.821744][ T7575] tipc: Enabling of bearer rejected, failed to enable media [ 267.956874][ T7587] device syzkaller0 entered promiscuous mode [ 268.382511][ T7610] netlink: 'syz.4.1054': attribute type 10 has an invalid length. [ 268.440271][ T7612] device syzkaller0 entered promiscuous mode [ 268.700827][ T7622] tipc: Enabled bearer , priority 0 [ 268.710390][ T7622] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1060'. [ 268.727738][ T7622] tipc: Resetting bearer [ 268.736877][ T7621] tipc: Disabling bearer [ 268.830986][ T7626] tipc: Enabling of bearer rejected, failed to enable media [ 268.951429][ T7635] device syzkaller0 entered promiscuous mode [ 269.184378][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 269.407418][ T7655] netlink: 'syz.3.1069': attribute type 10 has an invalid length. [ 269.455193][ T7657] device syzkaller0 entered promiscuous mode [ 269.571563][ T7661] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1073'. [ 269.620558][ T7665] tipc: Enabled bearer , priority 0 [ 269.639715][ T7665] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1076'. [ 269.685758][ T7665] tipc: Resetting bearer [ 269.716995][ T7664] tipc: Disabling bearer [ 269.871697][ T7675] device syzkaller0 entered promiscuous mode [ 269.913070][ T7678] tipc: Enabling of bearer rejected, failed to enable media [ 270.234804][ T7697] netlink: 'syz.4.1085': attribute type 10 has an invalid length. [ 270.324475][ T7703] device syzkaller0 entered promiscuous mode [ 270.447483][ T7705] netlink: 'syz.4.1089': attribute type 1 has an invalid length. [ 270.508254][ T7705] 8021q: adding VLAN 0 to HW filter on device bond1 [ 270.537495][ T7713] device wlan0 left promiscuous mode [ 270.556587][ T7713] bond1: (slave wlan0): Opening slave failed [ 270.565330][ T7709] device syzkaller0 entered promiscuous mode [ 270.663190][ T7705] bond1: (slave vlan3): Opening slave failed [ 270.712766][ T7714] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1091'. [ 270.781646][ T7721] device syzkaller0 entered promiscuous mode [ 271.034010][ T7736] netlink: 'syz.3.1099': attribute type 10 has an invalid length. [ 271.169543][ T7742] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1101'. [ 271.223466][ T7744] tipc: Enabling of bearer rejected, failed to enable media [ 271.376225][ T7754] device syzkaller0 entered promiscuous mode [ 271.534370][ T4548] syzkaller0: tun_net_xmit 76 [ 271.539845][ T4548] syzkaller0: tun_net_xmit 48 [ 271.547062][ T7765] syzkaller0: create flow: hash 116608077 index 1 [ 271.556615][ T4548] syzkaller0: tun_net_xmit 76 [ 271.598006][ T7763] syzkaller0: delete flow: hash 116608077 index 1 [ 271.738747][ T7770] device syzkaller0 entered promiscuous mode [ 271.765505][ T7770] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1109'. [ 271.850414][ T7772] device syzkaller0 entered promiscuous mode [ 271.875374][ T7774] netlink: 'syz.2.1112': attribute type 10 has an invalid length. [ 272.201493][ T7792] tipc: Enabling of bearer rejected, failed to enable media [ 272.241921][ T7790] device syzkaller0 entered promiscuous mode [ 272.383375][ T7806] tipc: Enabled bearer , priority 10 [ 272.585717][ T7819] netlink: 'syz.4.1125': attribute type 10 has an invalid length. [ 272.710746][ T7822] device syzkaller0 entered promiscuous mode [ 272.721012][ T7822] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1127'. [ 272.890847][ T7828] device syzkaller0 entered promiscuous mode [ 273.262631][ T7840] device syzkaller0 entered promiscuous mode [ 273.450441][ T7845] tipc: Enabling of bearer rejected, failed to enable media [ 273.494548][ T4281] tipc: Node number set to 299601 [ 273.519945][ T7848] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1137'. [ 273.836976][ T7863] tipc: Enabling of bearer rejected, already enabled [ 273.893383][ T7868] device syzkaller0 entered promiscuous mode [ 273.963657][ T7868] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1141'. [ 274.053424][ T7872] device syzkaller0 entered promiscuous mode [ 274.197711][ T7876] device syzkaller0 entered promiscuous mode [ 274.214345][ T7876] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1156'. [ 274.720269][ T7884] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.727680][ T7884] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.266088][ T7884] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 275.317041][ T7884] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 275.783829][ T7884] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.792895][ T7884] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.802059][ T7884] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.811001][ T7884] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.098235][ T7898] device syzkaller0 entered promiscuous mode [ 276.163649][ T7914] tipc: Enabling of bearer rejected, failed to enable media [ 276.276377][ T7928] device syzkaller0 entered promiscuous mode [ 276.307040][ T7931] device syzkaller0 entered promiscuous mode [ 276.602985][ T7927] tipc: Enabled bearer , priority 10 [ 276.619167][ T7947] device syzkaller0 entered promiscuous mode [ 276.642881][ T7947] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1164'. [ 276.743479][ T7955] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 277.182683][ T7955] bridge0: port 1(syz_tun) entered disabled state [ 277.729274][ T4278] tipc: Node number set to 1240181986 [ 278.143506][ T7955] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.153586][ T7955] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.162963][ T7955] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.172014][ T7955] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.217749][ T7963] tipc: Enabling of bearer rejected, failed to enable media [ 278.403195][ T7989] device syzkaller0 entered promiscuous mode [ 278.457280][ T7992] device syzkaller0 entered promiscuous mode [ 278.506687][ T7997] device veth0_to_bond entered promiscuous mode [ 278.566238][ T7999] device syzkaller1 entered promiscuous mode [ 278.640671][ T8001] device syzkaller0 entered promiscuous mode [ 278.705372][ T8001] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1180'. [ 279.786169][ T8034] tipc: Enabling of bearer rejected, failed to enable media [ 279.807937][ T8037] device syzkaller0 entered promiscuous mode [ 279.837682][ T8039] device syzkaller0 entered promiscuous mode [ 279.974374][ T8052] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1196'. [ 280.268274][ T8057] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1197'. [ 280.348694][ T8068] device syzkaller0 entered promiscuous mode [ 280.360012][ T8070] device bridge_slave_0 left promiscuous mode [ 280.367988][ T8070] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.378688][ T8070] device bridge_slave_1 left promiscuous mode [ 280.385888][ T8070] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.400798][ T8070] team0: Port device team_slave_0 removed [ 280.412554][ T8070] team0: Port device team_slave_1 removed [ 280.421736][ T8070] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 280.430673][ T8070] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 280.563045][ T8079] device syzkaller0 entered promiscuous mode [ 280.665028][ T8084] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1203'. [ 281.020599][ T8088] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1207'. [ 281.033790][ T8096] device syzkaller0 entered promiscuous mode [ 281.103961][ T8103] tipc: Enabled bearer , priority 0 [ 281.170148][ T8102] tipc: Resetting bearer [ 281.211422][ T8101] tipc: Disabling bearer [ 281.252564][ T8108] device syzkaller0 entered promiscuous mode [ 281.263078][ T8108] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1222'. [ 281.407097][ T8119] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 281.414787][ T8119] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 281.427270][ T8119] bond0: (slave bond_slave_0): Releasing backup interface [ 281.464745][ T8119] bond0: (slave bond_slave_1): Releasing backup interface [ 281.546337][ T8119] team0: Port device team_slave_0 removed [ 281.566960][ T8119] team0: Port device team_slave_1 removed [ 281.585060][ T8119] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 281.593457][ T8119] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 281.615491][ T8119] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 281.634920][ T8119] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 281.649793][ T8119] bond0: (slave wlan1): Releasing backup interface [ 281.711251][ T8127] device syzkaller0 entered promiscuous mode [ 282.339461][ T8153] tipc: Enabled bearer , priority 0 [ 282.357143][ T8153] tipc: Resetting bearer [ 282.418947][ T8152] tipc: Disabling bearer [ 282.467052][ T8158] device syzkaller0 entered promiscuous mode [ 282.620064][ T8164] device syzkaller0 entered promiscuous mode [ 282.730844][ T8166] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1230'. [ 282.844019][ T8169] device syzkaller0 entered promiscuous mode [ 282.873557][ T8171] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.983746][ T8171] device bridge_slave_1 left promiscuous mode [ 283.000137][ T8171] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.024373][ T8171] bond0: (slave bond_slave_0): Releasing backup interface [ 283.064534][ T8171] bond0: (slave bond_slave_1): Releasing backup interface [ 283.090574][ T8171] team0: Port device team_slave_0 removed [ 283.106272][ T8171] team0: Port device team_slave_1 removed [ 283.122876][ T8171] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 283.162500][ T8171] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 283.178129][ T8171] bond0: (slave wlan1): Releasing backup interface [ 283.491886][ T8190] tipc: Enabled bearer , priority 0 [ 283.519008][ T8190] tipc: Resetting bearer [ 283.894043][ T8187] tipc: Disabling bearer [ 284.036120][ T8200] device syzkaller0 entered promiscuous mode [ 284.246287][ T8215] device syzkaller0 entered promiscuous mode [ 284.279195][ T8218] device syzkaller0 entered promiscuous mode [ 284.369349][ T8218] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1249'. [ 284.987189][ T8236] device syzkaller0 entered promiscuous mode [ 285.047929][ T8242] netlink: set zone limit has 8 unknown bytes [ 285.267872][ T8251] device syzkaller0 entered promiscuous mode [ 285.284406][ T8246] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1256'. [ 285.428968][ T8255] device syzkaller0 entered promiscuous mode [ 285.681361][ T8266] device syzkaller0 entered promiscuous mode [ 285.728234][ T8266] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1267'. [ 285.843916][ T8280] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 285.892220][ T8281] device syzkaller0 entered promiscuous mode [ 286.141084][ T8286] device syzkaller0 entered promiscuous mode [ 286.281334][ T8294] device syzkaller0 entered promiscuous mode [ 286.318765][ T8296] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1281'. [ 286.370748][ T8296] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.380868][ T8296] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.389687][ T8296] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.398461][ T8296] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.415594][ T8296] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1281'. [ 286.562272][ T8274] ================================================================== [ 286.570860][ T8274] BUG: KASAN: use-after-free in ax25_release+0x5ca/0x870 [ 286.577968][ T8274] Read of size 8 at addr ffff8880298bc708 by task syz.3.1271/8274 [ 286.585794][ T8274] [ 286.588177][ T8274] CPU: 0 PID: 8274 Comm: syz.3.1271 Not tainted syzkaller #0 [ 286.595574][ T8274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 286.605670][ T8274] Call Trace: [ 286.608976][ T8274] [ 286.611934][ T8274] dump_stack_lvl+0x168/0x230 [ 286.616661][ T8274] ? show_regs_print_info+0x20/0x20 [ 286.621885][ T8274] ? _printk+0xcc/0x110 [ 286.626415][ T8274] ? ax25_release+0x5ca/0x870 [ 286.631136][ T8274] ? load_image+0x3b0/0x3b0 [ 286.635674][ T8274] print_address_description+0x60/0x2d0 [ 286.641268][ T8274] ? ax25_release+0x5ca/0x870 [ 286.645973][ T8274] kasan_report+0xdf/0x130 [ 286.650430][ T8274] ? ax25_release+0x5ca/0x870 [ 286.655151][ T8274] ax25_release+0x5ca/0x870 [ 286.659778][ T8274] sock_close+0xd5/0x240 [ 286.664101][ T8274] ? sock_mmap+0x90/0x90 [ 286.668381][ T8274] __fput+0x234/0x930 [ 286.672410][ T8274] task_work_run+0x125/0x1a0 [ 286.677065][ T8274] exit_to_user_mode_loop+0x10f/0x130 [ 286.682481][ T8274] exit_to_user_mode_prepare+0xb1/0x140 [ 286.688075][ T8274] syscall_exit_to_user_mode+0x16/0x40 [ 286.693580][ T8274] do_syscall_64+0x58/0xa0 [ 286.698035][ T8274] ? clear_bhb_loop+0x30/0x80 [ 286.702836][ T8274] ? clear_bhb_loop+0x30/0x80 [ 286.707541][ T8274] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 286.713475][ T8274] RIP: 0033:0x7ff28ef4bba9 [ 286.717915][ T8274] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 286.737545][ T8274] RSP: 002b:00007ffcd40122c8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 286.745995][ T8274] RAX: 0000000000000000 RBX: 00007ff28f194da0 RCX: 00007ff28ef4bba9 [ 286.753996][ T8274] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 286.761991][ T8274] RBP: 00007ff28f194da0 R08: 0000000000000204 R09: 0000001dd40125bf [ 286.769988][ T8274] R10: 00007ff28f194cb0 R11: 0000000000000246 R12: 0000000000045f25 [ 286.777986][ T8274] R13: 00007ff28f193090 R14: ffffffffffffffff R15: 00007ffcd40123e0 [ 286.786003][ T8274] [ 286.789042][ T8274] [ 286.791385][ T8274] Allocated by task 8280: [ 286.795734][ T8274] __kasan_kmalloc+0xb5/0xf0 [ 286.800382][ T8274] ax25_dev_device_up+0x50/0x580 [ 286.805363][ T8274] ax25_device_event+0x483/0x4f0 [ 286.810342][ T8274] raw_notifier_call_chain+0xcb/0x160 [ 286.815753][ T8274] __dev_notify_flags+0x178/0x2d0 [ 286.820813][ T8274] dev_change_flags+0xe3/0x1a0 [ 286.825602][ T8274] dev_ifsioc+0x147/0xe70 [ 286.830027][ T8274] dev_ioctl+0x55f/0xe50 [ 286.834297][ T8274] sock_do_ioctl+0x222/0x2f0 [ 286.838945][ T8274] sock_ioctl+0x4ed/0x6e0 [ 286.843524][ T8274] __se_sys_ioctl+0xfa/0x170 [ 286.848169][ T8274] do_syscall_64+0x4c/0xa0 [ 286.852609][ T8274] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 286.859044][ T8274] [ 286.861383][ T8274] Freed by task 8280: [ 286.865384][ T8274] kasan_set_track+0x4b/0x70 [ 286.870002][ T8274] kasan_set_free_info+0x1f/0x40 [ 286.874971][ T8274] ____kasan_slab_free+0xd5/0x110 [ 286.880020][ T8274] slab_free_freelist_hook+0xea/0x170 [ 286.885414][ T8274] kfree+0xef/0x2a0 [ 286.889239][ T8274] ax25_device_event+0x4b4/0x4f0 [ 286.894183][ T8274] raw_notifier_call_chain+0xcb/0x160 [ 286.899570][ T8274] __dev_notify_flags+0x178/0x2d0 [ 286.904599][ T8274] dev_change_flags+0xe3/0x1a0 [ 286.909946][ T8274] dev_ifsioc+0x147/0xe70 [ 286.914433][ T8274] dev_ioctl+0x55f/0xe50 [ 286.918701][ T8274] sock_do_ioctl+0x222/0x2f0 [ 286.923297][ T8274] sock_ioctl+0x4ed/0x6e0 [ 286.927634][ T8274] __se_sys_ioctl+0xfa/0x170 [ 286.932229][ T8274] do_syscall_64+0x4c/0xa0 [ 286.936655][ T8274] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 286.942577][ T8274] [ 286.944907][ T8274] Last potentially related work creation: [ 286.950627][ T8274] kasan_save_stack+0x35/0x60 [ 286.955312][ T8274] kasan_record_aux_stack+0xb8/0x100 [ 286.960638][ T8274] insert_work+0x54/0x3d0 [ 286.964978][ T8274] __queue_work+0x9c5/0xd50 [ 286.969496][ T8274] queue_work_on+0x11d/0x1d0 [ 286.974093][ T8274] inet6addr_event+0x9c/0xc0 [ 286.978723][ T8274] atomic_notifier_call_chain+0x15d/0x280 [ 286.984452][ T8274] ipv6_add_addr+0xb30/0xde0 [ 286.989081][ T8274] addrconf_add_linklocal+0x280/0x6b0 [ 286.994484][ T8274] addrconf_addr_gen+0x4ee/0x620 [ 286.999437][ T8274] addrconf_init_auto_addrs+0x6d5/0xa80 [ 287.004986][ T8274] addrconf_notify+0xa6b/0xf00 [ 287.009777][ T8274] raw_notifier_call_chain+0xcb/0x160 [ 287.015157][ T8274] __dev_notify_flags+0x178/0x2d0 [ 287.020201][ T8274] dev_change_flags+0xe3/0x1a0 [ 287.024975][ T8274] dev_ifsioc+0x147/0xe70 [ 287.029323][ T8274] dev_ioctl+0x55f/0xe50 [ 287.033582][ T8274] sock_do_ioctl+0x222/0x2f0 [ 287.038186][ T8274] sock_ioctl+0x4ed/0x6e0 [ 287.042536][ T8274] __se_sys_ioctl+0xfa/0x170 [ 287.047147][ T8274] do_syscall_64+0x4c/0xa0 [ 287.051579][ T8274] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 287.057477][ T8274] [ 287.059837][ T8274] Second to last potentially related work creation: [ 287.066422][ T8274] kasan_save_stack+0x35/0x60 [ 287.071123][ T8274] kasan_record_aux_stack+0xb8/0x100 [ 287.076416][ T8274] insert_work+0x54/0x3d0 [ 287.080789][ T8274] __queue_work+0x9c5/0xd50 [ 287.085316][ T8274] queue_work_on+0x11d/0x1d0 [ 287.089926][ T8274] netdevice_event+0x803/0x900 [ 287.094710][ T8274] raw_notifier_call_chain+0xcb/0x160 [ 287.100107][ T8274] register_netdevice+0x1275/0x16b0 [ 287.105317][ T8274] tun_set_iff+0x82a/0xda0 [ 287.110443][ T8274] __tun_chr_ioctl+0x722/0x1e70 [ 287.115310][ T8274] __se_sys_ioctl+0xfa/0x170 [ 287.119920][ T8274] do_syscall_64+0x4c/0xa0 [ 287.124339][ T8274] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 287.130245][ T8274] [ 287.132574][ T8274] The buggy address belongs to the object at ffff8880298bc700 [ 287.132574][ T8274] which belongs to the cache kmalloc-192 of size 192 [ 287.146634][ T8274] The buggy address is located 8 bytes inside of [ 287.146634][ T8274] 192-byte region [ffff8880298bc700, ffff8880298bc7c0) [ 287.159757][ T8274] The buggy address belongs to the page: [ 287.165410][ T8274] page:ffffea0000a62f00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x298bc [ 287.175598][ T8274] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 287.183174][ T8274] raw: 00fff00000000200 0000000000000000 0000000100000001 ffff888016841a00 [ 287.191755][ T8274] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 287.200333][ T8274] page dumped because: kasan: bad access detected [ 287.206770][ T8274] page_owner tracks the page as allocated [ 287.212492][ T8274] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 1, ts 22975190478, free_ts 22472182914 [ 287.228286][ T8274] get_page_from_freelist+0x1b77/0x1c60 [ 287.233863][ T8274] __alloc_pages+0x1e1/0x470 [ 287.238460][ T8274] alloc_page_interleave+0x24/0x1e0 [ 287.243679][ T8274] new_slab+0xc0/0x4b0 [ 287.247797][ T8274] ___slab_alloc+0x81e/0xdf0 [ 287.252386][ T8274] kmem_cache_alloc_trace+0x1a5/0x2a0 [ 287.257764][ T8274] call_usermodehelper_setup+0x8a/0x260 [ 287.263354][ T8274] kobject_uevent_env+0x65e/0x890 [ 287.268386][ T8274] driver_register+0x3e2/0x430 [ 287.273157][ T8274] __hid_register_driver+0x126/0x170 [ 287.278460][ T8274] cmedia_init+0x1c/0x80 [ 287.282738][ T8274] do_one_initcall+0x1ee/0x680 [ 287.287503][ T8274] do_initcall_level+0x137/0x1f0 [ 287.292461][ T8274] do_initcalls+0x4b/0x90 [ 287.296794][ T8274] kernel_init_freeable+0x3ce/0x560 [ 287.302031][ T8274] kernel_init+0x19/0x1b0 [ 287.306379][ T8274] page last free stack trace: [ 287.311057][ T8274] free_unref_page_prepare+0x637/0x6c0 [ 287.316527][ T8274] free_unref_page+0x94/0x280 [ 287.321220][ T8274] __vunmap+0x8ab/0xa40 [ 287.325381][ T8274] free_work+0x56/0x80 [ 287.329464][ T8274] process_one_work+0x863/0x1000 [ 287.334407][ T8274] worker_thread+0xaa8/0x12a0 [ 287.339117][ T8274] kthread+0x436/0x520 [ 287.343223][ T8274] ret_from_fork+0x1f/0x30 [ 287.347639][ T8274] [ 287.349956][ T8274] Memory state around the buggy address: [ 287.355588][ T8274] ffff8880298bc600: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 287.363665][ T8274] ffff8880298bc680: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 287.371740][ T8274] >ffff8880298bc700: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 287.379820][ T8274] ^ [ 287.384172][ T8274] ffff8880298bc780: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 287.392262][ T8274] ffff8880298bc800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 287.400408][ T8274] ================================================================== [ 287.408463][ T8274] Disabling lock debugging due to kernel taint [ 287.427333][ T8274] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 287.434571][ T8274] CPU: 0 PID: 8274 Comm: syz.3.1271 Tainted: G B syzkaller #0 [ 287.443349][ T8274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 287.453424][ T8274] Call Trace: [ 287.456746][ T8274] [ 287.459672][ T8274] dump_stack_lvl+0x168/0x230 [ 287.464358][ T8274] ? show_regs_print_info+0x20/0x20 [ 287.469572][ T8274] ? load_image+0x3b0/0x3b0 [ 287.474078][ T8274] panic+0x2c9/0x7f0 [ 287.477977][ T8274] ? bpf_jit_dump+0xd0/0xd0 [ 287.482525][ T8274] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 287.488437][ T8274] ? _raw_spin_unlock+0x40/0x40 [ 287.493289][ T8274] ? print_memory_metadata+0x314/0x400 [ 287.498749][ T8274] ? ax25_release+0x5ca/0x870 [ 287.503429][ T8274] check_panic_on_warn+0x80/0xa0 [ 287.508367][ T8274] ? ax25_release+0x5ca/0x870 [ 287.513039][ T8274] end_report+0x6d/0xf0 [ 287.517196][ T8274] kasan_report+0x102/0x130 [ 287.521699][ T8274] ? ax25_release+0x5ca/0x870 [ 287.526371][ T8274] ax25_release+0x5ca/0x870 [ 287.530874][ T8274] sock_close+0xd5/0x240 [ 287.535123][ T8274] ? sock_mmap+0x90/0x90 [ 287.539404][ T8274] __fput+0x234/0x930 [ 287.543387][ T8274] task_work_run+0x125/0x1a0 [ 287.547974][ T8274] exit_to_user_mode_loop+0x10f/0x130 [ 287.553351][ T8274] exit_to_user_mode_prepare+0xb1/0x140 [ 287.558893][ T8274] syscall_exit_to_user_mode+0x16/0x40 [ 287.564354][ T8274] do_syscall_64+0x58/0xa0 [ 287.568786][ T8274] ? clear_bhb_loop+0x30/0x80 [ 287.573465][ T8274] ? clear_bhb_loop+0x30/0x80 [ 287.578137][ T8274] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 287.584129][ T8274] RIP: 0033:0x7ff28ef4bba9 [ 287.588564][ T8274] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 287.608207][ T8274] RSP: 002b:00007ffcd40122c8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 287.616634][ T8274] RAX: 0000000000000000 RBX: 00007ff28f194da0 RCX: 00007ff28ef4bba9 [ 287.624608][ T8274] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 287.632608][ T8274] RBP: 00007ff28f194da0 R08: 0000000000000204 R09: 0000001dd40125bf [ 287.640576][ T8274] R10: 00007ff28f194cb0 R11: 0000000000000246 R12: 0000000000045f25 [ 287.648542][ T8274] R13: 00007ff28f193090 R14: ffffffffffffffff R15: 00007ffcd40123e0 [ 287.656522][ T8274] [ 287.659887][ T8274] Kernel Offset: disabled [ 287.664225][ T8274] Rebooting in 86400 seconds..