last executing test programs: 2.584692921s ago: executing program 4 (id=314): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000ffff00ffffffff7f00000008000300", @ANYRES32=r2], 0x30}}, 0x0) 2.448582543s ago: executing program 4 (id=316): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x62) listen(r1, 0x3) accept$nfc_llcp(r1, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000007"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_stats_latency\x00', r2, 0x0, 0xf}, 0x18) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 1.594214386s ago: executing program 4 (id=339): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000000080)) syz_emit_ethernet(0x46, &(0x7f0000000140)={@random="99177fa54f29", @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x10, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}}}}}}}}, 0x0) 1.565425836s ago: executing program 3 (id=340): openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x140, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x20004003}, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25"}) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x80003, 0xff) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8) r2 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x7}], 0x1c) sendmmsg$inet6(r1, &(0x7f0000000640)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x2, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000300)="06", 0x1}], 0x1}}], 0x1, 0x1404c891) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES16=r1, @ANYRES16=r2], 0x1000f) 1.488667367s ago: executing program 2 (id=341): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x2, 0x0, @mcast2, 0x5}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) 1.482132818s ago: executing program 4 (id=343): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) 1.419789448s ago: executing program 3 (id=344): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa006}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b03feff4f00021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 1.247648971s ago: executing program 2 (id=347): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x2c}}, 0x0) 1.117152083s ago: executing program 3 (id=348): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1], 0x44}}, 0x0) 1.076562534s ago: executing program 0 (id=349): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@getnexthop={0x30, 0x76, 0xb0d, 0x4000, 0x0, {0x3}, [@NHA_MASTER={0x8, 0xa, 0x2}, @NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1.032317864s ago: executing program 2 (id=350): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x9, @empty, 0xc7ec}, 0x1c) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB="581b0800", @ANYRES16, @ANYBLOB="04002dbd7000f2dbdf254f0000000c00839ced540000680000004c007a8008000400000000181c000200134ecc4d908540c3c8630b918a29360800040004005111335ced5fd94e0800040009000000080004000300000048007a801400010003d869f47d8c428eaa74b31794b4b314b5000400000000000c0003004180081ee4f88f1a080004000c0000000c0003007858754e3c504054080004000800000004007a8020007a800800040005000000140002002929590c"], 0xd8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 995.336405ms ago: executing program 3 (id=352): accept4$netrom(0xffffffffffffffff, &(0x7f0000000100)={{0x3, @null}, [@default, @remote, @default, @rose, @default, @netrom, @bcast, @netrom]}, 0x0, 0x80000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000300)={@link_local, @multicast, @val={@val={0x88a8, 0x7, 0x0, 0x2}, {0x8100, 0x7, 0x0, 0x1}}, {@ipv4={0x800, @gre={{0x6, 0x4, 0x0, 0x8, 0x5c, 0x67, 0x0, 0x5, 0x2f, 0x0, @local, @empty, {[@lsrr={0x83, 0x3, 0xd2}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x0, {{0x5, 0x1, 0x7, 0x3, 0x0, 0x0, 0x6, 0xb}, 0x1, {0x38}}}, {0x8, 0x22eb, 0x4, {{0x3, 0x2, 0x6, 0x1, 0x0, 0x1, 0x3, 0x6}, 0x2, {0x7, 0x4, 0x0, 0x5, 0x1, 0x1, 0x2}}}}}}}}, 0x0) 880.251217ms ago: executing program 0 (id=353): r0 = socket$inet6(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000080)={@private0, r1}, 0x14) recvfrom(r0, 0x0, 0x46, 0x10000, &(0x7f0000000200)=@xdp={0x2c, 0x1, r1, 0x27}, 0x80) sendto$inet6(r0, &(0x7f00000000c0)="800034ca269bb73c", 0x8, 0x2004c080, &(0x7f0000000040)={0xa, 0xfffd, 0xc9, @mcast2}, 0x1c) 860.808187ms ago: executing program 1 (id=354): openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x140, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x20004003}, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25"}) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x80003, 0xff) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8) r2 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x7}], 0x1c) sendmmsg$inet6(r1, &(0x7f0000000640)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x2, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000300)="06", 0x1}], 0x1}}], 0x1, 0x1404c891) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES16=r1, @ANYRES16=r2], 0x1000f) 773.160688ms ago: executing program 3 (id=355): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xfff3}}}, 0x24}}, 0x0) 742.217479ms ago: executing program 1 (id=356): r0 = socket(0x2a, 0x2, 0xfffffffe) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x40800) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000014c0)=@newtfilter={0x84, 0x2c, 0xd29, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xa, 0xfff3}, {}, {0xc}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x7}}, @filter_kind_options=@f_basic={{0xa}, {0x32, 0x2, [@TCA_BASIC_POLICE={0x48, 0x4, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x2, 0x5, 0x800, 0x0, {0x7, 0x1, 0x2, 0x7, 0x5}, {0x1, 0x2, 0xfffe, 0x3, 0x607, 0xd2}, 0x0, 0x6, 0x7}}]}]}}]}, 0x84}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 688.31638ms ago: executing program 0 (id=357): socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x800000003, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x1, r2}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 661.0499ms ago: executing program 1 (id=358): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000000)=0x714, 0x4) syz_emit_ethernet(0x52, &(0x7f0000000140)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@timestamp_addr={0x44, 0x1c, 0xe, 0x1, 0x0, [{@local, 0xb5}, {@private=0xa010100, 0x6}, {@rand_addr=0x64010102, 0x8}]}]}}, @timestamp}}}}, 0x0) readv(r0, &(0x7f00000007c0)=[{&(0x7f0000000080)=""/92, 0x5c}], 0x1) 603.320381ms ago: executing program 0 (id=359): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0xd4) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000001400)={0x20, 0xa, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x44840}, 0x4000) 522.802662ms ago: executing program 4 (id=360): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000080)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x8, 0x9, 0x7, 0x1000}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x17, 0x5d, 0x67, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1a}}, {0x4e20, 0x4e22, 0x49, 0x0, @opaque="d186f8a21a63f7b030b6e041aa5084811b7504c68df0924b1f9d6c13866f46eadd436d1f54079998fecfa5bf9a98d87fd66bb61adce614ae5b1cfc4cf51efbd78d"}}}, 0x6b) 522.218762ms ago: executing program 1 (id=361): r0 = socket$inet6(0xa, 0x2, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_STATION(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010128bd7000fbdbdf251400000008000300", @ANYRES32=r1, @ANYBLOB="050029"], 0x2c}, 0x1, 0x0, 0x0, 0x20044000}, 0x8000) 455.072593ms ago: executing program 2 (id=362): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}]}}}]}, 0x38}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000090}, 0x400c004) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendto$packet(r0, &(0x7f0000000000)='1', 0x1, 0x40081, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x4, 0x6, @local}, 0x14) 454.403423ms ago: executing program 0 (id=363): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x34, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x404cc45}, 0x4040140) 272.506566ms ago: executing program 0 (id=364): socket$nl_route(0x10, 0x3, 0x0) fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xf, 0x2030, 0xffffffffffffffff, 0x8000000000000000) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) close(0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r4, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r5], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newtfilter={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r4, {0xfff2}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0) 245.889516ms ago: executing program 4 (id=365): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_vlan\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r3], 0x68}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x2c, 0x11, 0x839, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x6}, {0xd}, {0x11, 0xfff1}}, [{0x8, 0xb, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x84}, 0x0) 245.094666ms ago: executing program 1 (id=366): accept4$netrom(0xffffffffffffffff, &(0x7f0000000100)={{0x3, @null}, [@default, @remote, @default, @rose, @default, @netrom, @bcast, @netrom]}, 0x0, 0x80000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000300)={@link_local, @multicast, @val={@val={0x88a8, 0x7, 0x0, 0x2}, {0x8100, 0x7, 0x0, 0x1}}, {@ipv4={0x800, @gre={{0x6, 0x4, 0x0, 0x8, 0x5c, 0x67, 0x0, 0x5, 0x2f, 0x0, @local, @empty, {[@lsrr={0x83, 0x3, 0xd2}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x0, {{0x5, 0x1, 0x7, 0x3, 0x0, 0x0, 0x6, 0xb}, 0x1, {0x38}}}, {0x8, 0x22eb, 0x4, {{0x3, 0x2, 0x6, 0x1, 0x0, 0x1, 0x3, 0x6}, 0x2, {0x7, 0x4, 0x0, 0x5, 0x1, 0x1, 0x2}}}}}}}}, 0x0) 180.407297ms ago: executing program 3 (id=367): setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000800)={'filter\x00', 0xb001, 0x4, 0x3a8, 0x0, 0x1d0, 0x0, 0x2c0, 0x2c0, 0x2c0, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d0}}, {{@uncond, 0xc0, 0xe8, 0x0, {0x0, 0x1e03}}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x46e, 0xfffc}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f8) r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="000086dd000411001400000000006eec00be00442f0100000000000000000000ffff7f000001ff020000000000000000000000000001"], 0x7a) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x10000) 112.648818ms ago: executing program 2 (id=368): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0xfff4, @broadcast}}, 0x1e) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f00000000c0)={0x18, 0x2, {0x10, @rand_addr=0x64010102}}, 0x1e) connect$pptp(r1, &(0x7f0000000440)={0x18, 0x2, {0x3, @empty}}, 0x1e) 105.667658ms ago: executing program 1 (id=369): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xe5a01e6e238456fc) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000080)=@netrom={'nr', 0x0}, 0x10) 0s ago: executing program 2 (id=370): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000040)='FROZEN\x00', 0x7) mkdirat$cgroup(r1, &(0x7f00000000c0)='syz1\x00', 0x1ff) mkdirat$cgroup(r1, &(0x7f0000000100)='syz0\x00', 0x1ff) sendfile(r2, r2, 0x0, 0x9) kernel console output (not intermixed with test programs): [ 19.597986][ T3705] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: [ 19.646155][ T9] gvnic 0000:00:00.0 enp0s0: Device link is up. [ 19.650447][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): enp0s0: link becomes ready OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.93' (ED25519) to the list of known hosts. syzkaller login: [ 41.654759][ T4023] cgroup: Unknown subsys name 'net' [ 41.888992][ T4023] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 42.311849][ T4023] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 44.258301][ T4043] chnl_net:caif_netlink_parms(): no params data found [ 44.313704][ T4034] chnl_net:caif_netlink_parms(): no params data found [ 44.335804][ T4033] chnl_net:caif_netlink_parms(): no params data found [ 44.350235][ T4040] chnl_net:caif_netlink_parms(): no params data found [ 44.381190][ T4043] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.383444][ T4043] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.386164][ T4043] device bridge_slave_0 entered promiscuous mode [ 44.403003][ T4046] chnl_net:caif_netlink_parms(): no params data found [ 44.415813][ T4043] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.417898][ T4043] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.420499][ T4043] device bridge_slave_1 entered promiscuous mode [ 44.470277][ T4033] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.478760][ T4033] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.481557][ T4033] device bridge_slave_0 entered promiscuous mode [ 44.486808][ T4043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.503603][ T4033] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.505833][ T4033] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.508536][ T4033] device bridge_slave_1 entered promiscuous mode [ 44.512784][ T4043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.562392][ T4034] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.564399][ T4034] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.567087][ T4034] device bridge_slave_0 entered promiscuous mode [ 44.593290][ T4040] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.595345][ T4040] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.598001][ T4040] device bridge_slave_0 entered promiscuous mode [ 44.600891][ T4034] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.603081][ T4034] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.605764][ T4034] device bridge_slave_1 entered promiscuous mode [ 44.608691][ T4046] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.610637][ T4046] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.613703][ T4046] device bridge_slave_0 entered promiscuous mode [ 44.619786][ T4033] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.630942][ T4043] team0: Port device team_slave_0 added [ 44.634760][ T4033] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.637327][ T4040] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.639435][ T4040] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.642357][ T4040] device bridge_slave_1 entered promiscuous mode [ 44.650626][ T4046] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.653122][ T4046] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.655778][ T4046] device bridge_slave_1 entered promiscuous mode [ 44.671432][ T4043] team0: Port device team_slave_1 added [ 44.706654][ T4033] team0: Port device team_slave_0 added [ 44.722262][ T4034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.726249][ T4033] team0: Port device team_slave_1 added [ 44.730009][ T4046] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.740412][ T4040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.744570][ T4034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.748689][ T4040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.758232][ T4046] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.767228][ T4043] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.769147][ T4043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.776595][ T4043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.803794][ T4033] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.805671][ T4033] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.813524][ T4033] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.817265][ T4043] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.819112][ T4043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.826771][ T4043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.850870][ T4046] team0: Port device team_slave_0 added [ 44.854747][ T4046] team0: Port device team_slave_1 added [ 44.862680][ T4033] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.864673][ T4033] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.871687][ T4033] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.882528][ T4034] team0: Port device team_slave_0 added [ 44.886341][ T4040] team0: Port device team_slave_0 added [ 44.895385][ T4046] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.897317][ T4046] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.904432][ T4046] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.910031][ T4034] team0: Port device team_slave_1 added [ 44.921210][ T4040] team0: Port device team_slave_1 added [ 44.929634][ T4046] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.931577][ T4046] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.939067][ T4046] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.992075][ T4040] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.996927][ T4040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.004476][ T4040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.054914][ T4043] device hsr_slave_0 entered promiscuous mode [ 45.092646][ T4043] device hsr_slave_1 entered promiscuous mode [ 45.153090][ T4034] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.155104][ T4034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.162002][ T4034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.204652][ T4033] device hsr_slave_0 entered promiscuous mode [ 45.242618][ T4033] device hsr_slave_1 entered promiscuous mode [ 45.282430][ T4033] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.284763][ T4033] Cannot create hsr debugfs directory [ 45.286710][ T4040] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.288650][ T4040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.295943][ T4040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.319908][ T4034] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.321810][ T4034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.329074][ T4034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.404389][ T4046] device hsr_slave_0 entered promiscuous mode [ 45.442655][ T4046] device hsr_slave_1 entered promiscuous mode [ 45.482423][ T4046] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.484574][ T4046] Cannot create hsr debugfs directory [ 45.634542][ T4034] device hsr_slave_0 entered promiscuous mode [ 45.682875][ T4034] device hsr_slave_1 entered promiscuous mode [ 45.722413][ T4034] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.724879][ T4034] Cannot create hsr debugfs directory [ 45.754494][ T4040] device hsr_slave_0 entered promiscuous mode [ 45.792674][ T4040] device hsr_slave_1 entered promiscuous mode [ 45.832512][ T4040] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.834654][ T4040] Cannot create hsr debugfs directory [ 45.942903][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 45.945109][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 46.022347][ T25] Bluetooth: hci4: command 0x0409 tx timeout [ 46.024459][ T25] Bluetooth: hci3: command 0x0409 tx timeout [ 46.032524][ T1959] Bluetooth: hci0: command 0x0409 tx timeout [ 46.079729][ T4046] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 46.126759][ T4046] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 46.165758][ T4046] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 46.216427][ T4046] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 46.287058][ T4043] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 46.339791][ T4043] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 46.389298][ T4043] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 46.434439][ T4043] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 46.512478][ T4033] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 46.539494][ T4033] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 46.584978][ T4033] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 46.624751][ T4033] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 46.735232][ T4034] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 46.793534][ T4034] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 46.855611][ T4034] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 46.895775][ T4034] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 46.935593][ T4046] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.970055][ T4040] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 47.010348][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.014347][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.018911][ T4046] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.024357][ T4040] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 47.081667][ T4040] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 47.128501][ T4043] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.137755][ T4040] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 47.215629][ T4033] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.217788][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.220630][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.224171][ T369] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.226337][ T369] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.237206][ T4043] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.247465][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.250138][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.252851][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.255384][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.258160][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.260661][ T369] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.262675][ T369] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.265949][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.268729][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.271315][ T369] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.273333][ T369] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.278815][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 47.297948][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.300545][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 47.319367][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 47.325314][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.328100][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.330794][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.334955][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.336872][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.339273][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.341761][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.353664][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.356355][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 47.359233][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.362956][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.369813][ T4033] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.380776][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 47.389396][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.395838][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.419274][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.423369][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.425940][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.427871][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.430290][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 47.434440][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.437275][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.440075][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.452355][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.454909][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.457958][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.460806][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.464656][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.466536][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.468879][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 47.471756][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 47.479754][ T4034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.485328][ T4046] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.494857][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.497798][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.504010][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 47.507178][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.525988][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.528681][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.531207][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.539375][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.542066][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.563939][ T4034] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.568467][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.573787][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.577345][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.580029][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.589499][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.598435][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.611935][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.615136][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.620357][ T4033] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.627554][ T4043] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.650724][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.654206][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.656764][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.658738][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.661103][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.682049][ T4040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.685424][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.688171][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.690816][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.692803][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.702075][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 47.711977][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 47.719521][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 47.752914][ T4046] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.755725][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 47.760062][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 47.765132][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.782529][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.785721][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.788178][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.799935][ T4040] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.810140][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.814504][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.830398][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.834114][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.836756][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 47.839691][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.842492][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.845202][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.859624][ T4034] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.866159][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.868962][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.871634][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.873615][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.877134][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 47.879281][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 47.881413][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.886985][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.889605][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.891531][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.903181][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.906102][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 47.909036][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 47.929683][ T4033] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.932044][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 47.941588][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.946953][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.966822][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 47.969596][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.978358][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.981467][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.995045][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.997943][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.000815][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.004405][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.008761][ T4046] device veth0_vlan entered promiscuous mode [ 48.017832][ T4046] device veth1_vlan entered promiscuous mode [ 48.022630][ T4077] Bluetooth: hci1: command 0x041b tx timeout [ 48.024510][ T4077] Bluetooth: hci2: command 0x041b tx timeout [ 48.034378][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 48.037135][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 48.039320][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 48.046228][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.049250][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.061371][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 48.065885][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 48.068252][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 48.074163][ T4040] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.095803][ T4034] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.103686][ T4077] Bluetooth: hci0: command 0x041b tx timeout [ 48.105489][ T4077] Bluetooth: hci3: command 0x041b tx timeout [ 48.107204][ T4077] Bluetooth: hci4: command 0x041b tx timeout [ 48.111145][ T4043] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.116473][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 48.119298][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.122039][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.126557][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.155354][ T4046] device veth0_macvtap entered promiscuous mode [ 48.159689][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 48.163020][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 48.165792][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.176307][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.178765][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.193567][ T4046] device veth1_macvtap entered promiscuous mode [ 48.198322][ T4033] device veth0_vlan entered promiscuous mode [ 48.208576][ T4033] device veth1_vlan entered promiscuous mode [ 48.218078][ T1636] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 48.220835][ T1636] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 48.224558][ T1636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 48.227491][ T1636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.238148][ T1636] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 48.240685][ T1636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 48.244087][ T1636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.273344][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 48.276036][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.278852][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.281978][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.289956][ T4034] device veth0_vlan entered promiscuous mode [ 48.301555][ T4046] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.310126][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 48.314163][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 48.316478][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.319785][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.323584][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 48.326354][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.339839][ T4034] device veth1_vlan entered promiscuous mode [ 48.346106][ T4040] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.350368][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 48.354437][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.356881][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.361763][ T4046] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.370083][ T4033] device veth0_macvtap entered promiscuous mode [ 48.377310][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 48.379914][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.383829][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.387437][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.390492][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.400132][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 48.410357][ T4043] device veth0_vlan entered promiscuous mode [ 48.417358][ T4033] device veth1_macvtap entered promiscuous mode [ 48.424703][ T4046] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.427323][ T4046] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.429696][ T4046] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.432027][ T4046] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.459671][ T1636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.463239][ T1636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.469108][ T4034] device veth0_macvtap entered promiscuous mode [ 48.481953][ T4033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.488261][ T4033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.492049][ T4033] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.497080][ T4043] device veth1_vlan entered promiscuous mode [ 48.501023][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 48.504962][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.507742][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.519898][ T4034] device veth1_macvtap entered promiscuous mode [ 48.549361][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.553740][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.556503][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.559399][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.564488][ T4034] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.567535][ T4033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.570343][ T4033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.581459][ T4033] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.585517][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 48.588201][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.591004][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.594702][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.597541][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.630768][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.636326][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.639060][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.641780][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.647757][ T4034] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.658960][ T4033] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.661443][ T4033] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.667805][ T4033] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.670324][ T4033] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.679497][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.682665][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.700122][ T4034] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.704403][ T4034] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.706885][ T4034] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.709220][ T4034] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.727834][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.733922][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.737449][ T4043] device veth0_macvtap entered promiscuous mode [ 48.769846][ T4043] device veth1_macvtap entered promiscuous mode [ 48.786308][ T1636] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 48.789006][ T1636] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 48.791625][ T1636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 48.798078][ T1636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.811451][ T1636] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.814204][ T1636] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.838058][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 48.864864][ T4043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.868281][ T4043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.871089][ T4043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.875919][ T4043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.878609][ T4043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.881411][ T4043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.886181][ T4043] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.888307][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.891194][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.918786][ T4043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.921889][ T4043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.925664][ T4043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.928459][ T4043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.931127][ T4043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.934549][ T4043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.938517][ T4043] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.947207][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.949505][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.953330][ T4043] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.955758][ T4043] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.958145][ T4043] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.960490][ T4043] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.976375][ T1636] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.979346][ T1636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.984530][ T1636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 48.987277][ T1636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.990288][ T1636] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 48.993924][ T1636] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.996551][ T1636] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.001669][ T4040] device veth0_vlan entered promiscuous mode [ 49.014470][ T293] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.016753][ T293] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.044983][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 49.051475][ T4040] device veth1_vlan entered promiscuous mode [ 49.124235][ T293] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.126536][ T293] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.152997][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 49.155626][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 49.158361][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 49.237382][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 49.244572][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.272834][ T1636] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.275061][ T1636] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.281766][ T1636] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 49.291643][ T293] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.295309][ T293] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.300239][ T4040] device veth0_macvtap entered promiscuous mode [ 49.314065][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 49.316417][ T1636] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.318611][ T1636] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.321947][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 49.327056][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 49.350842][ T4040] device veth1_macvtap entered promiscuous mode [ 49.434769][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 49.502075][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.514678][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.519410][ T4040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.542880][ T4040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.556777][ T4040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.559598][ T4040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.562476][ T4040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.565392][ T4040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.565683][ T4152] usb usb8: usbfs: process 4152 (syz.1.2) did not claim interface 0 before use [ 49.568075][ T4040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.568113][ T4040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.578862][ T4040] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.588959][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 49.591653][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.599431][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.632617][ T4040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.644983][ T4040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.647769][ T4040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.650630][ T4040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.653813][ T4040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.656703][ T4040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.659275][ T4040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.662116][ T4040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.692092][ T4040] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.719882][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.724510][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.745234][ T4040] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.747607][ T4040] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.749995][ T4040] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.809312][ T4040] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.997523][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.999883][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.042393][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 50.103215][ T3615] Bluetooth: hci2: command 0x040f tx timeout [ 50.105140][ T3615] Bluetooth: hci1: command 0x040f tx timeout [ 50.141595][ T293] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.144124][ T293] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.147091][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 50.183416][ T4147] Bluetooth: hci4: command 0x040f tx timeout [ 50.185332][ T4147] Bluetooth: hci3: command 0x040f tx timeout [ 50.187135][ T4147] Bluetooth: hci0: command 0x040f tx timeout [ 50.700238][ T4173] netlink: 'syz.0.10': attribute type 10 has an invalid length. [ 50.747606][ T4174] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'. [ 50.819561][ T4173] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 50.965009][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 51.198981][ T4192] netlink: 104 bytes leftover after parsing attributes in process `syz.0.14'. [ 51.381117][ T4198] udc-core: couldn't find an available UDC or it's busy [ 51.389687][ T4198] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 51.741102][ T4206] udc-core: couldn't find an available UDC or it's busy [ 51.743250][ T4206] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 52.187140][ T21] Bluetooth: hci1: command 0x0419 tx timeout [ 52.190664][ T21] Bluetooth: hci2: command 0x0419 tx timeout [ 52.219050][ T4224] loop6: detected capacity change from 0 to 1 [ 52.241608][ T4224] Dev loop6: unable to read RDB block 1 [ 52.249527][ T4224] loop6: unable to read partition table [ 52.251302][ T4224] loop6: partition table beyond EOD, truncated [ 52.270202][ T21] Bluetooth: hci0: command 0x0419 tx timeout [ 52.272277][ T21] Bluetooth: hci3: command 0x0419 tx timeout [ 52.272446][ T4224] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 52.274158][ T21] Bluetooth: hci4: command 0x0419 tx timeout [ 52.378238][ T4226] Zero length message leads to an empty skb [ 52.397148][ T4226] x_tables: ip_tables: policy.0 match: invalid size 312 (kernel) != (user) 8 [ 52.541614][ T4230] loop2: detected capacity change from 0 to 7 [ 52.560734][ T4230] Dev loop2: unable to read RDB block 7 [ 52.570543][ T4230] loop2: AHDI p1 p2 [ 52.575164][ T4230] loop2: partition table partially beyond EOD, truncated [ 52.973167][ T4247] netlink: 8 bytes leftover after parsing attributes in process `syz.1.37'. [ 53.003028][ T4247] device bond_slave_0 entered promiscuous mode [ 53.010466][ T4249] udc-core: couldn't find an available UDC or it's busy [ 53.034519][ T4249] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 53.166686][ T4256] capability: warning: `syz.2.40' uses 32-bit capabilities (legacy support in use) [ 53.221194][ T4258] netlink: 80 bytes leftover after parsing attributes in process `syz.1.41'. [ 53.481406][ T4269] netlink: 60 bytes leftover after parsing attributes in process `syz.2.46'. [ 53.661853][ T26] audit: type=1326 audit(53.630:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4275 comm="syz.2.49" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa987aba8 code=0x7ffc0000 [ 53.671907][ T26] audit: type=1326 audit(53.640:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4275 comm="syz.2.49" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa987aba8 code=0x7ffc0000 [ 53.696884][ T26] audit: type=1326 audit(53.650:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4275 comm="syz.2.49" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=107 compat=0 ip=0xffffa987aba8 code=0x7ffc0000 [ 53.740099][ T26] audit: type=1326 audit(53.650:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4275 comm="syz.2.49" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa987aba8 code=0x7ffc0000 [ 53.749877][ T26] audit: type=1326 audit(53.650:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4275 comm="syz.2.49" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa987aba8 code=0x7ffc0000 [ 53.762677][ T4279] netlink: 8 bytes leftover after parsing attributes in process `syz.4.50'. [ 53.767788][ T26] audit: type=1326 audit(53.660:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4275 comm="syz.2.49" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=110 compat=0 ip=0xffffa987aba8 code=0x7ffc0000 [ 53.805123][ T26] audit: type=1326 audit(53.670:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4275 comm="syz.2.49" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffa998e7fc code=0x7ffc0000 [ 53.825214][ T26] audit: type=1326 audit(53.670:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4275 comm="syz.2.49" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffa998e7fc code=0x7ffc0000 [ 53.831082][ T26] audit: type=1326 audit(53.670:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4275 comm="syz.2.49" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffa998e7fc code=0x7ffc0000 [ 53.866936][ T26] audit: type=1326 audit(53.670:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4275 comm="syz.2.49" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffa998e7fc code=0x7ffc0000 [ 54.498300][ T4305] nvme_fabrics: unknown parameter or missing value '-net_prio ' in ctrl creation request [ 54.862362][ T4085] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 54.891915][ T4313] netlink: 'syz.3.58': attribute type 13 has an invalid length. [ 55.042082][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 55.107503][ T4313] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 55.262516][ T4085] usb 1-1: config 0 has no interfaces? [ 55.373425][ T4302] udc-core: couldn't find an available UDC or it's busy [ 55.383560][ T4302] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 55.462653][ T4085] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 55.465242][ T4085] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 55.467793][ T4085] usb 1-1: Product: syz [ 55.468874][ T4085] usb 1-1: Manufacturer: syz [ 55.470144][ T4085] usb 1-1: SerialNumber: syz [ 55.492037][ T4085] usb 1-1: config 0 descriptor?? [ 55.702511][ T4316] netlink: 16 bytes leftover after parsing attributes in process `syz.4.55'. [ 55.760342][ T4092] usb 1-1: USB disconnect, device number 2 [ 56.792056][ T4339] IPVS: length: 4096 != 24 [ 56.823078][ T4092] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 57.062419][ T4092] usb 1-1: Using ep0 maxpacket: 8 [ 57.192556][ T4092] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 57.195538][ T4092] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x94, skipping [ 57.198620][ T4092] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 57.382492][ T4092] usb 1-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 57.385191][ T4092] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.387421][ T4092] usb 1-1: Product: syz [ 57.388516][ T4092] usb 1-1: Manufacturer: syz [ 57.389764][ T4092] usb 1-1: SerialNumber: syz [ 57.402133][ T4092] usb 1-1: config 0 descriptor?? [ 57.450574][ T4092] imon_raw 1-1:0.0: IR endpoint missing [ 57.775746][ T4092] usb 1-1: USB disconnect, device number 3 [ 58.434997][ T4398] syz.0.86 sent an empty control message without MSG_MORE. [ 58.775404][ T4415] syz.1.91 uses obsolete (PF_INET,SOCK_PACKET) [ 59.101859][ T4430] netlink: 8 bytes leftover after parsing attributes in process `syz.0.99'. [ 59.483241][ T3615] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 59.722895][ T3615] usb 1-1: Using ep0 maxpacket: 32 [ 59.858727][ T3615] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 59.861072][ T3615] usb 1-1: config 0 has no interface number 0 [ 59.863115][ T3615] usb 1-1: config 0 interface 12 has no altsetting 0 [ 60.024573][ T3615] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 60.027150][ T3615] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.042486][ T3615] usb 1-1: Product: syz [ 60.043709][ T3615] usb 1-1: Manufacturer: syz [ 60.044935][ T3615] usb 1-1: SerialNumber: syz [ 60.073923][ T3615] usb 1-1: config 0 descriptor?? [ 60.522811][ T4523] udc-core: couldn't find an available UDC or it's busy [ 60.525082][ T4523] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 60.646972][ T4523] udc-core: couldn't find an available UDC or it's busy [ 60.649251][ T4523] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 60.660173][ T4523] netlink: 4 bytes leftover after parsing attributes in process `syz.4.131'. [ 61.549681][ T4563] tipc: Started in network mode [ 61.551160][ T4563] tipc: Node identity , cluster identity 4711 [ 61.563362][ T4563] tipc: Failed to obtain node identity [ 61.565429][ T4563] tipc: Enabling of bearer rejected, failed to enable media [ 61.664309][ T4572] udc-core: couldn't find an available UDC or it's busy [ 61.666337][ T4572] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 61.792840][ T4579] binder: 4578:4579 got transaction to context manager from process owning it [ 61.795654][ T4579] binder: 4578:4579 transaction failed 29201/-22, size 0-0 line 2908 [ 61.798578][ T4579] binder: 4578:4579 BC_FREE_BUFFER u0000000020ffe000 no match [ 61.810883][ T21] binder: undelivered TRANSACTION_ERROR: 29201 [ 61.868834][ T4584] udc-core: couldn't find an available UDC or it's busy [ 61.870940][ T4584] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 62.628603][ T4634] device pim6reg1 entered promiscuous mode [ 63.038977][ T4665] netlink: 8 bytes leftover after parsing attributes in process `syz.2.191'. [ 63.077174][ T4669] udc-core: couldn't find an available UDC or it's busy [ 63.079178][ T4669] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 63.412585][ T3615] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 63.414739][ T3615] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 63.416843][ T3615] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 63.418956][ T3615] f81534: probe of 1-1:0.12 failed with error -71 [ 63.443532][ T3615] usb 1-1: USB disconnect, device number 4 [ 63.650204][ T4705] binder: 4704:4705 got transaction to context manager from process owning it [ 63.660945][ T4705] binder: 4704:4705 transaction failed 29201/-22, size 0-24 line 2908 [ 63.703099][ T25] binder: undelivered TRANSACTION_ERROR: 29201 [ 63.725580][ T4710] netlink: 28 bytes leftover after parsing attributes in process `syz.1.209'. [ 63.775473][ T4713] binder: 4712:4713 got transaction to context manager from process owning it [ 63.787839][ T4713] binder: 4712:4713 transaction failed 29201/-22, size 0-24 line 2908 [ 63.796438][ T4085] binder: undelivered TRANSACTION_ERROR: 29201 [ 64.030863][ T4734] binder: 4733:4734 got transaction to context manager from process owning it [ 64.042035][ T4734] binder: 4733:4734 transaction failed 29201/-22, size 0-0 line 2908 [ 64.048588][ T4734] binder: undelivered TRANSACTION_ERROR: 29201 [ 64.231675][ T4745] netlink: 4 bytes leftover after parsing attributes in process `syz.3.222'. [ 64.239933][ T4745] netlink: 8 bytes leftover after parsing attributes in process `syz.3.222'. [ 64.259173][ T4747] udc-core: couldn't find an available UDC or it's busy [ 64.268388][ T4747] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 64.380787][ T4755] netlink: 188 bytes leftover after parsing attributes in process `syz.3.228'. [ 64.456286][ T4759] binder: 4759 RLIMIT_NICE not set [ 64.485315][ T4761] netlink: 'syz.3.230': attribute type 5 has an invalid length. [ 64.490891][ T4761] netlink: 'syz.3.230': attribute type 5 has an invalid length. [ 64.497556][ T4761] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.230'. [ 64.507841][ T4762] binder: 4758:4762 got transaction to context manager from process owning it [ 64.510432][ T4762] binder: 4758:4762 transaction failed 29201/-22, size 0-0 line 2908 [ 65.272337][ T3615] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 65.672520][ T3615] usb 1-1: unable to get BOS descriptor or descriptor too short [ 65.712651][ T3615] usb 1-1: not running at top speed; connect to a high speed hub [ 65.792529][ T3615] usb 1-1: config 3 has an invalid interface number: 166 but max is 0 [ 65.794899][ T3615] usb 1-1: config 3 has no interface number 0 [ 65.796494][ T3615] usb 1-1: config 3 interface 166 altsetting 129 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 65.811880][ T3615] usb 1-1: config 3 interface 166 altsetting 129 has a duplicate endpoint with address 0xB, skipping [ 65.817568][ T3615] usb 1-1: config 3 interface 166 has no altsetting 0 [ 65.982565][ T3615] usb 1-1: New USB device found, idVendor=045b, idProduct=024d, bcdDevice=18.6f [ 65.985357][ T3615] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.987798][ T3615] usb 1-1: Product: syz [ 65.990263][ T3615] usb 1-1: Manufacturer: syz [ 65.995392][ T3615] usb 1-1: SerialNumber: syz [ 66.022632][ T4795] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 66.024824][ T4795] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 66.323083][ T3615] cdc_acm 1-1:3.166: Zero length descriptor references [ 66.325062][ T3615] cdc_acm: probe of 1-1:3.166 failed with error -22 [ 66.337394][ T3615] usb 1-1: USB disconnect, device number 5 [ 66.442605][ T4909] netlink: 4 bytes leftover after parsing attributes in process `syz.3.286'. [ 66.779457][ T4922] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 66.891382][ T4934] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.296'. [ 66.894922][ T4932] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.296'. [ 67.264969][ T4966] netlink: 4 bytes leftover after parsing attributes in process `syz.1.308'. [ 67.454243][ T4982] netlink: 20 bytes leftover after parsing attributes in process `syz.4.314'. [ 67.573427][ T4989] ksmbd: Unknown IPC event: 6, ignore. [ 67.779888][ T5007] netlink: 8 bytes leftover after parsing attributes in process `syz.0.322'. [ 67.914977][ T5015] netlink: 'syz.3.325': attribute type 39 has an invalid length. [ 68.237573][ T5036] netlink: 'syz.0.333': attribute type 10 has an invalid length. [ 69.269390][ T5101] __nla_validate_parse: 1 callbacks suppressed [ 69.269404][ T5101] netlink: 24 bytes leftover after parsing attributes in process `syz.1.356'. [ 69.362669][ T5108] netlink: 4 bytes leftover after parsing attributes in process `syz.3.355'. [ 69.491175][ T5111] device syzkaller1 entered promiscuous mode [ 69.566650][ T5116] netlink: 8 bytes leftover after parsing attributes in process `syz.1.361'. [ 69.635557][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.637637][ T2055] ieee802154 phy1 wpan1: encryption failed: -22 [ 69.793615][ T5122] netlink: 12 bytes leftover after parsing attributes in process `syz.4.365'. [ 70.170932][ T5126] netlink: 4 bytes leftover after parsing attributes in process `syz.0.364'. [ 70.177340][ T5131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.364'. [ 70.188072][ T5133] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 70.220945][ T5133] ================================================================== [ 70.223389][ T5133] BUG: KASAN: use-after-free in ax25_release+0x4c8/0x814 [ 70.225312][ T5133] Read of size 8 at addr ffff0000cdcc6608 by task syz.1.369/5133 [ 70.227545][ T5133] [ 70.228198][ T5133] CPU: 0 PID: 5133 Comm: syz.1.369 Not tainted 5.15.186-syzkaller #0 [ 70.230461][ T5133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 70.233272][ T5133] Call trace: [ 70.234193][ T5133] dump_backtrace+0x0/0x43c [ 70.235519][ T5133] show_stack+0x2c/0x3c [ 70.236630][ T5133] __dump_stack+0x30/0x40 [ 70.237838][ T5133] dump_stack_lvl+0xf8/0x160 [ 70.239116][ T5133] print_address_description+0x78/0x30c [ 70.240686][ T5133] kasan_report+0xec/0x15c [ 70.241907][ T5133] __asan_report_load8_noabort+0x44/0x50 [ 70.243475][ T5133] ax25_release+0x4c8/0x814 [ 70.244676][ T5133] sock_close+0xb4/0x1f8 [ 70.245863][ T5133] __fput+0x1c0/0x7f8 [ 70.246999][ T5133] ____fput+0x20/0x30 [ 70.248136][ T5133] task_work_run+0x12c/0x1e0 [ 70.249451][ T5133] do_exit+0x684/0x1f58 [ 70.250583][ T5133] do_group_exit+0x100/0x268 [ 70.251869][ T5133] get_signal+0x73c/0x1340 [ 70.253117][ T5133] do_notify_resume+0x35c/0x3128 [ 70.254460][ T5133] el0_svc+0xf0/0x1e0 [ 70.255610][ T5133] el0t_64_sync_handler+0xcc/0xe4 [ 70.257033][ T5133] el0t_64_sync+0x1a0/0x1a4 [ 70.258292][ T5133] [ 70.258937][ T5133] Allocated by task 5133: [ 70.260159][ T5133] __kasan_kmalloc+0xb0/0xf0 [ 70.261435][ T5133] kmem_cache_alloc_trace+0x274/0x3fc [ 70.262945][ T5133] ax25_dev_device_up+0x5c/0x540 [ 70.264306][ T5133] ax25_device_event+0x504/0x590 [ 70.265682][ T5133] raw_notifier_call_chain+0xd4/0x164 [ 70.267219][ T5133] __dev_notify_flags+0x250/0x46c [ 70.268629][ T5133] dev_change_flags+0xc8/0x154 [ 70.269985][ T5133] dev_ifsioc+0x504/0xef4 [ 70.271163][ T5133] dev_ioctl+0x4d0/0xc94 [ 70.272365][ T5133] sock_do_ioctl+0x18c/0x240 [ 70.273606][ T5133] sock_ioctl+0x5c8/0x87c [ 70.274747][ T5133] __arm64_sys_ioctl+0x14c/0x1c8 [ 70.276160][ T5133] invoke_syscall+0x98/0x2b8 [ 70.277444][ T5133] el0_svc_common+0x138/0x258 [ 70.278773][ T5133] do_el0_svc+0x58/0x14c [ 70.279960][ T5133] el0_svc+0x78/0x1e0 [ 70.281081][ T5133] el0t_64_sync_handler+0xcc/0xe4 [ 70.282565][ T5133] el0t_64_sync+0x1a0/0x1a4 [ 70.283848][ T5133] [ 70.284536][ T5133] Freed by task 5139: [ 70.285637][ T5133] kasan_set_track+0x4c/0x84 [ 70.286898][ T5133] kasan_set_free_info+0x28/0x4c [ 70.288240][ T5133] ____kasan_slab_free+0x118/0x164 [ 70.289643][ T5133] __kasan_slab_free+0x18/0x28 [ 70.291017][ T5133] slab_free_freelist_hook+0x128/0x1e8 [ 70.292581][ T5133] kfree+0x170/0x40c [ 70.293675][ T5133] ax25_dev_device_down+0x468/0x67c [ 70.295059][ T5133] ax25_device_event+0x538/0x590 [ 70.296436][ T5133] raw_notifier_call_chain+0xd4/0x164 [ 70.297907][ T5133] __dev_notify_flags+0x250/0x46c [ 70.299292][ T5133] dev_change_flags+0xc8/0x154 [ 70.300668][ T5133] dev_ifsioc+0x504/0xef4 [ 70.301862][ T5133] dev_ioctl+0x4d0/0xc94 [ 70.303041][ T5133] sock_do_ioctl+0x18c/0x240 [ 70.304402][ T5133] sock_ioctl+0x5c8/0x87c [ 70.305600][ T5133] __arm64_sys_ioctl+0x14c/0x1c8 [ 70.306985][ T5133] invoke_syscall+0x98/0x2b8 [ 70.308315][ T5133] el0_svc_common+0x138/0x258 [ 70.309650][ T5133] do_el0_svc+0x58/0x14c [ 70.310820][ T5133] el0_svc+0x78/0x1e0 [ 70.311894][ T5133] el0t_64_sync_handler+0xcc/0xe4 [ 70.313324][ T5133] el0t_64_sync+0x1a0/0x1a4 [ 70.314595][ T5133] [ 70.315283][ T5133] Last potentially related work creation: [ 70.316852][ T5133] kasan_save_stack+0x38/0x68 [ 70.318140][ T5133] kasan_record_aux_stack+0xcc/0x114 [ 70.319600][ T5133] call_rcu+0x110/0x8f0 [ 70.320751][ T5133] free_fib_info+0x68/0xa8 [ 70.322004][ T5133] fib_create_info+0x14f4/0x1ec8 [ 70.323364][ T5133] fib_table_insert+0xc0/0x13d0 [ 70.324714][ T5133] fib_magic+0x250/0x31c [ 70.325974][ T5133] fib_add_ifaddr+0x2ec/0x4f8 [ 70.327338][ T5133] fib_netdev_event+0x358/0x4c8 [ 70.328703][ T5133] raw_notifier_call_chain+0xd4/0x164 [ 70.330250][ T5133] __dev_notify_flags+0x250/0x46c [ 70.331668][ T5133] dev_change_flags+0xc8/0x154 [ 70.333007][ T5133] do_setlink+0xa20/0x3088 [ 70.334348][ T5133] rtnl_newlink+0x10d0/0x1404 [ 70.335684][ T5133] rtnetlink_rcv_msg+0x9d4/0xd04 [ 70.337061][ T5133] netlink_rcv_skb+0x208/0x3c4 [ 70.338452][ T5133] rtnetlink_rcv+0x28/0x38 [ 70.339699][ T5133] netlink_unicast+0x60c/0x89c [ 70.341022][ T5133] netlink_sendmsg+0x6e8/0x9cc [ 70.342359][ T5133] __sys_sendto+0x2e8/0x3d8 [ 70.343565][ T5133] __arm64_sys_sendto+0xd8/0xf8 [ 70.344977][ T5133] invoke_syscall+0x98/0x2b8 [ 70.346287][ T5133] el0_svc_common+0x138/0x258 [ 70.347602][ T5133] do_el0_svc+0x58/0x14c [ 70.348750][ T5133] el0_svc+0x78/0x1e0 [ 70.349885][ T5133] el0t_64_sync_handler+0xcc/0xe4 [ 70.351291][ T5133] el0t_64_sync+0x1a0/0x1a4 [ 70.352605][ T5133] [ 70.353234][ T5133] Second to last potentially related work creation: [ 70.355045][ T5133] kasan_save_stack+0x38/0x68 [ 70.356370][ T5133] kasan_record_aux_stack+0xcc/0x114 [ 70.357834][ T5133] insert_work+0x64/0x388 [ 70.359030][ T5133] __queue_work+0xb30/0x1054 [ 70.360366][ T5133] queue_work_on+0xc4/0x17c [ 70.361660][ T5133] call_usermodehelper_exec+0x22c/0x478 [ 70.363231][ T5133] kobject_uevent_env+0x670/0x888 [ 70.364723][ T5133] kobject_uevent+0x2c/0x3c [ 70.365933][ T5133] driver_register+0x29c/0x374 [ 70.367297][ T5133] __platform_driver_register+0x6c/0x80 [ 70.368882][ T5133] rcar_canfd_driver_init+0x20/0x2c [ 70.370359][ T5133] do_one_initcall+0x228/0x8b0 [ 70.371725][ T5133] do_initcall_level+0x154/0x214 [ 70.373156][ T5133] do_initcalls+0x58/0xac [ 70.374414][ T5133] do_basic_setup+0x8c/0xa0 [ 70.375677][ T5133] kernel_init_freeable+0x404/0x5fc [ 70.377150][ T5133] kernel_init+0x24/0x1d0 [ 70.378409][ T5133] ret_from_fork+0x10/0x20 [ 70.379651][ T5133] [ 70.380284][ T5133] The buggy address belongs to the object at ffff0000cdcc6600 [ 70.380284][ T5133] which belongs to the cache kmalloc-256 of size 256 [ 70.384401][ T5133] The buggy address is located 8 bytes inside of [ 70.384401][ T5133] 256-byte region [ffff0000cdcc6600, ffff0000cdcc6700) [ 70.388214][ T5133] The buggy address belongs to the page: [ 70.389815][ T5133] page:00000000bb4992f2 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10dcc6 [ 70.392755][ T5133] head:00000000bb4992f2 order:1 compound_mapcount:0 [ 70.394585][ T5133] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 70.396903][ T5133] raw: 05ffc00000010200 0000000000000000 0000000600000001 ffff0000c0002480 [ 70.399333][ T5133] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 70.401817][ T5133] page dumped because: kasan: bad access detected [ 70.403583][ T5133] [ 70.404239][ T5133] Memory state around the buggy address: [ 70.405782][ T5133] ffff0000cdcc6500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 70.408039][ T5133] ffff0000cdcc6580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 70.410367][ T5133] >ffff0000cdcc6600: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 70.412696][ T5133] ^ [ 70.413983][ T5133] ffff0000cdcc6680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 70.416314][ T5133] ffff0000cdcc6700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 70.418602][ T5133] ================================================================== [ 70.420926][ T5133] Disabling lock debugging due to kernel taint [ 70.434448][ T5133] Unable to handle kernel paging request at virtual address 0040039e000019bb [ 70.436857][ T5133] Mem abort info: [ 70.437812][ T5133] ESR = 0x0000000096000021 [ 70.439048][ T5133] EC = 0x25: DABT (current EL), IL = 32 bits [ 70.440668][ T5133] SET = 0, FnV = 0 [ 70.441671][ T5133] EA = 0, S1PTW = 0 [ 70.459271][ T5133] FSC = 0x21: alignment fault [ 70.466136][ T5133] Data abort info: [ 70.468409][ T5133] ISV = 0, ISS = 0x00000021 [ 70.472093][ T5133] CM = 0, WnR = 0 [ 70.477416][ T5133] [0040039e000019bb] address between user and kernel address ranges [ 70.501424][ T5133] Internal error: Oops: 0000000096000021 [#1] PREEMPT SMP [ 70.503465][ T5133] Modules linked in: [ 70.504490][ T5133] CPU: 1 PID: 5133 Comm: syz.1.369 Tainted: G B 5.15.186-syzkaller #0 [ 70.507092][ T5133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 70.509924][ T5133] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 70.512027][ T5133] pc : ax25_release+0x4f4/0x814 [ 70.513360][ T5133] lr : ax25_release+0x4ec/0x814 [ 70.514654][ T5133] sp : ffff800020047780 [ 70.515837][ T5133] x29: ffff8000200477a0 x28: dfff800000000000 x27: ffff0000c2e40080 [ 70.518063][ T5133] x26: ffff0000cf67c828 x25: 0000000000000002 x24: 00000000ffffffff [ 70.520267][ T5133] x23: e640039e000019bb x22: ffff0000cdcc6600 x21: ffff0000ea0cb018 [ 70.522468][ T5133] x20: ffff0000c2e40000 x19: 1fffe00019ecf905 x18: 0000000000000002 [ 70.524700][ T5133] x17: 0000000040000000 x16: ffff8000082d6448 x15: 0000000000000002 [ 70.526834][ T5133] x14: 0000000000ff0100 x13: ffffffffffffffff x12: 0000000000ff0100 [ 70.529002][ T5133] x11: 0000000000000000 x10: 0000000000000000 x9 : ffff800010472234 [ 70.531261][ T5133] x8 : ffff0000c2279b40 x7 : 0000000000000000 x6 : ffff80000824599c [ 70.533427][ T5133] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff800010472228 [ 70.535618][ T5133] x2 : 0000000000000001 x1 : 0000000000000004 x0 : 0000000000000001 [ 70.537772][ T5133] Call trace: [ 70.538673][ T5133] ax25_release+0x4f4/0x814 [ 70.539874][ T5133] sock_close+0xb4/0x1f8 [ 70.540976][ T5133] __fput+0x1c0/0x7f8 [ 70.542122][ T5133] ____fput+0x20/0x30 [ 70.543231][ T5133] task_work_run+0x12c/0x1e0 [ 70.544515][ T5133] do_exit+0x684/0x1f58 [ 70.545696][ T5133] do_group_exit+0x100/0x268 [ 70.546938][ T5133] get_signal+0x73c/0x1340 [ 70.548108][ T5133] do_notify_resume+0x35c/0x3128 [ 70.549470][ T5133] el0_svc+0xf0/0x1e0 [ 70.550545][ T5133] el0t_64_sync_handler+0xcc/0xe4 [ 70.551905][ T5133] el0t_64_sync+0x1a0/0x1a4 [ 70.553149][ T5133] Code: d503201f 9600200b 52800038 4b1803f8 (b87802f8) [ 70.555050][ T5133] ---[ end trace 3a0693eb29e042ff ]--- [ 70.905625][ T5133] Kernel panic - not syncing: Oops: Fatal exception [ 70.907545][ T5133] SMP: stopping secondary CPUs [ 70.908876][ T5133] Kernel Offset: disabled [ 70.910054][ T5133] CPU features: 0x8,000081c1,21302e40 [ 70.911534][ T5133] Memory Limit: none [ 71.262956][ T5133] Rebooting in 86400 seconds..