last executing test programs: 15.945876049s ago: executing program 2 (id=822): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_RATE={0x14, 0x6, {0xfdc6, 0x8001, 0x6, 0x7fee}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xd, 0x7}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 15.693995899s ago: executing program 2 (id=824): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="f07ca2a5ddef2d495ba3c21a71e6da3785230a40f3a5dfedbc1ec673e7334f395602b4da2aa2612d9bb0601c6a07014f12b5d7fcb2bf9321a7720d5d35edc88f5d6efa0a01b86e07ba3951267ec41fd398895774152bbf131785011d5e329f623e4a54cab4978df5fff95c923dad73bbae"], 0x48) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000b40)={'dummy0\x00'}) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000000080)=0x59cc, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000688158bb77c17055e0780c766aadb6d2ffbac2100ae3e4", @ANYRES32=0x0, @ANYRES32], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a0000000", @ANYRES64, @ANYRES8=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20fe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[], 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="8021000000800400140003006e65746465767369"], 0x4c}}, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x18, 0x1404, 0x1, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x8044) r7 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r7, &(0x7f0000000040)={&(0x7f0000000140)={0x2, 0xffff, @private=0xa010102}, 0x10, &(0x7f0000000080)=[{&(0x7f00000000c0)="08001efdff00f180", 0x8}], 0x1, 0x0, 0x0, 0xe0000000}, 0x400c890) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x58, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x6}]}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xc8}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, 0x0, 0x0) 15.163073332s ago: executing program 2 (id=827): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x14, 0x0, 0x701, 0x70bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) 14.973979068s ago: executing program 2 (id=830): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x0, 0x1, 0x4120932, 0xffffffffffffffff, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) accept4$unix(r2, 0x0, &(0x7f00000001c0), 0x800) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000150000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2004}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8040, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x1, 0x0, 0x80, "ff00f7000000000000000000af88008300"}) syz_open_pts(r4, 0x141601) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000180)={0x4, 0x20000200, 0x87, 0x100fff, 0x6, "682341f2fd71a6a76177920ea7e60c1acfa4a5"}) 12.34780382s ago: executing program 2 (id=843): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="100000000400000004000000"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, 0x0, &(0x7f0000000000)=""/6, 0x2}, 0x20) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x138) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_unlabel(0x0, r5) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x48, r6, 0x1, 0x0, 0x0, {0x4, 0x74, 0x609}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x2}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:xconsole_device_t:s0\x00'}]}, 0x48}, 0x1, 0xffffffff00000003}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000580), &(0x7f0000000180)=0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) 11.446644013s ago: executing program 2 (id=849): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x121003, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="6400ea86", @ANYRES16=r2, @ANYBLOB="010000000000100000000100000006"], 0x24}}, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40081271, &(0x7f0000000980)=0x4000) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000840)={0x2ff, [0x8], 0x2}, 0x10) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x0) 2.994528097s ago: executing program 4 (id=890): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x34}}, 0x0) socket(0x18, 0x80805, 0x0) migrate_pages(0x0, 0xa94b, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="48000000140009050000000000000000021f0020", @ANYRES32=r2, @ANYBLOB="08000100e0000002080002000a01010008000400ac1414aa08000400ffffffff08000a000100000008000200e0"], 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x4e24, @empty=0xe00}}) 2.739515748s ago: executing program 4 (id=895): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, 0x0, 0x0) mkdirat$cgroup(r0, &(0x7f00000000c0)='syz1\x00', 0x1ff) mkdirat$cgroup(r0, &(0x7f0000000100)='syz0\x00', 0x1ff) sendfile(r1, r1, 0x0, 0x9) 2.491607728s ago: executing program 4 (id=900): openat$ptp0(0xffffffffffffff9c, &(0x7f0000001700), 0x40002, 0x0) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, 0x0, 0x0) listen(r0, 0x0) mkdir(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) tkill(r1, 0x1a) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r1, r6, 0x0, 0x0, 0x0}, 0x30) syz_open_procfs$userns(r1, &(0x7f0000000300)) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x200031, 0xffffffffffffffff, 0x1, 0x0, 0x0) r7 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r7, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r7, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="1b", 0x1}], 0x1}}], 0x1, 0x4000890) accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r0, &(0x7f0000000140)=""/267, 0x10b, 0x40020062, 0x0, 0x0) 1.164824496s ago: executing program 0 (id=904): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000580), &(0x7f0000000180)=0x1) 1.163549936s ago: executing program 4 (id=905): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0xffff, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x100000011, @multicast2, 0x0, 0x0, 'ovf\x00', 0x35, 0x1000, 0x62}, 0x2c) 1.127487848s ago: executing program 0 (id=906): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x34}}, 0x0) socket(0x18, 0x80805, 0x0) migrate_pages(0x0, 0xa94b, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="48000000140009050000000000000000021f0020", @ANYRES32=r2, @ANYBLOB="08000100e0000002080002000a01010008000400ac1414aa08000400ffffffff08000a000100000008000200e0"], 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x4e24, @empty=0xe00}}) 1.075843963s ago: executing program 0 (id=908): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r3, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c6572300000000000000800050006"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 1.026545147s ago: executing program 4 (id=909): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0106401, &(0x7f00000021c0)={0x71, 0x0}) 1.006542398s ago: executing program 0 (id=911): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x14, r1, 0x301}, 0x14}}, 0x0) 964.462891ms ago: executing program 4 (id=913): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000009500"/24], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0x27, 0xc0, 0xde, 0x20, 0x86a, 0x3, 0xf03f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x2, 0x2, 0x1, 0xf3, 0xbf, 0xf5, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}]}}]}}]}}, 0x0) 871.761779ms ago: executing program 0 (id=915): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$OSF_MSG_REMOVE(r1, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYRES64=r2, @ANYRESDEC=r0, @ANYRESOCT=r2], 0x4bc}}, 0x80d0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x68, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x40, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x24}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 828.866322ms ago: executing program 0 (id=916): openat$ptp0(0xffffffffffffff9c, &(0x7f0000001700), 0x40002, 0x0) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, 0x0, 0x0) listen(r0, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) openat(0xffffffffffffffff, 0x0, 0x42, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) tkill(r1, 0x1a) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r1, r6, 0x0, 0x0, 0x0}, 0x30) syz_open_procfs$userns(r1, &(0x7f0000000300)) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x200031, 0xffffffffffffffff, 0x1, 0x0, 0x0) r7 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r7, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r7, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="1b", 0x1}], 0x1}}], 0x1, 0x4000890) accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r0, &(0x7f0000000140)=""/267, 0x10b, 0x40020062, 0x0, 0x0) 798.261545ms ago: executing program 1 (id=917): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, 0x0, &(0x7f00000001c0)) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r4, &(0x7f0000001cc0)=[{{&(0x7f0000000100)={0xa, 0x4e23, 0x4, @empty, 0x9f9}, 0x1c, 0x0, 0x0, &(0x7f0000000700)=[@flowinfo={{0x14, 0x29, 0xb, 0x4}}], 0x18}}], 0x1, 0xe6aa0a9f27214269) 687.904264ms ago: executing program 3 (id=918): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x34}}, 0x0) socket(0x18, 0x80805, 0x0) migrate_pages(0x0, 0xa94b, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="48000000140009050000000000000000021f0020", @ANYRES32=r2, @ANYBLOB="08000100e0000002080002000a01010008000400ac1414aa08000400ffffffff08000a000100000008000200e0"], 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x4e24, @empty=0xe00}}) 671.051346ms ago: executing program 3 (id=919): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000009e680)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="010000000000000000008100000008000300", @ANYRES32=r3, @ANYBLOB="0a0006000802110000010000060066008e880000520033"], 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 640.077698ms ago: executing program 3 (id=920): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100ab5a0000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4024}, 0x4000010) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) 535.854957ms ago: executing program 1 (id=921): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_RATE={0x14, 0x6, {0xfdc6, 0x8001, 0x6, 0x7fee}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0x2, 0xb}, {0xd, 0x7}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 509.222198ms ago: executing program 1 (id=922): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x8, 0x0) sendfile(r0, r1, 0x0, 0x800) 503.551939ms ago: executing program 3 (id=923): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}}, 0x24}}, 0x40000) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xfffa, 0xfff3}, {0x0, 0xffe0}, {0xf, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x44, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x1}, @TCA_FLOWER_KEY_PORT_DST_MIN={0x6, 0x59, 0x4f24}, @TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @random="793dc6de581c"}, @TCA_FLOWER_KEY_ETH_DST_MASK={0xa, 0x5, [0x0, 0x0, 0x0, 0xff, 0xff, 0xff]}, @TCA_FLOWER_KEY_ICMPV4_CODE={0x5}, @TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x1ff}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 391.996538ms ago: executing program 3 (id=924): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x204410, &(0x7f0000000740), 0xfe, 0x4a1, &(0x7f00000001c0)="$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") openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchown(r0, r2, r3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='pids.current\x00', 0x275a, 0x0) 391.753058ms ago: executing program 1 (id=925): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000140)=ANY=[], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000100)={r0, r0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x5886, 0x63, 0x1, 0x8, 'syz1\x00'}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)={0x50, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}}, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, 0x0) listen(r3, 0xfffffffc) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 194.877044ms ago: executing program 1 (id=926): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x5}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x47, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0xfffffffffffffffe, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0xffffffff, 0x5, 0x1, 0xc}, 0xb, 0x0, 0x80008, 0x5, 0x5f82, 0x6, 0x9, 0xd, 0x8, 0x1, {0xffff1c72, 0x3, 0x1000, 0x101, 0x2, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 135.229189ms ago: executing program 3 (id=927): sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r0, 0x0, 0x0, 0x10100, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000003a80)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x20004001}, 0x20000000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000080) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) 0s ago: executing program 1 (id=928): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r2, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.172' (ED25519) to the list of known hosts. [ 48.745475][ T4172] cgroup: Unknown subsys name 'net' [ 48.875076][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 50.082123][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 51.417368][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 51.490193][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 51.554820][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 51.570031][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.580055][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.588460][ T4182] device bridge_slave_0 entered promiscuous mode [ 51.605672][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.613008][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.620769][ T4182] device bridge_slave_1 entered promiscuous mode [ 51.632635][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 51.673343][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 51.704853][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.712105][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.719674][ T4186] device bridge_slave_0 entered promiscuous mode [ 51.729085][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.757081][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.764212][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.772097][ T4186] device bridge_slave_1 entered promiscuous mode [ 51.780112][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.824955][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.832146][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.840196][ T4184] device bridge_slave_0 entered promiscuous mode [ 51.879491][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.886754][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.895193][ T4184] device bridge_slave_1 entered promiscuous mode [ 51.903495][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.914810][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.926169][ T4182] team0: Port device team_slave_0 added [ 51.956959][ T4182] team0: Port device team_slave_1 added [ 51.962931][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.970017][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.978446][ T4185] device bridge_slave_0 entered promiscuous mode [ 51.985746][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.993029][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.001006][ T4183] device bridge_slave_0 entered promiscuous mode [ 52.034476][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.041695][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.049341][ T4185] device bridge_slave_1 entered promiscuous mode [ 52.056674][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.063876][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.072047][ T4183] device bridge_slave_1 entered promiscuous mode [ 52.080371][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.091960][ T4186] team0: Port device team_slave_0 added [ 52.099010][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.116544][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.123599][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.149714][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.183463][ T4186] team0: Port device team_slave_1 added [ 52.191794][ T4184] team0: Port device team_slave_0 added [ 52.197979][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.205020][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.231216][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.263136][ T4184] team0: Port device team_slave_1 added [ 52.280881][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.292039][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.303238][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.318037][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.325218][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.351284][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.363454][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.370431][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.396367][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.417011][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.448602][ T4183] team0: Port device team_slave_0 added [ 52.460260][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.467241][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.499207][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.511874][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.518818][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.545442][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.571265][ T4183] team0: Port device team_slave_1 added [ 52.605636][ T4185] team0: Port device team_slave_0 added [ 52.616844][ T4186] device hsr_slave_0 entered promiscuous mode [ 52.624408][ T4186] device hsr_slave_1 entered promiscuous mode [ 52.634872][ T4182] device hsr_slave_0 entered promiscuous mode [ 52.641811][ T4182] device hsr_slave_1 entered promiscuous mode [ 52.648310][ T4182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.656478][ T4182] Cannot create hsr debugfs directory [ 52.677248][ T4185] team0: Port device team_slave_1 added [ 52.693026][ T4184] device hsr_slave_0 entered promiscuous mode [ 52.699618][ T4184] device hsr_slave_1 entered promiscuous mode [ 52.706416][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.714046][ T4184] Cannot create hsr debugfs directory [ 52.728167][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.735152][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.761127][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.799237][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.806441][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.832483][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.850449][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.857405][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.883656][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.923964][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.931278][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.957515][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.021653][ T4185] device hsr_slave_0 entered promiscuous mode [ 53.028223][ T4185] device hsr_slave_1 entered promiscuous mode [ 53.034911][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.042623][ T4185] Cannot create hsr debugfs directory [ 53.079960][ T4183] device hsr_slave_0 entered promiscuous mode [ 53.086788][ T4183] device hsr_slave_1 entered promiscuous mode [ 53.093608][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.101310][ T4183] Cannot create hsr debugfs directory [ 53.190481][ T4189] Bluetooth: hci2: command 0x0409 tx timeout [ 53.190481][ T24] Bluetooth: hci3: command 0x0409 tx timeout [ 53.191013][ T4189] Bluetooth: hci1: command 0x0409 tx timeout [ 53.196819][ T24] Bluetooth: hci4: command 0x0409 tx timeout [ 53.205977][ T4189] Bluetooth: hci0: command 0x0409 tx timeout [ 53.327653][ T4186] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 53.339900][ T4186] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 53.352712][ T4186] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 53.361958][ T4186] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 53.399734][ T4184] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 53.410184][ T4184] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 53.419652][ T4184] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 53.439642][ T4184] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 53.481158][ T4182] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 53.491195][ T4182] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 53.499607][ T4182] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 53.510751][ T4182] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 53.589523][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.597324][ T4185] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 53.607739][ T4185] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 53.634782][ T4185] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 53.646437][ T4185] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 53.668307][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.676386][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.685727][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.722832][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.732912][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.742515][ T520] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.749699][ T520] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.758148][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.767144][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.775805][ T520] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.782899][ T520] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.790989][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.799479][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.823656][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.835451][ T4183] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 53.844552][ T4183] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 53.863881][ T4183] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 53.879506][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.890114][ T4183] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 53.899562][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.910600][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.929724][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.942461][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.950137][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.958626][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.975447][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.989472][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.999253][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.019050][ T4186] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 54.030131][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.046849][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.061806][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.070037][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.080900][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.089099][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.097572][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.106569][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.115431][ T520] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.122501][ T520] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.130057][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.138142][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.146225][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.154959][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.163709][ T520] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.170820][ T520] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.178466][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.186395][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.259667][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.269753][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.278785][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.287804][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.297055][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.306290][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.314964][ T1264] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.322061][ T1264] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.329745][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.339242][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.347757][ T1264] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.354959][ T1264] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.363759][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.372465][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.381247][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.389675][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.398244][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.406219][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.414370][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.425872][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.437144][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.467722][ T4184] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 54.480250][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.500196][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.511554][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.520067][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.529708][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.538731][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.547810][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.556585][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.565042][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.574956][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.587958][ T4182] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.613129][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.619940][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.647724][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.674147][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.688730][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.697767][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.712900][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.725055][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.733322][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.753868][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.768281][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.782872][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.797079][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.806899][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.816520][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.826623][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.833734][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.846652][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.855183][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.864820][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.873522][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.880621][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.907156][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.917067][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.925837][ T520] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.932931][ T520] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.944098][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.952641][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.961388][ T520] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.968424][ T520] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.976140][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.984578][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.992283][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.001020][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.009898][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.025214][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.055062][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.063817][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.075619][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.085105][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.100791][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.109527][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.118570][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.127241][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.135714][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.144224][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.152962][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.168081][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.187926][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.205116][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.220537][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.229967][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.241648][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.249896][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.261152][ T2410] Bluetooth: hci0: command 0x041b tx timeout [ 55.270585][ T2410] Bluetooth: hci4: command 0x041b tx timeout [ 55.274091][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.280524][ T2410] Bluetooth: hci1: command 0x041b tx timeout [ 55.289929][ T2410] Bluetooth: hci3: command 0x041b tx timeout [ 55.295481][ T4186] device veth0_vlan entered promiscuous mode [ 55.302552][ T2410] Bluetooth: hci2: command 0x041b tx timeout [ 55.310659][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.318980][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.328685][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.337805][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.352755][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.361799][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.369500][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.382440][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.392606][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.410222][ T4186] device veth1_vlan entered promiscuous mode [ 55.428096][ T4183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.445703][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.465724][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.473961][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.485052][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.494734][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.505778][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.514794][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.546348][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.572260][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.581287][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.596791][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.623513][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.634545][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.645701][ T4182] device veth0_vlan entered promiscuous mode [ 55.660140][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.677640][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.709467][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.724034][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.734514][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.742995][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.752997][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.764382][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.772511][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.787138][ T4186] device veth0_macvtap entered promiscuous mode [ 55.795904][ T4182] device veth1_vlan entered promiscuous mode [ 55.803024][ T4184] device veth0_vlan entered promiscuous mode [ 55.816357][ T4184] device veth1_vlan entered promiscuous mode [ 55.825817][ T4186] device veth1_macvtap entered promiscuous mode [ 55.864531][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.873294][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.881719][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.889570][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.899316][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.907064][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.920843][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.944376][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.954116][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.963449][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.973151][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.982317][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.990850][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.999250][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.015625][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.026363][ T4182] device veth0_macvtap entered promiscuous mode [ 56.033611][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.042654][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.052698][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.062104][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.071392][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.085299][ T4184] device veth0_macvtap entered promiscuous mode [ 56.096091][ T4186] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.105330][ T4186] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.115232][ T4186] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.124197][ T4186] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.140135][ T4182] device veth1_macvtap entered promiscuous mode [ 56.152307][ T4184] device veth1_macvtap entered promiscuous mode [ 56.167512][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.175838][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.184692][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.193033][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.202932][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.237885][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.249838][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.261113][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.274408][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.284972][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.295425][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.307278][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.319452][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.333353][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.344567][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.354209][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.362678][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.371442][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.379927][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.392157][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.400033][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.413703][ T4183] device veth0_vlan entered promiscuous mode [ 56.429162][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.439733][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.456870][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.468981][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.480525][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.490616][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.501349][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.512931][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.520638][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.528917][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.538104][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.548384][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.557127][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.566241][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.575189][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.583297][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.591622][ T4185] device veth0_vlan entered promiscuous mode [ 56.622122][ T4184] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.633526][ T4184] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.643515][ T4184] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.652284][ T4184] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.665142][ T4182] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.674285][ T4182] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.683139][ T4182] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.692239][ T4182] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.731332][ T4185] device veth1_vlan entered promiscuous mode [ 56.748732][ T4183] device veth1_vlan entered promiscuous mode [ 56.807700][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.818074][ T4185] device veth0_macvtap entered promiscuous mode [ 56.828685][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.836893][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.845444][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.854208][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.864089][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.872529][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.880226][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.899042][ T4185] device veth1_macvtap entered promiscuous mode [ 56.915818][ T4183] device veth0_macvtap entered promiscuous mode [ 56.947116][ T520] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.957033][ T520] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.958156][ T4183] device veth1_macvtap entered promiscuous mode [ 56.990768][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.998864][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.007444][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.016044][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.027481][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.030823][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.044213][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.046325][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.055748][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.073666][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.083718][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.096157][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.107767][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.130236][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.141813][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.150232][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.170760][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.180104][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.188177][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.204934][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.215042][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.226644][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.236710][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.247368][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.258843][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.272671][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.283337][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.293648][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.304333][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.314373][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.325040][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.335105][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.345968][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.351239][ T2410] Bluetooth: hci2: command 0x040f tx timeout [ 57.358346][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.368022][ T2410] Bluetooth: hci3: command 0x040f tx timeout [ 57.375561][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.384532][ T520] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.389437][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.393552][ T520] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.400494][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.414645][ T2410] Bluetooth: hci1: command 0x040f tx timeout [ 57.419943][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.421040][ T2410] Bluetooth: hci4: command 0x040f tx timeout [ 57.429343][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.435179][ T2410] Bluetooth: hci0: command 0x040f tx timeout [ 57.448697][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.457263][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.466213][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.474855][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.486181][ T4185] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.495224][ T4185] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.507325][ T4185] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.517031][ T4185] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.535507][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.553679][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.563852][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.574531][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.585450][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.596087][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.606456][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.617266][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.628462][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.640756][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.649510][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.692842][ T4183] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.711370][ T4183] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.721434][ T4183] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.730135][ T4183] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.814226][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.826878][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.920453][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.935964][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.999933][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.027585][ T4274] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.036083][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.062068][ T4274] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.090995][ T4308] netlink: 5348 bytes leftover after parsing attributes in process `syz.3.7'. [ 58.123325][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.146565][ T520] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.184488][ T520] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.206743][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.423659][ T4327] netlink: 32 bytes leftover after parsing attributes in process `syz.3.14'. [ 58.469678][ T4327] netlink: del zone limit has 8 unknown bytes [ 58.646220][ T4347] netlink: 64 bytes leftover after parsing attributes in process `syz.2.22'. [ 58.791790][ T4359] netlink: 36 bytes leftover after parsing attributes in process `syz.1.25'. [ 58.796567][ T4360] netlink: 104 bytes leftover after parsing attributes in process `syz.2.26'. [ 58.824589][ T4359] netlink: 12 bytes leftover after parsing attributes in process `syz.1.25'. [ 58.867895][ T4362] netlink: 16 bytes leftover after parsing attributes in process `syz.0.27'. [ 58.898413][ T4359] netlink: 8 bytes leftover after parsing attributes in process `syz.1.25'. [ 58.928824][ T4359] netlink: 8 bytes leftover after parsing attributes in process `syz.1.25'. [ 58.988843][ T4366] netlink: 132 bytes leftover after parsing attributes in process `syz.2.29'. [ 59.981670][ T4241] Bluetooth: hci3: command 0x0419 tx timeout [ 59.989299][ T4241] Bluetooth: hci2: command 0x0419 tx timeout [ 60.000248][ T4294] Bluetooth: hci0: command 0x0419 tx timeout [ 60.037174][ T4294] Bluetooth: hci4: command 0x0419 tx timeout [ 60.266092][ T4294] Bluetooth: hci1: command 0x0419 tx timeout [ 60.587805][ T4417] loop1: detected capacity change from 0 to 256 [ 60.783357][ T4417] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 61.505729][ T4431] ======================================================= [ 61.505729][ T4431] WARNING: The mand mount option has been deprecated and [ 61.505729][ T4431] and is ignored by this kernel. Remove the mand [ 61.505729][ T4431] option from the mount to silence this warning. [ 61.505729][ T4431] ======================================================= [ 63.271222][ T4488] bpf: Bad value for 'mode' [ 63.385313][ T4492] __nla_validate_parse: 10 callbacks suppressed [ 63.385329][ T4492] netlink: 7 bytes leftover after parsing attributes in process `syz.0.85'. [ 63.488551][ T4494] netlink: 52 bytes leftover after parsing attributes in process `syz.3.86'. [ 63.500986][ T4492] netlink: 60 bytes leftover after parsing attributes in process `syz.0.85'. [ 63.854836][ T4505] netlink: 40 bytes leftover after parsing attributes in process `syz.2.91'. [ 64.095810][ T4511] netlink: 260 bytes leftover after parsing attributes in process `syz.0.93'. [ 64.292603][ T4517] netlink: 32 bytes leftover after parsing attributes in process `syz.1.96'. [ 64.490557][ T1108] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 64.597918][ T4531] loop0: detected capacity change from 0 to 1024 [ 64.693889][ T4531] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 64.726062][ T4543] loop2: detected capacity change from 0 to 256 [ 64.773614][ T4531] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 64.803940][ T4531] EXT4-fs (loop0): can't mount with both data=journal and delalloc [ 64.831297][ T4543] exfat: Unknown parameter 'fsmagic' [ 64.935607][ T4541] xt_hashlimit: max too large, truncated to 1048576 [ 65.170377][ T1108] usb 5-1: Using ep0 maxpacket: 32 [ 65.310572][ T1108] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 65.318775][ T1108] usb 5-1: config 0 has no interface number 0 [ 65.325593][ T1108] usb 5-1: config 0 interface 2 has no altsetting 0 [ 65.811526][ T1108] usb 5-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 65.821822][ T4560] netlink: 32 bytes leftover after parsing attributes in process `syz.0.113'. [ 65.830861][ T1108] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.849837][ T1108] usb 5-1: config 0 descriptor?? [ 65.901978][ T1108] usb 5-1: can't set config #0, error -71 [ 65.950377][ T1108] usb 5-1: USB disconnect, device number 2 [ 65.984885][ T4569] netlink: set zone limit has 8 unknown bytes [ 66.094915][ T4579] netlink: 'syz.1.121': attribute type 1 has an invalid length. [ 66.105123][ T4580] netlink: 56 bytes leftover after parsing attributes in process `syz.4.123'. [ 66.643557][ T4592] xt_hashlimit: max too large, truncated to 1048576 [ 67.329088][ T4604] netlink: 7 bytes leftover after parsing attributes in process `syz.0.129'. [ 67.379433][ T4604] netlink: 24 bytes leftover after parsing attributes in process `syz.0.129'. [ 67.442404][ T4605] loop4: detected capacity change from 0 to 4096 [ 67.621804][ T4605] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 68.407328][ T4626] tipc: Enabling of bearer rejected, failed to enable media [ 68.460006][ T4631] netlink: 72 bytes leftover after parsing attributes in process `syz.0.140'. [ 68.823605][ T4645] netlink: zone id is out of range [ 68.845396][ T4645] netlink: zone id is out of range [ 68.883118][ T4645] netlink: zone id is out of range [ 68.901715][ T4645] netlink: zone id is out of range [ 68.917951][ T4645] netlink: zone id is out of range [ 68.928781][ T4645] netlink: zone id is out of range [ 68.948450][ T4645] netlink: zone id is out of range [ 69.000604][ T4645] netlink: zone id is out of range [ 69.010774][ T4649] loop3: detected capacity change from 0 to 256 [ 69.024166][ T4645] netlink: zone id is out of range [ 69.041231][ T4649] exfat: Unknown parameter 'fsmagic' [ 69.083851][ T4649] xt_hashlimit: max too large, truncated to 1048576 [ 69.573129][ T4659] netlink: 'syz.2.150': attribute type 29 has an invalid length. [ 69.647839][ T4659] netlink: 'syz.2.150': attribute type 29 has an invalid length. [ 69.866046][ T4664] netlink: 'syz.2.150': attribute type 29 has an invalid length. [ 70.320295][ C0] sched: RT throttling activated [ 70.690011][ T4659] netlink: 'syz.2.150': attribute type 29 has an invalid length. [ 70.722186][ T4659] netlink: 'syz.2.150': attribute type 29 has an invalid length. [ 70.785614][ T4670] tipc: Enabling of bearer rejected, failed to enable media [ 70.929001][ T4674] netlink: 272 bytes leftover after parsing attributes in process `syz.1.154'. [ 71.124806][ T4686] netlink: 104 bytes leftover after parsing attributes in process `syz.3.157'. [ 71.184294][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.192112][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.265777][ T4692] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 71.739399][ T4708] net_ratelimit: 42 callbacks suppressed [ 71.739439][ T4708] netlink: set zone limit has 8 unknown bytes [ 72.383789][ T4711] loop3: detected capacity change from 0 to 4096 [ 72.752529][ T4727] loop0: detected capacity change from 0 to 256 [ 73.590945][ T4727] exfat: Unknown parameter 'fsmagic' [ 73.735102][ T4711] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 74.307287][ T4745] tipc: Enabling of bearer rejected, failed to enable media [ 74.339720][ T4725] xt_hashlimit: max too large, truncated to 1048576 [ 76.302194][ T21] cfg80211: failed to load regulatory.db [ 76.477615][ T4786] tipc: Enabling of bearer rejected, failed to enable media [ 78.719943][ T4837] tipc: Enabling of bearer rejected, failed to enable media [ 79.864823][ T4860] netlink: 76 bytes leftover after parsing attributes in process `syz.4.205'. [ 79.973532][ T4863] netlink: 'syz.2.208': attribute type 1 has an invalid length. [ 80.304153][ T4878] netlink: 8 bytes leftover after parsing attributes in process `syz.4.215'. [ 81.415768][ T4900] netlink: 24 bytes leftover after parsing attributes in process `syz.2.222'. [ 81.764742][ T4898] infiniband syz1: set active [ 81.774942][ T4898] infiniband syz1: added bond0 [ 82.033050][ T4898] RDS/IB: syz1: added [ 82.046932][ T4898] smc: adding ib device syz1 with port count 1 [ 82.083264][ T4898] smc: ib device syz1 port 1 has pnetid [ 84.138005][ T4942] netlink: 20 bytes leftover after parsing attributes in process `syz.1.236'. [ 84.163268][ T4941] netlink: 294 bytes leftover after parsing attributes in process `syz.3.237'. [ 85.523750][ T4964] netlink: 948 bytes leftover after parsing attributes in process `syz.0.246'. [ 85.909154][ T4988] netlink: 'syz.2.255': attribute type 10 has an invalid length. [ 86.036994][ T4988] team0: Device hsr_slave_0 failed to register rx_handler [ 86.336372][ T5008] netlink: 24 bytes leftover after parsing attributes in process `syz.2.264'. [ 86.602173][ T5022] netlink: 60 bytes leftover after parsing attributes in process `syz.2.272'. [ 86.634601][ T5022] netlink: 60 bytes leftover after parsing attributes in process `syz.2.272'. [ 86.669123][ T5028] netlink: 60 bytes leftover after parsing attributes in process `syz.2.272'. [ 86.719866][ T5030] device syzkaller0 entered promiscuous mode [ 86.949674][ T5040] netlink: set zone limit has 8 unknown bytes [ 87.285702][ T5062] netlink: 192 bytes leftover after parsing attributes in process `syz.4.290'. [ 88.440198][ T5092] netlink: 464 bytes leftover after parsing attributes in process `syz.1.301'. [ 88.601495][ T5098] netlink: 28 bytes leftover after parsing attributes in process `syz.1.304'. [ 88.729480][ T5103] netlink: 8 bytes leftover after parsing attributes in process `syz.0.305'. [ 88.852215][ T5107] netlink: 4 bytes leftover after parsing attributes in process `syz.1.307'. [ 89.120576][ T4241] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 90.210503][ T4241] usb 3-1: Using ep0 maxpacket: 32 [ 90.360716][ T4241] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 90.368819][ T4241] usb 3-1: config 0 has no interface number 0 [ 90.421453][ T5130] rdma_rxe: rxe_register_device failed with error -23 [ 90.422408][ T4241] usb 3-1: config 0 interface 2 has no altsetting 0 [ 90.462935][ T5130] rdma_rxe: failed to add ip6tnl0 [ 90.490664][ T5135] netlink: 'syz.1.318': attribute type 1 has an invalid length. [ 90.706582][ T5141] device syzkaller0 entered promiscuous mode [ 90.820696][ T4241] usb 3-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 90.841478][ T4241] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.600343][ T4241] usb 3-1: Product: syz [ 91.678982][ T4241] usb 3-1: Manufacturer: syz [ 91.690555][ T4241] usb 3-1: SerialNumber: syz [ 91.708601][ T4241] usb 3-1: config 0 descriptor?? [ 91.945266][ T5159] xt_hashlimit: max too large, truncated to 1048576 [ 92.968790][ T5172] __nla_validate_parse: 2 callbacks suppressed [ 92.968804][ T5172] netlink: 64 bytes leftover after parsing attributes in process `syz.3.329'. [ 93.113099][ T4241] usb 3-1: can't set config #0, error -71 [ 93.133412][ T4241] usb 3-1: USB disconnect, device number 2 [ 94.128660][ T5186] device syzkaller0 entered promiscuous mode [ 94.484258][ T5206] netlink: 24 bytes leftover after parsing attributes in process `syz.3.343'. [ 95.780426][ T4264] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 95.822516][ T5221] netlink: 36588 bytes leftover after parsing attributes in process `syz.3.349'. [ 96.020351][ T4264] usb 5-1: Using ep0 maxpacket: 32 [ 96.180553][ T4264] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 96.198923][ T4264] usb 5-1: config 0 has no interface number 0 [ 96.219183][ T4264] usb 5-1: config 0 interface 2 has no altsetting 0 [ 96.412743][ T4264] usb 5-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 96.432057][ T4264] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.457524][ T4264] usb 5-1: Product: syz [ 96.470632][ T4264] usb 5-1: Manufacturer: syz [ 96.490674][ T4264] usb 5-1: SerialNumber: syz [ 96.536377][ T4264] usb 5-1: config 0 descriptor?? [ 97.669322][ T5256] fuse: Bad value for 'fd' [ 97.809968][ T5258] netlink: 40 bytes leftover after parsing attributes in process `syz.2.366'. [ 97.937943][ T5254] infiniband syz1: set active [ 98.059763][ T5254] infiniband syz1: added bond0 [ 98.126305][ T5265] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 98.159054][ T5254] RDS/IB: syz1: added [ 98.163298][ T5254] smc: adding ib device syz1 with port count 1 [ 98.169583][ T5254] smc: ib device syz1 port 1 has pnetid [ 98.320666][ T4264] usb 5-1: invalid MIDI in EP 0 [ 98.437150][ T4264] snd-usb-audio: probe of 5-1:0.2 failed with error -22 [ 98.478467][ T4264] usb 5-1: USB disconnect, device number 3 [ 98.483275][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 98.588274][ T5275] netlink: 104 bytes leftover after parsing attributes in process `syz.4.371'. [ 99.756991][ T5287] netlink: 68 bytes leftover after parsing attributes in process `syz.1.376'. [ 99.789695][ T5289] netlink: 8 bytes leftover after parsing attributes in process `syz.1.377'. [ 100.239008][ T5265] smc: removing ib device syz1 [ 101.225447][ T5319] device syzkaller0 entered promiscuous mode [ 101.584472][ T5335] loop2: detected capacity change from 0 to 256 [ 101.745056][ T5335] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 102.314686][ T5333] device syzkaller0 entered promiscuous mode [ 103.347059][ T5357] loop3: detected capacity change from 0 to 1024 [ 103.402316][ T5365] netlink: 7 bytes leftover after parsing attributes in process `syz.2.408'. [ 103.410019][ T5348] device syzkaller0 entered promiscuous mode [ 103.429500][ T5357] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 103.495511][ T5357] EXT4-fs (loop3): can't mount with both data=journal and delalloc [ 103.599629][ T5373] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 103.678248][ T5371] netlink: 209592 bytes leftover after parsing attributes in process `syz.1.410'. [ 103.958760][ T5383] loop4: detected capacity change from 0 to 256 [ 104.045222][ T5383] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 104.884190][ T5399] netlink: 8 bytes leftover after parsing attributes in process `syz.1.423'. [ 105.420462][ T5418] netlink: 12 bytes leftover after parsing attributes in process `syz.3.433'. [ 105.465719][ T5422] netlink: 8 bytes leftover after parsing attributes in process `syz.1.435'. [ 105.686134][ T5430] netlink: 404 bytes leftover after parsing attributes in process `syz.1.440'. [ 105.731533][ T5432] netlink: 48 bytes leftover after parsing attributes in process `syz.2.438'. [ 105.762078][ T5434] netlink: 104 bytes leftover after parsing attributes in process `syz.3.439'. [ 106.357650][ T5464] netlink: 36 bytes leftover after parsing attributes in process `syz.4.449'. [ 107.078210][ T5481] netlink: 112 bytes leftover after parsing attributes in process `syz.2.455'. [ 107.079060][ T5477] device syzkaller0 entered promiscuous mode [ 107.130376][ T5481] netlink: 56 bytes leftover after parsing attributes in process `syz.2.455'. [ 108.321517][ T5586] netlink: zone id is out of range [ 108.778325][ T5631] __nla_validate_parse: 10 callbacks suppressed [ 108.778339][ T5631] netlink: 8 bytes leftover after parsing attributes in process `syz.3.527'. [ 108.799855][ T5635] netlink: 28 bytes leftover after parsing attributes in process `syz.2.528'. [ 108.817328][ T5635] netlink: 28 bytes leftover after parsing attributes in process `syz.2.528'. [ 108.854403][ T5631] netlink: 'syz.3.527': attribute type 1 has an invalid length. [ 108.878665][ T5631] netlink: 'syz.3.527': attribute type 2 has an invalid length. [ 108.925424][ T5631] netlink: 'syz.3.527': attribute type 1 has an invalid length. [ 109.424070][ T5662] netlink: 68 bytes leftover after parsing attributes in process `syz.2.539'. [ 109.485883][ T5665] netlink: 32 bytes leftover after parsing attributes in process `syz.0.542'. [ 109.533111][ T5665] netlink: 46 bytes leftover after parsing attributes in process `syz.0.542'. [ 109.552598][ T5670] netlink: 'syz.3.543': attribute type 3 has an invalid length. [ 109.572696][ T5665] netlink: 46 bytes leftover after parsing attributes in process `syz.0.542'. [ 109.666912][ T5679] netlink: 32 bytes leftover after parsing attributes in process `syz.2.548'. [ 109.967638][ T5698] netlink: 92 bytes leftover after parsing attributes in process `syz.0.557'. [ 110.023641][ T5698] netlink: 12 bytes leftover after parsing attributes in process `syz.0.557'. [ 110.094244][ T5705] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 110.310800][ T21] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 110.791575][ T21] usb 4-1: Using ep0 maxpacket: 32 [ 110.930644][ T21] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 110.938683][ T21] usb 4-1: config 0 has no interface number 0 [ 111.025524][ T21] usb 4-1: config 0 interface 2 has no altsetting 0 [ 111.220567][ T21] usb 4-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 111.229645][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.300415][ T21] usb 4-1: Product: syz [ 111.304621][ T21] usb 4-1: Manufacturer: syz [ 111.309215][ T21] usb 4-1: SerialNumber: syz [ 111.372228][ T21] usb 4-1: config 0 descriptor?? [ 111.899394][ T21] usb 4-1: invalid MIDI in EP 0 [ 112.439524][ T21] snd-usb-audio: probe of 4-1:0.2 failed with error -22 [ 112.456099][ T21] usb 4-1: USB disconnect, device number 2 [ 112.602070][ T5802] netlink: 'syz.3.600': attribute type 1 has an invalid length. [ 112.932384][ T4422] udevd[4422]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 113.392205][ T5842] xt_hashlimit: max too large, truncated to 1048576 [ 113.887024][ T5854] __nla_validate_parse: 10 callbacks suppressed [ 113.887040][ T5854] netlink: 124 bytes leftover after parsing attributes in process `syz.3.624'. [ 113.905415][ T5855] netlink: 8 bytes leftover after parsing attributes in process `syz.4.623'. [ 113.952612][ T5854] netlink: 20 bytes leftover after parsing attributes in process `syz.3.624'. [ 114.019722][ T5854] netlink: 20 bytes leftover after parsing attributes in process `syz.3.624'. [ 114.241803][ T5860] netlink: 8 bytes leftover after parsing attributes in process `syz.4.626'. [ 114.254885][ T5861] netlink: 4 bytes leftover after parsing attributes in process `syz.3.627'. [ 114.622130][ T5867] netlink: 332 bytes leftover after parsing attributes in process `syz.3.630'. [ 114.886870][ T5877] netlink: 60 bytes leftover after parsing attributes in process `syz.1.634'. [ 115.395146][ T5906] xt_hashlimit: max too large, truncated to 1048576 [ 115.604246][ T5911] netlink: 104 bytes leftover after parsing attributes in process `syz.4.650'. [ 115.705886][ T5915] netlink: 16 bytes leftover after parsing attributes in process `syz.3.652'. [ 118.081729][ T5968] xt_hashlimit: max too large, truncated to 1048576 [ 120.055215][ T5992] __nla_validate_parse: 8 callbacks suppressed [ 120.055232][ T5992] netlink: 72 bytes leftover after parsing attributes in process `syz.0.680'. [ 120.168470][ T5990] loop3: detected capacity change from 0 to 4096 [ 120.212609][ T6000] netlink: 76 bytes leftover after parsing attributes in process `syz.2.686'. [ 120.289129][ T5990] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 120.423435][ T6009] netlink: 8 bytes leftover after parsing attributes in process `syz.0.689'. [ 122.510042][ T6044] netlink: 8 bytes leftover after parsing attributes in process `syz.4.703'. [ 122.583997][ T6047] tc_dump_action: action bad kind [ 125.343651][ T6064] netlink: 'syz.4.711': attribute type 62 has an invalid length. [ 125.442199][ T6066] device syzkaller0 entered promiscuous mode [ 125.678617][ T6078] netlink: 348 bytes leftover after parsing attributes in process `syz.4.718'. [ 126.001421][ T6091] netlink: 12 bytes leftover after parsing attributes in process `syz.4.724'. [ 126.232400][ T6091] bridge1: port 1(vlan2) entered blocking state [ 126.244773][ T6091] bridge1: port 1(vlan2) entered disabled state [ 126.426112][ T6091] device vlan2 entered promiscuous mode [ 126.577609][ T6091] device bridge0 entered promiscuous mode [ 127.107750][ T6115] netlink: 'syz.1.731': attribute type 10 has an invalid length. [ 127.299318][ T6115] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 127.314399][ T6116] netlink: 36 bytes leftover after parsing attributes in process `syz.1.731'. [ 127.397832][ T6114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 129.589880][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 129.600318][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 129.610319][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 129.620326][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 129.838111][ T6157] netlink: 24 bytes leftover after parsing attributes in process `syz.2.741'. [ 130.327868][ T6161] loop0: detected capacity change from 0 to 4096 [ 130.451144][ T6161] ntfs3: loop0: This driver is compiled without CONFIG_NTFS3_64BIT_CLUSTER (like windows driver). [ 130.451144][ T6161] Volume contains 64 bits run: vcn 0, lcn ffffffffff000000, len 7ff. [ 130.451144][ T6161] Activate CONFIG_NTFS3_64BIT_CLUSTER to process this case [ 130.533165][ T6161] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 130.565652][ T6161] ntfs3: loop0: Failed to load $BadClus. [ 131.438359][ T6174] loop0: detected capacity change from 0 to 256 [ 132.585835][ T6187] netlink: 28 bytes leftover after parsing attributes in process `syz.4.750'. [ 132.621972][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.628326][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.994304][ T6201] netlink: 4 bytes leftover after parsing attributes in process `syz.1.752'. [ 133.941876][ T6224] netlink: 8 bytes leftover after parsing attributes in process `syz.0.758'. [ 134.324899][ T6240] loop0: detected capacity change from 0 to 256 [ 134.379701][ T6242] netlink: set zone limit has 8 unknown bytes [ 134.393935][ T6240] exfat: Unknown parameter 'fsmagic' [ 134.401834][ T6240] xt_hashlimit: max too large, truncated to 1048576 [ 134.447850][ T6246] loop3: detected capacity change from 0 to 8 [ 134.559150][ T6246] SQUASHFS error: Failed to read block 0x260685: -5 [ 134.597209][ T6246] SQUASHFS error: Unable to read metadata cache entry [260685] [ 134.639535][ T6246] SQUASHFS error: Unable to read directory block [260685:0] [ 135.678502][ T6268] loop3: detected capacity change from 0 to 2048 [ 135.948826][ T6268] EXT4-fs (loop3): mounted filesystem without journal. Opts: nouid32,acl,,errors=continue. Quota mode: none. [ 138.951424][ T6321] loop0: detected capacity change from 0 to 64 [ 139.280254][ T6329] tipc: Enabling of bearer rejected, failed to enable media [ 139.310155][ T6329] device syzkaller0 entered promiscuous mode [ 139.542556][ T6332] netlink: 20 bytes leftover after parsing attributes in process `syz.0.781'. [ 139.551736][ T6332] netlink: 4 bytes leftover after parsing attributes in process `syz.0.781'. [ 139.954036][ T6306] loop3: detected capacity change from 0 to 32768 [ 140.055241][ T6306] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.777 (6306) [ 140.135082][ T6342] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 140.180678][ T6306] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 140.205707][ T6306] BTRFS info (device loop3): enabling auto defrag [ 140.271294][ T6306] BTRFS info (device loop3): doing ref verification [ 140.361486][ T6306] BTRFS info (device loop3): max_inline at 0 [ 140.375517][ T6306] BTRFS info (device loop3): force clearing of disk cache [ 140.430719][ T6306] BTRFS info (device loop3): turning on sync discard [ 140.680835][ T6306] BTRFS info (device loop3): disabling free space tree [ 140.884648][ T6306] BTRFS info (device loop3): has skinny extents [ 141.643414][ T6306] BTRFS error (device loop3): open_ctree failed: -12 [ 142.721081][ T6405] tipc: Enabling of bearer rejected, failed to enable media [ 142.765951][ T6405] device syzkaller0 entered promiscuous mode [ 143.016955][ T6414] loop3: detected capacity change from 0 to 4096 [ 145.268134][ T6414] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 145.933232][ T6453] tipc: Enabling of bearer rejected, failed to enable media [ 145.949557][ T6453] device syzkaller0 entered promiscuous mode [ 146.127371][ T6458] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 146.391610][ T6473] netlink: 8 bytes leftover after parsing attributes in process `syz.3.817'. [ 146.510211][ T6476] 9pnet: Insufficient options for proto=fd [ 146.797369][ T6485] tipc: Enabling of bearer rejected, failed to enable media [ 146.849715][ T6485] device syzkaller0 entered promiscuous mode [ 146.910782][ T6486] loop3: detected capacity change from 0 to 4096 [ 147.218470][ T6486] ntfs3: loop3: This driver is compiled without CONFIG_NTFS3_64BIT_CLUSTER (like windows driver). [ 147.218470][ T6486] Volume contains 64 bits run: vcn 0, lcn ffffffffff000000, len 7ff. [ 147.218470][ T6486] Activate CONFIG_NTFS3_64BIT_CLUSTER to process this case [ 147.334034][ T6486] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 147.350665][ T6486] ntfs3: loop3: Failed to load $BadClus. [ 148.173855][ T6510] loop3: detected capacity change from 0 to 256 [ 149.186905][ T6521] loop3: detected capacity change from 0 to 8192 [ 149.236815][ T6521] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 152.286646][ T6568] loop3: detected capacity change from 0 to 256 [ 152.397147][ T144] Bluetooth: hci5: Frame reassembly failed (-84) [ 153.889848][ T6598] loop0: detected capacity change from 0 to 4096 [ 153.994081][ T6598] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 154.861855][ T4248] Bluetooth: hci5: command 0x1003 tx timeout [ 154.868133][ T4197] Bluetooth: hci5: sending frame failed (-49) [ 154.975943][ T6610] syz.3.862 uses obsolete (PF_INET,SOCK_PACKET) [ 155.338139][ T6620] loop3: detected capacity change from 0 to 256 [ 155.395424][ T6624] loop0: detected capacity change from 0 to 128 [ 155.473020][ T6620] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 155.511313][ T6624] vxfs: unable to set final block size [ 156.331681][ T6640] Zero length message leads to an empty skb [ 156.940388][ T24] Bluetooth: hci5: command 0x1001 tx timeout [ 156.946511][ T4197] Bluetooth: hci5: sending frame failed (-49) [ 159.649498][ T2410] Bluetooth: hci5: command 0x1009 tx timeout [ 159.699059][ T6684] netlink: 28 bytes leftover after parsing attributes in process `syz.0.888'. [ 159.739609][ T6684] netlink: 'syz.0.888': attribute type 7 has an invalid length. [ 159.780371][ T6684] netlink: 4 bytes leftover after parsing attributes in process `syz.0.888'. [ 159.815287][ T6684] device team0 entered promiscuous mode [ 159.822203][ T6684] device team_slave_0 entered promiscuous mode [ 159.828646][ T6684] device team_slave_1 entered promiscuous mode [ 159.837130][ T6684] device bond0 entered promiscuous mode [ 159.859095][ T6684] device bond_slave_0 entered promiscuous mode [ 159.867407][ T6684] device bond_slave_1 entered promiscuous mode [ 159.876887][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 160.140395][ T6713] netlink: 8 bytes leftover after parsing attributes in process `syz.3.899'. [ 161.415975][ T6724] device syzkaller0 entered promiscuous mode [ 161.920070][ T6756] netlink: 'syz.1.917': attribute type 1 has an invalid length. [ 162.250422][ T4248] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 162.257908][ T6774] loop3: detected capacity change from 0 to 512 [ 162.321824][ T6774] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.924: casefold flag without casefold feature [ 162.346231][ T6777] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 162.367811][ T6774] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.924: couldn't read orphan inode 15 (err -117) [ 162.398554][ T6774] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 162.449911][ T6774] EXT4-fs error (device loop3): ext4_add_entry:2486: inode #2: comm syz.3.924: Directory hole found for htree leaf block 0 [ 162.504511][ T6783] tipc: Started in network mode [ 162.509433][ T6783] tipc: Node identity 080211000001, cluster identity 4711 [ 162.561685][ T4248] usb 5-1: Using ep0 maxpacket: 32 [ 162.569257][ T6783] tipc: Enabled bearer , priority 0 [ 162.586418][ T6783] netlink: 27 bytes leftover after parsing attributes in process `syz.1.926'. [ 162.686172][ T6789] [ 162.688537][ T6789] ====================================================== [ 162.695548][ T6789] WARNING: possible circular locking dependency detected [ 162.702571][ T6789] 5.15.189-syzkaller #0 Not tainted [ 162.707765][ T6789] ------------------------------------------------------ [ 162.714790][ T6789] syz.1.928/6789 is trying to acquire lock: [ 162.720672][ T6789] ffff8880766bf120 (sk_lock-AF_AX25){+.+.}-{0:0}, at: ax25_device_event+0x217/0x4f0 [ 162.730083][ T6789] [ 162.730083][ T6789] but task is already holding lock: [ 162.737438][ T6789] ffffffff8d235f48 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x54e/0xe50 [ 162.741495][ T4248] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 162.745709][ T6789] [ 162.745709][ T6789] which lock already depends on the new lock. [ 162.745709][ T6789] [ 162.745716][ T6789] [ 162.745716][ T6789] the existing dependency chain (in reverse order) is: [ 162.770463][ T4248] usb 5-1: config 0 has no interface number 0 [ 162.773069][ T6789] [ 162.773069][ T6789] -> #1 (rtnl_mutex){+.+.}-{3:3}: [ 162.786334][ T6789] __mutex_lock_common+0x1eb/0x2390 [ 162.789341][ T4248] usb 5-1: config 0 interface 2 has no altsetting 0 [ 162.792053][ T6789] mutex_lock_nested+0x17/0x20 [ 162.792071][ T6789] ax25_setsockopt+0x830/0xa40 [ 162.792086][ T6789] __sys_setsockopt+0x2bf/0x3d0 [ 162.792099][ T6789] __x64_sys_setsockopt+0xb1/0xc0 [ 162.792111][ T6789] do_syscall_64+0x4c/0xa0 [ 162.792126][ T6789] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 162.792142][ T6789] [ 162.792142][ T6789] -> #0 (sk_lock-AF_AX25){+.+.}-{0:0}: [ 162.792165][ T6789] __lock_acquire+0x2c33/0x7c60 [ 162.844407][ T6789] lock_acquire+0x197/0x3f0 [ 162.849437][ T6789] lock_sock_nested+0x44/0x100 [ 162.854716][ T6789] ax25_device_event+0x217/0x4f0 [ 162.860174][ T6789] raw_notifier_call_chain+0xcb/0x160 [ 162.866061][ T6789] __dev_notify_flags+0x178/0x2d0 [ 162.871602][ T6789] dev_change_flags+0xe3/0x1a0 [ 162.876891][ T6789] dev_ifsioc+0x147/0xe70 [ 162.881746][ T6789] dev_ioctl+0x55f/0xe50 [ 162.886507][ T6789] sock_do_ioctl+0x222/0x2f0 [ 162.891627][ T6789] sock_ioctl+0x4ed/0x6e0 [ 162.896479][ T6789] __se_sys_ioctl+0xfa/0x170 [ 162.901599][ T6789] do_syscall_64+0x4c/0xa0 [ 162.906536][ T6789] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 162.912949][ T6789] [ 162.912949][ T6789] other info that might help us debug this: [ 162.912949][ T6789] [ 162.923173][ T6789] Possible unsafe locking scenario: [ 162.923173][ T6789] [ 162.930618][ T6789] CPU0 CPU1 [ 162.935982][ T6789] ---- ---- [ 162.941341][ T6789] lock(rtnl_mutex); [ 162.945321][ T6789] lock(sk_lock-AF_AX25); [ 162.952250][ T6789] lock(rtnl_mutex); [ 162.958754][ T6789] lock(sk_lock-AF_AX25); [ 162.963165][ T6789] [ 162.963165][ T6789] *** DEADLOCK *** [ 162.963165][ T6789] [ 162.971343][ T6789] 1 lock held by syz.1.928/6789: [ 162.976274][ T6789] #0: ffffffff8d235f48 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x54e/0xe50 [ 162.984998][ T6789] [ 162.984998][ T6789] stack backtrace: [ 162.990880][ T6789] CPU: 0 PID: 6789 Comm: syz.1.928 Not tainted 5.15.189-syzkaller #0 [ 162.998939][ T6789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 163.009011][ T6789] Call Trace: [ 163.012289][ T6789] [ 163.015221][ T6789] dump_stack_lvl+0x168/0x230 [ 163.019907][ T6789] ? load_image+0x3b0/0x3b0 [ 163.024418][ T6789] ? show_regs_print_info+0x20/0x20 [ 163.029635][ T6789] ? print_circular_bug+0x12b/0x1a0 [ 163.034838][ T6789] check_noncircular+0x274/0x310 [ 163.039778][ T6789] ? add_chain_block+0x940/0x940 [ 163.044751][ T6789] ? lockdep_lock+0xdc/0x1e0 [ 163.049355][ T6789] ? lockdep_unlock+0x134/0x2d0 [ 163.054201][ T6789] ? mark_lock+0x94/0x320 [ 163.058536][ T6789] __lock_acquire+0x2c33/0x7c60 [ 163.063396][ T6789] ? lock_chain_count+0x20/0x20 [ 163.068261][ T6789] ? mark_lock+0x94/0x320 [ 163.072578][ T6789] ? verify_lock_unused+0x140/0x140 [ 163.077760][ T6789] ? verify_lock_unused+0x140/0x140 [ 163.082985][ T6789] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 163.088947][ T6789] ? lockdep_hardirqs_on_prepare+0x760/0x760 [ 163.094909][ T6789] ? __local_bh_enable_ip+0x12a/0x1b0 [ 163.100261][ T6789] ? mark_lock+0x94/0x320 [ 163.104580][ T6789] lock_acquire+0x197/0x3f0 [ 163.109059][ T6789] ? ax25_device_event+0x217/0x4f0 [ 163.114145][ T6789] ? lock_chain_count+0x20/0x20 [ 163.118977][ T6789] ? read_lock_is_recursive+0x10/0x10 [ 163.124330][ T6789] ? __local_bh_enable_ip+0x12a/0x1b0 [ 163.129689][ T6789] ? lockdep_hardirqs_on+0x94/0x140 [ 163.134882][ T6789] ? __local_bh_enable_ip+0x12a/0x1b0 [ 163.140230][ T6789] ? _local_bh_enable+0xa0/0xa0 [ 163.145062][ T6789] lock_sock_nested+0x44/0x100 [ 163.149815][ T6789] ? ax25_device_event+0x217/0x4f0 [ 163.154903][ T6789] ax25_device_event+0x217/0x4f0 [ 163.159820][ T6789] raw_notifier_call_chain+0xcb/0x160 [ 163.165171][ T6789] __dev_notify_flags+0x178/0x2d0 [ 163.170200][ T6789] ? __dev_change_flags+0x6a0/0x6a0 [ 163.175388][ T6789] ? __dev_change_flags+0x4bb/0x6a0 [ 163.180578][ T6789] ? dev_get_flags+0x1c0/0x1c0 [ 163.185336][ T6789] ? dev_ioctl+0x54e/0xe50 [ 163.189751][ T6789] ? dev_ioctl+0x54e/0xe50 [ 163.191785][ T4248] usb 5-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 163.194155][ T6789] dev_change_flags+0xe3/0x1a0 [ 163.203361][ T4248] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.207898][ T6789] dev_ifsioc+0x147/0xe70 [ 163.207923][ T6789] ? dev_ioctl+0xe50/0xe50 [ 163.218855][ T4248] usb 5-1: Product: syz [ 163.220183][ T6789] ? apparmor_capable+0x12c/0x190 [ 163.224858][ T4248] usb 5-1: Manufacturer: syz [ 163.228726][ T6789] ? full_name_hash+0x8e/0xe0 [ 163.228750][ T6789] dev_ioctl+0x55f/0xe50 [ 163.228767][ T6789] ? _copy_from_user+0x111/0x170 [ 163.228796][ T6789] sock_do_ioctl+0x222/0x2f0 [ 163.234316][ T4248] usb 5-1: SerialNumber: syz [ 163.238350][ T6789] ? sock_show_fdinfo+0xb0/0xb0 [ 163.238380][ T6789] sock_ioctl+0x4ed/0x6e0 [ 163.250064][ T4248] usb 5-1: config 0 descriptor?? [ 163.252163][ T6789] ? sock_poll+0x3f0/0x3f0 [ 163.252188][ T6789] ? bpf_lsm_file_ioctl+0x5/0x10 [ 163.252203][ T6789] ? security_file_ioctl+0x7c/0xa0 [ 163.289719][ T6789] ? sock_poll+0x3f0/0x3f0 [ 163.294123][ T6789] __se_sys_ioctl+0xfa/0x170 [ 163.298698][ T6789] do_syscall_64+0x4c/0xa0 [ 163.303096][ T6789] ? clear_bhb_loop+0x30/0x80 [ 163.307748][ T6789] ? clear_bhb_loop+0x30/0x80 [ 163.312405][ T6789] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 163.318288][ T6789] RIP: 0033:0x7f5be2ca7be9 [ 163.322682][ T6789] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.342270][ T6789] RSP: 002b:00007f5be0f0f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 163.350694][ T6789] RAX: ffffffffffffffda RBX: 00007f5be2ecefa0 RCX: 00007f5be2ca7be9 [ 163.358663][ T6789] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000004 [ 163.366620][ T6789] RBP: 00007f5be2d2ae19 R08: 0000000000000000 R09: 0000000000000000 [ 163.374576][ T6789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 163.382530][ T6789] R13: 00007f5be2ecf038 R14: 00007f5be2ecefa0 R15: 00007ffe437398c8 [ 163.390497][ T6789] [ 163.403201][ T6789] ================================================================== [ 163.411292][ T6789] BUG: KASAN: use-after-free in ax25_dev_device_down+0x35e/0x520 [ 163.419019][ T6789] Write of size 4 at addr ffff88802a6666b8 by task syz.1.928/6789 [ 163.426821][ T6789] [ 163.429143][ T6789] CPU: 0 PID: 6789 Comm: syz.1.928 Not tainted 5.15.189-syzkaller #0 [ 163.437195][ T6789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 163.447234][ T6789] Call Trace: [ 163.450501][ T6789] [ 163.453418][ T6789] dump_stack_lvl+0x168/0x230 [ 163.458123][ T6789] ? show_regs_print_info+0x20/0x20 [ 163.463311][ T6789] ? load_image+0x3b0/0x3b0 [ 163.467823][ T6789] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 163.473200][ T6789] print_address_description+0x60/0x2d0 [ 163.478736][ T6789] ? ax25_dev_device_down+0x35e/0x520 [ 163.484094][ T6789] kasan_report+0xdf/0x130 [ 163.488512][ T6789] ? ax25_dev_device_down+0x35e/0x520 [ 163.493869][ T6789] ? kfree+0xef/0x2a0 [ 163.497837][ T6789] kasan_check_range+0x27b/0x290 [ 163.502773][ T6789] ax25_dev_device_down+0x35e/0x520 [ 163.507952][ T6789] ax25_device_event+0x4b4/0x4f0 [ 163.512877][ T6789] raw_notifier_call_chain+0xcb/0x160 [ 163.518255][ T6789] __dev_notify_flags+0x178/0x2d0 [ 163.523261][ T6789] ? __dev_change_flags+0x6a0/0x6a0 [ 163.528445][ T6789] ? __dev_change_flags+0x4bb/0x6a0 [ 163.533629][ T6789] ? dev_get_flags+0x1c0/0x1c0 [ 163.538383][ T6789] ? dev_ioctl+0x54e/0xe50 [ 163.542776][ T6789] ? dev_ioctl+0x54e/0xe50 [ 163.547173][ T6789] dev_change_flags+0xe3/0x1a0 [ 163.551918][ T6789] dev_ifsioc+0x147/0xe70 [ 163.556241][ T6789] ? dev_ioctl+0xe50/0xe50 [ 163.560652][ T6789] ? apparmor_capable+0x12c/0x190 [ 163.565670][ T6789] ? full_name_hash+0x8e/0xe0 [ 163.570331][ T6789] dev_ioctl+0x55f/0xe50 [ 163.574559][ T6789] ? _copy_from_user+0x111/0x170 [ 163.579474][ T6789] sock_do_ioctl+0x222/0x2f0 [ 163.584044][ T6789] ? sock_show_fdinfo+0xb0/0xb0 [ 163.588883][ T6789] sock_ioctl+0x4ed/0x6e0 [ 163.593200][ T6789] ? sock_poll+0x3f0/0x3f0 [ 163.597599][ T6789] ? bpf_lsm_file_ioctl+0x5/0x10 [ 163.602523][ T6789] ? security_file_ioctl+0x7c/0xa0 [ 163.607612][ T6789] ? sock_poll+0x3f0/0x3f0 [ 163.612014][ T6789] __se_sys_ioctl+0xfa/0x170 [ 163.616612][ T6789] do_syscall_64+0x4c/0xa0 [ 163.621010][ T6789] ? clear_bhb_loop+0x30/0x80 [ 163.625668][ T6789] ? clear_bhb_loop+0x30/0x80 [ 163.630326][ T6789] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 163.636199][ T6789] RIP: 0033:0x7f5be2ca7be9 [ 163.640595][ T6789] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.660177][ T6789] RSP: 002b:00007f5be0f0f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 163.660491][ T2410] tipc: Node number set to 134418688 [ 163.668567][ T6789] RAX: ffffffffffffffda RBX: 00007f5be2ecefa0 RCX: 00007f5be2ca7be9 [ 163.668581][ T6789] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000004 [ 163.668592][ T6789] RBP: 00007f5be2d2ae19 R08: 0000000000000000 R09: 0000000000000000 [ 163.668602][ T6789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 163.668611][ T6789] R13: 00007f5be2ecf038 R14: 00007f5be2ecefa0 R15: 00007ffe437398c8 [ 163.668629][ T6789] [ 163.716613][ T6789] [ 163.718926][ T6789] Allocated by task 6458: [ 163.723245][ T6789] __kasan_kmalloc+0xb5/0xf0 [ 163.727813][ T6789] ax25_dev_device_up+0x50/0x580 [ 163.732728][ T6789] ax25_device_event+0x483/0x4f0 [ 163.737640][ T6789] raw_notifier_call_chain+0xcb/0x160 [ 163.742990][ T6789] __dev_notify_flags+0x178/0x2d0 [ 163.747992][ T6789] dev_change_flags+0xe3/0x1a0 [ 163.752743][ T6789] dev_ifsioc+0x147/0xe70 [ 163.757056][ T6789] dev_ioctl+0x55f/0xe50 [ 163.761325][ T6789] sock_do_ioctl+0x222/0x2f0 [ 163.765910][ T6789] sock_ioctl+0x4ed/0x6e0 [ 163.770219][ T6789] __se_sys_ioctl+0xfa/0x170 [ 163.774787][ T6789] do_syscall_64+0x4c/0xa0 [ 163.779181][ T6789] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 163.785056][ T6789] [ 163.787374][ T6789] Freed by task 6789: [ 163.791332][ T6789] kasan_set_track+0x4b/0x70 [ 163.795914][ T6789] kasan_set_free_info+0x1f/0x40 [ 163.800830][ T6789] ____kasan_slab_free+0xd5/0x110 [ 163.805830][ T6789] slab_free_freelist_hook+0xea/0x170 [ 163.811183][ T6789] kfree+0xef/0x2a0 [ 163.814990][ T6789] ax25_dev_device_down+0x1c0/0x520 [ 163.820208][ T6789] ax25_device_event+0x4b4/0x4f0 [ 163.825121][ T6789] raw_notifier_call_chain+0xcb/0x160 [ 163.830481][ T6789] __dev_notify_flags+0x178/0x2d0 [ 163.835501][ T6789] dev_change_flags+0xe3/0x1a0 [ 163.840245][ T6789] dev_ifsioc+0x147/0xe70 [ 163.844560][ T6789] dev_ioctl+0x55f/0xe50 [ 163.848796][ T6789] sock_do_ioctl+0x222/0x2f0 [ 163.853365][ T6789] sock_ioctl+0x4ed/0x6e0 [ 163.857685][ T6789] __se_sys_ioctl+0xfa/0x170 [ 163.862274][ T6789] do_syscall_64+0x4c/0xa0 [ 163.866686][ T6789] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 163.872558][ T6789] [ 163.874861][ T6789] Last potentially related work creation: [ 163.880547][ T6789] kasan_save_stack+0x35/0x60 [ 163.885210][ T6789] kasan_record_aux_stack+0xb8/0x100 [ 163.890475][ T6789] insert_work+0x54/0x3d0 [ 163.894784][ T6789] __queue_work+0x9c5/0xd50 [ 163.899266][ T6789] queue_work_on+0x11d/0x1d0 [ 163.903833][ T6789] netdevice_event+0x803/0x900 [ 163.908571][ T6789] raw_notifier_call_chain+0xcb/0x160 [ 163.913920][ T6789] call_netdevice_notifiers+0x85/0xc0 [ 163.919268][ T6789] ipvlan_device_event+0x388/0x9e0 [ 163.924355][ T6789] raw_notifier_call_chain+0xcb/0x160 [ 163.929706][ T6789] dev_set_mac_address+0x2c4/0x3d0 [ 163.934793][ T6789] dev_set_mac_address_user+0x2d/0x50 [ 163.940138][ T6789] do_setlink+0x80d/0x3980 [ 163.944529][ T6789] rtnl_newlink+0x1419/0x17d0 [ 163.949185][ T6789] rtnetlink_rcv_msg+0x9b9/0xe60 [ 163.954098][ T6789] netlink_rcv_skb+0x1e0/0x430 [ 163.958844][ T6789] netlink_unicast+0x774/0x920 [ 163.963584][ T6789] netlink_sendmsg+0x8ab/0xbc0 [ 163.968326][ T6789] __sys_sendto+0x423/0x580 [ 163.972804][ T6789] __x64_sys_sendto+0xda/0xf0 [ 163.977453][ T6789] do_syscall_64+0x4c/0xa0 [ 163.981845][ T6789] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 163.987715][ T6789] [ 163.990016][ T6789] Second to last potentially related work creation: [ 163.996573][ T6789] kasan_save_stack+0x35/0x60 [ 164.001259][ T6789] kasan_record_aux_stack+0xb8/0x100 [ 164.006523][ T6789] insert_work+0x54/0x3d0 [ 164.010834][ T6789] __queue_work+0x9c5/0xd50 [ 164.015328][ T6789] queue_work_on+0x11d/0x1d0 [ 164.019893][ T6789] call_usermodehelper_exec+0x26b/0x460 [ 164.025421][ T6789] kobject_uevent_env+0x681/0x890 [ 164.030424][ T6789] driver_register+0x3e2/0x430 [ 164.035189][ T6789] __hid_register_driver+0x126/0x170 [ 164.040458][ T6789] do_one_initcall+0x1ee/0x680 [ 164.045202][ T6789] do_initcall_level+0x137/0x1f0 [ 164.050121][ T6789] do_initcalls+0x4b/0x90 [ 164.054427][ T6789] kernel_init_freeable+0x3ce/0x560 [ 164.059625][ T6789] kernel_init+0x19/0x1b0 [ 164.063950][ T6789] ret_from_fork+0x1f/0x30 [ 164.068387][ T6789] [ 164.070691][ T6789] The buggy address belongs to the object at ffff88802a666600 [ 164.070691][ T6789] which belongs to the cache kmalloc-192 of size 192 [ 164.084718][ T6789] The buggy address is located 184 bytes inside of [ 164.084718][ T6789] 192-byte region [ffff88802a666600, ffff88802a6666c0) [ 164.097974][ T6789] The buggy address belongs to the page: [ 164.103584][ T6789] page:ffffea0000a99980 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2a666 [ 164.113722][ T6789] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 164.121251][ T6789] raw: 00fff00000000200 0000000000000000 0000000100000001 ffff888016841a00 [ 164.129807][ T6789] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 164.138379][ T6789] page dumped because: kasan: bad access detected [ 164.144781][ T6789] page_owner tracks the page as allocated [ 164.150481][ T6789] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 1, ts 9604223480, free_ts 9602963513 [ 164.166078][ T6789] get_page_from_freelist+0x1b77/0x1c60 [ 164.171605][ T6789] __alloc_pages+0x1e1/0x470 [ 164.176173][ T6789] alloc_page_interleave+0x24/0x1e0 [ 164.181349][ T6789] new_slab+0xc0/0x4b0 [ 164.185419][ T6789] ___slab_alloc+0x81e/0xdf0 [ 164.189980][ T6789] kmem_cache_alloc_trace+0x1a5/0x2a0 [ 164.195329][ T6789] call_usermodehelper_setup+0x8a/0x260 [ 164.200852][ T6789] kobject_uevent_env+0x65e/0x890 [ 164.205868][ T6789] driver_register+0x3e2/0x430 [ 164.210619][ T6789] __hid_register_driver+0x126/0x170 [ 164.215896][ T6789] do_one_initcall+0x1ee/0x680 [ 164.220663][ T6789] do_initcall_level+0x137/0x1f0 [ 164.225586][ T6789] do_initcalls+0x4b/0x90 [ 164.229892][ T6789] kernel_init_freeable+0x3ce/0x560 [ 164.235083][ T6789] kernel_init+0x19/0x1b0 [ 164.239387][ T6789] ret_from_fork+0x1f/0x30 [ 164.243777][ T6789] page last free stack trace: [ 164.248421][ T6789] free_unref_page_prepare+0x637/0x6c0 [ 164.253887][ T6789] free_unref_page+0x94/0x280 [ 164.258539][ T6789] __vunmap+0x8ab/0xa40 [ 164.262679][ T6789] free_work+0x56/0x80 [ 164.266725][ T6789] process_one_work+0x863/0x1000 [ 164.271644][ T6789] worker_thread+0xaa8/0x12a0 [ 164.276296][ T6789] kthread+0x436/0x520 [ 164.280342][ T6789] ret_from_fork+0x1f/0x30 [ 164.284740][ T6789] [ 164.287041][ T6789] Memory state around the buggy address: [ 164.292642][ T6789] ffff88802a666580: 00 fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 164.300676][ T6789] ffff88802a666600: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 164.308715][ T6789] >ffff88802a666680: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 164.316765][ T6789] ^ [ 164.322635][ T6789] ffff88802a666700: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 164.330683][ T6789] ffff88802a666780: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 164.338741][ T6789] ================================================================== [ 164.350334][ T6789] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 164.357585][ T6789] CPU: 0 PID: 6789 Comm: syz.1.928 Tainted: G B 5.15.189-syzkaller #0 [ 164.367037][ T6789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 164.377077][ T6789] Call Trace: [ 164.380339][ T6789] [ 164.383250][ T6789] dump_stack_lvl+0x168/0x230 [ 164.387912][ T6789] ? show_regs_print_info+0x20/0x20 [ 164.393092][ T6789] ? load_image+0x3b0/0x3b0 [ 164.397576][ T6789] panic+0x2c9/0x7f0 [ 164.401450][ T6789] ? bpf_jit_dump+0xd0/0xd0 [ 164.405936][ T6789] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 164.411819][ T6789] ? _raw_spin_unlock+0x40/0x40 [ 164.416673][ T6789] ? ax25_dev_device_down+0x35e/0x520 [ 164.422029][ T6789] check_panic_on_warn+0x80/0xa0 [ 164.426954][ T6789] ? ax25_dev_device_down+0x35e/0x520 [ 164.432303][ T6789] end_report+0x6d/0xf0 [ 164.436470][ T6789] kasan_report+0x102/0x130 [ 164.440963][ T6789] ? ax25_dev_device_down+0x35e/0x520 [ 164.446332][ T6789] ? kfree+0xef/0x2a0 [ 164.450308][ T6789] kasan_check_range+0x27b/0x290 [ 164.455231][ T6789] ax25_dev_device_down+0x35e/0x520 [ 164.460410][ T6789] ax25_device_event+0x4b4/0x4f0 [ 164.465326][ T6789] raw_notifier_call_chain+0xcb/0x160 [ 164.470680][ T6789] __dev_notify_flags+0x178/0x2d0 [ 164.475692][ T6789] ? __dev_change_flags+0x6a0/0x6a0 [ 164.480871][ T6789] ? __dev_change_flags+0x4bb/0x6a0 [ 164.486058][ T6789] ? dev_get_flags+0x1c0/0x1c0 [ 164.490799][ T6789] ? dev_ioctl+0x54e/0xe50 [ 164.495193][ T6789] ? dev_ioctl+0x54e/0xe50 [ 164.499588][ T6789] dev_change_flags+0xe3/0x1a0 [ 164.504329][ T6789] dev_ifsioc+0x147/0xe70 [ 164.508637][ T6789] ? dev_ioctl+0xe50/0xe50 [ 164.513033][ T6789] ? apparmor_capable+0x12c/0x190 [ 164.518037][ T6789] ? full_name_hash+0x8e/0xe0 [ 164.522694][ T6789] dev_ioctl+0x55f/0xe50 [ 164.526923][ T6789] ? _copy_from_user+0x111/0x170 [ 164.531841][ T6789] sock_do_ioctl+0x222/0x2f0 [ 164.536423][ T6789] ? sock_show_fdinfo+0xb0/0xb0 [ 164.541278][ T6789] sock_ioctl+0x4ed/0x6e0 [ 164.545601][ T6789] ? sock_poll+0x3f0/0x3f0 [ 164.550005][ T6789] ? bpf_lsm_file_ioctl+0x5/0x10 [ 164.554924][ T6789] ? security_file_ioctl+0x7c/0xa0 [ 164.560018][ T6789] ? sock_poll+0x3f0/0x3f0 [ 164.564414][ T6789] __se_sys_ioctl+0xfa/0x170 [ 164.568987][ T6789] do_syscall_64+0x4c/0xa0 [ 164.573386][ T6789] ? clear_bhb_loop+0x30/0x80 [ 164.578042][ T6789] ? clear_bhb_loop+0x30/0x80 [ 164.582694][ T6789] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 164.588572][ T6789] RIP: 0033:0x7f5be2ca7be9 [ 164.592967][ T6789] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.612550][ T6789] RSP: 002b:00007f5be0f0f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 164.620948][ T6789] RAX: ffffffffffffffda RBX: 00007f5be2ecefa0 RCX: 00007f5be2ca7be9 [ 164.628897][ T6789] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000004 [ 164.636845][ T6789] RBP: 00007f5be2d2ae19 R08: 0000000000000000 R09: 0000000000000000 [ 164.644799][ T6789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 164.652746][ T6789] R13: 00007f5be2ecf038 R14: 00007f5be2ecefa0 R15: 00007ffe437398c8 [ 164.660702][ T6789] [ 164.663893][ T6789] Kernel Offset: disabled [ 164.668208][ T6789] Rebooting in 86400 seconds..