last executing test programs: 2.640852256s ago: executing program 4 (id=31): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000003c0)=@security={'security\x00', 0xe, 0x4, 0x3a8, 0xffffffff, 0xf8, 0xf8, 0x0, 0xffffffff, 0xffffffff, 0x438, 0x438, 0x438, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28}, {0x8, "00d0"}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, [0xffffffff, 0xffffff00, 0x0, 0xffffff00], [0xffffffff, 0xffff00, 0xff000000, 0xff], 'erspan0\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x2b, 0x3, 0xb, 0x42}, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0xffff12dd, {0x9}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x507, 'syz0\x00', {0x4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x290, 0x2e8, 0x2e8, 0x290, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'vlan0\x00', 'geneve1\x00', {}, {}, 0x32}, 0x0, 0xa8, 0x108, 0x0, {0x0, 0x2000000000000}}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@remote}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, [], [], 'wlan1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x348) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newsa={0xf0, 0x10, 0x413, 0x0, 0x8000000, {{@in=@dev={0xac, 0x14, 0x14, 0x41}, @in=@multicast1, 0x0, 0x0, 0x4e28, 0x800, 0x0, 0x0, 0x0, 0x73, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0xc}, 0x0, 0x32}, @in6=@remote, {0x0, 0x0, 0x0, 0x1, 0xfffbffffffffffff, 0x7, 0x8}, {0x0, 0x8, 0xcc}, {0xf6, 0x0, 0xffffffff}, 0x0, 0x0, 0x2, 0x4, 0x1, 0xc}}, 0xf0}}, 0x404c0a0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200)=0x5, 0xfffffe97) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000240)={'filter\x00', 0xb001, 0x4, 0x3a8, 0x0, 0x1d0, 0x0, 0x2c0, 0x2c0, 0x2c0, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d0}}, {{@uncond, 0xc0, 0xe8, 0x0, {0x0, 0x1e03}}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x46e, 0xfffc}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f8) 2.386974881s ago: executing program 4 (id=35): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x32, &(0x7f00000002c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 2.079204249s ago: executing program 1 (id=39): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) listen(0xffffffffffffffff, 0x8) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000200), 0x4) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@generic={&(0x7f00000001c0)='./file0\x00', 0x0, 0x18}, 0x18) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}) write$tun(r0, &(0x7f0000000e40)={@val={0x1c, 0x800}, @val={0x2, 0x0, 0x2, 0x7, 0x1, 0x404}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x3, 0x27, 0xfc0, 0x65, 0x0, 0xc, 0x11, 0x0, @private=0xa010102, @broadcast}, {0x4e20, 0x4e21, 0xfac, 0x0, @wg=@data={0x4, 0x6, 0x1, "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"}}}}}, 0xfce) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) 1.817630344s ago: executing program 3 (id=45): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) listen(r1, 0x8) accept4(r1, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 1.695565501s ago: executing program 1 (id=47): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x5c, r4, 0x1, 0x0, 0x0, {0x2c}, [@handle=@pci={{0x8}, {0x11}}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x5c}}, 0x4040) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r2) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x8, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0xe, 0xffff}, {0xc, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x49}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[], 0x50}}, 0x4008840) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="638a08000000feffffff05"], 0x14}}, 0xa000000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(0x0, r7) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r12, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000002e80)={0x20, r11, 0x1, 0x10001, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_SEC_LEVEL={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x48894}, 0x8000) socket$packet(0x11, 0x0, 0x300) sendmsg$IEEE802154_SET_MACPARAMS(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r8, 0x20, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4004040) sendmsg$IEEE802154_ASSOCIATE_REQ(r7, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6819130f3aa8b09c}, 0x40000) r14 = socket$alg(0x26, 0x5, 0x0) bind$alg(r14, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1-avx2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r14, 0x117, 0x1, 0x0, 0x0) r15 = accept4(r14, 0x0, 0x0, 0x80800) sendmmsg$alg(r15, 0x0, 0x0, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r8, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x8810}, 0x24008000) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x3d, 0x9, 0x0, 0x0, {0x1}, [@typed={0x4}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @ipv4=@multicast1}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x30}}, 0x0) 1.521507381s ago: executing program 2 (id=50): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2, 0x4, {0x0, 0x0, 0x4}, 0xff}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000340)={'vxcan0\x00', 0x0}) sendmsg$can_j1939(r1, &(0x7f00000004c0)={&(0x7f0000000380)={0x1d, r3, 0x2, {0x0, 0x0, 0x3}, 0xfe}, 0x18, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x20040908}, 0x20000000) 1.397953129s ago: executing program 4 (id=51): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x208, 0x8, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) 1.397795008s ago: executing program 2 (id=52): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x4, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}, 0x1, 0xba01}, 0x810) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001200576d100000000000000007000000", @ANYRES32=0x0, @ANYBLOB="000002000255000008001d00ca0e00000a000100"], 0x3c}}, 0x0) 1.397312839s ago: executing program 1 (id=53): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket(0x1a, 0x6, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r3, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000003340)={0x0, 0x0, &(0x7f0000003300)={&(0x7f00000032c0)=@getnexthop={0x1c, 0x6a, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NHA_GROUPS={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc4}, 0x4000804) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 1.395033279s ago: executing program 0 (id=61): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0x100000001) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) close(r0) 1.271076256s ago: executing program 4 (id=54): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000280)={0x8, 0x4e24, @broadcast}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000240)='\b\x00', 0x2}, {&(0x7f00000002c0)="dac2b42c9f1341", 0x7}], 0x2, &(0x7f0000000080)=ANY=[], 0x30}, 0x0) 1.268090906s ago: executing program 2 (id=55): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000006240)={0x1f, @none}, 0x8) socket$kcm(0x2, 0x5, 0x84) socket$alg(0x26, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000011c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000008000000060000000000000c03000000000000000000000201000000000000000000000d000000000000000000005f"], 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) pselect6(0x40, &(0x7f0000000000)={0x0, 0x8, 0x7, 0x4000000000010000, 0x10, 0x1, 0xffff, 0x5}, 0x0, &(0x7f0000000240)={0x1ff, 0x1ff, 0x400000000000000e, 0xfffffffffffffffb, 0x457, 0x84, 0x3, 0xfff}, &(0x7f00000002c0)={0x0, 0x3938700}, 0x0) 1.218752129s ago: executing program 0 (id=56): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a00)=@newtfilter={0x34, 0x28, 0xd27, 0x1000001, 0x0, {0x0, 0x0, 0x0, r5, {0xa, 0x9}, {0x8}, {0x1fff2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x48c0) 1.177299671s ago: executing program 4 (id=57): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x2, 0x0, 0xfffffffc, 0x8}], 0x10, 0x0, @void, @value}, 0x94) sendmsg$inet(r0, &(0x7f0000000c40)={&(0x7f0000000ac0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000bc0)=[{&(0x7f0000000b00)="b1", 0x1}], 0x1}, 0x4000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x10, &(0x7f0000000000)=r3, 0xc) 1.078806357s ago: executing program 0 (id=58): r0 = socket(0x1d, 0x2, 0x6) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000740)={'sit0\x00', &(0x7f00000006c0)={'sit0\x00', 0x0, 0x80, 0x1, 0x9, 0xcc3, {{0x5, 0x4, 0x3, 0x32, 0x14, 0x64, 0x0, 0x9, 0x4, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x1b}}}}}) 966.811803ms ago: executing program 0 (id=59): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r0, 0x8be0, &(0x7f0000000000)={'wlan1\x00', @remote}) 914.550567ms ago: executing program 0 (id=60): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000980)={0x6}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x20, 0x52, 0x1, 0x0, 0x4, {0xa}, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0xfffffffe}]}, 0x20}}, 0x4000044) 909.196727ms ago: executing program 3 (id=62): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r0, 0x0, 0x0, 0x98d, 0x1) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, 0x0, &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xfffffffffffffe0d, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e0000001000810800b62aa73772cc9f12adf848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0) 746.934657ms ago: executing program 0 (id=63): pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) readv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/243, 0xfffffdef}], 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r3}, 0x10) r4 = socket$unix(0x1, 0x5, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r4, 0x407) accept4(r4, 0x0, 0x0, 0x0) close(0x4) 571.765876ms ago: executing program 3 (id=64): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000000c0), 0x4) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x1) 450.541124ms ago: executing program 3 (id=65): socket$inet6(0xa, 0x800000000000002, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, 0x0, &(0x7f00000000c0)}, 0x20) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r1, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES16=r1], 0x40c}}, 0x0) 290.959873ms ago: executing program 2 (id=66): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001040)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0x2, 0x2}, {@in6=@remote, 0x0, 0x32}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0xe}, 0x0) 272.882034ms ago: executing program 1 (id=67): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x439, 0x0, 0xfffffffd, {}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x9d56}, @IFLA_TXQLEN={0x8, 0xd, 0x10000}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}]}, 0x44}}, 0x0) 241.804006ms ago: executing program 3 (id=68): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xe, 0x4, 0x6000}, 0x1c) 195.026979ms ago: executing program 4 (id=69): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba9432}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0xa, 0x11, r1, 0xa8cfb000) readv(r0, &(0x7f0000000fc0)=[{&(0x7f0000001400)=""/227, 0xe3}], 0x1) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 165.42051ms ago: executing program 2 (id=70): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0x503, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x0) 127.878062ms ago: executing program 1 (id=71): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0xf, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000bb000000bf0900040000000055090100000000009500000000000000bf91000000000000b70200000000000085000000ba000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) 71.028246ms ago: executing program 3 (id=72): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000020ac1e000100000000000000000000000000000000000000000a0040", @ANYRES32=0x0], 0xb8}}, 0x0) 58.847687ms ago: executing program 2 (id=73): r0 = socket(0x40000000015, 0x805, 0x0) getsockopt(r0, 0x114, 0x2713, &(0x7f0000000440)=""/102396, &(0x7f00000000c0)=0x18ffc) 0s ago: executing program 1 (id=74): r0 = socket$vsock_stream(0x28, 0x1, 0x0) unshare(0x20000400) setsockopt$sock_int(r0, 0x1, 0x26, &(0x7f0000000a00)=0x1, 0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.82' (ED25519) to the list of known hosts. syzkaller login: [ 52.950279][ T4154] cgroup: Unknown subsys name 'net' [ 53.077629][ T4154] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 54.500692][ T4154] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 56.008113][ T4167] chnl_net:caif_netlink_parms(): no params data found [ 56.113329][ T4168] chnl_net:caif_netlink_parms(): no params data found [ 56.136393][ T4176] chnl_net:caif_netlink_parms(): no params data found [ 56.149689][ T4169] chnl_net:caif_netlink_parms(): no params data found [ 56.266168][ T4167] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.273356][ T4167] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.282276][ T4167] device bridge_slave_0 entered promiscuous mode [ 56.294090][ T4167] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.301634][ T4167] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.309381][ T4167] device bridge_slave_1 entered promiscuous mode [ 56.371881][ T4178] chnl_net:caif_netlink_parms(): no params data found [ 56.382828][ T4167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.399046][ T4168] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.406525][ T4168] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.414952][ T4168] device bridge_slave_0 entered promiscuous mode [ 56.422966][ T4176] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.430026][ T4176] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.438275][ T4176] device bridge_slave_0 entered promiscuous mode [ 56.449638][ T4176] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.456784][ T4176] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.464804][ T4176] device bridge_slave_1 entered promiscuous mode [ 56.473691][ T4167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.490525][ T4168] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.498072][ T4168] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.506400][ T4168] device bridge_slave_1 entered promiscuous mode [ 56.540899][ T4169] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.548164][ T4169] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.556339][ T4169] device bridge_slave_0 entered promiscuous mode [ 56.596720][ T4167] team0: Port device team_slave_0 added [ 56.602941][ T4169] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.610101][ T4169] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.618504][ T4169] device bridge_slave_1 entered promiscuous mode [ 56.630333][ T4168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.641367][ T4176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.652338][ T4168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.666424][ T4167] team0: Port device team_slave_1 added [ 56.688715][ T4176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.752633][ T4169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.777841][ T4168] team0: Port device team_slave_0 added [ 56.786184][ T4168] team0: Port device team_slave_1 added [ 56.792747][ T4167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.799685][ T4167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.826221][ T4167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.839607][ T4169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.849125][ T4178] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.856785][ T4178] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.865146][ T4178] device bridge_slave_0 entered promiscuous mode [ 56.875736][ T4176] team0: Port device team_slave_0 added [ 56.888863][ T4167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.896004][ T4167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.922189][ T4167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.945043][ T4178] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.952527][ T4178] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.960389][ T4178] device bridge_slave_1 entered promiscuous mode [ 56.968357][ T4176] team0: Port device team_slave_1 added [ 56.984197][ T4168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.991213][ T4168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.017568][ T4168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.067712][ T4168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.075035][ T4168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.101341][ T4168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.114828][ T4169] team0: Port device team_slave_0 added [ 57.148911][ T4169] team0: Port device team_slave_1 added [ 57.164148][ T4178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.175585][ T4176] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.182602][ T4176] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.208589][ T4176] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.223080][ T4167] device hsr_slave_0 entered promiscuous mode [ 57.229823][ T4167] device hsr_slave_1 entered promiscuous mode [ 57.245775][ T4178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.255555][ T4176] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.262626][ T4176] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.288903][ T4176] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.340610][ T4169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.347717][ T4169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.373852][ T4169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.395426][ T4178] team0: Port device team_slave_0 added [ 57.412232][ T4168] device hsr_slave_0 entered promiscuous mode [ 57.419029][ T4168] device hsr_slave_1 entered promiscuous mode [ 57.426164][ T4168] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.434073][ T4168] Cannot create hsr debugfs directory [ 57.443801][ T4169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.450746][ T4169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.476902][ T4169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.489621][ T4178] team0: Port device team_slave_1 added [ 57.526267][ T4176] device hsr_slave_0 entered promiscuous mode [ 57.533171][ T4176] device hsr_slave_1 entered promiscuous mode [ 57.539716][ T4176] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.547494][ T4176] Cannot create hsr debugfs directory [ 57.591742][ T4178] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.598696][ T4178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.624905][ T4178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.643815][ T4178] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.650841][ T4178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.676871][ T4178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.702086][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 57.702086][ T23] Bluetooth: hci4: command 0x0409 tx timeout [ 57.715437][ T23] Bluetooth: hci1: command 0x0409 tx timeout [ 57.727577][ T23] Bluetooth: hci2: command 0x0409 tx timeout [ 57.763760][ T4169] device hsr_slave_0 entered promiscuous mode [ 57.770449][ T4169] device hsr_slave_1 entered promiscuous mode [ 57.777164][ T4169] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.784990][ T23] Bluetooth: hci3: command 0x0409 tx timeout [ 57.787976][ T4169] Cannot create hsr debugfs directory [ 57.820976][ T4178] device hsr_slave_0 entered promiscuous mode [ 57.827778][ T4178] device hsr_slave_1 entered promiscuous mode [ 57.834477][ T4178] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.845872][ T4178] Cannot create hsr debugfs directory [ 58.082530][ T4168] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 58.094153][ T4168] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 58.104140][ T4168] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 58.119180][ T4168] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 58.181675][ T4167] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 58.191010][ T4167] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 58.213963][ T4167] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 58.232892][ T4167] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 58.270455][ T4176] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 58.280369][ T4176] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 58.307649][ T4176] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 58.317915][ T4176] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 58.407362][ T4169] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 58.418727][ T4169] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 58.434071][ T4168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.451515][ T4169] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 58.476682][ T4167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.484025][ T4169] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 58.512582][ T764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.522704][ T764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.530388][ T764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.539003][ T764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.550026][ T4168] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.566556][ T4167] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.600042][ T4178] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 58.614252][ T4178] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 58.627036][ T4178] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 58.636315][ T764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.645147][ T764] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.655353][ T764] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.662676][ T764] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.671223][ T764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.680259][ T764] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.689549][ T764] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.696662][ T764] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.705241][ T764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.714007][ T764] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.722637][ T764] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.729667][ T764] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.739004][ T764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.748443][ T764] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.758046][ T764] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.765187][ T764] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.773114][ T764] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.781283][ T764] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.797629][ T4178] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 58.817041][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.826465][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.837816][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.847116][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.856968][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.866008][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.875119][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.884146][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.902883][ T4176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.928005][ T4176] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.948008][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.957690][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.966928][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.975939][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.984545][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.993039][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.000857][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.010233][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.020669][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.029789][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.039415][ T4167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.055853][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.065251][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.075162][ T1267] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.082293][ T1267] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.090185][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.100153][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.129885][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.138559][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.148607][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.160226][ T1267] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.167413][ T1267] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.177899][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.187050][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.199611][ T4168] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.212767][ T4168] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.228780][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.246361][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.256458][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.298933][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.311844][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.328552][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.337734][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.353168][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.363231][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.397792][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.406750][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.433480][ T4169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.449576][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.458463][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.469722][ T4176] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.490705][ T4169] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.506574][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.514475][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.522475][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.530222][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.538880][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.546999][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.563627][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.576579][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.587877][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.595033][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.615651][ T4167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.629564][ T4168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.654416][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.663163][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.672824][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.682774][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.689846][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.698903][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.709213][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.738740][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.748852][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.769850][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.782087][ T21] Bluetooth: hci2: command 0x041b tx timeout [ 59.790201][ T4178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.796907][ T21] Bluetooth: hci1: command 0x041b tx timeout [ 59.803234][ T21] Bluetooth: hci4: command 0x041b tx timeout [ 59.813939][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.822512][ T21] Bluetooth: hci0: command 0x041b tx timeout [ 59.827338][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.836761][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.846791][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.861887][ T4216] Bluetooth: hci3: command 0x041b tx timeout [ 59.873803][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.883422][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.893605][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.902551][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.919704][ T4176] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.946972][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.957840][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.966703][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.975625][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.984534][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.994038][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.005481][ T4168] device veth0_vlan entered promiscuous mode [ 60.014519][ T4169] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.033572][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.048584][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.057504][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.072372][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.091534][ T4168] device veth1_vlan entered promiscuous mode [ 60.102101][ T4178] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.111007][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.122678][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.130929][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.146133][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.154240][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.162783][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.173188][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.185084][ T4167] device veth0_vlan entered promiscuous mode [ 60.223927][ T4167] device veth1_vlan entered promiscuous mode [ 60.244992][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.260535][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.270626][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.277749][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.293167][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.302265][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.310684][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.317792][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.326472][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.335176][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.345417][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.353847][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.362741][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.382204][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.390980][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.401253][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.410713][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.419676][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.429981][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.460894][ T4168] device veth0_macvtap entered promiscuous mode [ 60.469519][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.479991][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.488467][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.497428][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.505916][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.515457][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.524549][ T4176] device veth0_vlan entered promiscuous mode [ 60.540708][ T4178] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 60.552627][ T4178] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.567985][ T4169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.579962][ T4168] device veth1_macvtap entered promiscuous mode [ 60.589641][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.598068][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.606909][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.617446][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.626750][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.635244][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.648504][ T4176] device veth1_vlan entered promiscuous mode [ 60.709012][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.717786][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.733554][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.755517][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.767385][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.783693][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.799111][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.809704][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.825280][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.837581][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.846711][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.856645][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.870642][ T4169] device veth0_vlan entered promiscuous mode [ 60.880369][ T4168] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.889808][ T4168] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.898753][ T4168] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.908541][ T4168] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.932822][ T4167] device veth0_macvtap entered promiscuous mode [ 60.948106][ T4167] device veth1_macvtap entered promiscuous mode [ 60.958407][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.967248][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.975670][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.985304][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.994018][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.001933][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.009391][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.018157][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.056057][ T4176] device veth0_macvtap entered promiscuous mode [ 61.075195][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.086146][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.098360][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.112568][ T4178] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.120038][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.130000][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.141460][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.150324][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.161420][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.175014][ T4176] device veth1_macvtap entered promiscuous mode [ 61.201895][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.212679][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.226366][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.236096][ T4169] device veth1_vlan entered promiscuous mode [ 61.265667][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.291114][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.309961][ T4167] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.319924][ T4167] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.328852][ T4167] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.338621][ T4167] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.351564][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.362219][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.372514][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.383887][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.396449][ T4176] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.442222][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.457800][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.488857][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.498197][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.510952][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.521780][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.532294][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.543403][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.555249][ T4176] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.582912][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.591664][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.600151][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.610133][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.620617][ T4169] device veth0_macvtap entered promiscuous mode [ 61.631518][ T4176] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.640229][ T4176] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.649337][ T4176] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.659009][ T4176] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.689580][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.698343][ T4169] device veth1_macvtap entered promiscuous mode [ 61.704782][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.716671][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.726612][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.735187][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.743594][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.752178][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.759959][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.769476][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.810334][ T4178] device veth0_vlan entered promiscuous mode [ 61.871573][ T4216] Bluetooth: hci0: command 0x040f tx timeout [ 61.877992][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.890144][ T4224] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.899267][ T4224] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.899466][ T4216] Bluetooth: hci4: command 0x040f tx timeout [ 61.909618][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.923111][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.927460][ T4216] Bluetooth: hci1: command 0x040f tx timeout [ 61.933976][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.940795][ T4216] Bluetooth: hci2: command 0x040f tx timeout [ 61.954877][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.966282][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.970488][ T4216] Bluetooth: hci3: command 0x040f tx timeout [ 61.979769][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.993059][ T764] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.001019][ T764] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.002999][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.022385][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.032540][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.043606][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.053719][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.065175][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.076709][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.090920][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.099454][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.108234][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.118516][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.127746][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.136831][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.165899][ T4169] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.177692][ T4169] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.187265][ T4169] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.196137][ T4169] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.214159][ T4178] device veth1_vlan entered promiscuous mode [ 62.284477][ T4224] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.318527][ T764] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.336368][ T4224] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.340755][ T4178] device veth0_macvtap entered promiscuous mode [ 62.345665][ T764] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.381464][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.390054][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.420646][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.430141][ T764] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.451618][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.463478][ T764] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.466866][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.478967][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.499246][ T4178] device veth1_macvtap entered promiscuous mode [ 62.544890][ T764] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.568085][ T764] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.577287][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.623303][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.641177][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.667270][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.680336][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.690914][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.700930][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.711580][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.729532][ T4178] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.757306][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.770180][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.780576][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.796433][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.816733][ T4256] netlink: 'syz.0.1': attribute type 2 has an invalid length. [ 62.832468][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.861472][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.882105][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.916759][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.933107][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.947483][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.965424][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.979398][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.998557][ T4178] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.077254][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.103119][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.113896][ T4262] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7'. [ 63.125566][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.136964][ T4178] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.160180][ T4178] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.174663][ T4178] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.181252][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.188131][ T4178] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.251853][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.401009][ T4264] Zero length message leads to an empty skb [ 64.054800][ T2238] Bluetooth: hci1: command 0x0419 tx timeout [ 64.060992][ T2238] Bluetooth: hci4: command 0x0419 tx timeout [ 64.067312][ T2238] Bluetooth: hci0: command 0x0419 tx timeout [ 64.074140][ T4216] Bluetooth: hci3: command 0x0419 tx timeout [ 64.080541][ T4216] Bluetooth: hci2: command 0x0419 tx timeout [ 64.138510][ T4266] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.146885][ T4266] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.663399][ T4266] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.714474][ T4266] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.190737][ T4266] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.199763][ T4266] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.209016][ T4266] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.218059][ T4266] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.359241][ T4277] bridge0: port 3(gretap0) entered blocking state [ 65.381844][ T4277] bridge0: port 3(gretap0) entered disabled state [ 65.400450][ T4277] device gretap0 entered promiscuous mode [ 65.455906][ T4284] device gretap0 left promiscuous mode [ 65.459671][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.468747][ T4284] bridge0: port 3(gretap0) entered disabled state [ 65.480904][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.577007][ T764] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.601768][ T4221] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.628157][ T4221] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.670064][ T764] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.080799][ T4320] ksmbd: Unknown IPC event: 6, ignore. [ 66.269407][ T4327] syz.3.23 uses obsolete (PF_INET,SOCK_PACKET) [ 66.453664][ T4337] netlink: 8 bytes leftover after parsing attributes in process `syz.2.26'. [ 66.720304][ T4345] xt_l2tp: v2 sid > 0xffff: 262144 [ 66.801001][ T4345] sch_tbf: peakrate 64 is lower than or equals to rate 9416279242649327955 ! [ 67.044457][ T4359] netlink: 32 bytes leftover after parsing attributes in process `syz.2.33'. [ 67.084235][ T4359] tipc: Invalid UDP bearer configuration [ 67.084297][ T4359] tipc: Enabling of bearer rejected, failed to enable media [ 67.186336][ T4368] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 67.485303][ T4381] netlink: 8 bytes leftover after parsing attributes in process `syz.3.40'. [ 67.873326][ T4395] netlink: 'syz.1.47': attribute type 1 has an invalid length. [ 68.265148][ T4414] netlink: 8 bytes leftover after parsing attributes in process `syz.0.56'. [ 68.641439][ T4426] netlink: 'syz.3.62': attribute type 10 has an invalid length. [ 68.742687][ T4426] team0: Port device dummy0 added [ 68.812134][ T4426] syz.3.62 (4426) used greatest stack depth: 18672 bytes left [ 68.924692][ T4432] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 69.036739][ T4435] netlink: 136 bytes leftover after parsing attributes in process `syz.3.65'. [ 69.067739][ T4435] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 69.383273][ T4449] ================================================================== [ 69.391633][ T4449] BUG: KASAN: slab-out-of-bounds in xfrm_policy_inexact_list_reinsert+0x5b5/0x660 [ 69.400874][ T4449] Read of size 1 at addr ffff8880740d9600 by task syz.3.72/4449 [ 69.408521][ T4449] [ 69.410866][ T4449] CPU: 0 PID: 4449 Comm: syz.3.72 Not tainted 5.15.178-syzkaller #0 [ 69.418860][ T4449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 69.428949][ T4449] Call Trace: [ 69.432245][ T4449] [ 69.435193][ T4449] dump_stack_lvl+0x1e3/0x2d0 [ 69.439899][ T4449] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 69.445553][ T4449] ? _printk+0xd1/0x120 [ 69.449741][ T4449] ? __wake_up_klogd+0xcc/0x100 [ 69.454620][ T4449] ? panic+0x860/0x860 [ 69.458714][ T4449] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 69.464208][ T4449] print_address_description+0x63/0x3b0 [ 69.469781][ T4449] ? xfrm_policy_inexact_list_reinsert+0x5b5/0x660 [ 69.476308][ T4449] kasan_report+0x16b/0x1c0 [ 69.480837][ T4449] ? xfrm_policy_inexact_list_reinsert+0x5b5/0x660 [ 69.487373][ T4449] xfrm_policy_inexact_list_reinsert+0x5b5/0x660 [ 69.493733][ T4449] ? __lock_acquire+0x1ff0/0x1ff0 [ 69.498794][ T4449] xfrm_policy_inexact_insert_node+0x8e7/0xb00 [ 69.504992][ T4449] xfrm_policy_inexact_alloc_chain+0x5ff/0xe20 [ 69.511184][ T4449] ? xfrm_policy_inexact_insert+0xe1/0x13c0 [ 69.517110][ T4449] xfrm_policy_inexact_insert+0xe1/0x13c0 [ 69.522858][ T4449] ? do_raw_spin_lock+0x14a/0x370 [ 69.527900][ T4449] ? __bpf_trace_softirq+0x10/0x10 [ 69.533030][ T4449] ? __rwlock_init+0x140/0x140 [ 69.537813][ T4449] ? init_timer_key+0x17c/0x2d0 [ 69.542688][ T4449] ? policy_hash_bysel+0x12c/0x7c0 [ 69.547824][ T4449] xfrm_policy_insert+0xe1/0x920 [ 69.552791][ T4449] xfrm_add_policy+0x4f2/0x9b0 [ 69.557610][ T4449] ? xfrm_dump_sa_done+0xc0/0xc0 [ 69.562560][ T4449] ? apparmor_capable+0x12e/0x190 [ 69.567591][ T4449] ? __nla_parse+0x3c/0x50 [ 69.572025][ T4449] xfrm_user_rcv_msg+0x6ea/0xa40 [ 69.576971][ T4449] ? xfrm_netlink_rcv+0x80/0x80 [ 69.581848][ T4449] ? __mutex_lock_common+0x444/0x25a0 [ 69.587223][ T4449] ? __copy_skb_header+0x47b/0x600 [ 69.592337][ T4449] netlink_rcv_skb+0x1cf/0x410 [ 69.597108][ T4449] ? xfrm_netlink_rcv+0x80/0x80 [ 69.601977][ T4449] ? netlink_ack+0xb10/0xb10 [ 69.606584][ T4449] xfrm_netlink_rcv+0x70/0x80 [ 69.611273][ T4449] netlink_unicast+0x7b6/0x980 [ 69.616041][ T4449] ? netlink_detachskb+0x90/0x90 [ 69.620980][ T4449] ? __virt_addr_valid+0x3bb/0x460 [ 69.626088][ T4449] ? 0xffffffff81000000 [ 69.630235][ T4449] ? __check_object_size+0x300/0x410 [ 69.635522][ T4449] ? bpf_lsm_netlink_send+0x5/0x10 [ 69.640635][ T4449] netlink_sendmsg+0xa30/0xd60 [ 69.645409][ T4449] ? netlink_getsockopt+0x5b0/0x5b0 [ 69.650610][ T4449] ? plist_check_list+0x20d/0x220 [ 69.655634][ T4449] ? aa_sock_msg_perm+0x91/0x150 [ 69.660581][ T4449] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 69.665868][ T4449] ? security_socket_sendmsg+0x7d/0xa0 [ 69.671327][ T4449] ? netlink_getsockopt+0x5b0/0x5b0 [ 69.676549][ T4449] ____sys_sendmsg+0x59e/0x8f0 [ 69.681314][ T4449] ? iovec_from_user+0x300/0x390 [ 69.686254][ T4449] ? __sys_sendmsg_sock+0x30/0x30 [ 69.691287][ T4449] ___sys_sendmsg+0x252/0x2e0 [ 69.695971][ T4449] ? __sys_sendmsg+0x260/0x260 [ 69.700766][ T4449] ? __fdget+0x191/0x220 [ 69.705007][ T4449] __se_sys_sendmsg+0x19a/0x260 [ 69.709855][ T4449] ? __x64_sys_sendmsg+0x80/0x80 [ 69.714803][ T4449] ? syscall_enter_from_user_mode+0x2e/0x240 [ 69.720778][ T4449] ? lockdep_hardirqs_on+0x94/0x130 [ 69.725971][ T4449] ? syscall_enter_from_user_mode+0x2e/0x240 [ 69.731949][ T4449] do_syscall_64+0x3b/0xb0 [ 69.736389][ T4449] ? clear_bhb_loop+0x15/0x70 [ 69.741068][ T4449] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 69.746962][ T4449] RIP: 0033:0x7f0dca905169 [ 69.751390][ T4449] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.770988][ T4449] RSP: 002b:00007f0dc876e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 69.779407][ T4449] RAX: ffffffffffffffda RBX: 00007f0dcab1dfa0 RCX: 00007f0dca905169 [ 69.787399][ T4449] RDX: 0000000000000000 RSI: 0000400000000580 RDI: 0000000000000005 [ 69.795368][ T4449] RBP: 00007f0dca9862a0 R08: 0000000000000000 R09: 0000000000000000 [ 69.803336][ T4449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 69.811306][ T4449] R13: 0000000000000000 R14: 00007f0dcab1dfa0 R15: 00007fffbc913cd8 [ 69.819306][ T4449] [ 69.822318][ T4449] [ 69.824637][ T4449] Allocated by task 4449: [ 69.828951][ T4449] ____kasan_kmalloc+0xba/0xf0 [ 69.833711][ T4449] __kmalloc+0x168/0x300 [ 69.837951][ T4449] sk_prot_alloc+0xe0/0x200 [ 69.842451][ T4449] sk_alloc+0x35/0x310 [ 69.846513][ T4449] pfkey_create+0xda/0x580 [ 69.850920][ T4449] __sock_create+0x460/0x8f0 [ 69.855499][ T4449] __sys_socket+0x132/0x370 [ 69.859991][ T4449] __x64_sys_socket+0x76/0x80 [ 69.864659][ T4449] do_syscall_64+0x3b/0xb0 [ 69.869066][ T4449] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 69.874952][ T4449] [ 69.877282][ T4449] The buggy address belongs to the object at ffff8880740d9000 [ 69.877282][ T4449] which belongs to the cache kmalloc-2k of size 2048 [ 69.891333][ T4449] The buggy address is located 1536 bytes inside of [ 69.891333][ T4449] 2048-byte region [ffff8880740d9000, ffff8880740d9800) [ 69.904904][ T4449] The buggy address belongs to the page: [ 69.910545][ T4449] page:ffffea0001d03600 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff8880740df000 pfn:0x740d8 [ 69.922013][ T4449] head:ffffea0001d03600 order:3 compound_mapcount:0 compound_pincount:0 [ 69.930357][ T4449] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 69.938347][ T4449] raw: 00fff00000010200 ffffea000086aa08 ffffea0001e9c208 ffff888017442000 [ 69.946926][ T4449] raw: ffff8880740df000 0000000000080005 00000001ffffffff 0000000000000000 [ 69.955495][ T4449] page dumped because: kasan: bad access detected [ 69.961900][ T4449] page_owner tracks the page as allocated [ 69.967617][ T4449] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4214, ts 60958478811, free_ts 60927491517 [ 69.986838][ T4449] get_page_from_freelist+0x3b78/0x3d40 [ 69.992398][ T4449] __alloc_pages+0x272/0x700 [ 69.996987][ T4449] new_slab+0xbb/0x4b0 [ 70.001178][ T4449] ___slab_alloc+0x6f6/0xe10 [ 70.005767][ T4449] __kmalloc_node_track_caller+0x1f6/0x390 [ 70.011690][ T4449] __alloc_skb+0x12c/0x590 [ 70.016113][ T4449] alloc_skb_with_frags+0xa3/0x780 [ 70.021218][ T4449] sock_alloc_send_pskb+0x915/0xa50 [ 70.026407][ T4449] mld_newpack+0x1b4/0xa20 [ 70.030816][ T4449] add_grec+0x1328/0x1770 [ 70.035135][ T4449] mld_ifc_work+0x68f/0xc90 [ 70.039633][ T4449] process_one_work+0x8a1/0x10c0 [ 70.044561][ T4449] worker_thread+0xaca/0x1280 [ 70.049232][ T4449] kthread+0x3f6/0x4f0 [ 70.053302][ T4449] ret_from_fork+0x1f/0x30 [ 70.057712][ T4449] page last free stack trace: [ 70.062370][ T4449] free_unref_page_prepare+0xc34/0xcf0 [ 70.067821][ T4449] free_unref_page+0x95/0x2d0 [ 70.072490][ T4449] __unfreeze_partials+0x1b7/0x210 [ 70.077601][ T4449] put_cpu_partial+0x132/0x1a0 [ 70.082361][ T4449] ___cache_free+0xe3/0x100 [ 70.086855][ T4449] qlist_free_all+0x36/0x90 [ 70.091355][ T4449] kasan_quarantine_reduce+0x162/0x180 [ 70.096825][ T4449] __kasan_slab_alloc+0x2f/0xc0 [ 70.101665][ T4449] slab_post_alloc_hook+0x53/0x380 [ 70.106773][ T4449] kmem_cache_alloc_trace+0xfb/0x290 [ 70.112053][ T4449] __ipv6_dev_mc_inc+0x426/0xa80 [ 70.116999][ T4449] addrconf_dad_work+0x420/0x1720 [ 70.122018][ T4449] process_one_work+0x8a1/0x10c0 [ 70.126956][ T4449] worker_thread+0xaca/0x1280 [ 70.131634][ T4449] kthread+0x3f6/0x4f0 [ 70.135701][ T4449] ret_from_fork+0x1f/0x30 [ 70.140113][ T4449] [ 70.142428][ T4449] Memory state around the buggy address: [ 70.148044][ T4449] ffff8880740d9500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 70.156093][ T4449] ffff8880740d9580: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc fc [ 70.164142][ T4449] >ffff8880740d9600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 70.172187][ T4449] ^ [ 70.176241][ T4449] ffff8880740d9680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 70.184293][ T4449] ffff8880740d9700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 70.192342][ T4449] ================================================================== [ 70.200386][ T4449] Disabling lock debugging due to kernel taint [ 70.206646][ T4449] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 70.213840][ T4449] CPU: 0 PID: 4449 Comm: syz.3.72 Tainted: G B 5.15.178-syzkaller #0 [ 70.223232][ T4449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 70.233308][ T4449] Call Trace: [ 70.236597][ T4449] [ 70.239535][ T4449] dump_stack_lvl+0x1e3/0x2d0 [ 70.244243][ T4449] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 70.249888][ T4449] ? panic+0x860/0x860 [ 70.253968][ T4449] ? rcu_is_watching+0x11/0xa0 [ 70.258747][ T4449] panic+0x318/0x860 [ 70.262661][ T4449] ? check_panic_on_warn+0x1d/0xa0 [ 70.267793][ T4449] ? fb_is_primary_device+0xd0/0xd0 [ 70.273015][ T4449] ? _raw_spin_unlock_irqrestore+0xd4/0x130 [ 70.278926][ T4449] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 70.284839][ T4449] ? _raw_spin_unlock+0x40/0x40 [ 70.285419][ T4294] Bluetooth: hci3: command 0x0405 tx timeout [ 70.289706][ T4449] check_panic_on_warn+0x7e/0xa0 [ 70.289733][ T4449] ? xfrm_policy_inexact_list_reinsert+0x5b5/0x660 [ 70.307110][ T4449] end_report+0x6d/0xf0 [ 70.311281][ T4449] kasan_report+0x18e/0x1c0 [ 70.315803][ T4449] ? xfrm_policy_inexact_list_reinsert+0x5b5/0x660 [ 70.322331][ T4449] xfrm_policy_inexact_list_reinsert+0x5b5/0x660 [ 70.328683][ T4449] ? __lock_acquire+0x1ff0/0x1ff0 [ 70.333726][ T4449] xfrm_policy_inexact_insert_node+0x8e7/0xb00 [ 70.339994][ T4449] xfrm_policy_inexact_alloc_chain+0x5ff/0xe20 [ 70.346182][ T4449] ? xfrm_policy_inexact_insert+0xe1/0x13c0 [ 70.352096][ T4449] xfrm_policy_inexact_insert+0xe1/0x13c0 [ 70.357840][ T4449] ? do_raw_spin_lock+0x14a/0x370 [ 70.362883][ T4449] ? __bpf_trace_softirq+0x10/0x10 [ 70.368015][ T4449] ? __rwlock_init+0x140/0x140 [ 70.372798][ T4449] ? init_timer_key+0x17c/0x2d0 [ 70.377672][ T4449] ? policy_hash_bysel+0x12c/0x7c0 [ 70.382806][ T4449] xfrm_policy_insert+0xe1/0x920 [ 70.387767][ T4449] xfrm_add_policy+0x4f2/0x9b0 [ 70.392552][ T4449] ? xfrm_dump_sa_done+0xc0/0xc0 [ 70.397520][ T4449] ? apparmor_capable+0x12e/0x190 [ 70.402581][ T4449] ? __nla_parse+0x3c/0x50 [ 70.407013][ T4449] xfrm_user_rcv_msg+0x6ea/0xa40 [ 70.411954][ T4449] ? xfrm_netlink_rcv+0x80/0x80 [ 70.416830][ T4449] ? __mutex_lock_common+0x444/0x25a0 [ 70.422298][ T4449] ? __copy_skb_header+0x47b/0x600 [ 70.427409][ T4449] netlink_rcv_skb+0x1cf/0x410 [ 70.432168][ T4449] ? xfrm_netlink_rcv+0x80/0x80 [ 70.437015][ T4449] ? netlink_ack+0xb10/0xb10 [ 70.441615][ T4449] xfrm_netlink_rcv+0x70/0x80 [ 70.446302][ T4449] netlink_unicast+0x7b6/0x980 [ 70.451064][ T4449] ? netlink_detachskb+0x90/0x90 [ 70.456006][ T4449] ? __virt_addr_valid+0x3bb/0x460 [ 70.461118][ T4449] ? 0xffffffff81000000 [ 70.465273][ T4449] ? __check_object_size+0x300/0x410 [ 70.470559][ T4449] ? bpf_lsm_netlink_send+0x5/0x10 [ 70.475685][ T4449] netlink_sendmsg+0xa30/0xd60 [ 70.480445][ T4449] ? netlink_getsockopt+0x5b0/0x5b0 [ 70.485633][ T4449] ? plist_check_list+0x20d/0x220 [ 70.490649][ T4449] ? aa_sock_msg_perm+0x91/0x150 [ 70.495581][ T4449] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 70.500852][ T4449] ? security_socket_sendmsg+0x7d/0xa0 [ 70.506301][ T4449] ? netlink_getsockopt+0x5b0/0x5b0 [ 70.511499][ T4449] ____sys_sendmsg+0x59e/0x8f0 [ 70.516281][ T4449] ? iovec_from_user+0x300/0x390 [ 70.521214][ T4449] ? __sys_sendmsg_sock+0x30/0x30 [ 70.526237][ T4449] ___sys_sendmsg+0x252/0x2e0 [ 70.530908][ T4449] ? __sys_sendmsg+0x260/0x260 [ 70.535672][ T4449] ? __fdget+0x191/0x220 [ 70.539904][ T4449] __se_sys_sendmsg+0x19a/0x260 [ 70.544745][ T4449] ? __x64_sys_sendmsg+0x80/0x80 [ 70.549671][ T4449] ? syscall_enter_from_user_mode+0x2e/0x240 [ 70.555736][ T4449] ? lockdep_hardirqs_on+0x94/0x130 [ 70.560945][ T4449] ? syscall_enter_from_user_mode+0x2e/0x240 [ 70.566943][ T4449] do_syscall_64+0x3b/0xb0 [ 70.571353][ T4449] ? clear_bhb_loop+0x15/0x70 [ 70.576040][ T4449] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 70.581926][ T4449] RIP: 0033:0x7f0dca905169 [ 70.586334][ T4449] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.605932][ T4449] RSP: 002b:00007f0dc876e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 70.614348][ T4449] RAX: ffffffffffffffda RBX: 00007f0dcab1dfa0 RCX: 00007f0dca905169 [ 70.622329][ T4449] RDX: 0000000000000000 RSI: 0000400000000580 RDI: 0000000000000005 [ 70.630307][ T4449] RBP: 00007f0dca9862a0 R08: 0000000000000000 R09: 0000000000000000 [ 70.638289][ T4449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 70.646254][ T4449] R13: 0000000000000000 R14: 00007f0dcab1dfa0 R15: 00007fffbc913cd8 [ 70.654226][ T4449] [ 70.657522][ T4449] Kernel Offset: disabled [ 70.661850][ T4449] Rebooting in 86400 seconds..