last executing test programs: 3.801911114s ago: executing program 0 (id=1272): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) 2.898025188s ago: executing program 0 (id=1277): r0 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0x22, &(0x7f0000000380)={{0xa, 0x0, 0x101, @ipv4={'\x00', '\xff\xff', @loopback}, 0x401}, {0xa, 0x0, 0x800, @dev={0xfe, 0x80, '\x00', 0x11}}, 0x0, {[0x410, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0x6]}}, 0x5c) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) r2 = socket$rxrpc(0x21, 0x2, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xc054) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) ioctl$sock_rose_SIOCADDRT(r5, 0x890b, &(0x7f0000000380)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @null, @bpq0, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000c000) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0xc, 0x0, 0x0) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r6, 0x890b, &(0x7f00000007c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @bcast, @bpq0, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) setsockopt$RXRPC_SECURITY_KEYRING(r2, 0x110, 0x2, &(0x7f0000000000)='veth1_vUan\x00\x90\xeb\xd2\xbc\x82\x96W\xdf\x9a\xb6\xe8\xf7_\xb7\x97\xf7\xb5\xeb\xa7\x80\xe5\x8dh\xa2\xd4\xe3\xe7.\xb3\x14s\xd1?D\xca\xc4!\xc37}+Q\xa8}c\b\xf1\xdb\xd7W\xabP5 \x80v\x0e}\x8a\xd1\xb6G\x17\xd0K\xcecO|\xf3\xf4\xe6n\x18\xddE`\xc5\x9f\x1f\xaf\x1a\xfd\xa1M\x0e\a\xa4\xb0\xdf\x12\xf9\x0e\a\x1f\xcf\xc1OIC\xe2\xc8\xd2\xd0\x85\xbc\xbc\x19\x86w)\xb3p\x81\xa4\xb52R\xa7u\x14\xba\xe7a\v\xc4r(\xb9&\x89m\xfc\xa8[H\xa2\xf5\xc3dP\x9d\xd1\xea\xb6}~=\xe6\xb8\va\x882\xda\xef\xff\x01\xc3J\xfb\x02Y\xae\xab\x99\x19?]H\xf4Cb\v\xd9?\xbf\x005\xca\x1f\xb5\x85\xc9\xa1\x87v\xdd\x8d\x04\x94\xbe\x88\xb0h\n\xf2\x1c', 0xd1) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r1, 0x80089419, &(0x7f0000000080)) 2.71807527s ago: executing program 0 (id=1282): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vxcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000100)={0x1d, r5}, 0x18) connect$can_j1939(r4, &(0x7f0000000080)={0x1d, r5, 0x0, {0x1, 0xf0}, 0x1}, 0x18) sendmsg$can_j1939(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 2.639306531s ago: executing program 2 (id=1284): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, 0x0, 0x0) listen(r0, 0x8) accept4(r0, 0x0, 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) unshare(0x22020600) socket$pptp(0x18, 0x1, 0x2) socket$inet_udp(0x2, 0x2, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6}, 0x0, &(0x7f0000000380)={0x3fe, 0x0, 0x10000000000000, 0x0, 0x0, 0x1, 0x10001}, 0x0, 0x0) 2.532608813s ago: executing program 4 (id=1286): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001000000008000900010001001800018014000200776c616e300000000000000000000000080008"], 0x3c}}, 0x0) 2.411193864s ago: executing program 4 (id=1287): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f00000003c0)={0x1a, 0x307, 0x8, 0x80, 0x0, 0x3d}, 0x10) 1.749390494s ago: executing program 4 (id=1288): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000004280)={0x38, r1, 0x1, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_FLAGS={0x10, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_MFP={0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x80d0}, 0x0) 1.669309725s ago: executing program 1 (id=1289): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001300)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x20, r1, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 1.654525856s ago: executing program 0 (id=1291): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x81284000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9c0000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="8b040400000000007c0012800b00010067656e65766500006c0002800500040001000000140007"], 0x9c}, 0x1, 0x0, 0x0, 0x841}, 0x0) 1.591196917s ago: executing program 2 (id=1292): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r1}, 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r0], 0x48}}, 0x0) 1.580364757s ago: executing program 4 (id=1293): r0 = socket(0xa, 0x3, 0x3a) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000203010400000000ffffffff000000000800"], 0x28}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x200}, 0x3a) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x8, 0x4) 1.522563007s ago: executing program 2 (id=1294): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x20000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x4}, 0x20000, 0x1, {0x0}}) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="c0400001", @ANYRES16=0x0], 0xc0}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180), 0xfefc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000002000/0x3000)=nil, &(0x7f0000000000/0xe000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f0000008000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000008000/0x3000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000008000/0x1000)=nil, &(0x7f0000006000/0x4000)=nil, 0x0}, 0x68) 1.466465388s ago: executing program 1 (id=1295): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000000)={r2, 0x1}, 0x8) 1.466328538s ago: executing program 3 (id=1296): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, 0x0, 0x0) 1.3788389s ago: executing program 2 (id=1297): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, &(0x7f0000001040)=0x2a9, 0x4) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000140)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f00000004c0)) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x4, 0x8, 0x2, 0x5f, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, 0x20, 0x700, 0x1, 0xeb12}}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=0xffffffffffffffff, 0x4) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x24008041) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40080d5}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x8, 0x9, 0x1, 0x24002, r1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x2, 0xd}, 0x50) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000030002005800018044000400200001000a000004001f00000000000000000000000000000000000100000000120002000a000000000000f9ffffff000000000000000000000000bb000000000d0001007564703a7379"], 0x6c}}, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000001f00)=0x2) 1.37769576s ago: executing program 3 (id=1298): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r3, 0x8}, &(0x7f00000000c0)=0x8) 1.36270515s ago: executing program 1 (id=1299): r0 = socket(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0x3f, &(0x7f0000000280)=ANY=[@ANYBLOB="b4"], 0x4) 1.217895372s ago: executing program 1 (id=1300): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$session_to_parent(0x12) capset(0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.216239082s ago: executing program 4 (id=1301): shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0xff}}, @in6={0xa, 0x4e21, 0xf, @loopback, 0x6}]}, &(0x7f0000000180)=0x10) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000000)={r1, @in={{0x2, 0x4e24, @empty}}, 0x27c0}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f00000001c0)={r1, @in={{0x2, 0x4e24, @empty}}, 0xfffc}, 0x90) 1.131182963s ago: executing program 2 (id=1302): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, 0x0, 0x0) listen(r0, 0x8) accept4(r0, 0x0, 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) unshare(0x22020600) socket$pptp(0x18, 0x1, 0x2) socket$inet_udp(0x2, 0x2, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6}, 0x0, &(0x7f0000000380)={0x3fe, 0x0, 0x10000000000000, 0x0, 0x0, 0x1, 0x10001}, 0x0, 0x0) 1.099040414s ago: executing program 3 (id=1303): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000004280)={0x38, r1, 0x1, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_FLAGS={0x10, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_MFP={0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x80d0}, 0x0) 1.076184634s ago: executing program 4 (id=1304): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000380)=0x8) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000001fc0)={r2, 0x1, 0xfe51, 0x3, 0xfeaf, 0x7f, 0x4, 0xfffffff9, {r2, @in={{0x2, 0x4e21, @loopback}}, 0x5, 0x80000001, 0x1000, 0x101, 0x4}}, &(0x7f0000002080)=0xb0) 318.850555ms ago: executing program 3 (id=1305): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2083, 0x501c6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40050}, 0x4000880) 264.580646ms ago: executing program 1 (id=1306): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r3, r2, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r4, &(0x7f0000007fc0)={0x2020}, 0x2020) 211.205587ms ago: executing program 2 (id=1307): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000380)=0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00'}, 0x10) socket$kcm(0x10, 0x400000002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000200)={0xa000000c}) 151.862317ms ago: executing program 0 (id=1308): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001380)=@allocspi={0xf8, 0x16, 0x10, 0x70bd2d, 0x25dfdbfe, {{{@in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x3}, 0x4e23, 0x0, 0x4e21, 0x0, 0xa, 0xa0, 0x80, 0x87}, {@in6=@empty, 0x4d3, 0x6c}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {0xffffffffffffffc0, 0x3, 0x7, 0x7fffffffffffffff, 0x8000, 0x1, 0x94, 0x1}, {0x7fff, 0x4, 0x9, 0x4ba15d0a}, {0x200, 0x401, 0x3}, 0x70bd25, 0x0, 0x2, 0x0, 0x20, 0x3a}, 0x13b, 0x8}}, 0xf8}, 0x1, 0x0, 0x0, 0x40000}, 0x48001) recvmmsg$unix(r1, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 127.630558ms ago: executing program 3 (id=1309): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, r2, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x20000800) 51.178219ms ago: executing program 1 (id=1310): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) unshare(0x24020400) sendfile(0xffffffffffffffff, r0, 0x0, 0x1) 3.21161ms ago: executing program 0 (id=1311): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000100)=0x9, 0x4) connect$rose(r0, &(0x7f00000000c0)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, 0x5, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @null]}, 0x40) 0s ago: executing program 3 (id=1312): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7, 0x46d8, 0x6, 0x4}}}}]}, 0x48}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.204' (ED25519) to the list of known hosts. syzkaller login: [ 39.226346][ T4284] cgroup: Unknown subsys name 'net' [ 39.534300][ T4284] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 39.865797][ T4284] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 41.515241][ T4303] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 41.519227][ T4303] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 41.523931][ T4308] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 41.526130][ T4308] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 41.529328][ T4308] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 41.532343][ T4308] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 41.533026][ T4310] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 41.535015][ T4308] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 41.537065][ T4310] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 41.541330][ T4308] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 41.541778][ T4310] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 41.543792][ T4311] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 41.545962][ T4310] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 41.548343][ T4311] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 41.552099][ T4312] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 41.552739][ T4310] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 41.554927][ T4312] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 41.556608][ T4310] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 41.558976][ T4312] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 41.561042][ T4310] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 41.562455][ T4312] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 41.564192][ T4310] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 41.567489][ T4312] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 41.569240][ T4310] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 41.571958][ T4310] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 41.574432][ T4310] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 41.575612][ T4303] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 41.579372][ T4312] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 41.580744][ T4311] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 41.607913][ T4312] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 41.799751][ T4301] chnl_net:caif_netlink_parms(): no params data found [ 41.877018][ T4296] chnl_net:caif_netlink_parms(): no params data found [ 41.902743][ T4301] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.905067][ T4301] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.909632][ T4301] device bridge_slave_0 entered promiscuous mode [ 41.935981][ T4301] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.938578][ T4301] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.941208][ T4301] device bridge_slave_1 entered promiscuous mode [ 41.966447][ T4304] chnl_net:caif_netlink_parms(): no params data found [ 41.977279][ T4305] chnl_net:caif_netlink_parms(): no params data found [ 41.985937][ T4301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.991327][ T4296] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.993307][ T4296] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.995943][ T4296] device bridge_slave_0 entered promiscuous mode [ 41.999655][ T4296] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.001565][ T4296] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.004279][ T4296] device bridge_slave_1 entered promiscuous mode [ 42.012155][ T4301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.054107][ T4296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.070922][ T4301] team0: Port device team_slave_0 added [ 42.076537][ T4301] team0: Port device team_slave_1 added [ 42.083960][ T4296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.126273][ T4301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.129398][ T4301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.136475][ T4301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.142110][ T4296] team0: Port device team_slave_0 added [ 42.145725][ T4301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.149079][ T4301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.156686][ T4301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.175683][ T4296] team0: Port device team_slave_1 added [ 42.204668][ T4304] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.207021][ T4304] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.210218][ T4304] device bridge_slave_0 entered promiscuous mode [ 42.221973][ T4305] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.224042][ T4305] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.226780][ T4305] device bridge_slave_0 entered promiscuous mode [ 42.230067][ T4304] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.231998][ T4304] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.234639][ T4304] device bridge_slave_1 entered promiscuous mode [ 42.246039][ T4296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.248312][ T4296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.255690][ T4296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.270915][ T4305] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.272838][ T4305] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.275360][ T4305] device bridge_slave_1 entered promiscuous mode [ 42.287222][ T4296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.289908][ T4296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.296846][ T4296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.339668][ T4301] device hsr_slave_0 entered promiscuous mode [ 42.397964][ T4301] device hsr_slave_1 entered promiscuous mode [ 42.446979][ T4305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.456707][ T4295] chnl_net:caif_netlink_parms(): no params data found [ 42.467960][ T4305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.472090][ T4304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.476501][ T4304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.504728][ T4304] team0: Port device team_slave_0 added [ 42.525625][ T4305] team0: Port device team_slave_0 added [ 42.528886][ T4304] team0: Port device team_slave_1 added [ 42.542622][ T4305] team0: Port device team_slave_1 added [ 42.589585][ T4296] device hsr_slave_0 entered promiscuous mode [ 42.628002][ T4296] device hsr_slave_1 entered promiscuous mode [ 42.667800][ T4296] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 42.670042][ T4296] Cannot create hsr debugfs directory [ 42.702527][ T4304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.704795][ T4304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.716382][ T4304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.731136][ T4305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.733181][ T4305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.740852][ T4305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.747730][ T4304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.749758][ T4304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.756998][ T4304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.771324][ T4305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.773294][ T4305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.780644][ T4305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.798924][ T4295] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.800965][ T4295] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.803614][ T4295] device bridge_slave_0 entered promiscuous mode [ 42.829631][ T4295] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.831739][ T4295] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.834512][ T4295] device bridge_slave_1 entered promiscuous mode [ 42.919403][ T4305] device hsr_slave_0 entered promiscuous mode [ 42.978073][ T4305] device hsr_slave_1 entered promiscuous mode [ 43.017843][ T4305] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 43.020137][ T4305] Cannot create hsr debugfs directory [ 43.099643][ T4304] device hsr_slave_0 entered promiscuous mode [ 43.138102][ T4304] device hsr_slave_1 entered promiscuous mode [ 43.187839][ T4304] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 43.189957][ T4304] Cannot create hsr debugfs directory [ 43.193926][ T4295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 43.223823][ T4295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 43.279585][ T4295] team0: Port device team_slave_0 added [ 43.289950][ T4295] team0: Port device team_slave_1 added [ 43.326577][ T4295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 43.328861][ T4295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.335957][ T4295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 43.340432][ T4295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 43.342530][ T4295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.350356][ T4295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 43.363037][ T4301] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 43.399876][ T4301] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 43.458353][ T4301] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 43.520916][ T4301] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 43.618435][ T4306] Bluetooth: hci3: command 0x0409 tx timeout [ 43.620358][ T4306] Bluetooth: hci4: command 0x0409 tx timeout [ 43.622224][ T4306] Bluetooth: hci0: command 0x0409 tx timeout [ 43.623349][ T4312] Bluetooth: hci1: command 0x0409 tx timeout [ 43.624027][ T4306] Bluetooth: hci2: command 0x0409 tx timeout [ 43.649575][ T4295] device hsr_slave_0 entered promiscuous mode [ 43.688184][ T4295] device hsr_slave_1 entered promiscuous mode [ 43.727952][ T4295] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 43.730164][ T4295] Cannot create hsr debugfs directory [ 43.742804][ T4296] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 43.800340][ T4296] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 43.850420][ T4305] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 43.900795][ T4296] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 43.960226][ T4305] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 44.011051][ T4305] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 44.041849][ T4305] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 44.095823][ T4296] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 44.204975][ T4304] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 44.252934][ T4304] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 44.290251][ T4304] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 44.330165][ T4304] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 44.459334][ T4295] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 44.494766][ T4295] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 44.542833][ T4295] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 44.571846][ T4295] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 44.664629][ T4305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.671042][ T4301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.699209][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.702845][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.721401][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.723904][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.729522][ T4301] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.733348][ T4295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.740080][ T4296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.744367][ T4304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.747860][ T4305] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.756356][ T263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.761356][ T263] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.764436][ T263] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.766573][ T263] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.769563][ T263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.772245][ T263] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.774863][ T263] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.776900][ T263] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.779701][ T263] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.782610][ T263] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.794704][ T263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.798182][ T263] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.800993][ T263] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.803036][ T263] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.805677][ T263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.809144][ T263] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.811756][ T263] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.813745][ T263] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.822021][ T4304] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.825670][ T4295] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.840135][ T263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.843303][ T263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.845787][ T263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.848988][ T263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.851530][ T263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 44.854551][ T263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 44.857473][ T263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 44.863257][ T263] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 44.865982][ T263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 44.869808][ T263] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 44.872526][ T263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 44.885683][ T263] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 44.888903][ T263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.891849][ T263] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.894693][ T263] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.896932][ T263] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.900675][ T263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.903368][ T263] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.905995][ T263] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.908102][ T263] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.910860][ T263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 44.913866][ T263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 44.919526][ T263] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.922911][ T263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.925666][ T263] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.930289][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.933300][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.936893][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.940848][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.943539][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.945581][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.965809][ T4301] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 44.970084][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 44.974070][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.976624][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 44.985667][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 44.990578][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 44.993630][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 44.996541][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 45.000895][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 45.003792][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.006427][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 45.009386][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.011989][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 45.014644][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.017375][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 45.025653][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 45.029533][ T4296] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.040036][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 45.043811][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 45.046604][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.050227][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.053196][ T180] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.055197][ T180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.058277][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.061106][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.064016][ T180] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.065978][ T180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.069242][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 45.072369][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 45.076078][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 45.079881][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 45.084867][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 45.101644][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.108992][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.112965][ T4321] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.115097][ T4321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.117498][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 45.130459][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 45.139950][ T4295] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 45.142798][ T4295] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 45.164407][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 45.170491][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.182250][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 45.185051][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.192216][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 45.195516][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 45.201177][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 45.206259][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 45.209321][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 45.224091][ T263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 45.229554][ T263] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 45.260923][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 45.264000][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 45.268522][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 45.283658][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 45.293755][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 45.301980][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 45.304811][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.307609][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 45.312865][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.321300][ T4304] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 45.339504][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 45.343151][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 45.346084][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.350648][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 45.354187][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.374791][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 45.387353][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 45.390217][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 45.427890][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 45.430261][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 45.435222][ T4301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.443275][ T4305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.488838][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 45.491719][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.502415][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 45.504645][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 45.540193][ T4295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.567524][ T4305] device veth0_vlan entered promiscuous mode [ 45.571122][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 45.573870][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.577058][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 45.581344][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.599512][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.608348][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 45.611075][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 45.618971][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.625472][ T4305] device veth1_vlan entered promiscuous mode [ 45.632649][ T4301] device veth0_vlan entered promiscuous mode [ 45.636075][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 45.640070][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.644080][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 45.666946][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 45.670210][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 45.682730][ T4304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.685516][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 45.693733][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 45.695971][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 45.698239][ T4306] Bluetooth: hci1: command 0x041b tx timeout [ 45.698634][ T4311] Bluetooth: hci0: command 0x041b tx timeout [ 45.699896][ T4306] Bluetooth: hci4: command 0x041b tx timeout [ 45.701543][ T4311] Bluetooth: hci3: command 0x041b tx timeout [ 45.703171][ T4306] Bluetooth: hci2: command 0x041b tx timeout [ 45.715200][ T4301] device veth1_vlan entered promiscuous mode [ 45.739098][ T4296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.754711][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 45.757400][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 45.760944][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 45.763729][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.789314][ T4305] device veth0_macvtap entered promiscuous mode [ 45.795622][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 45.805031][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.808594][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 45.811414][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.814163][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 45.824588][ T4301] device veth0_macvtap entered promiscuous mode [ 45.831531][ T263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 45.834544][ T263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.837609][ T263] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 45.845938][ T4305] device veth1_macvtap entered promiscuous mode [ 45.852453][ T4301] device veth1_macvtap entered promiscuous mode [ 45.854776][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 45.857284][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 45.861086][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 45.863812][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.866596][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.872485][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 45.876903][ T4304] device veth0_vlan entered promiscuous mode [ 45.890843][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 45.894380][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.905132][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.908742][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 45.911283][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 45.913995][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.920082][ T4304] device veth1_vlan entered promiscuous mode [ 45.924209][ T4296] device veth0_vlan entered promiscuous mode [ 45.936308][ T4305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.945795][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 45.949280][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 45.952043][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 45.954912][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.968872][ T4305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.974149][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 45.977145][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 45.981200][ T4301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.984221][ T4301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.990287][ T4301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.994648][ T4301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.997617][ T4301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.003684][ T4301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.016881][ T263] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 46.020997][ T263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.023898][ T263] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 46.026913][ T263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.030224][ T263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 46.032964][ T263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.035760][ T263] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.039194][ T263] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.043693][ T4296] device veth1_vlan entered promiscuous mode [ 46.051113][ T4301] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.053729][ T4301] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.056080][ T4301] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.059549][ T4301] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.063195][ T4295] device veth0_vlan entered promiscuous mode [ 46.068670][ T4305] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.071142][ T4305] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.073513][ T4305] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.075929][ T4305] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.103299][ T4295] device veth1_vlan entered promiscuous mode [ 46.118403][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 46.121099][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 46.123842][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.132563][ T4304] device veth0_macvtap entered promiscuous mode [ 46.169388][ T4304] device veth1_macvtap entered promiscuous mode [ 46.195059][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 46.198520][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 46.201578][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 46.204810][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 46.208079][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.221211][ T4295] device veth0_macvtap entered promiscuous mode [ 46.232338][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 46.235204][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.239551][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 46.251747][ T4296] device veth0_macvtap entered promiscuous mode [ 46.254863][ T4295] device veth1_macvtap entered promiscuous mode [ 46.260202][ T4296] device veth1_macvtap entered promiscuous mode [ 46.265999][ T4304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.272935][ T4304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.275895][ T4304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.279338][ T4304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.283312][ T4304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.289120][ T4304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.295552][ T4304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.299668][ T4304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.302896][ T4304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.306792][ T4304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.312392][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 46.315275][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 46.320081][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 46.322848][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 46.325707][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.329525][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 46.332262][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.351084][ T4304] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.353570][ T4304] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.355929][ T4304] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.358869][ T4304] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.362779][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.365062][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.381101][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 46.400646][ T4296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.403597][ T4296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.406305][ T4296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.409475][ T4296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.412224][ T4296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.415052][ T4296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.420989][ T4296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.431755][ T4295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.434762][ T4295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.437412][ T4295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.441271][ T4295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.444042][ T4295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.446837][ T4295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.449784][ T4295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.452730][ T4295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.456749][ T4295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.463973][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 46.467506][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.470807][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 46.473738][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.486026][ T4296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.489259][ T4296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.493759][ T4296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.496651][ T4296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.500273][ T4296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.503319][ T4296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.507420][ T4296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.516438][ T4321] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.518682][ T4295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.521781][ T4295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.524698][ T4295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.527485][ T4295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.527866][ T4321] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.535195][ T4295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.541681][ T4295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.544453][ T4295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.547231][ T4295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.552409][ T4295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.566196][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 46.569140][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.571937][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 46.574642][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 46.577389][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.582872][ T4296] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.585289][ T4296] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.587592][ T4296] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.590995][ T4296] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.604128][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.610034][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.615968][ T4295] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.618883][ T4295] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.621555][ T4295] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.623937][ T4295] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.638826][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 46.697574][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.700417][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.716885][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 46.767430][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.770393][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.775343][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 46.882510][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.884912][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.934200][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 46.959186][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.961566][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.964668][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 46.987437][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.998234][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.010507][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 47.013903][ T4413] netlink: 'syz.3.4': attribute type 1 has an invalid length. [ 47.016162][ T4413] netlink: 'syz.3.4': attribute type 2 has an invalid length. [ 47.054889][ T263] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.057266][ T263] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.076849][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.079660][ T263] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 47.087921][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.091801][ T263] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 47.336486][ T4425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.349243][ T4425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.508510][ T4430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.511142][ T4430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.555143][ T4433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.572370][ T4433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.746880][ T4438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.753194][ T4438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.778231][ T4306] Bluetooth: hci2: command 0x040f tx timeout [ 47.778275][ T4312] Bluetooth: hci3: command 0x040f tx timeout [ 47.780002][ T4306] Bluetooth: hci4: command 0x040f tx timeout [ 47.781687][ T4312] Bluetooth: hci0: command 0x040f tx timeout [ 47.783215][ T4306] Bluetooth: hci1: command 0x040f tx timeout [ 47.993554][ T4443] device syzkaller1 entered promiscuous mode [ 48.131715][ T4447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.134289][ T4447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.415826][ T4454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.422400][ T4454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.507759][ T4458] netlink: 'syz.3.20': attribute type 10 has an invalid length. [ 48.597019][ T4458] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 48.646934][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 48.649312][ T4458] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 48.868811][ T4471] tmpfs: Unknown parameter 'usrquota' [ 48.911508][ T4473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.914225][ T4473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.246310][ T4485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.253788][ T4485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.907738][ T4311] Bluetooth: hci0: command 0x0419 tx timeout [ 49.908282][ T4306] Bluetooth: hci4: command 0x0419 tx timeout [ 49.909561][ T4311] Bluetooth: hci3: command 0x0419 tx timeout [ 49.911221][ T4306] Bluetooth: hci2: command 0x0419 tx timeout [ 49.912853][ T4311] Bluetooth: hci1: command 0x0419 tx timeout [ 50.131250][ T4498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.135230][ T4498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.929927][ T4509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.932490][ T4509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.170580][ T4517] device syzkaller1 entered promiscuous mode [ 51.919089][ T4547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.922550][ T4547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.657960][ T1515] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 52.865895][ T1515] usb 1-1: config 0 has an invalid interface number: 142 but max is 1 [ 52.870492][ T1515] usb 1-1: config 0 has no interface number 0 [ 52.872245][ T1515] usb 1-1: config 0 interface 1 has no altsetting 0 [ 52.881593][ T1515] usb 1-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice= 0.5e [ 52.884255][ T1515] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.886603][ T1515] usb 1-1: Product: syz [ 52.888159][ T1515] usb 1-1: Manufacturer: syz [ 52.893982][ T1515] usb 1-1: SerialNumber: syz [ 52.907295][ T1515] usb 1-1: config 0 descriptor?? [ 53.167752][ T1515] msi2500 1-1:0.1: Registered as swradio1 [ 53.169699][ T1515] msi2500 1-1:0.1: SDR API is still slightly experimental and functionality changes may follow [ 53.211491][ T1515] msi2500 1-1:0.142: Registered as swradio2 [ 53.213650][ T1515] msi2500 1-1:0.142: SDR API is still slightly experimental and functionality changes may follow [ 53.233427][ T1515] usb 1-1: USB disconnect, device number 2 [ 53.793783][ T4608] device veth1_macvtap left promiscuous mode [ 54.131572][ T4614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.134120][ T4614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.926719][ T4656] netlink: 8 bytes leftover after parsing attributes in process `syz.0.102'. [ 57.351233][ T4692] netlink: 'syz.2.114': attribute type 2 has an invalid length. [ 57.442486][ T4698] usb usb8: usbfs: process 4698 (syz.3.117) did not claim interface 0 before use [ 58.244500][ T4715] loop2: detected capacity change from 0 to 1764 [ 59.192989][ T4724] Zero length message leads to an empty skb [ 60.252678][ T4747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.264831][ T4747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.301448][ T4306] Bluetooth: Wrong link type (-22) [ 61.634287][ T4775] netlink: 8 bytes leftover after parsing attributes in process `syz.3.145'. [ 61.646479][ T4775] netlink: 20 bytes leftover after parsing attributes in process `syz.3.145'. [ 61.655165][ T4775] netlink: 32 bytes leftover after parsing attributes in process `syz.3.145'. [ 61.685107][ T4775] netlink: 140 bytes leftover after parsing attributes in process `syz.3.145'. [ 61.696275][ T4778] vxcan1: tx address claim with dest, not broadcast [ 61.757193][ T4783] netlink: 'syz.3.145': attribute type 1 has an invalid length. [ 61.800238][ T4306] Bluetooth: Wrong link type (-22) [ 63.117464][ T4810] syz.3.157 uses obsolete (PF_INET,SOCK_PACKET) [ 63.178193][ T4810] xt_CT: No such helper "syz0" [ 63.294152][ T4306] Bluetooth: Wrong link type (-22) [ 63.505460][ T4825] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 63.519832][ T4825] Bluetooth: MGMT ver 1.22 [ 63.622100][ T4834] netlink: 8 bytes leftover after parsing attributes in process `syz.4.168'. [ 63.758107][ T4834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.796461][ T4306] Bluetooth: Wrong link type (-22) [ 64.156839][ T4864] netlink: 16 bytes leftover after parsing attributes in process `syz.3.178'. [ 64.509758][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.511865][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.690131][ T4892] netlink: 8 bytes leftover after parsing attributes in process `syz.4.188'. [ 64.724050][ T4894] netlink: 20 bytes leftover after parsing attributes in process `syz.3.189'. [ 65.129219][ T4908] netlink: 4 bytes leftover after parsing attributes in process `syz.2.194'. [ 65.299563][ T4915] binder: 4914:4915 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 66.143591][ T4962] netlink: 4 bytes leftover after parsing attributes in process `syz.3.212'. [ 66.606809][ T4989] binder: 4988:4989 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 67.126694][ T5019] binder: 5018:5019 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 67.541989][ T5039] netlink: 8 bytes leftover after parsing attributes in process `syz.0.242'. [ 68.263911][ T5050] netlink: 8 bytes leftover after parsing attributes in process `syz.3.247'. [ 68.429957][ T5060] netlink: 'syz.4.251': attribute type 1 has an invalid length. [ 68.866979][ T5077] netlink: 8 bytes leftover after parsing attributes in process `syz.1.255'. [ 69.115603][ T5092] netlink: 'syz.4.262': attribute type 1 has an invalid length. [ 69.139247][ T5093] netlink: 8 bytes leftover after parsing attributes in process `syz.0.263'. [ 69.532742][ T14] cfg80211: failed to load regulatory.db [ 69.686692][ T5111] loop3: detected capacity change from 0 to 16 [ 69.697183][ T5111] ======================================================= [ 69.697183][ T5111] WARNING: The mand mount option has been deprecated and [ 69.697183][ T5111] and is ignored by this kernel. Remove the mand [ 69.697183][ T5111] option from the mount to silence this warning. [ 69.697183][ T5111] ======================================================= [ 69.888941][ T5111] erofs: (device loop3): mounted with root inode @ nid 36. [ 69.996477][ T5111] erofs: (device loop3): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 70.941631][ T5130] netlink: 8 bytes leftover after parsing attributes in process `syz.2.278'. [ 71.762187][ T5166] netlink: 8 bytes leftover after parsing attributes in process `syz.0.293'. [ 72.507774][ T5197] netlink: 8 bytes leftover after parsing attributes in process `syz.4.308'. [ 72.766012][ T5209] netlink: 60 bytes leftover after parsing attributes in process `syz.4.314'. [ 72.883369][ T5217] netlink: 12 bytes leftover after parsing attributes in process `syz.0.318'. [ 72.885890][ T5217] netlink: 12 bytes leftover after parsing attributes in process `syz.0.318'. [ 72.970874][ T5223] netlink: 8 bytes leftover after parsing attributes in process `syz.1.321'. [ 72.973569][ T5223] netlink: 8 bytes leftover after parsing attributes in process `syz.1.321'. [ 73.117038][ T5234] netlink: 8 bytes leftover after parsing attributes in process `syz.1.325'. [ 73.123338][ T5235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.128884][ T5235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.356266][ T5240] loop0: detected capacity change from 0 to 1024 [ 74.679894][ T5253] loop4: detected capacity change from 0 to 16 [ 75.124530][ T5253] erofs: (device loop4): mounted with root inode @ nid 36. [ 75.200599][ T5253] erofs: (device loop4): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 75.267653][ C0] sched: RT throttling activated [ 75.291389][ T4729] hfsplus: b-tree write err: -5, ino 4 [ 75.680092][ T5268] netlink: 8 bytes leftover after parsing attributes in process `syz.0.339'. [ 76.033315][ T5290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.042817][ T5290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.489321][ T5305] loop4: detected capacity change from 0 to 16 [ 76.503386][ T5305] erofs: (device loop4): mounted with root inode @ nid 36. [ 76.539591][ T5305] erofs: (device loop4): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 77.396711][ T5320] netlink: 8 bytes leftover after parsing attributes in process `syz.1.357'. [ 77.544494][ T5331] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 77.599960][ T5331] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -98 [ 77.755098][ T5340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.772492][ T5340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.440368][ T5373] netlink: 8 bytes leftover after parsing attributes in process `syz.0.377'. [ 78.761693][ T5385] netlink: 12 bytes leftover after parsing attributes in process `syz.0.381'. [ 78.828730][ T5392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.858615][ T5392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.039479][ T5406] netlink: 8 bytes leftover after parsing attributes in process `syz.1.391'. [ 79.081496][ T4365] hid-generic 0005:07C0:0007.0001: collection stack underflow [ 79.083765][ T4365] hid-generic 0005:07C0:0007.0001: item 0 0 0 12 parsing failed [ 79.086317][ T4365] hid-generic: probe of 0005:07C0:0007.0001 failed with error -22 [ 79.675562][ T5447] netem: incorrect ge model size [ 79.677015][ T5447] netem: change failed [ 79.697458][ T5453] netlink: 8 bytes leftover after parsing attributes in process `syz.2.411'. [ 79.720190][ T5451] netlink: 24 bytes leftover after parsing attributes in process `syz.0.410'. [ 79.776610][ T5456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.779432][ T5456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.242249][ T5484] netlink: 8 bytes leftover after parsing attributes in process `syz.0.426'. [ 80.253926][ T5486] netlink: 12 bytes leftover after parsing attributes in process `syz.2.425'. [ 80.427307][ T5493] netlink: 4 bytes leftover after parsing attributes in process `syz.3.428'. [ 80.738774][ T5513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.741345][ T5513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.896228][ T5520] netlink: 8 bytes leftover after parsing attributes in process `syz.2.441'. [ 82.341033][ T5576] IPVS: length: 8 != 446622349272 [ 83.246046][ T5621] loop1: detected capacity change from 0 to 1764 [ 84.355691][ T5660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.370555][ T5660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.670344][ T5672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.674776][ T5672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.805790][ T5677] loop1: detected capacity change from 0 to 1764 [ 85.060699][ T5685] netlink: 12 bytes leftover after parsing attributes in process `syz.3.507'. [ 85.618870][ T5699] Driver unsupported XDP return value 0 on prog (id 3) dev N/A, expect packet loss! [ 86.058633][ T5734] loop3: detected capacity change from 0 to 16 [ 86.149089][ T5734] erofs: (device loop3): mounted with root inode @ nid 36. [ 86.229742][ T5734] erofs: (device loop3): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 86.874827][ T5738] netlink: 12 bytes leftover after parsing attributes in process `syz.1.523'. [ 87.033085][ T5746] binder: BINDER_SET_CONTEXT_MGR already set [ 87.035067][ T5746] binder: 5745:5746 ioctl 4018620d 200000c0 returned -16 [ 87.247413][ T5750] loop3: detected capacity change from 0 to 1764 [ 88.044287][ T5768] loop2: detected capacity change from 0 to 16 [ 88.077076][ T5768] erofs: (device loop2): mounted with root inode @ nid 36. [ 88.147319][ T5768] erofs: (device loop2): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 89.095517][ T5779] binder: 5777:5779 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 89.224155][ T5783] netlink: 32 bytes leftover after parsing attributes in process `syz.1.542'. [ 89.362127][ T5791] netlink: 'syz.1.545': attribute type 12 has an invalid length. [ 89.364348][ T5791] netlink: 'syz.1.545': attribute type 29 has an invalid length. [ 89.366525][ T5791] netlink: 148 bytes leftover after parsing attributes in process `syz.1.545'. [ 89.375525][ T5791] netlink: 'syz.1.545': attribute type 2 has an invalid length. [ 89.381785][ T5791] netlink: 43 bytes leftover after parsing attributes in process `syz.1.545'. [ 89.798381][ T5799] loop1: detected capacity change from 0 to 16 [ 89.843367][ T5799] erofs: (device loop1): mounted with root inode @ nid 36. [ 89.941453][ T5799] erofs: (device loop1): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 90.581569][ T5805] netlink: 40 bytes leftover after parsing attributes in process `syz.3.550'. [ 90.833108][ T5819] netlink: 8 bytes leftover after parsing attributes in process `syz.4.557'. [ 91.273163][ T5838] device syzkaller0 entered promiscuous mode [ 91.406371][ T5842] loop2: detected capacity change from 0 to 16 [ 91.610904][ T5842] erofs: (device loop2): mounted with root inode @ nid 36. [ 91.709688][ T5842] erofs: (device loop2): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 92.264949][ T5846] xt_CT: No such helper "syz0" [ 92.785512][ T5877] netlink: 40 bytes leftover after parsing attributes in process `syz.2.581'. [ 93.038906][ T5884] loop1: detected capacity change from 0 to 16 [ 93.185743][ T5884] erofs: (device loop1): mounted with root inode @ nid 36. [ 93.272968][ T5884] erofs: (device loop1): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 93.795427][ T5891] netlink: 12 bytes leftover after parsing attributes in process `syz.0.586'. [ 93.804076][ T5891] netlink: 8 bytes leftover after parsing attributes in process `syz.0.586'. [ 93.806572][ T5891] netlink: 8 bytes leftover after parsing attributes in process `syz.0.586'. [ 94.445409][ T5911] netlink: 24 bytes leftover after parsing attributes in process `syz.3.595'. [ 95.591153][ T5943] netlink: 8 bytes leftover after parsing attributes in process `syz.2.606'. [ 95.593827][ T5943] netlink: 24 bytes leftover after parsing attributes in process `syz.2.606'. [ 95.709748][ T5953] netlink: 12 bytes leftover after parsing attributes in process `syz.2.610'. [ 95.790042][ T4306] Bluetooth: hci3: command 0x0405 tx timeout [ 96.735890][ T5996] netlink: 12 bytes leftover after parsing attributes in process `syz.3.628'. [ 97.395842][ T6029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.405774][ T6029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.427258][ T6029] loop1: detected capacity change from 0 to 256 [ 97.449389][ T6029] exfat: Deprecated parameter 'utf8' [ 97.460863][ T6029] exfat: Deprecated parameter 'namecase' [ 97.466210][ T6029] exfat: Deprecated parameter 'namecase' [ 97.473043][ T6029] exfat: Deprecated parameter 'utf8' [ 97.480811][ T6031] device pim6reg1 entered promiscuous mode [ 97.500510][ T6027] tipc: Can't bind to reserved service type 1 [ 97.506907][ T6029] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0x5270ca8d, utbl_chksum : 0xe619d30d) [ 97.513907][ T6027] netlink: 208 bytes leftover after parsing attributes in process `syz.4.641'. [ 97.867785][ T4306] Bluetooth: hci3: command 0x0405 tx timeout [ 98.621280][ T6036] af_packet: tpacket_rcv: packet too big, clamped from 16 to 4294967272. macoff=96 [ 98.903266][ T6057] tipc: Started in network mode [ 98.905001][ T6057] tipc: Node identity 7, cluster identity 4711 [ 98.906672][ T6057] tipc: Node number set to 7 [ 99.548827][ T6073] netlink: 'syz.0.658': attribute type 1 has an invalid length. [ 99.551705][ T6073] netlink: 8 bytes leftover after parsing attributes in process `syz.0.658'. [ 100.068535][ T6097] netlink: 'syz.3.670': attribute type 1 has an invalid length. [ 100.079617][ T6097] device bond1 entered promiscuous mode [ 100.081423][ T6097] 8021q: adding VLAN 0 to HW filter on device bond1 [ 100.100441][ T6097] 8021q: adding VLAN 0 to HW filter on device bond1 [ 100.102683][ T6097] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 100.105549][ T6097] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 100.112355][ T6097] bond1: (slave vcan1): making interface the new active one [ 100.114496][ T6097] device vcan1 entered promiscuous mode [ 100.118173][ T6097] bond1: (slave vcan1): Enslaving as an active interface with an up link [ 100.120645][ T5254] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 100.220707][ T6105] netlink: 'syz.0.672': attribute type 1 has an invalid length. [ 100.222985][ T6105] netlink: 8 bytes leftover after parsing attributes in process `syz.0.672'. [ 100.801014][ T6107] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.803926][ T6107] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.436735][ T6107] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.459492][ T6107] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.953877][ T6107] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.956582][ T6107] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.959434][ T6107] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.962136][ T6107] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.292568][ T6112] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 102.374510][ T22] bond0 speed is unknown, defaulting to 1000 [ 102.400045][ T6135] netlink: 'syz.3.684': attribute type 1 has an invalid length. [ 102.402499][ T6135] netlink: 8 bytes leftover after parsing attributes in process `syz.3.684'. [ 102.500790][ T6143] netlink: 12 bytes leftover after parsing attributes in process `syz.3.687'. [ 102.649329][ T6151] netlink: 224 bytes leftover after parsing attributes in process `syz.1.683'. [ 102.769227][ T6155] netlink: 8 bytes leftover after parsing attributes in process `syz.0.692'. [ 102.997795][ T6168] netlink: 'syz.2.697': attribute type 1 has an invalid length. [ 103.007828][ T6168] netlink: 8 bytes leftover after parsing attributes in process `syz.2.697'. [ 103.480296][ T6193] netlink: 12 bytes leftover after parsing attributes in process `syz.1.704'. [ 103.675023][ T6205] netlink: 8 bytes leftover after parsing attributes in process `syz.3.714'. [ 103.812032][ T6203] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.830471][ T6202] bond0 speed is unknown, defaulting to 1000 [ 103.949843][ T6203] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.067051][ T6225] netlink: 12 bytes leftover after parsing attributes in process `syz.1.721'. [ 104.090164][ T6203] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.339841][ T6203] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.494287][ T6240] netlink: 36 bytes leftover after parsing attributes in process `syz.2.727'. [ 104.563556][ T6203] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.581009][ T6203] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.586857][ T6203] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.651831][ T6203] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.793335][ T6255] netlink: 12 bytes leftover after parsing attributes in process `syz.4.734'. [ 104.871699][ T6258] IPVS: set_ctl: invalid protocol: 22 224.0.0.1:20000 [ 106.972557][ T6423] device pim6reg1 entered promiscuous mode [ 107.290831][ T6436] device bond0 entered promiscuous mode [ 107.292600][ T6436] device bond_slave_0 entered promiscuous mode [ 107.303126][ T6436] device bond_slave_1 entered promiscuous mode [ 107.305176][ T6436] device wlan1 entered promiscuous mode [ 107.335728][ T6440] binder: BINDER_SET_CONTEXT_MGR already set [ 107.338228][ T6440] binder: 6439:6440 ioctl 4018620d 200000c0 returned -16 [ 107.358258][ T6436] device ip6gretap0 entered promiscuous mode [ 107.411204][ T5306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 107.523572][ T6450] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 108.296914][ T6470] binder: 6467:6470 ioctl c0306201 0 returned -14 [ 108.329063][ T6470] binder: BINDER_SET_CONTEXT_MGR already set [ 108.331177][ T6470] binder: 6467:6470 ioctl 4018620d 200000c0 returned -16 [ 108.333986][ T6470] binder: 6467:6470 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 108.533164][ T6480] __nla_validate_parse: 6 callbacks suppressed [ 108.533178][ T6480] netlink: 136 bytes leftover after parsing attributes in process `syz.3.798'. [ 108.546925][ T6480] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 108.951878][ T6502] binder: 6501:6502 ioctl c0306201 0 returned -14 [ 109.316516][ T6520] netlink: 'syz.0.815': attribute type 10 has an invalid length. [ 109.346460][ T6520] team0: Port device dummy0 added [ 109.371327][ T6520] netlink: 'syz.0.815': attribute type 10 has an invalid length. [ 109.404293][ T6520] team0: Port device dummy0 removed [ 109.415823][ T6520] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 109.566178][ T6532] binder: 6531:6532 ioctl c0306201 0 returned -14 [ 109.845781][ T6544] bond0 speed is unknown, defaulting to 1000 [ 110.296437][ T6544] netlink: 'syz.3.826': attribute type 4 has an invalid length. [ 110.739198][ T6584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.769713][ T6584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.832549][ T6584] loop3: detected capacity change from 0 to 256 [ 110.848471][ T6584] exfat: Deprecated parameter 'utf8' [ 110.864048][ T6584] exfat: Deprecated parameter 'namecase' [ 110.865807][ T6584] exfat: Deprecated parameter 'namecase' [ 110.887751][ T6584] exfat: Deprecated parameter 'utf8' [ 110.952574][ T6584] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0x5270ca8d, utbl_chksum : 0xe619d30d) [ 112.467832][ T6624] netlink: 20 bytes leftover after parsing attributes in process `syz.1.860'. [ 112.478544][ T6624] device vlan2 entered promiscuous mode [ 112.480254][ T6624] device gretap0 entered promiscuous mode [ 113.202049][ T6666] netlink: 44 bytes leftover after parsing attributes in process `syz.0.873'. [ 113.212610][ T6675] device pim6reg1 entered promiscuous mode [ 114.876881][ T6725] netlink: 12 bytes leftover after parsing attributes in process `syz.2.884'. [ 115.208752][ T6767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.213871][ T6767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.229572][ T6767] loop4: detected capacity change from 0 to 256 [ 115.237022][ T6767] exfat: Deprecated parameter 'utf8' [ 115.249014][ T6767] exfat: Deprecated parameter 'namecase' [ 115.251999][ T6767] exfat: Deprecated parameter 'namecase' [ 115.256261][ T6767] exfat: Deprecated parameter 'utf8' [ 115.280421][ T6767] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0x5270ca8d, utbl_chksum : 0xe619d30d) [ 115.357981][ T6769] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 116.741996][ T6810] netlink: 36 bytes leftover after parsing attributes in process `syz.1.905'. [ 117.108367][ T6836] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 117.420659][ T6855] netlink: 'syz.1.925': attribute type 1 has an invalid length. [ 117.451983][ T6855] device bond1 entered promiscuous mode [ 117.454058][ T6855] 8021q: adding VLAN 0 to HW filter on device bond1 [ 118.978159][ T4365] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 119.248312][ T4365] usb 1-1: Using ep0 maxpacket: 16 [ 119.369857][ T4365] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.372946][ T4365] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.375608][ T4365] usb 1-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 119.432277][ T4365] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.448475][ T6909] netlink: 44 bytes leftover after parsing attributes in process `syz.2.946'. [ 119.455123][ T4365] usb 1-1: config 0 descriptor?? [ 119.546948][ T4344] hid-generic 0005:0458:0007.0002: collection stack underflow [ 119.553280][ T4344] hid-generic 0005:0458:0007.0002: item 0 0 0 12 parsing failed [ 119.559401][ T4344] hid-generic: probe of 0005:0458:0007.0002 failed with error -22 [ 119.715108][ T6907] loop0: detected capacity change from 0 to 256 [ 119.721127][ T6907] exfat: Deprecated parameter 'utf8' [ 119.722865][ T6907] exfat: Deprecated parameter 'namecase' [ 119.730818][ T6907] exfat: Deprecated parameter 'namecase' [ 119.732721][ T6907] exfat: Deprecated parameter 'utf8' [ 119.751310][ T6907] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0x5270ca8d, utbl_chksum : 0xe619d30d) [ 119.960954][ T6935] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 120.750082][ T6944] tipc: Enabling of bearer rejected, failed to enable media [ 121.722708][ T4365] usbhid 1-1:0.0: can't add hid device: -71 [ 121.724499][ T4365] usbhid: probe of 1-1:0.0 failed with error -71 [ 121.728652][ T4365] usb 1-1: USB disconnect, device number 3 [ 122.657345][ T7063] IPv6: ADDRCONF(NETDEV_CHANGE): rose0: link becomes ready [ 122.755756][ T7063] device syzkaller1 entered promiscuous mode [ 123.466612][ T7101] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 123.479999][ T7101] team0: Port device batadv1 added [ 123.856082][ T7121] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1023'. [ 124.323063][ T7137] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 124.364462][ T7138] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1030'. [ 124.558711][ T7146] netlink: 'syz.3.1036': attribute type 1 has an invalid length. [ 124.578988][ T7146] device bond2 entered promiscuous mode [ 124.580894][ T7146] 8021q: adding VLAN 0 to HW filter on device bond2 [ 124.733181][ T7163] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 125.968498][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.973797][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.437033][ T7208] netlink: 'syz.1.1061': attribute type 27 has an invalid length. [ 126.458413][ T7196] netlink: 'syz.0.1056': attribute type 1 has an invalid length. [ 126.469592][ T7199] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1055'. [ 126.576464][ T7216] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1064'. [ 126.923622][ T7236] IPv6: ADDRCONF(NETDEV_CHANGE): rose0: link becomes ready [ 127.066213][ T7242] IPVS: set_ctl: invalid protocol: 115 100.1.1.0:19999 [ 127.266148][ T7242] device vlan0 entered promiscuous mode [ 127.272271][ T7242] device bridge0 entered promiscuous mode [ 127.566200][ T6381] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 128.469912][ T7256] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1079'. [ 128.650917][ T7271] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 128.961786][ T7292] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 129.006498][ T7294] bond0 speed is unknown, defaulting to 1000 [ 129.035826][ T7303] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1092'. [ 129.686363][ T7294] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1090'. [ 130.130208][ T7364] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 130.478489][ T7390] device pim6reg1 entered promiscuous mode [ 130.758134][ T7406] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1128'. [ 131.955892][ T7429] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 132.052862][ T7441] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1145'. [ 132.088757][ T7440] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1144'. [ 132.120745][ T7443] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1146'. [ 132.541349][ T7468] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 132.599532][ T7472] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1161'. [ 133.650919][ T7532] netlink: 788 bytes leftover after parsing attributes in process `syz.0.1182'. [ 133.655974][ T7532] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1182'. [ 136.454785][ T7609] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1210'. [ 136.481227][ T7609] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1210'. [ 137.320249][ T7617] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1212'. [ 137.511197][ T7627] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1218'. [ 137.525860][ T7627] device vlan0 entered promiscuous mode [ 137.528223][ T7627] device gretap0 entered promiscuous mode [ 137.591685][ T7631] device geneve2 entered promiscuous mode [ 137.604440][ T7631] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1220'. [ 137.777759][ T4306] Bluetooth: hci0: command 0x0401 tx timeout [ 137.813735][ T7644] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1225'. [ 137.877036][ T7649] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 137.967570][ T7653] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1229'. [ 138.480329][ T7674] bond0 speed is unknown, defaulting to 1000 [ 138.525990][ T7676] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 138.594410][ T7674] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1238'. [ 138.828835][ T7684] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1242'. [ 139.197061][ T7700] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 139.311711][ T7710] batman_adv: batadv0: Adding interface: dummy0 [ 139.313792][ T7710] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.329422][ T7710] batman_adv: batadv0: Interface activated: dummy0 [ 139.394519][ T7714] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1256'. [ 139.823799][ T7733] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 141.101851][ T7761] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 142.372569][ T7799] bond0 speed is unknown, defaulting to 1000 [ 142.443794][ T7803] __nla_validate_parse: 2 callbacks suppressed [ 142.443809][ T7803] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1293'. [ 142.619999][ T7813] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1297'. [ 142.625056][ T7813] tipc: Started in network mode [ 142.629444][ T7812] sctp: [Deprecated]: syz.3.1298 (pid 7812) Use of struct sctp_assoc_value in delayed_ack socket option. [ 142.629444][ T7812] Use struct sctp_sack_info instead [ 142.635427][ T7813] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 142.669774][ T7813] tipc: Enabled bearer , priority 10 [ 143.716505][ T7836] device pim6reg1 entered promiscuous mode [ 143.791969][ T1515] tipc: Node number set to 1 [ 143.963221][ T7847] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1312'. [ 143.974563][ T7849] ================================================================== [ 143.976882][ T7849] BUG: KASAN: use-after-free in rose_get_neigh+0x17c/0x480 [ 143.978867][ T7849] Read of size 1 at addr ffff0000f48f0c30 by task syz.0.1311/7849 [ 143.981108][ T7849] [ 143.981762][ T7849] CPU: 0 PID: 7849 Comm: syz.0.1311 Not tainted 6.1.142-syzkaller #0 [ 143.984050][ T7849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 143.986871][ T7849] Call trace: [ 143.987839][ T7849] dump_backtrace+0x1c8/0x1f4 [ 143.989192][ T7849] show_stack+0x2c/0x3c [ 143.990363][ T7849] __dump_stack+0x30/0x40 [ 143.991577][ T7849] dump_stack_lvl+0xf8/0x160 [ 143.992835][ T7849] print_address_description+0x88/0x220 [ 143.994465][ T7849] print_report+0x50/0x68 [ 143.995654][ T7849] kasan_report+0xa8/0x100 [ 143.996925][ T7849] __asan_report_load1_noabort+0x2c/0x38 [ 143.998473][ T7849] rose_get_neigh+0x17c/0x480 [ 143.999749][ T7849] rose_connect+0x364/0xfe8 [ 144.000981][ T7849] __sys_connect+0x264/0x28c [ 144.002281][ T7849] __arm64_sys_connect+0x7c/0x94 [ 144.003728][ T7849] invoke_syscall+0x98/0x2bc [ 144.004957][ T7849] el0_svc_common+0x138/0x258 [ 144.006260][ T7849] do_el0_svc+0x58/0x13c [ 144.007414][ T7849] el0_svc+0x58/0x138 [ 144.008581][ T7849] el0t_64_sync_handler+0x84/0xf0 [ 144.009939][ T7849] el0t_64_sync+0x18c/0x190 [ 144.011201][ T7849] [ 144.011844][ T7849] Allocated by task 6807: [ 144.013029][ T7849] kasan_set_track+0x4c/0x80 [ 144.014340][ T7849] kasan_save_alloc_info+0x28/0x34 [ 144.015762][ T7849] __kasan_kmalloc+0xa0/0xb8 [ 144.017037][ T7849] kmalloc_trace+0x7c/0x94 [ 144.018307][ T7849] rose_add_node+0x1f4/0xba4 [ 144.019638][ T7849] rose_rt_ioctl+0xa04/0xde4 [ 144.020886][ T7849] rose_ioctl+0x378/0xb80 [ 144.022134][ T7849] sock_do_ioctl+0xf8/0x240 [ 144.023355][ T7849] sock_ioctl+0x5c4/0x840 [ 144.024649][ T7849] __arm64_sys_ioctl+0x14c/0x1c8 [ 144.026111][ T7849] invoke_syscall+0x98/0x2bc [ 144.027461][ T7849] el0_svc_common+0x138/0x258 [ 144.028828][ T7849] do_el0_svc+0x58/0x13c [ 144.030053][ T7849] el0_svc+0x58/0x138 [ 144.031128][ T7849] el0t_64_sync_handler+0x84/0xf0 [ 144.032473][ T7849] el0t_64_sync+0x18c/0x190 [ 144.033746][ T7849] [ 144.034363][ T7849] Last potentially related work creation: [ 144.035940][ T7849] kasan_save_stack+0x40/0x70 [ 144.037197][ T7849] __kasan_record_aux_stack+0xc0/0xdc [ 144.038697][ T7849] kasan_record_aux_stack_noalloc+0x14/0x20 [ 144.040349][ T7849] call_rcu+0xfc/0x948 [ 144.041490][ T7849] fib6_del+0xd54/0x1184 [ 144.042759][ T7849] fib6_clean_node+0x224/0x49c [ 144.044065][ T7849] fib6_walk_continue+0x654/0x878 [ 144.045511][ T7849] fib6_walk+0x140/0x254 [ 144.046704][ T7849] __fib6_clean_all+0x1dc/0x310 [ 144.048044][ T7849] fib6_clean_all+0x3c/0x50 [ 144.049311][ T7849] rt6_disable_ip+0x104/0x7c8 [ 144.050579][ T7849] addrconf_ifdown+0x144/0x15dc [ 144.051948][ T7849] addrconf_notify+0x2f4/0xca8 [ 144.053361][ T7849] raw_notifier_call_chain+0xd4/0x164 [ 144.054873][ T7849] __dev_notify_flags+0x250/0x46c [ 144.056254][ T7849] dev_change_flags+0xc8/0x154 [ 144.057584][ T7849] do_setlink+0xa24/0x32c4 [ 144.058885][ T7849] rtnl_newlink+0xce0/0x1a1c [ 144.060229][ T7849] rtnetlink_rcv_msg+0x734/0xce4 [ 144.061641][ T7849] netlink_rcv_skb+0x208/0x3c4 [ 144.063022][ T7849] rtnetlink_rcv+0x28/0x38 [ 144.064252][ T7849] netlink_unicast+0x600/0x818 [ 144.065651][ T7849] netlink_sendmsg+0x6e8/0x9b0 [ 144.067059][ T7849] ____sys_sendmsg+0x5b8/0x918 [ 144.068438][ T7849] __sys_sendmsg+0x25c/0x320 [ 144.069749][ T7849] __arm64_sys_sendmsg+0x80/0x94 [ 144.071118][ T7849] invoke_syscall+0x98/0x2bc [ 144.072570][ T7849] el0_svc_common+0x138/0x258 [ 144.073993][ T7849] do_el0_svc+0x58/0x13c [ 144.075200][ T7849] el0_svc+0x58/0x138 [ 144.076319][ T7849] el0t_64_sync_handler+0x84/0xf0 [ 144.077773][ T7849] el0t_64_sync+0x18c/0x190 [ 144.079073][ T7849] [ 144.079716][ T7849] The buggy address belongs to the object at ffff0000f48f0c00 [ 144.079716][ T7849] which belongs to the cache kmalloc-512 of size 512 [ 144.083972][ T7849] The buggy address is located 48 bytes inside of [ 144.083972][ T7849] 512-byte region [ffff0000f48f0c00, ffff0000f48f0e00) [ 144.087632][ T7849] [ 144.088277][ T7849] The buggy address belongs to the physical page: [ 144.090206][ T7849] page:000000000c5ffbec refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff0000f48f3c00 pfn:0x1348f0 [ 144.093437][ T7849] head:000000000c5ffbec order:2 compound_mapcount:0 compound_pincount:0 [ 144.095811][ T7849] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 144.098101][ T7849] raw: 05ffc00000010200 fffffc0003ce7508 fffffc0003558b08 ffff0000c0002600 [ 144.100496][ T7849] raw: ffff0000f48f3c00 0000000000100001 00000001ffffffff 0000000000000000 [ 144.102968][ T7849] page dumped because: kasan: bad access detected [ 144.104793][ T7849] [ 144.105466][ T7849] Memory state around the buggy address: [ 144.107128][ T7849] ffff0000f48f0b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 144.109405][ T7849] ffff0000f48f0b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 144.111611][ T7849] >ffff0000f48f0c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 144.113889][ T7849] ^ [ 144.115480][ T7849] ffff0000f48f0c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 144.117834][ T7849] ffff0000f48f0d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 144.120119][ T7849] ================================================================== [ 144.122416][ T7849] Disabling lock debugging due to kernel taint [ 144.144756][ T7849] ------------[ cut here ]------------ [ 144.146460][ T7849] ODEBUG: assert_init not available (active state 0) object type: timer_list hint: 0x0 [ 144.152027][ T7849] WARNING: CPU: 0 PID: 7849 at lib/debugobjects.c:518 debug_print_object+0x148/0x1d4 [ 144.154660][ T7849] Modules linked in: [ 144.155795][ T7849] CPU: 0 PID: 7849 Comm: syz.0.1311 Tainted: G B 6.1.142-syzkaller #0 [ 144.158496][ T7849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 144.161269][ T7849] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 144.163474][ T7849] pc : debug_print_object+0x148/0x1d4 [ 144.164971][ T7849] lr : debug_print_object+0x148/0x1d4 [ 144.166575][ T7849] sp : ffff8000213177e0 [ 144.167723][ T7849] x29: ffff8000213177e0 x28: dfff800000000000 x27: 0000000000000000 [ 144.169899][ T7849] x26: ffff800015080000 x25: ffff8000083ae078 x24: dfff800000000000 [ 144.172040][ T7849] x23: 0000000000000000 x22: 0000000000000000 x21: ffff800011f7a300 [ 144.174251][ T7849] x20: ffff800011aaad00 x19: ffff800011f79e40 x18: ffff800011a8bce0 [ 144.176505][ T7849] x17: 1fffe00033ee0b7e x16: ffff800008042c60 x15: 0000000040000002 [ 144.178674][ T7849] x14: 0000000000000002 x13: 0000000000ff0100 x12: 0000000000ff0100 [ 144.180820][ T7849] x11: ff00800008047eec x10: 0000000040000002 x9 : 8c3d5870cd566c00 [ 144.183025][ T7849] x8 : 8c3d5870cd566c00 x7 : 0000000000000004 x6 : ffff800008251edc [ 144.185163][ T7849] x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000000 [ 144.187381][ T7849] x2 : ffff800021317380 x1 : 0000000000000000 x0 : ffff800008251f70 [ 144.189581][ T7849] Call trace: [ 144.190563][ T7849] debug_print_object+0x148/0x1d4 [ 144.191972][ T7849] debug_object_assert_init+0x250/0x2c8 [ 144.193486][ T7849] timer_delete+0x48/0x1e8 [ 144.194764][ T7849] rose_transmit_link+0x43c/0x66c [ 144.196180][ T7849] rose_write_internal+0xeec/0x17c0 [ 144.197643][ T7849] rose_connect+0x8bc/0xfe8 [ 144.198978][ T7849] __sys_connect+0x264/0x28c [ 144.200239][ T7849] __arm64_sys_connect+0x7c/0x94 [ 144.201694][ T7849] invoke_syscall+0x98/0x2bc [ 144.203026][ T7849] el0_svc_common+0x138/0x258 [ 144.204310][ T7849] do_el0_svc+0x58/0x13c [ 144.205483][ T7849] el0_svc+0x58/0x138 [ 144.206567][ T7849] el0t_64_sync_handler+0x84/0xf0 [ 144.207932][ T7849] el0t_64_sync+0x18c/0x190 [ 144.209145][ T7849] irq event stamp: 352 [ 144.210323][ T7849] hardirqs last enabled at (352): [] exit_to_kernel_mode+0xcc/0xfc [ 144.212859][ T7849] hardirqs last disabled at (351): [] el1_interrupt+0x24/0x54 [ 144.215399][ T7849] softirqs last enabled at (340): [] lock_sock_nested+0xe0/0x130 [ 144.218026][ T7849] softirqs last disabled at (342): [] rose_get_neigh+0x60/0x480 [ 144.220613][ T7849] ---[ end trace 0000000000000000 ]--- [ 147.538112][ T4361] ------------[ cut here ]------------ [ 147.539859][ T4361] ODEBUG: free active (active state 0) object type: timer_list hint: 0x0 [ 147.542591][ T4361] WARNING: CPU: 1 PID: 4361 at lib/debugobjects.c:518 debug_check_no_obj_freed+0x38c/0x46c [ 147.545464][ T4361] Modules linked in: [ 147.546677][ T4361] CPU: 1 PID: 4361 Comm: napi/wg2-0 Tainted: G B W 6.1.142-syzkaller #0 [ 147.549278][ T4361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 147.551989][ T4361] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 147.554204][ T4361] pc : debug_check_no_obj_freed+0x38c/0x46c [ 147.555856][ T4361] lr : debug_check_no_obj_freed+0x38c/0x46c [ 147.557457][ T4361] sp : ffff800020d378f0 [ 147.558699][ T4361] x29: ffff800020d37930 x28: ffff0000f48f0e00 x27: 0000000000000000 [ 147.560873][ T4361] x26: ffff800011aaad00 x25: ffff0000f48f0c90 x24: 0000000000000000 [ 147.563162][ T4361] x23: 0000000000000000 x22: ffff0000f48f0000 x21: dfff800000000000 [ 147.565407][ T4361] x20: 0000000000000000 x19: ffff0000f48f0c00 x18: ffff800011a8bce0 [ 147.567634][ T4361] x17: 6e6968207473696c x16: ffff800008042c60 x15: 0000000000000000 [ 147.569917][ T4361] x14: 00000000ffffffff x13: 0000000000000001 x12: 0000000000ff0100 [ 147.572176][ T4361] x11: ff00800008191c9c x10: 0000000000000000 x9 : 025d81c07548eb00 [ 147.574468][ T4361] x8 : 025d81c07548eb00 x7 : 0000000000000001 x6 : 0000000000000001 [ 147.576691][ T4361] x5 : ffff800020d37378 x4 : ffff800015164800 x3 : ffff80000852e344 [ 147.578988][ T4361] x2 : 0000000000000001 x1 : 0000000100000200 x0 : 0000000000000000 [ 147.581204][ T4361] Call trace: [ 147.582134][ T4361] debug_check_no_obj_freed+0x38c/0x46c [ 147.583731][ T4361] slab_free_freelist_hook+0x104/0x1ec [ 147.585261][ T4361] __kmem_cache_free+0xc0/0x224 [ 147.586701][ T4361] kfree+0xd0/0x1ac [ 147.587802][ T4361] skb_release_data+0x43c/0x648 [ 147.589273][ T4361] consume_skb+0xa0/0x104 [ 147.590539][ T4361] wg_packet_rx_poll+0xee4/0x1ba0 [ 147.591985][ T4361] __napi_poll+0xb4/0x3f0 [ 147.593182][ T4361] napi_threaded_poll+0x1c8/0x2e4 [ 147.594634][ T4361] kthread+0x250/0x2d8 [ 147.595762][ T4361] ret_from_fork+0x10/0x20 [ 147.597017][ T4361] irq event stamp: 534 [ 147.598131][ T4361] hardirqs last enabled at (533): [] __local_bh_enable_ip+0x1f8/0x380 [ 147.600945][ T4361] hardirqs last disabled at (534): [] __schedule+0x298/0x1b2c [ 147.603465][ T4361] softirqs last enabled at (532): [] local_bh_enable+0x10/0x34 [ 147.605979][ T4361] softirqs last disabled at (510): [] local_bh_disable+0x10/0x34 [ 147.608466][ T4361] ---[ end trace 0000000000000000 ]--- [ 147.610062][ T4361] ------------[ cut here ]------------ [ 147.611534][ T4361] ODEBUG: free active (active state 0) object type: timer_list hint: 0x0 [ 147.614198][ T4361] WARNING: CPU: 1 PID: 4361 at lib/debugobjects.c:518 debug_object_free+0x348/0x3e0 [ 147.616820][ T4361] Modules linked in: [ 147.617887][ T4361] CPU: 1 PID: 4361 Comm: napi/wg2-0 Tainted: G B W 6.1.142-syzkaller #0 [ 147.620510][ T4361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 147.623309][ T4361] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 147.625432][ T4361] pc : debug_object_free+0x348/0x3e0 [ 147.626900][ T4361] lr : debug_object_free+0x344/0x3e0 [ 147.628388][ T4361] sp : ffff800020d37870 [ 147.629564][ T4361] x29: ffff800020d37870 x28: ffff800015080000 x27: ffff800011aaad00 [ 147.631827][ T4361] x26: dfff800000000000 x25: ffff0000d9a15368 x24: ffff0000f48f0c90 [ 147.634057][ T4361] x23: 0000000000000000 x22: ffff800011aaad00 x21: ffff80001c5ed000 [ 147.636303][ T4361] x20: 0000000000000000 x19: ffff0000f48f0c90 x18: ffff800011a8bce0 [ 147.638434][ T4361] x17: 6e6968207473696c x16: ffff800008042c60 x15: 0000000000000000 [ 147.640856][ T4361] x14: 00000000ffffffff x13: 0000000000000001 x12: 0000000000ff0100 [ 147.643063][ T4361] x11: ff00800008191c9c x10: 0000000000000000 x9 : 025d81c07548eb00 [ 147.645406][ T4361] x8 : ffff800011aaad00 x7 : 0000000000000001 x6 : 0000000000000001 [ 147.647707][ T4361] x5 : ffff800020d372f8 x4 : ffff800015164800 x3 : ffff800008311df4 [ 147.649951][ T4361] x2 : 0000000000000001 x1 : 0000000000000200 x0 : 0000000000000000 [ 147.652189][ T4361] Call trace: [ 147.653195][ T4361] debug_object_free+0x348/0x3e0 [ 147.654539][ T4361] timer_fixup_free+0x4c/0x6c [ 147.655867][ T4361] debug_check_no_obj_freed+0x3d0/0x46c [ 147.657456][ T4361] slab_free_freelist_hook+0x104/0x1ec [ 147.658988][ T4361] __kmem_cache_free+0xc0/0x224 [ 147.660492][ T4361] kfree+0xd0/0x1ac [ 147.661589][ T4361] skb_release_data+0x43c/0x648 [ 147.662938][ T4361] consume_skb+0xa0/0x104 [ 147.664073][ T4361] wg_packet_rx_poll+0xee4/0x1ba0 [ 147.665420][ T4361] __napi_poll+0xb4/0x3f0 [ 147.666694][ T4361] napi_threaded_poll+0x1c8/0x2e4 [ 147.668054][ T4361] kthread+0x250/0x2d8 [ 147.669211][ T4361] ret_from_fork+0x10/0x20 [ 147.670479][ T4361] irq event stamp: 534 [ 147.671583][ T4361] hardirqs last enabled at (533): [] __local_bh_enable_ip+0x1f8/0x380 [ 147.674277][ T4361] hardirqs last disabled at (534): [] __schedule+0x298/0x1b2c [ 147.676820][ T4361] softirqs last enabled at (532): [] local_bh_enable+0x10/0x34 [ 147.679335][ T4361] softirqs last disabled at (510): [] local_bh_disable+0x10/0x34 [ 147.681814][ T4361] ---[ end trace 0000000000000000 ]--- [ 147.683357][ T4361] ------------[ cut here ]------------ [ 147.684795][ T4361] ODEBUG: free active (active state 0) object type: timer_list hint: 0x0 [ 147.687417][ T4361] WARNING: CPU: 1 PID: 4361 at lib/debugobjects.c:518 debug_object_free+0x348/0x3e0 [ 147.690083][ T4361] Modules linked in: [ 147.691176][ T4361] CPU: 1 PID: 4361 Comm: napi/wg2-0 Tainted: G B W 6.1.142-syzkaller #0 [ 147.693800][ T4361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 147.696654][ T4361] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 147.698875][ T4361] pc : debug_object_free+0x348/0x3e0 [ 147.700342][ T4361] lr : debug_object_free+0x344/0x3e0 [ 147.701765][ T4361] sp : ffff800020d377f0 [ 147.702863][ T4361] x29: ffff800020d377f0 x28: ffff800015080000 x27: ffff800011aaad00 [ 147.705142][ T4361] x26: dfff800000000000 x25: ffff0000d9a15368 x24: ffff0000f48f0c90 [ 147.707392][ T4361] x23: 0000000000000000 x22: ffff800011aaad00 x21: ffff80001c5ed000 [ 147.709614][ T4361] x20: 0000000000000000 x19: ffff0000f48f0c90 x18: ffff800011a8bce0 [ 147.711839][ T4361] x17: 6e6968207473696c x16: ffff800008042c60 x15: 0000000000000000 [ 147.714060][ T4361] x14: 00000000ffffffff x13: 0000000000000001 x12: 0000000000ff0100 [ 147.716456][ T4361] x11: ff00800008191c9c x10: 0000000000000000 x9 : 025d81c07548eb00 [ 147.718834][ T4361] x8 : ffff800011aaad00 x7 : 0000000000000001 x6 : 0000000000000001 [ 147.721089][ T4361] x5 : ffff800020d37278 x4 : ffff800015164800 x3 : ffff80000a83d7ac [ 147.723357][ T4361] x2 : ffff00019f726d10 x1 : 0000000000000200 x0 : 0000000000000000 [ 147.725474][ T4361] Call trace: [ 147.726383][ T4361] debug_object_free+0x348/0x3e0 [ 147.727789][ T4361] timer_fixup_free+0x4c/0x6c [ 147.729116][ T4361] debug_object_free+0x388/0x3e0 [ 147.730434][ T4361] timer_fixup_free+0x4c/0x6c [ 147.731715][ T4361] debug_check_no_obj_freed+0x3d0/0x46c [ 147.733317][ T4361] slab_free_freelist_hook+0x104/0x1ec [ 147.734804][ T4361] __kmem_cache_free+0xc0/0x224 [ 147.736103][ T4361] kfree+0xd0/0x1ac [ 147.737143][ T4361] skb_release_data+0x43c/0x648 [ 147.738441][ T4361] consume_skb+0xa0/0x104 [ 147.739677][ T4361] wg_packet_rx_poll+0xee4/0x1ba0 [ 147.741139][ T4361] __napi_poll+0xb4/0x3f0 [ 147.742310][ T4361] napi_threaded_poll+0x1c8/0x2e4 [ 147.743743][ T4361] kthread+0x250/0x2d8 [ 147.744893][ T4361] ret_from_fork+0x10/0x20 [ 147.746129][ T4361] irq event stamp: 534 [ 147.747293][ T4361] hardirqs last enabled at (533): [] __local_bh_enable_ip+0x1f8/0x380 [ 147.750070][ T4361] hardirqs last disabled at (534): [] __schedule+0x298/0x1b2c [ 147.752595][ T4361] softirqs last enabled at (532): [] local_bh_enable+0x10/0x34 [ 147.755270][ T4361] softirqs last disabled at (510): [] local_bh_disable+0x10/0x34 [ 147.757915][ T4361] ---[ end trace 0000000000000000 ]--- [ 147.759456][ T4361] ------------[ cut here ]------------ [ 147.761137][ T4361] ODEBUG: free active (active state 0) object type: timer_list hint: 0x0 [ 147.763718][ T4361] WARNING: CPU: 1 PID: 4361 at lib/debugobjects.c:518 debug_object_free+0x348/0x3e0 [ 147.766260][ T4361] Modules linked in: [ 147.767266][ T4361] CPU: 1 PID: 4361 Comm: napi/wg2-0 Tainted: G B W 6.1.142-syzkaller #0 [ 147.769896][ T4361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 147.772690][ T4361] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 147.774863][ T4361] pc : debug_object_free+0x348/0x3e0 [ 147.776336][ T4361] lr : debug_object_free+0x344/0x3e0 [ 147.777833][ T4361] sp : ffff800020d37770 [ 147.778935][ T4361] x29: ffff800020d37770 x28: ffff800015080000 x27: ffff800011aaad00 [ 147.781320][ T4361] x26: dfff800000000000 x25: ffff0000d9a15368 x24: ffff0000f48f0c90 [ 147.783496][ T4361] x23: 0000000000000000 x22: ffff800011aaad00 x21: ffff80001c5ed000 [ 147.785686][ T4361] x20: 0000000000000000 x19: ffff0000f48f0c90 x18: ffff800011a8bce0 [ 147.787931][ T4361] x17: 6e6968207473696c x16: ffff800008042c60 x15: 0000000000000000 [ 147.790146][ T4361] x14: 00000000ffffffff x13: 0000000000000001 x12: 0000000000ff0100 [ 147.792357][ T4361] x11: ff00800008191c9c x10: 0000000000000000 x9 : 025d81c07548eb00 [ 147.794635][ T4361] x8 : ffff800011aaad00 x7 : 0000000000000001 x6 : 0000000000000001 [ 147.796879][ T4361] x5 : ffff800020d371f8 x4 : ffff800015164800 x3 : ffff80000a83d7ac [ 147.799150][ T4361] x2 : ffff00019f726d10 x1 : 0000000000000200 x0 : 0000000000000000 [ 147.801397][ T4361] Call trace: [ 147.802354][ T4361] debug_object_free+0x348/0x3e0 [ 147.803725][ T4361] timer_fixup_free+0x4c/0x6c [ 147.805076][ T4361] debug_object_free+0x388/0x3e0 [ 147.806530][ T4361] timer_fixup_free+0x4c/0x6c [ 147.807869][ T4361] debug_object_free+0x388/0x3e0 [ 147.809402][ T4361] timer_fixup_free+0x4c/0x6c [ 147.810749][ T4361] debug_check_no_obj_freed+0x3d0/0x46c [ 147.812180][ T4361] slab_free_freelist_hook+0x104/0x1ec [ 147.813584][ T4361] __kmem_cache_free+0xc0/0x224 [ 147.814958][ T4361] kfree+0xd0/0x1ac [ 147.816009][ T4361] skb_release_data+0x43c/0x648 [ 147.817370][ T4361] consume_skb+0xa0/0x104 [ 147.818523][ T4361] wg_packet_rx_poll+0xee4/0x1ba0 [ 147.819891][ T4361] __napi_poll+0xb4/0x3f0 [ 147.821052][ T4361] napi_threaded_poll+0x1c8/0x2e4 [ 147.822383][ T4361] kthread+0x250/0x2d8 [ 147.823647][ T4361] ret_from_fork+0x10/0x20 [ 147.824891][ T4361] irq event stamp: 534 [ 147.825926][ T4361] hardirqs last enabled at (533): [] __local_bh_enable_ip+0x1f8/0x380 [ 147.828925][ T4361] hardirqs last disabled at (534): [] __schedule+0x298/0x1b2c [ 147.831454][ T4361] softirqs last enabled at (532): [] local_bh_enable+0x10/0x34 [ 147.833903][ T4361] softirqs last disabled at (510): [] local_bh_disable+0x10/0x34 [ 147.836469][ T4361] ---[ end trace 0000000000000000 ]--- [ 147.839007][ C1] Insufficient stack space to handle exception! [ 147.839014][ C1] ESR: 0x0000000096000047 -- DABT (current EL) [ 147.839020][ C1] FAR: 0xffff800020d2fff0 [ 147.839023][ C1] Task stack: [0xffff800020d30000..0xffff800020d38000] [ 147.839029][ C1] IRQ stack: [0xffff800008010000..0xffff800008018000] [ 147.839034][ C1] Overflow stack: [0xffff00019f724320..0xffff00019f725320] [ 147.839042][ C1] CPU: 1 PID: 4361 Comm: napi/wg2-0 Tainted: G B W 6.1.142-syzkaller #0 [ 147.839052][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 147.839059][ C1] pstate: 004000c5 (nzcv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 147.839069][ C1] pc : __sanitizer_cov_trace_pc+0x4/0x94 [ 147.839105][ T3900] Unable to handle kernel NULL pointer dereference at virtual address 000000000000000a [ 147.861308][ T3900] Mem abort info: [ 147.862288][ T3900] ESR = 0x0000000096000004 [ 147.863590][ T3900] EC = 0x25: DABT (current EL), IL = 32 bits [ 147.865254][ T3900] SET = 0, FnV = 0 [ 147.866308][ T3900] EA = 0, S1PTW = 0 [ 147.867411][ T3900] FSC = 0x04: level 0 translation fault [ 147.869038][ T3900] Data abort info: [ 147.870068][ T3900] ISV = 0, ISS = 0x00000004 [ 147.871368][ T3900] CM = 0, WnR = 0 [ 147.872418][ T3900] user pgtable: 4k pages, 48-bit VAs, pgdp=0000000119539000 [ 147.874488][ T3900] [000000000000000a] pgd=0000000000000000, p4d=0000000000000000 [ 147.876605][ T3900] Internal error: Oops: 0000000096000004 [#1] PREEMPT SMP [ 147.878558][ T3900] Modules linked in: [ 147.879690][ T3900] CPU: 0 PID: 3900 Comm: klogd Tainted: G B W 6.1.142-syzkaller #0 [ 147.882266][ T3900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 147.885055][ T3900] pstate: 804000c5 (Nzcv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 147.887185][ T3900] pc : ___slab_alloc+0x2f4/0xe8c [ 147.888569][ T3900] lr : ___slab_alloc+0x2e0/0xe8c [ 147.889961][ T3900] sp : ffff8000234c74c0 [ 147.891286][ T3900] x29: ffff8000234c7540 x28: ffffffff7fff0000 x27: ffff800014ff1780 [ 147.893438][ T3900] x26: 0000000000000000 x25: 00000000ffffffff x24: ffff800014ff1760 [ 147.895649][ T3900] x23: ffff800015081140 x22: ffff800015080000 x21: 0000000000000000 [ 147.897942][ T3900] x20: ffff00019f721760 x19: ffff0000c0bee600 x18: 0000000000000000 [ 147.900145][ T3900] x17: 0000000000000000 x16: ffff800008042c60 x15: 0000000000000000 [ 147.902415][ T3900] x14: 000000000000000a x13: 0000000000ff0100 x12: 0000000000ff0100 [ 147.904615][ T3900] x11: ff0080000a81f490 x10: 0000000000000000 x9 : ffff80000a81f490 [ 147.906779][ T3900] x8 : 0000000000000002 x7 : 0000000000000000 x6 : ffff8000088c9a80 [ 147.909230][ T3900] x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000000 [ 147.911514][ T3900] x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000000 [ 147.913646][ T3900] Call trace: [ 147.914547][ T3900] ___slab_alloc+0x2f4/0xe8c [ 147.915829][ T3900] __slab_alloc+0x74/0xd0 [ 147.917010][ T3900] kmem_cache_alloc_node+0x2c4/0x34c [ 147.918512][ T3900] __alloc_skb+0x128/0x718 [ 147.919785][ T3900] alloc_skb_with_frags+0xa0/0x54c [ 147.921219][ T3900] sock_alloc_send_pskb+0x758/0x874 [ 147.922789][ T3900] unix_dgram_sendmsg+0x42c/0x1268 [ 147.924213][ T3900] __sys_sendto+0x304/0x3fc [ 147.925525][ T3900] __arm64_sys_sendto+0xd8/0xf8 [ 147.926869][ T3900] invoke_syscall+0x98/0x2bc [ 147.928132][ T3900] el0_svc_common+0x138/0x258 [ 147.929431][ T3900] do_el0_svc+0x58/0x13c [ 147.930624][ T3900] el0_svc+0x58/0x138 [ 147.931745][ T3900] el0t_64_sync_handler+0x84/0xf0 [ 147.933164][ T3900] el0t_64_sync+0x18c/0x190 [ 147.934487][ T3900] Code: b5000948 f9400e88 b4001708 f9000a88 (f9400509) [ 147.936424][ T3900] ---[ end trace 0000000000000000 ]--- [ 148.375852][ T3900] Kernel panic - not syncing: Oops: Fatal exception [ 148.377881][ T3900] SMP: stopping secondary CPUs [ 149.466913][ T3900] SMP: failed to stop secondary CPUs 0-1 [ 149.468655][ T3900] Kernel Offset: disabled [ 149.469848][ T3900] CPU features: 0x080000,02070084,26017203 [ 149.471479][ T3900] Memory Limit: none [ 149.900600][ T3900] Rebooting in 86400 seconds..