last executing test programs: 28.16273955s ago: executing program 2 (id=930): r0 = socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x400) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000080)=0xb3, 0x4) 28.16230922s ago: executing program 2 (id=933): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r2, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{0x0}], 0x1}, 0x5d}], 0x1, 0x10022, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r3) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) shutdown(r3, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f0000000000)={@private1, r1}, 0x14) 27.29849796s ago: executing program 2 (id=974): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x30, r1, 0x1, 0x70bd29, 0x25dfdbfb, {0x25}, [@handle=@pci={{0x8}, {0x11}}]}, 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x0) 27.29829748s ago: executing program 2 (id=975): r0 = socket(0x40000000015, 0x805, 0x0) getsockopt(r0, 0x114, 0x251b, 0x0, &(0x7f0000019440)) 27.29812913s ago: executing program 2 (id=976): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0x12, &(0x7f0000000200), 0x4) 27.270520762s ago: executing program 2 (id=978): syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in=@remote, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x60, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x11, 0xa, 0x4) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'bond0\x00', 0x8}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f00000002c0)={0x2, 'veth1_virt_wifi\x00'}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="bc01000019000143ae00000001000000fe880000000000000000000000000101ac1414bb0000000000000000000000000000000000000000020000000000000025a5dedd7f2a801a384ce65399", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000002000000000000000001000000000004010500ac1414aa0000000000000000000000000000000033000000000000000a0101000000000000000000000000000000000000000000000000000000000040000000fe8000000000000000000000000000bb000000003c00000000000000fe80000000000000000000000000000000000000000000000000000000000000000000007f000001000000000000000000000000000000006c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000ac1414bb000000000000000000000000000000003c0000000a000000fc000000000000000000000000000000000000000500"/372], 0x1bc}, 0x1, 0x0, 0x0, 0x1}, 0x4000) sendmsg$nl_route_sched(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x2b1e}, 0x2000c000) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) socket$netlink(0x10, 0x3, 0x12) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="0c0100000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400fc0000000000000000000000000000000c00028005000100000000003c0002800c00028005000100000000002c000180140003000000000000000000000000000000000114000400fe8000000000000000000000000000aa08000740000000007800068014000500fc0200000000000000000000000000010c000380060001000000000014000400fc0200000000000000000000000000002c000380060001"], 0x10c}}, 0x0) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24000044) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r6}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r7}, 0x38) 11.546015195s ago: executing program 32 (id=978): syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in=@remote, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x60, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x11, 0xa, 0x4) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'bond0\x00', 0x8}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f00000002c0)={0x2, 'veth1_virt_wifi\x00'}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="bc01000019000143ae00000001000000fe880000000000000000000000000101ac1414bb0000000000000000000000000000000000000000020000000000000025a5dedd7f2a801a384ce65399", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000002000000000000000001000000000004010500ac1414aa0000000000000000000000000000000033000000000000000a0101000000000000000000000000000000000000000000000000000000000040000000fe8000000000000000000000000000bb000000003c00000000000000fe80000000000000000000000000000000000000000000000000000000000000000000007f000001000000000000000000000000000000006c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000ac1414bb000000000000000000000000000000003c0000000a000000fc000000000000000000000000000000000000000500"/372], 0x1bc}, 0x1, 0x0, 0x0, 0x1}, 0x4000) sendmsg$nl_route_sched(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x2b1e}, 0x2000c000) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) socket$netlink(0x10, 0x3, 0x12) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="0c0100000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400fc0000000000000000000000000000000c00028005000100000000003c0002800c00028005000100000000002c000180140003000000000000000000000000000000000114000400fe8000000000000000000000000000aa08000740000000007800068014000500fc0200000000000000000000000000010c000380060001000000000014000400fc0200000000000000000000000000002c000380060001"], 0x10c}}, 0x0) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24000044) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r6}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r7}, 0x38) 1.646598626s ago: executing program 5 (id=1454): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x4}, 0x8) sendmmsg$inet6(r0, &(0x7f0000001ac0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x2e1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}, 0x1c, &(0x7f00000003c0)}}, {{&(0x7f0000000440)={0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, '\x00', 0x26}, 0x7}, 0x1c, &(0x7f00000015c0)=[{&(0x7f0000000480)="bc", 0x1}], 0x1}}], 0x2, 0x8085) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000380)={0x0, 0x9, 0x400}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r5, &(0x7f0000000040)={0x1a, 0x0, 0x10, 0x0, 0xfe, 0xb, @local}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000000), 0xffffff6a) sendfile(r5, r6, 0x0, 0xffffffff000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') socket$nl_netfilter(0x10, 0x3, 0xc) 1.35730501s ago: executing program 4 (id=1464): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e22, @private=0xa010106}]}, &(0x7f0000000180)=0x10) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000380)) 832.711542ms ago: executing program 5 (id=1475): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x20, 0x1404, 0x200, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r7 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001080)=ANY=[@ANYBLOB="e0000000100001002dbd7000fddbdf257874732874776f666973682900000000000000000000000000000000000000000000000000000000000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000002000"/224], 0xe0}, 0x1, 0x0, 0x0, 0x44}, 0x80) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6000000010000104a0518fd50000000000000000", @ANYRES32=0x0, @ANYBLOB="096b0200000000002c00128009000100626f6e64000000001c00028006001900ff0300000800090001000000080007000300000014003500626f6e6430"], 0x60}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) unshare(0x22020600) r9 = socket$inet6(0xa, 0x80002, 0x88) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000004c0)={@cgroup, 0x14, 0x1, 0x8, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r11 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, r1, 0x25, 0x10, @void}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000580)={@map=r4, r5, 0x16, 0x2010, 0x0, @value=r11, @void, @void, @void, r10}, 0x20) setsockopt$inet6_udp_int(r9, 0x11, 0xb, &(0x7f00000000c0)=0x7ffffffc, 0x4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000004f40)={'gre0\x00', &(0x7f0000000240)={'gretap0\x00', r1, 0x1, 0x20, 0x0, 0x4, {{0x33, 0x4, 0x1, 0x8, 0xcc, 0x67, 0x0, 0xdb, 0x4, 0x0, @empty, @empty, {[@timestamp_prespec={0x44, 0x44, 0x58, 0x3, 0xa, [{@local, 0x2f}, {@multicast1, 0x6}, {@local, 0x7fff}, {@empty, 0x80000000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x47ed}, {@remote, 0x2}, {@broadcast, 0xa}, {@broadcast, 0xfffffffa}]}, @end, @timestamp_prespec={0x44, 0x24, 0x4c, 0x3, 0x6, [{@empty, 0x7f}, {@empty, 0x7}, {@empty, 0x43}, {@multicast1, 0x6}]}, @timestamp_addr={0x44, 0x3c, 0xc3, 0x1, 0xf, [{@multicast2, 0x8001}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x39ba}, {@loopback, 0x10001}, {@dev={0xac, 0x14, 0x14, 0x19}, 0x80000000}, {@multicast1, 0x1800}, {@multicast2, 0xffffffff}, {@private=0xa010100, 0xc0000}]}, @noop, @noop, @timestamp={0x44, 0xc, 0x64, 0x0, 0x6, [0xff0d, 0x8]}, @timestamp={0x44, 0x4, 0xfa, 0x0, 0x4}, @noop]}}}}}) 625.037389ms ago: executing program 5 (id=1486): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 555.616695ms ago: executing program 5 (id=1491): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0x27, 0xe, 0x0, &(0x7f0000001100)="52e111e84e379c9250a0fa7588a8", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 489.74561ms ago: executing program 5 (id=1494): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="b40500000000000079109c000000000005000000000000009500000000000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x9, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000032e8d800007f12f8ff108458688a354c9c582ef915ca"], &(0x7f0000000080)='GPL\x00'}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x6f1b, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x40, 0x4) recvmmsg(r0, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/27, 0x1b}, 0x7}], 0x1, 0x45833af92e4b39ff, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r3, &(0x7f0000000140)='tasks\x00', 0x2, 0x0) r4 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r5 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000000c0), 0x40) pread64(r5, &(0x7f0000001840)=""/4096, 0x1000, 0x1) 428.497715ms ago: executing program 4 (id=1496): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b70000000a000000bca30000000000002403000020feffff620af0fff8ffffff71a4f2ff000000001f03000000000000e5000300000000002604fdffff02000016010000033800001d13f8ff000000007a0af0ff0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c0100001800010000000000010000001d0101001500040001000080ff000000a67494fcd3a42289070000001e010600fe"], 0x14c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 394.786458ms ago: executing program 3 (id=1499): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r1) socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48050}, 0x40004) 393.708318ms ago: executing program 4 (id=1500): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x3, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newtfilter={0x44, 0x28, 0xd27, 0x1003ffd, 0x0, {0x0, 0x0, 0x0, r4, {0xffe0, 0x9}, {0x2}, {0x2, 0xb}}, [@filter_kind_options=@f_fw={{0x7}, {0x18, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'geneve0\x00'}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x810}, 0x200008c0) 341.668252ms ago: executing program 0 (id=1502): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000029"], 0xb8}}, 0x4004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) 340.990893ms ago: executing program 3 (id=1503): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 337.639123ms ago: executing program 4 (id=1504): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 322.791204ms ago: executing program 1 (id=1505): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000080)={{0x3, @default, 0x4}, [@null, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @default]}, 0x48) connect$ax25(r0, &(0x7f00000001c0)={{0x3, @default}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) 293.973726ms ago: executing program 0 (id=1506): socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0600000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000001b00"/28], 0x48) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0x0, 0x5, 0x8}, 0xc) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x1, 'syz1\x00', @bcast, 0x10001, 0x8, [@bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) ioctl$SIOCNRDECOBS(r0, 0x89e2) 277.557058ms ago: executing program 3 (id=1507): syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x58}}, 0x0) 277.357398ms ago: executing program 0 (id=1508): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x3}, 0x8}, 0x94) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, 0x0, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000001500), 0x8) 273.128808ms ago: executing program 1 (id=1509): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000402000000000004000046876500"/32], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000400)=0xc) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000640)=ANY=[@ANYBLOB="002d000100000000000000000008150c00000000068329bd286c5b8fc828856831fa01e94b7c127039478052ad2727e644f28d8cb3ac704b3728ed387efc456bdaf0498c4da1fb73f1ea0b1845eb81ad22202d488bbc69eebf6765b7b2d742ac364850da9e26bcea", @ANYRES32=r1, @ANYBLOB="0b000080976b640868603000180001801400f6801000468008004a00b300000004004d80"], 0x3c}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) socket(0x2, 0x80805, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1}, 0x1c) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000a00)={{{@in6=@private0, @in6}}, {{@in=@dev}, 0x0, @in6=@local}}, &(0x7f0000000b00)=0xe8) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x10000, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xfffffdb6, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000440)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x8, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) 250.15894ms ago: executing program 5 (id=1510): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0x0) socket$isdn_base(0x22, 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000021c0), 0x5b, 0x40, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x20000400) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xd, 0x200cc, 0x6, 0x5}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240), 0x4b2, r4}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, &(0x7f0000000540)=""/245, &(0x7f0000000640), &(0x7f0000001740), 0x2, r4}, 0x38) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'caif0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x20, r5, 0x1, 0x1000, 0x0, {0x2a}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40040}, 0x0) listen(r2, 0xe9c) r7 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000084010500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000ac1414aa000000000000000000000000000000003c00000000000000fe80000000000000000000000000000000000000000000000008000000000000000000007f000001000000000000000000000000000000003200000000000000e00000010000000000000000000000000000800003030000000000000000000000000000ff0100000000000000000000000000010000000033000000000000000a010101000000000000000000000000043500000000010000000000bf0a000000000000fe8000000000000000000000000000aa000004d533"], 0x23c}}, 0x0) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r8, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000fcdbdf250e00000008000300", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x14}, 0x0) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r9, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x851}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r10, {}, {0x0, 0xc}, {0xfff3}}}, 0x24}}, 0x0) 235.588271ms ago: executing program 4 (id=1511): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0x14}, @ipv4=@tcp={{0x6, 0x4, 0x0, 0x8, 0xfc0, 0x68, 0x0, 0x3, 0x6, 0x0, @private=0xa010100, @remote, {[@end]}}, {{0x4e20, 0x4e22, 0x41424344, 0x41424344, 0x1, 0x0, 0x6, 0x10, 0x1, 0x0, 0x8, {[@mss={0x2, 0x4, 0xb}]}}, {"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"}}}}, 0xfce) 206.128363ms ago: executing program 3 (id=1512): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FWMARK={0x8, 0x12, 0x2581}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1a}, 0x1, 0x0, 0x0, 0xc040810}, 0xc000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 203.824773ms ago: executing program 1 (id=1513): r0 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f00000007c0)=0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000000)={r2}, &(0x7f0000000040)=0x8) 178.531925ms ago: executing program 0 (id=1514): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x3, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newtfilter={0x44, 0x28, 0xd27, 0x1003ffd, 0x0, {0x0, 0x0, 0x0, r4, {0xffe0, 0x9}, {0x2}, {0x2, 0xb}}, [@filter_kind_options=@f_fw={{0x7}, {0x18, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'geneve0\x00'}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x810}, 0x200008c0) 137.991398ms ago: executing program 1 (id=1515): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2b}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 137.047889ms ago: executing program 4 (id=1516): socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x68, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x103a, 0x1000, 0x103a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) write$tun(r1, &(0x7f0000000200)={@val={0xa}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x18, 0x11, 0xff, @empty, @mcast2, {[], {0x4f19, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0xb, 0x10000}}}}}}}}, 0x52) 104.595721ms ago: executing program 3 (id=1517): socket$xdp(0x2c, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r0, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c076f2c6014f5d219221d80481aed108a2cb749a807133ed7a80ffe0090f000060000000a2bcb503ca00000f7f890000002000", 0x46}], 0x1) 82.465093ms ago: executing program 1 (id=1518): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 79.445624ms ago: executing program 0 (id=1519): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x64, 0x0, 0x917, 0x1000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback={0xffff0000}}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}]}, 0x64}, 0x1, 0x0, 0x0, 0x44}, 0x0) 50.638696ms ago: executing program 3 (id=1520): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="b40500000000000079109c000000000005000000000000009500000000000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x9, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000032e8d800007f12f8ff108458688a354c9c582ef915ca"], &(0x7f0000000080)='GPL\x00'}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x6f1b, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x40, 0x4) recvmmsg(r0, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/27, 0x1b}, 0x7}], 0x1, 0x45833af92e4b39ff, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_procs(r3, &(0x7f0000000140)='tasks\x00', 0x2, 0x0) r4 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r5 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000000c0), 0x40) pread64(r5, &(0x7f0000001840)=""/4096, 0x1000, 0x1) 945.45µs ago: executing program 1 (id=1521): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) connect$ax25(r0, &(0x7f00000001c0)={{0x3, @default}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) 0s ago: executing program 0 (id=1522): syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)=ANY=[], 0x58}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.31' (ED25519) to the list of known hosts. [ 31.171299][ T4310] cgroup: Unknown subsys name 'net' [ 31.434040][ T4310] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 31.729991][ T4310] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 32.566429][ T4321] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 32.570839][ T4324] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 32.578257][ T4326] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 32.580217][ T4328] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 32.581495][ T4328] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 32.583147][ T4328] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 32.585316][ T4335] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 32.586578][ T4335] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 32.587830][ T4332] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 32.588107][ T4335] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 32.589694][ T4332] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 32.590973][ T4336] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 32.591951][ T4332] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 32.592985][ T4336] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 32.594003][ T4332] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 32.594838][ T4336] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 32.596111][ T4332] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 32.597414][ T4336] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 32.598069][ T4332] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 32.598832][ T4336] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 32.600060][ T4332] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 32.601094][ T4336] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 32.602926][ T4332] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 32.604099][ T4336] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 32.607054][ T4337] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 32.607759][ T4336] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 32.609432][ T4336] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 32.619418][ T4337] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 32.620832][ T47] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 32.622405][ T47] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 32.739233][ T4320] chnl_net:caif_netlink_parms(): no params data found [ 32.745685][ T4330] chnl_net:caif_netlink_parms(): no params data found [ 32.775696][ T4323] chnl_net:caif_netlink_parms(): no params data found [ 32.785127][ T4327] chnl_net:caif_netlink_parms(): no params data found [ 32.806298][ T4320] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.807400][ T4320] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.808790][ T4320] device bridge_slave_0 entered promiscuous mode [ 32.810616][ T4330] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.812358][ T4330] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.813999][ T4330] device bridge_slave_0 entered promiscuous mode [ 32.816707][ T4330] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.817889][ T4330] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.819313][ T4330] device bridge_slave_1 entered promiscuous mode [ 32.829715][ T4320] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.830780][ T4320] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.832594][ T4320] device bridge_slave_1 entered promiscuous mode [ 32.845896][ T4330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.848273][ T4330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.866004][ T4327] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.867220][ T4327] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.868575][ T4327] device bridge_slave_0 entered promiscuous mode [ 32.871073][ T4327] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.872526][ T4327] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.873961][ T4327] device bridge_slave_1 entered promiscuous mode [ 32.876555][ T4320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.881214][ T4330] team0: Port device team_slave_0 added [ 32.882547][ T4333] chnl_net:caif_netlink_parms(): no params data found [ 32.884934][ T4330] team0: Port device team_slave_1 added [ 32.888637][ T4320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.890159][ T4323] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.891290][ T4323] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.892823][ T4323] device bridge_slave_0 entered promiscuous mode [ 32.907072][ T4323] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.908347][ T4323] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.909754][ T4323] device bridge_slave_1 entered promiscuous mode [ 32.914847][ T4330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.915931][ T4330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.919992][ T4330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.923472][ T4327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.925800][ T4320] team0: Port device team_slave_0 added [ 32.927052][ T4330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.928200][ T4330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.932139][ T4330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.938077][ T4327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.940143][ T4320] team0: Port device team_slave_1 added [ 32.956019][ T4320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.957113][ T4320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.960926][ T4320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.963860][ T4323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.970040][ T4327] team0: Port device team_slave_0 added [ 32.971304][ T4320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.972906][ T4320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.977124][ T4320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.979739][ T4323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.022747][ T4330] device hsr_slave_0 entered promiscuous mode [ 33.061885][ T4330] device hsr_slave_1 entered promiscuous mode [ 33.123173][ T4327] team0: Port device team_slave_1 added [ 33.135363][ T4333] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.136604][ T4333] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.138053][ T4333] device bridge_slave_0 entered promiscuous mode [ 33.139869][ T4333] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.140968][ T4333] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.142509][ T4333] device bridge_slave_1 entered promiscuous mode [ 33.153858][ T4327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.154920][ T4327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.158615][ T4327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.161520][ T4323] team0: Port device team_slave_0 added [ 33.171835][ T4327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.173021][ T4327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.177099][ T4327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.179758][ T4323] team0: Port device team_slave_1 added [ 33.187780][ T4333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.232513][ T4320] device hsr_slave_0 entered promiscuous mode [ 33.271817][ T4320] device hsr_slave_1 entered promiscuous mode [ 33.321675][ T4320] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 33.322972][ T4320] Cannot create hsr debugfs directory [ 33.324599][ T4333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.337786][ T4323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.338745][ T4323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.344684][ T4323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.352390][ T4333] team0: Port device team_slave_0 added [ 33.353620][ T4323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.354670][ T4323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.358461][ T4323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.360991][ T4333] team0: Port device team_slave_1 added [ 33.422495][ T4327] device hsr_slave_0 entered promiscuous mode [ 33.471879][ T4327] device hsr_slave_1 entered promiscuous mode [ 33.521774][ T4327] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 33.522965][ T4327] Cannot create hsr debugfs directory [ 33.527403][ T4333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.528523][ T4333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.533103][ T4333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.539239][ T4333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.540347][ T4333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.544629][ T4333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.612549][ T4323] device hsr_slave_0 entered promiscuous mode [ 33.651933][ T4323] device hsr_slave_1 entered promiscuous mode [ 33.691708][ T4323] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 33.693052][ T4323] Cannot create hsr debugfs directory [ 33.772740][ T4333] device hsr_slave_0 entered promiscuous mode [ 33.811893][ T4333] device hsr_slave_1 entered promiscuous mode [ 33.851664][ T4333] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 33.852885][ T4333] Cannot create hsr debugfs directory [ 33.894615][ T4330] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 33.938447][ T4330] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 33.973993][ T4330] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 34.012758][ T4330] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 34.088272][ T4320] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 34.135377][ T4320] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 34.174564][ T4320] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 34.235440][ T4320] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 34.285778][ T4330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.289929][ T4330] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.292992][ T1698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.294875][ T1698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.307953][ T1698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.309713][ T1698] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.311394][ T1698] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.312662][ T1698] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.314303][ T1698] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.319541][ T254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.321124][ T254] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.324085][ T254] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.325078][ T254] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.327710][ T4323] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 34.376717][ T4323] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 34.412765][ T254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.414451][ T254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.416238][ T4323] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 34.465963][ T4323] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 34.502965][ T4327] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 34.532787][ T4327] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 34.572956][ T4327] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 34.613349][ T4327] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 34.642150][ T4328] Bluetooth: hci3: command 0x0409 tx timeout [ 34.642156][ T4326] Bluetooth: hci4: command 0x0409 tx timeout [ 34.642254][ T4326] Bluetooth: hci1: command 0x0409 tx timeout [ 34.643170][ T4328] Bluetooth: hci2: command 0x0409 tx timeout [ 34.644133][ T4326] Bluetooth: hci0: command 0x0409 tx timeout [ 34.664461][ T1698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.666172][ T1698] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.670359][ T1698] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.678343][ T4330] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 34.679910][ T4330] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 34.692703][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.694333][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.695821][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.697342][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.698961][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.700451][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.709163][ T4333] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 34.763546][ T4333] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 34.823023][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.828150][ T4333] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 34.853077][ T4333] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 34.894044][ T4320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.895900][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.897275][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.907556][ T4330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.917494][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.918904][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.921389][ T4323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.929603][ T4320] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.935808][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.937251][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.940328][ T4327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.943725][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.945237][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.946691][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.947735][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.954686][ T4323] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.955938][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.957457][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.959105][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.960471][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.961638][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.965385][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.973715][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.975488][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.977142][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.978591][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.979877][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.981211][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.983930][ T254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.985586][ T254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.987869][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.989377][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.990790][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.991992][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.998695][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 35.000137][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 35.001977][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 35.003493][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 35.005122][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.008056][ T4327] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.013799][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 35.015193][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.016727][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.017808][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.019072][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 35.020563][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 35.023158][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.030942][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 35.033508][ T1622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 35.035055][ T1622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.036497][ T1622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.037989][ T1622] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.039304][ T1622] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.046816][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 35.048764][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 35.050310][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 35.051799][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 35.054099][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.055232][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.056643][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 35.058042][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.059630][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.060723][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.065194][ T4330] device veth0_vlan entered promiscuous mode [ 35.067248][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 35.068832][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 35.070175][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 35.085897][ T4333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.087150][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 35.089264][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 35.096093][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 35.097650][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.099097][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 35.100625][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.103733][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 35.107205][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 35.108742][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.111035][ T4330] device veth1_vlan entered promiscuous mode [ 35.115824][ T4333] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.117439][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 35.127582][ T1622] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.129135][ T1622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 35.130604][ T1622] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 35.135517][ T1622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 35.137518][ T1622] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 35.142200][ T1622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 35.148348][ T1622] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.149852][ T1622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 35.151387][ T1622] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.155537][ T1622] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 35.159370][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 35.168800][ T4320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.173345][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.174882][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 35.176418][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 35.177843][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.179110][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.180449][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 35.189031][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 35.190295][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 35.196115][ T254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 35.197557][ T254] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.199003][ T254] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.200082][ T254] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.201342][ T254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 35.213636][ T4330] device veth0_macvtap entered promiscuous mode [ 35.215584][ T1698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 35.217332][ T1698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.218881][ T1698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.220805][ T1698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.223442][ T1698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.235619][ T1698] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.237176][ T1698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 35.239013][ T1698] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 35.240576][ T1698] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 35.243126][ T1698] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 35.244266][ T1698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.245749][ T1698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.249615][ T4323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.252569][ T4330] device veth1_macvtap entered promiscuous mode [ 35.254637][ T4320] device veth0_vlan entered promiscuous mode [ 35.256949][ T1698] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.258409][ T1698] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 35.259904][ T1698] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.261270][ T1698] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.263140][ T1698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 35.264727][ T1698] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 35.274588][ T4320] device veth1_vlan entered promiscuous mode [ 35.275925][ T1698] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.277427][ T1698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 35.279088][ T1698] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.280441][ T1698] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 35.282188][ T1698] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 35.284085][ T1622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 35.285580][ T1622] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.294563][ T4327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.298895][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 35.300415][ T1698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.302146][ T1698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.304624][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.308443][ T1698] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.309886][ T1698] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.311492][ T1698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.315146][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.318342][ T1698] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.319776][ T1698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.327441][ T4330] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.328774][ T4330] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.330177][ T4330] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.331480][ T4330] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.345332][ T1698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.347022][ T1698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.348562][ T1698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.350050][ T1698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.351486][ T1698] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.356203][ T1698] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.363974][ T4323] device veth0_vlan entered promiscuous mode [ 35.367660][ T4323] device veth1_vlan entered promiscuous mode [ 35.373031][ T4320] device veth0_macvtap entered promiscuous mode [ 35.375938][ T1698] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.377324][ T1698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.378728][ T1698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.380210][ T1698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.381548][ T1698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.384150][ T1698] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.385488][ T1698] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.386832][ T1698] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.394100][ T4320] device veth1_macvtap entered promiscuous mode [ 35.401478][ T4327] device veth0_vlan entered promiscuous mode [ 35.410837][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.413989][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.416253][ T4320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.419549][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.421154][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.425193][ T4320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.426709][ T4327] device veth1_vlan entered promiscuous mode [ 35.428894][ T254] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.430328][ T254] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.432508][ T254] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.433992][ T254] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.435524][ T254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.437060][ T254] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.438480][ T254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.441153][ T254] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 35.443778][ T254] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 35.452675][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.453871][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.455567][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.457026][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.458865][ T4320] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.460332][ T4320] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.462556][ T4320] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.463853][ T4320] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.471194][ T4333] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.473592][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.475094][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.481363][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.482942][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.484521][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.487075][ T4323] device veth0_macvtap entered promiscuous mode [ 35.490438][ T4323] device veth1_macvtap entered promiscuous mode [ 35.511280][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.514354][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.515927][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.517473][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.532664][ T4327] device veth0_macvtap entered promiscuous mode [ 35.535644][ T4327] device veth1_macvtap entered promiscuous mode [ 35.537312][ T4323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.538905][ T4323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.540495][ T4323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.546888][ T4323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.549700][ T4323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.555113][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.556635][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.558007][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.559546][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.574849][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.576502][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.578109][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.579849][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.581417][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.590459][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.607881][ T4327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.610759][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.615630][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.617243][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.618978][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.621274][ T4327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.624555][ T4327] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.626010][ T4327] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.627465][ T4327] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.628834][ T4327] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.654274][ T254] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.655992][ T254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.657521][ T254] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.658950][ T254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.668124][ T4323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.669825][ T4323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.671463][ T4323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.673578][ T4323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.675150][ T4323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.676749][ T4323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.679020][ T4323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.686934][ T254] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.688577][ T254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.690001][ T254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.691464][ T254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.976770][ T1622] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.978238][ T1622] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.986366][ T254] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.987332][ T254] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.989802][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.993275][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.996431][ T4323] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.997847][ T4323] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.999443][ T4323] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.000950][ T4323] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.006779][ T1698] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.008260][ T1698] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.010017][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 36.011735][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 36.013963][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 36.015473][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 36.016815][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 36.029972][ T4333] device veth0_vlan entered promiscuous mode [ 36.041244][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.045096][ T4333] device veth1_vlan entered promiscuous mode [ 36.045420][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.049046][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 36.050827][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 36.102695][ T4333] device veth0_macvtap entered promiscuous mode [ 36.105918][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.107410][ T254] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 36.108936][ T254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 36.110624][ T254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 36.112869][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.114358][ T254] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 36.119860][ T254] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 36.133332][ T4333] device veth1_macvtap entered promiscuous mode [ 36.140713][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.144338][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.147558][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 36.149192][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 36.166604][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.173778][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.175251][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.179252][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.180805][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.182767][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.184281][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.185894][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.195000][ T4333] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.197688][ T254] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 36.199347][ T254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 36.205267][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.207109][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.210196][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.212717][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.218533][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.222929][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.224525][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.226538][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.229143][ T4333] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.238646][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 36.240395][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 36.259193][ T4333] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.260563][ T4333] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.266969][ T4333] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.268836][ T4333] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.308408][ T254] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.309738][ T254] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.311335][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 36.334417][ T254] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.335593][ T254] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.337254][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 36.721977][ T4326] Bluetooth: hci0: command 0x041b tx timeout [ 36.722682][ T47] Bluetooth: hci2: command 0x041b tx timeout [ 36.723266][ T4326] Bluetooth: hci1: command 0x041b tx timeout [ 36.723925][ T47] Bluetooth: hci3: command 0x041b tx timeout [ 36.725006][ T4326] Bluetooth: hci4: command 0x041b tx timeout [ 36.753954][ T4454] netlink: 'syz.1.8': attribute type 10 has an invalid length. [ 36.774467][ T4454] team0: Port device dummy0 added [ 36.792026][ T4456] netlink: 'syz.1.8': attribute type 10 has an invalid length. [ 36.811047][ T4456] team0: Port device dummy0 removed [ 36.814710][ T4456] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 36.834653][ T4462] loop4: detected capacity change from 0 to 4096 [ 36.864007][ T4462] NILFS (loop4): invalid segment: Checksum error in segment payload [ 36.865427][ T4462] NILFS (loop4): trying rollback from an earlier position [ 36.872447][ T4467] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12'. [ 36.879347][ T4467] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.12'. [ 36.893529][ T4462] NILFS (loop4): recovery complete [ 36.911723][ T4468] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 37.226048][ T4473] mmap: syz.4.5 (4473) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 37.619946][ T4496] Bluetooth: MGMT ver 1.22 [ 37.626191][ T4492] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19'. [ 37.681025][ T4503] netlink: 12 bytes leftover after parsing attributes in process `syz.1.23'. [ 37.751057][ T4510] netlink: 72 bytes leftover after parsing attributes in process `syz.1.26'. [ 37.790148][ T4512] netlink: 4 bytes leftover after parsing attributes in process `syz.4.27'. [ 37.862997][ T4522] tipc: Started in network mode [ 37.863868][ T4522] tipc: Node identity 7234d0f93e6a, cluster identity 4711 [ 37.864988][ T4522] tipc: Enabled bearer , priority 0 [ 37.877422][ T4522] device syzkaller0 entered promiscuous mode [ 37.984554][ T4522] tipc: Resetting bearer [ 37.988570][ T4521] tipc: Resetting bearer [ 38.053015][ T4521] tipc: Disabling bearer [ 38.059890][ T4539] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.111540][ T4546] netlink: 16 bytes leftover after parsing attributes in process `syz.4.41'. [ 38.113118][ T4546] netlink: 8 bytes leftover after parsing attributes in process `syz.4.41'. [ 38.399153][ T4581] syz.0.57 uses obsolete (PF_INET,SOCK_PACKET) [ 38.400993][ T4582] Driver unsupported XDP return value 0 on prog (id 5) dev N/A, expect packet loss! [ 38.590922][ T4602] netlink: 'syz.4.64': attribute type 6 has an invalid length. [ 38.613896][ T4604] netlink: 8 bytes leftover after parsing attributes in process `syz.4.65'. [ 38.802478][ T4326] Bluetooth: hci4: command 0x040f tx timeout [ 38.810965][ T4623] device syzkaller0 entered promiscuous mode [ 38.812005][ T4326] Bluetooth: hci3: command 0x040f tx timeout [ 38.812030][ T4326] Bluetooth: hci1: command 0x040f tx timeout [ 38.812049][ T4326] Bluetooth: hci2: command 0x040f tx timeout [ 38.812068][ T4326] Bluetooth: hci0: command 0x040f tx timeout [ 39.079440][ T4662] netlink: 20 bytes leftover after parsing attributes in process `syz.0.92'. [ 40.882020][ T4328] Bluetooth: hci0: command 0x0419 tx timeout [ 40.882282][ T4326] Bluetooth: hci2: command 0x0419 tx timeout [ 40.883064][ T4328] Bluetooth: hci1: command 0x0419 tx timeout [ 40.884038][ T4326] Bluetooth: hci3: command 0x0419 tx timeout [ 40.884852][ T4328] Bluetooth: hci4: command 0x0419 tx timeout [ 50.263470][ T4735] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.367594][ T4753] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 50.368969][ T4753] IPv6: NLM_F_CREATE should be set when creating new route [ 50.370059][ T4753] IPv6: NLM_F_CREATE should be set when creating new route [ 50.374894][ T4753] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 50.424062][ T4755] __nla_validate_parse: 1 callbacks suppressed [ 50.424080][ T4755] netlink: 8 bytes leftover after parsing attributes in process `syz.4.130'. [ 50.440896][ T4759] tipc: Started in network mode [ 50.448538][ T4759] tipc: Node identity aaaaaaaaaa41, cluster identity 4711 [ 50.454647][ T4759] tipc: Enabled bearer , priority 10 [ 50.547786][ T4768] netlink: 32 bytes leftover after parsing attributes in process `syz.4.136'. [ 50.593013][ T4753] Zero length message leads to an empty skb [ 50.622149][ T4773] netlink: 'syz.4.138': attribute type 1 has an invalid length. [ 50.623336][ T4773] netlink: 'syz.4.138': attribute type 1 has an invalid length. [ 50.624457][ T4773] netlink: 216 bytes leftover after parsing attributes in process `syz.4.138'. [ 50.683449][ T4781] bridge0: port 3(erspan0) entered blocking state [ 50.686832][ T4781] bridge0: port 3(erspan0) entered disabled state [ 50.689869][ T4781] device erspan0 entered promiscuous mode [ 50.693528][ T4781] bridge0: port 3(erspan0) entered blocking state [ 50.694645][ T4781] bridge0: port 3(erspan0) entered forwarding state [ 50.749600][ T4774] netlink: 8 bytes leftover after parsing attributes in process `syz.1.139'. [ 50.835782][ T4798] netlink: 8 bytes leftover after parsing attributes in process `syz.2.150'. [ 50.844641][ T4798] device batadv0 entered promiscuous mode [ 50.845811][ T4798] device vlan2 entered promiscuous mode [ 51.041505][ T4812] netlink: 'syz.2.156': attribute type 1 has an invalid length. [ 51.045240][ T4812] netlink: 'syz.2.156': attribute type 2 has an invalid length. [ 51.134800][ T4821] tipc: Enabled bearer , priority 0 [ 51.136604][ T4821] device syzkaller0 entered promiscuous mode [ 51.222622][ T4820] tipc: Resetting bearer [ 51.322988][ T4820] tipc: Disabling bearer [ 51.379371][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.380985][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.382116][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.670644][ T4863] netlink: 144 bytes leftover after parsing attributes in process `syz.0.180'. [ 51.673247][ T4863] netlink: 5 bytes leftover after parsing attributes in process `syz.0.180'. [ 52.132554][ T14] tipc: Node number set to 15444650 [ 52.145018][ T4924] netlink: 'syz.3.204': attribute type 4 has an invalid length. [ 52.311260][ T4945] netlink: 8 bytes leftover after parsing attributes in process `syz.0.215'. [ 52.325003][ T4946] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.326418][ T4946] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.327734][ T4946] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.329047][ T4946] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.346140][ T4946] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 52.347663][ T4946] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 52.349067][ T4946] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 52.350508][ T4946] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 52.414442][ T4954] netlink: 'syz.4.220': attribute type 1 has an invalid length. [ 52.424565][ T4954] device bond1 entered promiscuous mode [ 52.426783][ T4954] 8021q: adding VLAN 0 to HW filter on device bond1 [ 52.429706][ T4961] netlink: 3 bytes leftover after parsing attributes in process `syz.4.220'. [ 52.433351][ T4961] device batadv1 entered promiscuous mode [ 52.435597][ T4961] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 52.437965][ T4961] bond1: (slave batadv1): making interface the new active one [ 52.439980][ T4961] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 52.446247][ T4955] netlink: 44 bytes leftover after parsing attributes in process `syz.0.219'. [ 52.447887][ T1698] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 52.498355][ T4964] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 0, id = 0 [ 52.514058][ T4963] device vlan2 entered promiscuous mode [ 52.515017][ T4963] device batadv0 entered promiscuous mode [ 52.572409][ T4972] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input2 [ 53.337104][ T5019] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 53.713528][ T5043] device veth1_macvtap left promiscuous mode [ 53.929288][ T5043] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.930704][ T5043] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.356912][ T5043] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.376873][ T5043] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.440735][ T5066] sctp: [Deprecated]: syz.0.255 (pid 5066) Use of struct sctp_assoc_value in delayed_ack socket option. [ 54.440735][ T5066] Use struct sctp_sack_info instead [ 54.658086][ T5043] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.659623][ T5043] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.661091][ T5043] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.662599][ T5043] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.211925][ T5108] tipc: Started in network mode [ 55.212847][ T5108] tipc: Node identity 2d000000000000000000000000000001, cluster identity 4711 [ 55.214348][ T5108] tipc: Enabling of bearer rejected, failed to enable media [ 55.568869][ T5156] Bluetooth: MGMT ver 1.22 [ 55.961896][ T5145] __nla_validate_parse: 13 callbacks suppressed [ 55.961916][ T5145] netlink: 28 bytes leftover after parsing attributes in process `syz.1.290'. [ 55.964299][ T5145] netlink: 28 bytes leftover after parsing attributes in process `syz.1.290'. [ 55.966131][ T5155] tipc: Cannot configure node identity twice [ 55.967120][ T5155] tipc: Cannot configure node identity twice [ 55.978631][ T5156] netlink: 'syz.1.290': attribute type 2 has an invalid length. [ 55.980032][ T5156] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.290'. [ 56.128835][ T5177] netlink: 4 bytes leftover after parsing attributes in process `syz.1.303'. [ 56.134140][ T5181] netlink: 8 bytes leftover after parsing attributes in process `syz.0.304'. [ 56.272848][ T5177] device hsr_slave_1 left promiscuous mode [ 56.275640][ T5185] ip6t_srh: unknown srh invflags 4449 [ 56.312897][ T5180] netlink: 8 bytes leftover after parsing attributes in process `syz.2.305'. [ 56.344541][ T5189] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 56.345745][ T5189] IPv6: NLM_F_CREATE should be set when creating new route [ 56.524908][ T5212] netlink: 24 bytes leftover after parsing attributes in process `syz.4.318'. [ 56.786972][ T14] syzkaller0: tun_net_xmit 76 [ 56.788021][ T14] syzkaller0: tun_net_xmit 48 [ 56.788898][ T5236] netlink: 8 bytes leftover after parsing attributes in process `syz.2.324'. [ 56.790399][ T5236] netlink: 12 bytes leftover after parsing attributes in process `syz.2.324'. [ 56.794853][ T5235] syzkaller0: create flow: hash 295909448 index 1 [ 56.797470][ T5236] netlink: 8 bytes leftover after parsing attributes in process `syz.2.324'. [ 56.811813][ T14] syzkaller0: tun_net_xmit 76 [ 56.851856][ T4384] syzkaller0: tun_net_xmit 76 [ 56.853437][ T5234] syzkaller0: delete flow: hash 295909448 index 1 [ 64.485227][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.486469][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.494964][ T7] cfg80211: failed to load regulatory.db [ 67.854199][ T5236] __nla_validate_parse: 2 callbacks suppressed [ 67.854220][ T5236] netlink: 28 bytes leftover after parsing attributes in process `syz.2.324'. [ 67.856670][ T5231] netlink: 8 bytes leftover after parsing attributes in process `syz.2.324'. [ 67.858105][ T5231] netlink: 24 bytes leftover after parsing attributes in process `syz.2.324'. [ 67.967833][ T5291] device syzkaller1 entered promiscuous mode [ 67.987362][ T5299] netlink: 17 bytes leftover after parsing attributes in process `syz.2.341'. [ 67.995632][ T5301] netlink: 56 bytes leftover after parsing attributes in process `syz.4.342'. [ 68.163770][ T5315] IPVS: Scheduler module ip_vs_sip not found [ 68.182122][ T5318] nbd: couldn't find device at index 808464432 [ 68.248543][ T5333] netlink: 8 bytes leftover after parsing attributes in process `syz.3.354'. [ 68.490348][ T5364] netlink: 8 bytes leftover after parsing attributes in process `syz.3.368'. [ 68.499739][ T5364] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 68.608297][ T5376] netlink: 8 bytes leftover after parsing attributes in process `syz.4.372'. [ 68.614325][ T5376] netlink: 16 bytes leftover after parsing attributes in process `syz.4.372'. [ 69.109406][ T5417] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 69.127966][ T5417] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.129435][ T5417] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.139181][ T5417] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.187104][ T5417] device bridge_slave_1 left promiscuous mode [ 69.188358][ T5417] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.232767][ T5417] bond0: (slave bond_slave_0): Releasing backup interface [ 69.236360][ T5421] netlink: 32 bytes leftover after parsing attributes in process `syz.2.392'. [ 69.269750][ T5417] bond0: (slave bond_slave_1): Releasing backup interface [ 69.328142][ T5417] team0: Failed to send options change via netlink (err -105) [ 69.329569][ T5417] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 69.331474][ T5417] team0: Port device team_slave_0 removed [ 69.339921][ T5417] team0: Failed to send options change via netlink (err -105) [ 69.341503][ T5417] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 69.346918][ T5417] team0: Port device team_slave_1 removed [ 69.348253][ T5417] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.349629][ T5417] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 69.352512][ T5417] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.353817][ T5417] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 69.359504][ T5417] bond1: (slave batadv1): Releasing active interface [ 69.699579][ T5440] netlink: 'syz.1.400': attribute type 3 has an invalid length. [ 69.707474][ T5444] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 69.709207][ T5444] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 69.719551][ T5440] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 69.720741][ T5440] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 69.722489][ T5440] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.724405][ T5440] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.778846][ T5440] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 69.906503][ T5448] IPVS: length: 148 != 24 [ 70.210618][ T254] nci: nci_rx_work: unknown MT 0x1 [ 70.634769][ T5493] device syzkaller1 entered promiscuous mode [ 70.866859][ T5511] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 70.869521][ T5511] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 70.911868][ T5511] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 70.992101][ T5521] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 70.999020][ T5521] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 71.096290][ T5527] netlink: 'syz.0.431': attribute type 46 has an invalid length. [ 71.264262][ T5543] device erspan0 entered promiscuous mode [ 71.265230][ T5543] device macsec1 entered promiscuous mode [ 71.272665][ T5543] device erspan0 left promiscuous mode [ 71.438113][ T5555] Bluetooth: MGMT ver 1.22 [ 82.717765][ T5589] tipc: Started in network mode [ 82.718515][ T5589] tipc: Node identity , cluster identity 4711 [ 82.719496][ T5589] tipc: Failed to set node id, please configure manually [ 82.720484][ T5589] tipc: Enabling of bearer rejected, failed to enable media [ 82.829529][ T5611] device vlan2 entered promiscuous mode [ 82.830431][ T5611] device team0 entered promiscuous mode [ 82.831211][ T5611] device team_slave_0 entered promiscuous mode [ 82.837676][ T5611] device team_slave_1 entered promiscuous mode [ 83.010009][ T5633] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 83.068442][ T5639] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 83.081169][ T5639] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.083365][ T5639] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.572621][ T5676] __nla_validate_parse: 6 callbacks suppressed [ 83.572724][ T5676] netlink: 8 bytes leftover after parsing attributes in process `syz.4.489'. [ 83.847361][ T5689] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 83.929917][ T5698] device syzkaller0 entered promiscuous mode [ 83.988368][ T5704] netlink: 8 bytes leftover after parsing attributes in process `syz.3.502'. [ 84.278373][ T5601] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.279624][ T5601] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.281565][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.290036][ T5736] netlink: 'syz.1.518': attribute type 12 has an invalid length. [ 84.358120][ T5740] bridge0: port 3(erspan0) entered disabled state [ 84.449990][ T5740] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.451261][ T5740] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.885459][ T5740] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.899708][ T5740] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.207578][ T5740] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.209271][ T5740] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.210568][ T5740] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.215513][ T5740] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.507489][ T5800] netlink: 16 bytes leftover after parsing attributes in process `syz.2.545'. [ 85.509062][ T5800] 8021q: VLANs not supported on hsr0 [ 85.604115][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.605650][ T5817] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 85.676448][ T5825] netlink: 12 bytes leftover after parsing attributes in process `syz.3.556'. [ 85.695633][ T5828] netlink: 'syz.2.558': attribute type 12 has an invalid length. [ 85.696905][ T5828] netlink: 'syz.2.558': attribute type 29 has an invalid length. [ 85.701474][ T5828] netlink: 148 bytes leftover after parsing attributes in process `syz.2.558'. [ 85.723512][ T5828] netlink: 'syz.2.558': attribute type 2 has an invalid length. [ 85.724810][ T5828] netlink: 23 bytes leftover after parsing attributes in process `syz.2.558'. [ 85.937053][ T5855] netlink: 24 bytes leftover after parsing attributes in process `syz.4.571'. [ 86.024810][ T5865] netlink: 12 bytes leftover after parsing attributes in process `syz.1.574'. [ 86.030627][ T5865] 8021q: adding VLAN 0 to HW filter on device bond1 [ 86.037536][ T5865] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 86.045177][ T5865] bond0: (slave dummy0): Releasing backup interface [ 86.089733][ T5865] device bridge_slave_0 left promiscuous mode [ 86.090991][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.142681][ T5865] device bridge_slave_1 left promiscuous mode [ 86.143756][ T5865] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.183135][ T5865] bond0: (slave bond_slave_0): Releasing backup interface [ 86.223180][ T5865] bond0: (slave bond_slave_1): Releasing backup interface [ 86.262753][ T5865] device team_slave_0 left promiscuous mode [ 86.264787][ T5865] team0: Port device team_slave_0 removed [ 86.265958][ T5865] device team_slave_1 left promiscuous mode [ 86.267616][ T5865] team0: Port device team_slave_1 removed [ 86.268849][ T5865] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.270370][ T5865] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.410299][ T5889] netlink: 12 bytes leftover after parsing attributes in process `syz.1.586'. [ 86.512712][ T5901] netdevsim netdevsim2: Direct firmware load for  failed with error -2 [ 86.520185][ T5901] netdevsim netdevsim2: Falling back to sysfs fallback for:  [ 86.625058][ T5911] netlink: 12 bytes leftover after parsing attributes in process `syz.0.597'. [ 86.700076][ T5919] device syzkaller1 entered promiscuous mode [ 87.140614][ T5960] tipc: Enabled bearer , priority 0 [ 87.142769][ T5960] device syzkaller0 entered promiscuous mode [ 87.186265][ T5960] tipc: Resetting bearer [ 87.188470][ T5959] tipc: Resetting bearer [ 87.244687][ T5967] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input3 [ 87.272675][ T5959] tipc: Disabling bearer [ 87.375421][ T5975] tipc: Enabled bearer , priority 0 [ 87.377020][ T5975] device syzkaller0 entered promiscuous mode [ 87.422557][ T5982] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 87.506033][ T5975] tipc: Resetting bearer [ 87.507045][ T5975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 87.510730][ T5974] tipc: Resetting bearer [ 87.582681][ T5974] tipc: Disabling bearer [ 87.669975][ T5997] IPVS: length: 209 != 24 [ 87.775984][ T47] Bluetooth: hci4: link tx timeout [ 87.777201][ T47] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 87.778779][ T47] Bluetooth: hci4: link tx timeout [ 87.779531][ T47] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 88.089009][ T6037] nbd: couldn't find device at index 808464432 [ 88.372415][ T6083] netlink: 'syz.1.671': attribute type 18 has an invalid length. [ 88.375008][ T6083] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.376430][ T6083] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.377689][ T6083] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.378970][ T6083] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.393015][ T6083] netlink: 'syz.1.671': attribute type 18 has an invalid length. [ 88.556673][ T6104] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 88.620431][ T6113] __nla_validate_parse: 10 callbacks suppressed [ 88.620448][ T6113] netlink: 8 bytes leftover after parsing attributes in process `syz.0.685'. [ 88.629641][ T6113] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 88.690462][ T6124] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 88.690540][ T9] bond0: (slave bond_slave_0): interface is now down [ 88.693513][ T9] bond0: no route to arp_ip_target 0.0.5.0 and arp_validate is set [ 88.694732][ T9] bond0: (slave bond_slave_1): interface is now down [ 88.712431][ T9] bond0: (slave bond_slave_0): interface is now down [ 88.713542][ T9] bond0: (slave bond_slave_1): interface is now down [ 88.731726][ T9] bond0: (slave bond_slave_0): interface is now down [ 88.732887][ T9] bond0: (slave bond_slave_1): interface is now down [ 88.752139][ T5074] bond0: (slave bond_slave_0): interface is now down [ 88.753281][ T5074] bond0: (slave bond_slave_1): interface is now down [ 88.755227][ T5074] bond0: now running without any active interface! [ 88.844694][ T6131] netlink: 12 bytes leftover after parsing attributes in process `syz.1.691'. [ 88.846424][ T6139] netlink: 'syz.4.694': attribute type 10 has an invalid length. [ 88.914111][ T6139] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 89.076400][ T6170] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 89.293111][ T6189] tun0: tun_chr_ioctl cmd 2147767520 [ 89.294584][ T6189] netlink: 'syz.0.714': attribute type 1 has an invalid length. [ 89.299736][ T6189] netlink: 224 bytes leftover after parsing attributes in process `syz.0.714'. [ 89.429299][ T6194] device geneve2 entered promiscuous mode [ 89.841727][ T47] Bluetooth: hci4: command 0x0406 tx timeout [ 89.986407][ T6205] netlink: 4 bytes leftover after parsing attributes in process `syz.3.721'. [ 90.204367][ T6221] netlink: 16 bytes leftover after parsing attributes in process `syz.0.727'. [ 90.394843][ T6242] netlink: 4 bytes leftover after parsing attributes in process `syz.1.736'. [ 90.588204][ T6263] tipc: Enabled bearer , priority 0 [ 90.590977][ T6263] device syzkaller0 entered promiscuous mode [ 90.656598][ T6263] tipc: Resetting bearer [ 90.668934][ T6262] tipc: Resetting bearer [ 90.733301][ T6262] tipc: Disabling bearer [ 90.994938][ T6300] tipc: Started in network mode [ 90.995919][ T6300] tipc: Node identity , cluster identity 4711 [ 90.997388][ T6300] tipc: Failed to obtain node identity [ 90.998333][ T6300] tipc: Enabling of bearer rejected, failed to enable media [ 91.000057][ T6300] device syzkaller0 entered promiscuous mode [ 91.279095][ T6315] netlink: 'syz.2.763': attribute type 2 has an invalid length. [ 91.698827][ T6347] netlink: 52 bytes leftover after parsing attributes in process `syz.2.777'. [ 91.700499][ T6347] netlink: 16 bytes leftover after parsing attributes in process `syz.2.777'. [ 91.971109][ T6371] device vlan2 entered promiscuous mode [ 91.973636][ T6371] device dummy0 entered promiscuous mode [ 92.047396][ T6377] device syzkaller1 entered promiscuous mode [ 92.282936][ T6394] Bluetooth: MGMT ver 1.22 [ 92.966883][ T6414] device syzkaller0 entered promiscuous mode [ 93.916869][ T6438] netlink: 'syz.3.817': attribute type 1 has an invalid length. [ 93.918148][ T6438] netlink: 'syz.3.817': attribute type 2 has an invalid length. [ 103.928391][ T6456] netlink: 'syz.3.825': attribute type 12 has an invalid length. [ 103.929777][ T6456] netlink: 'syz.3.825': attribute type 29 has an invalid length. [ 103.930875][ T6456] netlink: 148 bytes leftover after parsing attributes in process `syz.3.825'. [ 103.932990][ T6456] netlink: 59 bytes leftover after parsing attributes in process `syz.3.825'. [ 103.934425][ T6457] netlink: 'syz.3.825': attribute type 12 has an invalid length. [ 103.935503][ T6457] netlink: 'syz.3.825': attribute type 29 has an invalid length. [ 103.936487][ T6457] netlink: 148 bytes leftover after parsing attributes in process `syz.3.825'. [ 103.937637][ T6457] netlink: 59 bytes leftover after parsing attributes in process `syz.3.825'. [ 103.986469][ T6461] 8021q: VLANs not supported on hsr0 [ 104.222394][ T6498] netlink: 'syz.0.838': attribute type 1 has an invalid length. [ 104.223771][ T6498] netlink: 'syz.0.838': attribute type 2 has an invalid length. [ 104.346021][ T6468] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 104.415989][ T6524] device hsr0 entered promiscuous mode [ 104.476245][ T6523] device hsr0 left promiscuous mode [ 104.504427][ T6529] netlink: 8 bytes leftover after parsing attributes in process `syz.0.849'. [ 104.797545][ T6562] netlink: 56 bytes leftover after parsing attributes in process `syz.4.862'. [ 105.135885][ T47] Bluetooth: hci4: link tx timeout [ 105.136834][ T47] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 105.138123][ T47] Bluetooth: hci4: link tx timeout [ 105.138887][ T47] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 105.208279][ T6599] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 105.659552][ T6640] netlink: 16 bytes leftover after parsing attributes in process `syz.0.897'. [ 105.697034][ T6645] device vlan2 entered promiscuous mode [ 105.698138][ T6645] device bridge0 entered promiscuous mode [ 105.783818][ T6655] netlink: 28 bytes leftover after parsing attributes in process `syz.2.903'. [ 105.827044][ T6666] netlink: 20 bytes leftover after parsing attributes in process `syz.4.907'. [ 105.856578][ T6670] netlink: 'syz.3.905': attribute type 10 has an invalid length. [ 105.857972][ T6670] netlink: 2 bytes leftover after parsing attributes in process `syz.3.905'. [ 105.859524][ T6670] device team0 entered promiscuous mode [ 105.860325][ T6670] device team_slave_0 entered promiscuous mode [ 105.864649][ T6670] device team_slave_1 entered promiscuous mode [ 105.866853][ T6670] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.875362][ T6670] bridge0: port 4(team0) entered blocking state [ 105.877742][ T6670] bridge0: port 4(team0) entered disabled state [ 105.949051][ T6679] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 106.827470][ T6745] tipc: Started in network mode [ 106.828329][ T6745] tipc: Node identity 666609913d97, cluster identity 4711 [ 106.846699][ T6745] tipc: Enabled bearer , priority 0 [ 106.848330][ T6748] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 106.852113][ T6745] device syzkaller0 entered promiscuous mode [ 106.907843][ T6756] device bond2 entered promiscuous mode [ 106.908937][ T6756] 8021q: adding VLAN 0 to HW filter on device bond2 [ 106.911378][ T6745] tipc: Resetting bearer [ 106.919763][ T6741] tipc: Resetting bearer [ 107.064007][ T6741] tipc: Disabling bearer [ 107.277205][ T6793] sctp: [Deprecated]: syz.4.964 (pid 6793) Use of int in max_burst socket option. [ 107.277205][ T6793] Use struct sctp_assoc_value instead [ 107.371383][ T6805] loop6: detected capacity change from 0 to 7 [ 107.375361][ T6458] Dev loop6: unable to read RDB block 7 [ 107.376367][ T6458] loop6: unable to read partition table [ 107.377263][ T6458] loop6: partition table beyond EOD, truncated [ 107.381005][ T6805] Dev loop6: unable to read RDB block 7 [ 107.382017][ T6805] loop6: unable to read partition table [ 107.382921][ T6805] loop6: partition table beyond EOD, truncated [ 107.388366][ T6805] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 107.608250][ T6824] IPVS: stopping backup sync thread 6826 ... [ 108.589192][ T6846] loop1: detected capacity change from 0 to 4096 [ 108.595144][ T6844] loop0: detected capacity change from 0 to 4096 [ 108.596435][ T6846] NILFS (loop1): invalid segment: Checksum error in segment payload [ 108.598430][ T6846] NILFS (loop1): trying rollback from an earlier position [ 108.619638][ T6846] NILFS (loop1): recovery complete [ 108.624906][ T6853] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 108.639721][ T6844] NILFS (loop0): invalid segment: Checksum error in segment payload [ 108.642704][ T6844] NILFS (loop0): trying rollback from an earlier position [ 108.671291][ T6844] NILFS (loop0): recovery complete [ 108.690469][ T6856] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 109.344533][ T6898] loop0: detected capacity change from 0 to 512 [ 109.350328][ T6898] ======================================================= [ 109.350328][ T6898] WARNING: The mand mount option has been deprecated and [ 109.350328][ T6898] and is ignored by this kernel. Remove the mand [ 109.350328][ T6898] option from the mount to silence this warning. [ 109.350328][ T6898] ======================================================= [ 109.399166][ T6898] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 109.627699][ T6898] EXT4-fs (loop0): orphan cleanup on readonly fs [ 109.636488][ T6898] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1003: bg 0: block 248: padding at end of block bitmap is not set [ 109.641384][ T6898] Quota error (device loop0): write_blk: dquota write failed [ 109.642810][ T6898] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 109.644322][ T6898] EXT4-fs error (device loop0): ext4_acquire_dquot:6814: comm syz.0.1003: Failed to acquire dquot type 1 [ 109.652875][ T6898] EXT4-fs (loop0): 1 truncate cleaned up [ 110.405155][ T6898] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 110.457160][ T6897] loop3: detected capacity change from 0 to 512 [ 110.465047][ T6901] __nla_validate_parse: 18 callbacks suppressed [ 110.465064][ T6901] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1004'. [ 110.490427][ T6897] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 110.500023][ T6897] EXT4-fs (loop3): orphan cleanup on readonly fs [ 110.509349][ T6897] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1002: bg 0: block 248: padding at end of block bitmap is not set [ 110.513680][ T6897] Quota error (device loop3): write_blk: dquota write failed [ 110.515184][ T6897] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 110.516854][ T6897] EXT4-fs error (device loop3): ext4_acquire_dquot:6814: comm syz.3.1002: Failed to acquire dquot type 1 [ 110.520351][ T6897] EXT4-fs (loop3): 1 truncate cleaned up [ 110.526812][ T6897] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 110.956720][ T6908] loop1: detected capacity change from 0 to 32768 [ 110.986050][ T6908] JBD2: Ignoring recovery information on journal [ 111.013504][ T6908] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 111.082920][ T4320] EXT4-fs (loop0): unmounting filesystem. [ 111.135918][ T4327] ocfs2: Unmounting device (7,1) on (node local) [ 111.352487][ T6916] xt_hashlimit: max too large, truncated to 1048576 [ 111.354927][ T6916] No such timeout policy "syz1" [ 112.273649][ T6912] loop0: detected capacity change from 0 to 32768 [ 112.376121][ T6925] loop4: detected capacity change from 0 to 512 [ 112.581614][ C0] sched: RT throttling activated [ 112.599163][ T6912] JBD2: Ignoring recovery information on journal [ 112.712019][ T6925] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 112.876925][ T6925] EXT4-fs (loop4): orphan cleanup on readonly fs [ 112.881519][ T6925] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1009: bg 0: block 248: padding at end of block bitmap is not set [ 112.886246][ T6925] Quota error (device loop4): write_blk: dquota write failed [ 112.887541][ T6925] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 112.889197][ T6925] EXT4-fs error (device loop4): ext4_acquire_dquot:6814: comm syz.4.1009: Failed to acquire dquot type 1 [ 112.892975][ T6925] EXT4-fs (loop4): 1 truncate cleaned up [ 113.518830][ T6925] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 113.559475][ T6912] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 113.627443][ T4320] ocfs2: Unmounting device (7,0) on (node local) [ 114.010218][ T4323] EXT4-fs (loop3): unmounting filesystem. [ 114.178483][ T4333] EXT4-fs (loop4): unmounting filesystem. [ 115.149854][ T6958] xt_hashlimit: max too large, truncated to 1048576 [ 115.151329][ T6958] No such timeout policy "syz1" [ 115.748435][ T6965] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (65535) [ 115.750163][ T6965] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 115.966355][ T6978] tipc: Enabled bearer , priority 0 [ 115.980823][ T6978] device syzkaller0 entered promiscuous mode [ 116.245858][ T6991] tipc: Resetting bearer [ 116.247278][ T7000] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1030'. [ 116.971827][ T4374] tipc: Node number set to 754974721 [ 117.079193][ T7043] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1045'. [ 117.305737][ T7050] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1048'. [ 123.365273][ T7082] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1060'. [ 123.410756][ T4326] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 123.413228][ T4326] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 123.414674][ T4326] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 123.416084][ T4326] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 123.417456][ T4326] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 123.418701][ T4326] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 123.438497][ T7093] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1063'. [ 123.736542][ T7097] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 123.738902][ T7097] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.782029][ T7097] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 123.870950][ T7108] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.872673][ T7108] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.874029][ T7108] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.875442][ T7108] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.883196][ T7108] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 123.884585][ T7108] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 123.886030][ T7108] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 123.887451][ T7108] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 123.988201][ T7114] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1072'. [ 123.993285][ T7088] chnl_net:caif_netlink_parms(): no params data found [ 124.036125][ T7088] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.037516][ T7088] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.039024][ T7088] device bridge_slave_0 entered promiscuous mode [ 124.043412][ T7088] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.044569][ T7088] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.046078][ T7088] device bridge_slave_1 entered promiscuous mode [ 124.061552][ T7088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 124.065845][ T7088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 124.080689][ T7088] team0: Port device team_slave_0 added [ 124.083898][ T7088] team0: Port device team_slave_1 added [ 124.112029][ T7088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.113167][ T7088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.128570][ T7088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.131041][ T7088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.132194][ T7088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.135904][ T7088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.192795][ T7088] device hsr_slave_0 entered promiscuous mode [ 124.211831][ T7088] device hsr_slave_1 entered promiscuous mode [ 124.251755][ T7088] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 124.252936][ T7088] Cannot create hsr debugfs directory [ 124.397403][ T7088] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 124.433086][ T7142] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 124.434413][ T7142] IPv6: NLM_F_CREATE should be set when creating new route [ 124.435557][ T7142] IPv6: NLM_F_CREATE should be set when creating new route [ 124.440326][ T7088] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 124.473027][ T7088] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 124.505520][ T7152] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1085'. [ 124.517110][ T7088] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 124.563938][ T7142] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 124.660107][ T7088] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.661202][ T7088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.662564][ T7088] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.663770][ T7088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.681542][ T7088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.690278][ T1622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 124.696611][ T1622] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.698664][ T1622] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.704902][ T7088] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.715052][ T1622] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 124.716744][ T1622] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.717941][ T1622] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.721016][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 124.729229][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.730491][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.739019][ T1622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 124.741223][ T1622] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 124.748501][ T1622] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 124.761257][ T1622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 124.768648][ T1622] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 124.779555][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 124.781418][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 124.784056][ T7162] tipc: Started in network mode [ 124.785334][ T7162] tipc: Node identity 2, cluster identity 4711 [ 124.790703][ T7162] tipc: Node number set to 2 [ 124.792692][ T7162] tipc: Cannot configure node identity twice [ 124.799766][ T7088] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 124.804022][ T7088] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 124.807606][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 124.809167][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 124.911009][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 124.912612][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 124.915953][ T7088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.197718][ T1622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 125.199428][ T1622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 125.220289][ T7212] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1102'. [ 125.237108][ T7212] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 125.240506][ T7088] device veth0_vlan entered promiscuous mode [ 125.243787][ T6900] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 125.245413][ T6900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 125.247429][ T6900] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 125.249171][ T6900] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 125.255288][ T7088] device veth1_vlan entered promiscuous mode [ 125.299984][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 125.301691][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 125.303130][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 125.304465][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 125.307363][ T7088] device veth0_macvtap entered promiscuous mode [ 125.346592][ T7088] device veth1_macvtap entered promiscuous mode [ 125.424117][ T7088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.425935][ T7088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.427520][ T7088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.429459][ T7088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.433171][ T7088] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.435952][ T6842] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 125.437490][ T6842] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 125.438995][ T6842] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 125.441862][ T47] Bluetooth: hci5: command 0x0409 tx timeout [ 125.449314][ T6842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 125.473766][ T7228] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 125.474860][ T7088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.479669][ T7228] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 125.485821][ T7088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.487392][ T7088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.488937][ T7088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.493228][ T7088] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.506056][ T6842] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 125.507767][ T6842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 125.520374][ T7088] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.521924][ T7088] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.523317][ T7088] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.524693][ T7088] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.547344][ T7232] device syzkaller1 entered promiscuous mode [ 125.628497][ T6842] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.629792][ T6842] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.638853][ T6842] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 125.640372][ T7242] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1116'. [ 125.644355][ T7242] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 125.647484][ T6842] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.649574][ T6842] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.664957][ T6900] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 125.922849][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.923918][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.001339][ T7277] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1128'. [ 126.005620][ T7277] IPv6: ADDRCONF(NETDEV_CHANGE): gre2: link becomes ready [ 126.098312][ T7280] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 126.100900][ T7280] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 126.141932][ T7280] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 126.144703][ T7283] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1142'. [ 126.148058][ T7283] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 126.436425][ T7316] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1145'. [ 126.442575][ T7316] IPv6: ADDRCONF(NETDEV_CHANGE): gre2: link becomes ready [ 126.556722][ T7330] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 126.557863][ T7330] IPv6: NLM_F_CREATE should be set when creating new route [ 126.558924][ T7330] IPv6: NLM_F_CREATE should be set when creating new route [ 126.560379][ T7330] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 127.411145][ T7416] tipc: Enabled bearer , priority 0 [ 127.417810][ T7416] device syzkaller0 entered promiscuous mode [ 127.472042][ T7420] netlink: 'syz.4.1193': attribute type 2 has an invalid length. [ 127.521859][ T4326] Bluetooth: hci5: command 0x041b tx timeout [ 127.554171][ T7416] tipc: Resetting bearer [ 127.560591][ T7415] tipc: Resetting bearer [ 127.652471][ T7415] tipc: Disabling bearer [ 127.658472][ T7428] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 127.659745][ T7428] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 127.726741][ T7428] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 127.935657][ T7455] netlink: 'syz.0.1206': attribute type 2 has an invalid length. [ 128.046637][ T7458] tipc: Enabled bearer , priority 0 [ 128.048031][ T7458] device syzkaller0 entered promiscuous mode [ 128.115481][ T7463] tipc: Resetting bearer [ 128.121568][ T7457] tipc: Resetting bearer [ 128.282156][ T7457] tipc: Disabling bearer [ 128.376201][ T7487] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1220'. [ 128.385552][ T7487] IPv6: ADDRCONF(NETDEV_CHANGE): gre3: link becomes ready [ 128.390916][ T7489] netlink: 'syz.5.1221': attribute type 2 has an invalid length. [ 128.549570][ T7505] tipc: Started in network mode [ 128.550505][ T7505] tipc: Node identity a27ebff2de9b, cluster identity 4711 [ 128.551552][ T7505] tipc: Enabled bearer , priority 0 [ 128.557586][ T7505] device syzkaller0 entered promiscuous mode [ 128.619979][ T7515] tipc: Resetting bearer [ 128.624984][ T7504] tipc: Resetting bearer [ 128.692956][ T7504] tipc: Disabling bearer [ 128.697511][ T7513] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1233'. [ 128.746190][ T7525] device syzkaller0 entered promiscuous mode [ 129.369759][ T7586] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1266'. [ 129.371329][ T7586] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1266'. [ 129.374749][ T7586] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.376188][ T7586] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.377603][ T7586] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.378996][ T7586] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.601965][ T47] Bluetooth: hci5: command 0x040f tx timeout [ 129.628671][ T7614] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1277'. [ 129.630193][ T7614] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1277'. [ 129.990860][ T7645] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1294'. [ 129.992513][ T7645] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1294'. [ 130.210070][ T7673] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1306'. [ 130.213231][ T7673] netlink: 'syz.4.1306': attribute type 18 has an invalid length. [ 130.219757][ T7673] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1306'. [ 130.221038][ T7673] netlink: 'syz.4.1306': attribute type 18 has an invalid length. [ 130.380365][ T7683] device syzkaller0 entered promiscuous mode [ 130.537363][ T7706] netlink: 'syz.0.1322': attribute type 18 has an invalid length. [ 130.539938][ T7706] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.541293][ T7706] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.542818][ T7706] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.544152][ T7706] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.556524][ T7706] netlink: 'syz.0.1322': attribute type 18 has an invalid length. [ 130.649346][ T7721] tipc: Enabled bearer , priority 0 [ 130.650876][ T7721] device syzkaller0 entered promiscuous mode [ 130.668817][ T7721] tipc: Resetting bearer [ 130.714509][ T7720] tipc: Resetting bearer [ 130.762650][ T7720] tipc: Disabling bearer [ 130.854793][ T7753] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.856202][ T7753] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.857514][ T7753] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.858828][ T7753] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.056824][ T7781] tipc: Enabling of bearer rejected, already enabled [ 131.681792][ T4326] Bluetooth: hci5: command 0x0419 tx timeout [ 131.869463][ T7856] tipc: Enabled bearer , priority 0 [ 131.871006][ T7856] device syzkaller0 entered promiscuous mode [ 131.890229][ T7856] tipc: Resetting bearer [ 131.893854][ T7855] tipc: Resetting bearer [ 131.942925][ T7855] tipc: Disabling bearer [ 132.290222][ T7906] netlink: 'syz.3.1413': attribute type 10 has an invalid length. [ 132.309051][ T7906] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 132.361826][ T1622] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 132.516758][ T7933] device syzkaller1 entered promiscuous mode [ 132.630411][ T7937] IPv6: ADDRCONF(NETDEV_CHANGE): gre2: link becomes ready [ 132.645830][ T7937] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 132.701134][ T7943] netlink: 'syz.5.1429': attribute type 10 has an invalid length. [ 132.775791][ T7943] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 132.866068][ T6842] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 133.285390][ T7989] IPv6: ADDRCONF(NETDEV_CHANGE): gre4: link becomes ready [ 133.286867][ T7991] device syzkaller0 entered promiscuous mode [ 133.288100][ T7996] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 133.520268][ T8026] device syzkaller0 entered promiscuous mode [ 133.636980][ T8037] __nla_validate_parse: 12 callbacks suppressed [ 133.636990][ T8037] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1470'. [ 134.010392][ T8057] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1477'. [ 134.012357][ T8057] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1477'. [ 134.069078][ T8062] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1475'. [ 134.075246][ T8062] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 134.085847][ T8062] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 134.086063][ T6926] bond0: (slave bond_slave_0): interface is now down [ 134.090920][ T6926] bond0: (slave bond_slave_1): interface is now down [ 134.092726][ T6926] bond0: (slave wlan1): interface is now down [ 134.111789][ T1622] bond0: (slave bond_slave_0): interface is now down [ 134.112904][ T1622] bond0: (slave bond_slave_1): interface is now down [ 134.113926][ T1622] bond0: (slave wlan1): interface is now down [ 134.134215][ T6926] bond0: (slave bond_slave_0): interface is now down [ 134.135277][ T6926] bond0: (slave bond_slave_1): interface is now down [ 134.136277][ T6926] bond0: (slave wlan1): interface is now down [ 134.147657][ T6926] bond0: now running without any active interface! [ 134.226909][ T8072] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1482'. [ 134.309711][ T8076] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1489'. [ 134.362433][ T8090] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1489'. [ 134.459986][ T8102] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1500'. [ 134.657885][ T8130] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1512'. [ 134.689921][ T8134] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1514'. [ 134.824467][ T8149] ax25_connect(): syz.1.1521 uses autobind, please contact jreuter@yaina.de [ 134.826776][ T8148] ------------[ cut here ]------------ [ 134.827704][ T8148] refcount_t: decrement hit 0; leaking memory. [ 134.828772][ T8148] WARNING: CPU: 1 PID: 8148 at lib/refcount.c:31 refcount_warn_saturate+0x194/0x1f8 [ 134.830183][ T8148] Modules linked in: [ 134.830757][ T8148] CPU: 1 PID: 8148 Comm: syz.1.1521 Not tainted 6.1.148-syzkaller #0 [ 134.832183][ T8148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 134.833534][ T8148] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 134.834788][ T8148] pc : refcount_warn_saturate+0x194/0x1f8 [ 134.835694][ T8148] lr : refcount_warn_saturate+0x194/0x1f8 [ 134.836510][ T8148] sp : ffff800021567800 [ 134.837166][ T8148] x29: ffff800021567800 x28: 1fffe0001ba69505 x27: dfff800000000000 [ 134.838336][ T8148] x26: dfff800000000000 x25: ffff7000042acf08 x24: ffff0000d1bb1400 [ 134.839539][ T8148] x23: ffff0000d1bb1410 x22: ffff800021567840 x21: 0000000000000000 [ 134.840654][ T8148] x20: ffff0000dc57c5fc x19: ffff800017a78000 x18: 0000000000000000 [ 134.841808][ T8148] x17: 0000000000000000 x16: ffff8000082d2370 x15: 0000000000000000 [ 134.843123][ T8148] x14: 00000000ffffffff x13: 0000000000000001 x12: 0000000000ff0100 [ 134.844470][ T8148] x11: ff00800008191c9c x10: 0000000000000000 x9 : a983b6e30aedb700 [ 134.845713][ T8148] x8 : a983b6e30aedb700 x7 : 0000000000000001 x6 : 0000000000000001 [ 134.846967][ T8148] x5 : ffff800021567298 x4 : ffff800015194800 x3 : ffff80000852e348 [ 134.848394][ T8148] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000000 [ 134.849769][ T8148] Call trace: [ 134.850330][ T8148] refcount_warn_saturate+0x194/0x1f8 [ 134.851177][ T8148] ref_tracker_free+0x538/0x694 [ 134.851988][ T8148] ax25_release+0x2c8/0x88c [ 134.852710][ T8148] sock_close+0xb4/0x1f8 [ 134.853417][ T8148] __fput+0x1bc/0x7c0 [ 134.854007][ T8148] ____fput+0x20/0x30 [ 134.854705][ T8148] task_work_run+0x1ec/0x270 [ 134.855419][ T8148] do_notify_resume+0x1f70/0x2b0c [ 134.856202][ T8148] el0_svc+0x98/0x138 [ 134.856817][ T8148] el0t_64_sync_handler+0x84/0xf0 [ 134.857691][ T8148] el0t_64_sync+0x18c/0x190 [ 134.858426][ T8148] irq event stamp: 2992 [ 134.859102][ T8148] hardirqs last enabled at (2991): [] __up_console_sem+0xb4/0x100 [ 134.860799][ T8148] hardirqs last disabled at (2992): [] el1_dbg+0x24/0x80 [ 134.862161][ T8148] softirqs last enabled at (2948): [] ax25_cb_del+0x14c/0x198 [ 134.863614][ T8148] softirqs last disabled at (2946): [] ax25_cb_del+0x30/0x198 [ 134.864987][ T8148] ---[ end trace 0000000000000000 ]--- [ 144.081629][ C0] ================================================================== [ 144.083054][ C0] BUG: KASAN: use-after-free in ax25_heartbeat_expiry+0x10c/0x128 [ 144.084350][ C0] Read of size 4 at addr ffff0000d1bb1460 by task swapper/0/0 [ 144.085624][ C0] [ 144.085998][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G W 6.1.148-syzkaller #0 [ 144.087478][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 144.089204][ C0] Call trace: [ 144.089781][ C0] dump_backtrace+0x1c8/0x1f4 [ 144.090505][ C0] show_stack+0x2c/0x3c [ 144.091201][ C0] __dump_stack+0x30/0x40 [ 144.091938][ C0] dump_stack_lvl+0xf8/0x160 [ 144.092701][ C0] print_address_description+0x88/0x218 [ 144.093658][ C0] print_report+0x50/0x68 [ 144.094401][ C0] kasan_report+0xa8/0x100 [ 144.095126][ C0] __asan_report_load4_noabort+0x2c/0x38 [ 144.096098][ C0] ax25_heartbeat_expiry+0x10c/0x128 [ 144.096936][ C0] call_timer_fn+0x1b8/0x964 [ 144.097653][ C0] __run_timers+0x460/0x6bc [ 144.098311][ C0] run_timer_softirq+0x7c/0x114 [ 144.099056][ C0] handle_softirqs+0x318/0xc6c [ 144.099737][ C0] __do_softirq+0x14/0x20 [ 144.100340][ C0] ____do_softirq+0x14/0x20 [ 144.100994][ C0] call_on_irq_stack+0x24/0x30 [ 144.101755][ C0] do_softirq_own_stack+0x20/0x2c [ 144.102537][ C0] __irq_exit_rcu+0x23c/0x43c [ 144.103295][ C0] irq_exit_rcu+0x14/0x84 [ 144.104069][ C0] el1_interrupt+0x38/0x54 [ 144.104816][ C0] el1h_64_irq_handler+0x18/0x24 [ 144.105611][ C0] el1h_64_irq+0x64/0x68 [ 144.106314][ C0] arch_local_irq_enable+0xc/0x18 [ 144.107168][ C0] default_idle_call+0x68/0xdc [ 144.108017][ C0] do_idle+0x1d8/0x4bc [ 144.108673][ C0] cpu_startup_entry+0x5c/0x74 [ 144.109438][ C0] rest_init+0x2d4/0x2f0 [ 144.110116][ C0] start_kernel+0x0/0x554 [ 144.110856][ C0] start_kernel+0x4a4/0x554 [ 144.111595][ C0] __primary_switched+0xb8/0xc0 [ 144.112361][ C0] [ 144.112709][ C0] Allocated by task 5019: [ 144.113434][ C0] kasan_set_track+0x4c/0x80 [ 144.114156][ C0] kasan_save_alloc_info+0x28/0x34 [ 144.114995][ C0] __kasan_kmalloc+0xa0/0xb8 [ 144.115682][ C0] kmalloc_trace+0x7c/0x94 [ 144.116416][ C0] ax25_dev_device_up+0x5c/0x524 [ 144.117217][ C0] ax25_device_event+0x128/0x660 [ 144.118019][ C0] raw_notifier_call_chain+0xd4/0x164 [ 144.118893][ C0] __dev_notify_flags+0x250/0x46c [ 144.119718][ C0] dev_change_flags+0xc8/0x154 [ 144.120562][ C0] dev_ifsioc+0x524/0xed0 [ 144.121277][ C0] dev_ioctl+0x4c8/0xc8c [ 144.122005][ C0] sock_do_ioctl+0x18c/0x240 [ 144.122808][ C0] sock_ioctl+0x5c4/0x840 [ 144.123444][ C0] __arm64_sys_ioctl+0x14c/0x1c8 [ 144.124241][ C0] invoke_syscall+0x98/0x2bc [ 144.124999][ C0] el0_svc_common+0x138/0x258 [ 144.125690][ C0] do_el0_svc+0x58/0x13c [ 144.126303][ C0] el0_svc+0x58/0x138 [ 144.126914][ C0] el0t_64_sync_handler+0x84/0xf0 [ 144.127731][ C0] el0t_64_sync+0x18c/0x190 [ 144.128426][ C0] [ 144.128785][ C0] Freed by task 4383: [ 144.129399][ C0] kasan_set_track+0x4c/0x80 [ 144.130082][ C0] kasan_save_free_info+0x3c/0x60 [ 144.130887][ C0] ____kasan_slab_free+0x148/0x1b0 [ 144.131640][ C0] __kasan_slab_free+0x18/0x28 [ 144.132337][ C0] slab_free_freelist_hook+0x16c/0x1ec [ 144.133221][ C0] kmem_cache_free_bulk+0x340/0x3d4 [ 144.134090][ C0] kfree_rcu_work+0x290/0x694 [ 144.134879][ C0] process_one_work+0x7f4/0x13a8 [ 144.135659][ C0] worker_thread+0x8c8/0xfbc [ 144.136437][ C0] kthread+0x250/0x2d8 [ 144.137084][ C0] ret_from_fork+0x10/0x20 [ 144.137746][ C0] [ 144.138117][ C0] Last potentially related work creation: [ 144.138963][ C0] kasan_save_stack+0x40/0x70 [ 144.139781][ C0] __kasan_record_aux_stack+0xc0/0xdc [ 144.140644][ C0] kasan_record_aux_stack_noalloc+0x14/0x20 [ 144.141601][ C0] kvfree_call_rcu+0xb4/0x6f0 [ 144.142315][ C0] ax25_release+0x350/0x88c [ 144.142992][ C0] sock_close+0xb4/0x1f8 [ 144.143639][ C0] __fput+0x1bc/0x7c0 [ 144.144251][ C0] ____fput+0x20/0x30 [ 144.144854][ C0] task_work_run+0x1ec/0x270 [ 144.145551][ C0] do_notify_resume+0x1f70/0x2b0c [ 144.146422][ C0] el0_svc+0x98/0x138 [ 144.147070][ C0] el0t_64_sync_handler+0x84/0xf0 [ 144.147814][ C0] el0t_64_sync+0x18c/0x190 [ 144.148564][ C0] [ 144.148929][ C0] Second to last potentially related work creation: [ 144.149928][ C0] kasan_save_stack+0x40/0x70 [ 144.150596][ C0] __kasan_record_aux_stack+0xc0/0xdc [ 144.151485][ C0] kasan_record_aux_stack_noalloc+0x14/0x20 [ 144.152494][ C0] insert_work+0x64/0x37c [ 144.153191][ C0] __queue_work+0xcbc/0x123c [ 144.153892][ C0] queue_work_on+0xc0/0x16c [ 144.154591][ C0] addr_event+0x304/0x3f0 [ 144.155274][ C0] inetaddr_event+0xe8/0x148 [ 144.155957][ C0] blocking_notifier_call_chain+0xf0/0x198 [ 144.156861][ C0] __inet_insert_ifa+0x858/0x9fc [ 144.157558][ C0] inet_rtm_newaddr+0xd74/0x1590 [ 144.158340][ C0] rtnetlink_rcv_msg+0x734/0xce4 [ 144.159079][ C0] netlink_rcv_skb+0x208/0x3c4 [ 144.159771][ C0] rtnetlink_rcv+0x28/0x38 [ 144.160415][ C0] netlink_unicast+0x60c/0x824 [ 144.161121][ C0] netlink_sendmsg+0x6e8/0x9b0 [ 144.161810][ C0] __sys_sendto+0x304/0x3fc [ 144.162562][ C0] __arm64_sys_sendto+0xd8/0xf8 [ 144.163366][ C0] invoke_syscall+0x98/0x2bc [ 144.164112][ C0] el0_svc_common+0x138/0x258 [ 144.164872][ C0] do_el0_svc+0x58/0x13c [ 144.165594][ C0] el0_svc+0x58/0x138 [ 144.166252][ C0] el0t_64_sync_handler+0x84/0xf0 [ 144.167096][ C0] el0t_64_sync+0x18c/0x190 [ 144.167799][ C0] [ 144.168169][ C0] The buggy address belongs to the object at ffff0000d1bb1400 [ 144.168169][ C0] which belongs to the cache kmalloc-256 of size 256 [ 144.170528][ C0] The buggy address is located 96 bytes inside of [ 144.170528][ C0] 256-byte region [ffff0000d1bb1400, ffff0000d1bb1500) [ 144.172713][ C0] [ 144.173094][ C0] The buggy address belongs to the physical page: [ 144.174172][ C0] page:00000000fd6a03c6 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff0000d1bb0c00 pfn:0x111bb0 [ 144.175985][ C0] head:00000000fd6a03c6 order:1 compound_mapcount:0 compound_pincount:0 [ 144.177387][ C0] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 144.178717][ C0] raw: 05ffc00000010200 fffffc0003485808 fffffc00035aca08 ffff0000c0002480 [ 144.180150][ C0] raw: ffff0000d1bb0c00 000000000010000f 00000001ffffffff 0000000000000000 [ 144.181583][ C0] page dumped because: kasan: bad access detected [ 144.182582][ C0] [ 144.182917][ C0] Memory state around the buggy address: [ 144.183836][ C0] ffff0000d1bb1300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 144.185188][ C0] ffff0000d1bb1380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 144.186542][ C0] >ffff0000d1bb1400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 144.187824][ C0] ^ [ 144.188954][ C0] ffff0000d1bb1480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 144.190260][ C0] ffff0000d1bb1500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 144.191547][ C0] ================================================================== [ 144.192915][ C0] Disabling lock debugging due to kernel taint