last executing test programs: 1.405954208s ago: executing program 2 (id=3): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[], 0x4c}}, 0x0) r0 = socket(0x10, 0x803, 0x0) socket(0x80000000000000a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x900, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r4], 0x1c}}, 0x0) write$nci(r1, &(0x7f0000000780)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x28, @f={0x8d, 0x3, 0x2, 0xf2, {0xf, 0x6b, "44e78b822430e4d93120f69dffa9e3859f9fc2d9b2ff4311c5634e8feba8b9cd70196332df9eaf9474e58588908593f96102c5b18884049ecbada0a42a17e684c712bc565482b87dfeab5d41ec52f263f68af26730a75d5cc63da363723917c032326193f5a68ff34324b9"}, 0x3}}, 0x75) 810.222889ms ago: executing program 0 (id=1): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x2f, 0x5, 0x3, 0x1, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @local}, 0x8000, 0x80, 0x9, 0x7fffffff}}) poll(0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x10, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 807.719719ms ago: executing program 2 (id=6): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x800, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000001c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800, 0x1, 0x1}, 0x20) 585.296291ms ago: executing program 2 (id=7): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0, 0x400000000}, 0x400}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000002380)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x81}}}}}}, 0x0) 584.859251ms ago: executing program 0 (id=8): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) listen(r1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0x9) accept$ax25(r1, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0102000000000000000007000b000c0001800500020001002000"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x10) socket$inet6(0xa, 0x5, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100001d, 0x4008031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 447.688835ms ago: executing program 2 (id=9): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)={0x5c, r0, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x4}, @NL80211_ATTR_REKEY_DATA={0x4}, @NL80211_ATTR_REKEY_DATA={0x38, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "8bd4942035ba602c"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="725265f2dccff980233976c342610022"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="ec4b459ccc0557da99b9227e71ae0dd7"}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 350.560405ms ago: executing program 4 (id=5): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r2, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) 102.41156ms ago: executing program 2 (id=10): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="9000"], 0x90}, 0x20004810) 0s ago: executing program 2 (id=11): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c4300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2f0d}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tcp_probe\x00', r0}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, &(0x7f0000000180), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @sk_skb=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) close(r1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='cdg', 0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000), 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.77' (ED25519) to the list of known hosts. [ 81.068797][ T4179] cgroup: Unknown subsys name 'net' [ 81.211743][ T4179] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.955099][ T4179] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 85.365232][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 85.488628][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 85.505679][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 85.526592][ T4200] chnl_net:caif_netlink_parms(): no params data found [ 85.607087][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.616072][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.627878][ T4191] device bridge_slave_0 entered promiscuous mode [ 85.660760][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 85.677892][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.686592][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.698196][ T4191] device bridge_slave_1 entered promiscuous mode [ 85.803614][ T4200] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.811710][ T4200] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.824969][ T4200] device bridge_slave_0 entered promiscuous mode [ 85.838640][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.873117][ T4200] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.881944][ T4200] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.890765][ T4200] device bridge_slave_1 entered promiscuous mode [ 85.899932][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.927317][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.935070][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.944008][ T4192] device bridge_slave_0 entered promiscuous mode [ 85.969649][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.978016][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.987610][ T4190] device bridge_slave_0 entered promiscuous mode [ 86.006042][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.014298][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.025047][ T4192] device bridge_slave_1 entered promiscuous mode [ 86.052713][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.062639][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.071914][ T4190] device bridge_slave_1 entered promiscuous mode [ 86.104206][ T4200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.120337][ T4191] team0: Port device team_slave_0 added [ 86.136897][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.147063][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.156986][ T4189] device bridge_slave_0 entered promiscuous mode [ 86.177193][ T4200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.189308][ T4191] team0: Port device team_slave_1 added [ 86.213120][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.220583][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.230066][ T4189] device bridge_slave_1 entered promiscuous mode [ 86.242320][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.279466][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.301274][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.321412][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.328897][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.360818][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.377049][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.418769][ T4200] team0: Port device team_slave_0 added [ 86.426827][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.435052][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.464822][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.489576][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.517044][ T4200] team0: Port device team_slave_1 added [ 86.532462][ T4190] team0: Port device team_slave_0 added [ 86.542907][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.558597][ T4192] team0: Port device team_slave_0 added [ 86.588589][ T4190] team0: Port device team_slave_1 added [ 86.608414][ T4192] team0: Port device team_slave_1 added [ 86.616187][ T4200] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.625040][ T4200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.656580][ T4200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.670261][ T4200] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.678229][ T4200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.706037][ T4200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.771912][ T4189] team0: Port device team_slave_0 added [ 86.799345][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.810814][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.842692][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.860497][ T4189] team0: Port device team_slave_1 added [ 86.869119][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.880189][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.884703][ T4201] Bluetooth: hci3: command 0x0409 tx timeout [ 86.920790][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.935983][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.943745][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.973859][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 86.973876][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.996078][ T4201] Bluetooth: hci2: command 0x0409 tx timeout [ 87.004453][ T4201] Bluetooth: hci4: command 0x0409 tx timeout [ 87.011193][ T4201] Bluetooth: hci0: command 0x0409 tx timeout [ 87.025333][ T4191] device hsr_slave_0 entered promiscuous mode [ 87.035246][ T4191] device hsr_slave_1 entered promiscuous mode [ 87.045814][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.054271][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.094706][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.162678][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.171297][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.204390][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.222311][ T4200] device hsr_slave_0 entered promiscuous mode [ 87.230319][ T4200] device hsr_slave_1 entered promiscuous mode [ 87.237646][ T4200] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.248148][ T4200] Cannot create hsr debugfs directory [ 87.287048][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.295660][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.328543][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.407532][ T4190] device hsr_slave_0 entered promiscuous mode [ 87.417390][ T4190] device hsr_slave_1 entered promiscuous mode [ 87.433049][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.441421][ T4190] Cannot create hsr debugfs directory [ 87.454602][ T4192] device hsr_slave_0 entered promiscuous mode [ 87.463387][ T4192] device hsr_slave_1 entered promiscuous mode [ 87.470386][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.480361][ T4192] Cannot create hsr debugfs directory [ 87.567599][ T4189] device hsr_slave_0 entered promiscuous mode [ 87.576172][ T4189] device hsr_slave_1 entered promiscuous mode [ 87.584319][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.596690][ T4189] Cannot create hsr debugfs directory [ 87.961832][ T4191] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.986477][ T4191] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.004325][ T4191] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.015305][ T4191] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.069095][ T4200] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.083778][ T4200] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.094349][ T4200] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.106201][ T4200] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.206666][ T4192] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 88.228941][ T4192] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 88.243962][ T4192] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 88.269598][ T4192] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 88.352752][ T4189] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.366010][ T4189] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.377713][ T4189] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.407976][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.438101][ T4189] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.504901][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 88.518809][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 88.532614][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.564579][ T4200] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.604127][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 88.616515][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 88.629205][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 88.639138][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 88.651011][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.660825][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.675516][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 88.690206][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 88.700634][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 88.710720][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.718771][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.734084][ T4200] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.764258][ T4190] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.776432][ T4190] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.791092][ T4190] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.804570][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 88.815218][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 88.826229][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 88.837326][ T3083] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.844940][ T3083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.855773][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 88.866189][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 88.878362][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 88.890393][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 88.900748][ T140] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.909225][ T140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.920391][ T4190] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.953303][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.971117][ T4197] Bluetooth: hci3: command 0x041b tx timeout [ 88.978561][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 88.990372][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 89.004738][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 89.014517][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 89.025148][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 89.038510][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 89.043087][ T4272] Bluetooth: hci1: command 0x041b tx timeout [ 89.048287][ T4262] Bluetooth: hci0: command 0x041b tx timeout [ 89.061129][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 89.062540][ T4262] Bluetooth: hci4: command 0x041b tx timeout [ 89.078997][ T4262] Bluetooth: hci2: command 0x041b tx timeout [ 89.085769][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 89.109947][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.135665][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 89.146831][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 89.156442][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 89.166963][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 89.176250][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 89.186071][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 89.196007][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 89.207148][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 89.217497][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 89.227601][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 89.244208][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 89.254153][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 89.272076][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 89.284654][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 89.307431][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 89.319812][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 89.330782][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 89.340893][ T3083] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.348553][ T3083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.360174][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 89.373516][ T4200] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 89.406299][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 89.427254][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 89.444774][ T140] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.454500][ T140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.471392][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 89.488807][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 89.535364][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 89.569416][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 89.588667][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 89.631957][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.664972][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 89.675849][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 89.693678][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 89.711730][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 89.722412][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 89.742606][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 89.764972][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 89.799043][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 89.811087][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 89.825048][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.856264][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.868019][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 89.880185][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 89.889362][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 89.899454][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 89.909944][ T156] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.917776][ T156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.928662][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 89.939590][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 89.950310][ T156] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.958530][ T156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.968386][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 89.979168][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 90.000287][ T4200] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.017710][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 90.055934][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 90.067586][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 90.078917][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 90.094794][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 90.104509][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 90.146150][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 90.157460][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 90.171706][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 90.186390][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 90.200183][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 90.211749][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 90.221646][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 90.235211][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 90.251325][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 90.264426][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.307771][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 90.319678][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 90.330159][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 90.339786][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 90.354958][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.376162][ T4191] device veth0_vlan entered promiscuous mode [ 90.399832][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 90.433620][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 90.454894][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 90.465229][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 90.483626][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.511680][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 90.533971][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 90.564443][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 90.584101][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 90.597876][ T3083] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.606170][ T3083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.617277][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 90.636950][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 90.650537][ T3083] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.659442][ T3083] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.687728][ T4191] device veth1_vlan entered promiscuous mode [ 90.700052][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 90.719749][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 90.731805][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 90.751542][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 90.761401][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 90.786855][ T4200] device veth0_vlan entered promiscuous mode [ 90.808212][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 90.859536][ T4200] device veth1_vlan entered promiscuous mode [ 90.869028][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 90.881974][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 90.892434][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 90.906162][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 90.915416][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 90.924121][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 90.933796][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 90.977928][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.992601][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 91.006983][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 91.019455][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 91.028411][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 91.038700][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 91.050605][ T4197] Bluetooth: hci3: command 0x040f tx timeout [ 91.058102][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 91.091780][ T4191] device veth0_macvtap entered promiscuous mode [ 91.110258][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 91.123970][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 91.134409][ T4262] Bluetooth: hci2: command 0x040f tx timeout [ 91.139264][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 91.144961][ T4262] Bluetooth: hci4: command 0x040f tx timeout [ 91.163221][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 91.164066][ T4262] Bluetooth: hci0: command 0x040f tx timeout [ 91.179405][ T4262] Bluetooth: hci1: command 0x040f tx timeout [ 91.180545][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 91.198984][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 91.209562][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 91.225819][ T4200] device veth0_macvtap entered promiscuous mode [ 91.236133][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 91.246089][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 91.260512][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 91.290631][ T4191] device veth1_macvtap entered promiscuous mode [ 91.317027][ T4200] device veth1_macvtap entered promiscuous mode [ 91.334299][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 91.352269][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 91.370754][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 91.382524][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 91.460318][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.489567][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 91.500220][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 91.519618][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.533954][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.547322][ T4200] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.570675][ T4192] device veth0_vlan entered promiscuous mode [ 91.584005][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 91.595076][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 91.606194][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 91.617133][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 91.629067][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 91.639434][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 91.652287][ T4200] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.665813][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.679360][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.695399][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.711453][ T4192] device veth1_vlan entered promiscuous mode [ 91.720770][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 91.731420][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 91.746942][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 91.773049][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 91.788336][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 91.798169][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 91.808918][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 91.817370][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 91.829767][ T4200] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.839536][ T4200] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.850496][ T4200] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.862712][ T4200] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.878054][ T4189] device veth0_vlan entered promiscuous mode [ 91.908998][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 91.917978][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 91.938612][ T4191] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.949171][ T4191] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.959648][ T4191] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.969032][ T4191] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.986671][ T4189] device veth1_vlan entered promiscuous mode [ 92.007574][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.040695][ T4192] device veth0_macvtap entered promiscuous mode [ 92.072631][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 92.084375][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 92.095763][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 92.107775][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 92.120117][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 92.140569][ T4192] device veth1_macvtap entered promiscuous mode [ 92.174751][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 92.187179][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 92.198382][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 92.276107][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 92.285603][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 92.296440][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 92.312296][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 92.342690][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.359508][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.376500][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.388848][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.402510][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.421535][ T4189] device veth0_macvtap entered promiscuous mode [ 92.432288][ T4190] device veth0_vlan entered promiscuous mode [ 92.453941][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 92.469482][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 92.480370][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 92.492660][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 92.503988][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 92.515354][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.528980][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.540799][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.553734][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.565890][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.579875][ T4189] device veth1_macvtap entered promiscuous mode [ 92.608606][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.616815][ T4190] device veth1_vlan entered promiscuous mode [ 92.630145][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 92.634367][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.642228][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 92.658372][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 92.667712][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 92.678329][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 92.690729][ T4192] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.703541][ T4192] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.715186][ T4192] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.740002][ T4192] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.808446][ T156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.831044][ T156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.851727][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.857340][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.874537][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.874588][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.874608][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.874620][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.874635][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.877008][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.925158][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.970739][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 92.991810][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 93.013937][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 93.034116][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 93.097605][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 93.120484][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 93.141559][ T1338] Bluetooth: hci3: command 0x0419 tx timeout [ 93.152524][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.182113][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.199361][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.215204][ T1338] Bluetooth: hci1: command 0x0419 tx timeout [ 93.226028][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.240921][ T1338] Bluetooth: hci0: command 0x0419 tx timeout [ 93.258910][ T1338] Bluetooth: hci4: command 0x0419 tx timeout [ 93.267408][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.291159][ T1338] Bluetooth: hci2: command 0x0419 tx timeout [ 93.300778][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.323537][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.339332][ T4190] device veth0_macvtap entered promiscuous mode [ 93.401103][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 93.413557][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 93.431933][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 93.447311][ T4189] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.457999][ T4189] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.468867][ T4189] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.480536][ T4189] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.498188][ T4190] device veth1_macvtap entered promiscuous mode [ 93.507014][ T140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.532711][ T140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.556880][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 93.583977][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 93.688911][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.730220][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.760320][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.791081][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.811320][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.827739][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.846945][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.859358][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.877777][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.906891][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 93.925485][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 93.943963][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.956588][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.968045][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.980516][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.992995][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.005633][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.017322][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.031301][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.047600][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.083370][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 94.104776][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 94.154677][ T3083] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.200523][ T4190] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.206034][ T3083] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.237284][ T4190] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.280094][ T4190] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.289849][ T4190] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.340140][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 94.368007][ T140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.393772][ T140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.443101][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 94.527710][ T4286] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.547789][ T4286] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.624592][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 94.719834][ T4286] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.763129][ T4286] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.771388][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 94.820073][ T3083] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.851701][ T3083] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.872016][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 94.885783][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 94.943214][ T4330] [ 94.945935][ T4330] ====================================================== [ 94.954594][ T4330] WARNING: possible circular locking dependency detected [ 94.962958][ T4330] syzkaller #0 Not tainted [ 94.969044][ T4330] ------------------------------------------------------ [ 94.977135][ T4330] syz.4.5/4330 is trying to acquire lock: [ 94.984109][ T4330] ffff88807dd6d120 (sk_lock-AF_AX25){+.+.}-{0:0}, at: ax25_device_event+0x217/0x4f0 [ 94.995787][ T4330] [ 94.995787][ T4330] but task is already holding lock: [ 95.004228][ T4330] ffffffff8d238988 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x54e/0xe50 [ 95.014653][ T4330] [ 95.014653][ T4330] which lock already depends on the new lock. [ 95.014653][ T4330] [ 95.027126][ T4330] [ 95.027126][ T4330] the existing dependency chain (in reverse order) is: [ 95.040518][ T4330] [ 95.040518][ T4330] -> #1 (rtnl_mutex){+.+.}-{3:3}: [ 95.052119][ T4330] __mutex_lock_common+0x1eb/0x2390 [ 95.060869][ T4330] mutex_lock_nested+0x17/0x20 [ 95.069377][ T4330] ax25_setsockopt+0x830/0xa40 [ 95.076689][ T4330] __sys_setsockopt+0x2bf/0x3d0 [ 95.085029][ T4330] __x64_sys_setsockopt+0xb1/0xc0 [ 95.092771][ T4330] do_syscall_64+0x4c/0xa0 [ 95.100006][ T4330] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 95.109756][ T4330] [ 95.109756][ T4330] -> #0 (sk_lock-AF_AX25){+.+.}-{0:0}: [ 95.122811][ T4330] __lock_acquire+0x2c33/0x7c60 [ 95.130294][ T4330] lock_acquire+0x197/0x3f0 [ 95.136380][ T4330] lock_sock_nested+0x44/0x100 [ 95.143752][ T4330] ax25_device_event+0x217/0x4f0 [ 95.151484][ T4330] raw_notifier_call_chain+0xcb/0x160 [ 95.158209][ T4330] __dev_notify_flags+0x178/0x2d0 [ 95.165396][ T4330] dev_change_flags+0xe3/0x1a0 [ 95.172308][ T4330] dev_ifsioc+0x147/0xe70 [ 95.183418][ T4330] dev_ioctl+0x55f/0xe50 [ 95.189792][ T4330] sock_do_ioctl+0x222/0x2f0 [ 95.197301][ T4330] sock_ioctl+0x4ed/0x6e0 [ 95.204377][ T4330] __se_sys_ioctl+0xfa/0x170 [ 95.211194][ T4330] do_syscall_64+0x4c/0xa0 [ 95.218819][ T4330] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 95.228018][ T4330] [ 95.228018][ T4330] other info that might help us debug this: [ 95.228018][ T4330] [ 95.242618][ T4330] Possible unsafe locking scenario: [ 95.242618][ T4330] [ 95.253564][ T4330] CPU0 CPU1 [ 95.259059][ T4330] ---- ---- [ 95.265241][ T4330] lock(rtnl_mutex); [ 95.269689][ T4330] lock(sk_lock-AF_AX25); [ 95.277592][ T4330] lock(rtnl_mutex); [ 95.285224][ T4330] lock(sk_lock-AF_AX25); [ 95.291029][ T4330] [ 95.291029][ T4330] *** DEADLOCK *** [ 95.291029][ T4330] [ 95.300538][ T4330] 1 lock held by syz.4.5/4330: [ 95.305854][ T4330] #0: ffffffff8d238988 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x54e/0xe50 [ 95.315654][ T4330] [ 95.315654][ T4330] stack backtrace: [ 95.323074][ T4330] CPU: 0 PID: 4330 Comm: syz.4.5 Not tainted syzkaller #0 [ 95.333110][ T4330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 95.345549][ T4330] Call Trace: [ 95.349990][ T4330] [ 95.353654][ T4330] dump_stack_lvl+0x168/0x230 [ 95.359001][ T4330] ? load_image+0x3b0/0x3b0 [ 95.365369][ T4330] ? show_regs_print_info+0x20/0x20 [ 95.372397][ T4330] ? print_circular_bug+0x12b/0x1a0 [ 95.379178][ T4330] check_noncircular+0x274/0x310 [ 95.384789][ T4330] ? add_chain_block+0x940/0x940 [ 95.391634][ T4330] ? lockdep_lock+0xdc/0x1e0 [ 95.396930][ T4330] ? lockdep_unlock+0x134/0x2d0 [ 95.402511][ T4330] ? mark_lock+0x94/0x320 [ 95.407190][ T4330] __lock_acquire+0x2c33/0x7c60 [ 95.414828][ T4330] ? lock_chain_count+0x20/0x20 [ 95.420464][ T4330] ? rose_device_event+0x5ec/0x680 [ 95.428495][ T4330] ? verify_lock_unused+0x140/0x140 [ 95.434925][ T4330] ? verify_lock_unused+0x140/0x140 [ 95.440598][ T4330] ? preempt_schedule+0xa7/0xb0 [ 95.446283][ T4330] ? lockdep_hardirqs_on_prepare+0x760/0x760 [ 95.454144][ T4330] ? mark_lock+0x94/0x320 [ 95.459329][ T4330] lock_acquire+0x197/0x3f0 [ 95.465044][ T4330] ? ax25_device_event+0x217/0x4f0 [ 95.470775][ T4330] ? lock_chain_count+0x20/0x20 [ 95.483005][ T4330] ? read_lock_is_recursive+0x10/0x10 [ 95.489459][ T4330] ? __local_bh_enable_ip+0x12a/0x1b0 [ 95.497992][ T4330] ? lockdep_hardirqs_on+0x94/0x140 [ 95.503939][ T4330] ? __local_bh_enable_ip+0x12a/0x1b0 [ 95.510538][ T4330] ? _local_bh_enable+0xa0/0xa0 [ 95.515926][ T4330] lock_sock_nested+0x44/0x100 [ 95.521838][ T4330] ? ax25_device_event+0x217/0x4f0 [ 95.530383][ T4330] ax25_device_event+0x217/0x4f0 [ 95.536422][ T4330] raw_notifier_call_chain+0xcb/0x160 [ 95.544188][ T4330] __dev_notify_flags+0x178/0x2d0 [ 95.550499][ T4330] ? __dev_change_flags+0x6a0/0x6a0 [ 95.557059][ T4330] ? __dev_change_flags+0x4bb/0x6a0 [ 95.563111][ T4330] ? dev_get_flags+0x1c0/0x1c0 [ 95.570940][ T4330] ? do_raw_spin_unlock+0x11d/0x230 [ 95.578054][ T4330] dev_change_flags+0xe3/0x1a0 [ 95.584788][ T4330] dev_ifsioc+0x147/0xe70 [ 95.590811][ T4330] ? dev_ioctl+0x54e/0xe50 [ 95.596239][ T4330] ? dev_ioctl+0xe50/0xe50 [ 95.601602][ T4330] ? apparmor_capable+0x12c/0x190 [ 95.607752][ T4330] ? full_name_hash+0x8e/0xe0 [ 95.612989][ T4330] dev_ioctl+0x55f/0xe50 [ 95.618283][ T4330] ? _copy_from_user+0x111/0x170 [ 95.624449][ T4330] sock_do_ioctl+0x222/0x2f0 [ 95.629526][ T4330] ? sock_show_fdinfo+0xb0/0xb0 [ 95.636195][ T4330] sock_ioctl+0x4ed/0x6e0 [ 95.641912][ T4330] ? sock_poll+0x3f0/0x3f0 [ 95.647097][ T4330] ? bpf_lsm_file_ioctl+0x5/0x10 [ 95.652835][ T4330] ? security_file_ioctl+0x7c/0xa0 [ 95.659019][ T4330] ? sock_poll+0x3f0/0x3f0 [ 95.664369][ T4330] __se_sys_ioctl+0xfa/0x170 [ 95.670277][ T4330] do_syscall_64+0x4c/0xa0 [ 95.675952][ T4330] ? clear_bhb_loop+0x30/0x80 [ 95.683339][ T4330] ? clear_bhb_loop+0x30/0x80 [ 95.689616][ T4330] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 95.698028][ T4330] RIP: 0033:0x7fbe346ad6c9 [ 95.702949][ T4330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.729153][ T4330] RSP: 002b:00007fbe32914038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 95.740508][ T4330] RAX: ffffffffffffffda RBX: 00007fbe34903fa0 RCX: 00007fbe346ad6c9 [ 95.752449][ T4330] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000004 [ 95.762907][ T4330] RBP: 00007fbe3472ff91 R08: 0000000000000000 R09: 0000000000000000 [ 95.772116][ T4330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.782658][ T4330] R13: 00007fbe34904038 R14: 00007fbe34903fa0 R15: 00007ffc360a5e18 [ 95.792742][ T4330] [ 95.825003][ T4330] ================================================================== [ 95.835469][ T4330] BUG: KASAN: use-after-free in ax25_dev_device_down+0x35e/0x520 [ 95.845692][ T4330] Write of size 4 at addr ffff88802393a2b8 by task syz.4.5/4330 [ 95.855295][ T4330] [ 95.857857][ T4330] CPU: 1 PID: 4330 Comm: syz.4.5 Not tainted syzkaller #0 [ 95.866557][ T4330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 95.878934][ T4330] Call Trace: [ 95.882832][ T4330] [ 95.887089][ T4330] dump_stack_lvl+0x168/0x230 [ 95.893135][ T4330] ? show_regs_print_info+0x20/0x20 [ 95.900866][ T4330] ? load_image+0x3b0/0x3b0 [ 95.907394][ T4330] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 95.916230][ T4330] print_address_description+0x60/0x2d0 [ 95.923411][ T4330] ? ax25_dev_device_down+0x35e/0x520 [ 95.931229][ T4330] kasan_report+0xdf/0x130 [ 95.937752][ T4330] ? ax25_dev_device_down+0x35e/0x520 [ 95.944263][ T4330] ? kfree+0xef/0x2a0 [ 95.949592][ T4330] kasan_check_range+0x27b/0x290 [ 95.956796][ T4330] ax25_dev_device_down+0x35e/0x520 [ 95.962771][ T4330] ax25_device_event+0x4b4/0x4f0 [ 95.970540][ T4330] raw_notifier_call_chain+0xcb/0x160 [ 95.977420][ T4330] __dev_notify_flags+0x178/0x2d0 [ 95.984730][ T4330] ? __dev_change_flags+0x6a0/0x6a0 [ 95.991206][ T4330] ? __dev_change_flags+0x4bb/0x6a0 [ 95.997591][ T4330] ? dev_get_flags+0x1c0/0x1c0 [ 96.003900][ T4330] ? do_raw_spin_unlock+0x11d/0x230 [ 96.010879][ T4330] dev_change_flags+0xe3/0x1a0 [ 96.018623][ T4330] dev_ifsioc+0x147/0xe70 [ 96.023413][ T4330] ? dev_ioctl+0x54e/0xe50 [ 96.029164][ T4330] ? dev_ioctl+0xe50/0xe50 [ 96.036524][ T4330] ? apparmor_capable+0x12c/0x190 [ 96.044667][ T4330] ? full_name_hash+0x8e/0xe0 [ 96.050638][ T4330] dev_ioctl+0x55f/0xe50 [ 96.055716][ T4330] ? _copy_from_user+0x111/0x170 [ 96.061961][ T4330] sock_do_ioctl+0x222/0x2f0 [ 96.067498][ T4330] ? sock_show_fdinfo+0xb0/0xb0 [ 96.074525][ T4330] sock_ioctl+0x4ed/0x6e0 [ 96.079305][ T4330] ? sock_poll+0x3f0/0x3f0 [ 96.085242][ T4330] ? bpf_lsm_file_ioctl+0x5/0x10 [ 96.092495][ T4330] ? security_file_ioctl+0x7c/0xa0 [ 96.098562][ T4330] ? sock_poll+0x3f0/0x3f0 [ 96.104174][ T4330] __se_sys_ioctl+0xfa/0x170 [ 96.112292][ T4330] do_syscall_64+0x4c/0xa0 [ 96.117486][ T4330] ? clear_bhb_loop+0x30/0x80 [ 96.123318][ T4330] ? clear_bhb_loop+0x30/0x80 [ 96.129426][ T4330] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 96.139052][ T4330] RIP: 0033:0x7fbe346ad6c9 [ 96.145263][ T4330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.171960][ T4330] RSP: 002b:00007fbe32914038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 96.182453][ T4330] RAX: ffffffffffffffda RBX: 00007fbe34903fa0 RCX: 00007fbe346ad6c9 [ 96.192702][ T4330] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000004 [ 96.202320][ T4330] RBP: 00007fbe3472ff91 R08: 0000000000000000 R09: 0000000000000000 [ 96.211577][ T4330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.221364][ T4330] R13: 00007fbe34904038 R14: 00007fbe34903fa0 R15: 00007ffc360a5e18 [ 96.231140][ T4330] [ 96.235249][ T4330] [ 96.238334][ T4330] Allocated by task 4330: [ 96.243058][ T4330] __kasan_kmalloc+0xb5/0xf0 [ 96.249274][ T4330] ax25_dev_device_up+0x50/0x580 [ 96.257428][ T4330] ax25_device_event+0x483/0x4f0 [ 96.264152][ T4330] raw_notifier_call_chain+0xcb/0x160 [ 96.271887][ T4330] __dev_notify_flags+0x178/0x2d0 [ 96.278529][ T4330] dev_change_flags+0xe3/0x1a0 [ 96.284088][ T4330] dev_ifsioc+0x147/0xe70 [ 96.289879][ T4330] dev_ioctl+0x55f/0xe50 [ 96.295217][ T4330] sock_do_ioctl+0x222/0x2f0 [ 96.301019][ T4330] sock_ioctl+0x4ed/0x6e0 [ 96.306533][ T4330] __se_sys_ioctl+0xfa/0x170 [ 96.311850][ T4330] do_syscall_64+0x4c/0xa0 [ 96.316777][ T4330] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 96.324228][ T4330] [ 96.326582][ T4330] Freed by task 4330: [ 96.331268][ T4330] kasan_set_track+0x4b/0x70 [ 96.336267][ T4330] kasan_set_free_info+0x1f/0x40 [ 96.341983][ T4330] ____kasan_slab_free+0xd5/0x110 [ 96.348619][ T4330] slab_free_freelist_hook+0xea/0x170 [ 96.355580][ T4330] kfree+0xef/0x2a0 [ 96.360526][ T4330] ax25_dev_device_down+0x1c0/0x520 [ 96.367548][ T4330] ax25_device_event+0x4b4/0x4f0 [ 96.373644][ T4330] raw_notifier_call_chain+0xcb/0x160 [ 96.380850][ T4330] __dev_notify_flags+0x178/0x2d0 [ 96.386357][ T4330] dev_change_flags+0xe3/0x1a0 [ 96.392707][ T4330] dev_ifsioc+0x147/0xe70 [ 96.399435][ T4330] dev_ioctl+0x55f/0xe50 [ 96.404808][ T4330] sock_do_ioctl+0x222/0x2f0 [ 96.412927][ T4330] sock_ioctl+0x4ed/0x6e0 [ 96.418928][ T4330] __se_sys_ioctl+0xfa/0x170 [ 96.425830][ T4330] do_syscall_64+0x4c/0xa0 [ 96.433061][ T4330] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 96.442680][ T4330] [ 96.445206][ T4330] The buggy address belongs to the object at ffff88802393a200 [ 96.445206][ T4330] which belongs to the cache kmalloc-192 of size 192 [ 96.463204][ T4330] The buggy address is located 184 bytes inside of [ 96.463204][ T4330] 192-byte region [ffff88802393a200, ffff88802393a2c0) [ 96.480749][ T4330] The buggy address belongs to the page: [ 96.487943][ T4330] page:ffffea00008e4e80 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2393a [ 96.502183][ T4330] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 96.512012][ T4330] raw: 00fff00000000200 0000000000000000 dead000000000122 ffff888016841a00 [ 96.521521][ T4330] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 96.533745][ T4330] page dumped because: kasan: bad access detected [ 96.541738][ T4330] page_owner tracks the page as allocated [ 96.549258][ T4330] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112800(GFP_NOWAIT|__GFP_NOWARN|__GFP_NORETRY|__GFP_HARDWALL), pid 4329, ts 94691350338, free_ts 94646785117 [ 96.571198][ T4330] get_page_from_freelist+0x1b77/0x1c60 [ 96.578369][ T4330] __alloc_pages+0x1e1/0x470 [ 96.583547][ T4330] new_slab+0xb6/0x4b0 [ 96.590289][ T4330] ___slab_alloc+0x81e/0xdf0 [ 96.597707][ T4330] __kmalloc_node+0x200/0x3b0 [ 96.603632][ T4330] memcg_alloc_page_obj_cgroups+0x81/0x120 [ 96.612029][ T4330] slab_post_alloc_hook+0xba/0x380 [ 96.618191][ T4330] kmem_cache_alloc+0x100/0x290 [ 96.626111][ T4330] xas_create+0x5d0/0x1620 [ 96.631714][ T4330] xas_store+0xa2/0x19f0 [ 96.637828][ T4330] __add_to_page_cache_locked+0x808/0xf60 [ 96.645851][ T4330] add_to_page_cache_lru+0x150/0x4a0 [ 96.651891][ T4330] page_cache_ra_unbounded+0x410/0x930 [ 96.658045][ T4330] do_sync_mmap_readahead+0x588/0x700 [ 96.663782][ T4330] filemap_fault+0x70d/0x13b0 [ 96.671277][ T4330] __do_fault+0x141/0x330 [ 96.676869][ T4330] page last free stack trace: [ 96.681842][ T4330] free_unref_page_prepare+0x637/0x6c0 [ 96.687830][ T4330] free_unref_page+0x94/0x280 [ 96.692958][ T4330] __unfreeze_partials+0x1a5/0x200 [ 96.698942][ T4330] put_cpu_partial+0x12d/0x190 [ 96.704217][ T4330] qlist_free_all+0x35/0x90 [ 96.709845][ T4330] kasan_quarantine_reduce+0x150/0x160 [ 96.717766][ T4330] __kasan_slab_alloc+0x2f/0xd0 [ 96.723523][ T4330] slab_post_alloc_hook+0x4c/0x380 [ 96.730220][ T4330] kmem_cache_alloc_node+0x12d/0x2d0 [ 96.737255][ T4330] __alloc_skb+0xf4/0x750 [ 96.743042][ T4330] mld_newpack+0x12a/0xb90 [ 96.748338][ T4330] add_grhead+0x5a/0x240 [ 96.755197][ T4330] add_grec+0x1341/0x15d0 [ 96.760114][ T4330] mld_ifc_work+0x6e7/0xb40 [ 96.765435][ T4330] process_one_work+0x863/0x1000 [ 96.773155][ T4330] worker_thread+0xaa8/0x12a0 [ 96.779911][ T4330] [ 96.782581][ T4330] Memory state around the buggy address: [ 96.789086][ T4330] ffff88802393a180: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 96.799875][ T4330] ffff88802393a200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 96.808967][ T4330] >ffff88802393a280: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 96.817593][ T4330] ^ [ 96.824657][ T4330] ffff88802393a300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 96.834519][ T4330] ffff88802393a380: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 96.844359][ T4330] ================================================================== [ 96.864215][ T4330] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 96.874292][ T4330] CPU: 0 PID: 4330 Comm: syz.4.5 Tainted: G B syzkaller #0 [ 96.885851][ T4330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 96.897905][ T4330] Call Trace: [ 96.902310][ T4330] [ 96.906687][ T4330] dump_stack_lvl+0x168/0x230 [ 96.912283][ T4330] ? show_regs_print_info+0x20/0x20 [ 96.918882][ T4330] ? load_image+0x3b0/0x3b0 [ 96.923810][ T4330] panic+0x2c9/0x7f0 [ 96.928188][ T4330] ? bpf_jit_dump+0xd0/0xd0 [ 96.933324][ T4330] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 96.942730][ T4330] ? _raw_spin_unlock+0x40/0x40 [ 96.948433][ T4330] ? ax25_dev_device_down+0x35e/0x520 [ 96.955415][ T4330] check_panic_on_warn+0x80/0xa0 [ 96.962302][ T4330] ? ax25_dev_device_down+0x35e/0x520 [ 96.969142][ T4330] end_report+0x6d/0xf0 [ 96.974417][ T4330] kasan_report+0x102/0x130 [ 96.980553][ T4330] ? ax25_dev_device_down+0x35e/0x520 [ 96.988185][ T4330] ? kfree+0xef/0x2a0 [ 96.995843][ T4330] kasan_check_range+0x27b/0x290 [ 97.002159][ T4330] ax25_dev_device_down+0x35e/0x520 [ 97.009539][ T4330] ax25_device_event+0x4b4/0x4f0 [ 97.017159][ T4330] raw_notifier_call_chain+0xcb/0x160 [ 97.024983][ T4330] __dev_notify_flags+0x178/0x2d0 [ 97.030308][ T4330] ? __dev_change_flags+0x6a0/0x6a0 [ 97.036556][ T4330] ? __dev_change_flags+0x4bb/0x6a0 [ 97.043107][ T4330] ? dev_get_flags+0x1c0/0x1c0 [ 97.048518][ T4330] ? do_raw_spin_unlock+0x11d/0x230 [ 97.056172][ T4330] dev_change_flags+0xe3/0x1a0 [ 97.062083][ T4330] dev_ifsioc+0x147/0xe70 [ 97.066902][ T4330] ? dev_ioctl+0x54e/0xe50 [ 97.071374][ T4330] ? dev_ioctl+0xe50/0xe50 [ 97.076961][ T4330] ? apparmor_capable+0x12c/0x190 [ 97.082453][ T4330] ? full_name_hash+0x8e/0xe0 [ 97.089912][ T4330] dev_ioctl+0x55f/0xe50 [ 97.095183][ T4330] ? _copy_from_user+0x111/0x170 [ 97.100716][ T4330] sock_do_ioctl+0x222/0x2f0 [ 97.105787][ T4330] ? sock_show_fdinfo+0xb0/0xb0 [ 97.112377][ T4330] sock_ioctl+0x4ed/0x6e0 [ 97.117464][ T4330] ? sock_poll+0x3f0/0x3f0 [ 97.122677][ T4330] ? bpf_lsm_file_ioctl+0x5/0x10 [ 97.129878][ T4330] ? security_file_ioctl+0x7c/0xa0 [ 97.135760][ T4330] ? sock_poll+0x3f0/0x3f0 [ 97.141633][ T4330] __se_sys_ioctl+0xfa/0x170 [ 97.149546][ T4330] do_syscall_64+0x4c/0xa0 [ 97.155208][ T4330] ? clear_bhb_loop+0x30/0x80 [ 97.160525][ T4330] ? clear_bhb_loop+0x30/0x80 [ 97.166516][ T4330] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 97.174887][ T4330] RIP: 0033:0x7fbe346ad6c9 [ 97.180691][ T4330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.204344][ T4330] RSP: 002b:00007fbe32914038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 97.213841][ T4330] RAX: ffffffffffffffda RBX: 00007fbe34903fa0 RCX: 00007fbe346ad6c9 [ 97.223650][ T4330] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000004 [ 97.233955][ T4330] RBP: 00007fbe3472ff91 R08: 0000000000000000 R09: 0000000000000000 [ 97.243324][ T4330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.252992][ T4330] R13: 00007fbe34904038 R14: 00007fbe34903fa0 R15: 00007ffc360a5e18 [ 97.262846][ T4330] [ 97.266784][ T4330] Kernel Offset: disabled [ 97.271714][ T4330] Rebooting in 86400 seconds..