last executing test programs: 334.089003ms ago: executing program 2 (id=3): socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="030000000400000004000000b5"], 0x50) sysinfo(&(0x7f0000000000)=""/196) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="04"], 0x48}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0x36, 0x0, &(0x7f0000000000)="c1dfb080cd21d308098ee68886dd", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 279.041338ms ago: executing program 2 (id=6): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r1 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0x80000000) 247.30619ms ago: executing program 2 (id=7): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000003c0007010000000000000000010000000400fc800c00018008000600ffff0000080002"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x84) 241.582041ms ago: executing program 1 (id=2): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000e, 0x204031, 0xffffffffffffffff, 0xd0c6f000) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r1 = memfd_create(&(0x7f0000000240)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\xdc\xe2\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\xe3l\x87\\\x15Hd~\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bI\xd8\x1c\xe8\x9bYS%\x1d\x10\x86\xa0\v\xea\xd9\x89\xda\xa7Wd\xa4Eu\x8csm\xa1.\xd1\xb2I\x1a\xb2\xfdA\x98\x16\xca\x83y\xf9\x1a\xe7\x06h\av\xa8\xd8\xce\xc8\x1c\xaf\x8e\xa1\xefa\xb1/\xee1=\xbfM\xeaw\f\xa2\x87\x1c(\x1a-\xeb\xfbV\xeb4\xd4C]\xc7{t\xf9\xd5`IZ\x03H\xd9\x86\xe12N\x1f\xd8{\xf5z@\xe0\x00\x00\x00\x00', 0x0) mmap(&(0x7f00001d1000/0x3000)=nil, 0x3000, 0x6, 0x12, r1, 0x6a360000) read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0x2020) 170.961156ms ago: executing program 1 (id=8): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x7, &(0x7f0000000040)=0xefbe, 0x4) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) userfaultfd(0x80001) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, r2, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x1, 0x4800003e, r3, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r5 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 170.545186ms ago: executing program 2 (id=9): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, 0x0, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=@l2={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x80, 0x2}, 0x80) 65.960935ms ago: executing program 0 (id=1): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0xe0, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x41, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0x0, @random=0x7, 0x1, @void, @void, @void, @val={0x4, 0x6, {0xf0, 0x2, 0x7f, 0xa706}}, @val={0x6, 0x2, 0x6}, @void, @val={0x25, 0x3, {0x1, 0x8c, 0x8}}, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x68, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x5f, 0x2, "6f28cae7e763e81067d4ceb813e7feb2a199aa4d55a1ab96f08a0f0e794136b12fef25420295cc1e507f98d439d24055b3819ebc8073730523a0a085ad7669c2155f69b15be1a3c2c548d7259b70c08e808f7af3a3406f731c9d6e"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xe0}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) 53.592216ms ago: executing program 3 (id=4): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1ee381, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x12d102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 0s ago: executing program 4 (id=5): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r2, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x8000}) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.117' (ED25519) to the list of known hosts. [ 31.437960][ T4034] cgroup: Unknown subsys name 'net' [ 31.652395][ T4034] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 31.962283][ T4034] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 33.389260][ T4050] chnl_net:caif_netlink_parms(): no params data found [ 33.393225][ T4047] chnl_net:caif_netlink_parms(): no params data found [ 33.403974][ T4054] chnl_net:caif_netlink_parms(): no params data found [ 33.409370][ T4044] chnl_net:caif_netlink_parms(): no params data found [ 33.448840][ T4047] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.450255][ T4047] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.451750][ T4047] device bridge_slave_0 entered promiscuous mode [ 33.462697][ T4047] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.463902][ T4047] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.465454][ T4047] device bridge_slave_1 entered promiscuous mode [ 33.482582][ T4050] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.483785][ T4050] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.485416][ T4050] device bridge_slave_0 entered promiscuous mode [ 33.487024][ T4054] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.488194][ T4054] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.490126][ T4054] device bridge_slave_0 entered promiscuous mode [ 33.491892][ T4044] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.493034][ T4044] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.494475][ T4044] device bridge_slave_0 entered promiscuous mode [ 33.500946][ T4047] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.502533][ T4050] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.503666][ T4050] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.505153][ T4050] device bridge_slave_1 entered promiscuous mode [ 33.506756][ T4054] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.507942][ T4054] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.509408][ T4054] device bridge_slave_1 entered promiscuous mode [ 33.513604][ T4044] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.514665][ T4044] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.516105][ T4044] device bridge_slave_1 entered promiscuous mode [ 33.517521][ T4055] chnl_net:caif_netlink_parms(): no params data found [ 33.520635][ T4047] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.537686][ T4050] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.543573][ T4054] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.547462][ T4054] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.553729][ T4050] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.556057][ T4044] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.565354][ T4047] team0: Port device team_slave_0 added [ 33.569563][ T4044] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.576886][ T4047] team0: Port device team_slave_1 added [ 33.581834][ T4050] team0: Port device team_slave_0 added [ 33.587218][ T4054] team0: Port device team_slave_0 added [ 33.593012][ T4050] team0: Port device team_slave_1 added [ 33.602244][ T4054] team0: Port device team_slave_1 added [ 33.608704][ T4044] team0: Port device team_slave_0 added [ 33.611657][ T4055] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.612845][ T4055] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.614242][ T4055] device bridge_slave_0 entered promiscuous mode [ 33.618357][ T4047] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.619468][ T4047] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.623799][ T4047] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.628918][ T4044] team0: Port device team_slave_1 added [ 33.631730][ T4055] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.632911][ T4055] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.634374][ T4055] device bridge_slave_1 entered promiscuous mode [ 33.638413][ T4054] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.639441][ T4054] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.644756][ T4054] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.646719][ T4047] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.647847][ T4047] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.652004][ T4047] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.653979][ T4050] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.655070][ T4050] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.658982][ T4050] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.668583][ T4054] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.671682][ T4054] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.675783][ T4054] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.679441][ T4050] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.680753][ T4050] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.684985][ T4050] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.689742][ T4044] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.690948][ T4044] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.694916][ T4044] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.697828][ T4055] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.705761][ T4044] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.706835][ T4044] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.710992][ T4044] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.714902][ T4055] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.760752][ T4054] device hsr_slave_0 entered promiscuous mode [ 33.799910][ T4054] device hsr_slave_1 entered promiscuous mode [ 33.910623][ T4050] device hsr_slave_0 entered promiscuous mode [ 33.949897][ T4050] device hsr_slave_1 entered promiscuous mode [ 33.989735][ T4050] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 33.991022][ T4050] Cannot create hsr debugfs directory [ 33.992756][ T4055] team0: Port device team_slave_0 added [ 33.999386][ T4055] team0: Port device team_slave_1 added [ 34.040675][ T4047] device hsr_slave_0 entered promiscuous mode [ 34.079868][ T4047] device hsr_slave_1 entered promiscuous mode [ 34.119727][ T4047] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 34.120892][ T4047] Cannot create hsr debugfs directory [ 34.180685][ T4044] device hsr_slave_0 entered promiscuous mode [ 34.219824][ T4044] device hsr_slave_1 entered promiscuous mode [ 34.269733][ T4044] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 34.270837][ T4044] Cannot create hsr debugfs directory [ 34.285442][ T4055] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.286558][ T4055] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.290751][ T4055] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.298581][ T4055] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.299954][ T4055] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.304116][ T4055] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.360616][ T4055] device hsr_slave_0 entered promiscuous mode [ 34.399910][ T4055] device hsr_slave_1 entered promiscuous mode [ 34.439713][ T4055] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 34.441000][ T4055] Cannot create hsr debugfs directory [ 34.521836][ T4054] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 34.601350][ T4054] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 34.640873][ T4054] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 34.690684][ T4054] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 34.745810][ T4050] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 34.780706][ T4050] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 34.830641][ T4050] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 34.870686][ T4050] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 34.946935][ T4044] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 35.001110][ T4044] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 35.042394][ T4044] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 35.110844][ T4047] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 35.154271][ T4044] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 35.195239][ T4047] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 35.240752][ T4047] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 35.284696][ T4047] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 35.299970][ T4098] Bluetooth: hci1: command 0x0409 tx timeout [ 35.301148][ T4098] Bluetooth: hci0: command 0x0409 tx timeout [ 35.301218][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 35.303089][ T21] Bluetooth: hci3: command 0x0409 tx timeout [ 35.304000][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 35.326840][ T4054] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.344987][ T1648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 35.346683][ T1648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.348308][ T4055] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 35.373713][ T4055] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 35.443159][ T4055] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 35.483963][ T4054] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.485589][ T4055] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 35.539164][ T4050] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.549754][ T1648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 35.551452][ T1648] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 35.552848][ T1648] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.553973][ T1648] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.555290][ T1648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 35.556759][ T1648] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.558304][ T1648] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.559402][ T1648] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.560851][ T1648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 35.565270][ T1648] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 35.566711][ T1648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 35.578152][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 35.580208][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 35.581695][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 35.583201][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 35.591292][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 35.595507][ T1648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 35.596925][ T1648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.598381][ T1648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 35.601571][ T1648] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.604871][ T4050] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.611665][ T1648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 35.613190][ T1648] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.616404][ T4047] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.618553][ T1648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 35.620194][ T1648] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 35.621585][ T1648] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.622744][ T1648] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.624758][ T4054] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 35.628905][ T1648] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 35.635424][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 35.636976][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.638497][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.639600][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.648646][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 35.651727][ T4044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.659280][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 35.661111][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 35.662804][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 35.664428][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 35.665752][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.669254][ T4047] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.672410][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 35.673880][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 35.675534][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 35.681202][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 35.682684][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.684101][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 35.685624][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 35.687128][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.688261][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.697830][ T4050] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.702291][ T4050] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 35.703968][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 35.705685][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 35.707145][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.708590][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 35.710247][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.714533][ T4044] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.722180][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 35.723671][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.725323][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.726446][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.727841][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 35.729091][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 35.730840][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 35.732418][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 35.733913][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.735162][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.736689][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 35.742618][ T4055] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.746948][ T4054] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.749456][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 35.751365][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 35.752919][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.754373][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.755553][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.758336][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 35.765743][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 35.773655][ T1648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 35.775094][ T1648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.776469][ T1648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 35.778141][ T1648] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 35.779595][ T1648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 35.781917][ T1648] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 35.784618][ T4055] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.785998][ T1648] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 35.796281][ T1648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 35.798070][ T1648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 35.799584][ T1648] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.801920][ T1648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.803544][ T1648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.808529][ T1648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 35.811473][ T1648] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.812894][ T1648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 35.814574][ T1648] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 35.816115][ T1648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 35.817802][ T1648] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 35.819270][ T1648] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.820351][ T1648] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.822297][ T1648] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 35.823713][ T1648] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 35.828104][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 35.829641][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.831438][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.832522][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.833840][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 35.834993][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 35.836178][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 35.840998][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 35.842606][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 35.844554][ T4047] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 35.850708][ T4050] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.853006][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 35.858882][ T1648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 35.861026][ T1648] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 35.862541][ T1648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 35.864055][ T1648] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.866228][ T1648] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 35.873831][ T1648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 35.875548][ T1648] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 35.877130][ T1648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.878668][ T1648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.881161][ T1648] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.882525][ T1648] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.888898][ T4054] device veth0_vlan entered promiscuous mode [ 35.893468][ T1648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 35.895013][ T1648] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.896677][ T1648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 35.898396][ T1648] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.900604][ T1648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 35.902163][ T1648] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.907659][ T1648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.909446][ T1648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.915719][ T4044] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 35.917759][ T4055] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 35.933890][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.935360][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.940972][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.942412][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.946899][ T4054] device veth1_vlan entered promiscuous mode [ 35.953631][ T4050] device veth0_vlan entered promiscuous mode [ 35.957495][ T4050] device veth1_vlan entered promiscuous mode [ 35.961249][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.962814][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.964211][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.965590][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 35.966808][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 35.978944][ T521] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.980771][ T521] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.982288][ T521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.986883][ T4054] device veth0_macvtap entered promiscuous mode [ 35.989066][ T1648] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.990924][ T1648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.992452][ T1648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.995810][ T4050] device veth0_macvtap entered promiscuous mode [ 36.002133][ T4047] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.004979][ T4054] device veth1_macvtap entered promiscuous mode [ 36.008295][ T4050] device veth1_macvtap entered promiscuous mode [ 36.016494][ T521] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 36.018014][ T521] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 36.019481][ T521] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 36.021197][ T521] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 36.022416][ T521] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 36.024675][ T1648] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 36.025979][ T1648] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 36.029538][ T4054] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.033787][ T521] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 36.035330][ T521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 36.039200][ T1648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 36.041260][ T1648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 36.046143][ T4054] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.047378][ T521] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 36.049047][ T521] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 36.052800][ T4055] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.057455][ T4044] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.061112][ T521] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 36.062590][ T521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 36.064579][ T4047] device veth0_vlan entered promiscuous mode [ 36.065747][ T521] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 36.067038][ T521] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 36.078506][ T4050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.082849][ T4050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.084997][ T4050] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.091719][ T4054] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.093075][ T4054] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.094421][ T4054] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.095804][ T4054] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.098005][ T521] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 36.099519][ T521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 36.105682][ T4050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.107277][ T4050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.109585][ T4050] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.112786][ T4047] device veth1_vlan entered promiscuous mode [ 36.114019][ T521] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 36.115556][ T521] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 36.117002][ T521] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 36.121243][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 36.122794][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 36.126141][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 36.127708][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 36.139611][ T4050] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.141983][ T4050] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.143378][ T4050] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.144812][ T4050] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.152069][ T521] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 36.153542][ T521] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 36.154902][ T521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 36.156403][ T521] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 36.157764][ T521] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 36.161169][ T1648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 36.162634][ T1648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 36.164147][ T1648] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 36.165513][ T1648] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 36.168852][ T4055] device veth0_vlan entered promiscuous mode [ 36.173944][ T4044] device veth0_vlan entered promiscuous mode [ 36.184389][ T4044] device veth1_vlan entered promiscuous mode [ 36.188955][ T4055] device veth1_vlan entered promiscuous mode [ 36.202136][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 36.203660][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 36.205089][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 36.206522][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 36.208030][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 36.213643][ T4047] device veth0_macvtap entered promiscuous mode [ 36.221596][ T4047] device veth1_macvtap entered promiscuous mode [ 36.227063][ T4044] device veth0_macvtap entered promiscuous mode [ 36.229112][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 36.230700][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 36.232097][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 36.233510][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 36.234962][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 36.237048][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 36.246652][ T4044] device veth1_macvtap entered promiscuous mode [ 36.254993][ T4047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.256682][ T4047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.258353][ T4047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.260610][ T4047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.262645][ T4047] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.268530][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 36.270189][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 36.271736][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 36.273885][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.280519][ T1648] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.281665][ T1648] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.284819][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.285898][ T4047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.287595][ T4047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.289053][ T4047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.291385][ T4047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.293600][ T4047] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.294982][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 36.296492][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 36.297836][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 36.299357][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 36.303341][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.304684][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.307578][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 36.317619][ T1648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 36.319080][ T1648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 36.321339][ T4044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.323002][ T4044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.324630][ T4044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.326300][ T4044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.327755][ T4044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.329297][ T4044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.333107][ T4044] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.337483][ T4047] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.338844][ T4047] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.341077][ T4047] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.342480][ T4047] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.344358][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 36.345835][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 36.348181][ T4044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.353146][ T4044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.359943][ T4044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.361732][ T4044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.363235][ T4044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.364742][ T4044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.368852][ T4044] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.371940][ T4055] device veth0_macvtap entered promiscuous mode [ 36.374445][ T4055] device veth1_macvtap entered promiscuous mode [ 36.378271][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.378876][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 36.379628][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.381611][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 36.383593][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 36.385115][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 36.387321][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 36.399535][ T4055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.401749][ T4055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.403356][ T4055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.405074][ T4055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.406677][ T4055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.408422][ T4055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.419465][ T4055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.424034][ T4055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.426547][ T4055] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.428260][ T4044] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.429565][ T4044] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.432193][ T4044] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.433575][ T4044] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.436946][ T1648] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 36.438470][ T1648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 36.443563][ T4055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.445151][ T4055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.460084][ T4055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.461790][ T4055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.462443][ T4161] netlink: 'syz.2.7': attribute type 1 has an invalid length. [ 36.463292][ T4055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.465977][ T4055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.467444][ T4055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.468968][ T4055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.487461][ T4055] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.498374][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 36.500075][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 36.517268][ T4055] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.518786][ T4055] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.524151][ T4055] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.525492][ T4055] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.544843][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.546097][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.551721][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.552964][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.554317][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 36.555829][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 36.577627][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.579028][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.580464][ T1648] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.580485][ T1648] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.580820][ T1648] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 36.587600][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 36.600167][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.603613][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.608164][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 36.614013][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.615390][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.617014][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 36.712666][ T4173] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 36.717441][ T4173] [ 36.717824][ T4173] ====================================================== [ 36.718932][ T4173] WARNING: possible circular locking dependency detected [ 36.720062][ T4173] 5.15.189-syzkaller #0 Not tainted [ 36.720969][ T4173] ------------------------------------------------------ [ 36.722066][ T4173] syz.4.5/4173 is trying to acquire lock: [ 36.722965][ T4173] ffff0000eb084120 (sk_lock-AF_AX25){+.+.}-{0:0}, at: ax25_device_event+0x20c/0x590 [ 36.724385][ T4173] [ 36.724385][ T4173] but task is already holding lock: [ 36.725483][ T4173] ffff80001629c1e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 36.726719][ T4173] [ 36.726719][ T4173] which lock already depends on the new lock. [ 36.726719][ T4173] [ 36.728283][ T4173] [ 36.728283][ T4173] the existing dependency chain (in reverse order) is: [ 36.729608][ T4173] [ 36.729608][ T4173] -> #1 (rtnl_mutex){+.+.}-{3:3}: [ 36.730676][ T4173] __mutex_lock_common+0x194/0x1edc [ 36.731505][ T4173] mutex_lock_nested+0xac/0x11c [ 36.732296][ T4173] rtnl_lock+0x20/0x2c [ 36.732992][ T4173] ax25_setsockopt+0x870/0xa5c [ 36.733856][ T4173] __sys_setsockopt+0x260/0x36c [ 36.734732][ T4173] __arm64_sys_setsockopt+0xb8/0xd4 [ 36.735661][ T4173] invoke_syscall+0x98/0x2b8 [ 36.736466][ T4173] el0_svc_common+0x138/0x258 [ 36.737294][ T4173] do_el0_svc+0x58/0x14c [ 36.737976][ T4173] el0_svc+0x78/0x1e0 [ 36.738639][ T4173] el0t_64_sync_handler+0xcc/0xe4 [ 36.739521][ T4173] el0t_64_sync+0x1a0/0x1a4 [ 36.740328][ T4173] [ 36.740328][ T4173] -> #0 (sk_lock-AF_AX25){+.+.}-{0:0}: [ 36.741537][ T4173] __lock_acquire+0x2928/0x651c [ 36.742420][ T4173] lock_acquire+0x1f4/0x620 [ 36.743212][ T4173] lock_sock_nested+0xd8/0x1d4 [ 36.744052][ T4173] ax25_device_event+0x20c/0x590 [ 36.744923][ T4173] raw_notifier_call_chain+0xd4/0x164 [ 36.745841][ T4173] __dev_notify_flags+0x250/0x46c [ 36.746709][ T4173] dev_change_flags+0xc8/0x154 [ 36.747633][ T4173] dev_ifsioc+0x504/0xef4 [ 36.748387][ T4173] dev_ioctl+0x4d0/0xc94 [ 36.749167][ T4173] sock_do_ioctl+0x18c/0x240 [ 36.750119][ T4173] sock_ioctl+0x5c8/0x87c [ 36.750881][ T4173] __arm64_sys_ioctl+0x14c/0x1c8 [ 36.751775][ T4173] invoke_syscall+0x98/0x2b8 [ 36.752669][ T4173] el0_svc_common+0x138/0x258 [ 36.753535][ T4173] do_el0_svc+0x58/0x14c [ 36.754239][ T4173] el0_svc+0x78/0x1e0 [ 36.754960][ T4173] el0t_64_sync_handler+0xcc/0xe4 [ 36.755837][ T4173] el0t_64_sync+0x1a0/0x1a4 [ 36.756695][ T4173] [ 36.756695][ T4173] other info that might help us debug this: [ 36.756695][ T4173] [ 36.758456][ T4173] Possible unsafe locking scenario: [ 36.758456][ T4173] [ 36.759696][ T4173] CPU0 CPU1 [ 36.760491][ T4173] ---- ---- [ 36.761246][ T4173] lock(rtnl_mutex); [ 36.761858][ T4173] lock(sk_lock-AF_AX25); [ 36.762894][ T4173] lock(rtnl_mutex); [ 36.763893][ T4173] lock(sk_lock-AF_AX25); [ 36.764565][ T4173] [ 36.764565][ T4173] *** DEADLOCK *** [ 36.764565][ T4173] [ 36.765726][ T4176] Internal error: Oops - BTI: 0000000036000001 [#1] PREEMPT SMP [ 36.765760][ T4173] 1 lock held by syz.4.5/4173: [ 36.767052][ T4176] Modules linked in: [ 36.767809][ T4173] #0: [ 36.767811][ T4176] [ 36.767816][ T4173] ffff80001629c1e8 [ 36.768447][ T4176] CPU: 1 PID: 4176 Comm: syz.0.10 Not tainted 5.15.189-syzkaller #0 [ 36.768862][ T4173] ( [ 36.769238][ T4176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 36.769817][ T4173] rtnl_mutex [ 36.771155][ T4176] pstate: 42400405 (nZcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=jc) [ 36.771546][ T4173] ){+.+.}-{3:3} [ 36.773104][ T4176] pc : fault_in_readable+0x26c/0x354 [ 36.773605][ T4173] , at: rtnl_lock+0x20/0x2c [ 36.774976][ T4176] lr : fault_in_readable+0x248/0x354 [ 36.775533][ T4173] [ 36.775533][ T4173] stack backtrace: [ 36.776369][ T4176] sp : ffff80001fcc77f0 [ 36.777074][ T4173] CPU: 0 PID: 4173 Comm: syz.4.5 Not tainted 5.15.189-syzkaller #0 [ 36.777889][ T4176] x29: ffff80001fcc7810 [ 36.778823][ T4173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 36.779527][ T4176] x28: 00000020a9600000 [ 36.780673][ T4173] Call trace: [ 36.781315][ T4176] x27: 0000000020a97000 [ 36.782848][ T4173] dump_backtrace+0x0/0x43c [ 36.783526][ T4176] [ 36.784036][ T4173] show_stack+0x2c/0x3c [ 36.784720][ T4176] x26: 0000000020a96000 [ 36.785450][ T4173] __dump_stack+0x30/0x40 [ 36.785809][ T4176] x25: 0000000020a96000 [ 36.786485][ T4173] dump_stack_lvl+0xf8/0x160 [ 36.787164][ T4176] x24: 00000000fffffff2 [ 36.787840][ T4173] dump_stack+0x1c/0x5c [ 36.788575][ T4176] [ 36.789284][ T4173] print_circular_bug+0x148/0x1b0 [ 36.790020][ T4176] x23: 1fffe000184546d0 [ 36.790671][ T4173] check_noncircular+0x240/0x2d4 [ 36.791016][ T4176] x22: ffff0000c22a3680 [ 36.791840][ T4173] __lock_acquire+0x2928/0x651c [ 36.792537][ T4176] x21: 0000000000000000 [ 36.793342][ T4173] lock_acquire+0x1f4/0x620 [ 36.794004][ T4176] [ 36.794791][ T4173] lock_sock_nested+0xd8/0x1d4 [ 36.795503][ T4176] x20: 0000000020a96000 [ 36.796267][ T4173] ax25_device_event+0x20c/0x590 [ 36.796631][ T4176] x19: dfff800000000000 [ 36.797439][ T4173] raw_notifier_call_chain+0xd4/0x164 [ 36.798160][ T4176] x18: 0000000000000001 [ 36.798917][ T4173] __dev_notify_flags+0x250/0x46c [ 36.799630][ T4176] [ 36.800511][ T4173] dev_change_flags+0xc8/0x154 [ 36.801167][ T4176] x17: 0000000000000002 [ 36.801964][ T4173] dev_ifsioc+0x504/0xef4 [ 36.802309][ T4176] x16: ffff800008733d94 [ 36.803084][ T4173] dev_ioctl+0x4d0/0xc94 [ 36.803785][ T4176] x15: 0000000020a94240 [ 36.804461][ T4173] sock_do_ioctl+0x18c/0x240 [ 36.805147][ T4176] [ 36.805760][ T4173] sock_ioctl+0x5c8/0x87c [ 36.806452][ T4176] x14: 0000000000000000 [ 36.807155][ T4173] __arm64_sys_ioctl+0x14c/0x1c8 [ 36.807560][ T4176] x13: 0000000000000000 [ 36.808249][ T4173] invoke_syscall+0x98/0x2b8 [ 36.808964][ T4176] x12: 0000000000ff0100 [ 36.809735][ T4173] el0_svc_common+0x138/0x258 [ 36.810462][ T4176] [ 36.810467][ T4176] x11: 0000000000000000 [ 36.811222][ T4173] do_el0_svc+0x58/0x14c [ 36.811955][ T4176] x10: 0000000000000002 [ 36.812684][ T4173] el0_svc+0x78/0x1e0 [ 36.813035][ T4176] x9 : 0000000000000000 [ 36.813681][ T4173] el0t_64_sync_handler+0xcc/0xe4 [ 36.814330][ T4176] [ 36.814965][ T4173] el0t_64_sync+0x1a0/0x1a4 [ 36.815650][ T4176] x8 : 0000000020a96000 x7 : 0000000000000000 x6 : ffff800008750ed4 [ 36.819694][ T4176] x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000001 [ 36.821034][ T4176] x2 : 0000000000000000 x1 : 0000000000000001 x0 : 0000000000000000 [ 36.822263][ T4176] Call trace: [ 36.822738][ T4176] fault_in_readable+0x26c/0x354 [ 36.823557][ T4176] fault_in_iov_iter_readable+0x120/0x248 [ 36.824395][ T4176] generic_perform_write+0x14c/0x480 [ 36.825232][ T4176] __generic_file_write_iter+0x23c/0x454 [ 36.826123][ T4176] generic_file_write_iter+0xb0/0x1b4 [ 36.827017][ T4176] vfs_write+0x7c8/0xa2c [ 36.827654][ T4176] ksys_write+0x120/0x210 [ 36.828309][ T4176] __arm64_sys_write+0x7c/0x90 [ 36.829056][ T4176] invoke_syscall+0x98/0x2b8 [ 36.829762][ T4176] el0_svc_common+0x138/0x258 [ 36.830487][ T4176] do_el0_svc+0x58/0x14c [ 36.831104][ T4176] el0_svc+0x78/0x1e0 [ 36.831703][ T4176] el0t_64_sync_handler+0xcc/0xe4 [ 36.832473][ T4176] el0t_64_sync+0x1a0/0x1a4 [ 36.833245][ T4176] Code: 381f43b5 2a1503f8 2a1503e0 38400909 (381f43a9) [ 36.834239][ T4176] ---[ end trace d4b8f833c252fd13 ]--- [ 36.888064][ T4173] ================================================================== [ 36.889260][ T4173] BUG: KASAN: use-after-free in ax25_dev_device_down+0x354/0x67c [ 36.890492][ T4173] Write of size 4 at addr ffff0000cf9dd4b8 by task syz.4.5/4173 [ 36.891770][ T4173] [ 36.892133][ T4173] CPU: 0 PID: 4173 Comm: syz.4.5 Tainted: G D 5.15.189-syzkaller #0 [ 36.893593][ T4173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 36.895200][ T4173] Call trace: [ 36.895691][ T4173] dump_backtrace+0x0/0x43c [ 36.896336][ T4173] show_stack+0x2c/0x3c [ 36.896930][ T4173] __dump_stack+0x30/0x40 [ 36.897598][ T4173] dump_stack_lvl+0xf8/0x160 [ 36.898255][ T4173] print_address_description+0x78/0x30c [ 36.899096][ T4173] kasan_report+0xec/0x15c [ 36.899770][ T4173] kasan_check_range+0x270/0x2b0 [ 36.900650][ T4173] __kasan_check_write+0x44/0x54 [ 36.901464][ T4173] ax25_dev_device_down+0x354/0x67c [ 36.902371][ T4173] ax25_device_event+0x538/0x590 [ 36.903191][ T4173] raw_notifier_call_chain+0xd4/0x164 [ 36.904094][ T4173] __dev_notify_flags+0x250/0x46c [ 36.904868][ T4173] dev_change_flags+0xc8/0x154 [ 36.905642][ T4173] dev_ifsioc+0x504/0xef4 [ 36.906293][ T4173] dev_ioctl+0x4d0/0xc94 [ 36.907008][ T4173] sock_do_ioctl+0x18c/0x240 [ 36.907697][ T4173] sock_ioctl+0x5c8/0x87c [ 36.908399][ T4173] __arm64_sys_ioctl+0x14c/0x1c8 [ 36.909168][ T4173] invoke_syscall+0x98/0x2b8 [ 36.909903][ T4173] el0_svc_common+0x138/0x258 [ 36.910644][ T4173] do_el0_svc+0x58/0x14c [ 36.911327][ T4173] el0_svc+0x78/0x1e0 [ 36.911959][ T4173] el0t_64_sync_handler+0xcc/0xe4 [ 36.912778][ T4173] el0t_64_sync+0x1a0/0x1a4 [ 36.913464][ T4173] [ 36.913804][ T4173] Allocated by task 4173: [ 36.914503][ T4173] __kasan_kmalloc+0xb0/0xf0 [ 36.915201][ T4173] kmem_cache_alloc_trace+0x274/0x3fc [ 36.916102][ T4173] ax25_dev_device_up+0x5c/0x540 [ 36.916893][ T4173] ax25_device_event+0x504/0x590 [ 36.917668][ T4173] raw_notifier_call_chain+0xd4/0x164 [ 36.918527][ T4173] __dev_notify_flags+0x250/0x46c [ 36.919327][ T4173] dev_change_flags+0xc8/0x154 [ 36.920160][ T4173] dev_ifsioc+0x504/0xef4 [ 36.920893][ T4173] dev_ioctl+0x4d0/0xc94 [ 36.921622][ T4173] sock_do_ioctl+0x18c/0x240 [ 36.922405][ T4173] sock_ioctl+0x5c8/0x87c [ 36.923151][ T4173] __arm64_sys_ioctl+0x14c/0x1c8 [ 36.923986][ T4173] invoke_syscall+0x98/0x2b8 [ 36.924733][ T4173] el0_svc_common+0x138/0x258 [ 36.925479][ T4173] do_el0_svc+0x58/0x14c [ 36.926146][ T4173] el0_svc+0x78/0x1e0 [ 36.926766][ T4173] el0t_64_sync_handler+0xcc/0xe4 [ 36.927573][ T4173] el0t_64_sync+0x1a0/0x1a4 [ 36.928290][ T4173] [ 36.928665][ T4173] Freed by task 4173: [ 36.929288][ T4173] kasan_set_track+0x4c/0x84 [ 36.929990][ T4173] kasan_set_free_info+0x28/0x4c [ 36.930786][ T4173] ____kasan_slab_free+0x118/0x164 [ 36.931612][ T4173] __kasan_slab_free+0x18/0x28 [ 36.932277][ T4173] slab_free_freelist_hook+0x128/0x1e8 [ 36.933129][ T4173] kfree+0x170/0x40c [ 36.933700][ T4173] ax25_dev_device_down+0x1ac/0x67c [ 36.934458][ T4173] ax25_device_event+0x538/0x590 [ 36.935262][ T4173] raw_notifier_call_chain+0xd4/0x164 [ 36.936078][ T4173] __dev_notify_flags+0x250/0x46c [ 36.936899][ T4173] dev_change_flags+0xc8/0x154 [ 36.937675][ T4173] dev_ifsioc+0x504/0xef4 [ 36.938329][ T4173] dev_ioctl+0x4d0/0xc94 [ 36.938973][ T4173] sock_do_ioctl+0x18c/0x240 [ 36.939657][ T4173] sock_ioctl+0x5c8/0x87c [ 36.940349][ T4173] __arm64_sys_ioctl+0x14c/0x1c8 [ 36.941114][ T4173] invoke_syscall+0x98/0x2b8 [ 36.941868][ T4173] el0_svc_common+0x138/0x258 [ 36.942619][ T4173] do_el0_svc+0x58/0x14c [ 36.943326][ T4173] el0_svc+0x78/0x1e0 [ 36.943904][ T4173] el0t_64_sync_handler+0xcc/0xe4 [ 36.944610][ T4173] el0t_64_sync+0x1a0/0x1a4 [ 36.945271][ T4173] [ 36.945652][ T4173] The buggy address belongs to the object at ffff0000cf9dd400 [ 36.945652][ T4173] which belongs to the cache kmalloc-256 of size 256 [ 36.947753][ T4173] The buggy address is located 184 bytes inside of [ 36.947753][ T4173] 256-byte region [ffff0000cf9dd400, ffff0000cf9dd500) [ 36.949636][ T4173] The buggy address belongs to the page: [ 36.950447][ T4173] page:0000000083456f33 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10f9dc [ 36.951879][ T4173] head:0000000083456f33 order:1 compound_mapcount:0 [ 36.952783][ T4173] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 36.953992][ T4173] raw: 05ffc00000010200 0000000000000000 dead000000000122 ffff0000c0002480 [ 36.955225][ T4173] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 36.956492][ T4173] page dumped because: kasan: bad access detected [ 36.957428][ T4173] [ 36.957805][ T4173] Memory state around the buggy address: [ 36.958646][ T4173] ffff0000cf9dd380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 36.959905][ T4173] ffff0000cf9dd400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 36.961131][ T4173] >ffff0000cf9dd480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 36.962270][ T4173] ^ [ 36.963117][ T4173] ffff0000cf9dd500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 36.964370][ T4173] ffff0000cf9dd580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 36.965667][ T4173] ================================================================== [ 37.037974][ T4173] ------------[ cut here ]------------ [ 37.038917][ T4173] refcount_t: underflow; use-after-free. [ 37.040164][ T4173] WARNING: CPU: 0 PID: 4173 at lib/refcount.c:28 refcount_warn_saturate+0x154/0x1f8 [ 37.041625][ T4173] Modules linked in: [ 37.042195][ T4173] CPU: 0 PID: 4173 Comm: syz.4.5 Tainted: G B D 5.15.189-syzkaller #0 [ 37.043542][ T4173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 37.044925][ T4173] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 37.046075][ T4173] pc : refcount_warn_saturate+0x154/0x1f8 [ 37.046879][ T4173] lr : refcount_warn_saturate+0x154/0x1f8 [ 37.047725][ T4173] sp : ffff80001fd37690 [ 37.048371][ T4173] x29: ffff80001fd37690 x28: ffff8000163d4b00 x27: 1fffe00019f3ba82 [ 37.049574][ T4173] x26: ffff80001b1e4000 x25: 1fffe00019ede06d x24: dfff800000000000 [ 37.050724][ T4173] x23: 0000000000000001 x22: ffff0000cf9dd4b8 x21: 0000000000000007 [ 37.052142][ T4173] x20: ffff0000cf9dd4b8 x19: ffff8000165b2000 x18: 0000000000000002 [ 37.053411][ T4173] x17: 0000000040000000 x16: ffff8000111bc798 x15: 0000000000000002 [ 37.054629][ T4173] x14: 0000000000ff0100 x13: ffffffffffffffff x12: 0000000000080000 [ 37.055863][ T4173] x11: 000000000007ffff x10: ffff80002686b000 x9 : 7607831292ee8b00 [ 37.057164][ T4173] x8 : 7607831292ee8b00 x7 : 0000000000000000 x6 : ffff80000824599c [ 37.058469][ T4173] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80000a723764 [ 37.059741][ T4173] x2 : ffff0001a10c5d50 x1 : 0000000100000000 x0 : 0000000000000026 [ 37.060970][ T4173] Call trace: [ 37.061475][ T4173] refcount_warn_saturate+0x154/0x1f8 [ 37.062285][ T4173] ax25_dev_device_down+0x528/0x67c [ 37.063165][ T4173] ax25_device_event+0x538/0x590 [ 37.063963][ T4173] raw_notifier_call_chain+0xd4/0x164 [ 37.064803][ T4173] __dev_notify_flags+0x250/0x46c [ 37.065578][ T4173] dev_change_flags+0xc8/0x154 [ 37.066295][ T4173] dev_ifsioc+0x504/0xef4 [ 37.066991][ T4173] dev_ioctl+0x4d0/0xc94 [ 37.067609][ T4173] sock_do_ioctl+0x18c/0x240 [ 37.068308][ T4173] sock_ioctl+0x5c8/0x87c [ 37.068974][ T4173] __arm64_sys_ioctl+0x14c/0x1c8 [ 37.069697][ T4173] invoke_syscall+0x98/0x2b8 [ 37.070477][ T4173] el0_svc_common+0x138/0x258 [ 37.071269][ T4173] do_el0_svc+0x58/0x14c [ 37.071972][ T4173] el0_svc+0x78/0x1e0 [ 37.072633][ T4173] el0t_64_sync_handler+0xcc/0xe4 [ 37.073441][ T4173] el0t_64_sync+0x1a0/0x1a4 [ 37.074199][ T4173] irq event stamp: 909 [ 37.074787][ T4173] hardirqs last enabled at (909): [] __local_bh_enable_ip+0x1f8/0x380 [ 37.076238][ T4173] hardirqs last disabled at (907): [] __local_bh_enable_ip+0x178/0x380 [ 37.077710][ T4173] softirqs last enabled at (908): [] ax25_device_event+0x200/0x590 [ 37.079107][ T4173] softirqs last disabled at (906): [] ax25_device_event+0x100/0x590 [ 37.080542][ T4173] ---[ end trace d4b8f833c252fd14 ]--- [ 37.090832][ T4176] Kernel panic - not syncing: Oops - BTI: Fatal exception [ 37.092010][ T4176] SMP: stopping secondary CPUs [ 37.092798][ T4176] Kernel Offset: disabled [ 37.093522][ T4176] CPU features: 0x8,000003c1,7d33ffd9 [ 37.094454][ T4176] Memory Limit: none [ 37.330622][ T4176] Rebooting in 86400 seconds..