last executing test programs: 3.273657643s ago: executing program 4 (id=768): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f00000008c0)={0x27, 0x0, 0x0, 0x1, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a03760760beeab91e8ff0055e5c0d48bd63ffdb93bd43a847a1597c8ef03da5be42200", 0x37}, 0x60) listen(r0, 0x0) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) 2.403227041s ago: executing program 4 (id=781): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}, 0x1, 0x0, 0x0, 0x4805}, 0x20000050) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000d80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x60}}, 0x0) 2.305308305s ago: executing program 4 (id=787): syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0x800090, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x6, 0x2d1, &(0x7f0000000740)="$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") socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="080086dd0001280004000003a60c6eec00be00442ffffe800000000088fc70738daf7b3200aaff020000000000000000000000000001042088be"], 0xfdef) 2.105969891s ago: executing program 4 (id=791): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f00000008c0)={0x27, 0x0, 0x0, 0x1, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a03760760beeab91e8ff0055e5c0d48bd63ffdb93bd43a847a1597c8ef03da5be42200", 0x37}, 0x60) listen(r0, 0x0) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) 1.247581039s ago: executing program 2 (id=813): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[], 0x0, 0x1a}, 0x28) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0) close(r6) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r7 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r8, 0x31}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)='\x00', 0x5dc}], 0x1}, 0x4) 1.143577283s ago: executing program 3 (id=817): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$read(0xb, r3, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x808) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mlockall(0x7) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xd) munlockall() bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB="0a000000d2cf00003d36000002"], 0x48) 1.056364605s ago: executing program 4 (id=818): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r0], 0x20}}, 0x0) 1.055767405s ago: executing program 2 (id=819): r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r0, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@FOU_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 1.028778926s ago: executing program 4 (id=820): shmctl$IPC_RMID(0x0, 0x0) r0 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) mknodat$loop(0xffffffffffffff9c, 0x0, 0x6000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4c0c8) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) shmctl$IPC_RMID(r0, 0x0) 706.965476ms ago: executing program 2 (id=822): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) 706.755077ms ago: executing program 2 (id=823): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000780)={'\x00', 0x400}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000001c0)={'ipvlan1\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000680)) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) 635.165689ms ago: executing program 1 (id=824): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xb, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002080000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000100"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2c00a800}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 622.995329ms ago: executing program 0 (id=825): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000005000000020000000100000f0300000040420f00010000000300008044942d000000000000000f0100000084002e2e2e"], &(0x7f00000014c0)=""/2, 0x45, 0x2, 0x1}, 0x28) 605.21908ms ago: executing program 0 (id=826): capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x8132, 0x800005, 0xfffffffe, 0x2e69a, 0x7, "001221d608f5000004b5450080c90a808000"}) 604.56851ms ago: executing program 2 (id=827): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000d40)=@newqdisc={0x45c, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r1, {0x6}, {0x0, 0xfff1}, {0x2, 0x8}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x80000001, 0x8001, 0x3, 0x0, 0x6, 0x4, 0x8, 0x9, 0x401, 0xfffffffc, 0x6, 0xfffffff7, 0x3, 0x3, 0x4, 0x0, 0x100, 0x8, 0xff, 0x80, 0x9, 0x8001, 0x80, 0x7, 0x101, 0xa46, 0xeb, 0x7ff, 0x7, 0x10001, 0x9, 0x6, 0x9c01, 0x7, 0x4, 0x0, 0xfaa, 0xc88, 0x6, 0x8d1, 0x1ff, 0x2, 0x1, 0x80000000, 0x6a, 0xffffffff, 0x7, 0x4, 0x3, 0x6, 0x0, 0xfd, 0x4, 0x9, 0x8, 0x3, 0xd, 0x14574, 0x0, 0x7f, 0x7, 0x1, 0x314, 0x7, 0xe, 0xfccf, 0x2, 0x45, 0x7, 0x4, 0x2, 0x5, 0x5, 0x3, 0x1, 0x4, 0x1, 0x40, 0xb, 0x3ff, 0xfffffff9, 0x6, 0x9, 0x8, 0x80, 0x59b, 0x1, 0x2, 0x6, 0xc, 0x0, 0xfffffffa, 0x4, 0xba65, 0x4, 0x0, 0x70e, 0x9, 0xd, 0x1, 0x0, 0x7fffffff, 0x7fff, 0xfff, 0x4, 0x4, 0xac1, 0x5, 0x4, 0x9, 0x5, 0x9, 0x7, 0x5371, 0x709d7f5b, 0xa09a, 0xfffffffe, 0x4b8a, 0x9, 0x7, 0x4, 0x3, 0x8a9, 0x6, 0x4, 0x10001, 0xc0000000, 0x4, 0x7, 0xf, 0x86, 0x7, 0x3, 0x9, 0x9, 0x663, 0xfffffffe, 0xe2, 0x0, 0x4, 0x4, 0x6, 0xfc, 0x1, 0x9, 0x8, 0x7, 0x8001, 0x0, 0x4, 0x5, 0xfd, 0x90, 0xffff, 0x5, 0xfffeffff, 0x7, 0x9, 0x8e0e, 0x1, 0xe, 0x8, 0x1, 0x2, 0x5, 0x0, 0xb, 0x6, 0x4, 0x9, 0x9, 0x0, 0xc, 0xaa8, 0xcb1a, 0x1000001, 0xffffffff, 0x9, 0x2, 0x81, 0x9, 0x280, 0x0, 0x8, 0x9, 0x8, 0xfffffff9, 0x800, 0x18e, 0x5, 0x5, 0x1, 0x32, 0x2006, 0x4f, 0x8, 0xfffffff9, 0x1, 0x0, 0x6, 0x1, 0x7, 0x8001, 0x7, 0x53f, 0x4, 0xd13b, 0xb, 0x6, 0xb, 0x100, 0x7, 0x5, 0x6, 0x1, 0x10001, 0x6, 0x4, 0x7, 0x82, 0xf0, 0x4, 0x3, 0x6, 0x4, 0xcd0, 0x400, 0x0, 0x0, 0x1000, 0x6, 0xc, 0x2, 0x1, 0x3, 0xc, 0x8, 0x80000001, 0x8, 0xa4eb, 0x7, 0x4, 0xffffffff, 0x1ff, 0x3ff, 0x3, 0x80, 0x3, 0x8001, 0x1, 0x8, 0xe1, 0xc, 0x5, 0x3, 0x95]}, @TCA_TBF_PARMS={0x28, 0x1, {{0xff, 0x2, 0x8, 0x0, 0x8c5, 0x7}, {0x3, 0x1, 0x4, 0x1ff, 0xe, 0x800}, 0x2, 0x8, 0x17f2}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) 570.195521ms ago: executing program 2 (id=828): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f00000008c0)={0x27, 0x0, 0x0, 0x1, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a03760760beeab91e8ff0055e5c0d48bd63ffdb93bd43a847a1597c8ef03da5be42200", 0x37}, 0x60) listen(r0, 0x0) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) 475.972574ms ago: executing program 0 (id=829): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4805}, 0x20000050) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000d80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x60}}, 0x0) 475.564204ms ago: executing program 1 (id=830): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[], 0x0, 0x1a}, 0x28) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0) close(r6) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r7 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r8, 0x31}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)='\x00', 0x5dc}], 0x1}, 0x4) 307.16274ms ago: executing program 0 (id=831): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) sendmsg$nl_generic(r0, 0x0, 0x0) 268.284761ms ago: executing program 3 (id=832): syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0x800090, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x6, 0x2d1, &(0x7f0000000740)="$eJzs3T9rJGUcB/DfbGb/qMVuYSWCA1pYHZdrbTbIHYipPLY4LTR4dyDZRUgg4h9cU4mdjaWvQBB8ITZ2loKtYGeEwMjMzmR3k3GzkWxE8/kUyZOZ5zvP73lmkkyTJ++9ONl/nMXT489+iV4vidawG3GSxCBaUfsilgy/DgDgv+wkz+P3fKbh9M9frcj2NlgXALA5l/z+r6Tlx0dFjx9urjYAYDMePnr7zZ3d3ftvZVkvHky+PBolEVF8np3feRofxDiexN3ox2lE+aLQjvJtoWg+yPN8mmaFQbwymR6NiuTk3R+r6+/8FlHmt6Mfg/LQ2dtGmX9j9/52NrOQnxZ1PFuNPyzy96Ifz5+Fl/L3GvIx6sSrLy/Ufyf68dP78WGM43FZxDz/+XaWvZ5/88en7xTlFflkejTqlv3m8q168OkN3yMAAAAAAAAAAAAAAAAAAAAAAP5/7lR753Sj3L+nOFTtv7N1WnzRjqw2WN6fZ5ZP6gvN9weKVp7n0zy+rffXuZtlWV51nOfTeCGtNhYEAAAAAAAAAAAAAAAAAACAW+7w40/298bjJwfX0qh3A0gj4s+HEf/0OsOFIy/F6s7dasy98bhVNZf7pItHYqvuk0SsLKOYxDUty2WNZy7UXDW++74xVczoMI2mU73LB203j3XFxkft2To29qmfrv29pHkNu2fF94obF+dvXCeaR2/HuSOdv6uwfhTXm06n8VT/ysvSea5sTFf0iWTV98Vrv87KXpjFUp9OuaqN8XbVWIifezbWep6jN4tf/FmR2K0DAAAAAAAAAAAAAAAAAAA2av7Xvw0nj1dGW3l3Y2UBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwI2a////dRrpcniNVCcODv+tuQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB7/BUAAP//vaZV2Q==") r0 = dup(0xffffffffffffffff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60001, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="080086dd0001280004000003a60c6eec00be00442ffffe800000000088fc70738daf7b3200aaff020000000000000000000000000001042088be"], 0xfdef) 263.296771ms ago: executing program 0 (id=833): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@FOU_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 222.094892ms ago: executing program 0 (id=834): syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x8, 0x73, 0x0, @local, @local, {[@fragment={0x2f, 0x0, 0x7, 0x1, 0x0, 0x9, 0x66}]}}}}}, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, &(0x7f00000001c0)={0x0, 0x2, [0xac4, 0xb4f, 0xd6f, 0x35e]}) r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x18, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}]}], {0x14}}, 0x40}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r5, &(0x7f0000000140)={'full', 0x20, 0x23}, 0xfffffdef) 206.546833ms ago: executing program 1 (id=835): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 163.565424ms ago: executing program 1 (id=836): unshare(0x400) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40002020, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_setup(0x4806, &(0x7f0000000240)={0x0, 0xec9b, 0x100, 0x2, 0x8375}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000300)="87fb74cf4d67adbbd062637f51", 0xd}], 0x1}, 0x0) socket(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/rcu_normal', 0x200080, 0x41) socket$packet(0x11, 0x2, 0x300) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x5, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r2, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 163.102664ms ago: executing program 3 (id=837): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001680)=@filter={'filter\x00', 0x42, 0x4, 0x1310, 0xffffffff, 0x11e0, 0x11e0, 0x11e0, 0xffffffff, 0xffffffff, 0x1278, 0x1278, 0x1278, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'gretap0\x00', 'nr0\x00', {}, {}, 0x0, 0x2}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@empty, @remote, 0xff, 0x0, 'veth0_to_batadv\x00', 'team_slave_1\x00'}, 0x287, 0x10e8, 0x90, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz1\x00', 0x0, {0x4000000000000000}}}, @common=@unspec=@limit={{0x48}, {0xfffffffe, 0x7, 0x0, 0x2, 0x0, 0x0, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x3, 0x4, 0x7, 0x7, 0x1, 0x4], 0x4, 0x1}, {0x4, [0x5, 0x3, 0x0, 0x5, 0x0, 0x4], 0x6, 0x2}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x1ff, 0x2, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1370) 91.658407ms ago: executing program 3 (id=838): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000780)={'\x00', 0x400}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000001c0)={'ipvlan1\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000680)) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) 91.149057ms ago: executing program 1 (id=839): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000d40)=@newqdisc={0x45c, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r1, {0x6}, {0x0, 0xfff1}, {0x2, 0x8}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x80000001, 0x8001, 0x3, 0x0, 0x6, 0x4, 0x8, 0x9, 0x401, 0xfffffffc, 0x6, 0xfffffff7, 0x3, 0x3, 0x4, 0x0, 0x100, 0x8, 0xff, 0x80, 0x9, 0x8001, 0x80, 0x7, 0x101, 0xa46, 0xeb, 0x7ff, 0x7, 0x10001, 0x9, 0x6, 0x9c01, 0x7, 0x4, 0x0, 0xfaa, 0xc88, 0x6, 0x8d1, 0x1ff, 0x2, 0x1, 0x80000000, 0x6a, 0xffffffff, 0x7, 0x4, 0x3, 0x6, 0x0, 0xfd, 0x4, 0x9, 0x8, 0x3, 0xd, 0x14574, 0x0, 0x7f, 0x7, 0x1, 0x314, 0x7, 0xe, 0xfccf, 0x2, 0x45, 0x7, 0x4, 0x2, 0x5, 0x5, 0x3, 0x1, 0x4, 0x1, 0x40, 0xb, 0x3ff, 0xfffffff9, 0x6, 0x9, 0x8, 0x80, 0x59b, 0x1, 0x2, 0x6, 0xc, 0x0, 0xfffffffa, 0x4, 0xba65, 0x4, 0x0, 0x70e, 0x9, 0xd, 0x1, 0x0, 0x7fffffff, 0x7fff, 0xfff, 0x4, 0x4, 0xac1, 0x5, 0x4, 0x9, 0x5, 0x9, 0x7, 0x5371, 0x709d7f5b, 0xa09a, 0xfffffffe, 0x4b8a, 0x9, 0x7, 0x4, 0x3, 0x8a9, 0x6, 0x4, 0x10001, 0xc0000000, 0x4, 0x7, 0xf, 0x86, 0x7, 0x3, 0x9, 0x9, 0x663, 0xfffffffe, 0xe2, 0x0, 0x4, 0x4, 0x6, 0xfc, 0x1, 0x9, 0x8, 0x7, 0x8001, 0x0, 0x4, 0x5, 0xfd, 0x90, 0xffff, 0x5, 0xfffeffff, 0x7, 0x9, 0x8e0e, 0x1, 0xe, 0x8, 0x1, 0x2, 0x5, 0x0, 0xb, 0x6, 0x4, 0x9, 0x9, 0x0, 0xc, 0xaa8, 0xcb1a, 0x1000001, 0xffffffff, 0x9, 0x2, 0x81, 0x9, 0x280, 0x0, 0x8, 0x9, 0x8, 0xfffffff9, 0x800, 0x18e, 0x5, 0x5, 0x1, 0x32, 0x2006, 0x4f, 0x8, 0xfffffff9, 0x1, 0x0, 0x6, 0x1, 0x7, 0x8001, 0x7, 0x53f, 0x4, 0xd13b, 0xb, 0x6, 0xb, 0x100, 0x7, 0x5, 0x6, 0x1, 0x10001, 0x6, 0x4, 0x7, 0x82, 0xf0, 0x4, 0x3, 0x6, 0x4, 0xcd0, 0x400, 0x0, 0x0, 0x1000, 0x6, 0xc, 0x2, 0x1, 0x3, 0xc, 0x8, 0x80000001, 0x8, 0xa4eb, 0x7, 0x4, 0xffffffff, 0x1ff, 0x3ff, 0x3, 0x80, 0x3, 0x8001, 0x1, 0x8, 0xe1, 0xc, 0x5, 0x3, 0x95]}, @TCA_TBF_PARMS={0x28, 0x1, {{0xff, 0x2, 0x8, 0x0, 0x8c5, 0x7}, {0x3, 0x1, 0x4, 0x1ff, 0xe, 0x800}, 0x2, 0x8, 0x17f2}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) 57.423408ms ago: executing program 1 (id=840): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000240), &(0x7f0000000380)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000014935d1071042c03e9ba01"], 0x0) 27.514199ms ago: executing program 3 (id=841): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xb, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002080000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000100"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2c00a800}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 3 (id=842): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4805}, 0x20000050) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000d80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x60}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.193' (ED25519) to the list of known hosts. [ 28.487504][ T4314] cgroup: Unknown subsys name 'net' [ 28.714510][ T4314] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 29.004159][ T4314] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 30.354054][ T4333] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 30.355581][ T4333] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 30.362997][ T4336] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 30.364425][ T4336] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 30.365778][ T4336] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 30.365824][ T4339] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 30.367305][ T4336] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 30.368806][ T4339] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 30.369667][ T4336] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 30.370753][ T4339] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 30.373207][ T4336] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 30.373942][ T4339] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 30.375647][ T4336] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 30.376092][ T4339] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 30.376884][ T4336] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 30.378708][ T4339] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 30.379061][ T4336] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 30.380324][ T4339] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 30.383206][ T4339] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 30.383286][ T4336] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 30.384647][ T4339] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 30.387265][ T4336] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 30.387922][ T4331] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 30.391092][ T4329] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 30.413977][ T4333] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 30.415671][ T4333] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 30.417108][ T4333] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 30.418724][ T4333] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 30.420146][ T4333] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 30.421447][ T4333] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 30.544304][ T4327] chnl_net:caif_netlink_parms(): no params data found [ 30.555053][ T4328] chnl_net:caif_netlink_parms(): no params data found [ 30.561436][ T4341] chnl_net:caif_netlink_parms(): no params data found [ 30.604637][ T4326] chnl_net:caif_netlink_parms(): no params data found [ 30.612832][ T4332] chnl_net:caif_netlink_parms(): no params data found [ 30.619995][ T4328] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.621325][ T4328] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.623093][ T4328] device bridge_slave_0 entered promiscuous mode [ 30.626633][ T4328] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.627824][ T4328] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.629396][ T4328] device bridge_slave_1 entered promiscuous mode [ 30.636954][ T4327] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.638226][ T4327] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.639871][ T4327] device bridge_slave_0 entered promiscuous mode [ 30.647129][ T4341] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.648375][ T4341] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.649968][ T4341] device bridge_slave_0 entered promiscuous mode [ 30.658048][ T4327] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.659301][ T4327] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.660767][ T4327] device bridge_slave_1 entered promiscuous mode [ 30.666978][ T4327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.670243][ T4341] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.671445][ T4341] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.673435][ T4341] device bridge_slave_1 entered promiscuous mode [ 30.681207][ T4332] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.682749][ T4332] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.684243][ T4332] device bridge_slave_0 entered promiscuous mode [ 30.686608][ T4327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.696451][ T4328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.698199][ T4332] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.699421][ T4332] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.700889][ T4332] device bridge_slave_1 entered promiscuous mode [ 30.709216][ T4341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.711633][ T4327] team0: Port device team_slave_0 added [ 30.715826][ T4328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.723587][ T4326] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.724842][ T4326] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.726380][ T4326] device bridge_slave_0 entered promiscuous mode [ 30.728984][ T4341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.731138][ T4327] team0: Port device team_slave_1 added [ 30.735875][ T4328] team0: Port device team_slave_0 added [ 30.738973][ T4326] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.740176][ T4326] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.741763][ T4326] device bridge_slave_1 entered promiscuous mode [ 30.748153][ T4328] team0: Port device team_slave_1 added [ 30.750331][ T4332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.762218][ T4326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.764616][ T4341] team0: Port device team_slave_0 added [ 30.766420][ T4341] team0: Port device team_slave_1 added [ 30.770187][ T4332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.774108][ T4327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.775258][ T4327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.779657][ T4327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.785554][ T4326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.789358][ T4341] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.790431][ T4341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.794746][ T4341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.798948][ T4328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.800099][ T4328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.804880][ T4328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.807083][ T4327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.808177][ T4327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.815049][ T4327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.823514][ T4332] team0: Port device team_slave_0 added [ 30.825250][ T4332] team0: Port device team_slave_1 added [ 30.826436][ T4341] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.827579][ T4341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.834547][ T4341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.838307][ T4328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.839472][ T4328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.843957][ T4328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.856224][ T4332] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.857326][ T4332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.861606][ T4332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.864332][ T4332] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.865482][ T4332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.869838][ T4332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.875684][ T4326] team0: Port device team_slave_0 added [ 30.877447][ T4326] team0: Port device team_slave_1 added [ 30.963958][ T4341] device hsr_slave_0 entered promiscuous mode [ 31.002104][ T4341] device hsr_slave_1 entered promiscuous mode [ 31.083044][ T4328] device hsr_slave_0 entered promiscuous mode [ 31.132144][ T4328] device hsr_slave_1 entered promiscuous mode [ 31.171957][ T4328] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.173271][ T4328] Cannot create hsr debugfs directory [ 31.178691][ T4326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.179893][ T4326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.184377][ T4326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.222971][ T4327] device hsr_slave_0 entered promiscuous mode [ 31.272089][ T4327] device hsr_slave_1 entered promiscuous mode [ 31.321957][ T4327] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.323267][ T4327] Cannot create hsr debugfs directory [ 31.382984][ T4332] device hsr_slave_0 entered promiscuous mode [ 31.432177][ T4332] device hsr_slave_1 entered promiscuous mode [ 31.481936][ T4332] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.483182][ T4332] Cannot create hsr debugfs directory [ 31.484468][ T4326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.485636][ T4326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.489481][ T4326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.563202][ T4326] device hsr_slave_0 entered promiscuous mode [ 31.602125][ T4326] device hsr_slave_1 entered promiscuous mode [ 31.642013][ T4326] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.643276][ T4326] Cannot create hsr debugfs directory [ 31.730674][ T4328] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.775633][ T4328] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.823018][ T4328] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.863393][ T4328] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.913692][ T4327] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.959902][ T4327] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 32.010028][ T4332] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 32.054254][ T4327] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 32.092960][ T4327] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 32.137071][ T4332] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.173677][ T4341] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 32.217303][ T4332] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.243372][ T4341] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 32.283620][ T4341] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 32.327770][ T4332] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.372979][ T4341] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 32.412147][ T4333] Bluetooth: hci2: command 0x0409 tx timeout [ 32.412150][ T4340] Bluetooth: hci0: command 0x0409 tx timeout [ 32.416049][ T4326] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 32.422164][ T4329] Bluetooth: hci1: command 0x0409 tx timeout [ 32.453133][ T4326] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 32.492288][ T4340] Bluetooth: hci3: command 0x0409 tx timeout [ 32.492324][ T4329] Bluetooth: hci4: command 0x0409 tx timeout [ 32.494698][ T4326] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 32.533172][ T4326] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 32.616861][ T4328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.637491][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.639822][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.645435][ T4328] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.650692][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.652942][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.654602][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.655811][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.657829][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.678539][ T4332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.681325][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.683378][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.684819][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.685961][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.690774][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.696977][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.698909][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.700663][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.705905][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.715619][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.717132][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.718516][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.720202][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.724141][ T4332] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.726965][ T4327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.734625][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.736173][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.737990][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.739584][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.741058][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.742243][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.744536][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.746227][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.747831][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.749004][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.760147][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.762279][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.764215][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.765752][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.767629][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.769176][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.771531][ T4341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.776413][ T4327] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.778042][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.783646][ T4326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.791285][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.793438][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.794900][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.796257][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.797850][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.799345][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.800478][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.803589][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.805228][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.806768][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.807975][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.809363][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.811015][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.819043][ T4326] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.825487][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.827065][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.828704][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.830393][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.835257][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.836938][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.838692][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.846986][ T4327] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.848777][ T4327] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.856599][ T4341] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.860913][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.863645][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.865282][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.866906][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.868127][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.870038][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.871836][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.876220][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.878042][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.879645][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.881235][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.884439][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.886002][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.887776][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.889348][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.890892][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.896551][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.898066][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.899301][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.905909][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.907718][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.909530][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.911027][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.915485][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.916916][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.918217][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.924530][ T4328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.929835][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.931613][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.934838][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.936499][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.938767][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.939998][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.941429][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.946204][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.956846][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.958507][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.960028][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.961268][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.963389][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.965654][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.967315][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.968990][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.991198][ T4341] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.994043][ T4341] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.996302][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.997846][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.999421][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.000956][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.003331][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.005096][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.006759][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.008383][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.009998][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.011582][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.013421][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.015030][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.016620][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.018299][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.019824][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.021402][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.024582][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.027414][ T4328] device veth0_vlan entered promiscuous mode [ 33.030999][ T4326] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.033977][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.039123][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.040708][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.042981][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.044486][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.045908][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.047498][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.049064][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.050348][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.054093][ T4328] device veth1_vlan entered promiscuous mode [ 33.061418][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.063703][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.065224][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.066491][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.069463][ T4327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.075957][ T4332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.098755][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.100478][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.105201][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.106909][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.110800][ T4328] device veth0_macvtap entered promiscuous mode [ 33.128111][ T4328] device veth1_macvtap entered promiscuous mode [ 33.134811][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.136464][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.137930][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.139695][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.146731][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.148488][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.155007][ T4327] device veth0_vlan entered promiscuous mode [ 33.174348][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.175703][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.180208][ T4327] device veth1_vlan entered promiscuous mode [ 33.185492][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.187393][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.188877][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.190489][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.204382][ T4341] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.212156][ T4326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.216790][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.218206][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.226911][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.229780][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.231743][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.234290][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.239358][ T4328] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.240654][ T4328] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.244613][ T4328] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.246172][ T4328] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.258135][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.259878][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.261418][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.266375][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.276277][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.277961][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.279553][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.281097][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.284073][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.285541][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.287019][ T4341] device veth0_vlan entered promiscuous mode [ 33.299603][ T4327] device veth0_macvtap entered promiscuous mode [ 33.301792][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.305145][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.306783][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.317784][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.319406][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.321009][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.325276][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.327133][ T4326] device veth0_vlan entered promiscuous mode [ 33.330568][ T4327] device veth1_macvtap entered promiscuous mode [ 33.344690][ T4341] device veth1_vlan entered promiscuous mode [ 33.351258][ T4326] device veth1_vlan entered promiscuous mode [ 33.357738][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.358972][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.362478][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.364585][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.366947][ T4327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.370606][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.372630][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.374053][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.375763][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.377254][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.378949][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.380493][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.382982][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.384544][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.386136][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.391375][ T4326] device veth0_macvtap entered promiscuous mode [ 33.397021][ T4332] device veth0_vlan entered promiscuous mode [ 33.401993][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.403984][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.405422][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.407060][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.415599][ T4341] device veth0_macvtap entered promiscuous mode [ 33.418280][ T4326] device veth1_macvtap entered promiscuous mode [ 33.420946][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.423348][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.425449][ T4327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.428748][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.430426][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.432211][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.433836][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.435372][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.436983][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.438539][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.447607][ T4327] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.449097][ T4327] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.450645][ T4327] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.453034][ T4327] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.456536][ T4341] device veth1_macvtap entered promiscuous mode [ 33.459415][ T4332] device veth1_vlan entered promiscuous mode [ 33.465705][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.467062][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.467783][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.470349][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.472569][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.474283][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.476851][ T4326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.478500][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.480076][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.481566][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.483874][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.485478][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.489345][ T4341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.491045][ T4341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.493739][ T4341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.495294][ T4341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.496790][ T4341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.498595][ T4341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.500935][ T4341] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.506641][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.508195][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.510159][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.514344][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.516186][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.517825][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.519489][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.522096][ T4326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.524604][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.526422][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.528545][ T4341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.530198][ T4341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.531798][ T4341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.534855][ T4341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.536495][ T4341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.538302][ T4341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.540583][ T4341] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.549616][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.551363][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.555323][ T4341] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.556760][ T4341] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.558217][ T4341] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.559657][ T4341] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.577521][ T4326] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.579090][ T4326] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.580693][ T4326] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.582874][ T4326] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.605849][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.607216][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.608604][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.626325][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.628077][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.642606][ T4332] device veth0_macvtap entered promiscuous mode [ 33.661051][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.662738][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.663669][ T4332] device veth1_macvtap entered promiscuous mode [ 33.664207][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.666369][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.676236][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.680238][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.684844][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.686508][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.688144][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.689872][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.691438][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.696953][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.699762][ T4332] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.710970][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.712663][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.714085][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.715546][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.717035][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.718521][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.735769][ T4414] syz.2.8 uses obsolete (PF_INET,SOCK_PACKET) [ 33.737341][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.738726][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.742738][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.744500][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.746094][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.747954][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.749673][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.751399][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.758085][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.759960][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.763057][ T4332] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.764361][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.765932][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.767546][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.771028][ T4332] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.775498][ T4332] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.776891][ T4332] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.778367][ T4332] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.849443][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.850885][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.879422][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.898142][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.899536][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.900804][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.952954][ T4416] netem: change failed [ 34.380465][ T152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.383141][ T152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.384682][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.430307][ T4383] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.431788][ T4383] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.435094][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.439045][ T4433] loop2: detected capacity change from 0 to 512 [ 34.457253][ T4433] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 34.466340][ T4433] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 34.478775][ T4433] EXT4-fs error (device loop2): ext4_orphan_get:1431: comm syz.2.11: bad orphan inode 131083 [ 34.481104][ T4433] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 34.492444][ T4333] Bluetooth: hci1: command 0x041b tx timeout [ 34.493924][ T4329] Bluetooth: hci0: command 0x041b tx timeout [ 34.498684][ T4328] EXT4-fs (loop2): unmounting filesystem. [ 34.502287][ T4340] Bluetooth: hci2: command 0x041b tx timeout [ 34.520140][ T4439] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15'. [ 34.572509][ T4340] Bluetooth: hci4: command 0x041b tx timeout [ 34.573195][ T4333] Bluetooth: hci3: command 0x041b tx timeout [ 34.687892][ T4444] syz.4.5 sent an empty control message without MSG_MORE. [ 35.429879][ T4483] loop4: detected capacity change from 0 to 512 [ 35.434447][ T4483] ext3: Unknown parameter 'nouser_xattr' [ 35.439179][ T4483] tmpfs: Bad value for 'mpol' [ 35.798046][ T4500] ISOFS: Unable to identify CD-ROM format. [ 35.799348][ T4502] loop0: detected capacity change from 0 to 512 [ 35.832727][ T4502] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 36.414513][ T4525] loop1: detected capacity change from 0 to 1024 [ 36.422660][ T4525] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000c01c, mo2=0002] [ 36.424284][ T4525] System zones: 0-1, 3-36 [ 36.426051][ T4525] EXT4-fs error (device loop1): ext4_orphan_get:1431: comm syz.1.48: bad orphan inode 134217728 [ 36.428219][ T4525] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 36.445372][ T4327] EXT4-fs (loop1): unmounting filesystem. [ 36.572001][ T4340] Bluetooth: hci1: command 0x040f tx timeout [ 36.572132][ T4329] Bluetooth: hci2: command 0x040f tx timeout [ 36.573089][ T4340] Bluetooth: hci0: command 0x040f tx timeout [ 37.079035][ T4329] Bluetooth: hci4: command 0x040f tx timeout [ 37.079044][ T4340] Bluetooth: hci3: command 0x040f tx timeout [ 37.092834][ T4326] EXT4-fs (loop0): unmounting filesystem. [ 37.336392][ T4558] ISOFS: Unable to identify CD-ROM format. [ 37.836713][ T4587] device syzkaller0 entered promiscuous mode [ 38.411188][ T4612] Zero length message leads to an empty skb [ 38.652842][ T4333] Bluetooth: hci2: command 0x0419 tx timeout [ 38.652865][ T4329] Bluetooth: hci0: command 0x0419 tx timeout [ 38.662725][ T4340] Bluetooth: hci1: command 0x0419 tx timeout [ 39.132174][ T4329] Bluetooth: hci4: command 0x0419 tx timeout [ 39.133191][ T4329] Bluetooth: hci3: command 0x0419 tx timeout [ 48.712268][ T4607] netlink: 'syz.1.82': attribute type 1 has an invalid length. [ 49.187620][ T4645] dccp_invalid_packet: P.Data Offset(4) too small [ 49.695277][ T4657] device syzkaller0 entered promiscuous mode [ 60.613695][ T4663] netlink: 'syz.2.100': attribute type 1 has an invalid length. [ 60.696967][ T4685] loop4: detected capacity change from 0 to 512 [ 60.759004][ T4685] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 61.540450][ T4332] EXT4-fs (loop4): unmounting filesystem. [ 61.568074][ T4717] netlink: 'syz.1.118': attribute type 1 has an invalid length. [ 61.659006][ T4715] device syzkaller0 entered promiscuous mode [ 62.399477][ T4738] netlink: 60 bytes leftover after parsing attributes in process `syz.1.125'. [ 62.509786][ T4743] netlink: 28 bytes leftover after parsing attributes in process `syz.1.125'. [ 64.493220][ T2063] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.494288][ T2063] ieee802154 phy1 wpan1: encryption failed: -22 [ 69.614032][ T14] cfg80211: failed to load regulatory.db [ 73.474742][ T4738] netlink: 60 bytes leftover after parsing attributes in process `syz.1.125'. [ 73.854799][ T4806] device syzkaller0 entered promiscuous mode [ 74.831811][ T4832] device syzkaller0 entered promiscuous mode [ 75.918273][ T4866] loop2: detected capacity change from 0 to 512 [ 75.927027][ T4866] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 75.960550][ T4866] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 75.966930][ T4866] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28 [ 75.969190][ T4866] EXT4-fs (loop2): This should not happen!! Data will be lost [ 75.969190][ T4866] [ 75.970911][ T4866] EXT4-fs (loop2): Total free blocks count 0 [ 75.971849][ T4866] EXT4-fs (loop2): Free/Dirty block details [ 75.973636][ T4866] EXT4-fs (loop2): free_blocks=65280 [ 75.974608][ T4866] EXT4-fs (loop2): dirty_blocks=33 [ 75.975611][ T4866] EXT4-fs (loop2): Block reservation details [ 75.976584][ T4866] EXT4-fs (loop2): i_reserved_data_blocks=33 [ 75.989922][ T4328] EXT4-fs (loop2): unmounting filesystem. [ 76.119119][ T4882] loop4: detected capacity change from 0 to 512 [ 76.134469][ T4882] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 76.152376][ T4882] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.176: invalid indirect mapped block 9 (level 0) [ 76.160807][ T4882] EXT4-fs (loop4): 1 truncate cleaned up [ 76.162008][ T4882] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 76.177569][ T4332] EXT4-fs (loop4): unmounting filesystem. [ 76.483164][ T4889] mmap: syz.1.175 (4889) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 86.206253][ T4878] netlink: 'syz.2.172': attribute type 1 has an invalid length. [ 86.214610][ T4888] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 86.215971][ T4888] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 86.250504][ T4906] loop2: detected capacity change from 0 to 512 [ 86.252676][ T4888] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 86.322359][ T4906] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 86.324094][ T4906] EXT4-fs (loop2): orphan cleanup on readonly fs [ 86.325386][ T4906] EXT4-fs error (device loop2): ext4_quota_enable:7049: inode #4: comm syz.2.182: iget: immutable or append flags not allowed on symlinks [ 86.336987][ T4906] EXT4-fs error (device loop2): ext4_quota_enable:7052: comm syz.2.182: Bad quota inode: 4, type: 1 [ 86.362275][ T4906] EXT4-fs warning (device loop2): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 86.366829][ T4914] loop4: detected capacity change from 0 to 256 [ 86.370567][ T4906] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 86.371715][ T4906] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 86.394497][ T4914] FAT-fs (loop4): bogus logical sector size 11520 [ 86.395823][ T4914] FAT-fs (loop4): Can't find a valid FAT filesystem [ 86.398284][ T4906] netlink: 24 bytes leftover after parsing attributes in process `syz.2.182'. [ 86.439021][ T4328] EXT4-fs (loop2): unmounting filesystem. [ 86.755127][ T4955] RDS: rds_bind could not find a transport for ::4002:20:0:0, load rds_tcp or rds_rdma? [ 86.926568][ T4968] loop2: detected capacity change from 0 to 512 [ 86.931391][ T4966] loop4: detected capacity change from 0 to 2048 [ 86.933074][ T4968] EXT4-fs: Ignoring removed bh option [ 86.934061][ T4968] EXT4-fs: inline encryption not supported [ 86.935898][ T4968] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 86.965543][ T4968] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 86.971822][ T4968] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.207: bg 0: block 248: padding at end of block bitmap is not set [ 86.973917][ T4966] loop4: p1 p4 [ 86.973917][ T4966] p1: [ 86.979630][ T4966] loop4: p4 size 589824 extends beyond EOD, truncated [ 86.983508][ T4968] Quota error (device loop2): write_blk: dquota write failed [ 86.990748][ T4968] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 86.998854][ T4968] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.207: Failed to acquire dquot type 1 [ 87.007135][ T4966] netlink: 'syz.4.208': attribute type 3 has an invalid length. [ 87.011751][ T4966] netlink: 8 bytes leftover after parsing attributes in process `syz.4.208'. [ 87.016468][ T4968] EXT4-fs (loop2): 1 truncate cleaned up [ 87.017461][ T4968] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 87.055668][ T4328] EXT4-fs (loop2): unmounting filesystem. [ 87.057505][ T4396] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-5 [ 87.059115][ T4396] EXT4-fs error (device loop2): ext4_release_dquot:6877: comm kworker/u4:6: Failed to release dquot type 1 [ 87.158722][ T4904] udevd[4904]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 87.165492][ T4900] udevd[4900]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 87.173661][ T4945] udevd[4945]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 87.177234][ T4904] udevd[4904]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 87.340948][ T4987] netlink: 'syz.3.215': attribute type 1 has an invalid length. [ 87.350816][ T4987] 8021q: adding VLAN 0 to HW filter on device bond1 [ 87.439225][ T4996] device syzkaller0 entered promiscuous mode [ 87.446671][ T4996] tipc: Started in network mode [ 87.447445][ T4996] tipc: Node identity 8e847363e5a6, cluster identity 4711 [ 87.448711][ T4996] tipc: Enabled bearer , priority 0 [ 87.469139][ T4995] tipc: Resetting bearer [ 87.593057][ T4995] tipc: Disabling bearer [ 88.025452][ T5016] netlink: 'syz.1.228': attribute type 1 has an invalid length. [ 88.081003][ T5016] 8021q: adding VLAN 0 to HW filter on device bond1 [ 88.561384][ T5034] loop1: detected capacity change from 0 to 512 [ 88.590834][ T5034] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.234: iget: bad i_size value: 38620345925642 [ 88.594210][ T5034] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.234: couldn't read orphan inode 15 (err -117) [ 88.599395][ T5034] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 88.684467][ T4327] EXT4-fs (loop1): unmounting filesystem. [ 89.326789][ T5067] netlink: 24 bytes leftover after parsing attributes in process `syz.2.246'. [ 89.635306][ T5086] device syzkaller0 entered promiscuous mode [ 90.039038][ T5113] netlink: 'syz.4.267': attribute type 10 has an invalid length. [ 90.153393][ T5113] team0 (unregistering): Port device team_slave_0 removed [ 90.161155][ T5113] team0 (unregistering): Port device team_slave_1 removed [ 90.528004][ T5121] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 90.530442][ T5121] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 90.632051][ T5121] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 90.911093][ T5133] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 91.627040][ T5159] loop4: detected capacity change from 0 to 512 [ 91.632524][ T5159] ======================================================= [ 91.632524][ T5159] WARNING: The mand mount option has been deprecated and [ 91.632524][ T5159] and is ignored by this kernel. Remove the mand [ 91.632524][ T5159] option from the mount to silence this warning. [ 91.632524][ T5159] ======================================================= [ 91.812677][ T5177] netlink: 20 bytes leftover after parsing attributes in process `syz.0.293'. [ 91.820166][ T5177] netlink: 20 bytes leftover after parsing attributes in process `syz.0.293'. [ 93.189371][ T5233] loop4: detected capacity change from 0 to 512 [ 93.228365][ T5233] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 93.230153][ T5233] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 93.278402][ T5233] EXT4-fs (loop4): 1 truncate cleaned up [ 93.288485][ T5233] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 93.368515][ T5233] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 93.395860][ T4332] EXT4-fs (loop4): unmounting filesystem. [ 93.976263][ T5269] netem: change failed [ 94.466254][ T5292] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 94.659983][ T27] audit: type=1326 audit(94.640:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5298 comm="syz.4.341" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac577aa8 code=0x7ffc0000 [ 94.664401][ T27] audit: type=1326 audit(94.640:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5298 comm="syz.4.341" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac577aa8 code=0x7ffc0000 [ 94.670099][ T27] audit: type=1326 audit(94.650:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5298 comm="syz.4.341" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac577aa8 code=0x7ffc0000 [ 94.676209][ T27] audit: type=1326 audit(94.650:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5298 comm="syz.4.341" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac577aa8 code=0x7ffc0000 [ 94.681122][ T27] audit: type=1326 audit(94.650:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5298 comm="syz.4.341" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffac577aa8 code=0x7ffc0000 [ 94.687936][ T27] audit: type=1326 audit(94.650:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5298 comm="syz.4.341" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac577aa8 code=0x7ffc0000 [ 94.692703][ T27] audit: type=1326 audit(94.650:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5298 comm="syz.4.341" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac577aa8 code=0x7ffc0000 [ 94.696554][ T27] audit: type=1326 audit(94.660:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5298 comm="syz.4.341" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac577aa8 code=0x7ffc0000 [ 94.716154][ T27] audit: type=1326 audit(94.660:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5298 comm="syz.4.341" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac577aa8 code=0x7ffc0000 [ 94.721640][ T27] audit: type=1326 audit(94.660:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5298 comm="syz.4.341" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=201 compat=0 ip=0xffffac577aa8 code=0x7ffc0000 [ 94.860890][ T5307] device gtp0 entered promiscuous mode [ 95.546112][ T5319] netlink: 6 bytes leftover after parsing attributes in process `syz.1.349'. [ 95.897508][ T5330] device syzkaller0 entered promiscuous mode [ 95.923105][ T5334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.925806][ T5334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.562992][ T5345] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 96.567303][ T5345] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 96.576614][ T5253] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 96.684387][ T5355] loop0: detected capacity change from 0 to 512 [ 96.703902][ T5358] loop1: detected capacity change from 0 to 256 [ 96.740554][ T5355] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 96.770578][ T4326] EXT4-fs (loop0): unmounting filesystem. [ 97.318383][ T5367] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 97.318562][ T5367] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 97.392152][ T5367] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 97.510020][ T5379] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 98.305443][ T5416] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 98.497536][ T5428] netlink: 16 bytes leftover after parsing attributes in process `syz.4.395'. [ 98.524282][ T5430] netlink: 'syz.0.394': attribute type 12 has an invalid length. [ 98.525780][ T5430] netlink: 'syz.0.394': attribute type 29 has an invalid length. [ 98.537193][ T5430] netlink: 'syz.0.394': attribute type 2 has an invalid length. [ 99.214387][ T5448] device syzkaller0 entered promiscuous mode [ 99.230790][ T5463] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 110.118860][ T5478] netlink: 'syz.2.414': attribute type 13 has an invalid length. [ 110.120189][ T5478] netlink: 'syz.2.414': attribute type 27 has an invalid length. [ 110.165313][ T5504] loop4: detected capacity change from 0 to 7 [ 110.173386][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 110.175387][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 110.176980][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 110.222454][ T5510] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 110.387189][ T5527] loop2: detected capacity change from 0 to 1024 [ 110.392878][ T5527] EXT4-fs: Ignoring removed bh option [ 110.691536][ T5527] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 110.765470][ T5527] EXT4-fs (loop2): shut down requested (2) [ 110.784220][ T4328] EXT4-fs (loop2): unmounting filesystem. [ 110.900614][ T5556] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 111.206200][ T5581] netlink: 140 bytes leftover after parsing attributes in process `syz.1.449'. [ 111.570830][ T5593] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 112.284189][ T5630] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 112.477420][ T5658] netlink: 140 bytes leftover after parsing attributes in process `syz.3.476'. [ 112.480190][ T5660] device syzkaller0 entered promiscuous mode [ 112.634004][ T5671] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 112.908339][ T5697] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 113.575154][ T5741] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 113.579254][ T5741] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 114.928992][ T5803] device syzkaller0 entered promiscuous mode [ 114.954832][ T5807] netlink: 32 bytes leftover after parsing attributes in process `syz.4.539'. [ 115.866303][ T5838] netlink: 32 bytes leftover after parsing attributes in process `syz.3.551'. [ 116.271117][ T5856] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 116.599836][ T5880] netlink: 32 bytes leftover after parsing attributes in process `syz.2.564'. [ 117.325014][ T5913] loop3: detected capacity change from 0 to 1024 [ 117.395244][ T5913] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 117.456700][ T4341] EXT4-fs (loop3): unmounting filesystem. [ 117.482010][ T5919] netlink: 12 bytes leftover after parsing attributes in process `syz.3.577'. [ 118.094766][ T5938] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 118.318908][ T5956] netlink: 12 bytes leftover after parsing attributes in process `syz.1.590'. [ 119.124176][ T5996] netlink: 12 bytes leftover after parsing attributes in process `syz.3.604'. [ 119.675678][ T6017] tipc: Started in network mode [ 119.687508][ T6017] tipc: Node identity 9a07fa33999, cluster identity 4711 [ 119.688930][ T6017] tipc: Enabled bearer , priority 0 [ 119.695856][ T6017] device syzkaller0 entered promiscuous mode [ 119.779635][ T6017] tipc: Resetting bearer [ 119.790087][ T6013] tipc: Resetting bearer [ 119.857136][ T6013] tipc: Disabling bearer [ 119.980484][ T6041] loop3: detected capacity change from 0 to 1024 [ 119.982391][ T6041] EXT4-fs: Ignoring removed bh option [ 120.018682][ T6041] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 120.026662][ T6041] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 120.057027][ T4341] EXT4-fs (loop3): unmounting filesystem. [ 120.323800][ T6056] hub 8-0:1.0: USB hub found [ 120.325735][ T6056] hub 8-0:1.0: 8 ports detected [ 120.391267][ T6056] netlink: 32 bytes leftover after parsing attributes in process `syz.1.625'. [ 121.447816][ T6100] netlink: 12 bytes leftover after parsing attributes in process `syz.0.641'. [ 121.692744][ T6106] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 121.697061][ T6106] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 121.707623][ T6106] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 121.822242][ T6106] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 122.081975][ T6114] tipc: Started in network mode [ 122.082898][ T6114] tipc: Node identity 2007ff, cluster identity 4711 [ 122.084148][ T6114] tipc: Node number set to 2099199 [ 123.383385][ T6153] netlink: 12 bytes leftover after parsing attributes in process `syz.3.659'. [ 123.658246][ T6163] loop2: detected capacity change from 0 to 128 [ 125.319780][ T6216] netlink: 12 bytes leftover after parsing attributes in process `syz.3.683'. [ 125.952235][ T2063] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.954543][ T2063] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.126463][ T6246] xt_CT: You must specify a L4 protocol and not use inversions on it [ 127.347511][ T6321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.350514][ T6321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.632438][ T6325] tipc: Enabling of bearer rejected, failed to enable media [ 127.769379][ T6335] capability: warning: `syz.0.734' uses deprecated v2 capabilities in a way that may be insecure [ 127.790536][ T6337] loop0: detected capacity change from 0 to 256 [ 128.304135][ T6358] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 128.646283][ T6368] loop1: detected capacity change from 0 to 256 [ 129.065883][ T6393] netlink: 8 bytes leftover after parsing attributes in process `syz.0.758'. [ 129.186310][ T6401] loop0: detected capacity change from 0 to 256 [ 129.677174][ T6424] Illegal XDP return value 4294967274 on prog (id 27) dev syz_tun, expect packet loss! [ 130.000541][ T6436] loop0: detected capacity change from 0 to 256 [ 130.409746][ T6462] loop4: detected capacity change from 0 to 256 [ 131.032868][ T6494] loop0: detected capacity change from 0 to 256 [ 131.353024][ T6509] loop2: detected capacity change from 0 to 764 [ 131.425048][ T6514] netlink: 12 bytes leftover after parsing attributes in process `syz.3.812'. [ 131.523066][ T6524] loop0: detected capacity change from 0 to 256 [ 132.260840][ T6556] netlink: 12 bytes leftover after parsing attributes in process `syz.0.829'. [ 132.425109][ T6561] loop3: detected capacity change from 0 to 256 [ 132.673523][ T6577] netlink: 'syz.1.840': attribute type 13 has an invalid length. [ 132.691083][ T6577] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 132.699964][ T6577] ------------[ cut here ]------------ [ 132.701022][ T6577] WARNING: CPU: 1 PID: 6577 at kernel/softirq.c:401 __local_bh_enable_ip+0x25c/0x37c [ 132.702651][ T6577] Modules linked in: [ 132.703314][ T6577] CPU: 1 PID: 6577 Comm: syz.1.840 Not tainted syzkaller #0 [ 132.704449][ T6582] netlink: 12 bytes leftover after parsing attributes in process `syz.3.842'. [ 132.704609][ T6577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 132.707816][ T6577] pstate: 224000c5 (nzCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 132.709042][ T6577] pc : __local_bh_enable_ip+0x25c/0x37c [ 132.709929][ T6577] lr : _raw_spin_unlock_bh+0x48/0x58 [ 132.710799][ T6577] sp : ffff800020da6820 [ 132.711550][ T6577] x29: ffff800020da6830 x28: dfff800000000000 x27: dfff800000000000 [ 132.712904][ T6577] x26: fffffc0003d64200 x25: 1fffe0001a33f701 x24: 0000000000000000 [ 132.714139][ T6577] x23: dfff800000000000 x22: 1fffe0001a33f701 x21: ffff80000feccd78 [ 132.715514][ T6577] x20: 0000000000000201 x19: ffff0000d19fb808 x18: ffff800011babf60 [ 132.716822][ T6577] x17: ffff800018381000 x16: ffff8000082efb0c x15: ffff800017e62000 [ 132.718194][ T6577] x14: 0000000000000001 x13: 1fffe0001b692eb9 x12: 0000000000000000 [ 132.719584][ T6577] x11: 0000000000000000 x10: ffff60001b692eba x9 : 0000000000000000 [ 132.720891][ T6577] x8 : 0000000100000203 x7 : 0000000000000000 x6 : 0000000000000000 [ 132.722158][ T6577] x5 : ffff8000185d2cf8 x4 : 0000000000000008 x3 : ffff8000082efc20 [ 132.723501][ T6577] x2 : 0000000000000001 x1 : 0000000000000201 x0 : ffff80000feccd78 [ 132.724743][ T6577] Call trace: [ 132.725303][ T6577] __local_bh_enable_ip+0x25c/0x37c [ 132.726169][ T6577] _raw_spin_unlock_bh+0x48/0x58 [ 132.726953][ T6577] page_pool_put_defragged_page+0x5d4/0x9f8 [ 132.727958][ T6577] __xdp_return+0x3ac/0x518 [ 132.728739][ T6577] xdp_return_frame+0x90/0x264 [ 132.729567][ T6577] tun_device_event+0x8e4/0xe80 [ 132.730407][ T6577] raw_notifier_call_chain+0xd4/0x164 [ 132.731338][ T6577] dev_change_tx_queue_len+0x174/0x2d4 [ 132.732266][ T6577] do_setlink+0xd18/0x3434 [ 132.733060][ T6577] rtnl_newlink+0xd04/0x1a54 [ 132.733823][ T6577] rtnetlink_rcv_msg+0x698/0xcdc [ 132.734625][ T6577] netlink_rcv_skb+0x218/0x3e8 [ 132.735459][ T6577] rtnetlink_rcv+0x28/0x38 [ 132.736214][ T6577] netlink_unicast+0x60c/0x814 [ 132.737038][ T6577] netlink_sendmsg+0x6f4/0x9c0 [ 132.737825][ T6577] ____sys_sendmsg+0x5c8/0x938 [ 132.738673][ T6577] __sys_sendmsg+0x288/0x374 [ 132.739537][ T6577] __arm64_sys_sendmsg+0x80/0x94 [ 132.740415][ T6577] invoke_syscall+0x98/0x290 [ 132.741268][ T6577] el0_svc_common+0x138/0x258 [ 132.742070][ T6577] do_el0_svc+0x58/0x130 [ 132.742848][ T6577] el0_svc+0x58/0x128 [ 132.743552][ T6577] el0t_64_sync_handler+0x84/0xf0 [ 132.744429][ T6577] el0t_64_sync+0x18c/0x190 [ 132.745163][ T6577] irq event stamp: 5493 [ 132.745876][ T6577] hardirqs last enabled at (5491): [] _raw_spin_unlock_irqrestore+0x48/0xac [ 132.747660][ T6577] hardirqs last disabled at (5492): [] _raw_spin_lock_irqsave+0xa4/0xb0 [ 132.749288][ T6577] softirqs last enabled at (5452): [] inet6_fill_ifla6_attrs+0xc8c/0x1ba8 [ 132.751032][ T6577] softirqs last disabled at (5493): [] page_pool_put_defragged_page+0x2dc/0x9f8 [ 132.752839][ T6577] ---[ end trace 0000000000000000 ]--- [ 132.753767][ T6577] [ 132.754175][ T6577] ================================ [ 132.755028][ T6577] WARNING: inconsistent lock state [ 132.755893][ T6577] syzkaller #0 Tainted: G W [ 132.756860][ T6577] -------------------------------- [ 132.757678][ T6577] inconsistent {IN-SOFTIRQ-W} -> {SOFTIRQ-ON-W} usage. [ 132.758820][ T6577] syz.1.840/6577 [HC0[0]:SC0[0]:HE0:SE1] takes: [ 132.759857][ T6577] ffff0000e0d668a0 (&r->producer_lock#2){+.?.}-{2:2}, at: tun_device_event+0x6c0/0xe80 [ 132.761452][ T6577] {IN-SOFTIRQ-W} state was registered at: [ 132.762461][ T6577] lock_acquire+0x20c/0x63c [ 132.763260][ T6577] _raw_spin_lock+0x54/0x6c [ 132.764006][ T6577] tun_net_xmit+0x9d0/0x1320 [ 132.764782][ T6577] dev_hard_start_xmit+0x234/0x8cc [ 132.765660][ T6577] sch_direct_xmit+0x210/0x474 [ 132.766486][ T6577] __dev_queue_xmit+0x13bc/0x3118 [ 132.767286][ T6577] ip6_finish_output2+0xd28/0x1840 [ 132.768180][ T6577] ip6_finish_output+0x594/0x92c [ 132.769027][ T6577] ip6_output+0x274/0x500 [ 132.769731][ T6577] ndisc_send_skb+0xc30/0x164c [ 132.770596][ T6577] ndisc_solicit+0x29c/0x52c [ 132.771381][ T6577] neigh_probe+0xc4/0x124 [ 132.772132][ T6577] neigh_timer_handler+0x7c0/0xe0c [ 132.772969][ T6577] call_timer_fn+0x1b8/0x95c [ 132.773818][ T6577] __run_timers+0x478/0x6f0 [ 132.774580][ T6577] run_timer_softirq+0x7c/0x114 [ 132.775390][ T6577] handle_softirqs+0x318/0xc60 [ 132.776200][ T6577] __do_softirq+0x14/0x20 [ 132.776935][ T6577] ____do_softirq+0x14/0x20 [ 132.777702][ T6577] call_on_irq_stack+0x30/0x48 [ 132.778519][ T6577] do_softirq_own_stack+0x20/0x2c [ 132.779367][ T6577] __irq_exit_rcu+0x23c/0x438 [ 132.780177][ T6577] irq_exit_rcu+0x14/0x84 [ 132.780897][ T6577] el1_interrupt+0x38/0x54 [ 132.781646][ T6577] el1h_64_irq_handler+0x18/0x24 [ 132.782533][ T6577] el1h_64_irq+0x64/0x68 [ 132.783246][ T6577] _raw_spin_unlock_irq+0x44/0x90 [ 132.784096][ T6577] shmem_add_to_page_cache+0x748/0xf34 [ 132.785027][ T6577] shmem_get_folio_gfp+0xe64/0x2030 [ 132.785908][ T6577] shmem_fault+0x170/0x55c [ 132.786666][ T6577] __do_fault+0x11c/0x3d8 [ 132.787413][ T6577] handle_mm_fault+0x1cac/0x2fb0 [ 132.788273][ T6577] __get_user_pages+0x33c/0x754 [ 132.789143][ T6577] populate_vma_page_range+0x1f4/0x298 [ 132.790065][ T6577] __mm_populate+0x210/0x334 [ 132.790888][ T6577] vm_mmap_pgoff+0x1d8/0x294 [ 132.791697][ T6577] ksys_mmap_pgoff+0xd0/0x5a0 [ 132.792483][ T6577] __arm64_sys_mmap+0xf8/0x110 [ 132.793316][ T6577] invoke_syscall+0x98/0x290 [ 132.794109][ T6577] el0_svc_common+0x138/0x258 [ 132.794897][ T6577] do_el0_svc+0x58/0x130 [ 132.795620][ T6577] el0_svc+0x58/0x128 [ 132.796291][ T6577] el0t_64_sync_handler+0x84/0xf0 [ 132.797106][ T6577] el0t_64_sync+0x18c/0x190 [ 132.797858][ T6577] irq event stamp: 5494 [ 132.798541][ T6577] hardirqs last enabled at (5491): [] _raw_spin_unlock_irqrestore+0x48/0xac [ 132.800283][ T6577] hardirqs last disabled at (5492): [] _raw_spin_lock_irqsave+0xa4/0xb0 [ 132.801836][ T6577] softirqs last enabled at (5494): [] page_pool_put_defragged_page+0x5d4/0x9f8 [ 132.803583][ T6577] softirqs last disabled at (5493): [] page_pool_put_defragged_page+0x2dc/0x9f8 [ 132.805259][ T6577] [ 132.805259][ T6577] other info that might help us debug this: [ 132.806592][ T6577] Possible unsafe locking scenario: [ 132.806592][ T6577] [ 132.807784][ T6577] CPU0 [ 132.808274][ T6577] ---- [ 132.808797][ T6577] lock(&r->producer_lock#2); [ 132.809518][ T6577] [ 132.810038][ T6577] lock(&r->producer_lock#2); [ 132.810836][ T6577] [ 132.810836][ T6577] *** DEADLOCK *** [ 132.810836][ T6577] [ 132.812180][ T6577] 3 locks held by syz.1.840/6577: [ 132.813115][ T6577] #0: ffff8000178b6008 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x650/0xcdc [ 132.814709][ T6577] #1: ffff0000e0d66920 (&r->consumer_lock){+.+.}-{2:2}, at: tun_device_event+0x69c/0xe80 [ 132.816329][ T6577] #2: ffff0000e0d668a0 (&r->producer_lock#2){+.?.}-{2:2}, at: tun_device_event+0x6c0/0xe80 [ 132.818064][ T6577] [ 132.818064][ T6577] stack backtrace: [ 132.819051][ T6577] CPU: 1 PID: 6577 Comm: syz.1.840 Tainted: G W syzkaller #0 [ 132.820578][ T6577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 132.822241][ T6577] Call trace: [ 132.822863][ T6577] dump_backtrace+0x1c0/0x1ec [ 132.823724][ T6577] show_stack+0x2c/0x3c [ 132.824488][ T6577] __dump_stack+0x30/0x40 [ 132.825237][ T6577] dump_stack_lvl+0xf4/0x15c [ 132.825965][ T6577] dump_stack+0x1c/0x5c [ 132.826638][ T6577] print_usage_bug+0x4c0/0x6d8 [ 132.827487][ T6577] mark_lock_irq+0x850/0xab0 [ 132.828273][ T6577] mark_lock+0x224/0x320 [ 132.829023][ T6577] lockdep_hardirqs_on_prepare+0x38c/0x7a8 [ 132.829921][ T6577] trace_hardirqs_on+0x164/0x23c [ 132.830649][ T6577] __local_bh_enable_ip+0x1f8/0x37c [ 132.831515][ T6577] _raw_spin_unlock_bh+0x48/0x58 [ 132.832385][ T6577] page_pool_put_defragged_page+0x5d4/0x9f8 [ 132.833298][ T6577] __xdp_return+0x3ac/0x518 [ 132.834047][ T6577] xdp_return_frame+0x90/0x264 [ 132.834877][ T6577] tun_device_event+0x8e4/0xe80 [ 132.835654][ T6577] raw_notifier_call_chain+0xd4/0x164 [ 132.836524][ T6577] dev_change_tx_queue_len+0x174/0x2d4 [ 132.837428][ T6577] do_setlink+0xd18/0x3434 [ 132.838076][ T6577] rtnl_newlink+0xd04/0x1a54 [ 132.838743][ T6577] rtnetlink_rcv_msg+0x698/0xcdc [ 132.839496][ T6577] netlink_rcv_skb+0x218/0x3e8 [ 132.840227][ T6577] rtnetlink_rcv+0x28/0x38 [ 132.840914][ T6577] netlink_unicast+0x60c/0x814 [ 132.841613][ T6577] netlink_sendmsg+0x6f4/0x9c0 [ 132.842404][ T6577] ____sys_sendmsg+0x5c8/0x938 [ 132.843088][ T6577] __sys_sendmsg+0x288/0x374 [ 132.843749][ T6577] __arm64_sys_sendmsg+0x80/0x94 [ 132.844553][ T6577] invoke_syscall+0x98/0x290 [ 132.845353][ T6577] el0_svc_common+0x138/0x258 [ 132.846159][ T6577] do_el0_svc+0x58/0x130 [ 132.846829][ T6577] el0_svc+0x58/0x128 [ 132.847468][ T6577] el0t_64_sync_handler+0x84/0xf0 [ 132.848239][ T6577] el0t_64_sync+0x18c/0x190 [ 132.849067][ C1] vkms_vblank_simulate: vblank timer overrun [ 132.852675][ T6577] ------------[ cut here ]------------ [ 132.853507][ T6577] raw_local_irq_restore() called with IRQs enabled [ 132.854560][ T6577] WARNING: CPU: 1 PID: 6577 at kernel/locking/irqflag-debug.c:10 warn_bogus_irq_restore+0x34/0x44 [ 132.856168][ T6577] Modules linked in: [ 132.856841][ T6577] CPU: 1 PID: 6577 Comm: syz.1.840 Tainted: G W syzkaller #0 [ 132.858135][ T6577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 132.859578][ T6577] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 132.860794][ T6577] pc : warn_bogus_irq_restore+0x34/0x44 [ 132.861588][ T6577] lr : warn_bogus_irq_restore+0x34/0x44 [ 132.862432][ T6577] sp : ffff800020da6980 [ 132.863131][ T6577] x29: ffff800020da6980 x28: 0000000000000000 x27: 1fffe0001c1acd30 [ 132.864496][ T6577] x26: 0000000000000010 x25: dfff800000000000 x24: 1fffe0001c1acd31 [ 132.865886][ T6577] x23: 0000000000000000 x22: ffff0000c3bfac00 x21: ffff0000e0d66988 [ 132.867128][ T6577] x20: ffff0000e0d66908 x19: 0000000000000000 x18: ffff800011babf60 [ 132.868453][ T6577] x17: 0000000000000000 x16: ffff800011a529a8 x15: 0000000000000002 [ 132.869701][ T6577] x14: 0000000000000001 x13: 1ffff000041b4c90 x12: 0000000000080000 [ 132.870998][ T6577] x11: 000000000007ffff x10: ffff8000225fb000 x9 : edd3a13e2f9db100 [ 132.872230][ T6577] x8 : edd3a13e2f9db100 x7 : 0000000000000001 x6 : 0000000000000001 [ 132.873488][ T6577] x5 : ffff800020da6418 x4 : ffff800015324ea0 x3 : ffff80000a893cf0 [ 132.874774][ T6577] x2 : ffff00019f51cd10 x1 : 0000000000000001 x0 : 0000000000000000 [ 132.876107][ T6577] Call trace: [ 132.876650][ T6577] warn_bogus_irq_restore+0x34/0x44 [ 132.877489][ T6577] _raw_spin_unlock_irqrestore+0xa0/0xac [ 132.878417][ T6577] tun_device_event+0xbf8/0xe80 [ 132.879303][ T6577] raw_notifier_call_chain+0xd4/0x164 [ 132.880176][ T6577] dev_change_tx_queue_len+0x174/0x2d4 [ 132.881174][ T6577] do_setlink+0xd18/0x3434 [ 132.881965][ T6577] rtnl_newlink+0xd04/0x1a54 [ 132.882696][ T6577] rtnetlink_rcv_msg+0x698/0xcdc [ 132.883542][ T6577] netlink_rcv_skb+0x218/0x3e8 [ 132.884213][ T6577] rtnetlink_rcv+0x28/0x38 [ 132.884880][ T6577] netlink_unicast+0x60c/0x814 [ 132.885637][ T6577] netlink_sendmsg+0x6f4/0x9c0 [ 132.886336][ T6577] ____sys_sendmsg+0x5c8/0x938 [ 132.887055][ T6577] __sys_sendmsg+0x288/0x374 [ 132.887828][ T6577] __arm64_sys_sendmsg+0x80/0x94 [ 132.888587][ T6577] invoke_syscall+0x98/0x290 [ 132.889368][ T6577] el0_svc_common+0x138/0x258 [ 132.890113][ T6577] do_el0_svc+0x58/0x130 [ 132.890802][ T6577] el0_svc+0x58/0x128 [ 132.891475][ T6577] el0t_64_sync_handler+0x84/0xf0 [ 132.892312][ T6577] el0t_64_sync+0x18c/0x190 [ 132.893111][ T6577] irq event stamp: 5494 [ 132.893760][ T6577] hardirqs last enabled at (5491): [] _raw_spin_unlock_irqrestore+0x48/0xac [ 132.895468][ T6577] hardirqs last disabled at (5492): [] _raw_spin_lock_irqsave+0xa4/0xb0 [ 132.897155][ T6577] softirqs last enabled at (5494): [] page_pool_put_defragged_page+0x5d4/0x9f8 [ 132.898949][ T6577] softirqs last disabled at (5493): [] page_pool_put_defragged_page+0x2dc/0x9f8 [ 132.900771][ T6577] ---[ end trace 0000000000000000 ]--- [ 132.901733][ C1] vkms_vblank_simulate: vblank timer overrun [ 132.911172][ T6577] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 132.915241][ T6577] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 132.916832][ T6577] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 132.923602][ T6577] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 132.928202][ T6584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.930203][ T6584] misc raw-gadget: fail, usb_gadget_register_driver returned -16