last executing test programs: 3.695862443s ago: executing program 2 (id=397): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000140)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000680)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000700), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000740), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000780)=0x2) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x2004800, &(0x7f0000000180)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303136323134372c756e695f786c6174653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c696f636861727365743d6d61637475726b6973682c6e6f6e756d7461696c3d302c696f636861727365743d6b6f69382d72752c756e695f786c6174653d302c696f636861727365743d757466382c6572726f72733d636f6e74696e75652c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c7379735f696d6d757461626c652c757466383d302c0074c3fc52ac6365d676e1"], 0xfe, 0x3bc, &(0x7f00000002c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000001a80)='./proc\x00', 0x1ff) 2.799014745s ago: executing program 1 (id=409): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1001}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x400) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000700)={'syzkaller0\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000780)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000007c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000980)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x20000000, 0x6}, 0x1, 0xfb}, [{0x2, 0xfffffffa, 0x9, 0x5, 0x2, 0x7}, {0x0, 0x6, 0x4, 0x10000, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x1}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x6}, {0x3, 0x8004, 0xc, 0x101, 0x103, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x0, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x5, 0xfffffff8, 0x7, 0x7, 0x8, 0x5}, {0x8001, 0x8, 0xfffffffe, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x10000}, {0xfffffffe, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x5}, {0x23e, 0x6, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x49, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x6, 0x87}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x2008, 0x7fff, 0x4, 0x8, 0xcfc}, {0x6, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x0, 0xde4, 0x2}, {0x0, 0x3, 0x2, 0x1, 0x2, 0x9}, {0xffffffff, 0x1, 0xc, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x8006, 0xe, 0x0, 0x80}, {0xd, 0x638c, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0xffffffff}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x8, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x6}, {0x10002, 0x5, 0x7, 0xac, 0xf, 0x8}, {0x5, 0x3, 0x6, 0xfff, 0x4, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0x5d, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x2}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x1, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x9, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0xff, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0xffffffff, 0x80000001, 0x9}, {0x3, 0x4, 0x7, 0x6, 0x8, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0xfcf6, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x4, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x8000, 0xc6e9}, {0x1, 0x2d73, 0x40000000, 0x5, 0x9f17, 0xffffff7f}, {0x10000, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x4, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x13, 0x100, 0x57}, {0x9, 0x5, 0x8, 0x3, 0xa, 0x9}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x2, 0x6}, {0x1, 0x8f, 0x9, 0xffffff46, 0x4, 0x88000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd52, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x1004, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x83ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x6, 0xffff0001, 0xcca}, {0x9, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x9}, {0x9, 0x7, 0x8001, 0x7, 0x2, 0x2}, {0x5, 0x0, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x16, 0x5, 0xffffff01, 0xfff}, {0x7, 0x205, 0xffffff7f, 0xa5f, 0x0, 0xfffff9de}, {0x9, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x9, 0x7fffffff, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x6}, {0x7, 0x400, 0x10001, 0x8, 0xa, 0x104}, {0x81, 0x8, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x80, 0x8, 0xfffffff9, 0x8}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1d, 0x4, 0x8, 0x80000002}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0xc}, {0xfffff000, 0x8, 0xbc, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x5, 0xbe, 0x81}, {0x4, 0x800, 0x4000, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0x8002, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x80000000}, {0x20000009, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x47, 0x6, 0x8936, 0xdcb, 0x7, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xfffffffb, 0x9e0f, 0x5, 0x3}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0x9, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x9, 0x1, 0x1, 0x10, 0x5}, {0x7, 0x80007, 0x104, 0x78d, 0xffffcff7, 0x4c0c}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0xf, 0x5, 0xfffffffa, 0xff, 0x80004, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {}, {}, {0x2}, {0x2}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x36bc5bece03d104f}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {}, {0xa}, {0x3}, {0x3, 0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {}, {0x3}, {0x6}, {0xa}, {0x5b984eb6d5c686a1, 0x1}, {}, {0x5, 0x1}, {0x1}, {0x4}, {0x5}, {0x2590228f88cc2931}, {0x3, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x3}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r7, &(0x7f0000001840)={&(0x7f0000001880)=@xdp={0x2c, 0x8, r5, 0x1109}, 0x80, &(0x7f0000001900)=[{&(0x7f0000001940)='7', 0x1}], 0x1}, 0x20000885) 1.990904637s ago: executing program 3 (id=412): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40050}, 0x0) 1.954680691s ago: executing program 2 (id=413): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4001, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) recvmmsg(r0, &(0x7f0000003f40)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f0000003e80)=[{&(0x7f0000001a40)=""/4096, 0x1000}], 0x1}, 0x5}], 0x2, 0x0, 0x0) 1.843222172s ago: executing program 3 (id=414): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0xc0a41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r2, 0x11b, 0x8, 0xffffffffffffffff, &(0x7f0000000080)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) r5 = accept4$packet(r4, &(0x7f00000007c0), &(0x7f0000000800)=0x14, 0x800) setsockopt$packet_int(r5, 0x107, 0x11, &(0x7f0000000840)=0x8, 0x4) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtfilter={0x30, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0xfff0}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x340008c4}, 0x20084090) 1.843094892s ago: executing program 0 (id=415): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f00000003c0), 0x56) sendmsg$kcm(r0, &(0x7f0000000500)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r2, 0x3e}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000600)="27030200591114120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 1.805562236s ago: executing program 1 (id=417): syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000340)=@mgmt_frame=@beacon={{{}, {}, @broadcast, @broadcast}, 0x0, @default, 0x9, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @val={0x25, 0x3, {0x1, 0x6c}}, @void, @void, @val={0x2d, 0x1a, {0xc, 0x0, 0x3, 0x0, {0xe920, 0x5, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x0, 0x7ff, 0x8}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6, 0x40}}, @val={0x76, 0x6, {0x1, 0xac, 0x40, 0x7f}}, [{0xdd, 0x6, "058f26fcecbf"}, {0xdd, 0x6, "6bf15b725644"}, {0xdd, 0xa, "2f8a272adac3ff361ad1"}]}, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000800)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)={0x1c, r1, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 1.789230558s ago: executing program 4 (id=418): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000003f80)=0x80000001, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000003fc0)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f0000004000)="280320000a00140000007ef506be00080000000000000000000000143baa111f1f858ce632f47042195eb343783cadb6d78839980700e67bee78895e16f37fe8", 0x40, 0x400c810, &(0x7f0000004040)={0x11, 0x3, r1, 0x1, 0xe5, 0x6, @remote}, 0x14) 1.735274143s ago: executing program 2 (id=419): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2c, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x7, 0xd}, {0xffe0}, {0x8, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x24048840}, 0x40004) 1.695862467s ago: executing program 4 (id=420): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000cc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xb, 0x1, 'policy\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x4000800) 1.678424309s ago: executing program 3 (id=421): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a80)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY_END={0x4}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 1.607156467s ago: executing program 0 (id=422): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/exec\x00') copy_file_range(r0, 0x0, r0, &(0x7f0000000040)=0xffffffffffffff80, 0x9, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="20ffffff000701030000000000000000030000000c000340fffffffffff7ffff"], 0x20}, 0x1, 0x0, 0x0, 0x880}, 0x20048001) socket$nl_netfilter(0x10, 0x3, 0xc) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000580), 0x6) prlimit64(0x0, 0xe, &(0x7f00000005c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000600)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000640)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000680)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000700)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000780), 0x318, 0x0) recvmmsg(r2, &(0x7f00000007c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000800)=0x2) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./trace\x00', 0x1ff) mount(&(0x7f0000000880)=@sg0, &(0x7f00000008c0)='./trace\x00', &(0x7f0000000900)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) write(r4, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000a00)='./binderfs/custom0\x00', 0x6, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000a40)={@in6={{0xa, 0x0, 0x9, @ipv4={'\x00', '\xff\xff', @empty}}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe2500"}, 0xd8) socket$netlink(0x10, 0x3, 0x4) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000c00)={0x1f, 0x8001}, 0xa) 1.600816608s ago: executing program 3 (id=423): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000140)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000680)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000700), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000740), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000780)=0x2) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x2004800, &(0x7f0000000180)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303136323134372c756e695f786c6174653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c696f636861727365743d6d61637475726b6973682c6e6f6e756d7461696c3d302c696f636861727365743d6b6f69382d72752c756e695f786c6174653d302c696f636861727365743d757466382c6572726f72733d636f6e74696e75652c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c7379735f696d6d757461626c652c757466383d302c0074c3fc52ac6365d676e1"], 0xfe, 0x3bc, &(0x7f00000002c0)="$eJzs3cGLG2UUAPC32e3uttrNgiKoiB8FD17Cdv0HukgL4oJSG6kehKmb1ZA0KUlYSREtXrz6H3gvHr0J4j/Qg969eevFYw+lI8kku8k2bV3rbqj+frDMy3zfm3wzQ4a3h+Hdvfrd9cZut7Kb9aJ0IUUpIkr3ItaHUWFhtC0N4+WYdCveLF/9/bUPPvr43a3t7YuXU7q0deWtzZTS2us/f/HlD+d+6T334Y9rP63EnfVP7v65+cedl+68fPfBlc/r3VTvpqV2L2XpWrvdy641a2mn3m1UUnq/Wcu6tVRvdWudqfHdZvvGjX7KWjtnz9zo1LrdlLX6qVHrp1479db6Kfssq7dSpVJJZ88ET1K9fflytlXEq4+Zd+GkFsQx6HS2ssFveOWhkertuSwIAJirp63/l5+u/m9N1/+notuovPBGcegj1/8d9f8RTdb//FcN6v/l0e83IvKD/wPU/wAAAAAAAAAAAAAA8Cy4l+flPM/L4+3+ywGjz3NeHsfsoft/6G/e6+N4Tby4txrR/HavulcttsX41m7Uoxm12Ihy3B88FsaK+NI72xc30tB6nL3+9TD/3K8R1cXp/PNRjvXZ+eeL/LSfH4PtqTgzmb8Z5Xhxdv7mfn6+cJC/HBvfT+RXohy/fRrtaMbO8PF2kP/V+ZTefm/70PevDOcBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8P9QSWOvRtH3fq8acTr2Rv37KwcT1qf74xf5o/76pdiIctyf3Z9/Y2Z//6V4ZWm+5w4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAY93+zUbWbNY6JxWMe/4P9yyPg0dnLRTTbx0aOh3Tk1eedJy/H+R5nj/I83xqqHSk45weneSMocGRv1kthos9O61/6/KuLpzorXya4FREPGZOPrqAk0OL8U++6/n96zxzzkpEHOuZrg2C0tHTyzHn23TijyIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYu/2m34MPC/NeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPPS7d9sZM3mYmcU1KaDpTi8J2suxiMmPyqY9zkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8S/4KAAD//31oB3w=") mkdirat(0xffffffffffffff9c, &(0x7f0000001a80)='./proc\x00', 0x1ff) 1.589166728s ago: executing program 4 (id=424): socket$kcm(0x2, 0x3, 0x2) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000009c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x7}, {0x0, 0x1, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x6c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6, 0x5, 0x3, 0x0, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000000000)=[{{&(0x7f0000000140)={0xa, 0x4e23, 0xfffffffb, @remote, 0x5}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000001c0)='.', 0x1}], 0x1}}], 0x1, 0x0) 1.515253146s ago: executing program 2 (id=425): r0 = socket(0x2, 0x3, 0x66) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x52c) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x7, 0x6a0000e4}, 0x6e) 608.136658ms ago: executing program 4 (id=426): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000003a80)={0x0, 0x0, &(0x7f0000003a40)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000003a0001002cbd7000fbdbdf250b"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000044) 512.977768ms ago: executing program 0 (id=427): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r1, &(0x7f0000000f80)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000fc0)={r1, r1, 0x9, 0x0, 0x0, 0x9, 0x8b, 0x6, 0x5508, 0xa35, 0x1, 0x1, 'syz0\x00'}) 379.005442ms ago: executing program 2 (id=428): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1001}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x400) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000700)={'syzkaller0\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000780)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000007c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000980)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x20000000, 0x6}, 0x1, 0xfb}, [{0x2, 0xfffffffa, 0x9, 0x5, 0x2, 0x7}, {0x0, 0x6, 0x4, 0x10000, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x1}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x6}, {0x3, 0x8004, 0xc, 0x101, 0x103, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x0, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x5, 0xfffffff8, 0x7, 0x7, 0x8, 0x5}, {0x8001, 0x8, 0xfffffffe, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x10000}, {0xfffffffe, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x5}, {0x23e, 0x6, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x49, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x6, 0x87}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x2008, 0x7fff, 0x4, 0x8, 0xcfc}, {0x6, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x0, 0xde4, 0x2}, {0x0, 0x3, 0x2, 0x1, 0x2, 0x9}, {0xffffffff, 0x1, 0xc, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x8006, 0xe, 0x0, 0x80}, {0xd, 0x638c, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0xffffffff}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x8, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x6}, {0x10002, 0x5, 0x7, 0xac, 0xf, 0x8}, {0x5, 0x3, 0x6, 0xfff, 0x4, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0x5d, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x2}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x1, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x9, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0xff, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0xffffffff, 0x80000001, 0x9}, {0x3, 0x4, 0x7, 0x6, 0x8, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0xfcf6, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x4, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x8000, 0xc6e9}, {0x1, 0x2d73, 0x40000000, 0x5, 0x9f17, 0xffffff7f}, {0x10000, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x4, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x13, 0x100, 0x57}, {0x9, 0x5, 0x8, 0x3, 0xa, 0x9}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x2, 0x6}, {0x1, 0x8f, 0x9, 0xffffff46, 0x4, 0x88000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd52, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x1004, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x83ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x6, 0xffff0001, 0xcca}, {0x9, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x9}, {0x9, 0x7, 0x8001, 0x7, 0x2, 0x2}, {0x5, 0x0, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x16, 0x5, 0xffffff01, 0xfff}, {0x7, 0x205, 0xffffff7f, 0xa5f, 0x0, 0xfffff9de}, {0x9, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x9, 0x7fffffff, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x6}, {0x7, 0x400, 0x10001, 0x8, 0xa, 0x104}, {0x81, 0x8, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x80, 0x8, 0xfffffff9, 0x8}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1d, 0x4, 0x8, 0x80000002}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0xc}, {0xfffff000, 0x8, 0xbc, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x5, 0xbe, 0x81}, {0x4, 0x800, 0x4000, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0x8002, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x80000000}, {0x20000009, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x47, 0x6, 0x8936, 0xdcb, 0x7, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xfffffffb, 0x9e0f, 0x5, 0x3}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0x9, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x9, 0x1, 0x1, 0x10, 0x5}, {0x7, 0x80007, 0x104, 0x78d, 0xffffcff7, 0x4c0c}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0xf, 0x5, 0xfffffffa, 0xff, 0x80004, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {}, {}, {0x2}, {0x2}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x36bc5bece03d104f}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {}, {0xa}, {0x3}, {0x3, 0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {}, {0x3}, {0x6}, {0xa}, {0x5b984eb6d5c686a1, 0x1}, {}, {0x5, 0x1}, {0x1}, {0x4}, {0x5}, {0x2590228f88cc2931}, {0x3, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x3}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000001880)=@xdp={0x2c, 0x8, r5, 0x1109}, 0x80, &(0x7f0000001900)=[{&(0x7f0000001940)='7', 0x1}], 0x1}, 0x20000885) 343.037336ms ago: executing program 1 (id=429): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2}}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x88}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x38, 0x2, 0x3, 0x1, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}, @NFQA_CFG_MASK={0x8, 0x4, 0x0, 0x0, 0x2}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x0, 0x0, 0x2}]}, 0x38}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @local}]}, &(0x7f00000003c0)=0x10) 340.891726ms ago: executing program 3 (id=430): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x34d6b}]}, &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 248.320305ms ago: executing program 4 (id=431): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0xc0a41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r2, 0x11b, 0x8, 0xffffffffffffffff, &(0x7f0000000080)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) accept4$packet(r4, &(0x7f00000007c0), &(0x7f0000000800)=0x14, 0x800) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtfilter={0x30, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r6, {0x2, 0xfff0}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x340008c4}, 0x20084090) 163.145044ms ago: executing program 3 (id=432): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000600)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, r4) sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000011}, 0x48010) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000280), r4) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x1c, r5, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) write$nci(r0, &(0x7f00000003c0)=@NCI_OP_CORE_RESET_RSP={0x0, 0x0, 0x2, 0x0, 0x3}, 0x6) write$nci(r0, &(0x7f0000000400)=@NCI_OP_CORE_INIT_RSP={0x0, 0x0, 0x2, 0x1, 0x11, {{}, {0x0, 0x0, 0xff}}}, 0x14) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000840)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x24}]}, 0x24}}, 0x8004) write$nci(r0, &(0x7f0000000500)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x2}, 0x5) 163.030774ms ago: executing program 0 (id=433): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@ipv6_newroute={0x54, 0x18, 0x1, 0x70bd31, 0x25dfdbfd, {0xa, 0x0, 0x0, 0x0, 0xfc, 0x2, 0xff, 0xa, 0x2400}, [@RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x5}, @RTA_ENCAP={0x28, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x24, 0x1, {{0x2, {0x89, 0x0, 0x4, 0x0, 0xff, 0x0, 0x4}}, [@loopback]}}}]}, 0x54}}, 0x0) 162.919324ms ago: executing program 1 (id=434): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x100, 0x0, 0x25dfdbfb, {{@in=@rand_addr=0x64010102, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x2, 0x0, 0xee01}, {0x0, 0x2, 0x0, 0x2000000000000, 0x40, 0xfffffffffffffdfd, 0x50}, {0x5, 0x0, 0x100000000}, 0x6, 0x0, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x2040}, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 94.043741ms ago: executing program 0 (id=435): r0 = socket$inet_icmp(0x2, 0x2, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r2, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x80) 93.945201ms ago: executing program 1 (id=436): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000280)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="060015000700fdff0c00168008000100", @ANYRES32=r0], 0x38}}, 0x10) 35.298587ms ago: executing program 1 (id=437): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/exec\x00') copy_file_range(r0, 0x0, r0, &(0x7f0000000040)=0xffffffffffffff80, 0x9, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="20ffffff000701030000000000000000030000000c000340fffffffffff7ffff"], 0x20}, 0x1, 0x0, 0x0, 0x880}, 0x20048001) socket$nl_netfilter(0x10, 0x3, 0xc) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000580), 0x6) prlimit64(0x0, 0xe, &(0x7f00000005c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000600)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000640)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000680)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000700)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000780), 0x318, 0x0) recvmmsg(r2, &(0x7f00000007c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000800)=0x2) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./trace\x00', 0x1ff) mount(&(0x7f0000000880)=@sg0, &(0x7f00000008c0)='./trace\x00', &(0x7f0000000900)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) write(r4, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000a00)='./binderfs/custom0\x00', 0x6, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000a40)={@in6={{0xa, 0x0, 0x9, @ipv4={'\x00', '\xff\xff', @empty}}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe2500"}, 0xd8) socket$netlink(0x10, 0x3, 0x4) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000c00)={0x1f, 0x8001}, 0xa) 764.351µs ago: executing program 2 (id=438): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000c00)={0x3c, r1, 0x121, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r2}, @val={0x0, 0x99, {0x800, 0x19}}}}, [@NL80211_ATTR_PRIVACY={0x2a}, @NL80211_ATTR_SSID={0xa, 0x34, @random="fd06f836e45d0b69b4ac76198eb1c1ed86c50c49ec242dac3acad3eac0"}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_KEYS={0x8, 0x51, 0x0, 0x1, [{0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0xf040}, 0x0) 325.191µs ago: executing program 0 (id=439): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x28, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {{0x12}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008084}, 0x0) 0s ago: executing program 4 (id=440): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f00000016c0)=[{&(0x7f0000000100)="89e7ee0c7cdad9b4b47380c988cafb", 0xf}, {&(0x7f0000000480)="448b7c0acfaac0cefe8360fcbe079ca4e62ef0675c1063d7d109253830cc7e805276bc250062eb30538a6762", 0x2c}], 0x2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.162' (ED25519) to the list of known hosts. [ 60.000140][ T4177] cgroup: Unknown subsys name 'net' [ 60.143049][ T4177] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 61.690761][ T4177] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 63.056914][ T4192] rdma_rxe: rxe_register_device failed with error -23 [ 63.064811][ T4192] rdma_rxe: failed to add rxe_eth0 [ 63.077404][ T4194] rxe_eth0 speed is unknown, defaulting to 1000 [ 63.080410][ T4198] rdma_rxe: rxe_register_device failed with error -23 [ 63.095473][ T4198] rdma_rxe: failed to add rxe_eth0 [ 63.106661][ T4191] rdma_rxe: rxe_register_device failed with error -23 [ 63.113668][ T4191] rdma_rxe: failed to add rxe_eth0 [ 63.130904][ T4193] rdma_rxe: rxe_register_device failed with error -23 [ 63.140560][ T4194] rxe_eth0 speed is unknown, defaulting to 1000 [ 63.147437][ T4193] rdma_rxe: failed to add rxe_eth0 [ 63.201524][ T4194] rxe_eth0 speed is unknown, defaulting to 1000 [ 63.395124][ T4194] infiniband rxe0: set active [ 63.410768][ T4194] infiniband rxe0: added rxe_eth0 [ 63.426157][ T1327] rxe_eth0 speed is unknown, defaulting to 1000 [ 63.518411][ T4194] RDS/IB: rxe0: added [ 63.523095][ T4194] smc: adding ib device rxe0 with port count 1 [ 63.535819][ T4198] chnl_net:caif_netlink_parms(): no params data found [ 63.556563][ T4194] smc: ib device rxe0 port 1 has pnetid [ 63.570929][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 63.592608][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 63.604013][ T21] rxe_eth0 speed is unknown, defaulting to 1000 [ 63.615701][ T4194] rxe_eth0 speed is unknown, defaulting to 1000 [ 63.764080][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 63.822785][ T4201] rxe_eth0 speed is unknown, defaulting to 1000 [ 63.891688][ T4194] rxe_eth0 speed is unknown, defaulting to 1000 [ 63.898573][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.911526][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.920355][ T4191] device bridge_slave_0 entered promiscuous mode [ 63.934671][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.942855][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.955881][ T4192] device bridge_slave_0 entered promiscuous mode [ 63.980132][ T4198] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.992285][ T4198] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.000828][ T4198] device bridge_slave_0 entered promiscuous mode [ 64.013486][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.021579][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.034871][ T4191] device bridge_slave_1 entered promiscuous mode [ 64.042939][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.050917][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.060078][ T4192] device bridge_slave_1 entered promiscuous mode [ 64.082448][ T4198] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.089678][ T4198] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.098520][ T4198] device bridge_slave_1 entered promiscuous mode [ 64.106077][ T4194] rxe_eth0 speed is unknown, defaulting to 1000 [ 64.163625][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.179329][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.190050][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.200862][ T4193] device bridge_slave_0 entered promiscuous mode [ 64.218266][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.240176][ T4198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.256264][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.269924][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.279381][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.286657][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.295013][ T4193] device bridge_slave_1 entered promiscuous mode [ 64.310485][ T4198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.327035][ T4194] rxe_eth0 speed is unknown, defaulting to 1000 [ 64.370463][ T4191] team0: Port device team_slave_0 added [ 64.383005][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.412255][ T4191] team0: Port device team_slave_1 added [ 64.420670][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.433952][ T4192] team0: Port device team_slave_0 added [ 64.443218][ T4198] team0: Port device team_slave_0 added [ 64.467259][ T4192] team0: Port device team_slave_1 added [ 64.493343][ T4198] team0: Port device team_slave_1 added [ 64.525014][ T4193] team0: Port device team_slave_0 added [ 64.549729][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.558150][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.584632][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.599333][ T4193] team0: Port device team_slave_1 added [ 64.619977][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.638020][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.669642][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.684163][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.694956][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.725077][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.745494][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.755242][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.786061][ T4198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.803412][ T4194] rxe_eth0 speed is unknown, defaulting to 1000 [ 64.807334][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.817064][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.866308][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.908655][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.915668][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.991044][ T4198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.017238][ T1327] Bluetooth: hci3: command 0x0409 tx timeout [ 65.024025][ T1327] Bluetooth: hci4: command 0x0409 tx timeout [ 65.043153][ T1327] Bluetooth: hci0: command 0x0409 tx timeout [ 65.056388][ T1327] Bluetooth: hci1: command 0x0409 tx timeout [ 65.063564][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.071430][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.102422][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 65.108425][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.115115][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.126132][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.154446][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.219899][ T4192] device hsr_slave_0 entered promiscuous mode [ 65.227534][ T4192] device hsr_slave_1 entered promiscuous mode [ 65.243980][ T4198] device hsr_slave_0 entered promiscuous mode [ 65.251238][ T4198] device hsr_slave_1 entered promiscuous mode [ 65.258485][ T4198] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.266927][ T4198] Cannot create hsr debugfs directory [ 65.294214][ T4191] device hsr_slave_0 entered promiscuous mode [ 65.301251][ T4191] device hsr_slave_1 entered promiscuous mode [ 65.308911][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.317179][ T4191] Cannot create hsr debugfs directory [ 65.335542][ T3856] infiniband rxe0: set active [ 65.345832][ T4193] device hsr_slave_0 entered promiscuous mode [ 65.355281][ T4193] device hsr_slave_1 entered promiscuous mode [ 65.362657][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.374548][ T4193] Cannot create hsr debugfs directory [ 65.395611][ T1327] rxe_eth0 speed is unknown, defaulting to 1000 [ 65.784610][ T4192] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.797857][ T4192] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.809351][ T4192] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 65.819332][ T4192] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 65.862503][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 65.935508][ T4191] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.973578][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.981172][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.989993][ T4194] device bridge_slave_0 entered promiscuous mode [ 65.999119][ T4191] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 66.011368][ T4191] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 66.022079][ T4191] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.032886][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.041213][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.050421][ T4194] device bridge_slave_1 entered promiscuous mode [ 66.094780][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.106758][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.135892][ T4193] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 66.151319][ T4193] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 66.172744][ T4194] team0: Port device team_slave_0 added [ 66.191418][ T4193] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 66.202418][ T4194] team0: Port device team_slave_1 added [ 66.225963][ T4193] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 66.238110][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.252748][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.259966][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.287278][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.307390][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.314414][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.340774][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.399285][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.410177][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.427375][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.453970][ T4194] device hsr_slave_0 entered promiscuous mode [ 66.461810][ T4194] device hsr_slave_1 entered promiscuous mode [ 66.469892][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.478277][ T4194] Cannot create hsr debugfs directory [ 66.485753][ T4198] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 66.495986][ T4198] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 66.518465][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.529567][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.539043][ T156] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.546418][ T156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.555492][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.566470][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.575092][ T156] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.582348][ T156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.593665][ T4198] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 66.605215][ T4198] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 66.617380][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.656058][ T1447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.665393][ T1447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.674423][ T1447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.684326][ T1447] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.693878][ T1447] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.712411][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.747497][ T1447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.757348][ T1447] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.766102][ T1447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.774898][ T1447] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.793367][ T4192] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.804889][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.822783][ T1447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.833273][ T1447] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.853794][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.865621][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.913877][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.938570][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.967005][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.983592][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.992902][ T156] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.000269][ T156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.024762][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.071637][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.081169][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.090764][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.098873][ T13] Bluetooth: hci0: command 0x041b tx timeout [ 67.105272][ T13] Bluetooth: hci4: command 0x041b tx timeout [ 67.112649][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.121660][ T13] Bluetooth: hci3: command 0x041b tx timeout [ 67.123826][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.137470][ T156] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.144856][ T156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.163435][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.173154][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.181666][ T4271] Bluetooth: hci2: command 0x041b tx timeout [ 67.188254][ T4271] Bluetooth: hci1: command 0x041b tx timeout [ 67.195226][ T156] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.202407][ T156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.217058][ T4198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.250784][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.260892][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.271580][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.280985][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.291517][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.300736][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.309768][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.319889][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.329281][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.338912][ T156] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.346015][ T156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.363743][ T4198] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.391134][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.402803][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.410708][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.420077][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.428410][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.436640][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.445805][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.457091][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.471325][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.480136][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.489506][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.499885][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.514410][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.525201][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.556634][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.566122][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.579190][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.593625][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.603436][ T156] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.610570][ T156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.619454][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.630012][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.639894][ T156] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.647082][ T156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.654927][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.664370][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.675172][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.684465][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.718338][ T3101] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.729672][ T3101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.739789][ T3101] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.753462][ T3101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.762226][ T3101] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.771267][ T3101] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.781538][ T3101] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.790759][ T3101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.799449][ T3101] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.808034][ T3101] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.817718][ T3101] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.829367][ T4194] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 67.865258][ T4198] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.879520][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.890135][ T3101] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.899353][ T3101] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.909195][ T3101] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.918797][ T3101] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.928517][ T3101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.944394][ T4194] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 67.959673][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.983138][ T4194] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 67.996124][ T4194] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 68.037354][ T4192] device veth0_vlan entered promiscuous mode [ 68.044289][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.066698][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.091954][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.107191][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.140375][ T4192] device veth1_vlan entered promiscuous mode [ 68.234375][ T1447] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.244517][ T1447] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.253666][ T1447] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.261582][ T1447] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.279140][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.299665][ T4192] device veth0_macvtap entered promiscuous mode [ 68.317033][ T3101] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.333363][ T3101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.360127][ T4192] device veth1_macvtap entered promiscuous mode [ 68.372828][ T3101] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.385752][ T3101] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.399265][ T3101] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.413219][ T3101] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.427197][ T4198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.464051][ T3101] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.474617][ T3101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.487279][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.509756][ T3101] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.519596][ T3101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.529199][ T3101] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.540297][ T3101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.549501][ T3101] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.557996][ T3101] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.568898][ T4191] device veth0_vlan entered promiscuous mode [ 68.584013][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.593143][ T3101] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.602417][ T3101] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.610961][ T3101] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.620752][ T3101] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.635561][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.645754][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.682858][ T4192] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.696012][ T4192] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.705514][ T4192] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.717766][ T4192] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.732189][ T4191] device veth1_vlan entered promiscuous mode [ 68.743518][ T1447] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.752885][ T1447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.762776][ T1447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.795791][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.831285][ T1447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.840904][ T1447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.852995][ T1447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.861918][ T1447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.870413][ T1447] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.878899][ T1447] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.890597][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.900456][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.909331][ T156] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.916469][ T156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.924930][ T4198] device veth0_vlan entered promiscuous mode [ 68.971257][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.983485][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.993392][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.002326][ T156] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.009473][ T156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.019150][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.047577][ T4191] device veth0_macvtap entered promiscuous mode [ 69.075545][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.092578][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.102543][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.112899][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.122441][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.137838][ T4198] device veth1_vlan entered promiscuous mode [ 69.148388][ T4191] device veth1_macvtap entered promiscuous mode [ 69.176824][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.185031][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.193975][ T4293] Bluetooth: hci3: command 0x040f tx timeout [ 69.205257][ T4293] Bluetooth: hci4: command 0x040f tx timeout [ 69.212494][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.220832][ T4293] Bluetooth: hci0: command 0x040f tx timeout [ 69.230119][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.239511][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.249219][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.257620][ T4271] Bluetooth: hci1: command 0x040f tx timeout [ 69.264850][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.273210][ T4271] Bluetooth: hci2: command 0x040f tx timeout [ 69.282957][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.306030][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.320186][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.332170][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.359750][ T4194] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.372257][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.381296][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.392306][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.401760][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.411070][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.421107][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.440808][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.451692][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.464506][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.494978][ T1447] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.510192][ T1447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.524342][ T1447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.541068][ T1447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.554861][ T4191] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.569925][ T4191] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.581082][ T4191] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.591329][ T4191] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.609610][ T3101] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.620072][ T3101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.632756][ T4198] device veth0_macvtap entered promiscuous mode [ 69.643588][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.667120][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.695630][ T4198] device veth1_macvtap entered promiscuous mode [ 69.714074][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.724682][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.737467][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.773586][ T4193] device veth0_vlan entered promiscuous mode [ 69.790034][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.800365][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.809896][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.821782][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.858877][ T4193] device veth1_vlan entered promiscuous mode [ 69.874813][ T1447] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.874839][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.891527][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.898250][ T1447] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.914037][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.949318][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.959870][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.974976][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.994017][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.004748][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.020402][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.042196][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.054035][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.065551][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.077351][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.089855][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.106461][ T1447] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.114329][ T1447] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.132674][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.145786][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.157413][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.167254][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.176695][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.209446][ T4198] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.219014][ T4198] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.228795][ T4198] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.238644][ T4198] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.287934][ T1447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.302001][ T1447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.324207][ T4302] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 70.347294][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.355166][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.370549][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.383438][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.397119][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.435194][ T4193] device veth0_macvtap entered promiscuous mode [ 70.466909][ T4193] device veth1_macvtap entered promiscuous mode [ 70.489392][ T4302] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3'. [ 70.501873][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.514940][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.524064][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.533869][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.551550][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.562211][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.577796][ T4194] device veth0_vlan entered promiscuous mode [ 70.632754][ T4194] device veth1_vlan entered promiscuous mode [ 70.652897][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.667454][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.684307][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.695738][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.710650][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.721753][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.739518][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.752931][ T156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.771510][ T156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.782884][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.795922][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.810980][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.820925][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.830961][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.854871][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.872283][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.875217][ T4311] loop0: detected capacity change from 0 to 256 [ 70.882240][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.882295][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.882307][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.882323][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.887421][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.948506][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.958944][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.969096][ T4311] ======================================================= [ 70.969096][ T4311] WARNING: The mand mount option has been deprecated and [ 70.969096][ T4311] and is ignored by this kernel. Remove the mand [ 70.969096][ T4311] option from the mount to silence this warning. [ 70.969096][ T4311] ======================================================= [ 71.008151][ T4193] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.020316][ T4193] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.035083][ T4193] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.045312][ T4193] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.074495][ T4311] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 71.089409][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.103978][ T26] audit: type=1800 audit(1792964530.441:2): pid=4311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6" name="file1" dev="loop0" ino=1048598 res=0 errno=0 [ 71.107224][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.163336][ T1447] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.224894][ T4194] device veth0_macvtap entered promiscuous mode [ 71.241197][ T1447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.257561][ T4201] Bluetooth: hci0: command 0x0419 tx timeout [ 71.265398][ T1447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.274445][ T4201] Bluetooth: hci4: command 0x0419 tx timeout [ 71.293555][ T4201] Bluetooth: hci3: command 0x0419 tx timeout [ 71.305670][ T4194] device veth1_macvtap entered promiscuous mode [ 71.329774][ T1447] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.342574][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.349216][ T4293] Bluetooth: hci2: command 0x0419 tx timeout [ 71.357090][ T4293] Bluetooth: hci1: command 0x0419 tx timeout [ 71.362429][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.389356][ T1447] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.418482][ T1444] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.443374][ T1444] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.772504][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.924638][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.129979][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.254434][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.285020][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.306249][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.316681][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.327602][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.340042][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.356521][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.364976][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.413250][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.429103][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.444755][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.487316][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.513673][ T4324] loop0: detected capacity change from 0 to 512 [ 72.527763][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.552821][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.565193][ T4324] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 72.606547][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.618014][ T4324] System zones: 1-12 [ 72.620736][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.632961][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.644692][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.659574][ T4322] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9'. [ 72.687696][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.699231][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.714834][ T4194] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.727619][ T4324] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #12: comm syz.0.8: missing EA_INODE flag [ 72.737263][ T4194] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.754898][ T4194] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.764512][ T4194] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.789263][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.797898][ T4324] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.8: error while reading EA inode 12 err=-117 [ 72.816897][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.858407][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.881941][ T4324] EXT4-fs (loop0): 1 orphan inode deleted [ 72.889645][ T4324] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 73.039549][ T1447] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.064786][ T1447] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.156160][ T1447] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.605097][ T4312] Bluetooth: hci3: command 0x0405 tx timeout [ 74.786200][ C0] sched: RT throttling activated [ 75.798174][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.191991][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.250477][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.393986][ T4271] rxe_eth0 speed is unknown, defaulting to 1000 [ 77.755869][ T4359] loop3: detected capacity change from 0 to 4096 [ 78.375173][ T4359] EXT4-fs (loop3): Test dummy encryption mode enabled [ 78.565041][ T4359] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,nombcache,,errors=continue. Quota mode: writeback. [ 78.865487][ T4373] binder: 4360:4373 ioctl c0306201 200000000080 returned -14 [ 79.273303][ T4373] loop0: detected capacity change from 0 to 512 [ 80.894316][ T4373] EXT4-fs (loop0): Ignoring removed nobh option [ 80.910800][ T4373] EXT4-fs: failed to create workqueue [ 81.002369][ T4373] EXT4-fs (loop0): mount failed [ 81.103451][ T4407] netlink: 728 bytes leftover after parsing attributes in process `syz.1.19'. [ 82.385342][ T4428] netlink: 'syz.0.26': attribute type 1 has an invalid length. [ 85.287267][ T4470] Zero length message leads to an empty skb [ 86.710535][ T1112] cfg80211: failed to load regulatory.db [ 88.565157][ T4460] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 88.720090][ T4501] netlink: 20 bytes leftover after parsing attributes in process `syz.0.47'. [ 88.748017][ T4503] netlink: 8 bytes leftover after parsing attributes in process `syz.3.46'. [ 88.776404][ T4501] netlink: 11 bytes leftover after parsing attributes in process `syz.0.47'. [ 88.952382][ T4513] tipc: Started in network mode [ 88.996406][ T4513] tipc: Node identity ac1414aa, cluster identity 4711 [ 89.014906][ T4513] tipc: New replicast peer: 172.20.20.187 [ 89.054010][ T4513] tipc: Enabled bearer , priority 10 [ 89.127151][ T4524] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 89.481737][ T4531] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.662573][ T4545] loop1: detected capacity change from 0 to 512 [ 89.747551][ T4541] netlink: 24 bytes leftover after parsing attributes in process `syz.3.61'. [ 89.774299][ T4545] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 90.178046][ T4328] tipc: Node number set to 2886997162 [ 90.263864][ T4563] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 90.451640][ T4570] loop4: detected capacity change from 0 to 4096 [ 90.479677][ T4570] EXT4-fs (loop4): Test dummy encryption mode enabled [ 90.547308][ T4570] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption=v1,nombcache,,errors=continue. Quota mode: writeback. [ 90.671161][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 91.148951][ T4570] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 91.234717][ T4596] device syzkaller0 entered promiscuous mode [ 94.346412][ T4608] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 94.485688][ T4634] netlink: 24 bytes leftover after parsing attributes in process `syz.2.91'. [ 94.612003][ T4646] device syzkaller0 entered promiscuous mode [ 94.851578][ T4655] loop1: detected capacity change from 0 to 512 [ 94.934420][ T4661] netlink: 4 bytes leftover after parsing attributes in process `syz.3.99'. [ 94.984757][ T4655] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 96.392537][ T4700] device syzkaller0 entered promiscuous mode [ 96.988387][ T4724] device syzkaller1 entered promiscuous mode [ 97.023065][ T4724] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 97.173560][ T4740] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 98.175210][ T4751] netlink: 4 bytes leftover after parsing attributes in process `syz.2.134'. [ 98.649330][ T4767] device syzkaller1 entered promiscuous mode [ 98.776324][ T4328] Bluetooth: hci3: command 0x0411 tx timeout [ 99.079173][ T4779] device syzkaller0 entered promiscuous mode [ 99.371663][ T4791] device syzkaller0 entered promiscuous mode [ 99.378964][ T4367] nci: nci_ntf_packet: unknown ntf opcode 0x239 [ 99.719900][ T4803] netlink: 12 bytes leftover after parsing attributes in process `syz.4.154'. [ 100.220452][ T1112] Bluetooth: hci2: command 0x042a tx timeout [ 100.268808][ T4815] skbuff: bad partial csum: csum=65535/2 headroom=178 headlen=65543 [ 100.375890][ T4820] device syzkaller0 entered promiscuous mode [ 102.244059][ T4787] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 103.319893][ T4869] device syzkaller0 entered promiscuous mode [ 103.628659][ T4895] netlink: 'syz.0.185': attribute type 10 has an invalid length. [ 103.659772][ T4895] team0: Port device netdevsim3 added [ 105.338944][ T4845] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 105.494399][ T4907] netlink: 12 bytes leftover after parsing attributes in process `syz.0.190'. [ 105.523054][ T4908] netlink: 8 bytes leftover after parsing attributes in process `syz.1.187'. [ 105.987337][ T4939] netlink: 4 bytes leftover after parsing attributes in process `syz.1.201'. [ 106.239754][ T4953] tipc: Started in network mode [ 106.250181][ T4953] tipc: Node identity c, cluster identity 4711 [ 106.259093][ T4953] tipc: Node number set to 12 [ 106.419076][ T4969] IPVS: set_ctl: invalid protocol: 1 10.1.1.1:20002 [ 106.738589][ T4997] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 107.999926][ T5031] netlink: 24 bytes leftover after parsing attributes in process `syz.3.231'. [ 108.124775][ T5047] netlink: 'syz.2.238': attribute type 12 has an invalid length. [ 108.138488][ T5047] netlink: 'syz.2.238': attribute type 29 has an invalid length. [ 108.151865][ T5047] netlink: 148 bytes leftover after parsing attributes in process `syz.2.238'. [ 108.162115][ T5047] netlink: 'syz.2.238': attribute type 2 has an invalid length. [ 108.174432][ T5047] netlink: 'syz.2.238': attribute type 3 has an invalid length. [ 108.188110][ T5047] netlink: 19 bytes leftover after parsing attributes in process `syz.2.238'. [ 111.063286][ T5038] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 111.181656][ T5072] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input7 [ 111.236427][ T5079] syz.3.252 uses obsolete (PF_INET,SOCK_PACKET) [ 111.404980][ T5094] netlink: 388 bytes leftover after parsing attributes in process `syz.1.257'. [ 111.545894][ T5102] netlink: 4 bytes leftover after parsing attributes in process `syz.4.258'. [ 111.774096][ T5116] ip_tables: iptables: counters copy to user failed while replacing table [ 111.867203][ T5120] device syzkaller1 entered promiscuous mode [ 112.333523][ T5152] netlink: 4 bytes leftover after parsing attributes in process `syz.2.279'. [ 112.367219][ T5152] bond0: (slave syz_tun): Releasing backup interface [ 112.399998][ T5154] device syzkaller0 entered promiscuous mode [ 112.474161][ T5156] ip_tables: iptables: counters copy to user failed while replacing table [ 112.618706][ T5164] netlink: 12 bytes leftover after parsing attributes in process `syz.0.285'. [ 112.709540][ T5171] netlink: 24 bytes leftover after parsing attributes in process `syz.1.288'. [ 112.771298][ T5174] netlink: 4 bytes leftover after parsing attributes in process `syz.2.289'. [ 112.956100][ T5184] device syzkaller0 entered promiscuous mode [ 113.734568][ T5241] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 113.969627][ T5262] loop1: detected capacity change from 0 to 512 [ 113.986465][ T5263] raw_sendmsg: syz.3.321 forgot to set AF_INET. Fix it! [ 114.072167][ T5262] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 114.101428][ T5262] System zones: 1-12 [ 114.124197][ T5262] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.319: missing EA_INODE flag [ 114.138339][ T5262] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.319: error while reading EA inode 12 err=-117 [ 114.176787][ T5262] EXT4-fs (loop1): 1 orphan inode deleted [ 114.182649][ T5262] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 114.315890][ T5278] netlink: 2 bytes leftover after parsing attributes in process `syz.0.326'. [ 114.433408][ T5282] netlink: 4 bytes leftover after parsing attributes in process `syz.0.328'. [ 115.439004][ T5289] netlink: 224 bytes leftover after parsing attributes in process `syz.3.330'. [ 116.180351][ T5318] netlink: 24 bytes leftover after parsing attributes in process `syz.2.343'. [ 116.682001][ T5329] ip_tables: iptables: counters copy to user failed while replacing table [ 117.311797][ T5333] tipc: Started in network mode [ 117.333553][ T5333] tipc: Node identity 32d01e55670a, cluster identity 4711 [ 117.353101][ T5333] tipc: Enabled bearer , priority 0 [ 117.415455][ T5346] device syzkaller0 entered promiscuous mode [ 117.449534][ T5331] tipc: Resetting bearer [ 117.502545][ T5331] tipc: Disabling bearer [ 117.588328][ T5354] __nla_validate_parse: 2 callbacks suppressed [ 117.588342][ T5354] netlink: 12 bytes leftover after parsing attributes in process `syz.3.353'. [ 117.803135][ T5362] device syzkaller0 entered promiscuous mode [ 118.695159][ T5383] netlink: set zone limit has 8 unknown bytes [ 118.885231][ T5400] Cannot find set identified by id 0 to match [ 118.913186][ T5400] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 118.954442][ T5401] netlink: 12 bytes leftover after parsing attributes in process `syz.4.369'. [ 120.419402][ T5416] loop2: detected capacity change from 0 to 512 [ 120.770580][ T5416] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 120.879471][ T5423] device syzkaller0 entered promiscuous mode [ 121.034567][ T5434] netlink: 32 bytes leftover after parsing attributes in process `syz.0.384'. [ 121.116757][ T5436] netlink: 12 bytes leftover after parsing attributes in process `syz.0.386'. [ 121.125827][ T5436] netlink: del zone limit has 8 unknown bytes [ 122.521726][ T5450] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.529656][ T5450] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.042639][ T5450] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.091924][ T5450] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.595340][ T5450] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.604707][ T5450] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.613937][ T5450] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.623209][ T5450] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.757808][ T5459] netlink: 'syz.2.394': attribute type 12 has an invalid length. [ 123.771992][ T5459] netlink: 12 bytes leftover after parsing attributes in process `syz.2.394'. [ 123.781743][ T5457] netlink: 4 bytes leftover after parsing attributes in process `syz.1.392'. [ 123.798168][ T5457] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.838867][ T5450] syz.4.391 (5450) used greatest stack depth: 19888 bytes left [ 123.898470][ T5457] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.019121][ T5474] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 124.176795][ T5488] loop2: detected capacity change from 0 to 512 [ 124.318638][ T5488] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 125.875660][ T5532] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 127.001670][ T5556] loop3: detected capacity change from 0 to 512 [ 127.047628][ T5556] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 127.288039][ T5558] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input8 [ 127.496668][ T5571] IPv6: NLM_F_CREATE should be specified when creating new route [ 127.720573][ T5588] [ 127.722977][ T5588] ====================================================== [ 127.730083][ T5588] WARNING: possible circular locking dependency detected [ 127.737116][ T5588] syzkaller #0 Not tainted [ 127.741538][ T5588] ------------------------------------------------------ [ 127.748572][ T5588] syz.3.432/5588 is trying to acquire lock: [ 127.754484][ T5588] ffff88801fc9f350 (&ndev->req_lock){+.+.}-{3:3}, at: nci_start_poll+0x55c/0xd10 [ 127.763701][ T5588] [ 127.763701][ T5588] but task is already holding lock: [ 127.771095][ T5588] ffff88801fc985d8 (&genl_data->genl_data_mutex){+.+.}-{3:3}, at: nfc_genl_start_poll+0x1c9/0x340 [ 127.781758][ T5588] [ 127.781758][ T5588] which lock already depends on the new lock. [ 127.781758][ T5588] [ 127.792191][ T5588] [ 127.792191][ T5588] the existing dependency chain (in reverse order) is: [ 127.801233][ T5588] [ 127.801233][ T5588] -> #3 (&genl_data->genl_data_mutex){+.+.}-{3:3}: [ 127.810011][ T5588] __mutex_lock_common+0x1e5/0x2400 [ 127.815777][ T5588] mutex_lock_nested+0x17/0x20 [ 127.821103][ T5588] nfc_urelease_event_work+0x120/0x310 [ 127.827124][ T5588] process_one_work+0x867/0xff0 [ 127.832534][ T5588] worker_thread+0xad7/0x12a0 [ 127.834068][ T5596] device syzkaller0 entered promiscuous mode [ 127.837765][ T5588] kthread+0x42e/0x520 [ 127.837787][ T5588] ret_from_fork+0x1f/0x30 [ 127.837808][ T5588] [ 127.837808][ T5588] -> #2 (nfc_devlist_mutex){+.+.}-{3:3}: [ 127.861190][ T5588] __mutex_lock_common+0x1e5/0x2400 [ 127.866949][ T5588] mutex_lock_nested+0x17/0x20 [ 127.872263][ T5588] nfc_register_device+0x38/0x300 [ 127.877835][ T5588] nci_register_device+0x89f/0x9f0 [ 127.883490][ T5588] virtual_ncidev_open+0x55/0xc0 [ 127.888976][ T5588] misc_open+0x31f/0x390 [ 127.893768][ T5588] chrdev_open+0x585/0x5f0 [ 127.898741][ T5588] do_dentry_open+0x7f7/0xf90 [ 127.903968][ T5588] path_openat+0x2718/0x2fb0 [ 127.909122][ T5588] do_filp_open+0x1df/0x400 [ 127.914176][ T5588] do_sys_openat2+0x14b/0x500 [ 127.919390][ T5588] __x64_sys_openat+0x135/0x160 [ 127.924804][ T5588] do_syscall_64+0x4c/0xa0 [ 127.929816][ T5588] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 127.936271][ T5588] [ 127.936271][ T5588] -> #1 (nci_mutex){+.+.}-{3:3}: [ 127.943426][ T5588] __mutex_lock_common+0x1e5/0x2400 [ 127.949164][ T5588] mutex_lock_nested+0x17/0x20 [ 127.954481][ T5588] virtual_nci_close+0x13/0x40 [ 127.959778][ T5588] nci_dev_up+0x976/0xd90 [ 127.964669][ T5588] nfc_dev_up+0x15d/0x310 [ 127.969557][ T5588] nfc_genl_dev_up+0x85/0xd0 [ 127.974722][ T5588] genl_rcv_msg+0xd0b/0xfa0 [ 127.979847][ T5588] netlink_rcv_skb+0x1e9/0x430 [ 127.985316][ T5588] genl_rcv+0x24/0x40 [ 127.989868][ T5588] netlink_unicast+0x78f/0x940 [ 127.995163][ T5588] netlink_sendmsg+0x8ba/0xbe0 [ 128.000570][ T5588] ____sys_sendmsg+0x5be/0x8f0 [ 128.005863][ T5588] ___sys_sendmsg+0x236/0x2e0 [ 128.011072][ T5588] __se_sys_sendmsg+0x1b7/0x2a0 [ 128.016480][ T5588] do_syscall_64+0x4c/0xa0 [ 128.021428][ T5588] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 128.027853][ T5588] [ 128.027853][ T5588] -> #0 (&ndev->req_lock){+.+.}-{3:3}: [ 128.035590][ T5588] __lock_acquire+0x38f7/0x7d40 [ 128.040994][ T5588] lock_acquire+0x19f/0x400 [ 128.046056][ T5588] __mutex_lock_common+0x1e5/0x2400 [ 128.051963][ T5588] mutex_lock_nested+0x17/0x20 [ 128.057278][ T5588] nci_start_poll+0x55c/0xd10 [ 128.062488][ T5588] nfc_start_poll+0x141/0x2c0 [ 128.067707][ T5588] nfc_genl_start_poll+0x1d7/0x340 [ 128.073376][ T5588] genl_rcv_msg+0xd0b/0xfa0 [ 128.078451][ T5588] netlink_rcv_skb+0x1e9/0x430 [ 128.084081][ T5588] genl_rcv+0x24/0x40 [ 128.088663][ T5588] netlink_unicast+0x78f/0x940 [ 128.093998][ T5588] netlink_sendmsg+0x8ba/0xbe0 [ 128.099325][ T5588] ____sys_sendmsg+0x5be/0x8f0 [ 128.104749][ T5588] ___sys_sendmsg+0x236/0x2e0 [ 128.110029][ T5588] __se_sys_sendmsg+0x1b7/0x2a0 [ 128.115466][ T5588] do_syscall_64+0x4c/0xa0 [ 128.120426][ T5588] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 128.126874][ T5588] [ 128.126874][ T5588] other info that might help us debug this: [ 128.126874][ T5588] [ 128.137125][ T5588] Chain exists of: [ 128.137125][ T5588] &ndev->req_lock --> nfc_devlist_mutex --> &genl_data->genl_data_mutex [ 128.137125][ T5588] [ 128.151414][ T5588] Possible unsafe locking scenario: [ 128.151414][ T5588] [ 128.158867][ T5588] CPU0 CPU1 [ 128.164244][ T5588] ---- ---- [ 128.169618][ T5588] lock(&genl_data->genl_data_mutex); [ 128.175371][ T5588] lock(nfc_devlist_mutex); [ 128.182500][ T5588] lock(&genl_data->genl_data_mutex); [ 128.190509][ T5588] lock(&ndev->req_lock); [ 128.194944][ T5588] [ 128.194944][ T5588] *** DEADLOCK *** [ 128.194944][ T5588] [ 128.203136][ T5588] 4 locks held by syz.3.432/5588: [ 128.208277][ T5588] #0: ffffffff8e2c8cd0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x15/0x40 [ 128.216606][ T5588] #1: ffffffff8e2c8b28 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x161/0xfa0 [ 128.225587][ T5588] #2: ffff88801fc985d8 (&genl_data->genl_data_mutex){+.+.}-{3:3}, at: nfc_genl_start_poll+0x1c9/0x340 [ 128.236664][ T5588] #3: ffff88801fc98190 (&dev->mutex){....}-{3:3}, at: nfc_start_poll+0x4f/0x2c0 [ 128.245822][ T5588] [ 128.245822][ T5588] stack backtrace: [ 128.251763][ T5588] CPU: 1 PID: 5588 Comm: syz.3.432 Not tainted syzkaller #0 [ 128.259077][ T5588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 128.269274][ T5588] Call Trace: [ 128.272576][ T5588] [ 128.275552][ T5588] dump_stack_lvl+0x188/0x250 [ 128.280281][ T5588] ? load_image+0x410/0x410 [ 128.284833][ T5588] ? show_regs_print_info+0x20/0x20 [ 128.290091][ T5588] ? print_circular_bug+0x12b/0x1a0 [ 128.295308][ T5588] check_noncircular+0x2f8/0x400 [ 128.300283][ T5588] ? print_deadlock_bug+0x5d0/0x5d0 [ 128.305507][ T5588] ? lockdep_lock+0x15c/0x1f0 [ 128.310200][ T5588] ? mark_lock+0x94/0x320 [ 128.314563][ T5588] ? _find_first_zero_bit+0xd1/0xf0 [ 128.319805][ T5588] __lock_acquire+0x38f7/0x7d40 [ 128.324724][ T5588] ? slab_free_freelist_hook+0xec/0x170 [ 128.330300][ T5588] ? kfree+0xef/0x2a0 [ 128.334294][ T5588] ? nfc_llcp_build_gb+0x36d/0x440 [ 128.339473][ T5588] ? nfc_llcp_general_bytes+0xd5/0x240 [ 128.344976][ T5588] ? nfc_start_poll+0x141/0x2c0 [ 128.349903][ T5588] ? nfc_genl_start_poll+0x1d7/0x340 [ 128.355239][ T5588] ? verify_lock_unused+0x140/0x140 [ 128.360603][ T5588] ? netlink_unicast+0x78f/0x940 [ 128.365601][ T5588] ? netlink_sendmsg+0x8ba/0xbe0 [ 128.370680][ T5588] ? ____sys_sendmsg+0x5be/0x8f0 [ 128.375668][ T5588] ? ___sys_sendmsg+0x236/0x2e0 [ 128.380612][ T5588] ? __se_sys_sendmsg+0x1b7/0x2a0 [ 128.385682][ T5588] ? do_syscall_64+0x4c/0xa0 [ 128.390317][ T5588] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 128.396482][ T5588] lock_acquire+0x19f/0x400 [ 128.401033][ T5588] ? nci_start_poll+0x55c/0xd10 [ 128.406014][ T5588] ? __might_sleep+0xf0/0xf0 [ 128.410642][ T5588] ? read_lock_is_recursive+0x10/0x10 [ 128.416267][ T5588] ? slab_free_freelist_hook+0xec/0x170 [ 128.421987][ T5588] __mutex_lock_common+0x1e5/0x2400 [ 128.427230][ T5588] ? nci_start_poll+0x55c/0xd10 [ 128.432126][ T5588] ? nfc_llcp_build_gb+0x36d/0x440 [ 128.437277][ T5588] ? nci_start_poll+0x55c/0xd10 [ 128.442167][ T5588] ? nfc_llcp_general_bytes+0x240/0x240 [ 128.447786][ T5588] ? mutex_lock_io_nested+0x60/0x60 [ 128.453020][ T5588] ? nfc_llcp_local_get+0x15f/0x1e0 [ 128.458273][ T5588] ? nfc_llcp_general_bytes+0x141/0x240 [ 128.463832][ T5588] mutex_lock_nested+0x17/0x20 [ 128.468632][ T5588] nci_start_poll+0x55c/0xd10 [ 128.473331][ T5588] ? nci_dev_down+0x40/0x40 [ 128.477886][ T5588] ? __mutex_lock_common+0x435/0x2400 [ 128.484253][ T5588] ? klist_iter_exit+0xbc/0xf0 [ 128.489081][ T5588] ? class_find_device+0x232/0x290 [ 128.494220][ T5588] ? nfc_genl_start_poll+0x1c9/0x340 [ 128.499516][ T5588] ? nfc_get_device+0x82/0xd0 [ 128.504227][ T5588] ? nfc_release+0x2e0/0x2e0 [ 128.508834][ T5588] nfc_start_poll+0x141/0x2c0 [ 128.513535][ T5588] nfc_genl_start_poll+0x1d7/0x340 [ 128.518656][ T5588] genl_rcv_msg+0xd0b/0xfa0 [ 128.523221][ T5588] ? genl_bind+0x370/0x370 [ 128.527660][ T5588] ? verify_lock_unused+0x140/0x140 [ 128.532916][ T5588] ? verify_lock_unused+0x140/0x140 [ 128.538155][ T5588] ? nfc_genl_dev_down+0xd0/0xd0 [ 128.543219][ T5588] netlink_rcv_skb+0x1e9/0x430 [ 128.547998][ T5588] ? genl_bind+0x370/0x370 [ 128.552428][ T5588] ? netlink_ack+0xb10/0xb10 [ 128.557058][ T5588] ? down_read+0x1aa/0x2e0 [ 128.561494][ T5588] genl_rcv+0x24/0x40 [ 128.565503][ T5588] netlink_unicast+0x78f/0x940 [ 128.570296][ T5588] netlink_sendmsg+0x8ba/0xbe0 [ 128.575112][ T5588] ? netlink_getsockopt+0x570/0x570 [ 128.580358][ T5588] ? aa_sock_msg_perm+0x94/0x150 [ 128.585337][ T5588] ? apparmor_socket_sendmsg+0x88/0x230 [ 128.590893][ T5588] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 128.596232][ T5588] ? security_socket_sendmsg+0x7c/0xa0 [ 128.601713][ T5588] ? netlink_getsockopt+0x570/0x570 [ 128.607057][ T5588] ____sys_sendmsg+0x5be/0x8f0 [ 128.611843][ T5588] ? __sys_sendmsg_sock+0x30/0x30 [ 128.616912][ T5588] ? import_iovec+0x6f/0xa0 [ 128.621434][ T5588] ___sys_sendmsg+0x236/0x2e0 [ 128.626236][ T5588] ? __sys_sendmsg+0x290/0x290 [ 128.631043][ T5588] __se_sys_sendmsg+0x1b7/0x2a0 [ 128.635909][ T5588] ? __x64_sys_sendmsg+0x80/0x80 [ 128.640857][ T5588] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 128.646858][ T5588] ? lockdep_hardirqs_on+0x94/0x140 [ 128.652077][ T5588] do_syscall_64+0x4c/0xa0 [ 128.656556][ T5588] ? clear_bhb_loop+0x30/0x80 [ 128.661240][ T5588] ? clear_bhb_loop+0x30/0x80 [ 128.665928][ T5588] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 128.671867][ T5588] RIP: 0033:0x7fadc63a1559 [ 128.676292][ T5588] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.696011][ T5588] RSP: 002b:00007fadc45d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 128.704446][ T5588] RAX: ffffffffffffffda RBX: 00007fadc6628090 RCX: 00007fadc63a1559 [ 128.712465][ T5588] RDX: 0000000000008004 RSI: 0000200000000440 RDI: 0000000000000005 [ 128.720491][ T5588] RBP: 00007fadc6438b20 R08: 0000000000000000 R09: 0000000000000000 [ 128.728491][ T5588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.736620][ T5588] R13: 00007fadc6628128 R14: 00007fadc6628090 R15: 00007ffdc52ace28 [ 128.744621][ T5588] [ 130.503113][ T5588] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 130.511975][ T5588] nci: nci_start_poll: failed to set local general bytes [ 130.532685][ T5573] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 132.778742][ T1423] ieee802154 phy1 wpan1: encryption failed: -22