last executing test programs: 12.755843826s ago: executing program 3 (id=171): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000003c0)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffdfffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x81, 0xfffffffb, 0xb}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0xa}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x9, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x6, 0x8001, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0xfffffffe, 0x7, 0x4, 0x99, 0x4000009, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x3, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x7, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7ffffffc, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x50200523, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x4, 0x400001, 0xd, 0x1ff, 0xfffff068, 0x3, 0x429, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b1a, 0x9, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x4, 0x6, 0x0, 0x9, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x4, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x800, 0x1, 0x1, 0x0, 0x7, 0x196, 0x2, 0x6, 0x0, 0x0, 0x8, 0xc9cd, 0x7f, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0xfffffffc, 0x8001, 0x6, 0x6, 0x4, 0x5, 0xd, 0x1, 0x2, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0xfffffff5, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0x0, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x400, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x4, 0x9da, 0x4, 0x6, 0xea6, 0x3, 0x5, 0x3, 0x3, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0xf, 0x9, 0xffffffff, 0x5, 0x3, 0x1417, 0x82, 0x7f, 0x9, 0x1, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x2, 0xfffffffe, 0x3, 0xb, 0xfffffff7, 0x8, 0xf, 0xc57, 0x5, 0x2, 0x5, 0x8, 0xfffffffc, 0xf, 0xe, 0x1, 0x80000000, 0x5, 0x9, 0x6, 0x8000, 0x40000002, 0x1, 0xffffffff, 0x2, 0x5, 0x4, 0x2, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x43d, 0x1b8c, 0x14, 0x62, 0xc00, 0xa, 0x9, 0x3, 0x8, 0x10001, 0x295, 0x3, 0x9, 0x1, 0xb7e, 0x10001, 0x2, 0x7, 0x4, 0x1, 0x2, 0x103ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d5, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x7ff, 0x7fffffff, 0x80, 0x2, 0x4, 0x2, 0x6, 0x3, 0x270, 0x2, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xbe4, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x80000000, 0xd, 0x1, 0x9, 0xffe, 0x421, 0x3ff, 0x2, 0x2d, 0x7, 0x5, 0xfffffffc, 0xac, 0x7fff, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000e40)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000e80)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f0000000ec0)={&(0x7f0000000f00)=@xdp={0x2c, 0xdd86, r7, 0x3e}, 0x80, &(0x7f0000000f80)=[{&(0x7f0000000fc0)="80", 0x1}], 0x1}, 0x4) 1.278992998s ago: executing program 3 (id=185): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000009112bd000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000080)={'syztnl0\x00', r2, 0x40, 0x700, 0x40, 0x1, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x67, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000100)={'gretap0\x00', 0x0, 0x10, 0x80, 0x80000, 0x2, {{0x5, 0x4, 0x0, 0x4, 0x14, 0x0, 0x0, 0x10, 0x0, 0x0, @remote, @empty}}}}) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000280)={0xa, 0xe22}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x2, &(0x7f00000002c0)=0x9, 0x4) setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f0000000300)=0x10401, 0x4) bind$inet6(r4, &(0x7f0000000340)={0xa, 0xe22}, 0x1c) syz_emit_ethernet(0xd2, &(0x7f0000000380)=ANY=[@ANYBLOB="0180c2000000ffffffffffff86dd60000000009c1100fe8000000000000000000000000000bbff02000000000000000000000000000100000e22009c90"], 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001680)={'wlan0\x00'}) 1.025212744s ago: executing program 2 (id=191): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)={0x44, 0x9, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) 1.024613584s ago: executing program 3 (id=192): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd700003dcdf251400000008000300", @ANYRES32=r3, @ANYBLOB="050029000a"], 0x24}, 0x1, 0x0, 0x0, 0x4841}, 0x24000004) 963.975341ms ago: executing program 2 (id=194): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000880)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IE_ASSOC_RESP={0x18, 0xe, [@ext_channel_switch={0x1c, 0x4, {0x1, 0x6, 0x9d, 0x7}}, @gcr_ga={0xbd, 0x6, @broadcast}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x2, 0x1, 0xef}}]}]}, 0x34}}, 0x0) 963.673501ms ago: executing program 2 (id=197): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x44004) r1 = socket$nl_route(0x10, 0x3, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'ip_vti0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x12, &(0x7f00000007c0)=0x40000401, 0x4) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000006800e97802000000000000000a0000000000000008000500", @ANYRES32=r2], 0x20}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0) 936.780433ms ago: executing program 3 (id=198): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r0, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x10) 929.184634ms ago: executing program 2 (id=200): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) recvmsg(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000200)=""/133, 0x85}], 0x1}, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000e00)=[{&(0x7f0000000dc0)='?', 0x1}], 0x1) recvfrom(r0, &(0x7f0000001040)=""/230, 0xe6, 0x10000, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 851.315842ms ago: executing program 3 (id=202): r0 = syz_open_procfs$namespace(0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x5, 0x0, 0x6, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0xfde1, 0x66, 0x0, 0xb, 0x89, 0x0, @rand_addr=0x64010102, @broadcast}, "3297e3ba"}}, 0xfdef) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x4d, 0x0, 0x0) 739.692064ms ago: executing program 3 (id=210): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000ac0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000b00)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000b40)={0x1d, r1, 0x0, {0x0, 0xf0, 0x2}, 0x2}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)='.', 0x1a000}}, 0xfe) 451.693794ms ago: executing program 1 (id=222): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000150001000400000000000000fc00000000000000000000000000000100000000000000000000000000000000000000000004", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="feffffffffffffff01000000000000000300000000000000000000000000000000000000000031"], 0xb8}}, 0x4000040) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r2, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 415.667137ms ago: executing program 1 (id=223): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000600)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r3, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x28000) 402.396088ms ago: executing program 4 (id=224): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001ec0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NOTIFY_RADAR(r2, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002040)={&(0x7f0000002000)={0x1c, r0, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4040095}, 0x20000800) 348.094574ms ago: executing program 1 (id=225): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000003c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x5, 0x12, 0x0, &(0x7f0000000480)="259a53f271a76d2608004c6588a8e85e8864", 0x0, 0xd0e, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) 347.839424ms ago: executing program 4 (id=227): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000180)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000340)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 320.339547ms ago: executing program 0 (id=229): r0 = socket$kcm(0x2, 0x3, 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000005c0)=@filter={'filter\x00', 0xe, 0x4, 0x280, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x1e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'lo\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) sendmsg$inet(r0, &(0x7f00000008c0)={&(0x7f0000000900)={0x2, 0x4e20, @local}, 0x10, 0x0}, 0x0) 256.132184ms ago: executing program 4 (id=230): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x501e, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000080)="280320000a00140000007ef506be00000000000000000000000000143baa111f1f858ce632f47042195eb3cf545a41b6d78839980700e67bee78895e16f37fe8", 0xffa9, 0x400c010, &(0x7f00000000c0)={0x11, 0x3, r1, 0x1, 0xe5, 0x6, @random="76caa646ae4c"}, 0x14) readv(r0, &(0x7f0000001940)=[{&(0x7f0000000840)=""/4096, 0x1000}], 0x1) 255.878814ms ago: executing program 0 (id=231): openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$packet(0x11, 0xa, 0x300) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000540)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000580)=0x2, 0x4) syz_emit_ethernet(0x33, &(0x7f00000005c0)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x25, 0xff, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0x11, 0x0, @gue={{0x1, 0x1, 0x0, 0x6, 0x100, @void}, "021fae2ffe"}}}}}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x1) ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) 255.696294ms ago: executing program 1 (id=232): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@deltaction={0x14, 0x31, 0x200, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20040000) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001000)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r0, &(0x7f0000001100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 255.174344ms ago: executing program 1 (id=233): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x1002}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000500"/20, @ANYRES32=0x0, @ANYBLOB="01000000010000001400030073797a6b616c6c65723000000000000008000a00", @ANYRES32=r3], 0x3c}}, 0x0) write(r0, &(0x7f0000000500)="ffffffffffff0011223344554305000f3200180000eeff112233445500002233445500ff9000", 0x26) 240.710555ms ago: executing program 4 (id=234): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)={0x28, r2, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}]}, 0x28}}, 0x4000000) 233.164686ms ago: executing program 0 (id=235): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x58, r1, 0x121, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_KEYS={0x24, 0x51, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac0d}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "9e1f50cc3c"}]}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xf040}, 0x0) 160.162053ms ago: executing program 4 (id=236): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x3) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) syz_genetlink_get_family_id$ethtool(0x0, r1) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000500)={0x14, 0x0, 0x200, 0x70bd2a, 0x25dfdbff}, 0x14}}, 0x11) 160.030283ms ago: executing program 0 (id=237): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, r1, 0xb97534d5fe9704ef, 0x70bd29, 0x25dfdbfc, {{0x12}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x30}}, 0x0) 159.839963ms ago: executing program 4 (id=238): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x20a201, 0x0) close(r6) socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000580)={'syzkaller0\x00', @multicast}) sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, 0x0, 0x24004044) sendmsg$nl_route_sched(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newtfilter={0xb4, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x80, 0x2, [@TCA_MATCHALL_ACT={0x7c, 0x2, [@m_tunnel_key={0x78, 0x1, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @mcast2}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x8, 0x7, 0x7fff, 0x7}, 0x1}}]}, {0x32}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000700)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000740), 0x56) sendmsg$kcm(r5, &(0x7f0000000780)={&(0x7f00000007c0)=@xdp={0x2c, 0x0, r7, 0x36}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000880)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000008c0)="442ea407603a16ff", 0x300}], 0x2}, 0x20000085) 158.341794ms ago: executing program 0 (id=239): openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x8607, 0x3, 0xe, 0xa2}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000001600010a0000002200000000810000000400000008000a"], 0x20}, 0x1, 0x0, 0x0, 0x48007}, 0x8000) 138.024556ms ago: executing program 0 (id=240): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) accept4(r0, 0x0, 0x0, 0x80800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000080)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x1c, r4, 0x1, 0x123, 0x238, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}}, 0x48844) write$nci(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="7200050109a49bcc76d27eb4adb0fc2437"], 0x8) write$nci(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="500404"], 0x7) sendmsg$NFC_CMD_START_POLL(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x2c, r4, 0x1, 0x70bc2c, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x9a}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x60}]}, 0x2c}}, 0x0) write$nci(r1, &(0x7f0000000680)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x2}, 0x5) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 123.783397ms ago: executing program 1 (id=241): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b40)=@delchain={0x19c, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x1}, {0xb, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0x170, 0x2, [@TCA_BPF_ACT={0x16c, 0x1, [@m_skbmod={0xc8, 0x12, 0x0, 0x0, {{0xb}, {0x9c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x5, 0x2, 0x5, 0x5, 0x400}}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x6, 0x3, 0x20000000, 0x3, 0x9}, 0xf}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xf7e5}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ife={0xa0, 0xe, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @local}]}, {0x6a, 0x6, "46b7f724bbd0a03a2ce67cc3f75455f6dad8b7910df14f457f0b939aa1f7843f8d23ac707b39000000f6019a357f1e3aa59f5b676c14f95cbabb15b126b8551da200dd65ebbbd2a75a631c590b45847ef5d8f181757921e1eb401da3b319beb05069d36792ed"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x19c}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040011}, 0x10040004) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 158.88µs ago: executing program 2 (id=242): bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x3, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000050000000000000006000000852000006785030095"], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 0s ago: executing program 2 (id=243): socket$kcm(0x10, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000019c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001a00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001c80)=ANY=[@ANYBLOB="80000000", @ANYRES16=r2, @ANYBLOB="010028bd7000fbdbdf252100000008000300", @ANYRES32=r3, @ANYBLOB="0c002a00dd064122c63a81ae14002c800800000005000000080000000000010044002d800a00000001010101010100000a00000002020202020200000a"], 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x800) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.27' (ED25519) to the list of known hosts. [ 27.829173][ T4318] cgroup: Unknown subsys name 'net' [ 28.098326][ T4318] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 28.361961][ T4318] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 29.103132][ T4335] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 29.108760][ T4343] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 29.110147][ T4343] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 29.111766][ T4343] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 29.113124][ T4343] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 29.114500][ T4343] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 29.116161][ T4343] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 29.117547][ T4343] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 29.118803][ T4343] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 29.120191][ T4343] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 29.121645][ T4343] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 29.123917][ T4346] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 29.125796][ T4346] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 29.127146][ T4343] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 29.127576][ T4346] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 29.128966][ T4343] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 29.129888][ T4346] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 29.131002][ T4343] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 29.132231][ T4346] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 29.133773][ T4343] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 29.138242][ T4343] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 29.139786][ T4343] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 29.141333][ T4343] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 29.142859][ T4343] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 29.144310][ T4343] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 29.150744][ T4332] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 29.152503][ T4332] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 29.161072][ T4332] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 29.161582][ T4334] rxe_eth0 speed is unknown, defaulting to 1000 [ 29.163747][ T4334] rxe_eth0 speed is unknown, defaulting to 1000 [ 29.165252][ T4334] rxe_eth0 speed is unknown, defaulting to 1000 [ 29.177147][ T4347] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 29.177916][ T4336] rdma_rxe: rxe_register_device failed with error -23 [ 29.179984][ T4336] rdma_rxe: failed to add rxe_eth0 [ 29.181208][ T4347] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 29.217770][ T4334] infiniband rxe0: set active [ 29.219055][ T1969] rxe_eth0 speed is unknown, defaulting to 1000 [ 29.222589][ T4334] infiniband rxe0: added rxe_eth0 [ 29.231084][ T4330] rdma_rxe: already configured on rxe_eth0 [ 29.235121][ T4331] rdma_rxe: already configured on rxe_eth0 [ 29.246453][ T4334] RDS/IB: rxe0: added [ 29.247312][ T4334] smc: adding ib device rxe0 with port count 1 [ 29.248326][ T4334] smc: ib device rxe0 port 1 has pnetid [ 29.249607][ T7] rxe_eth0 speed is unknown, defaulting to 1000 [ 29.252193][ T4330] rxe_eth0 speed is unknown, defaulting to 1000 [ 29.284338][ T4331] rxe_eth0 speed is unknown, defaulting to 1000 [ 29.325716][ T4340] rxe_eth0 speed is unknown, defaulting to 1000 [ 29.332488][ T4336] chnl_net:caif_netlink_parms(): no params data found [ 29.387317][ T4334] rxe_eth0 speed is unknown, defaulting to 1000 [ 29.396082][ T4336] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.397474][ T4336] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.399594][ T4336] device bridge_slave_0 entered promiscuous mode [ 29.407332][ T4336] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.408641][ T4336] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.410243][ T4336] device bridge_slave_1 entered promiscuous mode [ 29.451041][ T4336] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.453695][ T4336] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.458486][ T4334] rxe_eth0 speed is unknown, defaulting to 1000 [ 29.489587][ T4336] team0: Port device team_slave_0 added [ 29.491375][ T4336] team0: Port device team_slave_1 added [ 29.497495][ T4336] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.498793][ T4336] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.503608][ T4336] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.524795][ T4336] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.526233][ T4336] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.530460][ T4336] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.538719][ T4340] chnl_net:caif_netlink_parms(): no params data found [ 29.540851][ T4331] chnl_net:caif_netlink_parms(): no params data found [ 29.556946][ T4330] chnl_net:caif_netlink_parms(): no params data found [ 29.617416][ T4336] device hsr_slave_0 entered promiscuous mode [ 29.655655][ T4336] device hsr_slave_1 entered promiscuous mode [ 29.695821][ T4340] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.697254][ T4340] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.698889][ T4340] device bridge_slave_0 entered promiscuous mode [ 29.707236][ T4340] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.708585][ T4340] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.710211][ T4340] device bridge_slave_1 entered promiscuous mode [ 29.724608][ T4340] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.739726][ T4340] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.741440][ T4331] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.742756][ T4331] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.744288][ T4331] device bridge_slave_0 entered promiscuous mode [ 29.746299][ T4330] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.747497][ T4330] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.748981][ T4330] device bridge_slave_0 entered promiscuous mode [ 29.754094][ T3996] infiniband rxe0: set active [ 29.766088][ T4330] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.767378][ T4330] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.769150][ T4330] device bridge_slave_1 entered promiscuous mode [ 29.775069][ T4334] chnl_net:caif_netlink_parms(): no params data found [ 29.778706][ T3903] rxe_eth0 speed is unknown, defaulting to 1000 [ 29.779868][ T4331] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.781179][ T4331] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.782854][ T4331] device bridge_slave_1 entered promiscuous mode [ 29.799271][ T4340] team0: Port device team_slave_0 added [ 29.802595][ T4340] team0: Port device team_slave_1 added [ 29.807402][ T4330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.815062][ T4331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.818229][ T4330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.824256][ T4340] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.825636][ T4340] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.830089][ T4340] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.834893][ T4340] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.837885][ T4340] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.842003][ T4340] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.844771][ T4331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.872842][ T4334] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.874184][ T4334] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.878196][ T4334] device bridge_slave_0 entered promiscuous mode [ 29.881134][ T4330] team0: Port device team_slave_0 added [ 29.886943][ T4331] team0: Port device team_slave_0 added [ 29.888609][ T4330] team0: Port device team_slave_1 added [ 29.893534][ T4334] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.894919][ T4334] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.899747][ T4334] device bridge_slave_1 entered promiscuous mode [ 29.927002][ T4340] device hsr_slave_0 entered promiscuous mode [ 29.965785][ T4340] device hsr_slave_1 entered promiscuous mode [ 30.007893][ T4340] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.009261][ T4340] Cannot create hsr debugfs directory [ 30.010535][ T4330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.011741][ T4330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.016354][ T4330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.018965][ T4331] team0: Port device team_slave_1 added [ 30.028054][ T4334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.029913][ T4330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.031173][ T4330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.035730][ T4330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.052394][ T4334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.061994][ T4331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.063209][ T4331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.068159][ T4331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.076310][ T4334] team0: Port device team_slave_0 added [ 30.078062][ T4331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.079207][ T4331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.083439][ T4331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.090478][ T4334] team0: Port device team_slave_1 added [ 30.126614][ T4330] device hsr_slave_0 entered promiscuous mode [ 30.165735][ T4330] device hsr_slave_1 entered promiscuous mode [ 30.205544][ T4330] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.206953][ T4330] Cannot create hsr debugfs directory [ 30.214948][ T4334] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.216860][ T4334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.221200][ T4334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.223806][ T4334] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.225104][ T4334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.230426][ T4334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.238845][ T4336] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.296728][ T4336] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.346679][ T4336] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.426647][ T4331] device hsr_slave_0 entered promiscuous mode [ 30.475769][ T4331] device hsr_slave_1 entered promiscuous mode [ 30.515572][ T4331] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.516928][ T4331] Cannot create hsr debugfs directory [ 30.535064][ T4336] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.647708][ T4334] device hsr_slave_0 entered promiscuous mode [ 30.695722][ T4334] device hsr_slave_1 entered promiscuous mode [ 30.745645][ T4334] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.747051][ T4334] Cannot create hsr debugfs directory [ 30.774185][ T4340] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.816962][ T4340] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.873882][ T4340] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.916379][ T4340] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.971818][ T4331] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.012491][ T4331] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.047612][ T4331] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.094667][ T4331] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.171413][ T4330] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.197097][ T4330] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.206062][ T4342] Bluetooth: hci1: command 0x0409 tx timeout [ 31.206164][ T4347] Bluetooth: hci4: command 0x0409 tx timeout [ 31.207274][ T4342] Bluetooth: hci0: command 0x0409 tx timeout [ 31.208255][ T4347] Bluetooth: hci2: command 0x0409 tx timeout [ 31.209324][ T4342] Bluetooth: hci3: command 0x0409 tx timeout [ 31.249782][ T4330] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.309999][ T4330] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.353205][ T4334] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.394396][ T4334] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.441147][ T4336] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.442419][ T4334] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.489108][ T4334] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.539958][ T4331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.552805][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 31.554949][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.558148][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 31.559874][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.563409][ T4340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.565216][ T4336] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.569940][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 31.571735][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.573411][ T1588] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.574643][ T1588] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.577474][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 31.579810][ T4331] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.584053][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 31.585933][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 31.588838][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.589997][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.597421][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 31.599573][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 31.601762][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.603388][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.604721][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.607953][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 31.610985][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 31.612779][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 31.614376][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.615645][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.620949][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 31.622512][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.625405][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 31.631863][ T4340] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.637063][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 31.638981][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 31.640719][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 31.642273][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.643887][ T1588] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.645209][ T1588] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.647965][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 31.649573][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 31.651202][ T1588] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.652491][ T1588] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.655242][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 31.657617][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 31.659207][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 31.661121][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 31.668307][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 31.669942][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 31.676255][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 31.678128][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 31.682352][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 31.683938][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 31.686438][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 31.688505][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 31.690310][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 31.699461][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 31.701562][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 31.703281][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 31.705173][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 31.707124][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 31.708993][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 31.710757][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 31.712636][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 31.718158][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 31.720823][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 31.722348][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 31.723882][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 31.726697][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 31.728448][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 31.736422][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 31.738659][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 31.740453][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 31.743631][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 31.745076][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 31.753076][ T4330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.764441][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 31.768786][ T4334] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.770708][ T1663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 31.772337][ T1663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.781372][ T4330] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.783039][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 31.784659][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.794199][ T4334] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.798321][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 31.800023][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.801664][ T4422] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.802945][ T4422] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.804593][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 31.812712][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 31.814456][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.816369][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.817621][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.819519][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 31.821943][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 31.824235][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 31.828817][ T4422] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.830092][ T4422] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.837620][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 31.839592][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 31.854707][ T4422] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.856143][ T4422] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.859070][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 31.860892][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 31.871195][ T4336] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.873105][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 31.874991][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 31.878082][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 31.880631][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 31.882290][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 31.883624][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 31.885050][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 31.887009][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 31.888764][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 31.892178][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 31.893861][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 31.900426][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 31.902367][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 31.904471][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 31.915088][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 31.918451][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 31.920203][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 31.921911][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 31.926851][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 31.928179][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 31.934876][ T4331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.937772][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 31.939549][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 31.941269][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 31.942858][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 31.944528][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 31.947779][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 31.949866][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 31.958241][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 31.960636][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 31.963768][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 31.970756][ T4336] device veth0_vlan entered promiscuous mode [ 31.973986][ T4336] device veth1_vlan entered promiscuous mode [ 31.979756][ T4340] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.983054][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 31.984761][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 31.987965][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 31.989585][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 31.991570][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 31.993244][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 31.994955][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.028676][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.030407][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.032007][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.033853][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.035248][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.041683][ T4331] device veth0_vlan entered promiscuous mode [ 32.043947][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.046452][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.049948][ T4336] device veth0_macvtap entered promiscuous mode [ 32.054446][ T4331] device veth1_vlan entered promiscuous mode [ 32.057011][ T4336] device veth1_macvtap entered promiscuous mode [ 32.082062][ T4336] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.084356][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.086104][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.087581][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.089253][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.090759][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.092287][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.101669][ T4336] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.103430][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.105267][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.109661][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.111799][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.120159][ T4331] device veth0_macvtap entered promiscuous mode [ 32.127134][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.128854][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.130197][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.132619][ T4331] device veth1_macvtap entered promiscuous mode [ 32.137156][ T4336] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.138659][ T4336] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.140353][ T4336] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.141790][ T4336] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.148625][ T4334] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.162973][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.164934][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.169113][ T4331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.173313][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.175124][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.178028][ T4331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.179512][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.181190][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.182859][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.184637][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.186544][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.187871][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.189422][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.204133][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.206425][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.209548][ T4331] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.211106][ T4331] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.212670][ T4331] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.214341][ T4331] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.219637][ T4330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.230243][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.231603][ T4340] device veth0_vlan entered promiscuous mode [ 32.231652][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.234685][ T4340] device veth1_vlan entered promiscuous mode [ 32.242608][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 32.244165][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.247965][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.249606][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.251188][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.252829][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.254272][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.263219][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.264842][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.269334][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.271193][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.288994][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.290819][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.297095][ T4340] device veth0_macvtap entered promiscuous mode [ 32.301093][ T4330] device veth0_vlan entered promiscuous mode [ 32.303842][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.305251][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.310250][ T4340] device veth1_macvtap entered promiscuous mode [ 32.313951][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.316671][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.318265][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.319914][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.321586][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 32.323220][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.324711][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.333902][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.335694][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.337651][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.339222][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.341634][ T4330] device veth1_vlan entered promiscuous mode [ 32.356287][ T4334] device veth0_vlan entered promiscuous mode [ 32.360188][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.361605][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.374321][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.376310][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.377969][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 32.385086][ T4334] device veth1_vlan entered promiscuous mode [ 32.388637][ T4340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.390488][ T4340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.392171][ T4340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.393961][ T4340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.398992][ T4340] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.405126][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.406980][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.408779][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.410450][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.412168][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.418770][ T4330] device veth0_macvtap entered promiscuous mode [ 32.421285][ T4340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.423141][ T4340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.425984][ T4340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.428253][ T4340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.431253][ T4340] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.436056][ T4422] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.437367][ T4422] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.437386][ T4330] device veth1_macvtap entered promiscuous mode [ 32.441714][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 32.443372][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.445168][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.449741][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.451932][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.454583][ T4340] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.456821][ T4340] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.458318][ T4340] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.459824][ T4340] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.496174][ T4422] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.497677][ T4422] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.499282][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 32.510170][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.512108][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.515451][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.517833][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.519850][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.521728][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.524365][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.539118][ T4334] device veth0_macvtap entered promiscuous mode [ 32.541026][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.542521][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.544117][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.546413][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.549053][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.551764][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.557447][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.559385][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.561291][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.563205][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.565089][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.590196][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.811018][ T4452] loop0: detected capacity change from 0 to 2048 [ 32.891989][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.918383][ T4455] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 32.924846][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.926884][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.934405][ T4334] device veth1_macvtap entered promiscuous mode [ 32.956788][ T4330] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.958626][ T4330] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.960286][ T4330] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.961920][ T4330] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.974432][ T4454] rxe_eth0 speed is unknown, defaulting to 1000 [ 32.989602][ T4422] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.991115][ T4422] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.992534][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.010457][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.012668][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.014630][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.019156][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.020912][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.022682][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.024419][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.026625][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.029688][ T4334] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.037889][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.039734][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.044336][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.049215][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.051118][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.053211][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.056065][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.058237][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.060347][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.062536][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.065242][ T4334] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.084331][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.086450][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.109245][ T4334] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.114524][ T4334] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.116902][ T4334] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.118773][ T4334] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.121997][ T4462] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 33.124930][ T4460] autofs4:pid:4460:autofs_fill_super: called with bogus options [ 33.131963][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.133327][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.140718][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.141670][ T4462] loop3: detected capacity change from 0 to 512 [ 33.180993][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.182598][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.192537][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.260155][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.261705][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.263259][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.263668][ T4465] loop1: detected capacity change from 0 to 512 [ 33.273816][ T4460] loop4: detected capacity change from 0 to 32768 [ 33.295655][ T4342] Bluetooth: hci2: command 0x041b tx timeout [ 33.296853][ T4342] Bluetooth: hci0: command 0x041b tx timeout [ 33.297935][ T4342] Bluetooth: hci4: command 0x041b tx timeout [ 33.299037][ T4342] Bluetooth: hci1: command 0x041b tx timeout [ 33.300113][ T4342] Bluetooth: hci3: command 0x041b tx timeout [ 33.316199][ T4460] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by syz.4.5 (4460) [ 33.333520][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.340523][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.341932][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.357098][ T4460] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 33.359043][ T4460] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 33.362421][ T4460] BTRFS info (device loop4): enabling auto defrag [ 33.363617][ T4460] BTRFS info (device loop4): force clearing of disk cache [ 33.365051][ T4460] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 33.371449][ T4465] EXT4-fs error (device loop1): ext4_orphan_get:1435: comm syz.1.2: bad orphan inode 13 [ 33.373610][ T4465] ext4_test_bit(bit=12, block=4) = 1 [ 33.374598][ T4465] is_bad_inode(inode)=0 [ 33.375348][ T4465] NEXT_ORPHAN(inode)=0 [ 33.386345][ T4465] max_ino=32 [ 33.386996][ T4465] i_nlink=1 [ 33.387610][ T4465] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 33.397754][ T4460] BTRFS info (device loop4): use zstd compression, level 3 [ 33.399104][ T4460] BTRFS info (device loop4): using free space tree [ 33.635356][ T4483] loop2: detected capacity change from 0 to 2048 [ 33.899321][ T4482] EXT4-fs warning (device loop1): dx_probe:845: inode #2: comm syz.1.2: Hash code is SIPHASH, but hash not in dirent [ 33.902075][ T4482] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.2: Corrupt directory, running e2fsck is recommended [ 33.905331][ T4482] EXT4-fs warning (device loop1): dx_probe:845: inode #2: comm syz.1.2: Hash code is SIPHASH, but hash not in dirent [ 33.907678][ T4482] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.2: Corrupt directory, running e2fsck is recommended [ 33.909997][ T4482] EXT4-fs error (device loop1): ext4_find_dest_de:2117: inode #2: block 13: comm syz.1.2: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=0, rec_len=6, size=1024 fake=0 [ 34.035941][ T4482] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 34.081538][ T4472] ip_tables: iptables: counters copy to user failed while replacing table [ 34.095293][ T4487] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 34.187622][ T4330] EXT4-fs (loop1): unmounting filesystem. [ 34.205621][ T4460] BTRFS info (device loop4): enabling ssd optimizations [ 34.210132][ T4460] BTRFS info (device loop4): rebuilding free space tree [ 34.280772][ T4472] Zero length message leads to an empty skb [ 34.397910][ T4505] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 34.900649][ T4510] loop0: detected capacity change from 0 to 2048 [ 35.098469][ T4514] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 35.106225][ T4460] BTRFS info (device loop4): balance: start -dconvert=raid0 -mconvert=raid0 [ 35.117526][ T4460] BTRFS info (device loop4): relocating block group 6881280 flags data|metadata [ 35.144100][ T4460] BTRFS info (device loop4): relocating block group 5242880 flags data|metadata [ 35.164031][ T4460] BTRFS info (device loop4): found 6 extents, stage: move data extents [ 35.174227][ T4460] BTRFS info (device loop4): found 1 extents, stage: update data pointers [ 35.183531][ T4460] BTRFS info (device loop4): balance: ended with status: 0 [ 35.260029][ T4340] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 35.366392][ T4342] Bluetooth: hci3: command 0x040f tx timeout [ 35.367545][ T4342] Bluetooth: hci1: command 0x040f tx timeout [ 35.368730][ T4342] Bluetooth: hci4: command 0x040f tx timeout [ 35.369789][ T4342] Bluetooth: hci0: command 0x040f tx timeout [ 35.370871][ T4342] Bluetooth: hci2: command 0x040f tx timeout [ 35.382976][ T4517] loop3: detected capacity change from 0 to 32768 [ 35.486811][ T4532] loop0: detected capacity change from 0 to 2048 [ 35.693213][ T4534] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 35.875568][ T4486] atkbd serio0: keyboard reset failed on [ 35.883985][ T4537] loop4: detected capacity change from 0 to 32768 [ 36.102972][ T4541] FAULT_INJECTION: forcing a failure. [ 36.102972][ T4541] name failslab, interval 1, probability 0, space 0, times 1 [ 36.105650][ T4541] CPU: 1 PID: 4541 Comm: syz.2.16 Not tainted syzkaller #0 [ 36.106898][ T4541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 36.108638][ T4541] Call trace: [ 36.109226][ T4541] dump_backtrace+0x1c4/0x1f0 [ 36.110130][ T4541] show_stack+0x2c/0x3c [ 36.110904][ T4541] __dump_stack+0x30/0x40 [ 36.111738][ T4541] dump_stack_lvl+0xf4/0x15c [ 36.112595][ T4541] dump_stack+0x1c/0x5c [ 36.113477][ T4541] should_fail_ex+0x3cc/0x524 [ 36.114463][ T4541] __should_failslab+0xc0/0x11c [ 36.115415][ T4541] should_failslab+0x10/0x28 [ 36.116239][ T4541] __kmem_cache_alloc_node+0x7c/0x318 [ 36.117223][ T4541] __kmalloc_node+0xc8/0x184 [ 36.118065][ T4541] kvmalloc_node+0x88/0x1d4 [ 36.118877][ T4541] traverse+0xe0/0x4c4 [ 36.119625][ T4541] seq_read_iter+0xb5c/0xc24 [ 36.120419][ T4541] proc_reg_read_iter+0x180/0x2a8 [ 36.121315][ T4541] vfs_read+0x3cc/0x7b8 [ 36.122087][ T4541] __arm64_sys_pread64+0x178/0x210 [ 36.123005][ T4541] invoke_syscall+0x98/0x290 [ 36.123831][ T4541] el0_svc_common+0x13c/0x258 [ 36.124648][ T4541] do_el0_svc+0x5c/0x134 [ 36.125393][ T4541] el0_svc+0x58/0x12c [ 36.126087][ T4541] el0t_64_sync_handler+0x84/0xf0 [ 36.126967][ T4541] el0t_64_sync+0x18c/0x190 [ 36.414912][ T4544] loop0: detected capacity change from 0 to 2048 [ 36.420241][ T4546] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 36.513821][ T4550] EXT4-fs error (device loop3): ext4_orphan_get:1435: comm syz.3.18: bad orphan inode 13 [ 36.516028][ T4550] ext4_test_bit(bit=12, block=4) = 1 [ 36.516999][ T4550] is_bad_inode(inode)=0 [ 36.517760][ T4550] NEXT_ORPHAN(inode)=0 [ 36.518454][ T4550] max_ino=32 [ 36.519087][ T4550] i_nlink=1 [ 36.519766][ T4550] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 36.643717][ T4557] EXT4-fs warning (device loop3): dx_probe:845: inode #2: comm syz.3.18: Hash code is SIPHASH, but hash not in dirent [ 36.645995][ T4557] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.18: Corrupt directory, running e2fsck is recommended [ 36.648814][ T4557] EXT4-fs warning (device loop3): dx_probe:845: inode #2: comm syz.3.18: Hash code is SIPHASH, but hash not in dirent [ 36.651194][ T4557] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.18: Corrupt directory, running e2fsck is recommended [ 36.653680][ T4557] EXT4-fs error (device loop3): ext4_find_dest_de:2117: inode #2: block 13: comm syz.3.18: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=0, rec_len=6, size=1024 fake=0 [ 36.694299][ T4557] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 37.189099][ T4575] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 37.220806][ T4573] NILFS (loop0): nilfs_sufile_do_free: segment 9 is already clean [ 37.253759][ T4578] Bluetooth: MGMT ver 1.22 [ 37.409097][ T4331] EXT4-fs (loop3): unmounting filesystem. [ 37.445585][ T48] Bluetooth: hci2: command 0x0419 tx timeout [ 37.446057][ T4342] Bluetooth: hci0: command 0x0419 tx timeout [ 37.446823][ T48] Bluetooth: hci4: command 0x0419 tx timeout [ 37.449063][ T48] Bluetooth: hci1: command 0x0419 tx timeout [ 37.449802][ T4347] Bluetooth: hci3: command 0x0419 tx timeout [ 37.553754][ T4598] netlink: 14 bytes leftover after parsing attributes in process `syz.3.33'. [ 37.659593][ T4603] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 37.874372][ T4616] netlink: 5 bytes leftover after parsing attributes in process `syz.0.39'. [ 37.887613][ T4618] bridge0: port 3(veth0) entered blocking state [ 37.888956][ T4618] bridge0: port 3(veth0) entered disabled state [ 37.890786][ T4618] device veth0 entered promiscuous mode [ 37.892104][ T4618] bridge0: port 3(veth0) entered blocking state [ 37.893365][ T4618] bridge0: port 3(veth0) entered forwarding state [ 37.942436][ T4622] Set syz0 is full, maxelem 2 reached [ 38.078185][ T4631] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 39.526015][ T4343] Bluetooth: hci0: command 0x2016 tx timeout [ 40.433078][ T4584] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 40.482725][ T4644] netlink: 20 bytes leftover after parsing attributes in process `syz.0.50'. [ 40.555610][ T4655] netlink: 4 bytes leftover after parsing attributes in process `syz.3.56'. [ 40.874809][ T4676] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 40.880291][ T4676] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 40.882066][ T4676] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 41.135791][ T4689] TC_ACT_REPEAT abuse ? [ 41.146325][ T4691] Bluetooth: MGMT ver 1.22 [ 41.243107][ T4703] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.249887][ T4705] netlink: 8 bytes leftover after parsing attributes in process `syz.1.78'. [ 41.302434][ T4713] netlink: 8 bytes leftover after parsing attributes in process `syz.3.81'. [ 41.311923][ T4711] netlink: 8 bytes leftover after parsing attributes in process `syz.0.82'. [ 41.362410][ T4711] netlink: 4 bytes leftover after parsing attributes in process `syz.0.82'. [ 41.553689][ T4746] bond0: Caught tx_queue_len zero misconfig [ 41.605547][ T4342] Bluetooth: hci0: command 0x0406 tx timeout [ 41.737077][ T4748] device syzkaller0 entered promiscuous mode [ 41.760920][ T4757] ip_tables: iptables: counters copy to user failed while replacing table [ 41.803127][ T4761] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 41.882833][ T4768] device syzkaller0 entered promiscuous mode [ 41.917305][ C1] vcan0: j1939_tp_rxtimer: 0x00000000270bef02: rx timeout, send abort [ 41.919654][ C1] vcan0: j1939_xtp_rx_abort_one: 0x00000000270bef02: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 41.926747][ T4768] tipc: Started in network mode [ 41.927672][ T4768] tipc: Node identity f68eed168105, cluster identity 4711 [ 41.929027][ T4768] tipc: Enabled bearer , priority 0 [ 41.931824][ T4767] tipc: Resetting bearer [ 42.046635][ T4767] tipc: Disabling bearer [ 42.073535][ T4463] rxe_eth0 speed is unknown, defaulting to 1000 [ 42.157704][ T4804] netlink: 4 bytes leftover after parsing attributes in process `syz.2.115'. [ 42.274756][ T4825] device syzkaller0 entered promiscuous mode [ 42.380476][ T4829] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 42.421698][ T4842] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 42.455791][ T4842] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 42.460910][ T4842] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 42.574936][ T4867] Unsupported ieee802154 address type: 0 [ 42.635891][ T4873] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 42.743519][ T4889] 8021q: adding VLAN 0 to HW filter on device bond1 [ 42.751194][ T4889] device bond_slave_0 entered promiscuous mode [ 42.752451][ T4889] device bond_slave_1 entered promiscuous mode [ 42.754566][ T4889] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 42.758366][ T4889] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 42.765325][ T4889] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 42.869373][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 43.205585][ T4342] Bluetooth: hci3: command 0x0c20 tx timeout [ 43.708919][ T4967] device syzkaller0 entered promiscuous mode [ 43.740151][ T4993] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 43.766155][ T4995] netlink: 12 bytes leftover after parsing attributes in process `syz.2.180'. [ 46.567388][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 54.609441][ T4997] device vlan2 entered promiscuous mode [ 54.611030][ T4998] netlink: 4 bytes leftover after parsing attributes in process `syz.1.181'. [ 54.612806][ T4998] device hsr_slave_0 left promiscuous mode [ 54.880237][ T5016] netlink: 88 bytes leftover after parsing attributes in process `syz.4.187'. [ 55.061835][ T5047] device syzkaller1 entered promiscuous mode [ 55.064645][ T5051] netlink: 'syz.1.204': attribute type 10 has an invalid length. [ 55.077331][ T5051] team0: Port device netdevsim3 added [ 55.351668][ T5081] ksmbd: Unknown IPC event: 4, ignore. [ 55.397236][ T5089] syz.4.217 uses obsolete (PF_INET,SOCK_PACKET) [ 55.490836][ T5101] netlink: 'syz.0.221': attribute type 1 has an invalid length. [ 55.501553][ T5101] bond1: (slave geneve2): Error -99 calling set_mac_address [ 55.621829][ T5121] ip_tables: iptables: counters copy to user failed while replacing table [ 55.703362][ T5129] batman_adv: batadv0: Adding interface: syzkaller0 [ 55.704634][ T5129] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.712642][ T5129] batman_adv: batadv0: Interface activated: syzkaller0 [ 55.715209][ T5128] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 55.757086][ T5128] batman_adv: batadv0: Removing interface: syzkaller0 [ 55.771756][ T5139] device syzkaller0 entered promiscuous mode [ 55.774891][ T5139] netlink: 28 bytes leftover after parsing attributes in process `syz.4.238'. [ 55.776650][ T5139] netlink: 28 bytes leftover after parsing attributes in process `syz.4.238'. [ 55.927089][ T5150] [ 55.927668][ T5150] ====================================================== [ 55.929066][ T5150] WARNING: possible circular locking dependency detected [ 55.930438][ T5150] syzkaller #0 Not tainted [ 55.931268][ T5150] ------------------------------------------------------ [ 55.932559][ T5150] syz.0.240/5150 is trying to acquire lock: [ 55.933662][ T5150] ffff0000f6739350 (&ndev->req_lock){+.+.}-{3:3}, at: nci_start_poll+0x450/0xadc [ 55.935392][ T5150] [ 55.935392][ T5150] but task is already holding lock: [ 55.936694][ T5150] ffff0000f673b528 (&genl_data->genl_data_mutex){+.+.}-{3:3}, at: nfc_genl_start_poll+0x1a0/0x2f4 [ 55.938622][ T5150] [ 55.938622][ T5150] which lock already depends on the new lock. [ 55.938622][ T5150] [ 55.940515][ T5150] [ 55.940515][ T5150] the existing dependency chain (in reverse order) is: [ 55.942160][ T5150] [ 55.942160][ T5150] -> #3 (&genl_data->genl_data_mutex){+.+.}-{3:3}: [ 55.943785][ T5150] __mutex_lock_common+0x1a0/0x1f3c [ 55.944970][ T5150] mutex_lock_nested+0x38/0x44 [ 55.946024][ T5150] nfc_urelease_event_work+0x108/0x2b8 [ 55.947250][ T5150] process_one_work+0x7e4/0x13bc [ 55.948300][ T5150] worker_thread+0x8cc/0xfe8 [ 55.949297][ T5150] kthread+0x254/0x2e0 [ 55.950135][ T5150] ret_from_fork+0x10/0x20 [ 55.951029][ T5150] [ 55.951029][ T5150] -> #2 (nfc_devlist_mutex){+.+.}-{3:3}: [ 55.952476][ T5150] __mutex_lock_common+0x1a0/0x1f3c [ 55.953507][ T5150] mutex_lock_nested+0x38/0x44 [ 55.954470][ T5150] nfc_register_device+0x48/0x300 [ 55.955444][ T5150] nci_register_device+0x6b8/0x7e4 [ 55.956462][ T5150] virtual_ncidev_open+0x6c/0xd8 [ 55.957599][ T5150] misc_open+0x310/0x388 [ 55.958546][ T5150] chrdev_open+0x3d0/0x51c [ 55.959542][ T5150] do_dentry_open+0x738/0xf8c [ 55.960583][ T5150] vfs_open+0x7c/0x90 [ 55.961442][ T5150] path_openat+0x1fc0/0x27a0 [ 55.962402][ T5150] do_filp_open+0x198/0x38c [ 55.963370][ T5150] do_sys_openat2+0x134/0x3fc [ 55.964292][ T5150] __arm64_sys_openat+0x11c/0x150 [ 55.965297][ T5150] invoke_syscall+0x98/0x290 [ 55.966357][ T5150] el0_svc_common+0x13c/0x258 [ 55.967433][ T5150] do_el0_svc+0x5c/0x134 [ 55.968402][ T5150] el0_svc+0x58/0x12c [ 55.969278][ T5150] el0t_64_sync_handler+0x84/0xf0 [ 55.970304][ T5150] el0t_64_sync+0x18c/0x190 [ 55.971217][ T5150] [ 55.971217][ T5150] -> #1 (nci_mutex){+.+.}-{3:3}: [ 55.972487][ T5150] __mutex_lock_common+0x1a0/0x1f3c [ 55.973515][ T5150] mutex_lock_nested+0x38/0x44 [ 55.974446][ T5150] virtual_nci_close+0x28/0x58 [ 55.975411][ T5150] nci_dev_up+0x704/0xaa0 [ 55.976276][ T5150] nfc_dev_up+0x138/0x2e0 [ 55.977117][ T5150] nfc_genl_dev_up+0x98/0xdc [ 55.978038][ T5150] genl_family_rcv_msg_doit+0x210/0x308 [ 55.979114][ T5150] genl_rcv_msg+0x424/0x600 [ 55.980086][ T5150] netlink_rcv_skb+0x220/0x3ec [ 55.981088][ T5150] genl_rcv+0x38/0x50 [ 55.981917][ T5150] netlink_unicast+0x5fc/0x80c [ 55.982890][ T5150] netlink_sendmsg+0x6f0/0x9d8 [ 55.983841][ T5150] ____sys_sendmsg+0x588/0x90c [ 55.984805][ T5150] __sys_sendmsg+0x288/0x374 [ 55.985737][ T5150] __arm64_sys_sendmsg+0x80/0x94 [ 55.986706][ T5150] invoke_syscall+0x98/0x290 [ 55.987636][ T5150] el0_svc_common+0x13c/0x258 [ 55.988570][ T5150] do_el0_svc+0x5c/0x134 [ 55.989440][ T5150] el0_svc+0x58/0x12c [ 55.990263][ T5150] el0t_64_sync_handler+0x84/0xf0 [ 55.991229][ T5150] el0t_64_sync+0x18c/0x190 [ 55.992117][ T5150] [ 55.992117][ T5150] -> #0 (&ndev->req_lock){+.+.}-{3:3}: [ 55.993470][ T5150] __lock_acquire+0x3504/0x7280 [ 55.994420][ T5150] lock_acquire+0x210/0x63c [ 55.995301][ T5150] __mutex_lock_common+0x1a0/0x1f3c [ 55.996318][ T5150] mutex_lock_nested+0x38/0x44 [ 55.997269][ T5150] nci_start_poll+0x450/0xadc [ 55.998165][ T5150] nfc_start_poll+0x124/0x284 [ 55.999110][ T5150] nfc_genl_start_poll+0x1b0/0x2f4 [ 56.000087][ T5150] genl_family_rcv_msg_doit+0x210/0x308 [ 56.001137][ T5150] genl_rcv_msg+0x424/0x600 [ 56.001993][ T5150] netlink_rcv_skb+0x220/0x3ec [ 56.002888][ T5150] genl_rcv+0x38/0x50 [ 56.003673][ T5150] netlink_unicast+0x5fc/0x80c [ 56.004590][ T5150] netlink_sendmsg+0x6f0/0x9d8 [ 56.005490][ T5150] ____sys_sendmsg+0x588/0x90c [ 56.006402][ T5150] __sys_sendmsg+0x288/0x374 [ 56.007300][ T5150] __arm64_sys_sendmsg+0x80/0x94 [ 56.008288][ T5150] invoke_syscall+0x98/0x290 [ 56.009201][ T5150] el0_svc_common+0x13c/0x258 [ 56.010145][ T5150] do_el0_svc+0x5c/0x134 [ 56.011014][ T5150] el0_svc+0x58/0x12c [ 56.011807][ T5150] el0t_64_sync_handler+0x84/0xf0 [ 56.012795][ T5150] el0t_64_sync+0x18c/0x190 [ 56.013673][ T5150] [ 56.013673][ T5150] other info that might help us debug this: [ 56.013673][ T5150] [ 56.015475][ T5150] Chain exists of: [ 56.015475][ T5150] &ndev->req_lock --> nfc_devlist_mutex --> &genl_data->genl_data_mutex [ 56.015475][ T5150] [ 56.018014][ T5150] Possible unsafe locking scenario: [ 56.018014][ T5150] [ 56.019352][ T5150] CPU0 CPU1 [ 56.020330][ T5150] ---- ---- [ 56.021287][ T5150] lock(&genl_data->genl_data_mutex); [ 56.022295][ T5150] lock(nfc_devlist_mutex); [ 56.023596][ T5150] lock(&genl_data->genl_data_mutex); [ 56.025087][ T5150] lock(&ndev->req_lock); [ 56.025868][ T5150] [ 56.025868][ T5150] *** DEADLOCK *** [ 56.025868][ T5150] [ 56.027264][ T5150] 4 locks held by syz.0.240/5150: [ 56.028143][ T5150] #0: ffff800018afe410 (cb_lock){++++}-{3:3}, at: genl_rcv+0x28/0x50 [ 56.029624][ T5150] #1: ffff800018afe228 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0xec/0x600 [ 56.031239][ T5150] #2: ffff0000f673b528 (&genl_data->genl_data_mutex){+.+.}-{3:3}, at: nfc_genl_start_poll+0x1a0/0x2f4 [ 56.033250][ T5150] #3: ffff0000f673b100 (&dev->mutex){....}-{3:3}, at: nfc_start_poll+0x5c/0x284 [ 56.034911][ T5150] [ 56.034911][ T5150] stack backtrace: [ 56.035962][ T5150] CPU: 0 PID: 5150 Comm: syz.0.240 Not tainted syzkaller #0 [ 56.037264][ T5150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 56.039086][ T5150] Call trace: [ 56.039679][ T5150] dump_backtrace+0x1c4/0x1f0 [ 56.040532][ T5150] show_stack+0x2c/0x3c [ 56.041289][ T5150] __dump_stack+0x30/0x40 [ 56.042070][ T5150] dump_stack_lvl+0xf4/0x15c [ 56.042898][ T5150] dump_stack+0x1c/0x5c [ 56.043656][ T5150] print_circular_bug+0x148/0x1b0 [ 56.044566][ T5150] check_noncircular+0x290/0x370 [ 56.045509][ T5150] __lock_acquire+0x3504/0x7280 [ 56.046350][ T5150] lock_acquire+0x210/0x63c [ 56.047125][ T5150] __mutex_lock_common+0x1a0/0x1f3c [ 56.048018][ T5150] mutex_lock_nested+0x38/0x44 [ 56.048851][ T5150] nci_start_poll+0x450/0xadc [ 56.049680][ T5150] nfc_start_poll+0x124/0x284 [ 56.050544][ T5150] nfc_genl_start_poll+0x1b0/0x2f4 [ 56.051502][ T5150] genl_family_rcv_msg_doit+0x210/0x308 [ 56.052486][ T5150] genl_rcv_msg+0x424/0x600 [ 56.053294][ T5150] netlink_rcv_skb+0x220/0x3ec [ 56.054142][ T5150] genl_rcv+0x38/0x50 [ 56.054863][ T5150] netlink_unicast+0x5fc/0x80c [ 56.055720][ T5150] netlink_sendmsg+0x6f0/0x9d8 [ 56.056568][ T5150] ____sys_sendmsg+0x588/0x90c [ 56.057394][ T5150] __sys_sendmsg+0x288/0x374 [ 56.058215][ T5150] __arm64_sys_sendmsg+0x80/0x94 [ 56.059091][ T5150] invoke_syscall+0x98/0x290 [ 56.059900][ T5150] el0_svc_common+0x13c/0x258 [ 56.060737][ T5150] do_el0_svc+0x5c/0x134 [ 56.061488][ T5150] el0_svc+0x58/0x12c [ 56.062206][ T5150] el0t_64_sync_handler+0x84/0xf0 [ 56.063158][ T5150] el0t_64_sync+0x18c/0x190 [ 56.450108][ C0] vcan0: j1939_tp_rxtimer: 0x000000000d43ceae: rx timeout, send abort [ 56.451627][ C0] vcan0: j1939_xtp_rx_abort_one: 0x000000000d43ceae: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 58.810058][ T5150] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 58.811678][ T5150] nci: nci_start_poll: failed to set local general bytes [ 58.813092][ T5142] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 64.485790][ T2066] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.496168][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)