last executing test programs: 22.134876428s ago: executing program 3 (id=982): recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x40000063, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000580), r3) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x48, r4, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x9, 0xa, '^^@-['}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x40040}, 0x8c0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000005c0), r5) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x38, r6, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}]}, 0x38}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000900)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, r6, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:mount_exec_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x1b}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8880}, 0x20004000) r7 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r7, &(0x7f0000000000)={&(0x7f0000000040)=@in6={0xa, 0x1003, 0x50, @ipv4={'\x00', '\xff\xff', @loopback}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) r8 = socket$kcm(0x10, 0x2, 0x4) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000240), r10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x24, r11, 0x1, 0x0, 0xffffffff, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}]}, 0x24}, 0x2, 0x34005, 0x0, 0x8010}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r9, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r11, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xb}}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x80) sendmsg$inet(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000003000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64e9f4080003000601000004000200d700", 0x5a}, {&(0x7f00000001c0)="ffaf", 0x2}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x40804) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000640)={'syzkaller0\x00', 0x0}) r13 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r13, 0x8914, &(0x7f0000000680)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) write$tun(r0, &(0x7f0000000940)=ANY=[], 0x20) 12.495972924s ago: executing program 3 (id=985): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x5c, 0x24, 0x4, 0x0, 0x25dfdbfd, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x2c, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_FWMARK={0x8, 0x12, 0x24}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0xff}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}, @TCA_CAKE_RAW={0x8}]}}]}, 0x5c}}, 0x4004) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[], 0x72) 12.2554259s ago: executing program 3 (id=993): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000002c0)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0x4}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x240448a0}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000400)="05", 0x1, 0x4, &(0x7f0000000440)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 12.218634661s ago: executing program 1 (id=994): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'bridge_slave_0\x00'}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x44, 0x3, 0xa, 0x3, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'wlan0\x00'}]}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x4c841}, 0x802) 12.159095303s ago: executing program 1 (id=996): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x28, r1, 0x1, 0x70bd25, 0x25dfdbf7, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000850}, 0x20044004) 12.128846903s ago: executing program 2 (id=997): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="bf16000000000000b70100003b0204007b1ae0ff00000000b7010000000000007b1ae8ff000000007b1af0ff00000000bf61000000000000b702000001000000bfa300000000000007030000e0ffffffb7040000180000008500000049000000b70000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x11e, 0x20, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x27, 0x300, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast}}}}}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x5, 0x9fd, 0x85, 0x41}, 0x50) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x6c, r4, 0x0, 0x6c}, 0x38) r5 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$MRT6(r5, 0x29, 0x1e, 0x0, &(0x7f00000001c0)) r6 = accept(r5, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r6, 0x400c6615, &(0x7f0000000300)={0x0, @adiantum, 0x0, @desc3}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendto$x25(r6, &(0x7f0000000840)="79b8b863c8257a8b8576556ccc459396b279d23856e7b030db996adcffbcccf97ba5e3b47ec5c54154a778875eeb7866007ac09de2ae243870533a4c71aea43e847779e8d6843c8466a2ad2c81983e2b92cf2ffa70b888b97adffabb7db633ce388c777bd39e0e0f3a7f179f90768d130ec98b8498cb4ff9ac69ae3f82ecfe6b4314cb5fba9cc4c1b9756a78d30387ad2369243725b67b8674b18d377dedcad635a5430b8e3b466cce8f7dad90bdd225ab0b7a462af2337a5ea3d86fa0857e5ae3610f59c142986842", 0xc9, 0x20000094, &(0x7f0000000940), 0x12) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r7}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5}, @IFLA_BOND_NUM_PEER_NOTIF={0x5}]}}}]}, 0x44}}, 0x0) r9 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r9, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) getsockopt$IP_SET_OP_VERSION(r9, 0x1, 0x53, &(0x7f0000000000), &(0x7f0000000100)=0x8) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r11, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x44, 0x9, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @local}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) setsockopt$RXRPC_SECURITY_KEYRING(r6, 0x110, 0x2, &(0x7f0000000400)='dummy0\x00', 0x7) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="5254d1adacd6df2b5a86b1001234", 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 12.055141495s ago: executing program 4 (id=998): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000180)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x10000001, 0x0, 0x3}, @loopback, @private=0xa010102, 0xff}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x5}, 0x0) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYRESHEX], 0x22) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000f00)={0xa, 0x4e1d, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x11}, 0x8}, 0x1c) 12.049836615s ago: executing program 1 (id=999): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0xfff2, 0x2}}}, 0x24}}, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400009"], 0x50) r0 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000100)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b8, 0x0, 0x98, 0x130, 0x1c8, 0x288, 0x0, 0x98, 0x130, 0x288, 0x320, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@length={{0x28}, {0x0, 0xffff}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xa, 0x4, 0x36800, 0xf}, 0x50) syz_genetlink_get_family_id$nl80211(&(0x7f0000000c80), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000780), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890c, &(0x7f0000000000)) 12.004754046s ago: executing program 3 (id=1000): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000006c0)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000700)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000740)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000980)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) write$tun(r0, &(0x7f0000000ac0)={@val={0x8, 0x800}, @val={0x5, 0x83, 0x2, 0xe7b6, 0x14, 0x2}, @ipv4=@icmp={{0x16, 0x4, 0x0, 0x17, 0x75, 0x65, 0x0, 0x5, 0x1, 0x0, @loopback, @rand_addr=0x64010100, {[@timestamp={0x44, 0x10, 0xcd, 0x0, 0x5, [0x0, 0xac2, 0x5d36]}, @rr={0x7, 0xb, 0x83, [@loopback, @multicast2]}, @timestamp={0x44, 0x24, 0x97, 0x0, 0x7, [0xfff, 0x0, 0xfff, 0xc03c, 0xfffffff7, 0x6, 0x78213f15, 0x8]}, @rr={0x7, 0x3, 0xc6}]}}, @redirect={0x5, 0x1, 0x0, @private=0xa010102, {0x5, 0x4, 0x1, 0x3, 0x3ff, 0x67, 0x2, 0x6, 0x5e, 0x65e, @broadcast, @dev={0xac, 0x14, 0x14, 0x3c}}, 'J'}}}, 0x83) 11.895101659s ago: executing program 1 (id=1001): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000340)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000440)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e24, 0x8fe, 0x4e21, 0xb0, 0xa, 0x80, 0xf0, 0x1d}, {0x6, 0x47c5, 0x1a6c, 0xff, 0x8, 0xe26d, 0x63c6, 0x401}, {0x4, 0x1, 0x8000, 0xc96d}, 0x3, 0x6e6bb7, 0x0, 0x0, 0x1}, {{@in=@empty, 0x4d5, 0x6c}, 0xa, @in=@local, 0x3503, 0x2, 0x1, 0x0, 0x1, 0x2000000, 0xffffffff}}, 0xe8) socket$inet6_tcp(0xa, 0x1, 0x0) 11.83730398s ago: executing program 4 (id=1002): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000080}, 0x48000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000b80)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {0xffe0, 0xb}, {0x7, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x1, 0x400, 0x6, 0xfffd, 0x4}, {0x40, 0x1, 0x3, 0x7f, 0x7ff, 0x16800000}, 0xcd04, 0xfffffffe, 0x1526}}, @TCA_TBF_BURST={0x8, 0x6, 0xad}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x54815}, 0x4008000) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 11.774767681s ago: executing program 1 (id=1003): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000004c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000001d00)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2002, {0x0, 0x0, 0x0, r5, {0xb, 0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x78, 0xa, 0x0, 0xd, 0x6b}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) close(r3) socket(0x40000000015, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000640)={'syzkaller0\x00', @multicast}) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000680), 0x56) sendmsg$kcm(r6, &(0x7f00000006c0)={&(0x7f0000000700)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000780)=[{&(0x7f00000007c0)="27030200dc0f14000e0000000025c10200000002125ce882cbf400930bf4533f00429c65112a", 0x26}, {&(0x7f0000000800)="02db0b9ef1cafdab", 0xa888}], 0x2}, 0x4005) 11.252997135s ago: executing program 2 (id=1005): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(0x0, r0) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01002abd7000fbdbdf2524000000080002"], 0x1c}, 0x1, 0x0, 0x0, 0x20000090}, 0x0) 11.234500885s ago: executing program 2 (id=1006): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000100)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="01000000000000000300000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x48485}, 0x8890) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="01000000670f00"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x80}, 0x1, 0x0, 0x0, 0xc080}, 0x11) sendmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="01000000e80000000800000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000007f"], 0x48}}, 0x20000000) 11.215147115s ago: executing program 4 (id=1007): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000500)={'syzkaller1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000540)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0xfff7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) write$tun(r0, &(0x7f00000007c0)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x6, 0xfdcd, 0x2f, 0x40}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x28, 0x24, 0x65, 0x0, 0xc, 0x11, 0x0, @private=0xa010104, @broadcast}, {0x4e26, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x1, 0x2, 0x2, 0x100, @val=0x80}}}}}, 0x32) 11.189406166s ago: executing program 3 (id=1008): r0 = socket(0x10, 0x3, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000240)=0x1, 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendto(r2, &(0x7f0000000400)="340000001a00010001000000000000000220000000000000000000000800030001000000080002000101010108000100e1010203", 0x34, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000440)={0x80000000, 0x0, 0xfffffffc}, 0x10) write(r0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r0) 11.151024277s ago: executing program 2 (id=1009): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000480)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) listen(0xffffffffffffffff, 0xf5f) socket$nl_netfilter(0x10, 0x3, 0xc) accept(0xffffffffffffffff, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x1, 0x401}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x400000f, 0x1, 0x0, 0x7fffffff}, 0x0, 0x0) 11.116694418s ago: executing program 4 (id=1010): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffbfff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040080) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2c, 0x2002, {0x0, 0x0, 0x0, r5, {0xb, 0xffff}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0xfb55}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x814}, 0x20000080) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000700)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0xfffffffb, 0x4, 0x2, 0xffffffc0, 0x5, 0x2234, 0x7f, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x4, 0x58b, 0x852, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0xab2, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x5, 0x1, 0x5b1f, 0x7b0, 0x7, 0x100, 0x6, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1ff, 0x80, 0x4, 0x7, 0x2, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x56, 0x5, 0x10001, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x1, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x9, 0x0, 0x7f, 0x7, 0x863c, 0xff, 0x24, 0x5, 0x7, 0x6, 0x6, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x5f88, 0x0, 0x4, 0x9, 0x61, 0x7, 0x2, 0x2, 0x2, 0x6, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x7ffffffe, 0x80, 0x2f0cb955, 0x7, 0xfed, 0x4000f, 0x6ae, 0x7, 0x1, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0x0, 0xac, 0x9, 0x6, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x6, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x7, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x200, 0x9, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x399d, 0x6, 0x8ab2, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x4, 0x10001, 0x6, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x1, 0x177, 0x7, 0x0, 0x81, 0x5, 0x8, 0x9, 0x9, 0xe7e, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x8004b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1080, 0x4, 0x80000ec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xffffff01, 0x5, 0x37f, 0x8, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x4, 0x4, 0x5, 0x7, 0x1, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0xa6, 0x3, 0x10000, 0x5, 0x3, 0x0, 0x3, 0x0, 0xd, 0x6, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94d, 0x9, 0x8, 0x6, 0x140, 0xec0, 0xffff, 0x4, 0x2, 0x3ff, 0x3e, 0xb827, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ff, 0x92, 0x0, 0x7, 0x3, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0x1, 0x3, 0x9, 0xc, 0x5, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x9e, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0xe, 0x400, 0x7, 0x7fffffff, 0x2, 0x4, 0x0, 0x5, 0x4, 0x3, 0x8, 0x9, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x401, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffff8, 0xfffffffc, 0x1000, 0x2, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x4, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0x3, 0x0, 0x81, 0xfff80000, 0x7a7, 0x1, 0x6, 0x3, 0x8, 0x4, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x4, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x9, 0x40, 0x2, 0xfff, 0x8, 0x3, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x10, 0x1ff, 0x3, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0xa, 0x59, 0x9, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0x3, 0xffffff97, 0x2, 0xfff, 0x1, 0x40, 0x8, 0x3, 0x710, 0x8, 0x1, 0xfffff337, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x9, 0x9, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x7, 0x5, 0x40000001, 0xdbec, {0x8, 0x0, 0xb55, 0x5, 0x7, 0x5}, {0x6, 0x0, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) 11.0224057s ago: executing program 0 (id=1011): socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70}, 0x94) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000001000000000000008018000095"], &(0x7f00000007c0)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) socket$inet6_icmp(0xa, 0x2, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000b00)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r1], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 11.02118093s ago: executing program 0 (id=1012): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x8, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x10, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r1, 0x0, 0xf89, 0x0, &(0x7f0000000400)="39bdeac368e4c4e87a7bfd439b9f4793bcb64f217eb9435d6b4e435770512f9a534ba988586c565c33b12ddb4c357728b463ae54ffa88f65c5bc96051eb279632efcc45cc6c9e2dc521020f9357b64ce3879ce30e3", 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x6, 0x9, 0xffffffff}, 0x28) 10.964118612s ago: executing program 0 (id=1013): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r1, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0x4}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x240448a0}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000400)="05", 0x1, 0x4, &(0x7f0000000440)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 113.739087ms ago: executing program 3 (id=1014): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={0x1, 0x2}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f00000000c0)={r1, 0x7f, 0x20, 0x4, 0x4}, &(0x7f0000000100)=0x18) r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f00000006c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f0000000700)=ANY=[@ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00']) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc000000000000000000000000000000000000000000000000000000000000000200000000000000fdffffffffffffff0000001000000000ffffffffffffffff00000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200340000000000000014000e00fe8000000000000000000000000000bb2400090003001500000000000100000000000080b40000000000000005"], 0x128}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000980)={'erspan0\x00', &(0x7f0000000880)={'ip_vti0\x00', 0x0, 0x7, 0x8, 0x36, 0x5, {{0x2b, 0x4, 0x3, 0x31, 0xac, 0x68, 0x0, 0x7, 0x2f, 0x0, @local, @remote, {[@timestamp_prespec={0x44, 0x3c, 0x89, 0x3, 0x5, [{@multicast2, 0x4}, {@multicast1, 0x3}, {@multicast2, 0x8}, {@loopback, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@rand_addr=0x64010102, 0x9}, {@multicast1, 0x6}]}, @rr={0x7, 0x27, 0x8f, [@rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x1e}, @private=0xa010101, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @multicast2]}, @timestamp_addr={0x44, 0x34, 0x16, 0x1, 0x8, [{@broadcast, 0x71f7}, {@remote, 0xb7}, {@local, 0x8}, {@dev={0xac, 0x14, 0x14, 0x24}, 0x87b}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@empty, 0xffff}]}]}}}}}) sendmsg$nl_xfrm(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000009c0)=@getsa={0x15c, 0x12, 0x400, 0x70bd2a, 0x25dfdbfe, {@in=@private=0xa010100, 0x4d3, 0xa, 0x33}, [@policy={0xac, 0x7, {{@in=@loopback, @in6=@mcast2, 0x4e23, 0x0, 0x4e20, 0x9, 0xa, 0x80, 0x80, 0x2f}, {0xfffffffffffffff7, 0x6, 0x6, 0xc9d, 0x0, 0x1, 0x6, 0x3}, {0x7, 0x4000000000000000, 0x6, 0xc}, 0x1, 0x6e6bbc, 0x2, 0x0, 0x2, 0x2}}, @algo_auth={0x66, 0x1, {{'hmac(sha1-neon)\x00'}, 0xf0, "b109788e6164ab95003bc3ff36aa2147b8ec8b4168e1b3a4ad101737b417"}}, @offload={0xc, 0x1c, {r5}}, @coaddr={0x14, 0xe, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x15c}}, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000580)={0x2, 0x0, @local}, 0xff23) connect$inet(r6, &(0x7f00000005c0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000b40)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x6, 0x4, 0xffff, 0x0, 0x2, 0x5}, {0x1, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x3d}, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) write(r6, 0x0, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, 0xffffffffffffffff, 0x4000) mmap(&(0x7f0000298000/0x4000)=nil, 0x4000, 0x2000002, 0x4000932, 0xffffffffffffffff, 0x0) bind$alg(r7, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) r8 = accept4(r7, 0x0, 0x0, 0x800) setsockopt$sock_int(r8, 0x1, 0x7, &(0x7f0000000680)=0x10000b, 0x4) sendmmsg$alg(r8, &(0x7f0000000c40)=[{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000cc0)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000d00)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f0000000d80)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443", 0x67}], 0x3, &(0x7f0000000e80)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000f00)=[{0x0}, {&(0x7f0000000fc0)=""/83, 0x53}], 0x2}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 83.864299ms ago: executing program 0 (id=1015): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', @multicast}) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000000680)={'syzkaller0\x00', @random="2b0100004ec6"}) 83.447348ms ago: executing program 2 (id=1016): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(0x0, r0) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01002abd7000fbdbdf2524000000080002"], 0x1c}, 0x1, 0x0, 0x0, 0x20000090}, 0x0) 82.707448ms ago: executing program 1 (id=1017): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x48000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x4008000) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 54.860719ms ago: executing program 4 (id=1018): socket$packet(0x11, 0xa, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f0000000800)={0x11, 0x3, 0x1, 0x1, 0x0, 0x6, @random="ee52e7e07522"}, 0x14) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000200000000000000000808"], &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r1, 0x5, 0x50, 0x0, &(0x7f0000000480)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) 41.687639ms ago: executing program 0 (id=1019): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000100)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="01000000000000000300000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00'], 0x48}, 0x1, 0x0, 0x0, 0x48485}, 0x8890) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="01000000670f00"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x80}, 0x1, 0x0, 0x0, 0xc080}, 0x11) sendmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="01000000e80000000800000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000007f"], 0x48}}, 0x20000000) 40.461259ms ago: executing program 2 (id=1020): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000500)={'syzkaller1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000540)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0xfff7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) write$tun(r0, &(0x7f00000007c0)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x6, 0xfdcd, 0x2f, 0x40}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x28, 0x24, 0x65, 0x0, 0xc, 0x11, 0x0, @private=0xa010104, @broadcast}, {0x4e26, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x1, 0x2, 0x2, 0x100, @val=0x80}}}}}, 0x32) 1.15225ms ago: executing program 4 (id=1021): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x5c, 0x24, 0x4, 0x0, 0x25dfdbfd, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x2c, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_FWMARK={0x8, 0x12, 0x24}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0xff}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}, @TCA_CAKE_RAW={0x8}]}}]}, 0x5c}}, 0x4004) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x72) 0s ago: executing program 0 (id=1022): r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000300)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x40040) write$nci(r0, &(0x7f0000001700)=@NCI_OP_NFCEE_DISCOVER_NTF={0x2, 0x1, 0x3, 0x0, 0x5, {0x1, 0x9, "189bcc"}}, 0x8) write$nci(r0, &(0x7f0000001740)=@NCI_OP_RF_DISCOVER_MAP_RSP={0x1, 0x0, 0x2, 0x0, 0x1}, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000001780)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000001800)={0x24, r3, 0x1, 0x70bd27, 0x25dfdb7d, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x80}]}, 0x24}, 0x1, 0x0, 0x0, 0x2400c004}, 0x4000000) write$nci(r0, &(0x7f0000001840)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x2}, 0x5) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.54' (ED25519) to the list of known hosts. [ 29.022073][ T4316] cgroup: Unknown subsys name 'net' [ 29.279313][ T4316] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 29.555024][ T4316] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 30.278170][ T4337] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 30.283085][ T4343] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 30.284742][ T4343] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 30.286357][ T4343] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 30.288129][ T4343] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 30.289602][ T4343] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 30.291150][ T4343] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 30.292649][ T4343] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 30.294087][ T4343] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 30.295346][ T4343] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 30.296820][ T4343] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 30.298297][ T4343] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 30.299522][ T4343] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 30.300961][ T4343] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 30.302375][ T4343] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 30.304540][ T4344] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 30.306195][ T4344] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 30.308139][ T4343] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 30.308340][ T4344] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 30.309782][ T4343] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 30.310902][ T4344] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 30.312170][ T4343] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 30.313453][ T4344] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 30.315121][ T4343] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 30.316184][ T4345] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 30.317220][ T4343] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 30.320434][ T48] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 30.321707][ T48] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 30.340774][ T48] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 30.343401][ T48] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 30.470378][ T4330] chnl_net:caif_netlink_parms(): no params data found [ 30.475426][ T4328] chnl_net:caif_netlink_parms(): no params data found [ 30.487744][ T4338] chnl_net:caif_netlink_parms(): no params data found [ 30.489894][ T4329] chnl_net:caif_netlink_parms(): no params data found [ 30.539875][ T4330] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.541474][ T4330] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.543191][ T4330] device bridge_slave_0 entered promiscuous mode [ 30.545394][ T4329] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.546711][ T4329] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.548220][ T4329] device bridge_slave_0 entered promiscuous mode [ 30.549856][ T4328] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.551047][ T4328] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.552571][ T4328] device bridge_slave_0 entered promiscuous mode [ 30.556234][ T4330] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.557775][ T4330] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.559422][ T4330] device bridge_slave_1 entered promiscuous mode [ 30.562344][ T4340] chnl_net:caif_netlink_parms(): no params data found [ 30.567953][ T4328] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.569276][ T4328] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.570778][ T4328] device bridge_slave_1 entered promiscuous mode [ 30.572124][ T4329] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.573297][ T4329] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.574758][ T4329] device bridge_slave_1 entered promiscuous mode [ 30.576271][ T4338] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.579840][ T4338] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.581321][ T4338] device bridge_slave_0 entered promiscuous mode [ 30.591730][ T4329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.594328][ T4329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.598528][ T4328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.608238][ T4338] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.609498][ T4338] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.610986][ T4338] device bridge_slave_1 entered promiscuous mode [ 30.617162][ T4328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.623358][ T4328] team0: Port device team_slave_0 added [ 30.625105][ T4328] team0: Port device team_slave_1 added [ 30.631424][ T4330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.640732][ T4330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.644963][ T4338] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.648619][ T4338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.652488][ T4329] team0: Port device team_slave_0 added [ 30.655885][ T4328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.657216][ T4328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.661810][ T4328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.670434][ T4329] team0: Port device team_slave_1 added [ 30.673569][ T4328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.674764][ T4328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.679916][ T4328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.684289][ T4340] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.685662][ T4340] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.689784][ T4340] device bridge_slave_0 entered promiscuous mode [ 30.697355][ T4330] team0: Port device team_slave_0 added [ 30.701107][ T4338] team0: Port device team_slave_0 added [ 30.702949][ T4338] team0: Port device team_slave_1 added [ 30.706452][ T4340] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.710218][ T4340] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.711794][ T4340] device bridge_slave_1 entered promiscuous mode [ 30.715857][ T4330] team0: Port device team_slave_1 added [ 30.721609][ T4330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.722705][ T4330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.727062][ T4330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.733085][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.734313][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.739138][ T4329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.741917][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.743165][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.750197][ T4329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.752588][ T4330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.753781][ T4330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.758358][ T4330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.764555][ T4338] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.765713][ T4338] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.770532][ T4338] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.777357][ T4340] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.780432][ T4338] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.781610][ T4338] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.785702][ T4338] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.790996][ T4340] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.847826][ T4328] device hsr_slave_0 entered promiscuous mode [ 30.886794][ T4328] device hsr_slave_1 entered promiscuous mode [ 30.977833][ T4329] device hsr_slave_0 entered promiscuous mode [ 31.016777][ T4329] device hsr_slave_1 entered promiscuous mode [ 31.056621][ T4329] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.058004][ T4329] Cannot create hsr debugfs directory [ 31.065952][ T4340] team0: Port device team_slave_0 added [ 31.107686][ T4330] device hsr_slave_0 entered promiscuous mode [ 31.156737][ T4330] device hsr_slave_1 entered promiscuous mode [ 31.206659][ T4330] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.207985][ T4330] Cannot create hsr debugfs directory [ 31.277526][ T4338] device hsr_slave_0 entered promiscuous mode [ 31.326705][ T4338] device hsr_slave_1 entered promiscuous mode [ 31.376549][ T4338] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.377827][ T4338] Cannot create hsr debugfs directory [ 31.380924][ T4340] team0: Port device team_slave_1 added [ 31.400577][ T4340] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.401812][ T4340] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.406200][ T4340] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.415726][ T4340] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.417179][ T4340] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.421225][ T4340] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.527700][ T4340] device hsr_slave_0 entered promiscuous mode [ 31.567181][ T4340] device hsr_slave_1 entered promiscuous mode [ 31.606624][ T4340] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.607984][ T4340] Cannot create hsr debugfs directory [ 31.653341][ T4328] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.700497][ T4328] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.742923][ T4328] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.777620][ T4328] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.833906][ T4330] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.868181][ T4330] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.912384][ T4330] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.950209][ T4330] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 32.002298][ T4338] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 32.046761][ T4338] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 32.088284][ T4338] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 32.140419][ T4338] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 32.189539][ T4329] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 32.234550][ T4328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.235934][ T4329] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 32.281930][ T4329] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 32.307975][ T4329] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 32.348872][ T4340] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 32.389281][ T4340] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.397179][ T48] Bluetooth: hci2: command 0x0409 tx timeout [ 32.397256][ T4331] Bluetooth: hci1: command 0x0409 tx timeout [ 32.398254][ T48] Bluetooth: hci0: command 0x0409 tx timeout [ 32.399307][ T4331] Bluetooth: hci3: command 0x0409 tx timeout [ 32.400303][ T48] Bluetooth: hci4: command 0x0409 tx timeout [ 32.441379][ T4340] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.477854][ T4340] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.525076][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.530041][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.532637][ T4328] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.535559][ T4330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.544837][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.547440][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.549205][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.550568][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.552223][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.553855][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.555375][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.556707][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.558442][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.562653][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.564144][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.570347][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.573472][ T4330] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.583141][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.584949][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.587641][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.589372][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.590587][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.592205][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.593872][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.595621][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.596871][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.601771][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.609661][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.611488][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.613347][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.615341][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.625030][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.626882][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.628541][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.636403][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.639142][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.645936][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.647757][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.649342][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.651207][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.652848][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.654691][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.662357][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.664053][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.675954][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.677934][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.683659][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.685266][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.698941][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.709471][ T4329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.714326][ T4338] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.718037][ T4340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.730637][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.732340][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.741495][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.743147][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.746221][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.748496][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.755405][ T4340] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.758606][ T4329] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.762495][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.763846][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.766193][ T4338] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.773497][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.775315][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.779093][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.780368][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.781983][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.783600][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.787189][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.788435][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.789844][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.799488][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.801352][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.802482][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.803803][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.805609][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.807662][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.808976][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.810503][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.812039][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.813477][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.821346][ T4328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.824795][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.826444][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.828394][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.829668][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.836119][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.838368][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.840098][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.841203][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.842582][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.844354][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.854832][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.857281][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.859406][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.861236][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.862944][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.872619][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.874495][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.876053][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.884696][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.886061][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.887821][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.889572][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.891076][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.893100][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.894676][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.896437][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.899899][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.901552][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.913043][ T4330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.914962][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.917460][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.918999][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.920811][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.922442][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.924723][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.926283][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.928720][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.930472][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.933857][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.940406][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.942162][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.943822][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.945385][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.949608][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.951192][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.964195][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.966393][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.968700][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.970472][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.972205][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.974563][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.975920][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.993631][ T4328] device veth0_vlan entered promiscuous mode [ 32.995967][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.998151][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.000473][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.002085][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.004185][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.005932][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.011735][ T4330] device veth0_vlan entered promiscuous mode [ 33.013904][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.019055][ T4328] device veth1_vlan entered promiscuous mode [ 33.025409][ T4330] device veth1_vlan entered promiscuous mode [ 33.049615][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.051279][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.052808][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.054451][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.055987][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.062252][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.069290][ T4328] device veth0_macvtap entered promiscuous mode [ 33.073906][ T1756] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.075596][ T1756] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.077517][ T1756] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.085895][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.088718][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.091806][ T4330] device veth0_macvtap entered promiscuous mode [ 33.094495][ T4328] device veth1_macvtap entered promiscuous mode [ 33.098125][ T4340] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.103390][ T4330] device veth1_macvtap entered promiscuous mode [ 33.125346][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.128174][ T1756] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.129794][ T1756] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.131428][ T1756] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.133125][ T1756] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.134712][ T1756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.140858][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.142708][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.145177][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.158852][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.160881][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.162796][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.164889][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.167453][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.171325][ T4328] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.172827][ T4328] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.174190][ T4328] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.175727][ T4328] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.183866][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.185270][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.187460][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.188805][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.190349][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.192144][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.194280][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.198465][ T4329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.199963][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.201774][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.206392][ T4338] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.227292][ T4330] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.229200][ T4330] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.230600][ T4330] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.232028][ T4330] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.253846][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.255720][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.258704][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.260336][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.284628][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.286440][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.288786][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.290732][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.294934][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.296299][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.299405][ T4329] device veth0_vlan entered promiscuous mode [ 33.303611][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.305059][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.308665][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.310857][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.313673][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.315481][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.317982][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.321712][ T4340] device veth0_vlan entered promiscuous mode [ 33.323827][ T4329] device veth1_vlan entered promiscuous mode [ 33.335984][ T4338] device veth0_vlan entered promiscuous mode [ 33.342014][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.343818][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.345451][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.350091][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.351844][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.353437][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.357802][ T4340] device veth1_vlan entered promiscuous mode [ 33.374498][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.375953][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.381808][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.383477][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.385054][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.390579][ T4358] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.390981][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.391935][ T4358] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.393594][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.396055][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.399169][ T4329] device veth0_macvtap entered promiscuous mode [ 33.402623][ T4338] device veth1_vlan entered promiscuous mode [ 33.416156][ T4329] device veth1_macvtap entered promiscuous mode [ 33.424007][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.425693][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.428653][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.430128][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.431927][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.433629][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.440143][ T4340] device veth0_macvtap entered promiscuous mode [ 33.446066][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.449316][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.450984][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.452638][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.455005][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.457355][ T4340] device veth1_macvtap entered promiscuous mode [ 33.462830][ T4338] device veth0_macvtap entered promiscuous mode [ 33.464567][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.466326][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.466873][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.468977][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.471187][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.472795][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.474549][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.477806][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.479535][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.482060][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.484649][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.486413][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.489133][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.490810][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.493705][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.501273][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.503155][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.509593][ T4340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.511290][ T4340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.512937][ T4340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.513679][ T4409] Zero length message leads to an empty skb [ 33.514557][ T4340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.519428][ T4340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.521310][ T4340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.531421][ T4340] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.533215][ T4338] device veth1_macvtap entered promiscuous mode [ 33.537991][ T4329] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.539422][ T4329] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.540892][ T4329] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.542401][ T4329] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.546066][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.547941][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.549668][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.554294][ T4411] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6'. [ 33.566259][ T4338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.573962][ T4338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.575602][ T4338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.579029][ T4338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.580618][ T4338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.582406][ T4338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.584506][ T4338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.586249][ T4338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.589895][ T4338] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.615320][ T1756] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.617365][ T1756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.623408][ T4340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.625365][ T4340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.628102][ T4340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.629875][ T4340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.631506][ T4340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.633176][ T4340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.635664][ T4340] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.641890][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.643750][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.646363][ T4338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.648755][ T4338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.650496][ T4338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.652243][ T4338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.653976][ T4338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.656318][ T4338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.666017][ T4338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.670816][ T4338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.677897][ T4338] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.679289][ T1756] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.683352][ T1756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.694475][ T4340] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.696283][ T4340] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.699094][ T4340] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.700410][ T4340] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.715885][ T4338] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.718763][ T4338] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.720266][ T4338] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.721688][ T4338] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.740895][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.742277][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.752994][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.921180][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.926627][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.932174][ T1756] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.933555][ T1756] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.943353][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.945238][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.030676][ T4429] syz.1.13 uses obsolete (PF_INET,SOCK_PACKET) [ 34.476840][ T48] Bluetooth: hci4: command 0x041b tx timeout [ 34.478028][ T48] Bluetooth: hci3: command 0x041b tx timeout [ 34.479178][ T48] Bluetooth: hci0: command 0x041b tx timeout [ 34.480346][ T48] Bluetooth: hci1: command 0x041b tx timeout [ 34.481473][ T48] Bluetooth: hci2: command 0x041b tx timeout [ 36.556707][ T4333] Bluetooth: hci2: command 0x040f tx timeout [ 36.556731][ T48] Bluetooth: hci1: command 0x040f tx timeout [ 36.557840][ T4333] Bluetooth: hci0: command 0x040f tx timeout [ 36.558974][ T48] Bluetooth: hci3: command 0x040f tx timeout [ 36.559986][ T4333] Bluetooth: hci4: command 0x040f tx timeout [ 38.636791][ T4333] Bluetooth: hci0: command 0x0419 tx timeout [ 38.646767][ T4331] Bluetooth: hci4: command 0x0419 tx timeout [ 38.646777][ T4333] Bluetooth: hci3: command 0x0419 tx timeout [ 38.646799][ T4333] Bluetooth: hci1: command 0x0419 tx timeout [ 38.647837][ T4331] Bluetooth: hci2: command 0x0419 tx timeout [ 44.872943][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.874459][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.877591][ T1756] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.879070][ T1756] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.906464][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 44.909040][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 44.918881][ T4358] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.920282][ T4358] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.921755][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 45.001793][ T4449] netlink: 32 bytes leftover after parsing attributes in process `syz.1.16'. [ 45.004121][ T4447] netlink: 'syz.0.15': attribute type 1 has an invalid length. [ 45.033306][ T4447] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15'. [ 45.038869][ T4447] device bridge1 entered promiscuous mode [ 45.189528][ T4463] device syzkaller0 entered promiscuous mode [ 45.360711][ T4471] device syzkaller0 entered promiscuous mode [ 45.362631][ T4473] device syzkaller0 entered promiscuous mode [ 56.422145][ T4484] Illegal XDP return value 581100040 on prog (id 5) dev N/A, expect packet loss! [ 56.562311][ T4497] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 56.615525][ T4503] device syzkaller1 entered promiscuous mode [ 56.623479][ T4505] device syzkaller0 entered promiscuous mode [ 57.109793][ T4572] netlink: 8 bytes leftover after parsing attributes in process `syz.3.59'. [ 57.895687][ T4701] device syzkaller0 entered promiscuous mode [ 57.934385][ T4707] device syzkaller1 entered promiscuous mode [ 58.085276][ T4725] netlink: 8 bytes leftover after parsing attributes in process `syz.3.113'. [ 58.089345][ T4726] netlink: 964 bytes leftover after parsing attributes in process `syz.1.112'. [ 58.090963][ T4726] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 58.144814][ T4731] device syzkaller0 entered promiscuous mode [ 58.155108][ T4735] netlink: 'syz.1.116': attribute type 1 has an invalid length. [ 64.477730][ T2064] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.478926][ T2064] ieee802154 phy1 wpan1: encryption failed: -22 [ 68.964017][ T4776] device syzkaller1 entered promiscuous mode [ 69.103618][ T4798] device syzkaller0 entered promiscuous mode [ 69.131637][ T4807] ip_tables: iptables: counters copy to user failed while replacing table [ 69.242054][ T4810] device syzkaller0 entered promiscuous mode [ 69.244801][ T4818] netlink: 4 bytes leftover after parsing attributes in process `syz.0.141'. [ 69.247776][ T4815] device syzkaller0 entered promiscuous mode [ 69.607701][ T113] cfg80211: failed to load regulatory.db [ 80.264850][ T4856] netlink: 8 bytes leftover after parsing attributes in process `syz.4.150'. [ 80.413424][ T4913] netlink: 4 bytes leftover after parsing attributes in process `syz.0.156'. [ 80.580942][ T4937] device syzkaller0 entered promiscuous mode [ 80.711476][ T4939] device syzkaller1 entered promiscuous mode [ 80.716529][ T4952] netlink: 'syz.0.166': attribute type 4 has an invalid length. [ 80.718034][ T4952] netlink: 17 bytes leftover after parsing attributes in process `syz.0.166'. [ 80.734003][ T4331] Bluetooth: hci3: link tx timeout [ 80.735069][ T4331] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 81.215836][ T5022] netlink: 8 bytes leftover after parsing attributes in process `syz.4.186'. [ 81.271833][ T5028] device syzkaller1 entered promiscuous mode [ 81.516441][ T4331] Bluetooth: hci3: link tx timeout [ 81.517869][ T4331] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 81.543008][ T5065] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 81.577515][ T5069] netlink: 404 bytes leftover after parsing attributes in process `syz.2.205'. [ 81.609578][ T5069] netlink: 12 bytes leftover after parsing attributes in process `syz.2.205'. [ 81.617495][ T5069] netlink: 8 bytes leftover after parsing attributes in process `syz.2.205'. [ 81.626854][ T5069] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 81.723481][ T5078] 0: reclassify loop, rule prio 0, protocol 03 [ 81.932287][ T5093] device syzkaller1 entered promiscuous mode [ 82.303814][ T5128] tipc: Started in network mode [ 82.304888][ T5128] tipc: Node identity ac14140f, cluster identity 4711 [ 82.306364][ T5128] tipc: New replicast peer: 255.255.255.255 [ 82.317121][ T5128] tipc: Enabled bearer , priority 10 [ 82.369790][ T5141] device syzkaller1 entered promiscuous mode [ 82.544937][ T5163] netlink: 12 bytes leftover after parsing attributes in process `syz.4.247'. [ 82.569058][ T5139] device syzkaller0 entered promiscuous mode [ 82.570891][ T5156] netlink: 8 bytes leftover after parsing attributes in process `syz.3.244'. [ 82.599022][ T5167] ksmbd: Unknown IPC event: 4, ignore. [ 82.719571][ T5177] device syzkaller0 entered promiscuous mode [ 82.729672][ T5179] netlink: 24 bytes leftover after parsing attributes in process `syz.4.254'. [ 82.731775][ T5179] device wlan0 entered promiscuous mode [ 82.796849][ T4331] Bluetooth: hci3: command 0x0406 tx timeout [ 82.818247][ T5190] Bluetooth: MGMT ver 1.22 [ 82.902847][ T5199] device syzkaller1 entered promiscuous mode [ 82.929098][ T5190] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 83.095883][ T5223] netlink: 'syz.2.272': attribute type 30 has an invalid length. [ 83.163084][ T5233] netlink: 'syz.2.275': attribute type 29 has an invalid length. [ 83.164625][ T5233] netlink: 'syz.2.275': attribute type 31 has an invalid length. [ 83.195834][ T5234] xt_CT: No such helper "netbios-ns" [ 83.217306][ T5211] device syzkaller0 entered promiscuous mode [ 83.229710][ T5233] netlink: 'syz.2.275': attribute type 29 has an invalid length. [ 83.231379][ T5233] netlink: 'syz.2.275': attribute type 31 has an invalid length. [ 83.234158][ T1756] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 83.671307][ T113] tipc: Node number set to 2886997007 [ 83.678533][ T5258] device syzkaller1 entered promiscuous mode [ 83.867710][ T5285] device syzkaller0 entered promiscuous mode [ 83.871024][ T5285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.875418][ T4376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.919410][ T5291] device syzkaller0 entered promiscuous mode [ 84.249280][ T5324] rdma_op 000000004b1d7d06 conn xmit_rdma 0000000000000000 [ 84.255646][ T5320] device syzkaller1 entered promiscuous mode [ 84.320780][ T48] Bluetooth: hci3: link tx timeout [ 84.321745][ T48] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 84.323522][ T48] Bluetooth: hci3: link tx timeout [ 84.324545][ T48] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 84.325932][ T48] Bluetooth: hci3: link tx timeout [ 84.326877][ T48] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 84.328254][ T48] Bluetooth: hci3: link tx timeout [ 84.329287][ T48] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 84.330552][ T48] Bluetooth: hci3: link tx timeout [ 84.331452][ T48] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 84.332707][ T48] Bluetooth: hci3: link tx timeout [ 84.333576][ T48] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 84.362034][ T5339] batman_adv: batadv0: Adding interface: syzkaller0 [ 84.363212][ T5339] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.368088][ T5339] batman_adv: batadv0: Interface activated: syzkaller0 [ 84.551312][ T5357] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 84.553149][ T5331] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 84.609989][ T5331] batman_adv: batadv0: Removing interface: syzkaller0 [ 84.613444][ T5353] device syzkaller0 entered promiscuous mode [ 84.621923][ T48] Bluetooth: hci3: link tx timeout [ 84.623590][ T48] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 84.806330][ T5386] device syzkaller1 entered promiscuous mode [ 84.863863][ T5395] Bluetooth: MGMT ver 1.22 [ 84.999393][ T5408] device syzkaller0 entered promiscuous mode [ 85.195808][ T5422] tipc: Failed to remove unknown binding: 66,0,0/0:3907589643/3907589645 [ 85.198081][ T5422] tipc: Failed to remove unknown binding: 66,0,0/0:3907589643/3907589644 [ 85.201009][ T5422] tipc: Failed to remove unknown binding: 66,0,0/0:3907589643/3907589645 [ 85.202830][ T5422] tipc: Failed to remove unknown binding: 66,0,0/0:3907589643/3907589644 [ 85.260978][ T5432] device syzkaller1 entered promiscuous mode [ 85.413830][ T5442] __nla_validate_parse: 2 callbacks suppressed [ 85.413842][ T5442] netlink: 28 bytes leftover after parsing attributes in process `syz.4.356'. [ 85.419375][ T5442] netlink: 28 bytes leftover after parsing attributes in process `syz.4.356'. [ 85.493155][ T5449] netlink: 28 bytes leftover after parsing attributes in process `syz.4.356'. [ 85.494776][ T5449] netlink: 28 bytes leftover after parsing attributes in process `syz.4.356'. [ 85.516748][ T48] Bluetooth: hci3: link tx timeout [ 85.517679][ T48] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 85.597322][ T5444] device syzkaller0 entered promiscuous mode [ 85.809367][ T5476] device bridge_slave_0 left promiscuous mode [ 85.811369][ T5476] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.856099][ T5479] device syzkaller1 entered promiscuous mode [ 85.905387][ T5486] netlink: 4 bytes leftover after parsing attributes in process `syz.1.372'. [ 85.911737][ T5486] netlink: 12 bytes leftover after parsing attributes in process `syz.1.372'. [ 86.100960][ T5507] netlink: 8 bytes leftover after parsing attributes in process `syz.2.382'. [ 86.114951][ T5507] netlink: 4 bytes leftover after parsing attributes in process `syz.2.382'. [ 86.119803][ T5507] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 86.256187][ T5527] netlink: 272 bytes leftover after parsing attributes in process `syz.2.390'. [ 86.280977][ T5519] device syzkaller1 entered promiscuous mode [ 86.351217][ T5537] netlink: 964 bytes leftover after parsing attributes in process `syz.2.395'. [ 86.618453][ T5571] device syzkaller1 entered promiscuous mode [ 86.809127][ T5586] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 86.961567][ T5609] device syzkaller1 entered promiscuous mode [ 87.491531][ T5660] device syzkaller1 entered promiscuous mode [ 87.587863][ T48] Bluetooth: hci3: link tx timeout [ 87.588937][ T48] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 87.590282][ T48] Bluetooth: hci3: link tx timeout [ 87.591191][ T48] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 87.592598][ T48] Bluetooth: hci3: link tx timeout [ 87.593535][ T48] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 87.594823][ T48] Bluetooth: hci3: link tx timeout [ 87.595679][ T48] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 87.652868][ T5684] device syzkaller0 entered promiscuous mode [ 87.850928][ T5698] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 87.864856][ T5700] ip_tables: iptables: counters copy to user failed while replacing table [ 87.909113][ T5704] device syzkaller1 entered promiscuous mode [ 88.334280][ T5719] device syzkaller0 entered promiscuous mode [ 88.610624][ T5735] device syzkaller0 entered promiscuous mode [ 88.716463][ T5748] ip_tables: iptables: counters copy to user failed while replacing table [ 89.517887][ T48] Bluetooth: hci3: link tx timeout [ 89.518950][ T48] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 93.526388][ T48] Bluetooth: hci3: link tx timeout [ 93.527644][ T48] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 99.752224][ T5785] __nla_validate_parse: 5 callbacks suppressed [ 99.752235][ T5785] netlink: 40 bytes leftover after parsing attributes in process `syz.0.493'. [ 99.819755][ T5793] ip_tables: iptables: counters copy to user failed while replacing table [ 99.900003][ T5804] device syzkaller0 entered promiscuous mode [ 99.965177][ T5808] device syzkaller0 entered promiscuous mode [ 99.970204][ T5804] 0: reclassify loop, rule prio 0, protocol 700 [ 99.995944][ T5814] device syzkaller0 entered promiscuous mode [ 100.135787][ T5827] ip_tables: iptables: counters copy to user failed while replacing table [ 111.086373][ T5825] netlink: 'syz.2.511': attribute type 2 has an invalid length. [ 111.194303][ T5856] ip_tables: iptables: counters copy to user failed while replacing table [ 111.265066][ T5866] device syzkaller0 entered promiscuous mode [ 117.421855][ T48] Bluetooth: hci3: link tx timeout [ 117.422920][ T48] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 117.424667][ T48] Bluetooth: hci3: link tx timeout [ 117.425601][ T48] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 119.436516][ T48] Bluetooth: hci3: command 0x0406 tx timeout [ 122.231870][ T5902] ip_tables: iptables: counters copy to user failed while replacing table [ 122.359001][ T5922] device syzkaller0 entered promiscuous mode [ 122.361481][ T5923] IPv6: Can't replace route, no match found [ 122.399486][ T5928] Cannot find del_set index 2 as target [ 125.917499][ T2064] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.918724][ T2064] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.471041][ T6003] device syzkaller0 entered promiscuous mode [ 144.386140][ T6046] IPVS: set_ctl: invalid protocol: 136 172.20.20.187:20002 [ 144.472667][ T6056] netlink: 12 bytes leftover after parsing attributes in process `syz.1.590'. [ 145.267615][ T6117] netlink: 32 bytes leftover after parsing attributes in process `syz.2.615'. [ 145.357007][ T6130] netlink: 12 bytes leftover after parsing attributes in process `syz.2.621'. [ 145.584437][ T6140] netlink: 'syz.2.625': attribute type 11 has an invalid length. [ 145.929876][ T6165] netlink: 76 bytes leftover after parsing attributes in process `syz.3.637'. [ 146.062831][ T6169] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.071769][ T6169] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 146.146083][ T6175] netlink: 12 bytes leftover after parsing attributes in process `syz.3.642'. [ 146.224844][ T6181] device syzkaller0 entered promiscuous mode [ 146.299065][ T6183] netlink: 'syz.4.646': attribute type 9 has an invalid length. [ 146.300794][ T6183] netlink: 20 bytes leftover after parsing attributes in process `syz.4.646'. [ 146.371285][ T6190] raw_sendmsg: syz.3.649 forgot to set AF_INET. Fix it! [ 146.511692][ T6199] netlink: 8 bytes leftover after parsing attributes in process `syz.0.653'. [ 146.528803][ T6201] netlink: 108 bytes leftover after parsing attributes in process `syz.4.654'. [ 146.621328][ T6211] device syzkaller0 entered promiscuous mode [ 147.128143][ T6246] device syzkaller0 entered promiscuous mode [ 147.244246][ T6254] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 147.289491][ T6251] netlink: 8 bytes leftover after parsing attributes in process `syz.0.675'. [ 147.453448][ T6267] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 153.606646][ T4331] Bluetooth: hci2: command 0x0406 tx timeout [ 153.606754][ T48] Bluetooth: hci0: command 0x0406 tx timeout [ 153.607761][ T4331] Bluetooth: hci1: command 0x0406 tx timeout [ 153.608943][ T48] Bluetooth: hci4: command 0x0406 tx timeout [ 158.268318][ T6302] netlink: 8 bytes leftover after parsing attributes in process `syz.4.695'. [ 158.271518][ T6302] device dummy0 entered promiscuous mode [ 159.228150][ T6332] tipc: Started in network mode [ 159.229062][ T6332] tipc: Node identity 967c1568cfac, cluster identity 4711 [ 159.230494][ T6332] tipc: Enabled bearer , priority 1 [ 159.301095][ T6334] device dummy0 entered promiscuous mode [ 159.347204][ T6334] device dummy0 left promiscuous mode [ 159.400011][ T6331] tipc: Resetting bearer [ 159.457606][ T6331] tipc: Disabling bearer [ 159.468918][ T6338] device syzkaller0 entered promiscuous mode [ 171.308935][ T6448] netlink: 20 bytes leftover after parsing attributes in process `syz.4.753'. [ 172.396290][ T6462] netlink: 156 bytes leftover after parsing attributes in process `syz.4.757'. [ 173.450190][ T6409] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 173.613056][ T6481] netlink: 20 bytes leftover after parsing attributes in process `syz.2.766'. [ 174.097574][ T6530] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 174.340802][ T6550] netlink: 12 bytes leftover after parsing attributes in process `syz.1.797'. [ 174.422111][ T6556] bridge0: port 1(wlan1) entered blocking state [ 174.423742][ T6556] bridge0: port 1(wlan1) entered disabled state [ 174.427311][ T6556] device wlan1 entered promiscuous mode [ 174.737632][ T6550] device wlan1 left promiscuous mode [ 174.739288][ T6550] bridge0: port 1(wlan1) entered disabled state [ 174.908197][ T6581] sctp: [Deprecated]: syz.1.806 (pid 6581) Use of int in max_burst socket option deprecated. [ 174.908197][ T6581] Use struct sctp_assoc_value instead [ 175.848282][ T6696] device syzkaller0 entered promiscuous mode [ 176.316398][ T6751] netlink: 4 bytes leftover after parsing attributes in process `syz.2.885'. [ 176.681807][ T6777] netlink: 8 bytes leftover after parsing attributes in process `syz.2.892'. [ 176.908874][ T6804] device syzkaller0 entered promiscuous mode [ 176.922613][ T6809] tipc: Started in network mode [ 176.923666][ T6809] tipc: Node identity d639b3489f7b, cluster identity 4711 [ 176.925043][ T6809] tipc: Enabled bearer , priority 0 [ 176.927558][ T6809] device syzkaller0 entered promiscuous mode [ 176.933627][ T6809] tipc: Resetting bearer [ 176.941959][ T6806] tipc: Resetting bearer [ 176.987151][ T6806] tipc: Disabling bearer [ 180.678436][ T4333] Bluetooth: hci3: link tx timeout [ 180.679395][ T4333] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 180.680945][ T4333] Bluetooth: hci3: link tx timeout [ 180.681835][ T4333] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 187.357785][ T2064] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.359012][ T2064] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.933057][ T6841] tipc: Enabling of bearer rejected, failed to enable media [ 188.112703][ T6873] device syzkaller0 entered promiscuous mode [ 199.200000][ T6897] tipc: Enabling of bearer rejected, failed to enable media [ 199.249179][ T6915] ip_tables: iptables: counters copy to user failed while replacing table [ 199.280448][ T6917] lo speed is unknown, defaulting to 1000 [ 199.282444][ T6917] lo speed is unknown, defaulting to 1000 [ 199.283925][ T6917] lo speed is unknown, defaulting to 1000 [ 199.332779][ T6924] netdevsim0: mtu less than device minimum [ 199.335159][ T6917] infiniband syz0: set active [ 199.337369][ T22] lo speed is unknown, defaulting to 1000 [ 199.346278][ T6917] infiniband syz0: added lo [ 199.346803][ T6925] netlink: 18 bytes leftover after parsing attributes in process `syz.4.945'. [ 199.376999][ T6917] RDS/IB: syz0: added [ 199.377974][ T6917] smc: adding ib device syz0 with port count 1 [ 199.379152][ T6917] smc: ib device syz0 port 1 has pnetid [ 199.381203][ T14] lo speed is unknown, defaulting to 1000 [ 199.383365][ T6917] lo speed is unknown, defaulting to 1000 [ 199.426847][ T6917] lo speed is unknown, defaulting to 1000 [ 199.471585][ T6917] lo speed is unknown, defaulting to 1000 [ 199.492147][ T6917] lo speed is unknown, defaulting to 1000 [ 199.512627][ T6917] lo speed is unknown, defaulting to 1000 [ 199.660969][ T6949] device syzkaller0 entered promiscuous mode [ 210.494578][ T6953] tipc: Enabling of bearer rejected, failed to enable media [ 210.574406][ T6996] netlink: 8 bytes leftover after parsing attributes in process `syz.4.961'. [ 210.576236][ T6996] netlink: 4 bytes leftover after parsing attributes in process `syz.4.961'. [ 210.613930][ T6996] netlink: 'syz.4.961': attribute type 4 has an invalid length. [ 210.615294][ T6996] netlink: 152 bytes leftover after parsing attributes in process `syz.4.961'. [ 210.624135][ T6996] .`: renamed from bond0 [ 210.738912][ T7006] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.867742][ T7006] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.889108][ T7024] device syzkaller0 entered promiscuous mode [ 210.894022][ T7023] tipc: Enabled bearer , priority 0 [ 210.896136][ T7023] device syzkaller0 entered promiscuous mode [ 210.905737][ T7023] tipc: Resetting bearer [ 210.910314][ T7022] tipc: Resetting bearer [ 210.951219][ T7022] tipc: Disabling bearer [ 211.134413][ T7033] xt_hashlimit: size too large, truncated to 1048576 [ 221.778915][ T7006] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.888550][ T7006] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.922121][ T7064] tipc: Enabled bearer , priority 0 [ 221.932808][ T7064] device syzkaller0 entered promiscuous mode [ 221.939218][ T7064] tipc: Resetting bearer [ 221.941649][ T7063] tipc: Resetting bearer [ 222.007705][ T7063] tipc: Disabling bearer [ 222.130216][ T7080] ip_tables: iptables: counters copy to user failed while replacing table [ 222.135741][ T7006] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.141710][ T7006] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.146005][ T7006] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.152946][ T7006] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.175241][ T7084] device syzkaller0 entered promiscuous mode [ 222.329859][ T7100] batman_adv: batadv0: Adding interface: dummy0 [ 222.331182][ T7100] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.336016][ T7100] batman_adv: batadv0: Interface activated: dummy0 [ 222.364863][ T7105] ip_tables: iptables: counters copy to user failed while replacing table [ 222.489851][ T7100] batadv0: mtu less than device minimum [ 222.499568][ T7100] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 222.502930][ T7100] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 222.506109][ T7100] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 222.509500][ T7100] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 222.512707][ T7100] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 222.515844][ T7100] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 222.519228][ T7100] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 222.582695][ T7120] tipc: Enabled bearer , priority 0 [ 222.585569][ T7120] device syzkaller0 entered promiscuous mode [ 222.593924][ T7120] tipc: Resetting bearer [ 222.605754][ T7119] tipc: Resetting bearer [ 222.887313][ T7119] tipc: Disabling bearer [ 223.175746][ T7128] device syzkaller0 entered promiscuous mode [ 234.333410][ T7180] tipc: Started in network mode [ 234.334347][ T7180] tipc: Node identity 5ec8f01aa238, cluster identity 4711 [ 234.345831][ T7180] tipc: Enabled bearer , priority 0 [ 234.347699][ T7180] device syzkaller0 entered promiscuous mode [ 234.381697][ T7180] tipc: Resetting bearer [ 234.386384][ T7179] tipc: Resetting bearer [ 234.457313][ T7179] tipc: Disabling bearer [ 234.516792][ T7202] [ 234.517286][ T7202] ====================================================== [ 234.518534][ T7202] WARNING: possible circular locking dependency detected [ 234.519688][ T7202] syzkaller #0 Not tainted [ 234.520467][ T7202] ------------------------------------------------------ [ 234.521680][ T7202] syz.0.1022/7202 is trying to acquire lock: [ 234.522824][ T7202] ffff0000fa118350 (&ndev->req_lock){+.+.}-{3:3}, at: nci_start_poll+0x720/0xadc [ 234.524608][ T7202] [ 234.524608][ T7202] but task is already holding lock: [ 234.525982][ T7202] ffff0000f4387528 (&genl_data->genl_data_mutex){+.+.}-{3:3}, at: nfc_genl_start_poll+0x1a0/0x2f4 [ 234.527900][ T7202] [ 234.527900][ T7202] which lock already depends on the new lock. [ 234.527900][ T7202] [ 234.529757][ T7202] [ 234.529757][ T7202] the existing dependency chain (in reverse order) is: [ 234.531331][ T7202] [ 234.531331][ T7202] -> #3 (&genl_data->genl_data_mutex){+.+.}-{3:3}: [ 234.532938][ T7202] __mutex_lock_common+0x1a0/0x1f3c [ 234.533927][ T7202] mutex_lock_nested+0x38/0x44 [ 234.534882][ T7202] nfc_urelease_event_work+0x108/0x2b8 [ 234.535979][ T7202] process_one_work+0x7e4/0x13bc [ 234.536907][ T7202] worker_thread+0x8cc/0xfe8 [ 234.537839][ T7202] kthread+0x254/0x2e0 [ 234.538678][ T7202] ret_from_fork+0x10/0x20 [ 234.539565][ T7202] [ 234.539565][ T7202] -> #2 (nfc_devlist_mutex){+.+.}-{3:3}: [ 234.541150][ T7202] __mutex_lock_common+0x1a0/0x1f3c [ 234.542209][ T7202] mutex_lock_nested+0x38/0x44 [ 234.543125][ T7202] nfc_register_device+0x48/0x300 [ 234.544197][ T7202] nci_register_device+0x6b8/0x7e4 [ 234.545382][ T7202] virtual_ncidev_open+0x6c/0xd8 [ 234.546552][ T7202] misc_open+0x310/0x388 [ 234.547541][ T7202] chrdev_open+0x3d0/0x51c [ 234.548529][ T7202] do_dentry_open+0x738/0xf8c [ 234.549509][ T7202] vfs_open+0x7c/0x90 [ 234.550357][ T7202] path_openat+0x1fc0/0x27a0 [ 234.551382][ T7202] do_filp_open+0x198/0x38c [ 234.552370][ T7202] do_sys_openat2+0x134/0x3fc [ 234.553348][ T7202] __arm64_sys_openat+0x11c/0x150 [ 234.554428][ T7202] invoke_syscall+0x98/0x290 [ 234.555357][ T7202] el0_svc_common+0x13c/0x258 [ 234.556332][ T7202] do_el0_svc+0x5c/0x134 [ 234.557241][ T7202] el0_svc+0x58/0x12c [ 234.558147][ T7202] el0t_64_sync_handler+0x84/0xf0 [ 234.559292][ T7202] el0t_64_sync+0x18c/0x190 [ 234.560314][ T7202] [ 234.560314][ T7202] -> #1 (nci_mutex){+.+.}-{3:3}: [ 234.561702][ T7202] __mutex_lock_common+0x1a0/0x1f3c [ 234.562814][ T7202] mutex_lock_nested+0x38/0x44 [ 234.563846][ T7202] virtual_nci_close+0x28/0x58 [ 234.564846][ T7202] nci_dev_up+0x704/0xaa0 [ 234.565793][ T7202] nfc_dev_up+0x138/0x2e0 [ 234.566740][ T7202] nfc_genl_dev_up+0x98/0xdc [ 234.567738][ T7202] genl_family_rcv_msg_doit+0x210/0x308 [ 234.568891][ T7202] genl_rcv_msg+0x424/0x600 [ 234.569848][ T7202] netlink_rcv_skb+0x220/0x3ec [ 234.570882][ T7202] genl_rcv+0x38/0x50 [ 234.571776][ T7202] netlink_unicast+0x5fc/0x80c [ 234.572785][ T7202] netlink_sendmsg+0x6f0/0x9d8 [ 234.573849][ T7202] ____sys_sendmsg+0x588/0x90c [ 234.574887][ T7202] __sys_sendmsg+0x288/0x374 [ 234.575872][ T7202] __arm64_sys_sendmsg+0x80/0x94 [ 234.576939][ T7202] invoke_syscall+0x98/0x290 [ 234.577950][ T7202] el0_svc_common+0x13c/0x258 [ 234.578937][ T7202] do_el0_svc+0x5c/0x134 [ 234.579824][ T7202] el0_svc+0x58/0x12c [ 234.580687][ T7202] el0t_64_sync_handler+0x84/0xf0 [ 234.581725][ T7202] el0t_64_sync+0x18c/0x190 [ 234.582653][ T7202] [ 234.582653][ T7202] -> #0 (&ndev->req_lock){+.+.}-{3:3}: [ 234.584106][ T7202] __lock_acquire+0x3504/0x7280 [ 234.585135][ T7202] lock_acquire+0x210/0x63c [ 234.586131][ T7202] __mutex_lock_common+0x1a0/0x1f3c [ 234.587284][ T7202] mutex_lock_nested+0x38/0x44 [ 234.588331][ T7202] nci_start_poll+0x720/0xadc [ 234.589334][ T7202] nfc_start_poll+0x124/0x284 [ 234.590345][ T7202] nfc_genl_start_poll+0x1b0/0x2f4 [ 234.591447][ T7202] genl_family_rcv_msg_doit+0x210/0x308 [ 234.592585][ T7202] genl_rcv_msg+0x424/0x600 [ 234.593539][ T7202] netlink_rcv_skb+0x220/0x3ec [ 234.594516][ T7202] genl_rcv+0x38/0x50 [ 234.595370][ T7202] netlink_unicast+0x5fc/0x80c [ 234.596354][ T7202] netlink_sendmsg+0x6f0/0x9d8 [ 234.597335][ T7202] ____sys_sendmsg+0x588/0x90c [ 234.598324][ T7202] __sys_sendmsg+0x288/0x374 [ 234.599348][ T7202] __arm64_sys_sendmsg+0x80/0x94 [ 234.600360][ T7202] invoke_syscall+0x98/0x290 [ 234.601489][ T7202] el0_svc_common+0x13c/0x258 [ 234.602651][ T7202] do_el0_svc+0x5c/0x134 [ 234.603649][ T7202] el0_svc+0x58/0x12c [ 234.604519][ T7202] el0t_64_sync_handler+0x84/0xf0 [ 234.605589][ T7202] el0t_64_sync+0x18c/0x190 [ 234.606563][ T7202] [ 234.606563][ T7202] other info that might help us debug this: [ 234.606563][ T7202] [ 234.608465][ T7202] Chain exists of: [ 234.608465][ T7202] &ndev->req_lock --> nfc_devlist_mutex --> &genl_data->genl_data_mutex [ 234.608465][ T7202] [ 234.611195][ T7202] Possible unsafe locking scenario: [ 234.611195][ T7202] [ 234.612607][ T7202] CPU0 CPU1 [ 234.613630][ T7202] ---- ---- [ 234.614617][ T7202] lock(&genl_data->genl_data_mutex); [ 234.615618][ T7202] lock(nfc_devlist_mutex); [ 234.616971][ T7202] lock(&genl_data->genl_data_mutex); [ 234.618474][ T7202] lock(&ndev->req_lock); [ 234.619305][ T7202] [ 234.619305][ T7202] *** DEADLOCK *** [ 234.619305][ T7202] [ 234.620857][ T7202] 4 locks held by syz.0.1022/7202: [ 234.621854][ T7202] #0: ffff800018afd110 (cb_lock){++++}-{3:3}, at: genl_rcv+0x28/0x50 [ 234.623423][ T7202] #1: ffff800018afcf28 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0xec/0x600 [ 234.625125][ T7202] #2: ffff0000f4387528 (&genl_data->genl_data_mutex){+.+.}-{3:3}, at: nfc_genl_start_poll+0x1a0/0x2f4 [ 234.627229][ T7202] #3: ffff0000f4387100 (&dev->mutex){....}-{3:3}, at: nfc_start_poll+0x5c/0x284 [ 234.628909][ T7202] [ 234.628909][ T7202] stack backtrace: [ 234.629975][ T7202] CPU: 1 PID: 7202 Comm: syz.0.1022 Not tainted syzkaller #0 [ 234.631358][ T7202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 234.633213][ T7202] Call trace: [ 234.633823][ T7202] dump_backtrace+0x1c4/0x1f0 [ 234.634677][ T7202] show_stack+0x2c/0x3c [ 234.635444][ T7202] __dump_stack+0x30/0x40 [ 234.636248][ T7202] dump_stack_lvl+0xf4/0x15c [ 234.637106][ T7202] dump_stack+0x1c/0x5c [ 234.637862][ T7202] print_circular_bug+0x148/0x1b0 [ 234.638811][ T7202] check_noncircular+0x290/0x370 [ 234.639721][ T7202] __lock_acquire+0x3504/0x7280 [ 234.640690][ T7202] lock_acquire+0x210/0x63c [ 234.641531][ T7202] __mutex_lock_common+0x1a0/0x1f3c [ 234.642582][ T7202] mutex_lock_nested+0x38/0x44 [ 234.643542][ T7202] nci_start_poll+0x720/0xadc [ 234.644452][ T7202] nfc_start_poll+0x124/0x284 [ 234.645355][ T7202] nfc_genl_start_poll+0x1b0/0x2f4 [ 234.646381][ T7202] genl_family_rcv_msg_doit+0x210/0x308 [ 234.647405][ T7202] genl_rcv_msg+0x424/0x600 [ 234.648238][ T7202] netlink_rcv_skb+0x220/0x3ec [ 234.649128][ T7202] genl_rcv+0x38/0x50 [ 234.649899][ T7202] netlink_unicast+0x5fc/0x80c [ 234.650790][ T7202] netlink_sendmsg+0x6f0/0x9d8 [ 234.651716][ T7202] ____sys_sendmsg+0x588/0x90c [ 234.652662][ T7202] __sys_sendmsg+0x288/0x374 [ 234.653564][ T7202] __arm64_sys_sendmsg+0x80/0x94 [ 234.654523][ T7202] invoke_syscall+0x98/0x290 [ 234.655370][ T7202] el0_svc_common+0x13c/0x258 [ 234.656229][ T7202] do_el0_svc+0x5c/0x134 [ 234.657021][ T7202] el0_svc+0x58/0x12c [ 234.657758][ T7202] el0t_64_sync_handler+0x84/0xf0 [ 234.658717][ T7202] el0t_64_sync+0x18c/0x190 [ 237.403088][ T7202] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 237.407362][ T7190] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512