last executing test programs: 2.134201149s ago: executing program 3 (id=439): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x843}, 0x44040) socket(0x1e, 0x4, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0xfdff) 2.133846509s ago: executing program 3 (id=441): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, 0x0, 0x0) 2.108018379s ago: executing program 3 (id=442): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x40, r1, 0x11, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0x200}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 2.021999411s ago: executing program 3 (id=444): setfsgid(0xee00) r0 = syz_clone(0xb8086200, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(r0, &(0x7f00000004c0)='net/nfsfs\x00') munmap(&(0x7f0000901000/0x3000)=nil, 0x3000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x800, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e77, 0x20000000, 0x94a, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x3ffa, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x854}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lsetxattr$security_ima(&(0x7f0000000280)='./file0\x00', &(0x7f00000003c0), &(0x7f0000000400)=@sha1={0x1, "1ca081ef3513c98fda46645b61a99bfc3a87a614"}, 0x15, 0x2) socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x800452d2, &(0x7f0000000100)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000180)=ANY=[], 0x2a) syz_open_dev$dri(&(0x7f0000000080), 0x8004, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/diskstats\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000180)=""/73, 0x49, 0xac8c) 1.890959653s ago: executing program 0 (id=449): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2) sendmmsg$inet(r1, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000880)=[{0x0}], 0x1, &(0x7f00000006c0)=ANY=[], 0x160}}], 0x2, 0x4000000) syz_init_net_socket$rose(0xb, 0x5, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000340)={@local, @dev, @void, {@ipv4={0x800, @generic={{0x9, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x35}, {[@ssrr={0x89, 0x7, 0xef, [@broadcast]}, @cipso={0x86, 0x6}]}}}}}}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 1.506988921s ago: executing program 4 (id=458): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbb0180c200000386dd6d002000006488ff00000000000000000000000000000000ff0200000000000000000000000000014f194e20006490"], 0x9e) 1.310631235s ago: executing program 4 (id=463): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r0 = socket(0x2, 0x80805, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f00000006c0)={'erspan0\x00', 0x0, 0x1, 0x8080, 0x9, 0x7, {{0x5, 0x4, 0x2, 0x7, 0x14, 0x66, 0x0, 0x8, 0x4, 0x0, @loopback, @local}}}}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x74, r5, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 1.187236368s ago: executing program 3 (id=468): seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0xce, 0x0, 0x8}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000180)={0x10, 0x0, 0x2, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000000)=0xfffffffe, 0x4) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000ec0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xf6}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x44000) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x20802, 0x0) 1.05618722s ago: executing program 1 (id=472): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x66, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r2, {0xffe2, 0xfff1}, {0x2, 0xfff3}, {0x1, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.02769691s ago: executing program 0 (id=473): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x30, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xe4}, 0x1, 0x0, 0x0, 0x2000c004}, 0x0) 989.342391ms ago: executing program 1 (id=474): openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r0, &(0x7f0000000ec0)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @private=0xa010100, 0x4}, 0x80, &(0x7f0000000340)=[{&(0x7f00000006c0)="cc5c84001214dbd9e5943aa8a315357330c56529d6b619a78687eea13ea02981afbb0fab70e8c3ab037cd82bd48f4947702a177974e7eff5f2ccdec909645f69e3dea5153157374459f6a21ba8609552d9ada54e81b0f19b55b77cf382ad229baa9decce1ea639a300f1fa65b945a0e29d36cb8ed369e91698c0e9ff3fea437d95cb3096af980c02d7c228cc0fcd139de0c5787c6a09f430de0c391e8d48f4601f42e50c3247201ff179e204923a8d4c6d57af9f48b8069be567e24c9045", 0xbe}, {&(0x7f00000007c0)="a960e57530b65741465209e7c6235055450b1ed3da8592b928d8e20971659d8e3ca392643af5fa7ae0e3455099a5f7b857afa34cbf9962bdc9db46a15e7dcf9412a2b98b6ae75ca1bd7eae82d94855e9ced28430f77527b7c0b999eab05883ce32fa9b99187b196d53939db62b2b37c0cd0dea2a1be6f97dbcd0937bb416c3fb74a9d08d9afa4c86a507485b0e6821ba9d82e6b8522a6eba1734eccbc5659567aa08b5b93be09bc2a6d6319acbd1aeb751f8e9b7ce9e2f42", 0xb8}, {&(0x7f0000001400)}], 0x3}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000003880)="f9292cd1d11865c51c5447b349fe89be02e268e8d2e0f66515e514820024a3561e1ed6f2082b9f73eeeb113674f44f5c388ca9853619ebecd21f9b712a14e24054cfb9b5362493ce63a4dd2ef12bf5c67567927fb4e3e7a188b22384e8f1317f72c717a3e893800c1f1774eb42de222824e12ff880cd974848f9468cd8d632e2e95a13f5022a5b9c66d741d4b1777460a8b6e9c360813ee83f35159e8dea7ef03359d7185d560b0ae10b109a8d3fd3be6ed5cadd69e5e32e3c1f94427ba74d7baa41c3f50a7163947f366c12db05ae969ab2a821c0d1032b5dd63f43f8055201a7f4b948f48133cbf5f6c6a913bd1bc0f2cce4516e400204a25b7a750af979c0fd8fe7ee8976833c50b859681ba6fa70241ce4523e4465b60ad9219d566e31d37c6d625450600c627833750e2da54dc25d5f6e91e6a3480a01d6d056497829c4203f0c46e9e2f042576221b0e370697585c09526b0bfca89a8f12d13adb4452f5bd8e40de944e1f13b558c73a93c43c53d2844ae7fac848b8bb21cf2a5693d373a9e2127138c36358a3f9a887ff2742a3d362cbd4892844372284841f0cc08b4efd2d4053b58cd5a198a483db1148311c4b9dd265b1636ba84678d3de2b5fcd0d9c15bbc1a8dacdef6baebde85760ead205c48e1cdaf1cd32755526c96c4763547e9432c90f1a0edef156714533133a58a36fb086837415db5afaff265ee857f01d9bf57aa7a68dca561573076475803c5143cce335bd36164107e62de9184d13e3143dbc979c05365b4bac6d6a2535d79d2cd32a3bf3ee8a3fe24e5b26eaadf2460ebad780ed6116fcccb127ae741bcd2038dda3e8f2a539e40290c9f7114639fb292673e1585e6deefa5761236734811c4c0b7ede0a9f7d650d88c984d9362e4131b4cda1f2073769ce991e6f4c675c4e3235741fe78095425b0c49d6233c8f9f7ec62e2dc60e7e85056396de5927d1c825288e922f9550d3c0f302fe294f6d8dc5cc6b9db2255d1f952cf1b04de21b109badb89b1d6f5d83d46c4b5b759f80833524a0c294b83ab682903e30a241fec30aca3adcedae02305b4f5fed22167ff614e585e73422369c54a3d3239acf454ccb7293d8ea8a4fc3aa4d2d7c3c203448809474096ef5297d1225a678c271f84e65303adcda51d29a5f8b3cb28a4fb52321bc2b3d78a33de69a837a2cd2f9dab09b259ed7b12796cea41d60bf3a83e4cb9f11751c1cb7b0cf8a845b29ae2397f8305d0aba4cc8fbfff8cfbe4430af0b673191117fa42212a4b5e0632e510f1c153a402f02329214947f232090fb8e6b5d02a0d393241cf6b76d6943506d7b9898f1d9c22ac6508d9156304eeb315ee56008f3bcccb1435ab99b0b96d73a8d11f1c8bdc733e66ad08eeebf739583c19bfd331cd68c0e7613573c5c5b729e1962e35f09adc906dbeabf3aa1ad0ecbf13f2c036e7fc7a29f36b6b43650a82e3e620dc87a96f942dc68af6032cf32e0986b6b088d2b6e96c9f5fe8192949e571e2608c6ad7f65c6a17a8ea3eb81edec26f08c712e3f54eba943290b94be5ffcd2e314d3a83f9f53440e38e5c0d26284c30766b615cd45558b8dac41ab81d64f76e528988247224222f8b8a5b87d6376b216bc35fce496cf732447ac5639d38a183c283a6bdd155e2e5204e301175ddc53452ac001c11c63599ed155a6d1a4acc8be942aa689c6485e00f958376064a69766b1bf75cb2a79343f87e8c753b61fb26b217b77c1b76c3eb858326480601d58ce43b6966fb93b2dd4af17fd1ebffce00fde22a72cbe0c93c86e6376228eaf2db8d1b97d3763d78550e022d1800626adb954449200af5d036307a9c72489e78bbc27da3418591eaffbfdcc61e31d24fba8f708c12848ddf45dca5accee1a2dd7915b2d7770141df1580d1ee21c342fdae9fb46bc0b1cf2edd9ae686b81d0767cc9080a598f63b189e052dcb8e46d21ca1fc2e949eea7cfa54f27f96f27cdf673bf75cd0c8bb6277ba01ade5c313fe57ef08bec60c9bef8920d73c2e918b4234f3b5dd4559945b89c14ec986d3dea47a703d0406ee972340a1832feb6561c3891945db59fc2967e091d8b8da3610e883e9fa71eca2017e375343857971b94551b19acb28cf765e98ed37e38a582e16f297df883d598a24b5fc253c2489e1a4e683d027f064a40db035b25d7a6d69ffa37b6babb7ba80dc45516b72061ccb1550c0dc258016ec1e2a7bcfe1330ae6f07098d84e5a1680eb3ff2eeaad300776deb0e8dc03df4d26bee14b8a26b63f8c3390cae064db3086eff8b092becbe0e8256ef6fd69c673bdbc39949dd4c903a01ed88a91829142d2402a294095abfbd5058d25185004b87571c593c0ca9e0d7edc2c7c76134c62426791fa43f6604a1d66d60b71aa1bb5b5684bcb19088139159716641f0613f4fc99b6c4fabd7acfb2bd5f0db9e61da44efdc1a669ee809c95831dca2ce00cc204b976b1c333fb16d7b0aeeac5a3f360ff8b07bcd08e817aa5ac914344088f9245943b93c67f4ff35f34b4443e0a54e20bfbea3127faa3fd4ae30d0c57b8f8cc92aedbfcb36d380b7d3760f9762086a6113203dd0f7e8417ec63c03d793a19c8daf0ab0fff629390bbc7c54d342b456aa32c989e46d7cbfff456ee8f1b83309d49ca875faf005934eea9ec72746dac4f080c40e8d3743ed21785eec34b9f7a65c0b11f414e550942fb3bdb0064c59aea61824c27e5b288c910c0ae843dd9784d8679df8ffe9da8a82b567d77a9ed93608043cf9f1926129479f850d1522db538b89341ea33749a61bf82601e6e788577b6767a19a1b3a1e7f18cdd21f703c4c573e44cf9afd9064e8319328397296bc2f9806981902f653b0c56b12ac7367db25981988b8fc9a735ade4e7ff27a9a1d55ae1a9282c33bd3a4af6488494ace3d72606141d2fee50b025dc775ab1f77b9f4a9bcc678a66ce3693abc7080840509e8996663c24968a187cf77d7cf006318fa269d4194894e5850fe535cdd109b3e7b5f2fefc609f75e64e6c83f10e11dd71784d15bd2745d6e93f1660973df015aa036d22f8094530e0272393a11b5cfe4c58786e1d547f036849f4b95fe6063da9ae60a126d525b9ff97c1b98a881d16af0c77c559b6a4dd24dbcc216dec852e1a5088f4624de506fac9d8ff5e4b18a162e4f237dfcefc883a70880cf190ffbb67c7d09fcabf5daf76ed7eb1f581fbbc4a4749881db43dd6852aaf95b8a6d38bbe2a9b7aad87f0698291d25232d4d2ec232a954ca1840102bcdcb458f6f53b9e9e6f11a6a3d596f37ff7aa04027ab24132d4e7bc7e0bb07af6433396943acec98048b15d8f9b757da5f732969cac0ba14029914346cab6112fc50e4ac1858f988723edfd9a98888844c9b43973c835fbcfd3903416f7048cc0d94b68ebba06ee70105449d91a6f514420901fd6c7b4a626dc174a22769d5d1d53f7510ceb3525d94cf3885d7ff81fbf200f41ed7b3b60e0d646fef80ea125be568650c51db8aa606993c7646a0fe9bbdec83ea5db88c436269161c7d68cb71e80a8ac4aedc57e721404337634c83f73664b9861c73bea2cea0408857d3816b0378bf2efcefa4942c416c976bb6ce601eba8274fa63a440bf1fa2a83d39a94d37af2b3a4608a1ba4c66c7f70261e62b24f3cc2b76f8ab34514e93b5857877ee4fcd4cbfb164f87c52721e16c4701ff0e0f85c72dbda681b300b242edbef0a089fcb85d6dc319bdfac1b21cc30061ebbf14bd0d626b3754e368dd0629ce45c2d34b1248de10bc0d11d5f7ad63f547c4b29d40962ae33596290bdcbbc43fd8a5e4ffe798282718533fbd42437ec900a5da14d17451131cc4d833110cc0f2657d1fa465dd22f73f1326e3c5336f978497641aea775ee6fb3a22bd8f40feba40f918d23f6f6ca5e132d7a359997b1d176cde421459b797ec01c6ea821197f5383089681fab7e7804d5988d9b3aedbb3727ae81f1168afce59955ca8970802b8891b1ce0d0613c4c4549494f65c7868ea955ebc6a410ebd01ecf096fe4c3e7cae58e34a5c3e53b72ae27b25a4a3eaa5f6fe6c63beca4df6c299cf0eaf3f959a1d9729bda53e6e014964bc5e8b5fcaee1883426c4eeb2240af3ce8801e63a0d4132eb8636db3f29e09d5c4051f70ebc0c1b5ca7d4f14b38061eee2099265b914604e17f633e4d0e9bcb5eeea696c4749bd7e9d2796744423c8587cc100990e24da307ad85f92f9d0ab93e8b630bb95597aba46c3ddd99558e2fef6b717dc3a74244560af73d62155d56b4a76f7585b5e1b9519a8f21627214c181efeed8c00087a34c0d5932144fcbdb54eca72ef918004f76098aa0d16a9e8f5abdf8c83498ed0e58e34e2c63433a75602e981fdda800544608a0ca2e1ac990a8b25f6ce32f5100915f758a52ec43b7400f4da748106bc21bf2ed2bdf58fa157cc8f3e3a2112bcb735e866ae994840155dd5d825eb02702f72c1e4e4e498455556b6791f235572fbfe351ff34bbc5c53f3450f9e99cf36c56de52625237d415eeaad3067c8734fb6b29f394a2b0308271603eafeaccb137e4d9dbd61a2877b7fc6912d571b47ea376b5574f4375de1b32a2eedd3a97000994527e5c20e21359f0cb5cc6a89eb2c5df5590cabea416604d4ee647bd18238d6e2b1459eb966fbfe672722bb983403f08501411a3d4f747bd551325c4510be44499249e44461b185e86fc733d2070d149bc665dcf455cd0fd97112ec2ace16350068ac31ad2f6dca03823a80b81b792e26afe96958c2df70ade4cf71db4a61fe4b3a51104d1ad6026e93166269c9473589deca41360a6539d567ca1be5684a6b49270ee19b8ee1a5dfe7465841739431ed8fd7f8a9b8fce9ea5d02f1780dfac1a868861eb05da94cfaf1914e0b48181a0fba1389dc4e6fcc849f511b0dcf61ac2a71598740fd9cc735b5438098ca523d2bf2dc1b72ebec37ce41e0e83533cb3c93ba40a744e69aca4348928ea7bc9ec8fcb2dbd85017f6f9941c36b82b5ba0e6cb347dc03c4c30480e67541d9041c050cd16962688761cdad8d08369f545b2a1182b75853df597e14ce5fa30812f41292ca93533c4e005aa4c192b6c8d5cb143d879affb25e754c3b6f15d4d604f0376d4743edd97828ab830faea95eec3a092d728c6109a94eaee6f9b60df7a457f32d3de6b960d0ac024ccd172a7e26eb0a7de33dbe0fb1ef0110961fb039ac65dc8902bfd332542d4e49f61d520d856c804bbea32b9a542b3781fe11b35f6980710c8f11da4e2ebc1ba31c5661244c769d748d27819197da63c4bb2c9822dca86a794811fe2df8112eaad0deb2e8318e9d4ff00d7b0b3c83142ee4761144db82fc971b3ad9c63914a9e1f52d72c5dee81fcbe22d7ff55a166e1a6c473ff2b7b026376048ea8c34463465bf955f0d8a3b00dee8a8838ae03e5e36c0627aeb1ef8d2df69d2fbce32fb8c2102ab993a091b88651027b33650a7f02600873a557a9aaa6ace5258a4c9bfc29b21b6d2ecfa915e6282a12f8348370f1ef63b672d9e2b435941832f3500f10b04f91f7b5e03889c8c51dc2aff7ce80a884940544aeff735c7e3400d036c82ec9822c5e15d1b0fb5e214c6daa62930cd866c9e28d4c5184eeb4a5538b8c74b3615cdf52f6806896424b1a115abfb8fe204d4827dfdb8c0cf3a61323ae237eb78b9405cebeea6825cfcea372bb61b136e2d1f3563ca2274ad764d6f98169a0a22b9ff138d9224889c821f7d26dea0cde358fa090e274660881b6d1aca44dc56deb7107ef81ce9d272cd4df9bcfa", 0x1000}, {&(0x7f0000000880)="90b9f79fecb3ad0dc00ca95fb148a3ba4355cee5ce27d2c10d8474464a37dea0c1ab2a961404f5aa5493cdadb4b6bf4131e96c0aef0f89065db2aa551c68ce3fa911638fd608ff9e30cce409b6e516e59c272cdbbb88c83dc61199d70f", 0x5d}, {&(0x7f0000000a40)}], 0x3}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000640)="5506b690b4", 0x5}], 0x1}}], 0x3, 0x11) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 946.189162ms ago: executing program 0 (id=475): socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x4, 0x6, @remote}, 0x14) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030017000b63d25a80648c2594f92e24fc60100c034002000009053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) syz_emit_ethernet(0x19, &(0x7f0000000140)=ANY=[], 0x0) 921.638552ms ago: executing program 0 (id=476): unshare(0x6a040000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, 0x818, 0x1a201}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x3c}}, 0x0) 902.410683ms ago: executing program 1 (id=477): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x28}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0xcd, &(0x7f0000000040), 0x5}, 0x0) 872.661783ms ago: executing program 0 (id=478): setfsgid(0xee00) r0 = syz_clone(0xb8086200, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(r0, &(0x7f00000004c0)='net/nfsfs\x00') munmap(&(0x7f0000901000/0x3000)=nil, 0x3000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x800, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e77, 0x20000000, 0x94a, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x3ffa, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x854}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lsetxattr$security_ima(&(0x7f0000000280)='./file0\x00', &(0x7f00000003c0), &(0x7f0000000400)=@sha1={0x1, "1ca081ef3513c98fda46645b61a99bfc3a87a614"}, 0x15, 0x2) socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x800452d2, &(0x7f0000000100)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000180)=ANY=[], 0x2a) syz_open_dev$dri(&(0x7f0000000080), 0x8004, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/diskstats\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000180)=""/73, 0x49, 0xac8c) 794.165955ms ago: executing program 1 (id=479): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003800)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x1, 0xfff3}, {0x0, 0x1}, {0x10, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x6, 0x1, {0x1, 0xfff1}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010) 695.938867ms ago: executing program 1 (id=480): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000040)={0xf2e7, 0x3, 0x8204, 0x0, 0x22, 0x9, 0x2, 0x4, r2}, &(0x7f0000000080)=0x20) 674.904807ms ago: executing program 1 (id=481): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1, {0x0, 0x0, 0x3}, 0xff}, 0x18) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x800, 0x2, 0x80000000000004, 0x6}, 0x0, &(0x7f0000000400)={0x1f, 0x0, 0x800000000000, 0xfffffffffffffffe, 0x1000000000, 0xfffffffffffffffc, 0xfffffffffffffffe}, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r2 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000009c0)={0x44, r2, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x4}, @ETHTOOL_A_STRSET_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4080}, 0xfb0a83be21640b53) 286.146484ms ago: executing program 3 (id=483): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2) sendmmsg$inet(r1, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000880)=[{0x0}], 0x1, &(0x7f00000006c0)=ANY=[], 0x160}}], 0x2, 0x4000000) syz_init_net_socket$rose(0xb, 0x5, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000340)={@local, @dev, @void, {@ipv4={0x800, @generic={{0x9, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x35}, {[@ssrr={0x89, 0x7, 0xef, [@broadcast]}, @cipso={0x86, 0x6}]}}}}}}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 285.948015ms ago: executing program 2 (id=484): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x66, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r2, {0xffe2, 0xfff1}, {0x2, 0xfff3}, {0x1, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) 265.148975ms ago: executing program 2 (id=485): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, 0x0, 0x0) write$tun(r0, &(0x7f00000000c0)={@val={0x8, 0x800}, @val={0x7, 0x3, 0x3, 0x2, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x4, 0x28, 0x0, 0x0, 0x8, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {{0x8100, 0x88a8, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x5}}}}, 0x36) 244.075286ms ago: executing program 4 (id=486): unshare(0x22020400) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32, @ANYRES32=r0], 0x10) 182.042937ms ago: executing program 4 (id=487): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r0, &(0x7f0000000ec0)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @private=0xa010100, 0x4}, 0x80, &(0x7f0000000340)=[{&(0x7f00000006c0)="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", 0xfd}, {&(0x7f00000007c0)="a960e57530b65741465209e7c6235055450b1ed3da8592b928d8e20971659d8e3ca392643af5fa7ae0e3455099a5f7b857afa34cbf9962bdc9db46a15e7dcf9412a2b98b6ae75ca1bd7eae82d94855e9ced28430f77527b7c0b999eab05883ce32fa9b99187b196d53939db62b2b37c0cd0dea2a1be6f97dbcd0937bb416c3fb74a9d08d9afa4c86a507485b0e6821ba9d82e6b8522a6eba1734eccbc5659567aa08b5b93be09bc2a6d6319acbd1aeb751f8e9b7ce9e2f42", 0xb8}, {&(0x7f0000001400)="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", 0xe88}], 0x3}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000a40)}], 0x1}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000640)="5506b6", 0x3}], 0x1}}], 0x3, 0x11) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 151.001917ms ago: executing program 4 (id=488): unshare(0x6a040000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, 0x818, 0x1a201}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x3c}}, 0x0) 114.584008ms ago: executing program 2 (id=489): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x44, 0x28, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0x4}, {0xe, 0xb}}, [@filter_kind_options=@f_fw={{0x7}, {0x18, 0x2, [@TCA_FW_INDEV={0x14}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40c04}, 0x40c4) 87.256169ms ago: executing program 4 (id=490): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003800)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x1, 0xfff3}, {0x0, 0x1}, {0x10, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x6, 0x1, {0x1, 0xfff1}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010) 10.2466ms ago: executing program 2 (id=491): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000040)={0xf2e7, 0x3, 0x8204, 0x0, 0x22, 0x9, 0x2, 0x4, r2}, &(0x7f0000000080)=0x20) 10.08921ms ago: executing program 2 (id=492): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1001, 0x80000000}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@weak_handle={0x77682a85, 0x1, 0x1}}, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) 2.83355ms ago: executing program 0 (id=493): seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0xce, 0x0, 0x8}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000180)={0x10, 0x0, 0x2, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000000)=0xfffffffe, 0x4) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000ec0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xf6}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x44000) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x20802, 0x0) 0s ago: executing program 2 (id=494): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000002c0)={0x18, 0x2, {0x0, @dev, 'ip6gre0\x00'}}, 0x1e) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x14, 0x0, 0x4, 0x201, 0x70bd2a, 0x25dfdbfb, {0x5, 0x0, 0x6}}, 0x14}}, 0x6048800) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x34, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xffe0}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}]}, 0x34}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$SO_J1939_FILTER(r3, 0x6b, 0x1, &(0x7f0000000180)=[{0x0, 0x0, {0x1}, {0x0, 0xf0}, 0x1, 0x7f}, {0x1, 0x0, {0x1, 0x0, 0x2}, {0x1, 0xff, 0x3}}], 0x1a) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r5) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r8 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$sock(r8, &(0x7f0000003240)={0x0, 0x0, 0x0}, 0x24000801) bind$bt_l2cap(r7, &(0x7f0000000000)={0x1f, 0x6, @any, 0x0, 0x1}, 0xe) r9 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10681}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x44084}, 0x20044002) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000037400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080007002609090914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x0, 0x22, &(0x7f0000000100)={0x0, 0x989680}) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$sock_ifreq(r10, 0x89f0, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="a800000010001fff2bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="17010000c984020028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="8685030022000000080020000d000000500012800b000100627269646765000040000280060006007e0600020a001400ffffffffffff00000c002e0000000000010000000c002e0001000000011300009806000800a8880000080005000100000008000d00df000000"], 0xa8}}, 0x24008004) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.38' (ED25519) to the list of known hosts. [ 24.409086][ T4306] cgroup: Unknown subsys name 'net' [ 24.713536][ T4306] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 25.001823][ T4306] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 25.731003][ T4324] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 25.735127][ T4330] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 25.736864][ T4330] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 25.738837][ T4330] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 25.740067][ T4330] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 25.741396][ T4332] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 25.743211][ T4332] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 25.744708][ T4332] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 25.745057][ T4335] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 25.746043][ T4332] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 25.747447][ T4335] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 25.748566][ T4332] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 25.749659][ T4335] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 25.751374][ T4332] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 25.752230][ T4335] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 25.753110][ T4332] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 25.754655][ T4335] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 25.755736][ T4332] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 25.756756][ T4336] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 25.758635][ T4336] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 25.763036][ T4335] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 25.764606][ T4335] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 25.766110][ T4335] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 25.767831][ T4332] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 25.767963][ T4335] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 25.770834][ T4335] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 25.772709][ T4335] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 25.775750][ T4336] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 25.784376][ T4336] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 25.785722][ T4336] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 25.896638][ T4321] chnl_net:caif_netlink_parms(): no params data found [ 25.916632][ T4328] chnl_net:caif_netlink_parms(): no params data found [ 25.949696][ T4321] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.951558][ T4321] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.953163][ T4321] device bridge_slave_0 entered promiscuous mode [ 25.958571][ T4325] chnl_net:caif_netlink_parms(): no params data found [ 25.962262][ T4321] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.963335][ T4321] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.964841][ T4321] device bridge_slave_1 entered promiscuous mode [ 25.975424][ T4321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.989232][ T4321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.004812][ T4333] chnl_net:caif_netlink_parms(): no params data found [ 26.013449][ T4328] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.014603][ T4328] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.015990][ T4328] device bridge_slave_0 entered promiscuous mode [ 26.026107][ T4325] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.027268][ T4325] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.028786][ T4325] device bridge_slave_0 entered promiscuous mode [ 26.030527][ T4328] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.032241][ T4328] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.033824][ T4328] device bridge_slave_1 entered promiscuous mode [ 26.036366][ T4321] team0: Port device team_slave_0 added [ 26.038179][ T4321] team0: Port device team_slave_1 added [ 26.042850][ T4325] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.043850][ T4325] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.045348][ T4325] device bridge_slave_1 entered promiscuous mode [ 26.052725][ T4320] chnl_net:caif_netlink_parms(): no params data found [ 26.072193][ T4333] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.073366][ T4333] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.074991][ T4333] device bridge_slave_0 entered promiscuous mode [ 26.080056][ T4328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.084198][ T4328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.085961][ T4321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.087095][ T4321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.093613][ T4321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.095867][ T4333] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.096976][ T4333] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.098431][ T4333] device bridge_slave_1 entered promiscuous mode [ 26.101050][ T4325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.106895][ T4321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.108000][ T4321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.112221][ T4321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.122257][ T4325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.130272][ T4328] team0: Port device team_slave_0 added [ 26.134847][ T4328] team0: Port device team_slave_1 added [ 26.141284][ T4320] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.142514][ T4320] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.143970][ T4320] device bridge_slave_0 entered promiscuous mode [ 26.149068][ T4333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.159471][ T4320] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.160648][ T4320] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.162309][ T4320] device bridge_slave_1 entered promiscuous mode [ 26.166693][ T4333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.169584][ T4325] team0: Port device team_slave_0 added [ 26.171966][ T4325] team0: Port device team_slave_1 added [ 26.211857][ T4321] device hsr_slave_0 entered promiscuous mode [ 26.260946][ T4321] device hsr_slave_1 entered promiscuous mode [ 26.316794][ T4328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.317903][ T4328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.322552][ T4328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.333290][ T4328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.334433][ T4328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.338749][ T4328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.343929][ T4325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.344942][ T4325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.348940][ T4325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.355009][ T4320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.358682][ T4333] team0: Port device team_slave_0 added [ 26.359964][ T4325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.361391][ T4325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.365513][ T4325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.370025][ T4320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.372948][ T4333] team0: Port device team_slave_1 added [ 26.394389][ T4333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.395505][ T4333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.399504][ T4333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.441822][ T4328] device hsr_slave_0 entered promiscuous mode [ 26.470955][ T4328] device hsr_slave_1 entered promiscuous mode [ 26.520797][ T4328] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 26.521991][ T4328] Cannot create hsr debugfs directory [ 26.524029][ T4320] team0: Port device team_slave_0 added [ 26.527504][ T4333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.528618][ T4333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.532765][ T4333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.537074][ T4320] team0: Port device team_slave_1 added [ 26.591741][ T4325] device hsr_slave_0 entered promiscuous mode [ 26.630971][ T4325] device hsr_slave_1 entered promiscuous mode [ 26.670803][ T4325] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 26.672000][ T4325] Cannot create hsr debugfs directory [ 26.687414][ T4320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.688592][ T4320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.693509][ T4320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.705075][ T4320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.706225][ T4320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.710593][ T4320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.751667][ T4333] device hsr_slave_0 entered promiscuous mode [ 26.790958][ T4333] device hsr_slave_1 entered promiscuous mode [ 26.830770][ T4333] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 26.831980][ T4333] Cannot create hsr debugfs directory [ 26.894425][ T4320] device hsr_slave_0 entered promiscuous mode [ 26.940964][ T4320] device hsr_slave_1 entered promiscuous mode [ 26.980881][ T4320] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 26.982139][ T4320] Cannot create hsr debugfs directory [ 27.047356][ T4321] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 27.081943][ T4321] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 27.133343][ T4321] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 27.171824][ T4321] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 27.242467][ T4328] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 27.281925][ T4328] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 27.325311][ T4328] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 27.362053][ T4328] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 27.427874][ T4325] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 27.442576][ T4325] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 27.473294][ T4325] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 27.541859][ T4325] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 27.592329][ T4321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.611862][ T4333] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 27.643273][ T4333] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 27.695874][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 27.697850][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.699564][ T4333] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 27.769295][ T4321] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.772444][ T4333] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 27.781178][ T4330] Bluetooth: hci1: command 0x0409 tx timeout [ 27.782189][ T4330] Bluetooth: hci0: command 0x0409 tx timeout [ 27.813086][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 27.814846][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.816470][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.817639][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.820503][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 27.824906][ T4320] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 27.850804][ T4327] Bluetooth: hci4: command 0x0409 tx timeout [ 27.851428][ T4330] Bluetooth: hci3: command 0x0409 tx timeout [ 27.851817][ T4327] Bluetooth: hci2: command 0x0409 tx timeout [ 27.877722][ T4320] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 27.916412][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 27.917924][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.919689][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.920804][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.922531][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 27.924688][ T4320] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 27.997323][ T4320] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 28.035985][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 28.040298][ T4328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.047813][ T4328] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.049974][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 28.051597][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.059680][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 28.061487][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 28.062921][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 28.065815][ T4325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.075748][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 28.077170][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.078564][ T1693] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.079600][ T1693] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.082909][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 28.084426][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.086288][ T1693] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.087395][ T1693] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.088794][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 28.090557][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 28.097674][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 28.099284][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 28.101892][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 28.103334][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.106283][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 28.108068][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.112948][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 28.115994][ T4333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.120354][ T4325] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.124495][ T4321] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.126526][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 28.130814][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 28.132268][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.133722][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 28.135623][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 28.146330][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 28.147821][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 28.149232][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.150620][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 28.153426][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.154862][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.155946][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.157313][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 28.160403][ T4333] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.167619][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 28.169185][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.170594][ T1693] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.171754][ T1693] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.173730][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 28.175966][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 28.177575][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 28.189537][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 28.191762][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.193515][ T1693] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.194660][ T1693] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.196124][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 28.197752][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.199337][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 28.203096][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 28.204626][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.206369][ T1693] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.207568][ T1693] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.210553][ T4328] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.212976][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 28.216733][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 28.218232][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 28.219758][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.221760][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 28.227488][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 28.228729][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 28.237752][ T4325] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 28.239395][ T4325] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.242317][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 28.244046][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 28.246016][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 28.247604][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 28.249189][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 28.251889][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 28.253350][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.255393][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 28.256754][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.258252][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 28.259741][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 28.264030][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 28.265748][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 28.269943][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 28.273749][ T4321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.286531][ T4320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.287849][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 28.289652][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 28.291975][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 28.293535][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.298902][ T4333] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.306579][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 28.309667][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 28.311716][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.322742][ T547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 28.324195][ T547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.325513][ T547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 28.326868][ T547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.336618][ T4321] device veth0_vlan entered promiscuous mode [ 28.339667][ T4321] device veth1_vlan entered promiscuous mode [ 28.349987][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 28.352170][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.354280][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 28.356554][ T4320] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.358319][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.360466][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.382281][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 28.383962][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 28.385898][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.387216][ T4415] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.388319][ T4415] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.393534][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 28.394937][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 28.396435][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.397881][ T4415] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.399022][ T4415] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.409330][ T4328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.412978][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 28.414193][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 28.415449][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.417559][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.423735][ T4321] device veth0_macvtap entered promiscuous mode [ 28.426751][ T4321] device veth1_macvtap entered promiscuous mode [ 28.436465][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 28.437931][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 28.439377][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 28.442149][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 28.443453][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 28.445059][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 28.448354][ T4321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.453903][ T4325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.455067][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.456645][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.458047][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 28.459620][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 28.468675][ T4321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.470253][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 28.472490][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 28.473842][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 28.475130][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 28.476725][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 28.478300][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.479909][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.487339][ T4321] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.488777][ T4321] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.490114][ T4321] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.493091][ T4321] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.495191][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 28.496694][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.498140][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 28.499681][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.505551][ T4333] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.509634][ T4320] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.513450][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 28.516218][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 28.517750][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.539604][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 28.541467][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.542935][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 28.544381][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.549110][ T4328] device veth0_vlan entered promiscuous mode [ 28.550661][ T4325] device veth0_vlan entered promiscuous mode [ 28.557375][ T4325] device veth1_vlan entered promiscuous mode [ 28.560104][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 28.561733][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.563451][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 28.564898][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.566439][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 28.567969][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.569500][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.571768][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.573197][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.582964][ T4328] device veth1_vlan entered promiscuous mode [ 28.588203][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 28.589747][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 28.592514][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 28.593929][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.595885][ T4333] device veth0_vlan entered promiscuous mode [ 28.605626][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.607122][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.609690][ T4333] device veth1_vlan entered promiscuous mode [ 28.633760][ T4325] device veth0_macvtap entered promiscuous mode [ 28.636514][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 28.638134][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 28.639510][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 28.642772][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 28.644049][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 28.645303][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.646781][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.658553][ T4333] device veth0_macvtap entered promiscuous mode [ 28.661898][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 28.663153][ T4320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.663196][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 28.665152][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 28.666857][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 28.668275][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.669822][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.672817][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 28.675555][ T4325] device veth1_macvtap entered promiscuous mode [ 28.683064][ T4333] device veth1_macvtap entered promiscuous mode [ 28.685390][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 28.686978][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 28.688406][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.690013][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.697179][ T4328] device veth0_macvtap entered promiscuous mode [ 28.705662][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.707081][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.713101][ T4325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.715947][ T4328] device veth1_macvtap entered promiscuous mode [ 28.717774][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 28.719369][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 28.722045][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.723718][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.726823][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.728486][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.730101][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.732744][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.734800][ T4333] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.741619][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.743270][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.745512][ T4325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.746871][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.748524][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.750040][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.752418][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.756513][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 28.757904][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 28.758347][ T4325] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.760390][ T4325] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.762861][ T4325] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.764196][ T4325] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.769583][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.772406][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.773913][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.775345][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.776755][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.778203][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.780560][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.783400][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.785073][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.788924][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.790622][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.793331][ T4333] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.794666][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 28.796243][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.797875][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.799482][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.802030][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.821315][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.823003][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.824685][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.826411][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.828015][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.829626][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.833004][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.834757][ T4333] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.836106][ T4333] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.837392][ T4333] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.838857][ T4333] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.842314][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 28.843975][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.846038][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.847505][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.867505][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 28.868901][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 28.873957][ T4328] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.875430][ T4328] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.876821][ T4328] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.878229][ T4328] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.883192][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 28.905831][ T4320] device veth0_vlan entered promiscuous mode [ 28.908363][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 28.909171][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 28.909856][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 28.912237][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.914258][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.915711][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.928397][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 28.952928][ T4320] device veth1_vlan entered promiscuous mode [ 28.967998][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 28.969519][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 28.972331][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.974711][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.988944][ T4320] device veth0_macvtap entered promiscuous mode [ 28.996484][ T4320] device veth1_macvtap entered promiscuous mode [ 29.005807][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.007115][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.008791][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.010219][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.024064][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 29.025720][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 29.027263][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 29.028742][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 29.033852][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.035460][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.037072][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.038815][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.040465][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.043491][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.045103][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.046720][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.049353][ T4320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.055687][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 29.057274][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.067547][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.068880][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.070470][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 29.085471][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.087161][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.088666][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.090163][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.094906][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.096478][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.097880][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.099466][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.104873][ T4320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.107787][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 29.109380][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.112809][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.113972][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.115751][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 29.119251][ T4320] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.120619][ T4320] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.125199][ T4320] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.126569][ T4320] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.196373][ T4415] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.197714][ T4415] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.199436][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 29.229378][ T4415] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.230612][ T4415] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.233399][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 29.262788][ T4447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.264184][ T4447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 29.364448][ T4449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.366130][ T4449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 29.386466][ T27] audit: type=1326 audit(29.370:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4450 comm="syz.2.9" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffbbd5b3a8 code=0x0 [ 29.451557][ T4455]  (uninitialized): option downdelay: invalid value (18446744073709551615) [ 29.453339][ T4455]  (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 29.602570][ T4467] syz.3.12 uses obsolete (PF_INET,SOCK_PACKET) [ 29.852920][ T4327] Bluetooth: hci0: command 0x041b tx timeout [ 29.853963][ T4327] Bluetooth: hci1: command 0x041b tx timeout [ 29.930907][ T4336] Bluetooth: hci2: command 0x041b tx timeout [ 29.939535][ T4483] netlink: 20 bytes leftover after parsing attributes in process `syz.1.16'. [ 29.943634][ T4327] Bluetooth: hci3: command 0x041b tx timeout [ 29.944574][ T4327] Bluetooth: hci4: command 0x041b tx timeout [ 30.068376][ T4489] netlink: 6 bytes leftover after parsing attributes in process `syz.1.16'. [ 30.070105][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 30.079686][ T4489] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 30.113982][ T4491] netlink: 28 bytes leftover after parsing attributes in process `syz.4.19'. [ 30.124222][ T4491] netlink: 36 bytes leftover after parsing attributes in process `syz.4.19'. [ 30.177160][ T4493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.180707][ T4493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.434019][ T4503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.435635][ T4503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.794159][ T4515] tipc: Started in network mode [ 30.795088][ T4515] tipc: Node identity 4efdd53c6d8d, cluster identity 4711 [ 30.796242][ T4515] tipc: Enabled bearer , priority 0 [ 30.808812][ T4515] device syzkaller0 entered promiscuous mode [ 30.904747][ T4514] tipc: Resetting bearer [ 30.982175][ T4514] tipc: Disabling bearer [ 31.015663][ T27] audit: type=1326 audit(31.000:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4525 comm="syz.0.34" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8d5b3a8 code=0x0 [ 31.624790][ T4533] 9pnet_fd: Insufficient options for proto=fd [ 31.931092][ T4336] Bluetooth: hci1: command 0x040f tx timeout [ 31.932141][ T4336] Bluetooth: hci0: command 0x040f tx timeout [ 32.023492][ T4327] Bluetooth: hci4: command 0x040f tx timeout [ 32.024501][ T4327] Bluetooth: hci3: command 0x040f tx timeout [ 32.025473][ T4327] Bluetooth: hci2: command 0x040f tx timeout [ 32.181375][ T4390] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 32.215936][ T4559] binder: 4558:4559 tried to acquire reference to desc 0, got 1 instead [ 32.218638][ T4559] binder: 4558:4559 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 32.227912][ T4559] binder: 4559 RLIMIT_NICE not set [ 32.229445][ T4397] binder: undelivered TRANSACTION_COMPLETE [ 32.267886][ T4561] 9pnet_fd: Insufficient options for proto=fd [ 32.366808][ T4390] usb 1-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 32.368263][ T4390] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 32.369866][ T4390] usb 1-1: Product: syz [ 32.370591][ T4390] usb 1-1: Manufacturer: syz [ 32.371888][ T4390] usb 1-1: SerialNumber: syz [ 32.381093][ T4390] usb 1-1: config 0 descriptor?? [ 32.384710][ T4390] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 32.386279][ T4390] dvb-usb: bulk message failed: -22 (2/0) [ 32.389072][ T4390] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 32.391963][ T4390] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 32.393178][ T4390] usb 1-1: media controller created [ 32.401470][ T4390] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 32.599955][ T4390] cxusb: set interface failed [ 32.600701][ T4390] dvb-usb: bulk message failed: -22 (1/0) [ 32.617467][ T4390] DVB: Unable to find symbol mt352_attach() [ 32.618613][ T4390] dvb-usb: bulk message failed: -22 (5/0) [ 32.619533][ T4390] zl10353_read_register: readreg error (reg=127, ret==-121) [ 32.620686][ T4390] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 32.623308][ T4390] Registered IR keymap rc-dvico-mce [ 32.625121][ T4390] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 32.627158][ T4390] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input2 [ 32.630224][ T4390] dvb-usb: schedule remote query interval to 100 msecs. [ 32.634019][ T4390] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 32.641999][ T4390] usb 1-1: USB disconnect, device number 2 [ 32.774730][ T4390] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 33.207176][ T27] audit: type=1326 audit(33.190:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4576 comm="syz.1.53" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9495b3a8 code=0x0 [ 33.429497][ T4592] binder: 4591:4592 tried to acquire reference to desc 0, got 1 instead [ 33.432052][ T4592] binder: 4591:4592 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 33.434225][ T4592] binder: 4592 RLIMIT_NICE not set [ 33.435473][ T14] binder: undelivered TRANSACTION_COMPLETE [ 33.490857][ T4388] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 33.691222][ T4388] usb 1-1: Using ep0 maxpacket: 8 [ 33.694540][ T4388] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 33.695704][ T4388] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 33.697488][ T4388] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 33.699172][ T4388] usb 1-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 33.704106][ T4388] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 33.706078][ T4388] usb 1-1: config 168 interface 0 has no altsetting 0 [ 33.707837][ T4388] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 33.708927][ T4388] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 33.710649][ T4388] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 33.712532][ T4388] usb 1-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 33.714228][ T4388] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 33.716369][ T4388] usb 1-1: config 168 interface 0 has no altsetting 0 [ 33.718044][ T4388] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 33.719170][ T4388] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 33.723315][ T4388] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 33.724897][ T4388] usb 1-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 33.726567][ T4388] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 33.728563][ T4388] usb 1-1: config 168 interface 0 has no altsetting 0 [ 33.737486][ T4388] usb 1-1: string descriptor 0 read error: -22 [ 33.738663][ T4388] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 33.740080][ T4388] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.747231][ T4388] adutux 1-1:168.0: interrupt endpoints not found [ 33.756104][ T4606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.757700][ T4606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.785204][ T4608] netlink: 67 bytes leftover after parsing attributes in process `syz.2.65'. [ 33.841793][ T4612] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615) [ 33.843768][ T4612] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 33.909612][ T4618] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 33.913242][ T4618] netlink: 4 bytes leftover after parsing attributes in process `syz.2.71'. [ 33.966216][ T14] usb 1-1: USB disconnect, device number 3 [ 34.003069][ T4620] binder: 4619:4620 tried to acquire reference to desc 0, got 1 instead [ 34.004988][ T4620] binder: 4619:4620 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 34.007189][ T4620] binder: 4620 RLIMIT_NICE not set [ 34.009080][ T4398] binder: undelivered TRANSACTION_COMPLETE [ 34.011326][ T4336] Bluetooth: hci0: command 0x0419 tx timeout [ 34.012256][ T4336] Bluetooth: hci1: command 0x0419 tx timeout [ 34.091824][ T4327] Bluetooth: hci2: command 0x0419 tx timeout [ 34.092878][ T4327] Bluetooth: hci3: command 0x0419 tx timeout [ 34.093771][ T4327] Bluetooth: hci4: command 0x0419 tx timeout [ 34.148705][ T4631] Zero length message leads to an empty skb [ 34.150100][ T4631] netlink: 'syz.1.77': attribute type 10 has an invalid length. [ 34.160196][ T4631] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 34.177353][ T4631] 8021q: adding VLAN 0 to HW filter on device bond1 [ 34.337079][ T4652] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615) [ 34.341771][ T4652] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 34.423499][ T4666] binder: 4664:4666 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 35.015844][ T4674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.018371][ T4674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.030669][ T4671] netlink: 4 bytes leftover after parsing attributes in process `syz.1.95'. [ 35.269303][ T27] audit: type=1326 audit(35.250:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4676 comm="syz.4.87" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff84f5b3a8 code=0x0 [ 36.171296][ T4336] Bluetooth: hci4: command 0x0407 tx timeout [ 46.099026][ T4683] netlink: 'syz.2.89': attribute type 10 has an invalid length. [ 46.107166][ T4683] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 46.127152][ T4710] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615) [ 46.128786][ T4710] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 46.133551][ T4720] netlink: 12 bytes leftover after parsing attributes in process `syz.4.94'. [ 46.144522][ T4720] bond1 (unregistering): Released all slaves [ 46.189754][ T4725] 9pnet_fd: Insufficient options for proto=fd [ 46.285425][ T4733] binder_user_error: 5 callbacks suppressed [ 46.285433][ T4733] binder: 4732:4733 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 46.288992][ T4733] binder: 4732:4733 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 46.292494][ T4733] binder: 4733 RLIMIT_NICE not set [ 46.439615][ T27] audit: type=1326 audit(46.420:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4742 comm="syz.3.107" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffbcb5b3a8 code=0x0 [ 46.473159][ T4745] netlink: 6 bytes leftover after parsing attributes in process `syz.4.105'. [ 46.474612][ T4745] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 46.496196][ T4745] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 46.635054][ T4752] netlink: 'syz.4.109': attribute type 10 has an invalid length. [ 46.654456][ T4752] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 46.665083][ T4752] 8021q: adding VLAN 0 to HW filter on device bond1 [ 46.887444][ T4764] 9pnet_fd: Insufficient options for proto=fd [ 46.969140][ T4768] netlink: 4 bytes leftover after parsing attributes in process `syz.4.114'. [ 47.260845][ T4772] Bluetooth: MGMT ver 1.22 [ 48.034267][ T4814] binder: 4813:4814 ioctl 4018620d 0 returned -22 [ 48.035906][ T4814] binder: 4813:4814 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 48.039353][ T4814] binder: 4813:4814 got transaction to invalid handle, 1 [ 48.041141][ T4814] binder: 4814:4813 cannot find target node [ 48.042168][ T4814] binder: 4813:4814 transaction async to 0:0 failed 21/29201/-22, size 72-0 line 3054 [ 48.043880][ T4814] binder: 4813:4814 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 48.045998][ T4814] binder: 4814 RLIMIT_NICE not set [ 48.281129][ T27] audit: type=1326 audit(48.270:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4821 comm="syz.1.127" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9495b3a8 code=0x0 [ 48.292235][ T4806] netlink: 'syz.3.121': attribute type 10 has an invalid length. [ 48.299714][ T4806] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 48.309081][ T4816] 8021q: adding VLAN 0 to HW filter on device bond1 [ 48.866857][ T14] binder: undelivered TRANSACTION_ERROR: 29201 [ 48.974319][ T4897] netlink: 12 bytes leftover after parsing attributes in process `syz.0.132'. [ 49.026330][ T4902] netlink: 4 bytes leftover after parsing attributes in process `syz.2.133'. [ 49.611395][ T4928] netlink: 'syz.3.139': attribute type 10 has an invalid length. [ 49.658487][ T4928] 8021q: adding VLAN 0 to HW filter on device bond2 [ 49.665683][ T4928] device bond_slave_0 entered promiscuous mode [ 49.666855][ T4928] device bond_slave_1 entered promiscuous mode [ 49.669969][ T4928] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 49.674707][ T4933] 9pnet_fd: Insufficient options for proto=fd [ 49.680626][ T4928] bond2: (slave macvlan2): Enslaving as a backup interface with an up link [ 49.733444][ T4935] binder: 4934:4935 ioctl 4018620d 0 returned -22 [ 49.735088][ T4935] binder: 4934:4935 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 49.738493][ T4935] binder: 4934:4935 got transaction to invalid handle, 1 [ 49.743519][ T4935] binder: 4935:4934 cannot find target node [ 49.744642][ T4935] binder: 4934:4935 transaction async to 0:0 failed 24/29201/-22, size 72-0 line 3054 [ 49.746479][ T4935] binder: 4934:4935 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 49.752873][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 49.925509][ T4944] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 49.943345][ T27] audit: type=1326 audit(49.930:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4945 comm="syz.2.146" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffbbd5b3a8 code=0x0 [ 50.018704][ T4948] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615) [ 50.020303][ T4948] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 50.073004][ T4951] netlink: 12 bytes leftover after parsing attributes in process `syz.1.148'. [ 50.076291][ T4951] device vlan2 entered promiscuous mode [ 50.077298][ T4951] device gretap0 entered promiscuous mode [ 50.210249][ T4959] 9pnet_fd: Insufficient options for proto=fd [ 50.261560][ T4963] netlink: 'syz.1.154': attribute type 10 has an invalid length. [ 50.284597][ T4963] 8021q: adding VLAN 0 to HW filter on device bond2 [ 50.299017][ T4963] device bond_slave_0 entered promiscuous mode [ 50.300168][ T4963] device bond_slave_1 entered promiscuous mode [ 50.304130][ T4963] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 50.306835][ T4963] bond2: (slave macvlan3): Enslaving as a backup interface with an up link [ 50.393698][ T547] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 50.502765][ T4974] netlink: 4 bytes leftover after parsing attributes in process `syz.3.156'. [ 50.560068][ T4367] binder: undelivered TRANSACTION_ERROR: 29201 [ 50.685094][ T4981] netlink: 8 bytes leftover after parsing attributes in process `syz.4.159'. [ 50.686721][ T4981] netlink: 16 bytes leftover after parsing attributes in process `syz.4.159'. [ 51.025169][ T4976] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615) [ 51.027074][ T4976] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 51.076765][ T4992] 9pnet_fd: Insufficient options for proto=fd [ 51.137700][ T5002] binder: 5000:5002 ioctl 4018620d 0 returned -22 [ 51.147786][ T5002] binder: 5002:5000 cannot find target node [ 51.148858][ T5002] binder: 5000:5002 transaction async to 0:0 failed 27/29201/-22, size 72-0 line 3054 [ 51.340466][ T27] audit: type=1326 audit(51.320:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5008 comm="syz.3.172" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffbcb5b3a8 code=0x0 [ 51.515331][ T5018] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615) [ 51.522610][ T5018] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 51.547911][ T5022] 9pnet_fd: Insufficient options for proto=fd [ 51.970175][ T22] binder: undelivered TRANSACTION_ERROR: 29201 [ 52.449253][ T5051] 9pnet_fd: Insufficient options for proto=fd [ 52.954367][ T5071] binder: BINDER_SET_CONTEXT_MGR already set [ 52.955943][ T5071] binder: 5070:5071 ioctl 4018620d 20004a80 returned -16 [ 52.957713][ T5071] binder_user_error: 5 callbacks suppressed [ 52.957719][ T5071] binder: 5070:5071 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 52.963766][ T5071] binder: 5071 RLIMIT_NICE not set [ 53.239485][ T27] audit: type=1326 audit(53.220:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5072 comm="syz.3.196" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffbcb5b3a8 code=0x0 [ 62.742479][ T5053] netlink: 'syz.0.190': attribute type 10 has an invalid length. [ 62.748820][ T5053] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 62.761706][ T5076] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 62.813268][ T5088] 9pnet_fd: Insufficient options for proto=fd [ 62.869868][ T5093] netlink: 16 bytes leftover after parsing attributes in process `syz.3.203'. [ 62.892489][ T5092] tipc: Started in network mode [ 62.893410][ T5092] tipc: Node identity ca1a1fdbcb82, cluster identity 4711 [ 62.894591][ T5092] tipc: Enabled bearer , priority 0 [ 62.911444][ T5092] device syzkaller0 entered promiscuous mode [ 63.215987][ T5103] binder: BINDER_SET_CONTEXT_MGR already set [ 63.217047][ T5103] binder: 5102:5103 ioctl 4018620d 20004a80 returned -16 [ 63.218507][ T5103] binder: 5102:5103 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 63.220589][ T5103] binder: 5103 RLIMIT_NICE not set [ 63.239310][ T27] audit: type=1326 audit(63.220:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5105 comm="syz.3.208" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffbcb5b3a8 code=0x0 [ 63.262797][ T5092] netlink: 2 bytes leftover after parsing attributes in process `syz.1.202'. [ 63.267453][ T5092] tipc: Resetting bearer [ 63.274053][ T5090] tipc: Resetting bearer [ 63.381702][ T5090] tipc: Disabling bearer [ 64.438180][ T5109] Set syz1 is full, maxelem 65536 reached [ 64.491864][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.494601][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 69.612224][ T112] cfg80211: failed to load regulatory.db [ 75.044008][ T5126] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 75.046324][ T5126] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.047574][ T5126] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.056984][ T5128] netlink: 'syz.0.218': attribute type 10 has an invalid length. [ 75.125880][ T5156] binder: BINDER_SET_CONTEXT_MGR already set [ 75.126946][ T5156] binder: 5155:5156 ioctl 4018620d 20004a80 returned -16 [ 75.128460][ T5156] binder: 5155:5156 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 75.134195][ T5156] binder: 5156 RLIMIT_NICE not set [ 75.144961][ T27] audit: type=1326 audit(75.130:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5158 comm="syz.0.226" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8d5b3a8 code=0x0 [ 75.163628][ T5150] tipc: Started in network mode [ 75.164404][ T5150] tipc: Node identity ce0f5f15c1ea, cluster identity 4711 [ 75.165568][ T5150] tipc: Enabled bearer , priority 0 [ 75.167555][ T5150] device syzkaller0 entered promiscuous mode [ 75.202690][ T5150] netlink: 2 bytes leftover after parsing attributes in process `syz.3.222'. [ 75.208163][ T5150] tipc: Resetting bearer [ 75.217315][ T5149] tipc: Resetting bearer [ 75.361550][ T5149] tipc: Disabling bearer [ 75.815256][ T5188] netlink: 'syz.1.236': attribute type 10 has an invalid length. [ 75.819109][ T5188] bond2: option mode: unable to set because the bond device has slaves [ 75.824367][ T5188] bond2: (slave macvlan4): Error -98 calling set_mac_address [ 75.905649][ T5183] netlink: 'syz.3.235': attribute type 17 has an invalid length. [ 75.908654][ T5183] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 76.018590][ T5196] netlink: 388 bytes leftover after parsing attributes in process `syz.4.240'. [ 76.115221][ T5210] netlink: 40 bytes leftover after parsing attributes in process `syz.4.240'. [ 76.921839][ T5233] binder: 5232:5233 ioctl c0306201 0 returned -14 [ 76.924550][ T5233] binder: 5232:5233 got transaction to invalid handle, 1 [ 76.925691][ T5233] binder: 5233:5232 cannot find target node [ 76.926674][ T5233] binder: 5232:5233 transaction async to 0:0 failed 34/29201/-22, size 72-0 line 3054 [ 76.928483][ T5233] binder: 5232:5233 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 76.930638][ T5233] binder: 5233 RLIMIT_NICE not set [ 77.760008][ T14] binder: undelivered TRANSACTION_ERROR: 29201 [ 77.788425][ T27] audit: type=1326 audit(77.770:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5236 comm="syz.4.252" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff84f5b3a8 code=0x0 [ 87.283102][ T5220] netlink: 'syz.2.248': attribute type 10 has an invalid length. [ 87.414324][ T5255] netlink: 16 bytes leftover after parsing attributes in process `syz.2.259'. [ 87.481685][ T5261] binder: 5258:5261 ioctl c0306201 0 returned -14 [ 87.487221][ T5261] binder: 5258:5261 got transaction to invalid handle, 1 [ 87.488413][ T5261] binder: 5261:5258 cannot find target node [ 87.489416][ T5261] binder: 5258:5261 transaction async to 0:0 failed 38/29201/-22, size 72-0 line 3054 [ 87.513014][ T5261] binder: 5258:5261 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 87.515260][ T5261] binder: 5261 RLIMIT_NICE not set [ 87.538313][ T27] audit: type=1326 audit(87.520:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5268 comm="syz.2.264" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffbbd5b3a8 code=0x0 [ 87.868754][ T5247] netlink: 'syz.4.254': attribute type 17 has an invalid length. [ 87.879209][ T5247] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 87.886546][ T5274] device wlan0 entered promiscuous mode [ 87.887557][ T5274] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 88.190120][ T5296] netlink: 16 bytes leftover after parsing attributes in process `syz.3.272'. [ 88.296277][ T112] binder: undelivered TRANSACTION_ERROR: 29201 [ 88.396943][ T5309] tipc: Started in network mode [ 88.397838][ T5309] tipc: Node identity 5259a4223eaa, cluster identity 4711 [ 88.399605][ T5309] tipc: Enabled bearer , priority 0 [ 88.449748][ T5309] device syzkaller0 entered promiscuous mode [ 88.492735][ T5309] tipc: Resetting bearer [ 88.518381][ T5326] netlink: 16 bytes leftover after parsing attributes in process `syz.4.285'. [ 88.558342][ T5308] tipc: Resetting bearer [ 88.578291][ T5335] binder: 5334:5335 ioctl c0306201 0 returned -14 [ 88.580642][ T5335] binder: 5334:5335 got transaction to invalid handle, 1 [ 88.582110][ T5335] binder: 5335:5334 cannot find target node [ 88.583014][ T5335] binder: 5334:5335 transaction async to 0:0 failed 42/29201/-22, size 72-0 line 3054 [ 88.584848][ T5335] binder: 5334:5335 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 88.587098][ T5335] binder: 5335 RLIMIT_NICE not set [ 88.641514][ T5308] tipc: Disabling bearer [ 88.703406][ T27] audit: type=1326 audit(88.690:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5340 comm="syz.0.291" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8d5b3a8 code=0x0 [ 88.827814][ T5354] device syzkaller1 entered promiscuous mode [ 88.950029][ T5360] netlink: 16 bytes leftover after parsing attributes in process `syz.3.299'. [ 89.046033][ T5368] tipc: Enabled bearer , priority 0 [ 89.047665][ T5368] device syzkaller0 entered promiscuous mode [ 89.089074][ T5368] tipc: Resetting bearer [ 89.091796][ T5367] tipc: Resetting bearer [ 89.122158][ T5367] tipc: Disabling bearer [ 89.156732][ T5372] netlink: 'syz.1.305': attribute type 10 has an invalid length. [ 89.163856][ T5372] bond2: option mode: unable to set because the bond device has slaves [ 89.167863][ T5372] bond2: (slave macvlan4): Error -98 calling set_mac_address [ 89.239355][ T4327] Bluetooth: hci4: link tx timeout [ 89.241207][ T4327] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 89.243009][ T4327] Bluetooth: hci4: link tx timeout [ 89.243822][ T4327] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 89.289942][ T5382] netlink: 16 bytes leftover after parsing attributes in process `syz.3.310'. [ 89.410647][ T14] binder: undelivered TRANSACTION_ERROR: 29201 [ 89.472504][ T5395] tipc: Enabled bearer , priority 0 [ 89.474419][ T5395] device syzkaller0 entered promiscuous mode [ 89.476655][ T5402] netlink: 'syz.4.319': attribute type 10 has an invalid length. [ 90.354821][ T5414] netlink: 16 bytes leftover after parsing attributes in process `syz.2.322'. [ 90.591361][ T112] tipc: Node number set to 26746843 [ 91.139334][ T5425] binder: 5424:5425 got transaction to invalid handle, 1 [ 91.140443][ T5425] binder: 5425:5424 cannot find target node [ 91.141702][ T5425] binder: 5424:5425 transaction async to 0:0 failed 46/29201/-22, size 72-0 line 3054 [ 91.143443][ T5425] binder: 5424:5425 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 91.145440][ T5425] binder: 5425 RLIMIT_NICE not set [ 91.291092][ T4327] Bluetooth: hci4: command 0x0406 tx timeout [ 91.970614][ T4388] binder: undelivered TRANSACTION_ERROR: 29201 [ 100.352214][ T5405] tipc: Resetting bearer [ 100.363062][ T5394] tipc: Resetting bearer [ 100.383001][ T27] audit: type=1326 audit(100.370:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5436 comm="syz.3.331" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffbcb5b3a8 code=0x0 [ 100.411565][ T5394] tipc: Disabling bearer [ 100.416268][ T5432] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 100.486367][ T5441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.333'. [ 100.629286][ T5449] netlink: 4 bytes leftover after parsing attributes in process `syz.2.335'. [ 100.706252][ T5463] binder: 5462:5463 got transaction to invalid handle, 1 [ 100.707481][ T5463] binder: 5463:5462 cannot find target node [ 100.708903][ T5463] binder: 5462:5463 transaction async to 0:0 failed 50/29201/-22, size 72-0 line 3054 [ 100.710604][ T5463] binder: 5462:5463 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 100.715809][ T5463] binder: 5463 RLIMIT_NICE not set [ 100.808636][ T5467] Illegal XDP return value 4294967274 on prog (id 10) dev syz_tun, expect packet loss! [ 100.875236][ T5469] tipc: Enabled bearer , priority 0 [ 100.877147][ T5469] device syzkaller0 entered promiscuous mode [ 100.907060][ T5469] tipc: Resetting bearer [ 100.912557][ T5468] tipc: Resetting bearer [ 101.041427][ T5468] tipc: Disabling bearer [ 101.127980][ T5473] netlink: 'syz.0.343': attribute type 1 has an invalid length. [ 101.242040][ T5475] netlink: 32 bytes leftover after parsing attributes in process `syz.3.344'. [ 101.243726][ T5475] netlink: 'syz.3.344': attribute type 1 has an invalid length. [ 101.256554][ T5475] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 101.259365][ T5475] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 101.260668][ T5475] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 101.268232][ T5475] device wlan0 left promiscuous mode [ 101.270056][ T5477] netlink: 24 bytes leftover after parsing attributes in process `syz.0.345'. [ 101.378646][ T5482] netlink: 'syz.4.346': attribute type 13 has an invalid length. [ 101.380042][ T5482] netlink: 'syz.4.346': attribute type 17 has an invalid length. [ 101.386778][ T5482] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 101.405058][ T5482] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 101.432973][ T5482] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 101.491092][ T5482] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 101.575473][ T4397] binder: undelivered TRANSACTION_ERROR: 29201 [ 101.595881][ T5496] tipc: Started in network mode [ 101.596673][ T5496] tipc: Node identity 224da133993c, cluster identity 4711 [ 101.597785][ T5496] tipc: Enabled bearer , priority 0 [ 101.603677][ T5496] device syzkaller0 entered promiscuous mode [ 101.623527][ T27] audit: type=1326 audit(101.610:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5498 comm="syz.1.354" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9495b3a8 code=0x0 [ 101.650897][ T5496] tipc: Resetting bearer [ 101.661985][ T5495] tipc: Resetting bearer [ 101.753658][ T5495] tipc: Disabling bearer [ 101.845068][ T5506] netlink: 'syz.4.357': attribute type 1 has an invalid length. [ 101.846322][ T5513] netlink: 24 bytes leftover after parsing attributes in process `syz.2.358'. [ 101.963695][ T5516] netlink: 32 bytes leftover after parsing attributes in process `syz.2.359'. [ 101.965279][ T5516] netlink: 'syz.2.359': attribute type 1 has an invalid length. [ 101.977380][ T5516] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 101.978960][ T5516] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 102.495477][ T5529] binder: 5528:5529 got transaction to invalid handle, 1 [ 102.496724][ T5529] binder: 5529:5528 cannot find target node [ 102.497712][ T5529] binder: 5528:5529 transaction async to 0:0 failed 54/29201/-22, size 72-0 line 3054 [ 102.499534][ T5529] binder: 5528:5529 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 102.503882][ T5529] binder: 5529 RLIMIT_NICE not set [ 102.587654][ T5536] netlink: 'syz.1.365': attribute type 13 has an invalid length. [ 102.589146][ T5536] netlink: 'syz.1.365': attribute type 17 has an invalid length. [ 102.596511][ T5536] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 102.605840][ T5536] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 102.613360][ T5536] device syz_tun entered promiscuous mode [ 102.617784][ T5536] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 102.651055][ T5536] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 102.724143][ T5542] tipc: Enabled bearer , priority 0 [ 102.727684][ T5542] device syzkaller0 entered promiscuous mode [ 102.732519][ T5544] netlink: 24 bytes leftover after parsing attributes in process `syz.3.370'. [ 102.789037][ T5542] tipc: Resetting bearer [ 102.801211][ T5541] tipc: Resetting bearer [ 102.808890][ T5551] netlink: 32 bytes leftover after parsing attributes in process `syz.0.373'. [ 102.810570][ T5551] netlink: 'syz.0.373': attribute type 1 has an invalid length. [ 102.890615][ T27] audit: type=1326 audit(102.870:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5555 comm="syz.3.375" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffbcb5b3a8 code=0x0 [ 102.921563][ T5541] tipc: Disabling bearer [ 102.931604][ T5554] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 102.933753][ T5554] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 102.934903][ T5554] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 103.105810][ T5574] netlink: 24 bytes leftover after parsing attributes in process `syz.4.384'. [ 103.125783][ T5575] netlink: 'syz.0.380': attribute type 13 has an invalid length. [ 103.157046][ T5575] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 103.189530][ T5575] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 103.326724][ T4388] binder: undelivered TRANSACTION_ERROR: 29201 [ 103.830405][ T5608] netlink: 24 bytes leftover after parsing attributes in process `syz.2.395'. [ 103.897739][ T5614] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 103.986608][ T5621] binder: 5619:5621 got transaction to invalid handle, 1 [ 103.987921][ T5621] binder: 5621:5619 cannot find target node [ 103.988895][ T5621] binder: 5619:5621 transaction async to 0:0 failed 58/29201/-22, size 72-0 line 3054 [ 103.991459][ T5621] binder: 5619:5621 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 104.000963][ T5621] binder: 5621 RLIMIT_NICE not set [ 104.044586][ T27] audit: type=1326 audit(104.030:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5625 comm="syz.4.402" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff84f5b3a8 code=0x0 [ 104.116783][ T5627] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 104.816893][ T5610] binder: undelivered TRANSACTION_ERROR: 29201 [ 104.936171][ T5666] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 104.942193][ T5666] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 104.971288][ T5666] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 105.028076][ T5675] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 105.031928][ T5675] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 105.050131][ T5675] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 105.149608][ T5685] binder: 5682:5685 got transaction to invalid handle, 1 [ 105.151825][ T5685] binder: 5685:5682 cannot find target node [ 105.165643][ T27] audit: type=1326 audit(105.150:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5689 comm="syz.1.430" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9495b3a8 code=0x0 [ 105.237894][ T5695] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 105.261518][ T5695] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 105.620948][ T5732] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 105.973705][ T4389] binder_debug: 1 callbacks suppressed [ 105.973719][ T4389] binder: undelivered TRANSACTION_ERROR: 29201 [ 106.288946][ T5776] __nla_validate_parse: 2 callbacks suppressed [ 106.288956][ T5776] netlink: 4 bytes leftover after parsing attributes in process `syz.4.463'. [ 106.309779][ T5784] binder_user_error: 2 callbacks suppressed [ 106.309788][ T5784] binder: 5783:5784 got transaction to invalid handle, 1 [ 106.312189][ T5784] binder: 5784:5783 cannot find target node [ 106.313379][ T5784] binder: 5783:5784 transaction async to 0:0 failed 66/29201/-22, size 72-0 line 3054 [ 106.315629][ T5784] binder: 5783:5784 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 106.317864][ T5784] binder: 5784 RLIMIT_NICE not set [ 106.369379][ T27] audit: type=1326 audit(106.350:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5785 comm="syz.3.468" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffbcb5b3a8 code=0x0 [ 106.526652][ T5797] netlink: 24 bytes leftover after parsing attributes in process `syz.1.472'. [ 107.139791][ T22] binder: undelivered TRANSACTION_ERROR: 29201 [ 107.253483][ T5826] netlink: 24 bytes leftover after parsing attributes in process `syz.2.484'. [ 107.290070][ T5829] device syzkaller1 entered promiscuous mode [ 107.436198][ T5840] netlink: 8 bytes leftover after parsing attributes in process `syz.2.489'. [ 107.439947][ T5840] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 107.518933][ T5846] binder: tried to use weak ref as strong ref [ 107.520026][ T5846] binder: 5845:5846 Acquire 1 refcount change on invalid ref 0 ret -22 [ 107.521933][ T5846] binder: 5845:5846 got transaction to invalid handle, 1 [ 107.523169][ T5846] binder: 5846:5845 cannot find target node [ 107.524091][ T5846] binder: 5845:5846 transaction async to 0:0 failed 69/29201/-22, size 72-0 line 3054 [ 107.526120][ T112] binder: undelivered TRANSACTION_ERROR: 29201 [ 107.550469][ T27] audit: type=1326 audit(107.530:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5847 comm="syz.0.493" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8d5b3a8 code=0x0 [ 107.557936][ T5850] netlink: 4 bytes leftover after parsing attributes in process `syz.2.494'. [ 107.573431][ T5850] [ 107.573871][ T5850] ====================================================== [ 107.574948][ T5850] WARNING: possible circular locking dependency detected [ 107.576093][ T5850] syzkaller #0 Not tainted [ 107.576818][ T5850] ------------------------------------------------------ [ 107.577905][ T5850] syz.2.494/5850 is trying to acquire lock: [ 107.578918][ T5850] ffff800017875618 (nr_node_list_lock){+...}-{2:2}, at: nr_rt_device_down+0xb4/0x660 [ 107.580544][ T5850] [ 107.580544][ T5850] but task is already holding lock: [ 107.581759][ T5850] ffff8000178755b8 (nr_neigh_list_lock){+...}-{2:2}, at: nr_rt_device_down+0x38/0x660 [ 107.583328][ T5850] [ 107.583328][ T5850] which lock already depends on the new lock. [ 107.583328][ T5850] [ 107.585078][ T5850] [ 107.585078][ T5850] the existing dependency chain (in reverse order) is: [ 107.586561][ T5850] [ 107.586561][ T5850] -> #2 (nr_neigh_list_lock){+...}-{2:2}: [ 107.587890][ T5850] _raw_spin_lock_bh+0x54/0x6c [ 107.588700][ T5850] nr_rt_ioctl+0x308/0xb80 [ 107.589526][ T5850] nr_ioctl+0x1c4/0x4e4 [ 107.590225][ T5850] sock_do_ioctl+0xf8/0x240 [ 107.591105][ T5850] sock_ioctl+0x5c4/0x840 [ 107.591835][ T5850] __arm64_sys_ioctl+0x14c/0x1c8 [ 107.592783][ T5850] invoke_syscall+0x98/0x2bc [ 107.593602][ T5850] el0_svc_common+0x138/0x258 [ 107.594475][ T5850] do_el0_svc+0x58/0x13c [ 107.595269][ T5850] el0_svc+0x58/0x138 [ 107.595973][ T5850] el0t_64_sync_handler+0x84/0xf0 [ 107.596817][ T5850] el0t_64_sync+0x18c/0x190 [ 107.597565][ T5850] [ 107.597565][ T5850] -> #1 (&nr_node->node_lock){+...}-{2:2}: [ 107.598889][ T5850] _raw_spin_lock_bh+0x54/0x6c [ 107.599782][ T5850] nr_rt_ioctl+0x19c/0xb80 [ 107.600594][ T5850] nr_ioctl+0x1c4/0x4e4 [ 107.601378][ T5850] sock_do_ioctl+0xf8/0x240 [ 107.602216][ T5850] sock_ioctl+0x5c4/0x840 [ 107.603027][ T5850] __arm64_sys_ioctl+0x14c/0x1c8 [ 107.603933][ T5850] invoke_syscall+0x98/0x2bc [ 107.604760][ T5850] el0_svc_common+0x138/0x258 [ 107.605638][ T5850] do_el0_svc+0x58/0x13c [ 107.606460][ T5850] el0_svc+0x58/0x138 [ 107.607242][ T5850] el0t_64_sync_handler+0x84/0xf0 [ 107.608131][ T5850] el0t_64_sync+0x18c/0x190 [ 107.608950][ T5850] [ 107.608950][ T5850] -> #0 (nr_node_list_lock){+...}-{2:2}: [ 107.610246][ T5850] __lock_acquire+0x293c/0x6544 [ 107.611118][ T5850] lock_acquire+0x20c/0x644 [ 107.611978][ T5850] _raw_spin_lock_bh+0x54/0x6c [ 107.612875][ T5850] nr_rt_device_down+0xb4/0x660 [ 107.613756][ T5850] nr_device_event+0x138/0x164 [ 107.614687][ T5850] raw_notifier_call_chain+0xd4/0x164 [ 107.615709][ T5850] dev_close_many+0x2cc/0x440 [ 107.616598][ T5850] dev_close+0x148/0x1f8 [ 107.617366][ T5850] bpq_device_event+0x318/0x82c [ 107.618243][ T5850] raw_notifier_call_chain+0xd4/0x164 [ 107.619260][ T5850] dev_close_many+0x2cc/0x440 [ 107.620182][ T5850] dev_close+0x148/0x1f8 [ 107.620980][ T5850] bond_setup_by_slave+0x70/0x374 [ 107.621907][ T5850] bond_enslave+0x628/0x2ed8 [ 107.622751][ T5850] bond_do_ioctl+0x700/0xb18 [ 107.623613][ T5850] bond_siocdevprivate+0x18c/0x1dc [ 107.624553][ T5850] dev_ifsioc+0xa68/0xed0 [ 107.625369][ T5850] dev_ioctl+0x548/0xc8c [ 107.626162][ T5850] sock_ioctl+0x7a4/0x840 [ 107.626965][ T5850] __arm64_sys_ioctl+0x14c/0x1c8 [ 107.627883][ T5850] invoke_syscall+0x98/0x2bc [ 107.628781][ T5850] el0_svc_common+0x138/0x258 [ 107.629660][ T5850] do_el0_svc+0x58/0x13c [ 107.630405][ T5850] el0_svc+0x58/0x138 [ 107.631159][ T5850] el0t_64_sync_handler+0x84/0xf0 [ 107.632017][ T5850] el0t_64_sync+0x18c/0x190 [ 107.632833][ T5850] [ 107.632833][ T5850] other info that might help us debug this: [ 107.632833][ T5850] [ 107.634422][ T5850] Chain exists of: [ 107.634422][ T5850] nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock [ 107.634422][ T5850] [ 107.636563][ T5850] Possible unsafe locking scenario: [ 107.636563][ T5850] [ 107.637808][ T5850] CPU0 CPU1 [ 107.638643][ T5850] ---- ---- [ 107.639539][ T5850] lock(nr_neigh_list_lock); [ 107.640325][ T5850] lock(&nr_node->node_lock); [ 107.641400][ T5850] lock(nr_neigh_list_lock); [ 107.642426][ T5850] lock(nr_node_list_lock); [ 107.643088][ T5850] [ 107.643088][ T5850] *** DEADLOCK *** [ 107.643088][ T5850] [ 107.644241][ T5850] 2 locks held by syz.2.494/5850: [ 107.645008][ T5850] #0: ffff800017730708 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 107.646411][ T5850] #1: ffff8000178755b8 (nr_neigh_list_lock){+...}-{2:2}, at: nr_rt_device_down+0x38/0x660 [ 107.648008][ T5850] [ 107.648008][ T5850] stack backtrace: [ 107.648906][ T5850] CPU: 0 PID: 5850 Comm: syz.2.494 Not tainted syzkaller #0 [ 107.649986][ T5850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 107.651393][ T5850] Call trace: [ 107.651843][ T5850] dump_backtrace+0x1c8/0x1f4 [ 107.652526][ T5850] show_stack+0x2c/0x3c [ 107.653240][ T5850] __dump_stack+0x30/0x40 [ 107.653990][ T5850] dump_stack_lvl+0xf8/0x160 [ 107.654774][ T5850] dump_stack+0x1c/0x5c [ 107.655447][ T5850] print_circular_bug+0x148/0x1b0 [ 107.656330][ T5850] check_noncircular+0x240/0x2d4 [ 107.657131][ T5850] __lock_acquire+0x293c/0x6544 [ 107.657930][ T5850] lock_acquire+0x20c/0x644 [ 107.658683][ T5850] _raw_spin_lock_bh+0x54/0x6c [ 107.659490][ T5850] nr_rt_device_down+0xb4/0x660 [ 107.660333][ T5850] nr_device_event+0x138/0x164 [ 107.661136][ T5850] raw_notifier_call_chain+0xd4/0x164 [ 107.662024][ T5850] dev_close_many+0x2cc/0x440 [ 107.662836][ T5850] dev_close+0x148/0x1f8 [ 107.663528][ T5850] bpq_device_event+0x318/0x82c [ 107.664323][ T5850] raw_notifier_call_chain+0xd4/0x164 [ 107.665226][ T5850] dev_close_many+0x2cc/0x440 [ 107.665954][ T5850] dev_close+0x148/0x1f8 [ 107.666645][ T5850] bond_setup_by_slave+0x70/0x374 [ 107.667417][ T5850] bond_enslave+0x628/0x2ed8 [ 107.668226][ T5850] bond_do_ioctl+0x700/0xb18 [ 107.668968][ T5850] bond_siocdevprivate+0x18c/0x1dc [ 107.669812][ T5850] dev_ifsioc+0xa68/0xed0 [ 107.670538][ T5850] dev_ioctl+0x548/0xc8c [ 107.671239][ T5850] sock_ioctl+0x7a4/0x840 [ 107.671980][ T5850] __arm64_sys_ioctl+0x14c/0x1c8 [ 107.672714][ T5850] invoke_syscall+0x98/0x2bc [ 107.673506][ T5850] el0_svc_common+0x138/0x258 [ 107.674227][ T5850] do_el0_svc+0x58/0x13c [ 107.674899][ T5850] el0_svc+0x58/0x138 [ 107.675530][ T5850] el0t_64_sync_handler+0x84/0xf0 [ 107.676347][ T5850] el0t_64_sync+0x18c/0x190 [ 107.682921][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.687531][ T5850] bond0: (slave rose0): Enslaving as an active interface with an up link [ 107.689564][ T5864] netlink: 8 bytes leftover after parsing attributes in process `syz.2.494'. [ 107.691389][ T5864] netlink: 16 bytes leftover after parsing attributes in process `syz.2.494'. [ 107.793204][ T5588] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready