last executing test programs: 6m14.145294244s ago: executing program 0 (id=415): syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20004000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[], 0x0, 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, &(0x7f0000000780)=""/106, &(0x7f0000000380), &(0x7f0000000000), 0x80, r2, 0x0, 0x7}, 0x38) 6m13.55476961s ago: executing program 0 (id=417): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40c0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xffe0, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x8}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xfff2, 0x6}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 6m13.155390574s ago: executing program 0 (id=422): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r4, 0x6, 0xd, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x2, &(0x7f0000000100)=""/222, 0x0) bind$inet(r0, 0x0, 0x0) socket(0x2a, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="6400000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e65740000000014000780"], 0x64}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) 6m12.184795485s ago: executing program 0 (id=426): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x4734, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000740)="98e2d24a2d8ce4a509d138cc91611ed14f69b7d7aebfeca49d719bfbb537aef2a00ebefaf0", 0x25, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) 6m10.919502978s ago: executing program 0 (id=431): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x42, &(0x7f0000000280)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x20, 0x0, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfb, 0x9, {0x6, 0x4, 0x0, 0x1c, 0xfff6, 0x65, 0x5, 0x1, 0xff, 0x3, @rand_addr=0x64010102, @local, {[@noop]}}}}}}}, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) socket(0x2d, 0x2, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) 6m6.696085264s ago: executing program 0 (id=445): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000250, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000240)='hybla', 0x5) keyctl$clear(0x5, 0xffffffffffffffff) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) r4 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r4, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000001c0)='nicvf0\x00', 0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x189040, 0x3a) setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) truncate(&(0x7f0000000080)='./file1\x00', 0x400000f030) truncate(&(0x7f0000000100)='./file1\x00', 0xd8) epoll_create1(0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000340)=""/190}, 0x20) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) 5m51.070852432s ago: executing program 32 (id=445): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000250, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000240)='hybla', 0x5) keyctl$clear(0x5, 0xffffffffffffffff) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) r4 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r4, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000001c0)='nicvf0\x00', 0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x189040, 0x3a) setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) truncate(&(0x7f0000000080)='./file1\x00', 0x400000f030) truncate(&(0x7f0000000100)='./file1\x00', 0xd8) epoll_create1(0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000340)=""/190}, 0x20) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) 7.47659574s ago: executing program 2 (id=2192): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000003a00010325bd7000fcffffff"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x840) syz_emit_ethernet(0x5a, &(0x7f0000000180)=ANY=[@ANYBLOB="aa3a91d80c44f6aeaaaaaaaaaaaaaa0008004e00004c00000000000690788a010102ac1414aa070f0476bc4b5b9e3e260cbfad990444140b01e000000100000000e00000010000000000", @ANYRES32=0x41424344], 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x1f00, 0xf, 0x2f, &(0x7f00000007c0)="9f44948721919580684010a49e66", 0x0, 0x7ff, 0x0, 0xb1, 0xfffffd85, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r6, 0x0, 0x30, 0xc, @void}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r7}, 0x8) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$nci(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="400404"], 0x7) 6.883512126s ago: executing program 1 (id=2193): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x18, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {}, {}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) socket$inet6(0xa, 0x80000, 0xe6a2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$netlink(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000ec0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000000)={0x2c, r6, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xf6}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x44000) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000000)={0x2, 0x3, 0xfff, 0xf344, r1}) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) mount$nfs(&(0x7f0000000040)='@\a', 0x0, 0x0, 0x20887b, 0x0) mount$nfs(&(0x7f0000000080)='@\a', 0x0, &(0x7f0000000500), 0x20040c1, 0x0) 5.676408259s ago: executing program 1 (id=2195): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r2, @ANYBLOB="05005b"], 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x28, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xb0}]}, 0x28}}, 0x0) 5.587631269s ago: executing program 2 (id=2196): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) io_uring_enter(0xffffffffffffffff, 0x567, 0x0, 0x0, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 5.245744644s ago: executing program 1 (id=2199): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x14) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x29}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r3, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x400000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r5, 0x0, 0x0}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) 4.182219235s ago: executing program 1 (id=2202): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0xfffffff9, 0x57, 0x1bc4, 0x1, 0x5, 0x5, 0x400, 0x36}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000016c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0xc}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x6, 0x2, 0x101}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r3, 0xc}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {0x0}], 0x2}, 0x4) 3.863104008s ago: executing program 2 (id=2204): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4050) 3.791129159s ago: executing program 2 (id=2205): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) connect$unix(r1, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) r4 = socket(0x28, 0x5, 0x0) r5 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r5, 0x4) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/15], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) close(0x4) socket$unix(0x1, 0x1, 0x0) accept$unix(r2, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) pipe(&(0x7f0000000000)={0xffffffffffffffff}) close(r8) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r7, &(0x7f00000000c0), &(0x7f0000000000)=""/3, 0x2}, 0x20) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 3.760376009s ago: executing program 5 (id=2206): socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) r3 = socket(0x28, 0x5, 0x0) r4 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r4, 0x4) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/15], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) r6 = socket$unix(0x1, 0x1, 0x0) connect$unix(r6, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept$unix(r1, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) pipe(&(0x7f0000000000)={0xffffffffffffffff}) accept4(r3, &(0x7f0000000140), &(0x7f0000000380)=0x80, 0x80000) close(r8) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000080)="e7c51e6c4f5af475b39f8df5673bee88370d9b38203d69aabd41394cb60e6c9d8513ea0dd5c0b179a5db89e110ae1dd2fe2f17d0f69129226cabaf", 0x3b) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f0000000500)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r7, &(0x7f00000000c0), &(0x7f0000000000)=""/3, 0x2}, 0x20) 3.67345968s ago: executing program 1 (id=2207): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000003a00010325bd7000fcffffff"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x840) syz_emit_ethernet(0x5a, &(0x7f0000000180)=ANY=[@ANYBLOB="aa3a91d80c44f6aeaaaaaaaaaaaaaa0008004e00004c00000000000690788a010102ac1414aa070f0476bc4b5b9e3e260cbfad990444140b01e000000100000000e00000010000000000", @ANYRES32=0x41424344], 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x1f00, 0xf, 0x2f, &(0x7f00000007c0)="9f44948721919580684010a49e66", 0x0, 0x7ff, 0x0, 0xb1, 0xfffffd85, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r6, 0x0, 0x30, 0xc, @void}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r7}, 0x8) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$nci(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="400404"], 0x7) 3.65954279s ago: executing program 2 (id=2209): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r2, @ANYBLOB="05005b"], 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x28, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xb0}]}, 0x28}}, 0x0) 3.605860701s ago: executing program 5 (id=2210): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xd, 0xb}, {0xe, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x0, 0x1, 0x406, 0x1, 0xffffffff, 0x9}, [@TCA_NETEM_REORDER={0xc, 0x3, {0x8, 0x653d}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r6, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x5) 3.379210353s ago: executing program 4 (id=2211): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x14) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r3, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x400000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) 3.158736706s ago: executing program 3 (id=2212): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r6, {0x6}, {}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x9, 0x0, 0x3, 0xfffffffd}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040098}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r3, {0x10}, {0x6}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040098}, 0x880) 2.450382083s ago: executing program 4 (id=2213): set_mempolicy(0x3, 0x0, 0x8) socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) prlimit64(r0, 0x8, &(0x7f0000000100)={0x3, 0x6}, &(0x7f00000001c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$user(0x0, &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0xc, 0x2, 0x803fd, 0x1, 0x800}) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) unshare(0x62040200) 2.179884096s ago: executing program 5 (id=2214): mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() bind$inet(0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffffff, 0x0, 0x40042, 0x0) r3 = add_key$keyring(&(0x7f0000000200), 0x0, 0x0, 0x0, 0xfffffffffffffffb) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r3) pipe2$watch_queue(&(0x7f00000003c0)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r5, 0x1e) r6 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x66, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x35, 0x0, 0xd, 0x65]}, &(0x7f0000000180)={0x0, "de8d0d27ca969fa15f8b3b7bae39c1b3327d4332f8c149d2d65a347d67f6db7eb90dfdad3cdebaaf421412f812305c9da91699b5a02c1295596f0fd9ec78f2fd", 0x1b}, 0x48, r3) keyctl$KEYCTL_MOVE(0x1e, r6, r3, r4, 0x0) 2.179462976s ago: executing program 3 (id=2215): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) io_uring_enter(0xffffffffffffffff, 0x567, 0x0, 0x0, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 1.693565952s ago: executing program 5 (id=2216): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x6}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000004) 1.676538982s ago: executing program 3 (id=2217): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0xfffffff9, 0x57, 0x1bc4, 0x1, 0x5, 0x5, 0x400, 0x36}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000016c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0xc}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x6, 0x2, 0x101}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r3, 0xc}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {0x0}], 0x2}, 0x4) 1.615942023s ago: executing program 5 (id=2218): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x20040084) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r9, &(0x7f00000005c0)="ba", 0x1, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r8, 0x1, 0xd8, 0x6, @multicast}, 0x14) 1.531424873s ago: executing program 4 (id=2219): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) connect$unix(r1, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) r4 = socket(0x28, 0x5, 0x0) r5 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r5, 0x4) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/15], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) close(0x4) connect$unix(0xffffffffffffffff, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept$unix(r2, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) pipe(&(0x7f0000000000)={0xffffffffffffffff}) close(r8) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r7, &(0x7f00000000c0), &(0x7f0000000000)=""/3, 0x2}, 0x20) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 1.497887704s ago: executing program 4 (id=2220): socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) r3 = socket(0x28, 0x5, 0x0) r4 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r4, 0x4) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/15], 0x48) close(0x4) r5 = socket$unix(0x1, 0x1, 0x0) connect$unix(r5, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept$unix(r1, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) pipe(&(0x7f0000000000)={0xffffffffffffffff}) accept4(r3, &(0x7f0000000140), &(0x7f0000000380)=0x80, 0x80000) close(r7) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000080)="e7c51e6c4f5af475b39f8df5673bee88370d9b38203d69aabd41394cb60e6c9d8513ea0dd5c0b179a5db89e110ae1dd2fe2f17d0f69129226cabaf", 0x3b) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f0000000500)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r6, &(0x7f00000000c0), &(0x7f0000000000)=""/3, 0x2}, 0x20) 1.473972734s ago: executing program 3 (id=2221): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x4f5c, 0x10100}, 0x0, 0x0, 0x0) io_uring_enter(r3, 0x567, 0x0, 0x0, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 1.460740954s ago: executing program 5 (id=2222): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() socket$kcm(0x10, 0x400000002, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, 0x0) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x14, r1, 0xb, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x2000c008) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x13) syz_open_procfs(0x0, &(0x7f0000000f00)='fd/3\x00') 1.366642315s ago: executing program 4 (id=2223): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x14) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r3, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x400000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) 1.205660747s ago: executing program 3 (id=2224): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xd, 0xb}, {0xe, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x0, 0x1, 0x406, 0x1, 0xffffffff, 0x9}, [@TCA_NETEM_REORDER={0xc, 0x3, {0x8, 0x653d}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r6, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x5) 561.483574ms ago: executing program 2 (id=2225): r0 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0x1, 0x2002, 0x1, 0x4, 0x2, 0xd09, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x2, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x3ff, 0x2, 0xc, 0x42, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) sendto$packet(r5, &(0x7f0000000380)="fad33075218151db00316f3a277f", 0xe, 0x6008092, &(0x7f0000000080)={0x11, 0x88a8, r4, 0x1, 0xda, 0x6, @remote}, 0x14) 484.820415ms ago: executing program 4 (id=2226): mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() bind$inet(0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffffff, 0x0, 0x40042, 0x0) r3 = add_key$keyring(&(0x7f0000000200), 0x0, 0x0, 0x0, 0xfffffffffffffffb) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r3) pipe2$watch_queue(&(0x7f00000003c0)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r5, 0x1e) r6 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x66, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x35, 0x0, 0xd, 0x65]}, &(0x7f0000000180)={0x0, "de8d0d27ca969fa15f8b3b7bae39c1b3327d4332f8c149d2d65a347d67f6db7eb90dfdad3cdebaaf421412f812305c9da91699b5a02c1295596f0fd9ec78f2fd", 0x1b}, 0x48, r3) keyctl$KEYCTL_MOVE(0x1e, r6, r3, r4, 0x0) 474.941435ms ago: executing program 1 (id=2227): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) io_uring_enter(0xffffffffffffffff, 0x567, 0x0, 0x0, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 0s ago: executing program 3 (id=2228): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close(r0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0xb}}}, 0xb8}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.207' (ED25519) to the list of known hosts. [ 47.218842][ T4176] cgroup: Unknown subsys name 'net' [ 47.346657][ T4176] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 48.571884][ T4176] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 50.280342][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 50.310541][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 50.349661][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 50.417787][ T4196] chnl_net:caif_netlink_parms(): no params data found [ 50.442105][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.449194][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.457487][ T4190] device bridge_slave_0 entered promiscuous mode [ 50.469893][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.477192][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.485276][ T4190] device bridge_slave_1 entered promiscuous mode [ 50.515776][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.523026][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.530679][ T4188] device bridge_slave_0 entered promiscuous mode [ 50.557734][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.564988][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.573193][ T4188] device bridge_slave_1 entered promiscuous mode [ 50.604114][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.640922][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.651861][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.661045][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.668309][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.676016][ T4189] device bridge_slave_0 entered promiscuous mode [ 50.686640][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.693768][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.701782][ T4189] device bridge_slave_1 entered promiscuous mode [ 50.720623][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.736114][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 50.759916][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.767165][ T4196] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.775180][ T4196] device bridge_slave_0 entered promiscuous mode [ 50.799015][ T4190] team0: Port device team_slave_0 added [ 50.805322][ T4196] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.812519][ T4196] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.820150][ T4196] device bridge_slave_1 entered promiscuous mode [ 50.829031][ T4188] team0: Port device team_slave_0 added [ 50.837001][ T4188] team0: Port device team_slave_1 added [ 50.856369][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.866544][ T4190] team0: Port device team_slave_1 added [ 50.895252][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.902295][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.928224][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.941099][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.965354][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.972707][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.998629][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.017481][ T4196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.027233][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.034287][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.060719][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.086813][ T4196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.096702][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.103724][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.130147][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.147073][ T4189] team0: Port device team_slave_0 added [ 51.160250][ T4189] team0: Port device team_slave_1 added [ 51.206002][ T4188] device hsr_slave_0 entered promiscuous mode [ 51.213085][ T4188] device hsr_slave_1 entered promiscuous mode [ 51.232794][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.239871][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.248745][ T4191] device bridge_slave_0 entered promiscuous mode [ 51.258909][ T4196] team0: Port device team_slave_0 added [ 51.284635][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.291990][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.299609][ T4191] device bridge_slave_1 entered promiscuous mode [ 51.307660][ T4196] team0: Port device team_slave_1 added [ 51.313821][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.320762][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.347135][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.368002][ T4190] device hsr_slave_0 entered promiscuous mode [ 51.375024][ T4190] device hsr_slave_1 entered promiscuous mode [ 51.382033][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 51.389762][ T4190] Cannot create hsr debugfs directory [ 51.408030][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.415160][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.443494][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.471374][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.508471][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.515464][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.542159][ T4196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.554718][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.589101][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.597174][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.623144][ T4196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.649498][ T4189] device hsr_slave_0 entered promiscuous mode [ 51.657070][ T4189] device hsr_slave_1 entered promiscuous mode [ 51.664031][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 51.672067][ T4189] Cannot create hsr debugfs directory [ 51.709122][ T4191] team0: Port device team_slave_0 added [ 51.737212][ T4191] team0: Port device team_slave_1 added [ 51.755583][ T4196] device hsr_slave_0 entered promiscuous mode [ 51.762262][ T4196] device hsr_slave_1 entered promiscuous mode [ 51.768691][ T4196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 51.776565][ T4196] Cannot create hsr debugfs directory [ 51.832568][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.839713][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.866976][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.904621][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.912176][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.938300][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.008826][ T4188] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 52.020280][ T4188] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 52.054284][ T4188] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 52.072621][ T4231] Bluetooth: hci2: command 0x0409 tx timeout [ 52.072621][ T2402] Bluetooth: hci3: command 0x0409 tx timeout [ 52.092094][ T2402] Bluetooth: hci4: command 0x0409 tx timeout [ 52.093107][ T4188] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 52.098143][ T2402] Bluetooth: hci0: command 0x0409 tx timeout [ 52.111085][ T2402] Bluetooth: hci1: command 0x0409 tx timeout [ 52.120623][ T4191] device hsr_slave_0 entered promiscuous mode [ 52.128124][ T4191] device hsr_slave_1 entered promiscuous mode [ 52.134727][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.142448][ T4191] Cannot create hsr debugfs directory [ 52.192811][ T4190] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 52.207773][ T4190] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 52.227400][ T4190] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 52.237789][ T4190] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 52.284390][ T4196] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 52.294272][ T4196] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 52.319282][ T4196] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 52.329789][ T4196] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 52.411392][ T4189] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 52.430359][ T4189] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 52.450192][ T4189] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 52.466227][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.484652][ T4189] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 52.517963][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.528307][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.538892][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.561542][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.570514][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.580208][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.587540][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.606437][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.624056][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.640418][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.655182][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.665431][ T1278] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.672548][ T1278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.680313][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.692305][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.700302][ T4191] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 52.711170][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.723962][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.732673][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.744729][ T4191] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 52.757835][ T4191] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 52.769569][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.778090][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.788246][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.797840][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.816378][ T4191] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 52.835703][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.844896][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.853902][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.861555][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.871257][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.880356][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.889900][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.898534][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.919667][ T4196] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.928527][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.937949][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.947120][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.956310][ T1278] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.963427][ T1278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.971100][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.980047][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.988893][ T1278] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.995984][ T1278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.003685][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.023116][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.037269][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.046201][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.057335][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.066858][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.079695][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.088609][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.097332][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.107515][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.116603][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.125273][ T4237] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.132348][ T4237] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.147413][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.178476][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.188170][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.196194][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.218088][ T4190] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 53.229241][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.253360][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.266824][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.279129][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.286262][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.294751][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.303731][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.312370][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.320917][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.329688][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.336764][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.345890][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.354995][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.363788][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.370871][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.378767][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.387668][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.396780][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.405689][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.413829][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.449539][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.459636][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.469046][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.481793][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.491329][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.500446][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.510471][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.525388][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.534648][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.544501][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.553145][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.561265][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 53.569229][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 53.576881][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.584902][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.594389][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.604667][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.618871][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.642402][ T4196] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.662379][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.701453][ T4189] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 53.717712][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.729565][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.739095][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.747882][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.757793][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.766566][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.775939][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.784505][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.799337][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.821423][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.840710][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 53.848696][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 53.871946][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.891966][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.899801][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.910305][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.919512][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.958222][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.969488][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.984148][ T484] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.991278][ T484] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.007255][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.018378][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.029389][ T484] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.036587][ T484] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.045436][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.054151][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.062757][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.070934][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.080825][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.088760][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.098793][ T4190] device veth0_vlan entered promiscuous mode [ 54.125756][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.143194][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.152297][ T4231] Bluetooth: hci1: command 0x041b tx timeout [ 54.159222][ T4231] Bluetooth: hci0: command 0x041b tx timeout [ 54.166507][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.172009][ T4231] Bluetooth: hci4: command 0x041b tx timeout [ 54.185779][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.188960][ T4231] Bluetooth: hci3: command 0x041b tx timeout [ 54.211765][ T4231] Bluetooth: hci2: command 0x041b tx timeout [ 54.214486][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.230654][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.240388][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.249576][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.263498][ T4190] device veth1_vlan entered promiscuous mode [ 54.285042][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 54.293482][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 54.301414][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.311493][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.324262][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.335536][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.349017][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.380761][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.390110][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.398801][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.407532][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.415070][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.422618][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.439929][ T4190] device veth0_macvtap entered promiscuous mode [ 54.460757][ T4188] device veth0_vlan entered promiscuous mode [ 54.477365][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.487752][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.496800][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.506031][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.514685][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.523279][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 54.531342][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.539214][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.549506][ T4190] device veth1_macvtap entered promiscuous mode [ 54.580521][ T4188] device veth1_vlan entered promiscuous mode [ 54.588337][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 54.597763][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 54.606521][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.620973][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.641220][ T4189] device veth0_vlan entered promiscuous mode [ 54.652342][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.661390][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.670584][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.679742][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.688610][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.696611][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.714814][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.735832][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 54.744090][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.754165][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.763203][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.774092][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.790665][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.800684][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.811601][ T4189] device veth1_vlan entered promiscuous mode [ 54.823229][ T4188] device veth0_macvtap entered promiscuous mode [ 54.830255][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 54.839594][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 54.848817][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.856553][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.864309][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.873840][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.894543][ T4190] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.904294][ T4190] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.914521][ T4190] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.924530][ T4190] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.938602][ T4188] device veth1_macvtap entered promiscuous mode [ 54.963007][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 54.971089][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 54.980237][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.990157][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.998669][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.006695][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.017328][ T4196] device veth0_vlan entered promiscuous mode [ 55.069221][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.078648][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.095128][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.106362][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.128052][ T4196] device veth1_vlan entered promiscuous mode [ 55.137195][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.148505][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.160515][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.182746][ T4191] device veth0_vlan entered promiscuous mode [ 55.189404][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.201532][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.209750][ T484] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.210179][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.220381][ T484] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.232084][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.241867][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.250461][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 55.263265][ T4189] device veth0_macvtap entered promiscuous mode [ 55.275270][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.286967][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.298574][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.312790][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.320905][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.330348][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.338509][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.346790][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.356903][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.377095][ T4191] device veth1_vlan entered promiscuous mode [ 55.386050][ T4189] device veth1_macvtap entered promiscuous mode [ 55.394240][ T4188] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.404432][ T4188] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.413350][ T4188] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.422135][ T4188] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.452609][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.459876][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.460454][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.478342][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.488431][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.499290][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.510278][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.523504][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.531384][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.539616][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.548009][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 55.556082][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.565381][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.580783][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.591339][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.607468][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.618006][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.629294][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.646435][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.658813][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.677161][ T4196] device veth0_macvtap entered promiscuous mode [ 55.719567][ T4189] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.729411][ T4189] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.738616][ T4189] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.766268][ T4189] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.778695][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.789468][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.803558][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.815720][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.826910][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.846436][ T4196] device veth1_macvtap entered promiscuous mode [ 55.864809][ T4191] device veth0_macvtap entered promiscuous mode [ 55.968046][ T484] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.977680][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.980463][ T484] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.996228][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.005780][ T4191] device veth1_macvtap entered promiscuous mode [ 56.243608][ T4231] Bluetooth: hci2: command 0x040f tx timeout [ 56.257855][ T4231] Bluetooth: hci3: command 0x040f tx timeout [ 56.329374][ T4231] Bluetooth: hci4: command 0x040f tx timeout [ 56.384182][ T4231] Bluetooth: hci0: command 0x040f tx timeout [ 56.439705][ T4231] Bluetooth: hci1: command 0x040f tx timeout [ 56.633282][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.654880][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.676665][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.694837][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.708597][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.740955][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.768009][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.778264][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.789861][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.800535][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.811496][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.823060][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.844041][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.857983][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.868866][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.880035][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.890731][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.901451][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.911457][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.929214][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.941276][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.965568][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.977468][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.985603][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.989356][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.004053][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.015851][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.025772][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.079219][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.231404][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.294512][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.326113][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.376641][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.430996][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.480233][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.525235][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.533985][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.544683][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.555465][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.565453][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.576132][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.586111][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.596584][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.606650][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.617267][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.646325][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.746039][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.770062][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.796189][ T4191] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.808148][ T4191] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.817434][ T4191] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.827215][ T4191] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.840508][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.850771][ T4196] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.868084][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.879705][ T4196] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.889244][ T4196] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.898362][ T4196] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.926663][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.723287][ T13] Bluetooth: hci2: command 0x0419 tx timeout [ 58.733462][ T13] Bluetooth: hci4: command 0x0419 tx timeout [ 58.759492][ T13] Bluetooth: hci3: command 0x0419 tx timeout [ 58.817150][ T13] Bluetooth: hci0: command 0x0419 tx timeout [ 58.833128][ T13] Bluetooth: hci1: command 0x0419 tx timeout [ 59.734288][ T4291] sched: RT throttling activated [ 60.330520][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.341748][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.404377][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.549046][ T1278] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.573251][ T1278] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.853032][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.261226][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.279358][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.302814][ T4315] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.323423][ T4315] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.343814][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.411426][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.952748][ T4349] netlink: 'syz.1.28': attribute type 1 has an invalid length. [ 62.998296][ T4366] netlink: 28 bytes leftover after parsing attributes in process `syz.3.32'. [ 63.248049][ T4370] netlink: 16 bytes leftover after parsing attributes in process `syz.3.34'. [ 64.255056][ T4385] overlayfs: unrecognized mount option "\" or missing value [ 64.546272][ T4391] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 64.819719][ T4398] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 66.130323][ T4423] Zero length message leads to an empty skb [ 69.572944][ T4474] binfmt_misc: register: failed to install interpreter file ./file0 [ 69.947903][ T4492] overlayfs: failed to resolve './file1': -2 [ 71.276337][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.282984][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.492918][ T4302] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 71.752175][ T4302] usb 5-1: Using ep0 maxpacket: 8 [ 71.892989][ T4302] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 72.011484][ T4302] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 72.278989][ T4302] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 72.372548][ T4302] usb 5-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 72.435029][ T4302] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 72.510353][ T4302] usb 5-1: config 168 interface 0 has no altsetting 0 [ 72.641772][ T4302] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 72.679751][ T4302] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 72.751784][ T4302] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 72.805450][ T4302] usb 5-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 72.834743][ T4302] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 72.880253][ T4302] usb 5-1: config 168 interface 0 has no altsetting 0 [ 72.981925][ T4302] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 73.026823][ T4302] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 73.101041][ T4302] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 73.181304][ T4302] usb 5-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 73.422657][ T4302] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 73.571893][ T4544] netlink: 'syz.2.97': attribute type 13 has an invalid length. [ 73.644215][ T4544] netlink: 'syz.2.97': attribute type 17 has an invalid length. [ 74.127421][ T4302] usb 5-1: config 168 interface 0 has no altsetting 0 [ 74.171808][ T4302] usb 5-1: string descriptor 0 read error: -71 [ 74.178119][ T4302] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 74.204013][ T4302] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.291824][ T4302] usb 5-1: can't set config #168, error -71 [ 74.324493][ T4302] usb 5-1: USB disconnect, device number 2 [ 74.375597][ T4544] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 74.409429][ T4544] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 76.432446][ T1107] cfg80211: failed to load regulatory.db [ 77.803844][ T4642] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 78.503405][ T4231] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 79.498051][ T4231] Bluetooth: hci0: Injecting HCI hardware error event [ 79.510682][ T4201] Bluetooth: hci0: hardware error 0x00 [ 81.512941][ T4235] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 82.562319][ T4235] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 82.646745][ T4235] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 82.657975][ T4235] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.670138][ T4702] netlink: 4 bytes leftover after parsing attributes in process `syz.3.146'. [ 83.743969][ T4235] snd-usb-audio: probe of 5-1:27.0 failed with error -2 [ 83.759354][ T4235] usb 5-1: USB disconnect, device number 3 [ 84.063437][ T4434] udevd[4434]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 85.891201][ T4737] netlink: 'syz.4.157': attribute type 1 has an invalid length. [ 86.226660][ T4737] device bond1 entered promiscuous mode [ 86.293201][ T4737] 8021q: adding VLAN 0 to HW filter on device bond1 [ 86.396489][ T4743] netlink: 'syz.0.159': attribute type 10 has an invalid length. [ 86.513503][ T4743] device veth0_vlan left promiscuous mode [ 86.538819][ T4743] device veth0_vlan entered promiscuous mode [ 86.601887][ T4743] team0: Device veth0_vlan failed to register rx_handler [ 87.620995][ T26] audit: type=1326 audit(1778142119.826:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4749 comm="syz.2.162" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd98ed58dd9 code=0x0 [ 87.857133][ T4741] 8021q: adding VLAN 0 to HW filter on device bond1 [ 87.894128][ T4741] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 87.918084][ T4743] syz.0.159 (4743) used greatest stack depth: 19664 bytes left [ 87.935981][ T4741] bond1: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 87.997419][ T4741] bond1: (slave gre1): Opening slave failed [ 88.133197][ T4756] netlink: 12 bytes leftover after parsing attributes in process `syz.1.163'. [ 88.170487][ T4756] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.179978][ T4756] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.188783][ T4756] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.197559][ T4756] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.266864][ T4756] netlink: 12 bytes leftover after parsing attributes in process `syz.1.163'. [ 88.277955][ T4203] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 88.289163][ T4203] CPU: 0 PID: 4203 Comm: kworker/u5:6 Not tainted syzkaller #0 [ 88.296828][ T4203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 88.306899][ T4203] Workqueue: hci3 hci_rx_work [ 88.311625][ T4203] Call Trace: [ 88.314905][ T4203] [ 88.317841][ T4203] dump_stack_lvl+0x188/0x250 [ 88.322573][ T4203] ? show_regs_print_info+0x20/0x20 [ 88.327786][ T4203] ? load_image+0x400/0x400 [ 88.332310][ T4203] sysfs_create_dir_ns+0x26a/0x290 [ 88.337442][ T4203] ? sysfs_warn_dup+0xa0/0xa0 [ 88.342122][ T4203] ? process_one_work+0x85f/0x1010 [ 88.347264][ T4203] ? do_raw_spin_unlock+0x11d/0x230 [ 88.352484][ T4203] kobject_add_internal+0x6e0/0xd90 [ 88.357831][ T4203] kobject_add+0x160/0x230 [ 88.362275][ T4203] ? kobject_init+0x1d0/0x1d0 [ 88.366973][ T4203] ? klist_children_get+0x50/0x50 [ 88.372011][ T4203] ? get_device_parent+0x121/0x3f0 [ 88.377135][ T4203] device_add+0x483/0xfb0 [ 88.381491][ T4203] hci_conn_add_sysfs+0xd1/0x1e0 [ 88.386457][ T4203] le_conn_complete_evt+0xc48/0x15c0 [ 88.391775][ T4203] ? cs_le_create_conn+0x5e0/0x5e0 [ 88.396910][ T4203] ? __mutex_trylock_common+0x155/0x260 [ 88.402478][ T4203] hci_le_meta_evt+0x285/0x3c90 [ 88.407345][ T4203] ? hci_event_packet+0x37b/0x1370 [ 88.412475][ T4203] ? __lock_acquire+0x7d10/0x7d10 [ 88.417541][ T4203] ? hci_remote_host_features_evt+0x280/0x280 [ 88.423709][ T4203] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 88.429361][ T4203] ? mark_lock+0x94/0x320 [ 88.433710][ T4203] ? mutex_unlock+0x10/0x10 [ 88.438226][ T4203] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 88.444316][ T4203] ? lock_chain_count+0x20/0x20 [ 88.449193][ T4203] ? __rwlock_init+0x140/0x140 [ 88.453981][ T4203] hci_event_packet+0xe48/0x1370 [ 88.458936][ T4203] ? lockdep_hardirqs_on+0x94/0x140 [ 88.464336][ T4203] ? rcu_lock_release+0x20/0x20 [ 88.469209][ T4203] ? hci_send_to_monitor+0x9c/0x4a0 [ 88.474432][ T4203] hci_rx_work+0x255/0xa10 [ 88.478880][ T4203] process_one_work+0x85f/0x1010 [ 88.483854][ T4203] ? worker_detach_from_pool+0x240/0x240 [ 88.489504][ T4203] ? lockdep_hardirqs_off+0x70/0x100 [ 88.494904][ T4203] ? _raw_spin_lock_irq+0xb7/0xf0 [ 88.499946][ T4203] ? _raw_spin_lock_irqsave+0x100/0x100 [ 88.505511][ T4203] ? wq_worker_running+0x97/0x170 [ 88.510557][ T4203] worker_thread+0xaa6/0x1290 [ 88.515281][ T4203] kthread+0x436/0x520 [ 88.519367][ T4203] ? rcu_lock_release+0x20/0x20 [ 88.524235][ T4203] ? kthread_blkcg+0xd0/0xd0 [ 88.528953][ T4203] ret_from_fork+0x1f/0x30 [ 88.533405][ T4203] [ 88.538295][ T4203] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 88.552040][ T4203] Bluetooth: hci3: failed to register connection device [ 88.716208][ T4773] netlink: 92 bytes leftover after parsing attributes in process `syz.4.169'. [ 91.745653][ T4821] binder_alloc: 4820: binder_alloc_buf, no vma [ 92.067023][ T4821] binder: 4820:4821 ioctl c0306201 200000000680 returned -14 [ 95.351854][ T23] Bluetooth: hci3: command 0x0406 tx timeout [ 96.731881][ T4236] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 98.773832][ T4236] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 98.789602][ T4236] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.819650][ T4236] usb 5-1: Product: syz [ 98.829778][ T4236] usb 5-1: Manufacturer: syz [ 98.842146][ T4236] usb 5-1: config 0 descriptor?? [ 98.871867][ T4236] usb 5-1: can't set config #0, error -71 [ 98.972355][ T4236] usb 5-1: USB disconnect, device number 4 [ 104.051920][ T4966] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 104.512444][ T4232] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 105.592062][ T23] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 105.663125][ T4232] usb 2-1: config 0 has an invalid interface number: 128 but max is 2 [ 105.682000][ T4232] usb 2-1: config 0 has an invalid interface number: 176 but max is 2 [ 105.863209][ T4232] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.877168][ T4232] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 3 [ 106.326301][ T4232] usb 2-1: config 0 has no interface number 0 [ 106.376708][ T4232] usb 2-1: config 0 has no interface number 1 [ 106.408264][ T4232] usb 2-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 106.437190][ T4232] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.469116][ T4232] usb 2-1: config 0 descriptor?? [ 106.527790][ T4232] usb 2-1: unknown number of interfaces: 2 [ 106.621732][ T23] usb 4-1: config 0 has no interfaces? [ 106.912754][ T4232] usb 2-1: USB disconnect, device number 2 [ 107.452186][ T23] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 107.497869][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.536674][ T23] usb 4-1: Product: syz [ 107.540896][ T23] usb 4-1: Manufacturer: syz [ 107.840313][ T23] usb 4-1: SerialNumber: syz [ 108.557827][ T23] usb 4-1: config 0 descriptor?? [ 108.626786][ T23] usb 4-1: can't set config #0, error -71 [ 109.582733][ T23] usb 4-1: USB disconnect, device number 2 [ 111.917414][ T5071] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 115.791603][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 115.811598][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 115.821605][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 115.831601][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 115.841599][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 115.851600][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 115.861601][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 115.871626][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 115.881612][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 115.891605][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 122.792185][ T5231] binder: 5230:5231 ioctl c018620c 200000000240 returned -22 [ 123.202608][ T4427] Bluetooth: hci5: Frame reassembly failed (-84) [ 123.628822][ T5224] input: syz0 as /devices/virtual/input/input5 [ 124.071766][ T4232] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 124.336758][ T4232] usb 2-1: Using ep0 maxpacket: 32 [ 124.487180][ T4232] usb 2-1: config 0 interface 0 altsetting 88 bulk endpoint 0x85 has invalid maxpacket 1024 [ 124.505230][ T4232] usb 2-1: config 0 interface 0 has no altsetting 0 [ 124.672462][ T4232] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=ea.79 [ 124.694943][ T4232] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=0 [ 124.725150][ T4232] usb 2-1: Product: syz [ 124.729357][ T4232] usb 2-1: Manufacturer: syz [ 124.754112][ T4232] usb 2-1: config 0 descriptor?? [ 124.777249][ T5252] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 125.096284][ T4273] usb 2-1: USB disconnect, device number 3 [ 125.964832][ T4232] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 126.182447][ T5280] binder: 5279:5280 ioctl c0306201 0 returned -14 [ 126.586109][ T4232] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.648088][ T4232] usb 4-1: config 0 interface 0 has no altsetting 0 [ 126.681545][ T4232] usb 4-1: New USB device found, idVendor=046d, idProduct=c088, bcdDevice= 0.00 [ 126.737520][ T4232] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.759914][ T23] Bluetooth: hci5: command 0x1003 tx timeout [ 126.767342][ T4201] Bluetooth: hci5: sending frame failed (-49) [ 126.809175][ T4232] usb 4-1: config 0 descriptor?? [ 127.353056][ T4232] logitech-hidpp-device 0003:046D:C088.0001: unknown main item tag 0x1 [ 127.529583][ T4232] logitech-hidpp-device 0003:046D:C088.0001: unexpected long global item [ 127.698331][ T4232] logitech-hidpp-device 0003:046D:C088.0001: hidpp_probe:parse failed [ 127.781832][ T4232] logitech-hidpp-device: probe of 0003:046D:C088.0001 failed with error -22 [ 127.881098][ T4232] usb 4-1: USB disconnect, device number 3 [ 128.540426][ T5296] netlink: 4 bytes leftover after parsing attributes in process `syz.3.325'. [ 128.906097][ T23] Bluetooth: hci5: command 0x1001 tx timeout [ 128.996315][ T4201] Bluetooth: hci5: sending frame failed (-49) [ 131.031661][ T4235] Bluetooth: hci5: command 0x1009 tx timeout [ 131.306717][ T5329] netlink: 4 bytes leftover after parsing attributes in process `syz.3.336'. [ 132.726393][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.733213][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.912468][ T5368] binder: BINDER_SET_CONTEXT_MGR already set [ 133.918796][ T5368] binder: 5365:5368 ioctl 4018620d 200000004a80 returned -16 [ 134.283605][ T5375] syz.0.350 uses obsolete (PF_INET,SOCK_PACKET) [ 136.235013][ T1107] Bluetooth: hci3: command 0x0411 tx timeout [ 137.778851][ T5437] capability: warning: `syz.4.369' uses deprecated v2 capabilities in a way that may be insecure [ 141.108142][ T5476] binder: BINDER_SET_CONTEXT_MGR already set [ 141.122094][ T5476] binder: 5475:5476 ioctl 4018620d 200000004a80 returned -16 [ 141.147696][ T5464] infiniband syz2: set down [ 141.177993][ T5464] infiniband syz2: added ipvlan1 [ 141.224832][ T5464] infiniband syz2: Couldn't open port 1 [ 141.421169][ T5464] RDS/IB: syz2: added [ 141.427627][ T5464] smc: adding ib device syz2 with port count 1 [ 141.434671][ T5464] smc: ib device syz2 port 1 has pnetid [ 142.426054][ T5490] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 142.490268][ T5490] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 142.498628][ T5490] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 142.508193][ T5490] device bridge_slave_0 left promiscuous mode [ 142.522846][ T5490] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.708925][ T5490] device bridge_slave_1 left promiscuous mode [ 142.731982][ T5490] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.768761][ T5490] bond0: (slave bond_slave_0): Releasing backup interface [ 142.813815][ T5490] bond0: (slave bond_slave_1): Releasing backup interface [ 142.911110][ T5490] team0: Port device team_slave_0 removed [ 142.945291][ T5490] team0: Port device team_slave_1 removed [ 142.958592][ T5490] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.005763][ T5490] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.028156][ T5490] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.037077][ T5490] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.209835][ T5533] netlink: 24 bytes leftover after parsing attributes in process `syz.0.404'. [ 145.544745][ T5540] binder: BINDER_SET_CONTEXT_MGR already set [ 145.550770][ T5540] binder: 5539:5540 ioctl 4018620d 200000004a80 returned -16 [ 146.172825][ T5554] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 146.983593][ T5558] binder: BINDER_SET_CONTEXT_MGR already set [ 146.989624][ T5558] binder: 5557:5558 ioctl 4018620d 200000004a80 returned -16 [ 149.480164][ T5596] netlink: 16 bytes leftover after parsing attributes in process `syz.0.422'. [ 150.614458][ T5611] netlink: 'syz.1.428': attribute type 4 has an invalid length. [ 151.448872][ T5617] binder: BINDER_SET_CONTEXT_MGR already set [ 151.490872][ T5617] binder: 5616:5617 ioctl 4018620d 200000004a80 returned -16 [ 153.165692][ T5629] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.182031][ T5629] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.197049][ T5629] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.207740][ T5629] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.460523][ T4427] smc: removing ib device syz2 [ 154.726238][ T5657] sctp: failed to load transform for md5: -2 [ 163.032770][ T5773] netlink: 12 bytes leftover after parsing attributes in process `syz.3.468'. [ 166.310651][ T5808] device syzkaller1 entered promiscuous mode [ 167.074703][ T5815] netlink: 36 bytes leftover after parsing attributes in process `syz.4.484'. [ 168.269798][ T5827] device syzkaller0 entered promiscuous mode [ 172.318151][ T5895] netlink: 24 bytes leftover after parsing attributes in process `syz.1.502'. [ 174.119337][ T5927] netlink: 4 bytes leftover after parsing attributes in process `syz.1.519'. [ 174.514321][ T5899] chnl_net:caif_netlink_parms(): no params data found [ 174.636935][ T4302] Bluetooth: hci5: command 0x0409 tx timeout [ 174.985387][ T4625] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.099876][ T5899] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.120451][ T5899] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.140015][ T5899] device bridge_slave_0 entered promiscuous mode [ 175.181482][ T4625] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.225680][ T5899] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.243002][ T5899] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.265603][ T5899] device bridge_slave_1 entered promiscuous mode [ 175.367284][ T4625] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.393142][ T5899] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.438651][ T5899] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.562345][ T4625] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.606464][ T5899] team0: Port device team_slave_0 added [ 175.628587][ T5899] team0: Port device team_slave_1 added [ 175.745674][ T5899] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.847216][ T4302] Bluetooth: hci1: command 0x0406 tx timeout [ 175.890582][ T5962] autofs4:pid:5962:autofs_fill_super: called with bogus options [ 176.110092][ T4302] Bluetooth: hci4: command 0x0406 tx timeout [ 176.153338][ T5899] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.179514][ T5899] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.205134][ T5899] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.332573][ T5899] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.391187][ T5899] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.484555][ T5899] device hsr_slave_0 entered promiscuous mode [ 176.500740][ T5899] device hsr_slave_1 entered promiscuous mode [ 176.517202][ T5899] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 176.539937][ T5899] Cannot create hsr debugfs directory [ 176.711697][ T5646] Bluetooth: hci5: command 0x041b tx timeout [ 178.079784][ T5899] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 178.096935][ T5899] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 178.116489][ T5899] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 178.189020][ T5899] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 178.441762][ T6026] autofs4:pid:6026:autofs_fill_super: called with bogus options [ 178.798582][ T23] Bluetooth: hci5: command 0x040f tx timeout [ 180.986350][ T4234] Bluetooth: hci5: command 0x0419 tx timeout [ 181.433715][ T5899] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.539330][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 181.554843][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 181.618391][ T5899] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.656140][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 181.689443][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 181.726840][ T4313] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.734012][ T4313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.770476][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 181.819975][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 182.003011][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 183.515379][ T1278] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.522515][ T1278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.673552][ T6085] netlink: 4 bytes leftover after parsing attributes in process `syz.2.547'. [ 183.788253][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 183.802525][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 183.873158][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 183.936968][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 184.006866][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 184.077404][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 184.127601][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 184.331382][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 184.352490][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 184.365741][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 185.854626][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 185.899769][ T5899] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 186.169888][ T6116] netlink: 124 bytes leftover after parsing attributes in process `syz.3.553'. [ 187.367054][ T4625] device hsr_slave_0 left promiscuous mode [ 187.414127][ T4625] device hsr_slave_1 left promiscuous mode [ 187.436511][ T4625] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.465019][ T4625] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 187.509999][ T4625] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.544267][ T4625] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.598118][ T4625] device bridge_slave_1 left promiscuous mode [ 187.634944][ T4625] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.701361][ T4625] device bridge_slave_0 left promiscuous mode [ 187.749878][ T4625] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.222514][ T4625] device veth1_macvtap left promiscuous mode [ 188.229167][ T4625] device veth0_macvtap left promiscuous mode [ 188.235411][ T4625] device veth1_vlan left promiscuous mode [ 189.158268][ T4625] team0 (unregistering): Port device team_slave_1 removed [ 189.171108][ T4625] team0 (unregistering): Port device team_slave_0 removed [ 189.456305][ T4625] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 189.611023][ T4625] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 189.914358][ T4625] bond0 (unregistering): Released all slaves [ 190.010227][ T6140] netlink: 8 bytes leftover after parsing attributes in process `syz.4.560'. [ 190.031931][ T6149] netlink: 8 bytes leftover after parsing attributes in process `syz.2.561'. [ 190.107785][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 190.128420][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 190.162789][ T6179] ieee802154 phy0 wpan0: encryption failed: -22 [ 190.187473][ T6177] netlink: 244 bytes leftover after parsing attributes in process `syz.1.567'. [ 190.197350][ T5899] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.470129][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 192.512454][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 192.554857][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 192.601304][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 192.669811][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 192.688115][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 192.728766][ T5899] device veth0_vlan entered promiscuous mode [ 192.783672][ T5899] device veth1_vlan entered promiscuous mode [ 192.977314][ T5899] device veth0_macvtap entered promiscuous mode [ 192.994447][ T5899] device veth1_macvtap entered promiscuous mode [ 193.007733][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 193.039203][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 193.087842][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 193.316301][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 193.342399][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 193.514772][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 193.943263][ T5899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.981901][ T5899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.001806][ T5899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.041602][ T5899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.086166][ T5899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.117254][ T5899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.156032][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.162371][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.163027][ T5899] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.229596][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 194.342392][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 194.414588][ T5899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.446572][ T5899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.573109][ T5899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.633907][ T5899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.702246][ T5899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.785288][ T5899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.119882][ T5899] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 195.434124][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 195.465566][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 195.494720][ T5899] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.535360][ T5899] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.593546][ T5899] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.768522][ T5899] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.311678][ T4313] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.403210][ T4313] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.703410][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 197.835090][ T1278] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.911033][ T1278] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.968286][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 199.186901][ T6340] device syzkaller0 entered promiscuous mode [ 202.438752][ T6392] device syzkaller0 entered promiscuous mode [ 206.347575][ T6448] device syzkaller0 entered promiscuous mode [ 207.296853][ T6465] device syzkaller0 entered promiscuous mode [ 218.694983][ T6604] binder: BINDER_SET_CONTEXT_MGR already set [ 218.701010][ T6604] binder: 6603:6604 ioctl 4018620d 200000004a80 returned -16 [ 218.982105][ T6616] autofs4:pid:6616:autofs_fill_super: called with bogus options [ 220.675649][ T6634] device syzkaller0 entered promiscuous mode [ 221.829669][ T6653] device syzkaller0 entered promiscuous mode [ 234.460798][ T6830] autofs4:pid:6830:autofs_fill_super: called with bogus options [ 239.983250][ T6905] raw_sendmsg: syz.1.735 forgot to set AF_INET. Fix it! [ 240.286226][ T6899] sctp: failed to load transform for md5: -4 [ 240.358312][ T6892] sctp: failed to load transform for md5: -4 [ 240.812160][ T6871] ODEBUG: Out of memory. ODEBUG disabled [ 242.165689][ T6928] tipc: Started in network mode [ 242.211851][ T6928] tipc: Node identity 3ecfa6165c3b, cluster identity 4711 [ 242.219240][ T6928] tipc: Enabled bearer , priority 0 [ 242.270073][ T6928] device syzkaller0 entered promiscuous mode [ 242.308363][ T6928] tipc: Resetting bearer [ 242.520002][ T6927] tipc: Resetting bearer [ 242.691183][ T6927] tipc: Disabling bearer [ 244.299202][ T6949] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 244.382493][ T6949] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 244.464201][ T6949] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 248.426573][ T6997] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.434294][ T6997] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.360267][ T6871] Set syz1 is full, maxelem 65536 reached [ 250.580944][ T6997] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 250.598041][ T6997] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 251.668978][ T6997] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.678511][ T6997] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.697962][ T6997] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.708726][ T6997] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.604908][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.611383][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.475314][ T7123] binder: BINDER_SET_CONTEXT_MGR already set [ 256.481335][ T7123] binder: 7122:7123 ioctl 4018620d 200000004a80 returned -16 [ 257.671739][ T21] Bluetooth: hci3: command 0x0406 tx timeout [ 258.383730][ T7145] device syzkaller0 entered promiscuous mode [ 261.407969][ T7194] binder: BINDER_SET_CONTEXT_MGR already set [ 261.438455][ T7194] binder: 7193:7194 ioctl 4018620d 200000004a80 returned -16 [ 262.704751][ T7209] nftables ruleset with unbound chain [ 265.788046][ T7179] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.795510][ T7179] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.325186][ T7241] binder: BINDER_SET_CONTEXT_MGR already set [ 268.331216][ T7241] binder: 7240:7241 ioctl 4018620d 200000004a80 returned -16 [ 268.350628][ T7179] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 268.453480][ T7179] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 269.771617][ T7254] Bluetooth: hci2: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 269.825000][ T4585] Bluetooth: hci2: Frame reassembly failed (-84) [ 269.864259][ T4585] Bluetooth: hci2: Frame reassembly failed (-84) [ 270.445500][ T7179] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.454780][ T7179] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.465302][ T7179] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.476877][ T7179] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.831678][ T23] Bluetooth: hci2: command 0x1003 tx timeout [ 271.839483][ T4197] Bluetooth: hci2: sending frame failed (-49) [ 273.739048][ T7319] tipc: Started in network mode [ 273.764608][ T7319] tipc: Node identity 362d1f9a215, cluster identity 4711 [ 273.811756][ T7319] tipc: Enabled bearer , priority 0 [ 273.845030][ T7323] device syzkaller0 entered promiscuous mode [ 273.891872][ T7319] tipc: Resetting bearer [ 273.912036][ T4238] Bluetooth: hci2: command 0x1001 tx timeout [ 273.928166][ T4197] Bluetooth: hci2: sending frame failed (-49) [ 273.938455][ T7318] tipc: Resetting bearer [ 273.950708][ T7318] tipc: Disabling bearer [ 276.197567][ T4238] Bluetooth: hci2: command 0x1009 tx timeout [ 277.646637][ T7369] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.654541][ T7369] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.034650][ T7369] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 278.074199][ T7369] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 278.462913][ T7369] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.476981][ T7369] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.486723][ T7369] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.501279][ T7369] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.625726][ T7369] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 278.634777][ T7369] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 278.643825][ T7369] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 278.652733][ T7369] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 279.424164][ T7387] tipc: Enabled bearer , priority 0 [ 279.643733][ T7387] tipc: Disabling bearer [ 281.234544][ T7422] netlink: 28 bytes leftover after parsing attributes in process `syz.5.853'. [ 281.588607][ T7443] netlink: 'syz.3.857': attribute type 3 has an invalid length. [ 282.878408][ T7459] tipc: Enabled bearer , priority 0 [ 283.310130][ T7459] device syzkaller0 entered promiscuous mode [ 283.354690][ T7459] tipc: Resetting bearer [ 283.700207][ T7455] tipc: Resetting bearer [ 283.808399][ T7455] tipc: Disabling bearer [ 284.387837][ T7490] sctp: [Deprecated]: syz.4.867 (pid 7490) Use of int in max_burst socket option deprecated. [ 284.387837][ T7490] Use struct sctp_assoc_value instead [ 285.104332][ T7500] xt_nfacct: accounting object `syz0' does not exist [ 285.145809][ T7500] netlink: 'syz.5.870': attribute type 10 has an invalid length. [ 285.172325][ T7500] netlink: 40 bytes leftover after parsing attributes in process `syz.5.870'. [ 285.196298][ T7500] device dummy0 entered promiscuous mode [ 285.223270][ T7500] bridge0: port 3(dummy0) entered blocking state [ 285.251778][ T7500] bridge0: port 3(dummy0) entered disabled state [ 286.133206][ T7524] Bluetooth: hci2: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 286.298551][ T4584] Bluetooth: hci2: Frame reassembly failed (-84) [ 286.327297][ T4584] Bluetooth: hci2: Frame reassembly failed (-84) [ 288.321854][ T13] Bluetooth: hci2: command 0x1003 tx timeout [ 288.327945][ T4201] Bluetooth: hci2: sending frame failed (-49) [ 290.493778][ T13] Bluetooth: hci2: command 0x1001 tx timeout [ 290.500312][ T4201] Bluetooth: hci2: sending frame failed (-49) [ 291.580967][ T7618] sctp: [Deprecated]: syz.3.896 (pid 7618) Use of int in maxseg socket option. [ 291.580967][ T7618] Use struct sctp_assoc_value instead [ 291.776774][ T7627] tipc: Started in network mode [ 291.793017][ T7627] tipc: Node identity 7a9fe9d4715c, cluster identity 4711 [ 291.813501][ T7627] tipc: Enabled bearer , priority 0 [ 291.885324][ T7632] device syzkaller0 entered promiscuous mode [ 291.950242][ T7627] tipc: Resetting bearer [ 291.998169][ T7626] tipc: Resetting bearer [ 292.017828][ T7626] tipc: Disabling bearer [ 292.958258][ T13] Bluetooth: hci2: command 0x1009 tx timeout [ 295.066297][ T7679] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 295.259229][ T7685] tipc: Enabled bearer , priority 0 [ 295.284595][ T7685] device syzkaller0 entered promiscuous mode [ 295.395130][ T7685] tipc: Resetting bearer [ 295.769346][ T7684] tipc: Resetting bearer [ 295.800386][ T7684] tipc: Disabling bearer [ 296.966804][ T7726] netlink: 'syz.4.927': attribute type 11 has an invalid length. [ 298.563925][ T7751] Bluetooth: hci2: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 298.605502][ T4584] Bluetooth: hci2: Frame reassembly failed (-84) [ 298.632133][ T5644] Bluetooth: hci5: command 0x0406 tx timeout [ 298.697123][ T4584] Bluetooth: hci2: Frame reassembly failed (-84) [ 299.055665][ T7760] IPVS: set_ctl: invalid protocol: 2 255.255.255.255:20001 [ 300.640292][ T4238] Bluetooth: hci2: command 0x1003 tx timeout [ 300.646412][ T4197] Bluetooth: hci2: sending frame failed (-49) [ 300.670447][ T7794] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.677715][ T7794] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.912354][ T7794] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 300.969630][ T7794] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 301.160052][ T7794] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.169202][ T7794] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.178499][ T7794] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.187533][ T7794] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.472333][ T7804] netlink: 'syz.4.951': attribute type 1 has an invalid length. [ 301.591205][ T7804] 8021q: adding VLAN 0 to HW filter on device bond2 [ 301.628948][ T7812] bond2: (slave veth3): Enslaving as an active interface with a down link [ 301.675030][ T7804] bond2: (slave dummy0): making interface the new active one [ 301.690707][ T7804] device dummy0 entered promiscuous mode [ 301.697303][ T7804] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 301.706993][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 301.726012][ T7805] sctp: [Deprecated]: syz.3.952 (pid 7805) Use of int in maxseg socket option. [ 301.726012][ T7805] Use struct sctp_assoc_value instead [ 302.733918][ T7798] Bluetooth: hci2: command 0x1001 tx timeout [ 302.740176][ T4197] Bluetooth: hci2: sending frame failed (-49) [ 304.460369][ T7869] netlink: 'syz.1.972': attribute type 1 has an invalid length. [ 304.494812][ T7869] 8021q: adding VLAN 0 to HW filter on device bond2 [ 304.503167][ T7869] bond1: (slave bond2): making interface the new active one [ 304.515074][ T7869] bond1: (slave bond2): Enslaving as an active interface with an up link [ 304.791708][ T4231] Bluetooth: hci2: command 0x1009 tx timeout [ 305.069819][ T7884] device syzkaller0 entered promiscuous mode [ 305.189865][ T7889] netlink: 12 bytes leftover after parsing attributes in process `syz.3.979'. [ 307.675788][ T7924] netlink: 4 bytes leftover after parsing attributes in process `syz.3.993'. [ 308.180274][ T7937] device syzkaller0 entered promiscuous mode [ 310.311789][ T4231] Bluetooth: hci5: command 0x0405 tx timeout [ 311.866886][ T7996] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1020'. [ 311.891478][ T7996] netlink: 'syz.4.1020': attribute type 18 has an invalid length. [ 311.981769][ T7996] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1020'. [ 312.007686][ T7996] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 312.016025][ T7996] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 312.024259][ T7996] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 312.032727][ T7996] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 312.064632][ T7996] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1020'. [ 312.084161][ T7996] netlink: 'syz.4.1020': attribute type 18 has an invalid length. [ 312.112316][ T7996] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1020'. [ 314.577875][ T8044] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1035'. [ 315.419109][ T8058] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1041'. [ 315.557449][ T8060] device syzkaller0 entered promiscuous mode [ 317.053579][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.060854][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.559187][ T8091] sctp: [Deprecated]: syz.3.1048 (pid 8091) Use of int in max_burst socket option deprecated. [ 317.559187][ T8091] Use struct sctp_assoc_value instead [ 318.009305][ T8108] xt_hashlimit: size too large, truncated to 1048576 [ 318.130461][ T8113] device syzkaller0 entered promiscuous mode [ 318.518951][ T8118] device bridge_slave_0 left promiscuous mode [ 318.537540][ T8118] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.559912][ T8118] device bridge_slave_1 left promiscuous mode [ 318.579239][ T8118] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.610368][ T8118] bond0: (slave bond_slave_0): Releasing backup interface [ 318.637330][ T8118] bond0: (slave bond_slave_1): Releasing backup interface [ 318.673104][ T8118] team0: Port device team_slave_0 removed [ 318.703460][ T8118] team0: Port device team_slave_1 removed [ 318.729352][ T8118] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 318.793219][ T8118] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 318.883583][ T8119] team0: Port device ip6gre1 added [ 319.816977][ T8125] device syzkaller0 entered promiscuous mode [ 320.500254][ T8141] device syzkaller0 entered promiscuous mode [ 320.749313][ T8147] tipc: Started in network mode [ 320.769112][ T8147] tipc: Node identity 868e759afec5, cluster identity 4711 [ 320.824788][ T8147] tipc: Enabled bearer , priority 0 [ 320.917105][ T8147] device syzkaller0 entered promiscuous mode [ 320.973606][ T8154] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1071'. [ 320.977524][ T8147] tipc: Resetting bearer [ 321.796063][ T8146] tipc: Resetting bearer [ 321.839727][ T8146] tipc: Disabling bearer [ 322.016042][ T8159] device syzkaller0 entered promiscuous mode [ 322.913780][ T8183] device syzkaller0 entered promiscuous mode [ 324.428404][ T8202] tipc: Started in network mode [ 324.437743][ T8202] tipc: Node identity 2ac387968fe3, cluster identity 4711 [ 324.478426][ T8202] tipc: Enabled bearer , priority 0 [ 324.498809][ T8203] device syzkaller0 entered promiscuous mode [ 324.603491][ T8202] tipc: Resetting bearer [ 324.638283][ T8201] tipc: Resetting bearer [ 324.660462][ T8201] tipc: Disabling bearer [ 324.863597][ T8213] device syzkaller0 entered promiscuous mode [ 326.078730][ T8245] binder: BINDER_SET_CONTEXT_MGR already set [ 326.117929][ T8245] binder: 8244:8245 ioctl 4018620d 200000004a80 returned -16 [ 327.325244][ T8269] device syzkaller0 entered promiscuous mode [ 330.123713][ T8304] binder: BINDER_SET_CONTEXT_MGR already set [ 330.129737][ T8304] binder: 8303:8304 ioctl 4018620d 200000004a80 returned -16 [ 331.800720][ T8334] autofs4:pid:8334:autofs_fill_super: called with bogus options [ 332.290898][ T8349] smc: net device wlan0 applied user defined pnetid SYZ0 [ 332.326297][ T8351] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1134'. [ 334.003015][ T8361] binder: BINDER_SET_CONTEXT_MGR already set [ 334.129112][ T8364] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1137'. [ 334.152327][ T8361] binder: 8360:8361 ioctl 4018620d 200000004a80 returned -16 [ 334.449500][ T8369] device syzkaller0 entered promiscuous mode [ 334.793158][ T8383] device syzkaller0 entered promiscuous mode [ 336.372514][ T8422] device syzkaller0 entered promiscuous mode [ 337.374314][ T8441] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 337.382987][ T8441] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 337.391395][ T8441] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 337.399826][ T8441] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 337.964442][ T8460] device syzkaller0 entered promiscuous mode [ 342.603640][ T8540] device syzkaller0 entered promiscuous mode [ 342.699794][ T8551] binder: BINDER_SET_CONTEXT_MGR already set [ 342.717297][ T8551] binder: 8550:8551 ioctl 4018620d 200000004a80 returned -16 [ 345.074744][ T8603] autofs4:pid:8603:autofs_fill_super: called with bogus options [ 346.679088][ T8648] tipc: Enabling of bearer rejected, failed to enable media [ 346.868588][ T8648] device syzkaller0 entered promiscuous mode [ 346.903818][ T8648] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 347.400540][ T8660] device syzkaller0 entered promiscuous mode [ 348.635548][ T8689] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1240'. [ 348.716263][ T8689] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 348.850318][ T8691] autofs4:pid:8691:autofs_fill_super: called with bogus options [ 350.991325][ T8726] netlink: 'syz.3.1251': attribute type 39 has an invalid length. [ 353.832431][ T8776] autofs4:pid:8776:autofs_fill_super: called with bogus options [ 358.531746][ T8854] autofs4:pid:8854:autofs_fill_super: called with bogus options [ 359.585028][ T8866] netlink: 19 bytes leftover after parsing attributes in process `syz.1.1286'. [ 359.747377][ T8872] device syzkaller0 entered promiscuous mode [ 360.292546][ T8880] tipc: Enabled bearer , priority 0 [ 360.314818][ T8880] tipc: Resetting bearer [ 360.393009][ T8879] tipc: Disabling bearer [ 360.911722][ T8892] autofs4:pid:8892:autofs_fill_super: called with bogus options [ 362.350582][ T8909] device syzkaller0 entered promiscuous mode [ 363.636775][ T8922] tipc: Failed to remove unknown binding: 66,1,1/0:520089073/520089075 [ 364.049680][ T8930] autofs4:pid:8930:autofs_fill_super: called with bogus options [ 366.160912][ T8955] device syzkaller0 entered promiscuous mode [ 366.865254][ T8969] autofs4:pid:8969:autofs_fill_super: called with bogus options [ 367.968328][ T8982] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 368.833159][ T8997] device syzkaller0 entered promiscuous mode [ 370.077734][ T9018] binder: 9017:9018 ioctl 4018620d 0 returned -22 [ 370.849165][ T9029] autofs4:pid:9029:autofs_fill_super: called with bogus options [ 371.406607][ T9036] device syzkaller0 entered promiscuous mode [ 371.995270][ T9047] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1346'. [ 372.908951][ T9060] binder: 9059:9060 ioctl 4018620d 0 returned -22 [ 374.659550][ T9087] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1360'. [ 374.736945][ T9089] binder: 9088:9089 ioctl 4018620d 0 returned -22 [ 375.694112][ T9104] binder: 9103:9104 ioctl 4018620d 0 returned -22 [ 375.960180][ T9110] autofs4:pid:9110:autofs_fill_super: called with bogus options [ 376.012610][ T9113] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1367'. [ 376.999975][ T9133] device syzkaller1 entered promiscuous mode [ 378.091877][ T9144] binder: 9142:9144 ioctl 4018620d 0 returned -22 [ 378.492242][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.498727][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.642980][ T9150] device syzkaller0 entered promiscuous mode [ 378.779801][ T9152] smc: net device wlan0 erased user defined pnetid SYZ0 [ 379.718558][ T9166] binder: BINDER_SET_CONTEXT_MGR already set [ 379.733555][ T9166] binder: 9165:9166 ioctl 4018620d 200000004a80 returned -16 [ 380.152203][ T9172] autofs4:pid:9172:autofs_fill_super: called with bogus options [ 381.037770][ T9193] binder: 9192:9193 ioctl 4018620d 0 returned -22 [ 383.584769][ T9236] binder: BINDER_SET_CONTEXT_MGR already set [ 383.621448][ T9236] binder: 9235:9236 ioctl 4018620d 200000004a80 returned -16 [ 383.648904][ T9238] device syzkaller0 entered promiscuous mode [ 384.166020][ T9244] autofs4:pid:9244:autofs_fill_super: called with bogus options [ 384.430843][ T9254] device syzkaller0 entered promiscuous mode [ 387.100919][ T9295] device syzkaller0 entered promiscuous mode [ 388.596410][ T9330] autofs4:pid:9330:autofs_fill_super: called with bogus options [ 388.783991][ T9333] device syzkaller0 entered promiscuous mode [ 390.476777][ T9357] netlink: 'syz.5.1447': attribute type 1 has an invalid length. [ 390.511094][ T9357] 8021q: adding VLAN 0 to HW filter on device bond1 [ 390.537137][ T9359] 8021q: adding VLAN 0 to HW filter on device bond1 [ 390.544332][ T9359] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 390.556062][ T9359] bond1: (slave vxcan3): Error -22 calling dev_set_mtu [ 390.600134][ T9363] sctp: [Deprecated]: syz.2.1449 (pid 9363) Use of struct sctp_assoc_value in delayed_ack socket option. [ 390.600134][ T9363] Use struct sctp_sack_info instead [ 390.617978][ T9357] device veth5 entered promiscuous mode [ 390.648419][ T9357] bond1: (slave veth5): Enslaving as an active interface with a down link [ 390.664821][ T9364] bond1: (slave gretap1): making interface the new active one [ 390.673721][ T9364] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 390.716555][ T9366] device syzkaller0 entered promiscuous mode [ 392.781853][ T9399] sctp: [Deprecated]: syz.5.1461 (pid 9399) Use of struct sctp_assoc_value in delayed_ack socket option. [ 392.781853][ T9399] Use struct sctp_sack_info instead [ 392.831209][ T9403] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1463'. [ 393.009299][ T9412] device syzkaller0 entered promiscuous mode [ 394.679841][ T9434] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1474'. [ 394.899745][ T9440] binder: 9438:9440 ioctl c0306201 0 returned -14 [ 394.943151][ T9440] binder: BINDER_SET_CONTEXT_MGR already set [ 394.949170][ T9440] binder: 9438:9440 ioctl 4018620d 200000004a80 returned -16 [ 395.227427][ T9441] device syzkaller0 entered promiscuous mode [ 396.989116][ T9463] device syzkaller0 entered promiscuous mode [ 397.121354][ T9471] autofs4:pid:9471:autofs_fill_super: called with bogus options [ 397.974607][ T9490] binder: 9488:9490 ioctl c0306201 0 returned -14 [ 398.126514][ T9489] device syzkaller0 entered promiscuous mode [ 399.336455][ T9507] device syzkaller0 entered promiscuous mode [ 399.750364][ T9524] device syzkaller0 entered promiscuous mode [ 400.701470][ T9542] autofs4:pid:9542:autofs_fill_super: called with bogus options [ 402.639065][ T9565] device syzkaller0 entered promiscuous mode [ 402.911874][ T9568] device syzkaller0 entered promiscuous mode [ 403.180831][ T9576] tipc: Enabled bearer , priority 0 [ 403.191449][ T9575] tipc: Disabling bearer [ 403.589710][ T9590] device syzkaller0 entered promiscuous mode [ 403.725601][ T9590] TC_ACT_REPEAT abuse ? [ 404.207307][ T9596] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1526'. [ 404.552797][ T9603] device syzkaller0 entered promiscuous mode [ 404.604434][ T9605] autofs4:pid:9605:autofs_fill_super: called with bogus options [ 406.019994][ T9617] device syzkaller0 entered promiscuous mode [ 406.158375][ T9574] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 406.699818][ T9639] device syzkaller0 entered promiscuous mode [ 407.956116][ T9659] autofs4:pid:9659:autofs_fill_super: called with bogus options [ 408.187527][ T9667] tipc: Enabled bearer , priority 0 [ 408.260827][ T9666] tipc: Disabling bearer [ 408.427831][ T9678] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1561'. [ 409.980832][ T9712] autofs4:pid:9712:autofs_fill_super: called with bogus options [ 410.648130][ T9719] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1564'. [ 412.900640][ T9756] device syzkaller0 entered promiscuous mode [ 412.936309][ T9756] tipc: Enabled bearer , priority 0 [ 412.960957][ T9755] tipc: Resetting bearer [ 412.992415][ T9760] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1577'. [ 413.036886][ T9755] tipc: Disabling bearer [ 413.807906][ T9777] device syzkaller0 entered promiscuous mode [ 415.767410][ T9804] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1590'. [ 416.036201][ T9812] autofs4:pid:9812:autofs_fill_super: called with bogus options [ 416.698002][ T9815] device syzkaller0 entered promiscuous mode [ 416.718732][ T9816] device syzkaller0 entered promiscuous mode [ 417.646838][ T9843] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1603'. [ 418.567119][ T9874] device syzkaller0 entered promiscuous mode [ 418.729454][ T9865] sctp: [Deprecated]: syz.2.1607 (pid 9865) Use of int in maxseg socket option. [ 418.729454][ T9865] Use struct sctp_assoc_value instead [ 418.763943][ T9865] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1607'. [ 419.216456][ T9897] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1617'. [ 420.490661][ T9936] device syzkaller0 entered promiscuous mode [ 421.101131][ T9951] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1631'. [ 421.760782][ T9983] device syzkaller0 entered promiscuous mode [ 422.823465][ T9989] sctp: [Deprecated]: syz.1.1641 (pid 9989) Use of int in maxseg socket option. [ 422.823465][ T9989] Use struct sctp_assoc_value instead [ 423.261560][T10012] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1646'. [ 423.958136][T10038] device syzkaller0 entered promiscuous mode [ 424.017539][T10040] device syzkaller0 entered promiscuous mode [ 424.209862][T10042] device syzkaller0 entered promiscuous mode [ 424.572662][T10050] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1657'. [ 425.496626][T10003] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 425.697843][T10067] device syzkaller0 entered promiscuous mode [ 425.862228][T10071] device syzkaller0 entered promiscuous mode [ 426.057981][T10075] device syzkaller0 entered promiscuous mode [ 427.548072][T10094] netlink: 'syz.2.1671': attribute type 39 has an invalid length. [ 428.122987][T10104] device syzkaller0 entered promiscuous mode [ 428.410983][T10114] device syzkaller0 entered promiscuous mode [ 428.932720][T10133] netlink: 'syz.2.1684': attribute type 39 has an invalid length. [ 429.189520][T10120] sctp: [Deprecated]: syz.5.1678 (pid 10120) Use of int in maxseg socket option. [ 429.189520][T10120] Use struct sctp_assoc_value instead [ 431.088693][T10103] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 431.260458][T10155] autofs4:pid:10155:autofs_fill_super: called with bogus options [ 432.065774][T10167] netlink: 'syz.4.1695': attribute type 39 has an invalid length. [ 432.618560][T10176] kvm [10175]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x0 [ 432.656826][T10176] kvm [10175]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x1 [ 432.677877][T10176] kvm [10175]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x80 [ 433.371293][T10176] kvm [10175]: vcpu0, guest rIP: 0x1b8 ignored wrmsr: 0x11e data 0x81 [ 433.380041][T10176] kvm [10175]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0x186 data 0x1 [ 433.396600][T10176] kvm [10175]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x0 [ 433.424331][T10176] kvm [10175]: vcpu0, guest rIP: 0x1b8 ignored wrmsr: 0x11e data 0x1 [ 434.841481][T10218] device syzkaller0 entered promiscuous mode [ 434.979654][T10228] netlink: 'syz.5.1709': attribute type 39 has an invalid length. [ 435.471520][T10234] kvm [10233]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x0 [ 435.481063][T10234] kvm [10233]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x1 [ 435.538186][T10234] kvm [10233]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x80 [ 435.591440][T10234] kvm [10233]: vcpu0, guest rIP: 0x1b8 ignored wrmsr: 0x11e data 0x81 [ 435.651266][T10234] kvm [10233]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0x186 data 0x1 [ 435.715195][T10234] kvm [10233]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x0 [ 435.737727][T10234] kvm [10233]: vcpu0, guest rIP: 0x1b8 ignored wrmsr: 0x11e data 0x1 [ 437.224839][T10265] device syzkaller0 entered promiscuous mode [ 438.263591][T10242] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 439.046684][T10305] device syzkaller0 entered promiscuous mode [ 439.915749][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.922432][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.953347][T10331] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1743'. [ 440.517759][T10330] device syzkaller0 entered promiscuous mode [ 440.945053][T10341] kvm [10340]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x0 [ 440.957481][T10341] kvm [10340]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x1 [ 440.973380][T10341] kvm [10340]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x80 [ 440.995748][T10341] kvm [10340]: vcpu0, guest rIP: 0x1b8 ignored wrmsr: 0x11e data 0x81 [ 441.004503][T10341] kvm [10340]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0x186 data 0x1 [ 441.015857][T10341] kvm [10340]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x0 [ 441.024153][T10341] kvm [10340]: vcpu0, guest rIP: 0x1b8 ignored wrmsr: 0x11e data 0x1 [ 441.749695][T10366] device syzkaller0 entered promiscuous mode [ 442.061718][T10377] netlink: 'syz.1.1758': attribute type 39 has an invalid length. [ 444.000266][T10355] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 444.266831][T10412] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1767'. [ 444.984543][T10405] kvm [10404]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x0 [ 445.021362][T10405] kvm [10404]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x1 [ 445.201254][T10434] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1771'. [ 445.557347][T10449] device syzkaller0 entered promiscuous mode [ 445.605870][T10449] tipc: Enabled bearer , priority 0 [ 445.670896][T10451] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1777'. [ 445.682666][T10448] tipc: Resetting bearer [ 445.729681][T10448] tipc: Disabling bearer [ 446.245818][T10456] device syzkaller0 entered promiscuous mode [ 447.708821][T10471] netlink: 'syz.2.1782': attribute type 39 has an invalid length. [ 447.952221][T10481] device syzkaller0 entered promiscuous mode [ 447.968707][T10486] device syzkaller0 entered promiscuous mode [ 448.054294][T10486] tipc: Enabled bearer , priority 0 [ 448.073407][T10475] kvm [10474]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x0 [ 448.082879][T10485] tipc: Resetting bearer [ 448.099953][T10475] kvm [10474]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x1 [ 448.110487][T10485] tipc: Disabling bearer [ 448.125289][T10475] kvm [10474]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x80 [ 448.133780][T10475] kvm [10474]: vcpu0, guest rIP: 0x1b8 ignored wrmsr: 0x11e data 0x81 [ 448.142595][T10475] kvm [10474]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0x186 data 0x1 [ 448.153929][T10475] kvm [10474]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x0 [ 448.201836][T10475] kvm [10474]: vcpu0, guest rIP: 0x1b8 ignored wrmsr: 0x11e data 0x1 [ 448.237027][T10495] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1793'. [ 448.265302][T10495] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1793'. [ 448.327794][T10495] device gretap0 entered promiscuous mode [ 448.348548][T10495] device gretap0 left promiscuous mode [ 448.376176][T10499] netlink: 'syz.2.1795': attribute type 39 has an invalid length. [ 448.456806][T10497] device syzkaller0 entered promiscuous mode [ 449.926210][T10526] device syzkaller0 entered promiscuous mode [ 449.962495][T10529] device syzkaller0 entered promiscuous mode [ 449.974787][T10529] tipc: Enabled bearer , priority 0 [ 449.992999][T10528] tipc: Resetting bearer [ 450.022267][T10528] tipc: Disabling bearer [ 450.250689][T10539] device syzkaller0 entered promiscuous mode [ 450.873653][T10562] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1815'. [ 451.691989][T10571] device syzkaller0 entered promiscuous mode [ 451.715849][T10573] device syzkaller0 entered promiscuous mode [ 451.773697][T10573] tipc: Enabled bearer , priority 0 [ 451.797944][T10572] tipc: Resetting bearer [ 451.850113][T10572] tipc: Disabling bearer [ 452.518752][T10593] device syzkaller0 entered promiscuous mode [ 453.928164][T10615] device syzkaller0 entered promiscuous mode [ 453.978178][T10618] device syzkaller0 entered promiscuous mode [ 454.000708][T10615] tipc: Enabled bearer , priority 0 [ 454.047196][T10614] tipc: Resetting bearer [ 454.097043][T10614] tipc: Disabling bearer [ 454.266218][T10621] device syzkaller0 entered promiscuous mode [ 454.814634][T10636] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1842'. [ 454.897205][T10636] bridge0: port 3(dummy0) entered disabled state [ 455.172088][T10654] device syzkaller0 entered promiscuous mode [ 455.255923][T10649] kvm [10648]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x0 [ 455.295697][T10649] kvm [10648]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x1 [ 455.324753][T10649] kvm [10648]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x80 [ 455.342493][T10649] kvm [10648]: vcpu0, guest rIP: 0x1b8 ignored wrmsr: 0x11e data 0x81 [ 455.360406][T10649] kvm [10648]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0x186 data 0x1 [ 455.393205][T10649] kvm [10648]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x0 [ 455.436056][T10649] kvm [10648]: vcpu0, guest rIP: 0x1b8 ignored wrmsr: 0x11e data 0x1 [ 455.680191][T10667] device syzkaller0 entered promiscuous mode [ 456.217706][T10685] device syzkaller0 entered promiscuous mode [ 456.255314][T10685] tipc: Enabled bearer , priority 0 [ 456.280112][T10684] tipc: Resetting bearer [ 456.320912][T10684] tipc: Disabling bearer [ 456.545121][T10691] device syzkaller0 entered promiscuous mode [ 456.847325][T10704] device syzkaller0 entered promiscuous mode [ 457.618758][T10732] device syzkaller0 entered promiscuous mode [ 458.557650][T10751] device syzkaller0 entered promiscuous mode [ 459.655431][T10697] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 460.634333][T10797] device syzkaller0 entered promiscuous mode [ 460.673667][T10797] tipc: Enabled bearer , priority 0 [ 460.690456][T10796] tipc: Resetting bearer [ 460.723628][T10796] tipc: Disabling bearer [ 462.403273][T10831] device syzkaller0 entered promiscuous mode [ 462.547350][T10836] device syzkaller0 entered promiscuous mode [ 463.650318][T10799] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 464.899046][T10879] device syzkaller0 entered promiscuous mode [ 465.041191][T10875] device syzkaller0 entered promiscuous mode [ 465.058342][T10875] tipc: Enabled bearer , priority 0 [ 465.071243][T10874] tipc: Resetting bearer [ 465.206108][T10874] tipc: Disabling bearer [ 466.975555][T10910] device syzkaller0 entered promiscuous mode [ 467.070583][T10912] device syzkaller0 entered promiscuous mode [ 467.428064][T10926] device syzkaller0 entered promiscuous mode [ 468.986327][T10949] device syzkaller0 entered promiscuous mode [ 469.339079][T10959] device syzkaller0 entered promiscuous mode [ 469.413082][T10967] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1949'. [ 469.496354][T10970] autofs4:pid:10970:autofs_fill_super: called with bogus options [ 469.598107][T10974] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1952'. [ 469.693052][T10978] tipc: Enabled bearer , priority 0 [ 469.720967][T10978] device syzkaller0 entered promiscuous mode [ 469.759689][T10978] tipc: Resetting bearer [ 469.910959][T10977] tipc: Resetting bearer [ 469.928940][T10977] tipc: Disabling bearer [ 469.937440][T10987] tipc: Enabling of bearer rejected, failed to enable media [ 469.951199][T10991] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1958'. [ 471.478155][T11016] device syzkaller0 entered promiscuous mode [ 471.888871][T11027] device syzkaller0 entered promiscuous mode [ 471.975729][T11035] device syzkaller0 entered promiscuous mode [ 473.105032][T11053] device syzkaller0 entered promiscuous mode [ 473.479878][T11069] device syzkaller0 entered promiscuous mode [ 473.763005][T11075] device syzkaller0 entered promiscuous mode [ 473.962650][T11080] device syzkaller0 entered promiscuous mode [ 474.775706][T11092] device syzkaller0 entered promiscuous mode [ 474.886283][T11098] autofs4:pid:11098:autofs_fill_super: called with bogus options [ 474.969943][T11097] device syzkaller0 entered promiscuous mode [ 475.167728][T11108] device syzkaller0 entered promiscuous mode [ 476.453409][T11124] device syzkaller0 entered promiscuous mode [ 477.432465][T11133] device syzkaller0 entered promiscuous mode [ 477.589523][T11118] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 36531 - 0 [ 477.626202][T11118] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 36531 - 0 [ 477.635838][T11118] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 36531 - 0 [ 477.656146][T11118] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 36531 - 0 [ 477.665677][T11118] device geneve2 entered promiscuous mode [ 477.762782][T11145] device syzkaller0 entered promiscuous mode [ 478.891504][T11162] device syzkaller0 entered promiscuous mode [ 479.754719][T11171] device syzkaller0 entered promiscuous mode [ 479.792213][T11169] autofs4:pid:11169:autofs_fill_super: called with bogus options [ 479.934305][T11179] device syzkaller0 entered promiscuous mode [ 480.137503][T11185] device syzkaller0 entered promiscuous mode [ 481.860950][T11215] autofs4:pid:11215:autofs_fill_super: called with bogus options [ 482.130287][T11220] device syzkaller0 entered promiscuous mode [ 482.159558][T11221] device syzkaller0 entered promiscuous mode [ 482.318654][T11232] device syzkaller0 entered promiscuous mode [ 482.533531][T11243] device syzkaller0 entered promiscuous mode [ 482.846620][T11253] netlink: 'syz.1.2047': attribute type 29 has an invalid length. [ 482.863693][T11249] autofs4:pid:11249:autofs_fill_super: called with bogus options [ 482.872043][T11253] netlink: 'syz.1.2047': attribute type 29 has an invalid length. [ 482.903064][T11253] netlink: 'syz.1.2047': attribute type 29 has an invalid length. [ 482.915035][T11253] netlink: 548 bytes leftover after parsing attributes in process `syz.1.2047'. [ 483.121326][T11260] device syzkaller0 entered promiscuous mode [ 483.990277][T11269] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 484.378011][T11273] netlink: 'syz.4.2054': attribute type 39 has an invalid length. [ 486.294966][T11285] device syzkaller0 entered promiscuous mode [ 486.511598][ C0] hrtimer: interrupt took 36634 ns [ 487.692285][T11313] device syzkaller0 entered promiscuous mode [ 487.719177][T11327] device syzkaller0 entered promiscuous mode [ 487.820096][T11328] device syzkaller0 entered promiscuous mode [ 490.946655][T11364] device syzkaller0 entered promiscuous mode [ 491.119066][T11370] device syzkaller0 entered promiscuous mode [ 491.199390][T11372] device syzkaller0 entered promiscuous mode [ 491.206596][T11374] device syzkaller0 entered promiscuous mode [ 493.084818][T11393] device syzkaller0 entered promiscuous mode [ 493.584525][T11407] device syzkaller0 entered promiscuous mode [ 496.052555][T11457] device syzkaller0 entered promiscuous mode [ 496.196052][T11459] device syzkaller0 entered promiscuous mode [ 496.522673][T11462] netlink: 'syz.5.2110': attribute type 39 has an invalid length. [ 498.647468][T11501] device syzkaller0 entered promiscuous mode [ 498.999004][T11508] device syzkaller0 entered promiscuous mode [ 499.104139][T11510] netlink: 'syz.3.2124': attribute type 39 has an invalid length. [ 499.195848][T11507] device syzkaller0 entered promiscuous mode [ 501.353957][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.360390][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.290508][T11554] device syzkaller0 entered promiscuous mode [ 502.308672][T11557] netlink: 'syz.2.2136': attribute type 39 has an invalid length. [ 502.576820][T11561] device syzkaller0 entered promiscuous mode [ 504.505516][T11582] binder: BINDER_SET_CONTEXT_MGR already set [ 504.511549][T11582] binder: 11581:11582 ioctl 4018620d 200000004a80 returned -16 [ 505.257969][T11591] device syzkaller0 entered promiscuous mode [ 505.716869][T11593] device syzkaller0 entered promiscuous mode [ 506.643604][T11601] netlink: 'syz.2.2152': attribute type 39 has an invalid length. [ 508.229517][T11633] binder: BINDER_SET_CONTEXT_MGR already set [ 508.296899][T11633] binder: 11632:11633 ioctl 4018620d 200000004a80 returned -16 [ 508.682711][T11639] device syzkaller0 entered promiscuous mode [ 508.890724][T11645] autofs4:pid:11645:autofs_fill_super: called with bogus options [ 510.923502][T11657] device syzkaller0 entered promiscuous mode [ 510.953174][T11662] netlink: 'syz.2.2167': attribute type 39 has an invalid length. [ 511.743666][T11673] device syzkaller0 entered promiscuous mode [ 512.024655][T11686] device syzkaller0 entered promiscuous mode [ 512.357869][T11693] device syzkaller0 entered promiscuous mode [ 514.238092][T11712] device syzkaller0 entered promiscuous mode [ 514.336631][T11711] device syzkaller0 entered promiscuous mode [ 514.432899][T11724] device syzkaller0 entered promiscuous mode [ 514.687723][T11729] autofs4:pid:11729:autofs_fill_super: called with bogus options [ 514.786491][T11733] device syzkaller0 entered promiscuous mode [ 515.878192][T11750] device syzkaller0 entered promiscuous mode [ 518.194565][T11773] device syzkaller0 entered promiscuous mode [ 518.545872][T11797] netlink: 'syz.2.2205': attribute type 39 has an invalid length. [ 520.632507][T11849] device syzkaller0 entered promiscuous mode [ 520.669872][T11851] device syzkaller0 entered promiscuous mode [ 520.759424][T11853] netlink: 'syz.4.2219': attribute type 39 has an invalid length. [ 521.602752][T11801] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 521.900602][T11882] device syzkaller0 entered promiscuous mode [ 522.717025][T11889] ================================================================== [ 522.725534][T11889] BUG: KASAN: slab-out-of-bounds in xfrm_policy_inexact_list_reinsert+0x5d2/0x690 [ 522.734779][T11889] Read of size 1 at addr ffff8880621e8608 by task syz.3.2228/11889 [ 522.742783][T11889] [ 522.745131][T11889] CPU: 1 PID: 11889 Comm: syz.3.2228 Not tainted syzkaller #0 [ 522.752603][T11889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 522.762674][T11889] Call Trace: [ 522.765969][T11889] [ 522.768917][T11889] dump_stack_lvl+0x188/0x250 [ 522.773618][T11889] ? show_regs_print_info+0x20/0x20 [ 522.778834][T11889] ? load_image+0x400/0x400 [ 522.783360][T11889] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 522.788851][T11889] print_address_description+0x60/0x2d0 [ 522.794421][T11889] ? xfrm_policy_inexact_list_reinsert+0x5d2/0x690 [ 522.800946][T11889] kasan_report+0xdf/0x130 [ 522.805395][T11889] ? xfrm_policy_inexact_list_reinsert+0x5d2/0x690 [ 522.811935][T11889] xfrm_policy_inexact_list_reinsert+0x5d2/0x690 [ 522.818310][T11889] ? xfrm_policy_addr_delta+0x212/0x340 [ 522.823880][T11889] xfrm_policy_inexact_insert_node+0x950/0xb60 [ 522.830068][T11889] ? __kasan_kmalloc+0xb5/0xf0 [ 522.834854][T11889] ? xfrm_policy_alloc+0x75/0x2b0 [ 522.839911][T11889] xfrm_policy_inexact_alloc_chain+0x7ce/0xea0 [ 522.846096][T11889] ? xfrm_policy_inexact_insert+0xe0/0x1460 [ 522.852019][T11889] xfrm_policy_inexact_insert+0xe0/0x1460 [ 522.857772][T11889] ? do_raw_spin_lock+0x128/0x2f0 [ 522.862824][T11889] ? __rwlock_init+0x140/0x140 [ 522.867625][T11889] ? policy_hash_bysel+0x135/0x7b0 [ 522.872771][T11889] xfrm_policy_insert+0x112/0x930 [ 522.877831][T11889] xfrm_add_policy+0x4f2/0x880 [ 522.882623][T11889] ? xfrm_dump_sa_done+0xc0/0xc0 [ 522.887846][T11889] ? apparmor_capable+0x12c/0x190 [ 522.892904][T11889] ? __nla_parse+0x3c/0x50 [ 522.897509][T11889] xfrm_user_rcv_msg+0x5e5/0x910 [ 522.902503][T11889] ? xfrm_netlink_rcv+0x90/0x90 [ 522.907578][T11889] ? xfrm_netlink_rcv+0x66/0x90 [ 522.912542][T11889] ? __mutex_lock_common+0x465/0x2400 [ 522.917951][T11889] netlink_rcv_skb+0x1f5/0x440 [ 522.922740][T11889] ? xfrm_netlink_rcv+0x90/0x90 [ 522.927612][T11889] ? netlink_ack+0xb50/0xb50 [ 522.932225][T11889] ? __lock_acquire+0x7d10/0x7d10 [ 522.937299][T11889] xfrm_netlink_rcv+0x75/0x90 [ 522.942004][T11889] netlink_unicast+0x774/0x920 [ 522.946797][T11889] netlink_sendmsg+0x8ba/0xbe0 [ 522.951598][T11889] ? netlink_getsockopt+0x570/0x570 [ 522.956930][T11889] ? aa_sock_msg_perm+0x94/0x150 [ 522.961903][T11889] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 522.967222][T11889] ? security_socket_sendmsg+0x7c/0xa0 [ 522.972790][T11889] ? netlink_getsockopt+0x570/0x570 [ 522.978013][T11889] ____sys_sendmsg+0x5b7/0x8f0 [ 522.982825][T11889] ? __sys_sendmsg_sock+0x30/0x30 [ 522.987979][T11889] ? import_iovec+0x6f/0xa0 [ 522.992514][T11889] ___sys_sendmsg+0x236/0x2e0 [ 522.997229][T11889] ? __sys_sendmsg+0x2a0/0x2a0 [ 523.002031][T11889] ? percpu_counter_add_batch+0x13b/0x160 [ 523.007801][T11889] __se_sys_sendmsg+0x1af/0x290 [ 523.012684][T11889] ? __x64_sys_sendmsg+0x80/0x80 [ 523.017644][T11889] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 523.023671][T11889] ? lockdep_hardirqs_on+0x94/0x140 [ 523.028912][T11889] do_syscall_64+0x4c/0xa0 [ 523.033445][T11889] ? clear_bhb_loop+0x30/0x80 [ 523.038146][T11889] ? clear_bhb_loop+0x30/0x80 [ 523.042848][T11889] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 523.048888][T11889] RIP: 0033:0x7f1a689a9dd9 [ 523.053342][T11889] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 523.073119][T11889] RSP: 002b:00007f1a66c03028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 523.081565][T11889] RAX: ffffffffffffffda RBX: 00007f1a68c22fa0 RCX: 00007f1a689a9dd9 [ 523.089560][T11889] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000005 [ 523.097552][T11889] RBP: 00007f1a68a3fd69 R08: 0000000000000000 R09: 0000000000000000 [ 523.105805][T11889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 523.113791][T11889] R13: 00007f1a68c23038 R14: 00007f1a68c22fa0 R15: 00007ffd11c0f8a8 [ 523.121807][T11889] [ 523.124832][T11889] [ 523.127176][T11889] Allocated by task 11889: [ 523.131611][T11889] __kasan_kmalloc+0xb5/0xf0 [ 523.136522][T11889] sk_prot_alloc+0xe7/0x210 [ 523.141058][T11889] sk_alloc+0x2f/0x310 [ 523.145143][T11889] pfkey_create+0xd8/0x560 [ 523.149654][T11889] __sock_create+0x47b/0x900 [ 523.154252][T11889] __sys_socket+0xe2/0x170 [ 523.158689][T11889] __x64_sys_socket+0x76/0x80 [ 523.163387][T11889] do_syscall_64+0x4c/0xa0 [ 523.167828][T11889] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 523.173737][T11889] [ 523.176129][T11889] Last potentially related work creation: [ 523.181839][T11889] kasan_save_stack+0x35/0x60 [ 523.186530][T11889] kasan_record_aux_stack+0xb8/0x100 [ 523.191923][T11889] call_rcu+0x189/0x950 [ 523.196091][T11889] netlink_release+0x1369/0x17b0 [ 523.201040][T11889] sock_close+0xd5/0x240 [ 523.205296][T11889] __fput+0x234/0x930 [ 523.209286][T11889] task_work_run+0x125/0x1a0 [ 523.214058][T11889] exit_to_user_mode_loop+0x10f/0x130 [ 523.219526][T11889] exit_to_user_mode_prepare+0xee/0x180 [ 523.225170][T11889] syscall_exit_to_user_mode+0x16/0x40 [ 523.230726][T11889] do_syscall_64+0x58/0xa0 [ 523.235149][T11889] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 523.241051][T11889] [ 523.243371][T11889] Second to last potentially related work creation: [ 523.250125][T11889] kasan_save_stack+0x35/0x60 [ 523.255134][T11889] kasan_record_aux_stack+0xb8/0x100 [ 523.260533][T11889] call_rcu+0x189/0x950 [ 523.264796][T11889] dev_shutdown+0x19f/0x710 [ 523.269388][T11889] unregister_netdevice_many+0xa2c/0x19f0 [ 523.275211][T11889] unregister_netdevice_queue+0x324/0x370 [ 523.280952][T11889] __tun_detach+0xd4a/0x1500 [ 523.285571][T11889] tun_chr_close+0x109/0x1b0 [ 523.290614][T11889] __fput+0x234/0x930 [ 523.294605][T11889] task_work_run+0x125/0x1a0 [ 523.299206][T11889] exit_to_user_mode_loop+0x10f/0x130 [ 523.304593][T11889] exit_to_user_mode_prepare+0xee/0x180 [ 523.310145][T11889] syscall_exit_to_user_mode+0x16/0x40 [ 523.315700][T11889] do_syscall_64+0x58/0xa0 [ 523.320223][T11889] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 523.326137][T11889] [ 523.328461][T11889] The buggy address belongs to the object at ffff8880621e8000 [ 523.328461][T11889] which belongs to the cache kmalloc-2k of size 2048 [ 523.342523][T11889] The buggy address is located 1544 bytes inside of [ 523.342523][T11889] 2048-byte region [ffff8880621e8000, ffff8880621e8800) [ 523.355983][T11889] The buggy address belongs to the page: [ 523.361631][T11889] page:ffffea0001887a00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x621e8 [ 523.371792][T11889] head:ffffea0001887a00 order:3 compound_mapcount:0 compound_pincount:0 [ 523.380142][T11889] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 523.388852][T11889] raw: 00fff00000010200 0000000000000000 0000000100000001 ffff888016c42000 [ 523.397454][T11889] raw: 0000000000000000 0000000000080008 00000001ffffffff 0000000000000000 [ 523.406040][T11889] page dumped because: kasan: bad access detected [ 523.412476][T11889] page_owner tracks the page as allocated [ 523.418197][T11889] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4196, ts 51017356801, free_ts 11959806930 [ 523.438288][T11889] get_page_from_freelist+0x1bbd/0x1ca0 [ 523.443856][T11889] __alloc_pages+0x1ee/0x480 [ 523.448470][T11889] new_slab+0xc0/0x4b0 [ 523.452540][T11889] ___slab_alloc+0x80a/0xdd0 [ 523.457139][T11889] __kmalloc_node_track_caller+0x1fc/0x3a0 [ 523.462954][T11889] pskb_expand_head+0x127/0x10f0 [ 523.467998][T11889] netlink_trim+0x180/0x220 [ 523.472511][T11889] netlink_broadcast_filtered+0x7c/0x1170 [ 523.478332][T11889] nlmsg_notify+0xec/0x1a0 [ 523.482760][T11889] rtnetlink_event+0x13a/0x1a0 [ 523.487538][T11889] raw_notifier_call_chain+0xcb/0x160 [ 523.493008][T11889] netdev_change_features+0x92/0xd0 [ 523.498236][T11889] bond_compute_features+0x5ff/0x6d0 [ 523.503535][T11889] bond_enslave+0x2147/0x3c50 [ 523.508222][T11889] do_setlink+0xe90/0x3d60 [ 523.512676][T11889] rtnl_newlink+0x1658/0x1a50 [ 523.517366][T11889] page last free stack trace: [ 523.522038][T11889] free_unref_page_prepare+0x637/0x6c0 [ 523.527511][T11889] free_unref_page+0x8f/0x2a0 [ 523.532193][T11889] free_contig_range+0x96/0xf0 [ 523.536971][T11889] destroy_args+0xf0/0xa00 [ 523.541399][T11889] debug_vm_pgtable+0x321/0x380 [ 523.546287][T11889] do_one_initcall+0x272/0x730 [ 523.551054][T11889] do_initcall_level+0x137/0x1f0 [ 523.556007][T11889] do_initcalls+0x4b/0x90 [ 523.560345][T11889] kernel_init_freeable+0x3e9/0x570 [ 523.565557][T11889] kernel_init+0x19/0x1b0 [ 523.569982][T11889] ret_from_fork+0x1f/0x30 [ 523.574415][T11889] [ 523.576738][T11889] Memory state around the buggy address: [ 523.582365][T11889] ffff8880621e8500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 523.590427][T11889] ffff8880621e8580: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc [ 523.598503][T11889] >ffff8880621e8600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 523.608279][T11889] ^ [ 523.612622][T11889] ffff8880621e8680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 523.620699][T11889] ffff8880621e8700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 523.628844][T11889] ================================================================== [ 523.636901][T11889] Disabling lock debugging due to kernel taint [ 523.643150][T11889] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 523.650426][T11889] CPU: 1 PID: 11889 Comm: syz.3.2228 Tainted: G B syzkaller #0 [ 523.659405][T11889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 523.669647][T11889] Call Trace: [ 523.672930][T11889] [ 523.675859][T11889] dump_stack_lvl+0x188/0x250 [ 523.680552][T11889] ? show_regs_print_info+0x20/0x20 [ 523.685851][T11889] ? load_image+0x400/0x400 [ 523.690390][T11889] panic+0x2e5/0x810 [ 523.694297][T11889] ? bpf_jit_dump+0xd0/0xd0 [ 523.698894][T11889] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 523.704795][T11889] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 523.710793][T11889] ? _raw_spin_unlock+0x40/0x40 [ 523.715650][T11889] ? xfrm_policy_inexact_list_reinsert+0x5d2/0x690 [ 523.722158][T11889] check_panic_on_warn+0x80/0xa0 [ 523.727114][T11889] ? xfrm_policy_inexact_list_reinsert+0x5d2/0x690 [ 523.733643][T11889] end_report+0x6d/0xf0 [ 523.737826][T11889] kasan_report+0x102/0x130 [ 523.742612][T11889] ? xfrm_policy_inexact_list_reinsert+0x5d2/0x690 [ 523.749130][T11889] xfrm_policy_inexact_list_reinsert+0x5d2/0x690 [ 523.755747][T11889] ? xfrm_policy_addr_delta+0x212/0x340 [ 523.761317][T11889] xfrm_policy_inexact_insert_node+0x950/0xb60 [ 523.767472][T11889] ? __kasan_kmalloc+0xb5/0xf0 [ 523.772362][T11889] ? xfrm_policy_alloc+0x75/0x2b0 [ 523.777612][T11889] xfrm_policy_inexact_alloc_chain+0x7ce/0xea0 [ 523.783757][T11889] ? xfrm_policy_inexact_insert+0xe0/0x1460 [ 523.789638][T11889] xfrm_policy_inexact_insert+0xe0/0x1460 [ 523.795445][T11889] ? do_raw_spin_lock+0x128/0x2f0 [ 523.800464][T11889] ? __rwlock_init+0x140/0x140 [ 523.805227][T11889] ? policy_hash_bysel+0x135/0x7b0 [ 523.810353][T11889] xfrm_policy_insert+0x112/0x930 [ 523.815395][T11889] xfrm_add_policy+0x4f2/0x880 [ 523.820366][T11889] ? xfrm_dump_sa_done+0xc0/0xc0 [ 523.825287][T11889] ? apparmor_capable+0x12c/0x190 [ 523.830316][T11889] ? __nla_parse+0x3c/0x50 [ 523.834727][T11889] xfrm_user_rcv_msg+0x5e5/0x910 [ 523.839662][T11889] ? xfrm_netlink_rcv+0x90/0x90 [ 523.844507][T11889] ? xfrm_netlink_rcv+0x66/0x90 [ 523.849345][T11889] ? __mutex_lock_common+0x465/0x2400 [ 523.854713][T11889] netlink_rcv_skb+0x1f5/0x440 [ 523.859625][T11889] ? xfrm_netlink_rcv+0x90/0x90 [ 523.864488][T11889] ? netlink_ack+0xb50/0xb50 [ 523.869165][T11889] ? __lock_acquire+0x7d10/0x7d10 [ 523.874198][T11889] xfrm_netlink_rcv+0x75/0x90 [ 523.878863][T11889] netlink_unicast+0x774/0x920 [ 523.883698][T11889] netlink_sendmsg+0x8ba/0xbe0 [ 523.888570][T11889] ? netlink_getsockopt+0x570/0x570 [ 523.893765][T11889] ? aa_sock_msg_perm+0x94/0x150 [ 523.898690][T11889] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 523.903963][T11889] ? security_socket_sendmsg+0x7c/0xa0 [ 523.909414][T11889] ? netlink_getsockopt+0x570/0x570 [ 523.914605][T11889] ____sys_sendmsg+0x5b7/0x8f0 [ 523.919688][T11889] ? __sys_sendmsg_sock+0x30/0x30 [ 523.924700][T11889] ? import_iovec+0x6f/0xa0 [ 523.929712][T11889] ___sys_sendmsg+0x236/0x2e0 [ 523.934872][T11889] ? __sys_sendmsg+0x2a0/0x2a0 [ 523.939650][T11889] ? percpu_counter_add_batch+0x13b/0x160 [ 523.945548][T11889] __se_sys_sendmsg+0x1af/0x290 [ 523.950646][T11889] ? __x64_sys_sendmsg+0x80/0x80 [ 523.955781][T11889] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 523.961883][T11889] ? lockdep_hardirqs_on+0x94/0x140 [ 523.967084][T11889] do_syscall_64+0x4c/0xa0 [ 523.971501][T11889] ? clear_bhb_loop+0x30/0x80 [ 523.976478][T11889] ? clear_bhb_loop+0x30/0x80 [ 523.981167][T11889] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 523.987271][T11889] RIP: 0033:0x7f1a689a9dd9 [ 523.991790][T11889] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 524.011679][T11889] RSP: 002b:00007f1a66c03028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 524.020189][T11889] RAX: ffffffffffffffda RBX: 00007f1a68c22fa0 RCX: 00007f1a689a9dd9 [ 524.028243][T11889] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000005 [ 524.036311][T11889] RBP: 00007f1a68a3fd69 R08: 0000000000000000 R09: 0000000000000000 [ 524.044361][T11889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 524.052427][T11889] R13: 00007f1a68c23038 R14: 00007f1a68c22fa0 R15: 00007ffd11c0f8a8 [ 524.061654][T11889] [ 524.065099][T11889] Kernel Offset: disabled [ 524.069427][T11889] Rebooting in 86400 seconds..