last executing test programs: 14.670814626s ago: executing program 0 (id=443): socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) ioctl$BTRFS_IOC_ENCODED_READ(0xffffffffffffffff, 0x80809440, 0x0) sendto$inet(r0, &(0x7f0000000540)='v', 0x1, 0x4040, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r1, &(0x7f0000000980)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x4, 0x48, 0x68, 0x0, 0x7f, 0x6, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x23}}, {{0x4e21, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0xd, 0x4, 0x9, 0x0, 0x4, {[@md5sig={0x13, 0x12, "3de253fa57f83978ecbc50c9c0b80681"}, @mptcp=@capable={0x1e, 0xc, 0x8, 0x8, 0x4, 0x2}]}}}}}}}}, 0x5a) socket$nl_netfilter(0x10, 0x3, 0xc) 12.203926494s ago: executing program 1 (id=452): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x39, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25d7dbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7, 0xa, 0x4000000, 0x70000000}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000a40)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0x1, 0xb}, {0x9, 0xfff2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0xfbee}, 0x3, 0x0, 0x3, 0x6, 0xe, 0x4, 0xd, 0x18, 0x5, 0x2, {0x6, 0x8, 0xfffffffc, 0x0, 0xffffffff, 0x2}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 11.469597282s ago: executing program 1 (id=457): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x4070bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x8000, 0x4, 0x6, 0x77}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xd3}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x24040894}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) 11.003567753s ago: executing program 4 (id=459): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x400) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newtfilter={0x94, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xe, 0xf}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x5c, 0x2, [@m_ife={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0x8001, 0x5, 0x7, 0xfffffffc}, 0x1}}, @TCA_IFE_METALST={0x10, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0xfffffff9}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x2004c011}, 0x4800) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$inet6(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x7}}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000500)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3f}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\r', 0x1}], 0x1}, 0x4) 10.571617678s ago: executing program 3 (id=463): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r5}, &(0x7f0000000240), &(0x7f00000003c0)=r3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1800"/12], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) sendmsg$inet(r4, &(0x7f0000001a00)={0x0, 0x0, 0x0}, 0x80) getsockname$packet(r2, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="010000000000ff7f1c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x8000) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x3000}, 0x0) 8.894720803s ago: executing program 1 (id=464): sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x821}, 0x20008888) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000240)={0x0, 0x87, "7bf8ec152fa16d39e4553d9607191c01003f4f261459314625abafbae0dd3d3a415cb19b2f3f5bd1d92f8a3b28f86ac6911e26622113c1d519b46c2b1bb9b76cf8008d37a06e88b31100ae16fcb20ca3c5e2bc78d0014278c1e4c7fb4ab35e2c3ae32abc7bf205fd325765be5684ece2933f3325ec9cb8b4725605bf2722d1ded87089430c8a35"}, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)="480000001400195a8563e43c12f461560a2972063700000000000000590000a2bc5603ca00000f7f89000004200000000101ff000000032fdc0e2d9d9b7373ed", 0x40}], 0x1) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}}, 0x40040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="c6a75206f3", 0x5) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x99, 0x7, 0x0, 0x1, 0x5392, 0xc, 0x9, {0x0, @in6={{0xa, 0x4e20, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10}}, 0x81, 0x3, 0xc, 0x4b, 0x9}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c"], 0xc3}, 0x1, 0x100000000000000}, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYRES8, @ANYBLOB="010026bd7000fddbdf2506000000140002002001000000000000000000000000000114000300fe88000000000000000000000000010108000400ac1414bb2b00070073797374656d5f753a6f626a6563745f723a7373685f"], 0x70}, 0x1, 0x0, 0x0, 0x4}, 0xc8a0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) 8.686897911s ago: executing program 0 (id=466): mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0xf3a, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000240)=0x1) ioctl$int_in(r2, 0x5452, &(0x7f00000001c0)=0xffff) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r0, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x200000c, 0x11, r0, 0xa20f0000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r4, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) mmap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000004, 0x12, r5, 0xe6905000) mmap(&(0x7f00005d4000/0x4000)=nil, 0x4000, 0xc, 0x12, r5, 0xfffff000) 8.571284039s ago: executing program 3 (id=467): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r0 = socket(0x1d, 0x2, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x6, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000f40)=ANY=[], 0x10448) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) close(r3) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) write(r1, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r4, 0x0) getsockopt$inet_mreqn(r0, 0x6a, 0x4, 0x0, &(0x7f00000000c0)=0x5c) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) 7.750920294s ago: executing program 0 (id=468): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r1, 0x0, 0x20000011) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x4000052) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r4, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) poll(0x0, 0x0, 0x101) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc044}, 0x4000814) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 6.578435294s ago: executing program 0 (id=469): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xc}, {0x0, 0xb}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x6569}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240048e4}, 0x20000010) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r7, &(0x7f00000005c0)="05031c00d3fc140000004788ed1c", 0xe, 0x24000091, &(0x7f0000000140)={0x11, 0x7, r8, 0x1, 0xfe, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 6.301870055s ago: executing program 1 (id=470): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xc, 0xfff3}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x48000, 0x9, 0x6, 0x4, 0xffff}, 0x8d23}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 6.16248882s ago: executing program 4 (id=471): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$unix(0x1, 0x1, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa88a806008100050086dd608ab7f200142c0000000000000000000000000000000000fe8000000000000000000000000000aa3a040005", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="509078fffe000000"], 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=@allocspi={0x11c, 0x16, 0x1, 0x0, 0x0, {{{@in, @in6=@private2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@local, 0x0, 0x33}, @in=@broadcast, {0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x4}, {0x0, 0x1, 0x80ec}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x22}, 0x5, 0x5}, [@lifetime_val={0x24, 0x9, {0x5, 0x916, 0x9, 0x9}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000008c0)=ANY=[@ANYBLOB="e00000001200090500000000000000000800bb0000000000c500008008000000", @ANYRES32=0x0, @ANYBLOB="110000003a5d5db2542b5b5e265c5c4000000000d52791db233d0896402d1267b86ac517a485a23d0c3da32ce8f9b19fe043d3a672b0601c63c4f9c0bf2dc42c77065f2e"], 0xe0}], 0x1}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0815000000051104060000000000000001000005540201"], 0x1508}}, 0x24000880) writev(r5, &(0x7f0000000040), 0x2) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0xfff5, 0xfff3}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x7e, 0x7, 0xfffffffc, 0x8}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) 5.580549081s ago: executing program 2 (id=472): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'geneve0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0x3c}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}}, 0x20000000) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x48, r3, 0x917, 0xa7, 0x1000000, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x5f5e0ff}, @L2TP_ATTR_IP6_DADDR={0x14, 0x18, @ipv4={'\x00', '\xff\xff', @empty}}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000a40)=@newqdisc={0x434, 0x24, 0xd0f, 0x70bd28, 0x25dfdbfc, {0x60, 0x0, 0x0, 0x0, {}, {0xffe0, 0xa}, {0x1, 0xe}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x1, 0x3, 0x9, 0x4, 0x6, 0x40, 0x4, 0x40, 0x6, 0x482e3068, 0xff, 0xfffffbea, 0x6, 0x542, 0x400040, 0xe0000, 0x1, 0xc, 0x1, 0x800, 0xd, 0x0, 0x7ff, 0xb3e, 0x3ff, 0x7, 0x7, 0x400, 0x7, 0xa45, 0xc, 0x7f, 0x401, 0x5, 0xfffffff7, 0xfffffff2, 0xdf8, 0x9, 0x7436, 0x7, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x5, 0x1, 0x1, 0x2bf7, 0x6, 0x7, 0x0, 0x3, 0x3, 0x1, 0x9, 0x1, 0x4, 0x4, 0x6, 0x3, 0x10000, 0x7, 0x5, 0x3, 0x80000001, 0x9, 0x5, 0x1cb, 0x5, 0x7, 0x7, 0x7, 0xfff, 0x2, 0x7, 0x9, 0xffff, 0x1, 0x3, 0x4, 0x8, 0xe1cc, 0x9, 0xc7, 0x7, 0x55, 0x6, 0x75a, 0x8, 0x2, 0x6, 0x40, 0x8, 0x7, 0x5, 0x0, 0xf03, 0x7, 0x8, 0x9, 0x3, 0x7, 0x21931f93, 0x1, 0x800, 0x10, 0xfffffffd, 0x0, 0x2, 0xffffffc0, 0x2, 0x7ff, 0x6ed4, 0xffffff80, 0x3, 0x200, 0xcc4, 0x2, 0x3, 0x10b, 0x2, 0x9, 0xac21, 0x0, 0x8, 0xc33, 0xff, 0x2f, 0x8, 0x85, 0x2, 0xf1c6, 0x8, 0x5, 0x6, 0x40, 0x4, 0x2, 0xa, 0x80000001, 0x7, 0x7, 0x3, 0x9, 0x7, 0xa93, 0x80000000, 0x80000001, 0x7f, 0x1ff, 0x0, 0x3, 0x870, 0x67bae144, 0x9, 0x4, 0x6a8, 0xe4b, 0x1, 0x13, 0x1, 0x6, 0x4a68, 0xe, 0x10, 0xffffffff, 0x7f, 0x0, 0xa0a, 0x9, 0x3, 0xffffffe8, 0xc71, 0x8, 0xffffff5b, 0x8, 0x0, 0x80000001, 0x5, 0x6, 0x0, 0x30869cc6, 0x0, 0x3ff, 0x4, 0x80, 0x5, 0x15bf41b1, 0xf, 0x6, 0xfffffffe, 0x8, 0x0, 0x943, 0x7, 0xe, 0x5, 0x9, 0x2, 0x0, 0x1, 0x1000, 0x1000, 0x7ff, 0x6, 0x2, 0x0, 0x7, 0xb263, 0x1, 0x7, 0x4, 0x1, 0xc, 0x1, 0x200, 0x8001, 0x5, 0x303f, 0x5d, 0x3, 0x4, 0x3, 0x4, 0x2, 0x7, 0x39b1e32c, 0x0, 0x8a84, 0x9, 0x40, 0x10000, 0x1, 0xb, 0xfffffffd, 0x4, 0x6, 0x5, 0xf2, 0x1834, 0x10000, 0x7ff, 0x1, 0xeb7, 0x67f1, 0x9, 0xffff, 0x3ff, 0x80000000, 0xd, 0x3, 0x10001, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0xc5}, 0xc010) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0xfffffffffffffe7b, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0xff, 0x4, 0x6, 0x6}, 0x4}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x2000a804) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000880)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x9, 0x3, 0x200, 0x0, 0xffffffff, 0xffffffff, 0x118, 0xffffffff, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x3, 0x0, {[{{@ip={@multicast1, @multicast2, 0xffffffff, 0xff000000, 'team_slave_1\x00', 'pim6reg\x00', {}, {}, 0x1d, 0x3}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0xa, 0x2, 0xfffffffe, 0x435, 'netbios-ns\x00', 'syz0\x00', {0x7fff}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, 0x0, 0x0, 'ip6tnl0\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x33, 0x3, 0x8}, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x309f) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r7, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x8}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x3}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x781d}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x48}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0xc0) 5.412743811s ago: executing program 3 (id=473): socket$phonet(0x23, 0x2, 0x1) socket$netlink(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x800) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000714010000000000000000000800", @ANYRES32=r2], 0x30}}, 0x94) 5.403059576s ago: executing program 0 (id=474): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x44e4}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x2, 0x7, 0x400, 0x0, 0x5}, {0xc0, 0x2, 0x8e98, 0x2, 0x9}, 0x8, 0x3, 0x12c7}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x240080c1}, 0x24008800) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff5656d, 0x70bd29, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0x1, 0xb}, {0xf, 0xb}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x240048e4}, 0x44890) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600602fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 5.23813624s ago: executing program 3 (id=475): r0 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r0, 0x0, 0x0, 0x4004, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r1, 0x0, 0x0, 0x2090) sendto$inet(0xffffffffffffffff, &(0x7f0000000580), 0x0, 0x10008095, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x9}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x0, 0x2, 0x7}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3e}}, 0x4d5, 0x32}, 0x0, @in=@private=0xa0100fe, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe, 0xc00}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) 5.049184527s ago: executing program 4 (id=476): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x9}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40480c0}, 0x20040084) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a2a1}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x8, 0x80000001, 0x7}, 0x2a}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r7, &(0x7f00000002c0)="05031c00d1fd140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) 4.559543711s ago: executing program 2 (id=477): socket$nl_route(0x10, 0x3, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0xc040) r0 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) recvmsg(r0, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000025c0), 0x0, &(0x7f0000002600)=""/226, 0xe2}, 0x1) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, &(0x7f0000000040)=0xd62, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvfrom(r0, 0x0, 0x9400, 0x10132, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x4885}, 0x30000081) 3.139339644s ago: executing program 2 (id=478): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000600)={0x14, r1, 0x1, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40880}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) accept4$bt_l2cap(r2, 0x0, &(0x7f0000000040), 0x80000) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x78, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x48, 0x2, [@TCA_CGROUP_EMATCHES={0x44, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x34, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_REVISION={0x38, 0x3, 0x2}]}}]}]}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x40010) 3.135206101s ago: executing program 3 (id=479): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdf8, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0xa, 0xd}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x1, 0x7ff, 0x1}, {0x6, 0x0, 0x8, 0x6, 0x8, 0x401}, 0x40, 0xd, 0x8ef}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x40000) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.38924707s ago: executing program 1 (id=480): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'pim6reg\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x6, 0x0) close(r3) write(r1, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"6b2f3b6a399bc2f1af59106a2a1667f8", 0x0, 0x0, {0x8, 0x9d5f}, {0xd, 0x41}, 0xfffe, [0xde9a, 0x8e9, 0xc, 0x1d, 0x43, 0xfffffffffffffffb, 0x28, 0x1, 0x34e0000, 0x7ffffffffffffffb, 0x9, 0x5, 0x6, 0x8, 0x7, 0x4]}) write$cgroup_subtree(r5, &(0x7f0000000280)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x11fe726f7e78fcf0}, 0x28) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, 0xffffffffffffffff, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0xe) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) 1.364497297s ago: executing program 4 (id=481): unshare(0x20000400) socket$inet_udp(0x2, 0x2, 0x0) close(0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="97eb01001800000000000000500000005000000002000000090000000000000e03000000010000000a0000000000000203000000000000000500000d0000fa8c99dc00000100000000000000000000000000000000000000090000000000000001000000030010"], 0x0, 0x6a, 0x0, 0x0, 0x7fffffff}, 0x28) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000440)={0xa, 0x4e21, 0x0, @empty, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x28) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000340)=@ccm_128={{0x304}, "1f5fe89b3e65d0fd", "313a19ff4c7d278bf34b54168b154d15", "1e5a7ddb", "2fd978cbd6bf3b5d"}, 0x28) setsockopt$inet6_tcp_int(r1, 0x11a, 0x4, 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x49, 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 1.233758168s ago: executing program 2 (id=482): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) r2 = socket(0x28, 0x5, 0x0) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r3, 0x4) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) recvmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x2000) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) listen(r2, 0x7697) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 1.224332823s ago: executing program 0 (id=483): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f00000001c0)={0x1f, 0x3, 0x6}, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001080)=ANY=[@ANYBLOB="e0000000100001002dbd7000fddbdf257874732874776f6669732829"], 0xe0}, 0x1, 0x0, 0x0, 0x44}, 0x80) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x600, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) unshare(0xe040400) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r6, &(0x7f0000000f80)={0x0, 0x0, 0x0}, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b20, &(0x7f0000000080)={'wlan1\x00', @random='\x00\x00]\x00N\v'}) 1.208148725s ago: executing program 3 (id=484): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xa, 0x6}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000a00)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0xfffe, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x6, 0x100, 0x10000000, 0xf, 0x8}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x48001}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0) close(r8) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r9 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$kcm(r9, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x4) 1.191774888s ago: executing program 4 (id=485): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002940)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x20000000, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x81, 0x5, 0x2, 0x7}, {0x0, 0x6, 0x4, 0x10000, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x3}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x8}, {0x3, 0x8004, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x4c, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x800003, 0x400000, 0xffffffff}, {0x5, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x2, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x6, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x6}, {0x240, 0x6, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x49, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x0, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x8, 0x87}, {0x5, 0xc, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x9}, {0x6, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0xffffffff, 0x5}, {0x9, 0xd76, 0x4, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158144, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x9, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0x8000000f}, {0x5, 0x3, 0x6, 0x1000, 0x4, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0x5d, 0xffff8001, 0x800000}, {0x6, 0x6, 0x7ffc, 0x9, 0x500, 0x6}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0x8, 0x0, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x9, 0x66a}, {0xfff, 0x6, 0x8, 0xb2f3, 0x9e, 0x7f}, {0x8, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0xffffffff, 0x80000001, 0x9}, {0x3, 0x2, 0x7, 0x6, 0x10, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x8, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x402, 0x2b00, 0xf7fff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x40057}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x4, 0x88000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd50, 0x61a6}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x1004, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x3ff, 0x1, 0x87, 0x7}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0xa5f, 0x80000, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x400, 0x9, 0x8, 0xa, 0x100}, {0x81, 0x4, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x5, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x3, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1d, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0xc}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x5, 0xbe, 0x81}, {0x4, 0x800, 0x4000, 0x5, 0x8, 0xfa2f}, {0x1000003, 0x8d, 0x81, 0x2, 0xd99d, 0x6}, {0x9, 0x2, 0x4, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0x2, 0xfffffffb, 0xe6d, 0x62f, 0x401, 0xffff9d44}, {0x9a2f, 0x800, 0x8, 0x1, 0x10000007}, {0x20000009, 0x2, 0x800, 0x200, 0x10001, 0x3}, {0x47, 0x6, 0x8936, 0xdcb, 0x8, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x10, 0x5}, {0x7, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4, 0x1}, {0x5}, {0xa, 0x1}, {0x3}, {0x2}, {0x3}, {0x3}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3, 0x1}, {}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x4}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x4}, {0x3}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3, 0x1}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r6, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r4, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000380)="da", 0x1}], 0x1}, 0x20000885) 761.519721ms ago: executing program 2 (id=486): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa, 0x0, 0xffffffff}, 0x1c) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000080), 0x4a) setsockopt$sock_int(r1, 0x1, 0x8, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000003f80)={&(0x7f0000001100), 0x6e, &(0x7f0000003ec0)=[{&(0x7f0000001180)=""/213, 0xd5}, {&(0x7f0000001280)=""/43, 0x2b}, {&(0x7f0000001dc0)=""/4096, 0x1000}, {&(0x7f0000002dc0)=""/187, 0xbb}, {&(0x7f0000002e80)=""/4096, 0x1000}, {&(0x7f0000003e80)=""/33, 0x21}], 0x6}, 0x2) close(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x10000, 0x6}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r4 = socket$inet6(0xa, 0x805, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, 0x0) getsockopt$bt_hci(r4, 0x84, 0x85, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="b702000004000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0f800000000b7060000ffffffff7b6405000000000065040400210000000404000001e37c60b7040000000000006a0a00fe000000008500000032000000850000000200000095000000000000000ce0de7621e5e832249c04112cf7af2b75d0d1f034b1b3fb6bd3ce8fa62c7941272ff49142d860010ab162aa2264ab67e55a00000000000000edfe0969a9ddc125b686a1e83c8790c893d713b3295dad0ea697181d1e85b64126b5d72f204754d1d4a93f24215dee354e93cfc3f50ff23f8432c72012f021c84c59a9d4c142f439d3040cfee621589fb3a2f1407c7cbed48e7026f8d52d4bca2608c79aa4a73732028f88ce07ed1075da4a2ef44e3d8b88873f0b1de87dfb6d15936ec0a27cb554def9e27396df6b7851ffa26237ea6730880f06371beb3b290b7d8629a6f0373fefa0acb60888fc14ad2b83ca03ac2aee792482ced58af4140cc4ce3efef26e00c5b2200a91cb80c6065a697d6fc8aa8b65aee0783b04cff0218ce82c9687b4474da89c474c23727555fc5e5f8ad0f2f7a261140440fce1f12cc6df312accd011d888384283092d987c40bbb46f68c2431b97906f00000000349834fa147bd5923bbd4e606708034931a8f1a89bdf77093a0000427aab8e21e1a33d3fe093547532fce6549dd648ad233e05a7b3ea178007c1c32e871ac81f287c4aabbd153390b16d1d41ee433e3a54ea9ee82cf14f3a4cc523ee000000000009e106d6b5289f0000000000000000000000f7bc9f46cb71f6b889d37807865e3b4e9916dd0f72c9d58ea333b90f8886dcbf5ddda0e42ca08e3303632401f2f5212b40c0e88c957fd767dbfc80b07ad668b4f6f92fb209d7c2dbac597843c8eb7bf92fe6d0bb0b72549795c2ed19e441eb69869844152ba9da0588e42cdbc5fcd245ce5e3ef0dca64931276702a312db7956f0a75eb9caa17d47a6331c7c963cbf86a845ce27c26b7136d3e7207318b1df7a6320c64f18ccd926eaeddcde8d5006d6c38db117fb1115221a66169172720ccca770bff37e59511b2606138377eda44b2f288b491ab8aae0e11a98303b0e407e0f9d21f4a3ebbd3fabf6da9a1a1f869a339fab465d8322b7280b0734fd115a19b33c8644fff71b3c62f2e1b827e2663e06a751182e968c8ab05fb1d0115d4b11d944f2c06acc023a02b7416a9a10218d21503cda13bb5df6c992e52e1c01793b728eac000058ab3b3900d279297dadc127e2f38fc60c23af2e1fefa5a83456647191ba1953d335f59aa261fe79613df6bf43884e9649691e32680d75a541c27ffe74f9d13340f2cf1c7dc2b7db01213216cd4ecfd30efe137641471987289b7e23482e026b26eacd1b97443e2ea2d1d6e31a01ee0ae7fa195a2152b2338b086423a3883f2ce3e2f84e04f4d52c985eac4b46336908599564b47db0e6aa97ee51a360f4382fd99745725d44c77d097f69d19fe86f71c38a0226d44ebe0ecbd959f14b540745cd03b8c9f02b825ba45ca85706c73115f70871db9d2a1bc2a517b39f9648123917a5db07ba4e27f961373767e1ea8f7cc558e483abef1a9923c5cfa2081e430680950b7d7c377726b557ad31fdee17ba7057741f39d29d8ab295222f96297a777bb235416e72c84afef2bdb08fb375147b028b89f15af45bc8976b91158c13c9876daa71e7db0f5a17376be39ea79ce1246c547c740e31c64e5d293e0e5a544dd166010061d6ccae46c173b8e11721e4bce22c96af00000021f80ac6c3971006db853e3c40a5417d6eac09eb0e01ac6bd4c6dacdcb1d6d2ef9c8bdea91c984022821e961236d08f8b9072ec6cb5d5a68833fd5b4e80a5ac2bc6ff323f5ce612b59ce8177956c1affcc8baf4c8b59ab959aff9a7bd81f7c7c1f1bb92ddbeed6bce8041c7f0c1c584e6ae027678ce3cfbfea938aecc3c5119c5875b7fb35dc20f5c7aaae1e276104f607a73fe501c1045873a2b1eb80e95c87f099d98028dc82bdc7ef08c871fb3061c3c5ebd613e6e5e8cf099bb6e8c0441a133c85138b36a02c47fbedf7ed1d3ce74c9ec2c676c0b2d4b5eca61dbf5769b483c2a9f6bec666dae4e81960e9bad7f17cfc3d5bcc7b7f437110ca8ffa908c12086b2227eb202a8d56e0925ba994b05c98c39de44d25932449ddf08e5377814a40877eab4440ca01b3f50d2014a61a7d32105254b424238122386424efa3a7041254f686a5faac120942287f75e8e3db569ce47b120059d774a37e11d013be50cd2cbb00f6d2a23af61ec7d30bb7dc"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 218.238509ms ago: executing program 4 (id=487): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xfff1, 0xb}, {0x7, 0xffe2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xf, 0xa, 0x0, 0x5}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c090) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r8) socket$unix(0x1, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 109.285279ms ago: executing program 2 (id=488): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x38, r3, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r3, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r5) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r6) r7 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000240), r6) sendmsg$NLBL_CALIPSO_C_ADD(r5, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r7, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008010}, 0x40000) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, r7, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000800}, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)) syz_emit_ethernet(0x7a, &(0x7f0000000340)=ANY=[@ANYBLOB="856b1200ff00aaaaaaaaaaaa86dd60381f3400102f00fc000000000000000000000000000000ff020000000000000000000000000001042088a88dff000000000800000086dd080088be00000000100000000100000000000000080022eb0000000020000000020000000000008000000000080065580000000033780644b9ad49fe3e1df4a9bc6470e27b49b2018a3adc072a76"], 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010000d042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002400128009000100626f6e64000000000500010005000000"], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 0s ago: executing program 1 (id=489): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x4890) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.171' (ED25519) to the list of known hosts. [ 76.261295][ T5607] cgroup: Unknown subsys name 'net' [ 76.375731][ T5607] cgroup: Unknown subsys name 'cpuset' [ 76.384250][ T5607] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.996266][ T5607] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 81.463812][ T5623] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.472999][ T5623] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.481176][ T5623] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.489014][ T5623] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.500572][ T5623] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.509214][ T5623] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.518738][ T5623] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.519588][ T5627] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.534728][ T5627] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.542999][ T5627] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.578395][ T5627] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 81.588495][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 81.598112][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.601854][ T5627] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 81.615065][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.615572][ T5627] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 81.630741][ T5627] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 81.631227][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.662705][ T5621] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 81.671872][ T5621] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 81.683225][ T5623] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.694305][ T5623] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.704219][ T5623] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.714344][ T5638] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.724249][ T5638] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.556081][ T5620] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.563351][ T5620] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.570526][ T5620] bridge_slave_0: entered allmulticast mode [ 83.577309][ T5627] Bluetooth: hci0: command tx timeout [ 83.579277][ T5620] bridge_slave_0: entered promiscuous mode [ 83.583220][ T5627] Bluetooth: hci1: command tx timeout [ 83.636150][ T5620] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.643358][ T5620] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.651034][ T5620] bridge_slave_1: entered allmulticast mode [ 83.658320][ T5620] bridge_slave_1: entered promiscuous mode [ 83.720507][ T5628] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.727769][ T5628] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.735015][ T5627] Bluetooth: hci4: command tx timeout [ 83.735029][ T5638] Bluetooth: hci2: command tx timeout [ 83.735921][ T5628] bridge_slave_0: entered allmulticast mode [ 83.753094][ T5628] bridge_slave_0: entered promiscuous mode [ 83.791313][ T5628] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.798508][ T5628] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.805820][ T5628] bridge_slave_1: entered allmulticast mode [ 83.811897][ T5627] Bluetooth: hci3: command tx timeout [ 83.814091][ T5628] bridge_slave_1: entered promiscuous mode [ 83.825161][ T5631] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.832352][ T5631] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.839510][ T5631] bridge_slave_0: entered allmulticast mode [ 83.846864][ T5631] bridge_slave_0: entered promiscuous mode [ 83.857424][ T5620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.893245][ T5631] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.900456][ T5631] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.907703][ T5631] bridge_slave_1: entered allmulticast mode [ 83.914787][ T5631] bridge_slave_1: entered promiscuous mode [ 83.924039][ T5620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.996190][ T5619] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.004366][ T5619] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.011802][ T5619] bridge_slave_0: entered allmulticast mode [ 84.019044][ T5619] bridge_slave_0: entered promiscuous mode [ 84.029309][ T5628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.058924][ T5629] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.066385][ T5629] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.073669][ T5629] bridge_slave_0: entered allmulticast mode [ 84.080724][ T5629] bridge_slave_0: entered promiscuous mode [ 84.088316][ T5619] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.095975][ T5619] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.103676][ T5619] bridge_slave_1: entered allmulticast mode [ 84.110839][ T5619] bridge_slave_1: entered promiscuous mode [ 84.120014][ T5628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.131948][ T5631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.146132][ T5620] team0: Port device team_slave_0 added [ 84.151947][ T5629] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.159106][ T5629] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.166515][ T5629] bridge_slave_1: entered allmulticast mode [ 84.173871][ T5629] bridge_slave_1: entered promiscuous mode [ 84.223624][ T5631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.234692][ T5620] team0: Port device team_slave_1 added [ 84.263680][ T5628] team0: Port device team_slave_0 added [ 84.291216][ T5629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.303939][ T5619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.315329][ T5628] team0: Port device team_slave_1 added [ 84.342902][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.349864][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.376372][ T5620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.390009][ T5629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.410678][ T5619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.430883][ T5631] team0: Port device team_slave_0 added [ 84.437415][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.444522][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.470492][ T5620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.513981][ T5631] team0: Port device team_slave_1 added [ 84.529058][ T5629] team0: Port device team_slave_0 added [ 84.546754][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.554023][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.580188][ T5628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.615287][ T5629] team0: Port device team_slave_1 added [ 84.623007][ T5619] team0: Port device team_slave_0 added [ 84.629358][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.636591][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.662656][ T5628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.683182][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.690202][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.716415][ T5631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.740535][ T5619] team0: Port device team_slave_1 added [ 84.774736][ T5620] hsr_slave_0: entered promiscuous mode [ 84.781606][ T5620] hsr_slave_1: entered promiscuous mode [ 84.789089][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.796239][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.822515][ T5631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.873803][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.881062][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.907048][ T5629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.939345][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.946625][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.972672][ T5619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.985162][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.992197][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.018245][ T5619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.031056][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.038298][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.064554][ T5629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.098735][ T5628] hsr_slave_0: entered promiscuous mode [ 85.105135][ T5628] hsr_slave_1: entered promiscuous mode [ 85.111647][ T5628] debugfs: 'hsr0' already exists in 'hsr' [ 85.117636][ T5628] Cannot create hsr debugfs directory [ 85.177956][ T5631] hsr_slave_0: entered promiscuous mode [ 85.184524][ T5631] hsr_slave_1: entered promiscuous mode [ 85.190569][ T5631] debugfs: 'hsr0' already exists in 'hsr' [ 85.196472][ T5631] Cannot create hsr debugfs directory [ 85.340141][ T5629] hsr_slave_0: entered promiscuous mode [ 85.346655][ T5629] hsr_slave_1: entered promiscuous mode [ 85.352912][ T5629] debugfs: 'hsr0' already exists in 'hsr' [ 85.358648][ T5629] Cannot create hsr debugfs directory [ 85.374394][ T5619] hsr_slave_0: entered promiscuous mode [ 85.380670][ T5619] hsr_slave_1: entered promiscuous mode [ 85.387054][ T5619] debugfs: 'hsr0' already exists in 'hsr' [ 85.393025][ T5619] Cannot create hsr debugfs directory [ 85.651291][ T5627] Bluetooth: hci0: command tx timeout [ 85.651445][ T5638] Bluetooth: hci1: command tx timeout [ 85.811254][ T5638] Bluetooth: hci4: command tx timeout [ 85.811283][ T5627] Bluetooth: hci2: command tx timeout [ 85.860128][ T5620] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 85.876301][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.884555][ T5620] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 85.891882][ T5627] Bluetooth: hci3: command tx timeout [ 85.899765][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.907763][ T5620] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 85.919223][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.927302][ T5620] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 85.936595][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.013491][ T5628] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.024595][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.033360][ T5628] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.046292][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.060226][ T5628] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.070230][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.079028][ T5628] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.088855][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.184624][ T5631] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 86.195158][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.204236][ T5631] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 86.216461][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.224489][ T5631] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 86.233706][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.244203][ T5631] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 86.253965][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.387200][ T5629] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.399971][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.410125][ T5629] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.419579][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.427740][ T5629] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.438051][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.449264][ T5620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.466292][ T5629] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.479088][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.530227][ T5620] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.580686][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.588290][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.633931][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.641128][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.654802][ T5619] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.665151][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.674025][ T5619] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.683830][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.701629][ T5619] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.711882][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.719922][ T5619] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.729935][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.830462][ T5628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.913122][ T5631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.944233][ T5628] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.018057][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.025311][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.077585][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.084820][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.100193][ T5631] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.124940][ T5629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.157570][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.164805][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.231609][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.238932][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.337865][ T5629] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.386881][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.394537][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.415982][ T5619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.436836][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.444055][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.506194][ T5619] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.553296][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.560512][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.604990][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.612297][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.731304][ T5627] Bluetooth: hci1: command tx timeout [ 87.734246][ T5638] Bluetooth: hci0: command tx timeout [ 87.891472][ T5638] Bluetooth: hci4: command tx timeout [ 87.892829][ T5627] Bluetooth: hci2: command tx timeout [ 87.972031][ T5627] Bluetooth: hci3: command tx timeout [ 88.211732][ T5620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.832974][ T5628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.887103][ T5631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.049951][ T5629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.066003][ T5620] veth0_vlan: entered promiscuous mode [ 89.126475][ T5628] veth0_vlan: entered promiscuous mode [ 89.164069][ T5620] veth1_vlan: entered promiscuous mode [ 89.189080][ T5619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.199030][ T5631] veth0_vlan: entered promiscuous mode [ 89.206260][ T5628] veth1_vlan: entered promiscuous mode [ 89.246823][ T5631] veth1_vlan: entered promiscuous mode [ 89.269946][ T5629] veth0_vlan: entered promiscuous mode [ 89.309155][ T5620] veth0_macvtap: entered promiscuous mode [ 89.322665][ T5629] veth1_vlan: entered promiscuous mode [ 89.344153][ T5620] veth1_macvtap: entered promiscuous mode [ 89.359965][ T5628] veth0_macvtap: entered promiscuous mode [ 89.377058][ T5628] veth1_macvtap: entered promiscuous mode [ 89.429448][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.447009][ T5631] veth0_macvtap: entered promiscuous mode [ 89.457832][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.465834][ T5619] veth0_vlan: entered promiscuous mode [ 89.485067][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.497498][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.507737][ T5619] veth1_vlan: entered promiscuous mode [ 89.522753][ T5631] veth1_macvtap: entered promiscuous mode [ 89.538925][ T5629] veth0_macvtap: entered promiscuous mode [ 89.549618][ T48] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.559250][ T48] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.585763][ T5629] veth1_macvtap: entered promiscuous mode [ 89.595755][ T48] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.605395][ T48] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.624120][ T48] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.638781][ T48] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.695690][ T48] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.708378][ T48] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.748633][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.789872][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.810990][ T5627] Bluetooth: hci1: command tx timeout [ 89.811776][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.825915][ T5627] Bluetooth: hci0: command tx timeout [ 89.849287][ T1110] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.858217][ T1110] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.870559][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.898561][ T1110] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.908255][ T1110] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.928560][ T5619] veth0_macvtap: entered promiscuous mode [ 89.956192][ T48] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.968048][ T48] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.979495][ T5627] Bluetooth: hci2: command tx timeout [ 89.983345][ T5638] Bluetooth: hci4: command tx timeout [ 89.993456][ T150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.003334][ T150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.006437][ T5619] veth1_macvtap: entered promiscuous mode [ 90.025797][ T48] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.034648][ T48] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.051355][ T5638] Bluetooth: hci3: command tx timeout [ 90.076866][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.085207][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.152254][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.169087][ T150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.173218][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.178564][ T150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.250401][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.260243][ T48] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.263944][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.270629][ T150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.286517][ T48] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.298797][ T150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.323018][ T5620] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 90.352023][ T48] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.361009][ T48] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.440721][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.475689][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.526109][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.559290][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.681448][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.701071][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.734159][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.753594][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.828967][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.839226][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.138672][ T5829] syzkaller0: entered promiscuous mode [ 91.161360][ T5829] syzkaller0: entered allmulticast mode [ 91.221842][ T5832] tipc: Started in network mode [ 91.237658][ T5832] tipc: Node identity f6399ea5d1bc, cluster identity 4711 [ 91.269112][ T5832] tipc: Enabled bearer , priority 0 [ 91.308069][ T5828] tipc: Resetting bearer [ 91.357753][ T5828] tipc: Disabling bearer [ 91.753231][ T5843] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 91.766931][ T5846] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 91.985988][ T188] cfg80211: failed to load regulatory.db [ 93.339318][ T5868] netlink: 200 bytes leftover after parsing attributes in process `syz.1.15'. [ 93.937584][ T5875] Zero length message leads to an empty skb [ 94.078761][ T5882] syzkaller0: entered promiscuous mode [ 94.096819][ T5882] syzkaller0: entered allmulticast mode [ 94.728142][ T5893] xt_hashlimit: size too large, truncated to 1048576 [ 94.792914][ T5895] netlink: 8 bytes leftover after parsing attributes in process `syz.2.25'. [ 94.841085][ T5899] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.896881][ T5901] netlink: 8 bytes leftover after parsing attributes in process `syz.2.25'. [ 94.912026][ T5899] bridge_slave_0 (unregistering): left allmulticast mode [ 94.916249][ T5900] netlink: 76 bytes leftover after parsing attributes in process `syz.4.27'. [ 94.928322][ T5899] bridge_slave_0 (unregistering): left promiscuous mode [ 94.944292][ T5899] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.345961][ T5898] syzkaller0: entered promiscuous mode [ 95.360940][ T5898] syzkaller0: entered allmulticast mode [ 95.423618][ T5914] syzkaller0: entered promiscuous mode [ 95.444032][ T5914] syzkaller0: entered allmulticast mode [ 95.634032][ T5922] netlink: 'syz.3.30': attribute type 1 has an invalid length. [ 96.401321][ T5932] nbd: must specify at least one socket [ 98.217636][ T5924] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 98.225766][ T5927] bridge1: entered promiscuous mode [ 98.268044][ T5955] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 99.331203][ T5980] syzkaller0: entered promiscuous mode [ 99.342682][ T5980] syzkaller0: entered allmulticast mode [ 99.567314][ T5987] syzkaller0: entered promiscuous mode [ 99.579440][ T5987] syzkaller0: entered allmulticast mode [ 99.751615][ T5982] syzkaller0: entered promiscuous mode [ 99.757326][ T5982] syzkaller0: entered allmulticast mode [ 99.782947][ T5995] syzkaller0: entered promiscuous mode [ 99.793326][ T5995] syzkaller0: entered allmulticast mode [ 99.905413][ T5998] netlink: 28 bytes leftover after parsing attributes in process `syz.4.50'. [ 99.921963][ T5998] netlink: 'syz.4.50': attribute type 7 has an invalid length. [ 99.933477][ T5998] netlink: 'syz.4.50': attribute type 8 has an invalid length. [ 99.941320][ T5998] netlink: 4 bytes leftover after parsing attributes in process `syz.4.50'. [ 99.958561][ T5999] netlink: 'syz.4.50': attribute type 1 has an invalid length. [ 99.967177][ T5999] netlink: 224 bytes leftover after parsing attributes in process `syz.4.50'. [ 101.848794][ T6010] syzkaller0: entered promiscuous mode [ 101.878752][ T6010] syzkaller0: entered allmulticast mode [ 102.068361][ T6019] syz.4.55 uses obsolete (PF_INET,SOCK_PACKET) [ 102.079887][ T6018] syzkaller0: entered promiscuous mode [ 102.101279][ T6018] syzkaller0: entered allmulticast mode [ 102.146971][ T6017] netlink: 8 bytes leftover after parsing attributes in process `syz.4.55'. [ 102.249485][ T6023] netlink: 'syz.1.59': attribute type 1 has an invalid length. [ 102.907513][ T6050] netlink: 'syz.2.66': attribute type 13 has an invalid length. [ 102.980189][ T6051] netlink: 20 bytes leftover after parsing attributes in process `syz.2.66'. [ 104.992393][ T6051] bond0: (slave bond_slave_0): Releasing backup interface [ 105.088548][ T6051] bond_slave_0: entered promiscuous mode [ 105.095206][ T6051] bond_slave_0: entered allmulticast mode [ 105.388137][ T6083] netlink: 'syz.4.75': attribute type 1 has an invalid length. [ 105.418115][ T6085] Driver unsupported XDP return value 0 on prog (id 18) dev N/A, expect packet loss! [ 105.428847][ T6064] syzkaller0: entered promiscuous mode [ 105.453010][ T6064] syzkaller0: entered allmulticast mode [ 105.486742][ T6089] netlink: 28 bytes leftover after parsing attributes in process `syz.4.75'. [ 107.006275][ T6086] syzkaller0: entered promiscuous mode [ 107.021634][ T6086] syzkaller0: entered allmulticast mode [ 108.579227][ T6112] lo speed is unknown, defaulting to 1000 [ 108.651659][ T6116] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 108.892615][ T6112] lo speed is unknown, defaulting to 1000 [ 108.929793][ T6112] lo speed is unknown, defaulting to 1000 [ 109.037670][ T6125] syzkaller0: entered promiscuous mode [ 109.051830][ T6125] syzkaller0: entered allmulticast mode [ 109.446052][ T6145] netlink: 'syz.2.88': attribute type 13 has an invalid length. [ 109.471182][ T6145] netlink: 'syz.2.88': attribute type 17 has an invalid length. [ 109.535040][ T6149] netlink: 4 bytes leftover after parsing attributes in process `syz.2.88'. [ 109.854509][ T6145] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 110.062093][ T6112] infiniband syz1: set active [ 110.081378][ T6112] infiniband syz1: added lo [ 110.158735][ T5724] lo speed is unknown, defaulting to 1000 [ 110.209716][ T6112] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 110.246845][ T6112] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 110.264625][ T6112] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 110.271165][ T6166] syzkaller0: entered promiscuous mode [ 110.309973][ T6166] syzkaller0: entered allmulticast mode [ 110.388461][ T6112] RDS/IB: syz1: added [ 110.406667][ T6112] smc: adding ib device syz1 with port count 1 [ 110.432337][ T6112] smc: ib device syz1 port 1 has no pnetid [ 110.486495][ T5724] lo speed is unknown, defaulting to 1000 [ 110.517806][ T6112] lo speed is unknown, defaulting to 1000 [ 110.637690][ T6174] warning: `syz.2.93' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 111.004668][ T6183] sctp: [Deprecated]: syz.0.96 (pid 6183) Use of struct sctp_assoc_value in delayed_ack socket option. [ 111.004668][ T6183] Use struct sctp_sack_info instead [ 111.534839][ T6194] netlink: 16 bytes leftover after parsing attributes in process `syz.0.99'. [ 111.617698][ T6112] lo speed is unknown, defaulting to 1000 [ 112.419926][ T6210] syzkaller0: entered promiscuous mode [ 112.450550][ T6210] syzkaller0: entered allmulticast mode [ 112.513974][ T6214] netlink: 24 bytes leftover after parsing attributes in process `syz.4.105'. [ 112.527458][ T6112] lo speed is unknown, defaulting to 1000 [ 112.888579][ T6218] syzkaller0: entered promiscuous mode [ 112.934231][ T6218] syzkaller0: entered allmulticast mode [ 113.246524][ T6226] syzkaller0: entered promiscuous mode [ 113.262988][ T6226] syzkaller0: entered allmulticast mode [ 113.482021][ T6112] lo speed is unknown, defaulting to 1000 [ 113.509117][ T6231] syzkaller0: entered promiscuous mode [ 113.533187][ T6231] syzkaller0: entered allmulticast mode [ 113.694892][ T6230] syzkaller0: entered promiscuous mode [ 113.703958][ T6230] syzkaller0: entered allmulticast mode [ 113.977135][ T6245] netlink: 'syz.4.114': attribute type 1 has an invalid length. [ 115.966031][ T6245] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 115.978525][ T6112] lo speed is unknown, defaulting to 1000 [ 115.979301][ T6250] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 116.042219][ T6256] bridge1: entered promiscuous mode [ 116.062449][ T6256] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 116.201903][ T6272] syzkaller0: entered promiscuous mode [ 116.207447][ T6272] syzkaller0: entered allmulticast mode [ 118.639694][ T6344] netlink: 4 bytes leftover after parsing attributes in process `syz.4.128'. [ 118.845927][ T6344] 8021q: adding VLAN 0 to HW filter on device bond1 [ 118.882644][ T6344] bridge1: left promiscuous mode [ 118.974274][ T6351] syzkaller0: entered promiscuous mode [ 118.996378][ T6351] syzkaller0: entered allmulticast mode [ 119.136690][ T6359] syzkaller0: entered promiscuous mode [ 119.155236][ T6359] syzkaller0: entered allmulticast mode [ 121.117715][ T6397] syzkaller0: entered promiscuous mode [ 121.124806][ T6397] syzkaller0: entered allmulticast mode [ 121.231538][ T6397] tipc: Enabled bearer , priority 0 [ 121.275555][ T6396] tipc: Resetting bearer [ 121.364724][ T6396] tipc: Disabling bearer [ 122.086862][ T6436] netlink: 4 bytes leftover after parsing attributes in process `syz.1.148'. [ 122.312950][ T6443] syzkaller0: entered promiscuous mode [ 122.330709][ T6443] syzkaller0: entered allmulticast mode [ 122.474827][ T6445] ip6erspan0: entered allmulticast mode [ 123.323588][ T6469] sch_tbf: burst 823 is lower than device syzkaller0 mtu (1514) ! [ 123.373083][ T6469] syzkaller0: entered promiscuous mode [ 123.394842][ T6469] syzkaller0: entered allmulticast mode [ 123.696693][ T48] nci: nci_rx_work: unknown MT 0x6 [ 123.705516][ T6480] netlink: 'syz.0.157': attribute type 4 has an invalid length. [ 123.738029][ T6484] netlink: 'syz.2.160': attribute type 1 has an invalid length. [ 123.747021][ T6480] netlink: 152 bytes leftover after parsing attributes in process `syz.0.157'. [ 123.791262][ T6484] 8021q: adding VLAN 0 to HW filter on device bond1 [ 123.920212][ T6484] bond1: (slave veth3): Enslaving as an active interface with a down link [ 123.962888][ T6480] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 124.033216][ T6489] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 124.043802][ T6489] bond1: (slave batadv1): making interface the new active one [ 124.059767][ T6489] batadv1: entered promiscuous mode [ 124.069534][ T6489] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 124.137356][ T6493] bond1: (slave veth5): Enslaving as an active interface with a down link [ 124.148356][ T6495] syzkaller0: entered promiscuous mode [ 124.154627][ T6495] syzkaller0: entered allmulticast mode [ 124.287256][ T6503] netlink: 'syz.2.162': attribute type 1 has an invalid length. [ 124.374865][ T6503] bond2: entered promiscuous mode [ 124.410162][ T6503] 8021q: adding VLAN 0 to HW filter on device bond2 [ 124.427725][ T6505] vlan2: entered allmulticast mode [ 124.433027][ T6505] bond2: entered allmulticast mode [ 124.511819][ T6503] bond2: (slave bridge1): making interface the new active one [ 124.519367][ T6503] bridge1: entered promiscuous mode [ 124.525163][ T6503] bridge1: entered allmulticast mode [ 124.538114][ T6503] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 124.555766][ T6512] syzkaller0: entered promiscuous mode [ 124.570848][ T6512] syzkaller0: entered allmulticast mode [ 124.590157][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.605268][ T6509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.964568][ T6521] netlink: 4 bytes leftover after parsing attributes in process `syz.2.168'. [ 124.981624][ T29] audit: type=1804 audit(1784875029.397:2): pid=6523 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.169" name="/newroot/33/cgroup.controllers" dev="tmpfs" ino=189 res=1 errno=0 [ 125.032075][ T29] audit: type=1800 audit(1784875029.397:3): pid=6523 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.169" name="cgroup.controllers" dev="tmpfs" ino=189 res=0 errno=0 [ 125.167810][ T6527] netlink: 'syz.4.170': attribute type 1 has an invalid length. [ 125.398326][ T6535] syzkaller0: entered promiscuous mode [ 125.406647][ T6535] syzkaller0: entered allmulticast mode [ 125.702635][ T6542] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.710171][ T6542] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.897293][ T6542] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.915406][ T6542] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.248461][ T5738] lo speed is unknown, defaulting to 1000 [ 126.255265][ T5738] syz1: Port: 1 Link DOWN [ 126.274351][ T35] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.380392][ T6558] syzkaller0: entered promiscuous mode [ 126.386461][ T6558] syzkaller0: entered allmulticast mode [ 126.397916][ T35] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.400642][ T5738] lo speed is unknown, defaulting to 1000 [ 126.425123][ T35] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.446026][ T35] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.467131][ T6473] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 129.704213][ T6619] bond0: entered promiscuous mode [ 129.735974][ T6619] bond_slave_0: entered promiscuous mode [ 129.757061][ T6619] bond_slave_1: entered promiscuous mode [ 129.788920][ T6619] batadv0: entered promiscuous mode [ 129.824261][ T6619] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 129.935354][ T6636] netlink: 5 bytes leftover after parsing attributes in process `syz.3.187'. [ 130.526225][ T6619] bond0: left promiscuous mode [ 130.535994][ T6619] bond_slave_0: left promiscuous mode [ 130.563909][ T6619] bond_slave_1: left promiscuous mode [ 130.750368][ T6619] batadv0: left promiscuous mode [ 130.841117][ T6620] netlink: 'syz.0.182': attribute type 2 has an invalid length. [ 130.887658][ T6620] bond0: entered promiscuous mode [ 130.898482][ T6620] bond_slave_0: entered promiscuous mode [ 130.922109][ T6620] bond_slave_1: entered promiscuous mode [ 130.936044][ T6620] batadv0: entered promiscuous mode [ 130.946788][ T6661] netlink: 4 bytes leftover after parsing attributes in process `syz.4.193'. [ 130.954741][ T6620] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 130.978181][ T6620] bond0: left promiscuous mode [ 130.990809][ T6620] bond_slave_0: left promiscuous mode [ 131.001284][ T6620] bond_slave_1: left promiscuous mode [ 131.032491][ T6620] batadv0: left promiscuous mode [ 131.439773][ T6665] syzkaller0: entered promiscuous mode [ 131.466228][ T6665] syzkaller0: entered allmulticast mode [ 132.151826][ T6687] netlink: 420 bytes leftover after parsing attributes in process `syz.3.202'. [ 132.809404][ T6691] syzkaller0: entered promiscuous mode [ 132.847596][ T6691] syzkaller0: entered allmulticast mode [ 132.963094][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.180404][ T6694] syzkaller0: entered promiscuous mode [ 133.203733][ T6694] syzkaller0: entered allmulticast mode [ 133.380341][ T6710] netlink: 12 bytes leftover after parsing attributes in process `syz.0.209'. [ 133.414492][ T6712] netlink: 240 bytes leftover after parsing attributes in process `syz.3.206'. [ 133.852617][ T5638] block nbd0: Receive control failed (result -1) [ 134.009811][ T6720] netlink: 16 bytes leftover after parsing attributes in process `syz.3.210'. [ 134.118586][ T6724] netlink: 24 bytes leftover after parsing attributes in process `syz.2.211'. [ 134.130067][ T6723] syzkaller0: entered promiscuous mode [ 134.149956][ T6723] syzkaller0: entered allmulticast mode [ 134.379180][ T6729] syzkaller0: entered promiscuous mode [ 134.391008][ T6729] syzkaller0: entered allmulticast mode [ 134.530411][ T6731] netlink: 'syz.2.216': attribute type 12 has an invalid length. [ 134.717989][ T6733] netlink: 12 bytes leftover after parsing attributes in process `syz.4.217'. [ 134.812328][ T6738] syzkaller0: entered promiscuous mode [ 134.824525][ T6738] syzkaller0: entered allmulticast mode [ 135.103363][ T48] batadv1: left promiscuous mode [ 135.237952][ T6753] syzkaller0: entered promiscuous mode [ 135.246937][ T6753] syzkaller0: entered allmulticast mode [ 135.258099][ T6755] syzkaller0: entered promiscuous mode [ 135.270069][ T6755] syzkaller0: entered allmulticast mode [ 135.609924][ T6759] tipc: Enabled bearer , priority 0 [ 135.628322][ T6759] syzkaller0: entered promiscuous mode [ 135.649608][ T6759] syzkaller0: entered allmulticast mode [ 135.739508][ T6762] syzkaller0: entered promiscuous mode [ 135.748541][ T6762] syzkaller0: entered allmulticast mode [ 135.773602][ T6759] tipc: Resetting bearer [ 135.805466][ T6758] tipc: Resetting bearer [ 135.884573][ T6758] tipc: Disabling bearer [ 135.992958][ T6766] netlink: 12 bytes leftover after parsing attributes in process `syz.3.229'. [ 136.130395][ T6770] netlink: 4 bytes leftover after parsing attributes in process `syz.4.230'. [ 136.154767][ T6768] bridge1: port 1(vlan2) entered blocking state [ 136.163151][ T6768] bridge1: port 1(vlan2) entered disabled state [ 136.169754][ T6768] vlan2: entered allmulticast mode [ 136.182905][ T6768] bridge1: entered allmulticast mode [ 136.194234][ T6768] vlan2: left allmulticast mode [ 136.199751][ T6768] bridge1: left allmulticast mode [ 136.218057][ T6767] syzkaller0: entered promiscuous mode [ 136.225515][ T6767] syzkaller0: entered allmulticast mode [ 136.266216][ T6770] macvtap1: entered promiscuous mode [ 136.282904][ T6770] dummy0: entered promiscuous mode [ 136.299998][ T6770] macvtap1: entered allmulticast mode [ 136.311846][ T6770] dummy0: entered allmulticast mode [ 136.596811][ T6787] syzkaller0: entered promiscuous mode [ 136.612402][ T6787] syzkaller0: entered allmulticast mode [ 136.843970][ T6797] syzkaller0: entered promiscuous mode [ 136.869072][ T6797] syzkaller0: entered allmulticast mode [ 136.896508][ T6797] tipc: Started in network mode [ 136.905155][ T6797] tipc: Node identity 7ec59cbf63cd, cluster identity 4711 [ 136.919872][ T6797] tipc: Enabled bearer , priority 0 [ 136.956740][ T6796] tipc: Resetting bearer [ 137.347195][ T6796] tipc: Disabling bearer [ 137.679861][ T6808] syzkaller0: entered promiscuous mode [ 137.690589][ T6813] netlink: 4 bytes leftover after parsing attributes in process `syz.1.241'. [ 137.693756][ T6808] syzkaller0: entered allmulticast mode [ 137.754493][ T6827] veth0: entered promiscuous mode [ 137.824403][ T6831] netlink: 4 bytes leftover after parsing attributes in process `syz.0.242'. [ 139.180511][ T6827] veth0: left promiscuous mode [ 139.189412][ T6829] syzkaller0: entered promiscuous mode [ 139.195045][ T6829] syzkaller0: entered allmulticast mode [ 139.341463][ T6831] bond0: (slave bond_slave_1): Releasing backup interface [ 139.415549][ T6834] bridge2: entered promiscuous mode [ 139.431994][ T6834] bridge2: entered allmulticast mode [ 139.452836][ T6834] team0: Port device bridge2 added [ 139.474339][ T6835] bridge0: port 3(team0) entered blocking state [ 139.496553][ T6835] bridge0: port 3(team0) entered disabled state [ 139.512241][ T6835] team0: entered allmulticast mode [ 139.527071][ T6835] team_slave_0: entered allmulticast mode [ 139.536908][ T6835] team_slave_1: entered allmulticast mode [ 139.549983][ T6835] team0: entered promiscuous mode [ 139.556863][ T6835] team_slave_0: entered promiscuous mode [ 139.569014][ T6835] team_slave_1: entered promiscuous mode [ 139.589016][ T6835] bridge0: port 3(team0) entered blocking state [ 139.596358][ T6835] bridge0: port 3(team0) entered forwarding state [ 139.892932][ T6855] Bluetooth: MGMT ver 1.23 [ 140.615190][ T6867] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.623074][ T6867] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.684167][ T6867] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 140.722029][ T6878] syz_tun: entered allmulticast mode [ 140.778900][ T6878] netlink: 4 bytes leftover after parsing attributes in process `syz.3.257'. [ 140.844421][ T6873] syz_tun: left allmulticast mode [ 141.380546][ T6896] syzkaller0: entered promiscuous mode [ 141.386528][ T6896] syzkaller0: entered allmulticast mode [ 141.498985][ T6898] netlink: 4 bytes leftover after parsing attributes in process `syz.1.264'. [ 141.517256][ T6898] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.576849][ T6901] syzkaller0: entered promiscuous mode [ 141.588066][ T6901] syzkaller0: entered allmulticast mode [ 141.630435][ T6904] syzkaller0: entered promiscuous mode [ 141.636236][ T6904] syzkaller0: entered allmulticast mode [ 141.810259][ T6912] syzkaller0: entered promiscuous mode [ 141.816367][ T6912] syzkaller0: entered allmulticast mode [ 141.971824][ T5638] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 142.064704][ T6914] 0: reclassify loop, rule prio 0, protocol 700 [ 142.414795][ T6931] Bluetooth: MGMT ver 1.23 [ 142.827796][ T6940] syzkaller1: entered promiscuous mode [ 142.840942][ T6940] syzkaller1: entered allmulticast mode [ 143.186058][ T6948] syzkaller0: entered promiscuous mode [ 143.213132][ T6948] syzkaller0: entered allmulticast mode [ 143.540771][ T6961] bridge0: port 3(team0) entered disabled state [ 143.590079][ T6961] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.602767][ T6961] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.704027][ T6968] sch_tbf: burst 823 is lower than device syzkaller0 mtu (1514) ! [ 143.714169][ T6968] syzkaller0: entered promiscuous mode [ 143.721173][ T6968] syzkaller0: entered allmulticast mode [ 143.937011][ T6880] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 143.956479][ T6931] netlink: 'syz.3.274': attribute type 1 has an invalid length. [ 143.960208][ T6976] netlink: 12 bytes leftover after parsing attributes in process `syz.1.287'. [ 143.977735][ T6931] netlink: 224 bytes leftover after parsing attributes in process `syz.3.274'. [ 144.284017][ T6983] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 144.304884][ T6991] netlink: 'syz.3.291': attribute type 1 has an invalid length. [ 144.374180][ T6983] bond1 (unregistering): Released all slaves [ 144.595771][ T6991] 8021q: adding VLAN 0 to HW filter on device bond1 [ 144.683999][ T6993] vlan2: entered promiscuous mode [ 144.706236][ T6993] bond1: entered promiscuous mode [ 144.721341][ T6993] vlan2: entered allmulticast mode [ 144.736016][ T6993] bond1: entered allmulticast mode [ 144.760333][ T6994] tipc: Enabled bearer , priority 0 [ 144.836727][ T6995] bond1: (slave bridge2): making interface the new active one [ 144.863051][ T6995] bridge2: entered promiscuous mode [ 144.881106][ T6995] bridge2: entered allmulticast mode [ 144.899435][ T6995] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 144.945913][ T6989] syzkaller0: entered promiscuous mode [ 144.970948][ T6989] syzkaller0: entered allmulticast mode [ 145.016605][ T6992] tipc: Resetting bearer [ 145.047664][ T6988] tipc: Resetting bearer [ 145.102008][ T6988] tipc: Disabling bearer [ 145.139740][ T7012] netlink: 'syz.4.296': attribute type 1 has an invalid length. [ 145.198355][ T7012] 8021q: adding VLAN 0 to HW filter on device bond2 [ 145.368368][ T7012] bond2: (slave veth5): Enslaving as an active interface with a down link [ 145.455744][ T7018] bond2: (slave veth7): Enslaving as an active interface with a down link [ 145.501015][ T7021] bond2: entered allmulticast mode [ 145.546557][ T7020] syzkaller0: entered promiscuous mode [ 145.565243][ T7020] syzkaller0: entered allmulticast mode [ 145.790833][ T7030] netlink: 'syz.1.299': attribute type 1 has an invalid length. [ 145.926825][ T7030] 8021q: adding VLAN 0 to HW filter on device bond1 [ 145.955601][ T7031] syzkaller0: entered promiscuous mode [ 145.978860][ T7031] syzkaller0: entered allmulticast mode [ 146.032600][ T7039] netlink: 40 bytes leftover after parsing attributes in process `syz.3.302'. [ 146.084325][ T7033] veth3: entered allmulticast mode [ 146.140306][ T7033] bond1: (slave veth3): Enslaving as an active interface with an up link [ 146.328946][ T7030] bond1 (unregistering): (slave veth3): Releasing backup interface [ 146.348652][ T7030] bond1 (unregistering): Released all slaves [ 146.467496][ T7037] syzkaller0: entered promiscuous mode [ 146.487752][ T7037] syzkaller0: entered allmulticast mode [ 146.554637][ T7042] syzkaller0: entered promiscuous mode [ 146.572858][ T7042] syzkaller0: entered allmulticast mode [ 146.779310][ T13] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 146.788995][ T7065] syzkaller0: entered promiscuous mode [ 146.795786][ T7065] syzkaller0: entered allmulticast mode [ 146.843632][ T7070] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 146.863255][ T7075] syzkaller0: entered promiscuous mode [ 146.871148][ T7075] syzkaller0: entered allmulticast mode [ 147.493580][ T7111] netlink: 8 bytes leftover after parsing attributes in process `syz.0.308'. [ 149.213846][ T7123] syzkaller0: entered promiscuous mode [ 149.227800][ T7123] syzkaller0: entered allmulticast mode [ 149.488583][ T7132] syzkaller1: entered promiscuous mode [ 149.510894][ T7132] syzkaller1: entered allmulticast mode [ 149.576251][ T7138] tipc: Failed to remove unknown binding: 66,1,1/0:1967092761/1967092763 [ 149.649920][ T7136] syzkaller0: entered promiscuous mode [ 149.675069][ T7136] syzkaller0: entered allmulticast mode [ 149.962255][ T7148] syzkaller0: entered promiscuous mode [ 149.982514][ T7148] syzkaller0: entered allmulticast mode [ 150.300317][ T7161] netlink: 'syz.2.323': attribute type 13 has an invalid length. [ 150.309364][ T7161] netlink: 'syz.2.323': attribute type 17 has an invalid length. [ 150.410689][ T5638] block nbd1: Receive control failed (result -32) [ 150.410690][ T5627] block nbd1: Receive control failed (result -32) [ 150.518853][ T7159] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.598335][ T7159] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.818470][ T7177] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 151.129939][ T7161] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.161410][ T7161] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.187783][ T7161] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.278604][ T7161] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.300956][ T7161] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.314984][ T7161] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 151.325898][ T7161] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 151.340585][ T7161] veth1_vlan: left promiscuous mode [ 151.347421][ T7161] veth0_vlan: left promiscuous mode [ 151.354681][ T7161] veth0_vlan: entered promiscuous mode [ 151.362598][ T7161] veth1_vlan: entered promiscuous mode [ 151.372850][ T7161] veth1_macvtap: left promiscuous mode [ 151.379285][ T7161] veth0_macvtap: left promiscuous mode [ 151.385798][ T7161] veth0_macvtap: entered promiscuous mode [ 151.392936][ T7161] veth1_macvtap: entered promiscuous mode [ 151.404366][ T7161] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 151.413312][ T7161] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 151.421791][ T7161] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 151.429603][ T7161] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 151.442930][ T7161] 8021q: adding VLAN 0 to HW filter on device bond1 [ 151.454465][ T7161] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 151.464013][ T7161] bond2: left promiscuous mode [ 151.468819][ T7161] bridge1: left promiscuous mode [ 151.475582][ T7161] 8021q: adding VLAN 0 to HW filter on device bond2 [ 151.483371][ T7161] vlan2: left allmulticast mode [ 151.488247][ T7161] bond2: left allmulticast mode [ 151.495279][ T7161] bridge1: left allmulticast mode [ 151.513550][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.520875][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.536924][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.544261][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.592819][ T35] bridge0: port 3(team0) entered blocking state [ 151.599175][ T35] bridge0: port 3(team0) entered forwarding state [ 151.664554][ T7176] tipc: Enabling of bearer rejected, failed to enable media [ 151.752750][ T7202] netlink: 524 bytes leftover after parsing attributes in process `syz.2.329'. [ 151.782520][ T3360] bond1: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 151.795430][ T7204] netlink: 'syz.3.331': attribute type 1 has an invalid length. [ 151.825627][ T3360] bond1: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 151.878035][ T7208] af_packet: tpacket_rcv: packet too big, clamped from 68 to 4294967272. macoff=96 [ 151.990518][ T7204] 8021q: adding VLAN 0 to HW filter on device bond2 [ 152.025134][ T7201] syzkaller0: entered promiscuous mode [ 152.032252][ T7201] syzkaller0: entered allmulticast mode [ 152.078296][ T7214] bond2: (slave geneve2): making interface the new active one [ 152.094820][ T7214] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 152.117732][ T7210] syzkaller0: entered promiscuous mode [ 152.155309][ T7210] syzkaller0: entered allmulticast mode [ 152.165551][ T7201] tipc: Enabled bearer , priority 0 [ 152.241630][ T7200] tipc: Resetting bearer [ 152.270410][ T7200] tipc: Disabling bearer [ 152.308703][ T7222] syzkaller0: entered promiscuous mode [ 152.315598][ T7222] syzkaller0: entered allmulticast mode [ 152.325710][ T7215] tipc: Started in network mode [ 152.336243][ T7215] tipc: Node identity 7addfc17068c, cluster identity 4711 [ 152.347395][ T7215] tipc: Enabled bearer , priority 0 [ 154.989576][ T7226] syzkaller0: entered promiscuous mode [ 154.995583][ T7226] syzkaller0: entered allmulticast mode [ 155.005680][ T7209] tipc: Resetting bearer [ 155.025402][ T7209] tipc: Disabling bearer [ 155.251968][ T7235] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.266511][ T7235] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.391742][ T7235] dummy0: left allmulticast mode [ 155.398024][ T7235] macvtap1: left promiscuous mode [ 155.406936][ T7235] macvtap1: left allmulticast mode [ 155.416217][ T7235] bond2: left allmulticast mode [ 155.431463][ T5724] tipc: Node number set to 2085747735 [ 155.446995][ T7246] netlink: 132 bytes leftover after parsing attributes in process `syz.3.340'. [ 155.501273][ T35] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.532713][ T35] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.707871][ T7250] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.738377][ T35] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.759384][ T7256] syzkaller0: entered promiscuous mode [ 155.765237][ T7256] syzkaller0: entered allmulticast mode [ 155.789101][ T7265] syzkaller0: entered promiscuous mode [ 155.794758][ T7265] syzkaller0: entered allmulticast mode [ 155.803659][ T35] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.844418][ T7267] tipc: Started in network mode [ 155.849528][ T7267] tipc: Node identity 0ac6cb5f1e75, cluster identity 4711 [ 155.857693][ T7267] tipc: Enabled bearer , priority 0 [ 155.865888][ T7267] syzkaller0: entered promiscuous mode [ 155.872130][ T7267] syzkaller0: entered allmulticast mode [ 155.896920][ T7250] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.926002][ T7267] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 156.030580][ T7267] tipc: Resetting bearer [ 156.083137][ T7250] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.134879][ T7266] tipc: Resetting bearer [ 156.167758][ T7266] tipc: Disabling bearer [ 156.210064][ T7275] netlink: 164 bytes leftover after parsing attributes in process `syz.4.348'. [ 156.224475][ T7275] netlink: 16 bytes leftover after parsing attributes in process `syz.4.348'. [ 156.244214][ T7250] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.359242][ T7283] tipc: Enabled bearer , priority 0 [ 156.392896][ T7283] syzkaller0: entered promiscuous mode [ 156.400150][ T7283] syzkaller0: entered allmulticast mode [ 156.458577][ T7283] tipc: Resetting bearer [ 156.506922][ T7282] tipc: Resetting bearer [ 156.543006][ T7282] tipc: Disabling bearer [ 156.565858][ T7285] netlink: 4 bytes leftover after parsing attributes in process `syz.2.351'. [ 156.726256][ T7285] hsr_slave_1 (unregistering): left promiscuous mode [ 156.875608][ T35] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.903812][ T35] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.987368][ T1110] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.099114][ T1110] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.117491][ T7304] syzkaller0: entered promiscuous mode [ 157.149409][ T7304] syzkaller0: entered allmulticast mode [ 157.204723][ T7303] netlink: 44 bytes leftover after parsing attributes in process `syz.2.355'. [ 157.347120][ T7307] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 157.762702][ T7322] syzkaller0: entered promiscuous mode [ 157.775991][ T7322] syzkaller0: entered allmulticast mode [ 158.272883][ T7338] syzkaller0: entered promiscuous mode [ 158.299695][ T7338] syzkaller0: entered allmulticast mode [ 158.702701][ T7349] syzkaller0: entered promiscuous mode [ 158.709826][ T7349] syzkaller0: entered allmulticast mode [ 158.756725][ T7353] xt_CT: You must specify a L4 protocol and not use inversions on it [ 158.797905][ T7347] netlink: 28 bytes leftover after parsing attributes in process `syz.2.368'. [ 159.143337][ T7356] bridge0: entered promiscuous mode [ 159.149011][ T7356] bridge0: entered allmulticast mode [ 159.294323][ T7361] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.314233][ T7361] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.349923][ T7361] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.433137][ T7361] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 159.474917][ T7361] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 159.489298][ T7361] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 159.524505][ T7361] veth1_vlan: left promiscuous mode [ 159.532309][ T7361] veth0_vlan: left promiscuous mode [ 159.539801][ T7361] veth0_vlan: entered promiscuous mode [ 159.550435][ T7361] veth1_vlan: entered promiscuous mode [ 159.565952][ T7361] veth1_macvtap: left promiscuous mode [ 159.575176][ T7361] veth0_macvtap: left promiscuous mode [ 159.585221][ T7361] veth0_macvtap: entered promiscuous mode [ 159.595343][ T7361] veth1_macvtap: entered promiscuous mode [ 159.611765][ T7361] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 159.622067][ T7361] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 159.631813][ T7361] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 159.645128][ T7361] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 159.684332][ T7369] tipc: Started in network mode [ 159.685554][ T5724] lo speed is unknown, defaulting to 1000 [ 159.707324][ T7369] tipc: Node identity faca45e2d19a, cluster identity 4711 [ 159.726820][ T5724] syz1: Port: 1 Link ACTIVE [ 159.733933][ T7369] tipc: Enabled bearer , priority 0 [ 159.754640][ T7372] syzkaller0: entered promiscuous mode [ 159.773133][ T7372] syzkaller0: entered allmulticast mode [ 159.800603][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.807866][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.866115][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.873484][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.032248][ T7377] tipc: Resetting bearer [ 160.037684][ T7391] xt_connbytes: Forcing CT accounting to be enabled [ 160.038401][ T150] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.054155][ T150] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.066505][ T5723] lo speed is unknown, defaulting to 1000 [ 160.126439][ T7382] syzkaller0: entered promiscuous mode [ 160.132149][ T7382] syzkaller0: entered allmulticast mode [ 160.140255][ T7368] tipc: Resetting bearer [ 160.172745][ T7368] tipc: Disabling bearer [ 160.187726][ T150] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.198912][ T150] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.445621][ T7428] ±ÿ: renamed from lo (while UP) [ 162.693812][ T7431] syzkaller0: entered promiscuous mode [ 162.704085][ T7431] syzkaller0: entered allmulticast mode [ 162.788880][ T7434] syzkaller0: entered promiscuous mode [ 162.798673][ T7434] syzkaller0: entered allmulticast mode [ 163.148088][ T7449] syzkaller0: entered promiscuous mode [ 163.168137][ T7449] syzkaller0: entered allmulticast mode [ 163.196839][ T7446] syzkaller0: entered promiscuous mode [ 163.215728][ T7446] syzkaller0: entered allmulticast mode [ 163.429232][ T7454] syzkaller0: entered promiscuous mode [ 163.448849][ T7454] syzkaller0: entered allmulticast mode [ 163.481694][ T7467] netlink: 4 bytes leftover after parsing attributes in process `syz.4.396'. [ 163.488238][ T7460] syzkaller0: entered promiscuous mode [ 163.501907][ T7460] syzkaller0: entered allmulticast mode [ 163.538336][ T7467] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.574586][ T7467] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.629449][ T7454] netlink: 24 bytes leftover after parsing attributes in process `syz.2.393'. [ 163.645412][ T7474] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 163.658009][ T7454] netlink: 24 bytes leftover after parsing attributes in process `syz.2.393'. [ 164.099146][ T7485] syzkaller0: entered promiscuous mode [ 164.115486][ T7485] syzkaller0: entered allmulticast mode [ 164.143960][ T7488] netlink: 4 bytes leftover after parsing attributes in process `syz.2.403'. [ 164.161580][ T7486] syzkaller0: entered promiscuous mode [ 164.167411][ T7486] syzkaller0: entered allmulticast mode [ 164.198956][ T7492] netlink: 12 bytes leftover after parsing attributes in process `syz.1.404'. [ 164.255594][ T7488] 8021q: adding VLAN 0 to HW filter on device bond3 [ 164.335039][ T7496] netlink: 'syz.1.404': attribute type 10 has an invalid length. [ 164.352420][ T7496] netlink: 40 bytes leftover after parsing attributes in process `syz.1.404'. [ 164.446162][ T7495] bridge2: port 1(dummy0) entered blocking state [ 164.481220][ T7495] bridge2: port 1(dummy0) entered disabled state [ 164.507762][ T7495] dummy0: entered allmulticast mode [ 164.544781][ T7495] dummy0: entered promiscuous mode [ 164.671510][ T7496] bridge2: port 1(dummy0) entered blocking state [ 164.678977][ T7496] bridge2: port 1(dummy0) entered forwarding state [ 164.748937][ T7496] dummy0: left allmulticast mode [ 164.767398][ T7496] bridge2: port 1(dummy0) entered disabled state [ 165.182645][ T7539] netlink: 'syz.1.411': attribute type 1 has an invalid length. [ 165.290633][ T7541] netlink: 28 bytes leftover after parsing attributes in process `syz.1.411'. [ 165.403605][ T7539] bond1: entered promiscuous mode [ 165.427719][ T7539] 8021q: adding VLAN 0 to HW filter on device bond1 [ 165.455349][ T7527] syzkaller0: entered promiscuous mode [ 165.461313][ T7527] syzkaller0: entered allmulticast mode [ 165.482091][ T7553] bond1: (slave bridge3): making interface the new active one [ 165.489648][ T7553] bridge3: entered promiscuous mode [ 165.496957][ T7553] bond1: (slave bridge3): Enslaving as an active interface with an up link [ 165.535489][ T7541] bond1: entered allmulticast mode [ 165.541093][ T7541] bridge3: entered allmulticast mode [ 165.745436][ T7557] syzkaller0: entered promiscuous mode [ 165.751666][ T7557] syzkaller0: entered allmulticast mode [ 166.098014][ T7567] syzkaller0: entered promiscuous mode [ 166.116752][ T7570] netlink: 12 bytes leftover after parsing attributes in process `syz.4.420'. [ 166.119707][ T7567] syzkaller0: entered allmulticast mode [ 166.368613][ T7568] lo speed is unknown, defaulting to 1000 [ 166.377271][ T7577] syzkaller0: entered promiscuous mode [ 166.392371][ T7577] syzkaller0: entered allmulticast mode [ 167.085996][ T7587] tipc: Enabled bearer , priority 0 [ 167.205217][ T7588] syzkaller0: entered promiscuous mode [ 167.227519][ T7588] syzkaller0: entered allmulticast mode [ 167.469374][ T7586] tipc: Resetting bearer [ 167.635088][ T7584] tipc: Resetting bearer [ 167.674654][ T7584] tipc: Disabling bearer [ 167.747307][ T7599] syzkaller0: entered promiscuous mode [ 167.765709][ T7599] syzkaller0: entered allmulticast mode [ 170.247993][ T7633] kthread_run failed with err -4 [ 170.419550][ T7637] tipc: Enabling of bearer rejected, failed to enable media [ 170.698780][ T7648] netlink: 'syz.2.439': attribute type 13 has an invalid length. [ 170.707217][ T7640] syzkaller0: entered promiscuous mode [ 170.713158][ T7648] netlink: 8 bytes leftover after parsing attributes in process `syz.2.439'. [ 170.722276][ T7640] syzkaller0: entered allmulticast mode [ 170.730012][ T7648] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 170.744316][ T7645] syzkaller0: entered promiscuous mode [ 170.750107][ T7645] syzkaller0: entered allmulticast mode [ 170.768401][ T7650] syzkaller0: entered promiscuous mode [ 170.782932][ T7650] syzkaller0: entered allmulticast mode [ 170.878140][ T7642] tipc: Enabled bearer , priority 0 [ 170.915462][ T7650] tipc: Resetting bearer [ 172.627774][ T7641] tipc: Resetting bearer [ 172.642697][ T7641] tipc: Disabling bearer [ 172.659219][ T7658] tipc: Enabling of bearer rejected, failed to enable media [ 172.683602][ T5724] tipc: Node number set to 347327327 [ 172.798381][ T7671] syzkaller0: entered promiscuous mode [ 172.820832][ T7671] syzkaller0: entered allmulticast mode [ 174.711222][ T7682] lo speed is unknown, defaulting to 1000 [ 174.926091][ T7714] syzkaller0: entered promiscuous mode [ 174.949420][ T7714] syzkaller0: entered allmulticast mode [ 174.976131][ T7714] tipc: Enabled bearer , priority 0 [ 175.015036][ T7714] tipc: Resetting bearer [ 175.054722][ T7713] tipc: Resetting bearer [ 175.114788][ T7713] tipc: Disabling bearer [ 175.167595][ T7719] tipc: Enabled bearer , priority 0 [ 175.186916][ T7718] syzkaller0: entered promiscuous mode [ 175.200235][ T7718] syzkaller0: entered allmulticast mode [ 175.228580][ T7719] syzkaller0: entered promiscuous mode [ 175.244597][ T7719] syzkaller0: entered allmulticast mode [ 175.312980][ T7720] tipc: Enabled bearer , priority 0 [ 175.354113][ T7716] tipc: Resetting bearer [ 175.384480][ T7716] tipc: Disabling bearer [ 175.398956][ T7719] tipc: Resetting bearer [ 175.423967][ T7717] tipc: Resetting bearer [ 175.440464][ T7717] tipc: Disabling bearer [ 175.503758][ T7724] syzkaller0: entered promiscuous mode [ 175.515968][ T7724] syzkaller0: entered allmulticast mode [ 175.590298][ T7723] tipc: Enabled bearer , priority 0 [ 175.723631][ T7722] tipc: Resetting bearer [ 175.771388][ T7722] tipc: Disabling bearer [ 175.836328][ T7734] tipc: Enabled bearer , priority 0 [ 175.883393][ T7734] syzkaller0: entered promiscuous mode [ 175.901917][ T7734] syzkaller0: entered allmulticast mode [ 176.010685][ T7734] tipc: Resetting bearer [ 176.018635][ T7737] netlink: 'syz.2.456': attribute type 1 has an invalid length. [ 176.127541][ T7737] 8021q: adding VLAN 0 to HW filter on device bond4 [ 176.169325][ T7732] tipc: Resetting bearer [ 176.255194][ T7732] tipc: Disabling bearer [ 176.467545][ T7744] bond4: (slave geneve2): making interface the new active one [ 176.482664][ T7744] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 176.576648][ T7742] syzkaller0: entered promiscuous mode [ 176.584480][ T7742] syzkaller0: entered allmulticast mode [ 176.943513][ T7769] netlink: 'syz.3.463': attribute type 1 has an invalid length. [ 177.097548][ T7776] sctp: [Deprecated]: syz.2.462 (pid 7776) Use of int in max_burst socket option deprecated. [ 177.097548][ T7776] Use struct sctp_assoc_value instead [ 178.424208][ T7769] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 178.458341][ T7774] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.578533][ T7774] bridge_slave_1: left allmulticast mode [ 178.593267][ T7774] bridge_slave_1: left promiscuous mode [ 178.615153][ T7774] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.665612][ T7774] bond0: (slave bond_slave_0): Releasing backup interface [ 178.688310][ T7781] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20004 [ 178.689625][ T7774] bond0: (slave bond_slave_1): Releasing backup interface [ 178.716252][ T7774] team0: Port device team_slave_0 removed [ 178.733403][ T7774] team0: Port device team_slave_1 removed [ 178.742697][ T7774] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.750492][ T7782] netlink: 8 bytes leftover after parsing attributes in process `syz.2.465'. [ 178.764802][ T7774] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.783961][ T7774] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.794246][ T7774] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.809418][ T7774] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 178.994354][ T29] audit: type=1804 audit(1784875083.407:4): pid=7790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.466" name="/newroot/74/cgroup.controllers" dev="tmpfs" ino=396 res=1 errno=0 [ 179.017033][ T29] audit: type=1800 audit(1784875083.407:5): pid=7790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.466" name="cgroup.controllers" dev="tmpfs" ino=396 res=0 errno=0 [ 179.038835][ T29] audit: type=1800 audit(1784875083.417:6): pid=7790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.466" name="cgroup.controllers" dev="tmpfs" ino=396 res=0 errno=0 [ 181.096734][ T7781] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 181.119223][ T7782] bridge0: port 3(team0) entered disabled state [ 181.135010][ T7782] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.142754][ T7782] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.297049][ T7782] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 181.345743][ T7782] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 181.528426][ T7835] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.471'. [ 181.605400][ T7840] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.471'. [ 182.023221][ T7851] netlink: 'syz.2.472': attribute type 24 has an invalid length. [ 182.097400][ T7833] syzkaller0: entered promiscuous mode [ 182.111035][ T7833] syzkaller0: entered allmulticast mode [ 182.120463][ T48] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.145931][ T48] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.228402][ T7851] netlink: 64 bytes leftover after parsing attributes in process `syz.2.472'. [ 182.268415][ T7851] netlink: 64 bytes leftover after parsing attributes in process `syz.2.472'. [ 185.915167][ T48] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.924369][ T48] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.942180][ T7863] syzkaller0: entered promiscuous mode [ 185.947702][ T7863] syzkaller0: entered allmulticast mode [ 186.461514][ T7988] tc action pedit 'at' offset 5 out of bounds [ 186.468441][ T7988] tc action pedit 'at' offset 5 out of bounds [ 186.474614][ T7988] tc action pedit 'at' offset 5 out of bounds [ 186.480754][ T7988] tc action pedit 'at' offset 5 out of bounds [ 186.486881][ T7988] tc action pedit 'at' offset 5 out of bounds [ 186.493029][ T7988] tc action pedit 'at' offset 5 out of bounds [ 186.499142][ T7988] tc action pedit 'at' offset 5 out of bounds [ 186.505292][ T7988] tc action pedit 'at' offset 5 out of bounds [ 186.511471][ T7988] tc action pedit 'at' offset 5 out of bounds [ 186.517592][ T7988] tc action pedit 'at' offset 5 out of bounds [ 186.523752][ T7988] 0: reclassify loop, rule prio 0, protocol 800 [ 186.952055][ T7996] 8021q: adding VLAN 0 to HW filter on device eth0 [ 186.974098][ T7996] 8021q: adding VLAN 0 to HW filter on device eth1 [ 187.004593][ T7996] 8021q: adding VLAN 0 to HW filter on device eth2 [ 187.049427][ T7996] 8021q: adding VLAN 0 to HW filter on device eth3 [ 187.533292][ T8017] nbd2: detected capacity change from 0 to 63 [ 187.578621][ T4949] [ 187.580664][ T8024] block nbd2: NBD_DISCONNECT [ 187.581002][ T4949] ====================================================== [ 187.581013][ T4949] WARNING: possible circular locking dependency detected [ 187.581022][ T4949] syzkaller #0 Not tainted [ 187.581032][ T4949] ------------------------------------------------------ [ 187.581039][ T4949] kworker/0:1H/4949 is trying to acquire lock: [ 187.581050][ T4949] ffff88807a8d6868 (&nsock->tx_lock){+.+.}-{4:4}, at: nbd_queue_rq+0x373/0x1150 [ 187.581114][ T4949] [ 187.581114][ T4949] but task is already holding lock: [ 187.581121][ T4949] ffff8880275d0178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc1/0x1150 [ 187.581174][ T4949] [ 187.581174][ T4949] which lock already depends on the new lock. [ 187.581174][ T4949] [ 187.581181][ T4949] [ 187.581181][ T4949] the existing dependency chain (in reverse order) is: [ 187.581189][ T4949] [ 187.581189][ T4949] -> #6 (&cmd->lock){+.+.}-{4:4}: [ 187.581218][ T4949] __mutex_lock+0x19d/0x1550 [ 187.581242][ T4949] nbd_queue_rq+0xc1/0x1150 [ 187.581269][ T4949] blk_mq_dispatch_rq_list+0x499/0x1990 [ 187.581295][ T4949] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 187.581323][ T4949] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 187.581350][ T4949] blk_mq_run_work_fn+0x16c/0x300 [ 187.581368][ T4949] process_scheduled_works+0xa8e/0x14e0 [ 187.581397][ T4949] worker_thread+0xa47/0xfb0 [ 187.581417][ T4949] kthread+0x388/0x470 [ 187.581441][ T4949] ret_from_fork+0x514/0xb70 [ 187.581465][ T4949] ret_from_fork_asm+0x1a/0x30 [ 187.581482][ T4949] [ 187.581482][ T4949] -> #5 (set->srcu){.+.+}-{0:0}: [ 187.581511][ T4949] __synchronize_srcu+0xc9/0x2f0 [ 187.581534][ T4949] elevator_switch+0x1e8/0x7b0 [ 187.581557][ T4949] elevator_change+0x2fa/0x480 [ 187.581579][ T4949] elevator_set_default+0x375/0x440 [ 187.581602][ T4949] blk_register_queue+0x3f3/0x4e0 [ 187.581629][ T4949] __add_disk+0x6cb/0xe30 [ 187.581646][ T4949] add_disk_fwnode+0x100/0x3a0 [ 187.581662][ T4949] nbd_dev_add+0x733/0xb60 [ 187.581689][ T4949] nbd_init+0x15f/0x1e0 [ 187.581707][ T4949] do_one_initcall+0x250/0x870 [ 187.581733][ T4949] do_initcall_level+0x10a/0x1a0 [ 187.581757][ T4949] do_initcalls+0x59/0xa0 [ 187.581780][ T4949] kernel_init_freeable+0x29d/0x3e0 [ 187.581804][ T4949] kernel_init+0x1d/0x1d0 [ 187.581828][ T4949] ret_from_fork+0x514/0xb70 [ 187.581852][ T4949] ret_from_fork_asm+0x1a/0x30 [ 187.581869][ T4949] [ 187.581869][ T4949] -> #4 (&q->elevator_lock){+.+.}-{4:4}: [ 187.581897][ T4949] __mutex_lock+0x19d/0x1550 [ 187.581917][ T4949] elevator_change+0x1af/0x480 [ 187.581941][ T4949] elevator_set_none+0xb5/0x140 [ 187.581964][ T4949] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 187.581982][ T4949] nbd_start_device+0x189/0xb30 [ 187.582009][ T4949] nbd_genl_connect+0x1597/0x1c10 [ 187.582035][ T4949] genl_family_rcv_msg_doit+0x233/0x340 [ 187.582062][ T4949] genl_rcv_msg+0x614/0x7a0 [ 187.582086][ T4949] netlink_rcv_skb+0x226/0x4a0 [ 187.582104][ T4949] genl_rcv+0x28/0x40 [ 187.582126][ T4949] netlink_unicast+0x7bb/0x940 [ 187.582141][ T4949] netlink_sendmsg+0x813/0xb40 [ 187.582161][ T4949] sock_sendmsg_nosec+0x13a/0x180 [ 187.582184][ T4949] ____sys_sendmsg+0x54e/0x850 [ 187.582202][ T4949] ___sys_sendmsg+0x2a5/0x360 [ 187.582219][ T4949] __x64_sys_sendmsg+0x1b1/0x290 [ 187.582238][ T4949] do_syscall_64+0x174/0x580 [ 187.582259][ T4949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.582278][ T4949] [ 187.582278][ T4949] -> #3 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 187.582314][ T4949] blk_alloc_queue+0x544/0x690 [ 187.582337][ T4949] __blk_mq_alloc_disk+0x194/0x390 [ 187.582364][ T4949] nbd_dev_add+0x494/0xb60 [ 187.582398][ T4949] nbd_init+0x15f/0x1e0 [ 187.582413][ T4949] do_one_initcall+0x250/0x870 [ 187.582439][ T4949] do_initcall_level+0x10a/0x1a0 [ 187.582463][ T4949] do_initcalls+0x59/0xa0 [ 187.582485][ T4949] kernel_init_freeable+0x29d/0x3e0 [ 187.600018][ T8024] block nbd2: Disconnected due to user request. [ 187.601118][ T4949] kernel_init+0x1d/0x1d0 [ 187.601152][ T4949] ret_from_fork+0x514/0xb70 [ 187.619199][ T8024] block nbd2: shutting down sockets [ 187.627914][ T4949] ret_from_fork_asm+0x1a/0x30 [ 187.627943][ T4949] [ 187.627943][ T4949] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 187.627976][ T4949] fs_reclaim_acquire+0x71/0x100 [ 188.018416][ T4949] __kmalloc_noprof+0xbc/0x720 [ 188.023712][ T4949] tls_sw_sendmsg+0x599/0x2860 [ 188.029004][ T4949] sock_sendmsg_nosec+0x90/0x180 [ 188.034468][ T4949] sock_sendmsg+0x1ca/0x2d0 [ 188.039501][ T4949] splice_to_socket+0xb5e/0x12a0 [ 188.045052][ T4949] direct_splice_actor+0x101/0x160 [ 188.050687][ T4949] splice_direct_to_actor+0x57b/0xcb0 [ 188.056588][ T4949] do_splice_direct+0x195/0x290 [ 188.061968][ T4949] do_sendfile+0x52e/0x7c0 [ 188.066908][ T4949] __se_sys_sendfile64+0x144/0x1a0 [ 188.072628][ T4949] do_syscall_64+0x174/0x580 [ 188.077742][ T4949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.084156][ T4949] [ 188.084156][ T4949] -> #1 (sk_lock-AF_INET6-NBD){+.+.}-{0:0}: [ 188.092241][ T4949] lock_sock_nested+0x41/0x100 [ 188.097530][ T4949] inet_shutdown+0x6a/0x390 [ 188.102552][ T4949] nbd_mark_nsock_dead+0x2cb/0x550 [ 188.108181][ T4949] recv_work+0x1cee/0x1e10 [ 188.113126][ T4949] process_scheduled_works+0xa8e/0x14e0 [ 188.119192][ T4949] worker_thread+0xa47/0xfb0 [ 188.124303][ T4949] kthread+0x388/0x470 [ 188.129334][ T4949] ret_from_fork+0x514/0xb70 [ 188.134454][ T4949] ret_from_fork_asm+0x1a/0x30 [ 188.139739][ T4949] [ 188.139739][ T4949] -> #0 (&nsock->tx_lock){+.+.}-{4:4}: [ 188.147390][ T4949] __lock_acquire+0x1520/0x2cf0 [ 188.152767][ T4949] lock_acquire+0x106/0x350 [ 188.157792][ T4949] __mutex_lock+0x19d/0x1550 [ 188.162902][ T4949] nbd_queue_rq+0x373/0x1150 [ 188.168020][ T4949] blk_mq_dispatch_rq_list+0x499/0x1990 [ 188.174091][ T4949] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 188.181030][ T4949] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 188.187540][ T4949] blk_mq_run_work_fn+0x16c/0x300 [ 188.193084][ T4949] process_scheduled_works+0xa8e/0x14e0 [ 188.199149][ T4949] worker_thread+0xa47/0xfb0 [ 188.204259][ T4949] kthread+0x388/0x470 [ 188.208866][ T4949] ret_from_fork+0x514/0xb70 [ 188.213979][ T4949] ret_from_fork_asm+0x1a/0x30 [ 188.219260][ T4949] [ 188.219260][ T4949] other info that might help us debug this: [ 188.219260][ T4949] [ 188.229494][ T4949] Chain exists of: [ 188.229494][ T4949] &nsock->tx_lock --> set->srcu --> &cmd->lock [ 188.229494][ T4949] [ 188.241574][ T4949] Possible unsafe locking scenario: [ 188.241574][ T4949] [ 188.249020][ T4949] CPU0 CPU1 [ 188.254389][ T4949] ---- ---- [ 188.259752][ T4949] lock(&cmd->lock); [ 188.263733][ T4949] lock(set->srcu); [ 188.270167][ T4949] lock(&cmd->lock); [ 188.276666][ T4949] lock(&nsock->tx_lock); [ 188.281083][ T4949] [ 188.281083][ T4949] *** DEADLOCK *** [ 188.281083][ T4949] [ 188.289220][ T4949] 4 locks held by kworker/0:1H/4949: [ 188.294498][ T4949] #0: ffff888020a80140 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 188.305551][ T4949] #1: ffffc9000f6dfc40 ((work_completion)(&(&hctx->run_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 188.318855][ T4949] #2: ffff888026fc8418 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_work_fn+0x144/0x300 [ 188.328253][ T4949] #3: ffff8880275d0178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc1/0x1150 [ 188.337308][ T4949] [ 188.337308][ T4949] stack backtrace: [ 188.343202][ T4949] CPU: 0 UID: 0 PID: 4949 Comm: kworker/0:1H Not tainted syzkaller #0 PREEMPT(full) [ 188.343220][ T4949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 188.343231][ T4949] Workqueue: kblockd blk_mq_run_work_fn [ 188.343248][ T4949] Call Trace: [ 188.343256][ T4949] [ 188.343262][ T4949] dump_stack_lvl+0xe8/0x150 [ 188.343285][ T4949] print_circular_bug+0x2e1/0x300 [ 188.343309][ T4949] check_noncircular+0x12e/0x150 [ 188.343334][ T4949] __lock_acquire+0x1520/0x2cf0 [ 188.343361][ T4949] ? nbd_queue_rq+0x373/0x1150 [ 188.343389][ T4949] lock_acquire+0x106/0x350 [ 188.343407][ T4949] ? nbd_queue_rq+0x373/0x1150 [ 188.343433][ T4949] __mutex_lock+0x19d/0x1550 [ 188.343449][ T4949] ? nbd_queue_rq+0x373/0x1150 [ 188.343470][ T4949] ? ret_from_fork_asm+0x1a/0x30 [ 188.343483][ T4949] ? unwind_next_frame+0x8f/0x2550 [ 188.343499][ T4949] ? nbd_queue_rq+0x373/0x1150 [ 188.343521][ T4949] ? __pfx___mutex_lock+0x10/0x10 [ 188.343537][ T4949] ? ret_from_fork_asm+0x1a/0x30 [ 188.343551][ T4949] ? stack_trace_save+0xa9/0x100 [ 188.343568][ T4949] ? __pfx_stack_trace_save+0x10/0x10 [ 188.343587][ T4949] nbd_queue_rq+0x373/0x1150 [ 188.343610][ T4949] ? __lock_acquire+0x13e8/0x2cf0 [ 188.343630][ T4949] ? __pfx_nbd_queue_rq+0x10/0x10 [ 188.343657][ T4949] blk_mq_dispatch_rq_list+0x499/0x1990 [ 188.343681][ T4949] ? sbitmap_get+0x229/0x390 [ 188.343703][ T4949] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 188.343722][ T4949] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 188.343744][ T4949] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 188.343772][ T4949] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 188.343796][ T4949] ? blk_mq_run_work_fn+0x144/0x300 [ 188.343811][ T4949] ? blk_mq_run_work_fn+0x144/0x300 [ 188.343828][ T4949] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 188.343850][ T4949] ? blk_mq_run_work_fn+0x144/0x300 [ 188.343864][ T4949] blk_mq_run_work_fn+0x16c/0x300 [ 188.343880][ T4949] ? process_scheduled_works+0xa20/0x14e0 [ 188.343896][ T4949] process_scheduled_works+0xa8e/0x14e0 [ 188.343920][ T4949] ? __pfx_process_scheduled_works+0x10/0x10 [ 188.343938][ T4949] ? assign_work+0x3cf/0x5d0 [ 188.343953][ T4949] worker_thread+0xa47/0xfb0 [ 188.343974][ T4949] ? __kthread_parkme+0x71/0x1f0 [ 188.343994][ T4949] kthread+0x388/0x470 [ 188.344013][ T4949] ? __pfx_worker_thread+0x10/0x10 [ 188.344028][ T4949] ? __pfx_kthread+0x10/0x10 [ 188.344048][ T4949] ret_from_fork+0x514/0xb70 [ 188.344069][ T4949] ? __pfx_ret_from_fork+0x10/0x10 [ 188.344089][ T4949] ? __switch_to+0xc89/0x1420 [ 188.344106][ T4949] ? __pfx_kthread+0x10/0x10 [ 188.344125][ T4949] ret_from_fork_asm+0x1a/0x30 [ 188.344143][ T4949] [ 188.605435][ T4949] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 188.615880][ T4949] Buffer I/O error on dev nbd2, logical block 0, async page read [ 188.645692][ T8031] netlink: 12 bytes leftover after parsing attributes in process `syz.2.488'. [ 188.721646][ T25] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 188.732776][ T25] Buffer I/O error on dev nbd2, logical block 1, async page read [ 188.751653][ T25] Buffer I/O error on dev nbd2, logical block 2, async page read [ 188.759594][ T25] Buffer I/O error on dev nbd2, logical block 3, async page read [ 188.767966][ T25] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 188.779145][ T25] Buffer I/O error on dev nbd2, logical block 0, async page read [ 188.787418][ T25] Buffer I/O error on dev nbd2, logical block 1, async page read [ 188.797123][ T25] Buffer I/O error on dev nbd2, logical block 2, async page read [ 188.806947][ T25] Buffer I/O error on dev nbd2, logical block 3, async page read [ 188.815407][ T25] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 188.825440][ T25] Buffer I/O error on dev nbd2, logical block 0, async page read [ 188.835672][ T25] Buffer I/O error on dev nbd2, logical block 1, async page read [ 188.844441][ T25] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 188.855923][ T25] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 188.869849][ T25] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 188.882088][ T25] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 188.892309][ T25] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 188.902348][ T5819] ldm_validate_partition_table(): Disk read failed. [ 188.909211][ T25] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 188.920125][ T5819] Dev nbd2: unable to read RDB block 0 [ 188.927277][ T5819] nbd2: unable to read partition table [ 188.946715][ T5819] ldm_validate_partition_table(): Disk read failed. [ 188.959619][ T5819] Dev nbd2: unable to read RDB block 0 [ 188.971336][ T5819] nbd2: unable to read partition table [ 190.516613][ T8034] syzkaller0: entered promiscuous mode [ 190.522745][ T8034] syzkaller0: entered allmulticast mode [ 190.529102][ T8046] tipc: Enabling of bearer rejected, failed to enable media [ 194.372278][ T1308] ieee802154 phy0 wpan0: encryption failed: -22