last executing test programs: 7.993002355s ago: executing program 0 (id=278): socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd31, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x4, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x30000013}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b921, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x3}, {0xfff1, 0xb}, {0x7, 0x6}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x8}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4010044}, 0x4000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 7.461224587s ago: executing program 0 (id=283): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0xb4, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x84, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x3, 0x3, 0x2, 0x3, 0x4, 0x6}}, @TCA_NETEM_CORR={0x10, 0x1, {0x2, 0x9, 0x7fff}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_CORR={0x10, 0x1, {0x10000, 0xb, 0x800}}, @TCA_NETEM_RATE={0x14, 0x6, {0x1, 0x7f, 0x7fff, 0x7}}]}}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05032200d3fc140000004788031c", 0xe, 0x4, &(0x7f0000000240)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 6.960717072s ago: executing program 0 (id=288): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) close(r0) r1 = socket(0x1e, 0x5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000900)={0x44, 0x0, 0x8, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8809}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_TIMEWAIT={0x6, 0x7, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x20024810}, 0x0) sendmsg$nl_route(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@dellink={0x34, 0x11, 0x1, 0x70bd26, 0x5dfdbff, {0x0, 0x0, 0x0, 0x0, 0xda23, 0x40000}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth0_vlan\x00'}]}, 0x34}, 0x1, 0x200000000000000, 0x0, 0x10}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = getpid() r5 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x6e21, 0x7, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x3}, 0x1c) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r7, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000600)={0x20, r9, 0x1, 0xfffffffd, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_SEC_DEVKEY={0x4}]}, 0x20}}, 0x4000040) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, 0x0, 0x0) 5.960714698s ago: executing program 1 (id=294): socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd31, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x4, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x30000013}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b921, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x3}, {0xfff1, 0xb}, {0x7, 0x6}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x8}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4010044}, 0x4000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4.170993538s ago: executing program 1 (id=297): sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, 0x0, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x24, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket(0x11, 0x2, 0x0) setsockopt(r2, 0x107, 0x1, &(0x7f0000000000)="110000000000060000071a80010061cc", 0x10) close(0x3) 2.679078425s ago: executing program 1 (id=304): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[], 0x50) unshare(0x6a040000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, 0x0, 0x810) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xba0c29e690d41d4b, 0x20000000ec071, 0xffffffffffffffff, 0x0) 2.626891437s ago: executing program 0 (id=307): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0xb4, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x84, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x3, 0x3, 0x2, 0x3, 0x4, 0x6}}, @TCA_NETEM_CORR={0x10, 0x1, {0x2, 0x9, 0x7fff}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_CORR={0x10, 0x1, {0x10000, 0xb, 0x800}}, @TCA_NETEM_RATE={0x14, 0x6, {0x1, 0x7f, 0x7fff, 0x7}}]}}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="05032200d3fc140000004788031c", 0xe, 0x4, &(0x7f0000000240)={0x11, 0x86dd, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) 2.419381116s ago: executing program 2 (id=308): socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd31, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x4, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x30000013}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b921, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x3}, {0xfff1, 0xb}, {0x7, 0x6}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x8}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4010044}, 0x4000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.217408218s ago: executing program 3 (id=309): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {0x5, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0xffffffff}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004070}, 0x4008000) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x5) 1.857881895s ago: executing program 2 (id=312): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05032200d3fc140000004788031c", 0xe, 0x4, &(0x7f0000000240)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.796134294s ago: executing program 3 (id=313): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket(0x2, 0x80805, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$inet6_sctp(0xa, 0x5, 0x84) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x3, 0x0, 0x80, 0x1, 0xffffffffffffffff}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x1ff, 0x7fffffff}, 0x0, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000100)=[{r2, 0x3328}, {r1, 0x4236}], 0x2, 0x0, 0x0, 0x0) unshare(0x22020400) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r2, &(0x7f0000001480)={0x0, 0x0, 0x0}, 0x100) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 1.726769525s ago: executing program 4 (id=314): setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0xffe0, 0xd}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_OVERHEAD={0x8, 0x6, 0x53}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x4}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x2004c044) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {}, {0xe}}}, 0x24}}, 0x40004) 1.564949291s ago: executing program 2 (id=315): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="2800000010000108fdffffff0000000800000000", @ANYRES32=0x0, @ANYBLOB="000000002104020008001b00000000006db19be5b87d051fcfb92a45d006d6d4f5e44d17cb6453467e226cc9bd61dc28133f29d1590f2819638c29bc85005af05e38becab2d98f903806bc78df35a5f31a3139aaa93256f4a6b39b439df8d92f14755a67820b8f498ba081f4a527637d614dac4f48ce224c1e1ac094f200ac631e911502375d7b086eecc090b1b1f0638aba593489b30a6a89c42f9725a4e6e9838737bd2e409228add4692093f2a0cbb0d8995d23ee4df2f7dd4f5146b2401c78a2c63275a04f7adfe087aea5736ab6dffb1fd0"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) r0 = socket(0x1, 0x1, 0x31f) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000), 0x20000328) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x30, 0x0, &(0x7f0000000100)) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'veth1\x00', &(0x7f0000000180)=@ethtool_sset_info={0x4a, 0x7, 0x3}}) r2 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r2, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x300000f, 0x11, r2, 0xd4741000) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e20, 0xfffffffe, @empty, 0x8}}}, 0x108) connect$x25(r0, &(0x7f0000000280)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x12) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x64, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0x14, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7fff}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}]}, 0x64}}, 0x0) 1.30887209s ago: executing program 4 (id=316): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {0x5, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0xffffffff}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004070}, 0x4008000) r5 = socket$unix(0x1, 0x1, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x5) 1.262827683s ago: executing program 2 (id=317): sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, 0x0, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x24, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket(0x11, 0x2, 0x0) setsockopt(r2, 0x107, 0x1, &(0x7f0000000000)="110000000000060000071a80010061cc", 0x10) close(0x3) 1.012755404s ago: executing program 4 (id=318): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', @broadcast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200504, 0x0) close(r4) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x5}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x7ff, 0x100000000, 0x6eb, 0x5, 0x7, 0x2c0b}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffe4, 0xb}, {0xfff3, 0x7}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x3, 0x7}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x6008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 895.941751ms ago: executing program 4 (id=319): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x101401, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0xffe0, 0xd}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_OVERHEAD={0x8, 0x6, 0x53}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x4}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {}, {0xe}}}, 0x24}}, 0x40004) 879.430114ms ago: executing program 3 (id=320): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20000c40) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r4) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newtfilter={0x88, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xc, 0xfff3}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x202, 0x10000000, 0x1000, 0x8}, 0x1}}]}, {0x3c}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080) r6 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r3, 0x3c}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000540)="2787", 0x2}], 0x1}, 0x4011) 615.293397ms ago: executing program 4 (id=321): socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f00000007c0), &(0x7f0000000840)=0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_msg}, 0x48) r0 = socket$nl_rdma(0x10, 0x3, 0x14) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/user\x00') sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x40, 0x1402, 0x400, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x0, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0xffffffffffffff5b, 0x2, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x814}, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000c, 0x40010, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180500000000000000000000000000001800000020696c2500000000002020207b0af8ff00000000bd510000000000000701000000feffffb702000008000000b703000000000000850000001900000095"], &(0x7f00000005c0)='GPL\x00', 0x8, 0xde, &(0x7f0000003e40)=""/222}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x161842, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r1, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) ppoll(&(0x7f00000000c0)=[{r1, 0x8040}, {r1}], 0x2, 0x0, 0x0, 0x0) write$ppp(r1, &(0x7f0000000200)="bc72", 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e00000000a06010100000000000000000300000908000940800000010900020073797a310000000005000100070000000800094000000005880008800c000780080009"], 0x13a}, 0x1, 0x0, 0x0, 0x4800}, 0x48080) 614.524622ms ago: executing program 1 (id=331): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8064}, 0x20040084) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a40)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0x9, 0x0, 0x1, 0xffff, 0xf, 0x9d8d, 0x2, 0x401, [{0x7, 0x7, 0xa, 0x5}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) 544.016478ms ago: executing program 3 (id=322): socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd31, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x4, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x30000013}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b921, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x3}, {0xfff1, 0xb}, {0x7, 0x6}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x8}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4010044}, 0x4000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 418.565032ms ago: executing program 1 (id=323): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {0x5, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0xffffffff}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004070}, 0x4008000) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x5) 332.663941ms ago: executing program 0 (id=324): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="2800000010000108fdffffff0000000800000000", @ANYRES32=0x0, @ANYBLOB="000000002104020008001b00000000006db19be5b87d051fcfb92a45d006d6d4f5e44d17cb6453467e226cc9bd61dc28133f29d1590f2819638c29bc85005af05e38becab2d98f903806bc78df35a5f31a3139aaa93256f4a6b39b439df8d92f14755a67820b8f498ba081f4a527637d614dac4f48ce224c1e1ac094f200ac631e911502375d7b086eecc090b1b1f0638aba593489b30a6a89c42f9725a4e6e9838737bd2e409228add4692093f2a0cbb0d8995d23ee4df2f7dd4f5146b2401c78a2c63275a04f7adfe087aea5736ab6dffb1fd0"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) r0 = socket(0x1, 0x1, 0x31f) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000), 0x20000328) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'veth1\x00', &(0x7f0000000180)=@ethtool_sset_info={0x4a, 0x7, 0x3}}) r2 = socket$netlink(0x10, 0x3, 0x400000000000004) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x300000f, 0x11, r2, 0xd4741000) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e20, 0xfffffffe, @empty, 0x8}}}, 0x108) 252.543234ms ago: executing program 2 (id=325): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="28000000000000ae3ff62791c38e3d14ec66e16bf69f66"], 0x28}}, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x12, r1, 0x0) ioctl(r0, 0x8b29, &(0x7f0000000040)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x64, r3, 0x917, 0x1000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @remote}}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}]}, 0x64}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x400002, @loopback, 0xfffffffd}}, 0x0, 0x8, 0x300, 0x0, 0x54, 0x4}, 0x9c) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, r6, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x2, 0x7}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x8080) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000080)={'ip6gre0\x00', 0x0, 0x29, 0x4, 0xb, 0x3, 0x18, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x700, 0x10, 0x7ff, 0x3}}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000180)={@remote, 0x11, r9}) 194.253828ms ago: executing program 3 (id=326): socket$kcm(0xa, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000001"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) connect$unix(r1, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@gcm_256={{0x304}, "75458515f8ff1016", "bcd4d6c25e66faaa1faecc0b78bcdcfd95786a609ed8bea11351afa4d6c34a0a", "208a4d4c", "e846c9af1a4e33f0"}, 0x38) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000ac0)=ANY=[], 0x320}, 0x1, 0xf0ff}, 0x80) 150.396935ms ago: executing program 0 (id=327): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="2800000010000108fdffffff0000000800000000", @ANYRES32=0x0, @ANYBLOB="000000002104020008001b00000000006db19be5b87d051fcfb92a45d006d6d4f5e44d17cb6453467e226cc9bd61dc28133f29d1590f2819638c29bc85005af05e38becab2d98f903806bc78df35a5f31a3139aaa93256f4a6b39b439df8d92f14755a67820b8f498ba081f4a527637d614dac4f48ce224c1e1ac094f200ac631e911502375d7b086eecc090b1b1f0638aba593489b30a6a89c42f9725a4e6e9838737bd2e409228add4692093f2a0cbb0d8995d23ee4df2f7dd4f5146b2401c78a2c63275a04f7adfe087aea5736ab6dffb1fd0"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) r0 = socket(0x1, 0x1, 0x31f) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000), 0x20000328) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x30, 0x0, &(0x7f0000000100)) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'veth1\x00', &(0x7f0000000180)=@ethtool_sset_info={0x4a, 0x7, 0x3}}) r2 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r2, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x300000f, 0x11, r2, 0xd4741000) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e20, 0xfffffffe, @empty, 0x8}}}, 0x108) connect$x25(r0, &(0x7f0000000280)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x12) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x64, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0x14, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7fff}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}]}, 0x64}}, 0x0) 137.95743ms ago: executing program 4 (id=328): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r2) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000100)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r5, 0x0, 0x80) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) sendfile(r1, r4, 0x0, 0x20000000002) 46.46502ms ago: executing program 3 (id=329): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0xe00, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000002e00090027097000000000220400000008000c"], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 3.384975ms ago: executing program 1 (id=330): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', @broadcast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200504, 0x0) close(r4) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x5}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x7ff, 0x100000000, 0x6eb, 0x5, 0x7, 0x2c0b}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffe4, 0xb}, {0xfff3, 0x7}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x3, 0x7}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x6008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 0s ago: executing program 2 (id=332): socket$key(0xf, 0x3, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0xfffffffffffffffd, 0x10000000, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x40000, 0xd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0x3, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x20040084) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'wg2\x00'}) r1 = socket$inet6(0x10, 0x2, 0x4) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000340)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', r2, 0x29, 0x9, 0x2, 0x4, 0x30, @local, @remote, 0x98, 0x80, 0x5, 0x800}}) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, 0x0, 0x2000800) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x1, 0x3}, {}, {0x5, 0xfff1}}}, 0x24}}, 0x40004) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast1, 0xffff, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.255' (ED25519) to the list of known hosts. [ 66.797285][ T5609] cgroup: Unknown subsys name 'net' [ 66.948508][ T5609] cgroup: Unknown subsys name 'cpuset' [ 66.957691][ T5609] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.303355][ T5609] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 70.461285][ T5637] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.475052][ T5638] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.482901][ T5637] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.483995][ T5638] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.493014][ T5637] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.508590][ T5637] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.510121][ T5642] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 70.518032][ T5637] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.522917][ T5638] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.530522][ T5637] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.546373][ T5637] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.553493][ T5639] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 70.553895][ T5638] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.561401][ T5639] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.575729][ T5637] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 70.575734][ T5638] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.577568][ T5637] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.584659][ T5638] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.593093][ T5637] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.598786][ T5638] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.618914][ T5642] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.626970][ T5637] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 70.627083][ T5642] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.643730][ T49] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.645769][ T5642] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 71.257891][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.268795][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.202757][ T5624] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.210320][ T5624] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.217704][ T5624] bridge_slave_0: entered allmulticast mode [ 72.225636][ T5624] bridge_slave_0: entered promiscuous mode [ 72.268562][ T5624] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.275737][ T5624] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.282844][ T5624] bridge_slave_1: entered allmulticast mode [ 72.290269][ T5624] bridge_slave_1: entered promiscuous mode [ 72.412150][ T5624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.431537][ T5623] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.438888][ T5623] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.446203][ T5623] bridge_slave_0: entered allmulticast mode [ 72.453097][ T5623] bridge_slave_0: entered promiscuous mode [ 72.471478][ T5624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.491019][ T5623] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.498598][ T5623] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.505837][ T5623] bridge_slave_1: entered allmulticast mode [ 72.513022][ T5623] bridge_slave_1: entered promiscuous mode [ 72.520122][ T5621] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.527714][ T5621] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.535516][ T5621] bridge_slave_0: entered allmulticast mode [ 72.542401][ T5621] bridge_slave_0: entered promiscuous mode [ 72.589634][ T5621] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.596763][ T5621] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.603861][ T5621] bridge_slave_1: entered allmulticast mode [ 72.612252][ T5621] bridge_slave_1: entered promiscuous mode [ 72.615282][ T5642] Bluetooth: hci2: command tx timeout [ 72.647606][ T5622] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.654953][ T5622] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.662238][ T5622] bridge_slave_0: entered allmulticast mode [ 72.669342][ T5622] bridge_slave_0: entered promiscuous mode [ 72.694632][ T5634] Bluetooth: hci1: command tx timeout [ 72.698757][ T5624] team0: Port device team_slave_0 added [ 72.700646][ T5634] Bluetooth: hci4: command tx timeout [ 72.711825][ T5632] Bluetooth: hci0: command tx timeout [ 72.718257][ T5642] Bluetooth: hci3: command tx timeout [ 72.720367][ T5622] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.731073][ T5622] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.738268][ T5622] bridge_slave_1: entered allmulticast mode [ 72.745554][ T5622] bridge_slave_1: entered promiscuous mode [ 72.755088][ T5623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.766654][ T5621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.777835][ T5624] team0: Port device team_slave_1 added [ 72.783564][ T5626] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.790824][ T5626] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.798070][ T5626] bridge_slave_0: entered allmulticast mode [ 72.805147][ T5626] bridge_slave_0: entered promiscuous mode [ 72.823822][ T5623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.835061][ T5621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.852756][ T5626] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.860237][ T5626] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.867746][ T5626] bridge_slave_1: entered allmulticast mode [ 72.875163][ T5626] bridge_slave_1: entered promiscuous mode [ 72.930196][ T5622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.958762][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.965919][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.991957][ T5624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.014381][ T5622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.026174][ T5623] team0: Port device team_slave_0 added [ 73.033488][ T5621] team0: Port device team_slave_0 added [ 73.040067][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.047228][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.073412][ T5624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.087072][ T5626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.108316][ T5623] team0: Port device team_slave_1 added [ 73.115743][ T5621] team0: Port device team_slave_1 added [ 73.130961][ T5626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.191267][ T5622] team0: Port device team_slave_0 added [ 73.226456][ T5626] team0: Port device team_slave_0 added [ 73.233907][ T5622] team0: Port device team_slave_1 added [ 73.240438][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.247441][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.274371][ T5623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.285909][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.292876][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.319069][ T5621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.342450][ T5626] team0: Port device team_slave_1 added [ 73.357492][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.364538][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.390498][ T5623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.402083][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.409322][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.435231][ T5621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.451683][ T5624] hsr_slave_0: entered promiscuous mode [ 73.458211][ T5624] hsr_slave_1: entered promiscuous mode [ 73.505643][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.512783][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.539062][ T5622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.551614][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.558629][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.584695][ T5622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.610998][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.618321][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.644273][ T5626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.683755][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.690746][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.717108][ T5626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.742139][ T5623] hsr_slave_0: entered promiscuous mode [ 73.748710][ T5623] hsr_slave_1: entered promiscuous mode [ 73.755412][ T5623] debugfs: 'hsr0' already exists in 'hsr' [ 73.761179][ T5623] Cannot create hsr debugfs directory [ 73.833963][ T5621] hsr_slave_0: entered promiscuous mode [ 73.840756][ T5621] hsr_slave_1: entered promiscuous mode [ 73.847242][ T5621] debugfs: 'hsr0' already exists in 'hsr' [ 73.852982][ T5621] Cannot create hsr debugfs directory [ 73.865458][ T5622] hsr_slave_0: entered promiscuous mode [ 73.871616][ T5622] hsr_slave_1: entered promiscuous mode [ 73.877826][ T5622] debugfs: 'hsr0' already exists in 'hsr' [ 73.883545][ T5622] Cannot create hsr debugfs directory [ 73.990720][ T5626] hsr_slave_0: entered promiscuous mode [ 73.996975][ T5626] hsr_slave_1: entered promiscuous mode [ 74.002936][ T5626] debugfs: 'hsr0' already exists in 'hsr' [ 74.008805][ T5626] Cannot create hsr debugfs directory [ 74.398583][ T5624] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 74.410046][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 74.418429][ T5624] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 74.429059][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 74.447338][ T5624] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 74.457614][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 74.465387][ T5624] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 74.475485][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 74.541976][ T5622] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.551143][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 74.561808][ T5622] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.570956][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 74.579440][ T5622] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.589047][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 74.597220][ T5622] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.607611][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 74.695757][ T5642] Bluetooth: hci2: command tx timeout [ 74.702896][ T5621] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 74.716076][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 74.724008][ T5621] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 74.734150][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 74.742413][ T5621] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 74.751870][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 74.760863][ T5621] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.771998][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 74.779403][ T5642] Bluetooth: hci1: command tx timeout [ 74.784642][ T5632] Bluetooth: hci0: command tx timeout [ 74.787079][ T5642] Bluetooth: hci3: command tx timeout [ 74.791157][ T5634] Bluetooth: hci4: command tx timeout [ 74.906848][ T5624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.917001][ T5623] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.927379][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 74.937016][ T5623] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.947511][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 74.963780][ T5623] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.973875][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 75.002843][ T5623] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 75.012966][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 75.068571][ T5624] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.107888][ T5622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.123641][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.131204][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.143181][ T5626] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 75.153047][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 75.162779][ T5626] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 75.172552][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 75.180757][ T5626] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 75.190004][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 75.198264][ T5626] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 75.207694][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 75.227102][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.234221][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.290288][ T5622] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.317056][ T5621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.328183][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.335379][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.358273][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.365421][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.420878][ T5621] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.452255][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.459359][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.483622][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.490736][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.543705][ T5623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.626561][ T5623] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.679720][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.686913][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.711085][ T5626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.731729][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.738922][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.819722][ T5626] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.862371][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.869578][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.957240][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.964950][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.459934][ T5624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.595985][ T5622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.782204][ T5622] veth0_vlan: entered promiscuous mode [ 76.790583][ T5634] Bluetooth: hci2: command tx timeout [ 76.822001][ T5621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.848669][ T5622] veth1_vlan: entered promiscuous mode [ 76.856263][ T5634] Bluetooth: hci0: command tx timeout [ 76.862012][ T5634] Bluetooth: hci3: command tx timeout [ 76.864591][ T5632] Bluetooth: hci4: command tx timeout [ 76.867524][ T5634] Bluetooth: hci1: command tx timeout [ 76.989575][ T5621] veth0_vlan: entered promiscuous mode [ 77.021508][ T5622] veth0_macvtap: entered promiscuous mode [ 77.039218][ T5621] veth1_vlan: entered promiscuous mode [ 77.092817][ T5622] veth1_macvtap: entered promiscuous mode [ 77.123415][ T5623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.204088][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.234212][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.248426][ T5626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.262965][ T5621] veth0_macvtap: entered promiscuous mode [ 77.272104][ T5624] veth0_vlan: entered promiscuous mode [ 77.296533][ T5621] veth1_macvtap: entered promiscuous mode [ 77.303831][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.313709][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.330891][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.342409][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.353589][ T5624] veth1_vlan: entered promiscuous mode [ 77.409383][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.459175][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.488480][ T5623] veth0_vlan: entered promiscuous mode [ 77.519158][ T47] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.528866][ T47] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.548735][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.554537][ T5626] veth0_vlan: entered promiscuous mode [ 77.562415][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.573760][ T5624] veth0_macvtap: entered promiscuous mode [ 77.582831][ T47] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.603371][ T5623] veth1_vlan: entered promiscuous mode [ 77.611626][ T47] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.636119][ T5624] veth1_macvtap: entered promiscuous mode [ 77.658420][ T5626] veth1_vlan: entered promiscuous mode [ 77.667604][ T1148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.677784][ T1148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.719801][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.761889][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.785539][ T5622] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 77.817398][ T5623] veth0_macvtap: entered promiscuous mode [ 77.868968][ T1148] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.884034][ T1148] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.907180][ T5626] veth0_macvtap: entered promiscuous mode [ 77.914283][ T5623] veth1_macvtap: entered promiscuous mode [ 77.922235][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.935941][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.947233][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.972603][ T1148] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.988809][ T5626] veth1_macvtap: entered promiscuous mode [ 78.015390][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.022301][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.030539][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.043090][ T5821] syzkaller0: entered promiscuous mode [ 78.048644][ T5821] syzkaller0: entered allmulticast mode [ 78.087971][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.123604][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.196679][ T1148] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.218371][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.249000][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.262868][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.273739][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.291266][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.305385][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.341871][ T1148] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.351148][ T1148] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.404285][ T1148] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.416615][ T1148] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.461187][ T5825] syzkaller0: entered promiscuous mode [ 78.467053][ T5825] syzkaller0: entered allmulticast mode [ 78.482384][ T1148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.490868][ T1148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.511803][ T5823] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3'. [ 78.668212][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.704990][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.848766][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.865707][ T5632] Bluetooth: hci2: command tx timeout [ 78.876485][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.906258][ T5831] syzkaller0: entered promiscuous mode [ 78.911861][ T5831] syzkaller0: entered allmulticast mode [ 78.937192][ T5632] Bluetooth: hci1: command tx timeout [ 78.943139][ T5642] Bluetooth: hci3: command tx timeout [ 78.943164][ T5634] Bluetooth: hci0: command tx timeout [ 78.948723][ T5642] Bluetooth: hci4: command tx timeout [ 78.963350][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.973056][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.096769][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.109723][ T5833] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5'. [ 79.140763][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.180996][ T5841] xt_hashlimit: size too large, truncated to 1048576 [ 79.204992][ T5839] tipc: Started in network mode [ 79.225908][ T5839] tipc: Node identity 2e726d7b3beb, cluster identity 4711 [ 79.237165][ T5839] tipc: Enabled bearer , priority 0 [ 79.249046][ T5842] syzkaller0: entered promiscuous mode [ 79.260070][ T5842] syzkaller0: entered allmulticast mode [ 79.433163][ T5839] tipc: Resetting bearer [ 79.479900][ T5838] tipc: Resetting bearer [ 79.549926][ T5838] tipc: Disabling bearer [ 79.706665][ T5862] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11'. [ 79.740028][ T5844] syzkaller0: entered promiscuous mode [ 79.748405][ T5844] syzkaller0: entered allmulticast mode [ 79.867370][ T5872] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11'. [ 81.101030][ T5859] tipc: Started in network mode [ 81.110242][ T5859] tipc: Node identity 321ae51c6da, cluster identity 4711 [ 81.121512][ T5859] tipc: Enabled bearer , priority 0 [ 81.312080][ T5877] syzkaller0: entered promiscuous mode [ 81.317799][ T5877] syzkaller0: entered allmulticast mode [ 81.330754][ T5884] tipc: Resetting bearer [ 81.364029][ T5857] tipc: Resetting bearer [ 81.396713][ T5857] tipc: Disabling bearer [ 81.442301][ T5902] netlink: 36 bytes leftover after parsing attributes in process `syz.0.15'. [ 81.738337][ T29] audit: type=1804 audit(1778579493.840:2): pid=5910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.18" name="/newroot/1/cgroup.controllers" dev="tmpfs" ino=23 res=1 errno=0 [ 81.820798][ T29] audit: type=1800 audit(1778579493.840:3): pid=5910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.18" name="cgroup.controllers" dev="tmpfs" ino=23 res=0 errno=0 [ 82.070604][ T5921] Bluetooth: MGMT ver 1.23 [ 82.089542][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 82.134185][ T5921] IPv6: NLM_F_CREATE should be specified when creating new route [ 82.173123][ T5920] syzkaller0: entered promiscuous mode [ 82.204548][ T5920] syzkaller0: entered allmulticast mode [ 82.627165][ T5934] netlink: 40 bytes leftover after parsing attributes in process `syz.0.23'. [ 82.678301][ T5936] netlink: 40 bytes leftover after parsing attributes in process `syz.0.23'. [ 82.710344][ T5928] syzkaller0: entered promiscuous mode [ 82.716587][ T5928] syzkaller0: entered allmulticast mode [ 82.734952][ T5938] netlink: 12 bytes leftover after parsing attributes in process `syz.2.24'. [ 82.755279][ T5936] netlink: 40 bytes leftover after parsing attributes in process `syz.0.23'. [ 82.847402][ T5941] netlink: 4 bytes leftover after parsing attributes in process `syz.2.24'. [ 82.868993][ T5938] bond1 (unregistering): Released all slaves [ 84.383817][ T5968] netlink: 'syz.2.29': attribute type 10 has an invalid length. [ 84.469803][ T5968] team0: Port device dummy0 added [ 84.476624][ T5972] xt_hashlimit: size too large, truncated to 1048576 [ 84.518021][ T5974] netlink: 'syz.0.31': attribute type 1 has an invalid length. [ 84.531041][ T5966] bridge_slave_0: left allmulticast mode [ 84.531479][ T5968] netlink: 'syz.2.29': attribute type 10 has an invalid length. [ 84.537509][ T5966] bridge_slave_0: left promiscuous mode [ 84.552942][ T5966] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.570952][ T5966] bridge_slave_1: left allmulticast mode [ 84.576850][ T5966] bridge_slave_1: left promiscuous mode [ 84.583660][ T5966] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.609621][ T5966] bond0: (slave bond_slave_0): Releasing backup interface [ 84.664228][ T5966] bond0: (slave bond_slave_1): Releasing backup interface [ 84.709619][ T5966] team0: Port device team_slave_0 removed [ 84.737054][ T5966] team0: Port device team_slave_1 removed [ 84.753977][ T5966] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.785498][ T5966] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.786129][ T5969] nbd0: detected capacity change from 0 to 63 [ 84.807594][ T5976] netlink: 'syz.3.30': attribute type 1 has an invalid length. [ 84.818429][ T5966] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.826187][ T5976] __nla_validate_parse: 1 callbacks suppressed [ 84.826203][ T5976] netlink: 224 bytes leftover after parsing attributes in process `syz.3.30'. [ 84.854565][ T5966] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.871019][ T5966] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 84.932627][ T5975] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.948631][ T5975] bridge_slave_0 (unregistering): left allmulticast mode [ 84.956543][ T5975] bridge_slave_0 (unregistering): left promiscuous mode [ 84.963918][ T5975] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.063296][ T5977] veth3: entered allmulticast mode [ 85.087408][ T5994] xt_bpf: check failed: parse error [ 85.141175][ T5968] team0: Port device dummy0 removed [ 85.161023][ T5968] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 85.245075][ T5632] block nbd0: Receive control failed (result -104) [ 85.252337][ T5642] block nbd0: Receive control failed (result -32) [ 85.274125][ T5981] team0: Port device team_slave_1 removed [ 86.418995][ T6042] tipc: Started in network mode [ 86.449196][ T6042] tipc: Node identity deaffa7eac2a, cluster identity 4711 [ 86.471341][ T6042] tipc: Enabled bearer , priority 0 [ 86.498762][ T6044] syzkaller0: entered promiscuous mode [ 86.520187][ T6046] syz.3.39 uses obsolete (PF_INET,SOCK_PACKET) [ 86.529054][ T6044] syzkaller0: entered allmulticast mode [ 86.626271][ T9] cfg80211: failed to load regulatory.db [ 86.663932][ T6042] tipc: Resetting bearer [ 86.692674][ T6041] tipc: Resetting bearer [ 86.734693][ T6041] tipc: Disabling bearer [ 86.787465][ T6053] netlink: 4 bytes leftover after parsing attributes in process `syz.1.38'. [ 86.904710][ T6061] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 86.912603][ T6061] IPv6: NLM_F_CREATE should be set when creating new route [ 86.920331][ T6061] IPv6: NLM_F_CREATE should be set when creating new route [ 86.939321][ T6062] netlink: 4 bytes leftover after parsing attributes in process `syz.0.42'. [ 87.119421][ T6062] sctp: [Deprecated]: syz.0.42 (pid 6062) Use of struct sctp_assoc_value in delayed_ack socket option. [ 87.119421][ T6062] Use struct sctp_sack_info instead [ 87.180581][ T6071] netlink: 'syz.0.42': attribute type 1 has an invalid length. [ 87.207506][ T6071] netlink: 224 bytes leftover after parsing attributes in process `syz.0.42'. [ 87.968124][ T6080] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma? [ 89.013904][ T6095] syzkaller0: entered promiscuous mode [ 89.031429][ T6095] syzkaller0: entered allmulticast mode [ 89.508322][ T6104] Zero length message leads to an empty skb [ 89.631602][ T6101] xt_CT: You must specify a L4 protocol and not use inversions on it [ 89.688934][ T6101] netlink: 28 bytes leftover after parsing attributes in process `syz.4.53'. [ 89.751846][ T6108] netlink: 'syz.1.55': attribute type 13 has an invalid length. [ 89.980769][ T6113] netlink: 4 bytes leftover after parsing attributes in process `syz.1.55'. [ 89.993434][ T6114] tipc: Enabled bearer , priority 0 [ 90.032026][ T6120] syzkaller0: entered promiscuous mode [ 90.039495][ T6120] syzkaller0: entered allmulticast mode [ 90.195894][ T6112] tipc: Resetting bearer [ 90.272370][ T6109] tipc: Resetting bearer [ 90.317482][ T6109] tipc: Disabling bearer [ 90.480189][ T6130] netlink: 104 bytes leftover after parsing attributes in process `syz.1.59'. [ 90.699692][ T6135] netlink: 'syz.3.61': attribute type 7 has an invalid length. [ 91.117124][ T6132] syzkaller0: entered promiscuous mode [ 91.138184][ T6132] syzkaller0: entered allmulticast mode [ 91.358060][ T6137] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.547913][ T6137] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.685448][ T6137] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.825047][ T6137] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.031502][ T5992] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.105343][ T5992] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.153961][ T5992] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.209457][ T6018] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.271260][ T6157] Driver unsupported XDP return value 0 on prog (id 12) dev N/A, expect packet loss! [ 92.340261][ T6153] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 92.865495][ T6176] Bluetooth: MGMT ver 1.23 [ 93.111319][ T6184] netlink: 180568 bytes leftover after parsing attributes in process `syz.0.72'. [ 93.327452][ T6188] netlink: 'syz.4.74': attribute type 2 has an invalid length. [ 93.348646][ T6188] netlink: 'syz.4.74': attribute type 2 has an invalid length. [ 93.419502][ T6193] netlink: 'syz.2.76': attribute type 1 has an invalid length. [ 93.440795][ T6193] netlink: 28 bytes leftover after parsing attributes in process `syz.2.76'. [ 93.471673][ T6188] macsec1: entered promiscuous mode [ 93.528667][ T6190] syzkaller0: entered promiscuous mode [ 93.545138][ T6190] syzkaller0: entered allmulticast mode [ 93.563739][ T6193] veth0_virt_wifi: entered promiscuous mode [ 93.574720][ T6193] veth0_virt_wifi: entered allmulticast mode [ 93.697462][ T5734] IPVS: starting estimator thread 0... [ 93.805241][ T6201] IPVS: using max 31 ests per chain, 74400 per kthread [ 93.974205][ T6209] xt_hashlimit: size too large, truncated to 1048576 [ 94.272525][ T6214] syzkaller0: entered promiscuous mode [ 94.290652][ T6214] syzkaller0: entered allmulticast mode [ 94.449725][ T6216] netlink: 12 bytes leftover after parsing attributes in process `syz.4.82'. [ 94.848154][ T6228] netlink: 'syz.0.87': attribute type 1 has an invalid length. [ 94.858442][ T6227] syzkaller0: entered promiscuous mode [ 94.864030][ T6227] syzkaller0: entered allmulticast mode [ 94.906336][ T6227] netlink: 28 bytes leftover after parsing attributes in process `syz.4.86'. [ 94.918672][ T6227] netlink: 28 bytes leftover after parsing attributes in process `syz.4.86'. [ 94.952884][ T6228] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 94.965827][ T6228] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 95.038100][ T6231] bond1: (slave gretap1): making interface the new active one [ 95.052430][ T6231] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 95.102409][ T6228] macvlan2: entered promiscuous mode [ 95.123596][ T6228] macvlan2: entered allmulticast mode [ 95.146110][ T6228] bond1: entered promiscuous mode [ 95.160069][ T6228] gretap1: entered promiscuous mode [ 95.176431][ T6228] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 95.188273][ T6228] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 95.200547][ T6228] bond1: left promiscuous mode [ 95.205851][ T6228] gretap1: left promiscuous mode [ 95.405981][ T6233] syzkaller0: entered promiscuous mode [ 95.411919][ T6233] syzkaller0: entered allmulticast mode [ 96.739346][ T6250] xt_hashlimit: size too large, truncated to 1048576 [ 96.804575][ T6203] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 97.281335][ T6260] netlink: 4 bytes leftover after parsing attributes in process `syz.2.95'. [ 97.851707][ T6262] syzkaller0: entered promiscuous mode [ 97.858073][ T6262] syzkaller0: entered allmulticast mode [ 97.903865][ T6269] syzkaller0: entered promiscuous mode [ 97.910184][ T6269] syzkaller0: entered allmulticast mode [ 99.172103][ T6269] netlink: 28 bytes leftover after parsing attributes in process `syz.1.98'. [ 99.181107][ T6269] netlink: 28 bytes leftover after parsing attributes in process `syz.1.98'. [ 99.470008][ T6304] tipc: Enabled bearer , priority 0 [ 99.478715][ T6303] tipc: Started in network mode [ 99.483784][ T6303] tipc: Node identity c601c3254bed, cluster identity 4711 [ 99.491284][ T6303] tipc: Enabled bearer , priority 0 [ 99.509295][ T6298] syzkaller0: entered promiscuous mode [ 99.515528][ T6298] syzkaller0: entered allmulticast mode [ 99.522906][ T6303] syzkaller0: entered promiscuous mode [ 99.532992][ T6303] syzkaller0: entered allmulticast mode [ 99.605398][ T6298] tipc: Resetting bearer [ 99.612581][ T6301] tipc: Resetting bearer [ 99.639664][ T6301] tipc: Disabling bearer [ 99.650374][ T6297] tipc: Resetting bearer [ 99.666389][ T6297] tipc: Disabling bearer [ 99.845922][ T6316] netlink: 4 bytes leftover after parsing attributes in process `syz.3.107'. [ 99.905939][ T6319] netlink: 12 bytes leftover after parsing attributes in process `syz.4.108'. [ 99.971914][ T6322] syzkaller0: entered promiscuous mode [ 99.979798][ T6322] syzkaller0: entered allmulticast mode [ 100.002469][ T6324] syzkaller0: entered promiscuous mode [ 100.013373][ T6324] syzkaller0: entered allmulticast mode [ 100.441200][ T6344] xt_hashlimit: size too large, truncated to 1048576 [ 100.821560][ T6329] syzkaller0: entered promiscuous mode [ 100.832268][ T6329] syzkaller0: entered allmulticast mode [ 100.939793][ T6342] syzkaller0: entered promiscuous mode [ 100.945641][ T6342] syzkaller0: entered allmulticast mode [ 101.870867][ T6393] netlink: 'syz.4.120': attribute type 1 has an invalid length. [ 102.064644][ T6396] netlink: 36 bytes leftover after parsing attributes in process `syz.4.120'. [ 103.990850][ T6372] netlink: 76 bytes leftover after parsing attributes in process `syz.2.118'. [ 104.009290][ T6384] tipc: Enabling of bearer rejected, failed to enable media [ 104.063626][ T6393] 8021q: adding VLAN 0 to HW filter on device bond1 [ 104.108822][ T6402] bond1: (slave geneve2): making interface the new active one [ 104.121659][ T6402] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 104.268810][ T6411] syzkaller0: entered promiscuous mode [ 104.293695][ T6411] syzkaller0: entered allmulticast mode [ 104.345495][ T6422] netlink: 44 bytes leftover after parsing attributes in process `syz.1.126'. [ 104.382905][ T2171] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.417308][ T6419] netlink: 16 bytes leftover after parsing attributes in process `syz.3.125'. [ 104.477424][ T6429] netlink: 'syz.1.126': attribute type 1 has an invalid length. [ 104.506419][ T6429] netlink: 224 bytes leftover after parsing attributes in process `syz.1.126'. [ 104.629478][ T6431] xt_hashlimit: size too large, truncated to 1048576 [ 104.706810][ T6433] tc action pedit 'at' offset 9 out of bounds [ 104.713503][ T6433] tc action pedit 'at' offset 9 out of bounds [ 104.719663][ T6433] tc action pedit 'at' offset 9 out of bounds [ 104.725787][ T6433] tc action pedit 'at' offset 9 out of bounds [ 104.731878][ T6433] tc action pedit 'at' offset 9 out of bounds [ 104.737994][ T6433] tc action pedit 'at' offset 9 out of bounds [ 104.744062][ T6433] tc action pedit 'at' offset 9 out of bounds [ 104.750186][ T6433] tc action pedit 'at' offset 9 out of bounds [ 104.756306][ T6433] tc action pedit 'at' offset 9 out of bounds [ 104.762381][ T6433] tc action pedit 'at' offset 9 out of bounds [ 104.768551][ T6433] TC_ACT_REPEAT abuse ? [ 105.043335][ T6444] syzkaller0: entered promiscuous mode [ 105.055113][ T6444] syzkaller0: entered allmulticast mode [ 105.141568][ T6446] netlink: 76 bytes leftover after parsing attributes in process `syz.0.133'. [ 105.169615][ T6446] syzkaller0: entered promiscuous mode [ 105.191322][ T6446] syzkaller0: entered allmulticast mode [ 105.226832][ T6427] infiniband syz0: set active [ 105.256410][ T6427] infiniband syz0: added bridge_slave_1 [ 105.345122][ T6451] tipc: Enabled bearer , priority 0 [ 105.355083][ T6427] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 105.360286][ T6427] infiniband syz0: Couldn't open port 1 [ 105.377160][ T6451] syzkaller0: entered promiscuous mode [ 105.392470][ T6451] syzkaller0: entered allmulticast mode [ 105.397431][ T6427] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 105.414676][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.436955][ T6427] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 105.447868][ T6451] tipc: Resetting bearer [ 105.460507][ T6427] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 105.484919][ T6455] tipc: Started in network mode [ 105.502149][ T6455] tipc: Node identity a6ab44280174, cluster identity 4711 [ 105.516208][ T6455] tipc: Enabled bearer , priority 0 [ 105.525288][ T6456] netlink: 'syz.0.136': attribute type 10 has an invalid length. [ 105.567048][ T6456] team0: Failed to send options change via netlink (err -105) [ 105.572117][ T6427] RDS/IB: syz0: added [ 105.580459][ T6456] team0: Port device dummy0 added [ 105.590233][ T6460] netlink: 'syz.0.136': attribute type 10 has an invalid length. [ 105.591442][ T6427] smc: adding ib device syz0 with port count 1 [ 105.602759][ T6457] syzkaller0: entered promiscuous mode [ 105.607340][ T6427] smc: ib device syz0 port 1 has no pnetid [ 105.612606][ T6457] syzkaller0: entered allmulticast mode [ 105.625263][ T6449] tipc: Resetting bearer [ 105.640033][ T6449] tipc: Disabling bearer [ 105.650169][ T6452] tipc: Resetting bearer [ 105.662763][ T6460] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 105.682346][ T6460] team0: Failed to send options change via netlink (err -105) [ 105.692116][ T6460] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 105.701456][ T6460] team0: Port device dummy0 removed [ 105.710884][ T6460] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 105.721678][ T6455] tipc: Resetting bearer [ 105.768652][ T6455] tipc: Disabling bearer [ 105.927046][ T6465] syzkaller0: entered promiscuous mode [ 105.934603][ T6465] syzkaller0: entered allmulticast mode [ 105.961375][ T6468] netlink: 'syz.0.140': attribute type 1 has an invalid length. [ 105.999134][ T6472] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.128582][ T6474] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 106.206544][ T6474] netlink: 28 bytes leftover after parsing attributes in process `syz.0.140'. [ 106.246457][ T6468] veth3: entered promiscuous mode [ 106.281849][ T6468] bond2: (slave veth3): Enslaving as a backup interface with a down link [ 106.294776][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.321729][ T6021] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 106.335567][ T6474] 8021q: adding VLAN 0 to HW filter on device bond2 [ 106.390422][ T6484] xt_hashlimit: size too large, truncated to 1048576 [ 106.462643][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.465467][ T6018] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 106.588790][ T6489] xt_hashlimit: size too large, truncated to 1048576 [ 106.921357][ T6482] syzkaller0: entered promiscuous mode [ 106.968090][ T6482] syzkaller0: entered allmulticast mode [ 107.548055][ T2171] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.562470][ T6504] netlink: 16 bytes leftover after parsing attributes in process `syz.3.150'. [ 107.593424][ T6504] netlink: 16 bytes leftover after parsing attributes in process `syz.3.150'. [ 107.608312][ T6500] tipc: Enabled bearer , priority 0 [ 107.619026][ T6504] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.630187][ T6500] syzkaller0: entered promiscuous mode [ 107.639793][ T6504] netlink: 40 bytes leftover after parsing attributes in process `syz.3.150'. [ 107.649011][ T6500] syzkaller0: entered allmulticast mode [ 107.670093][ T6502] syzkaller0: entered promiscuous mode [ 107.685931][ T6502] syzkaller0: entered allmulticast mode [ 107.711966][ T6500] tipc: Resetting bearer [ 107.793795][ T6499] tipc: Resetting bearer [ 107.811264][ T6499] tipc: Disabling bearer [ 107.864030][ T6510] syzkaller0: entered promiscuous mode [ 107.892842][ T6510] syzkaller0: entered allmulticast mode [ 107.934335][ T6510] tc action pedit offset must be on 32 bit boundaries [ 108.009827][ T6514] syzkaller0: entered promiscuous mode [ 108.015534][ T6514] syzkaller0: entered allmulticast mode [ 108.331417][ T6522] netlink: 24 bytes leftover after parsing attributes in process `syz.3.157'. [ 108.347959][ T6520] xt_hashlimit: size too large, truncated to 1048576 [ 108.863947][ T6533] syzkaller0: entered promiscuous mode [ 108.881992][ T6533] syzkaller0: entered allmulticast mode [ 109.076144][ T6541] nbd: nbd0 already in use [ 109.292926][ T6546] syzkaller0: entered promiscuous mode [ 109.305469][ T6546] syzkaller0: entered allmulticast mode [ 109.315442][ T6549] tipc: Enabled bearer , priority 0 [ 109.326579][ T6546] netlink: 28 bytes leftover after parsing attributes in process `syz.2.165'. [ 109.337255][ T6546] netlink: 28 bytes leftover after parsing attributes in process `syz.2.165'. [ 109.348424][ T6549] syzkaller0: entered promiscuous mode [ 109.357572][ T6549] syzkaller0: entered allmulticast mode [ 109.426260][ T6552] tipc: Resetting bearer [ 109.446999][ T6547] tipc: Resetting bearer [ 109.508850][ T6547] tipc: Disabling bearer [ 109.658723][ T2171] net_ratelimit: 6 callbacks suppressed [ 109.658740][ T2171] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.870905][ T6560] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 109.871930][ T808] IPVS: starting estimator thread 0... [ 109.995158][ T6566] IPVS: using max 29 ests per chain, 69600 per kthread [ 110.092119][ T6568] tipc: Failed to remove unknown binding: 66,0,0/0:4285296315/4285296317 [ 110.101832][ T6568] tipc: Failed to remove unknown binding: 66,0,0/0:4285296315/4285296316 [ 110.180658][ T6569] tipc: Failed to remove unknown binding: 66,0,0/0:4285296315/4285296317 [ 110.198209][ T6569] tipc: Failed to remove unknown binding: 66,0,0/0:4285296315/4285296316 [ 110.275022][ T6571] netlink: 84 bytes leftover after parsing attributes in process `syz.3.170'. [ 110.439854][ T6578] syzkaller0: entered promiscuous mode [ 110.449330][ T6578] syzkaller0: entered allmulticast mode [ 110.625392][ T6584] netlink: 'syz.3.176': attribute type 1 has an invalid length. [ 110.672195][ T6584] bond1: (slave bridge1): making interface the new active one [ 110.680446][ T6584] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 110.701778][ T2171] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.726486][ T6584] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 110.759491][ T6584] macvlan0: entered promiscuous mode [ 110.768520][ T6584] macvlan0: entered allmulticast mode [ 110.775396][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.775800][ T6584] bond1: entered promiscuous mode [ 110.789374][ T6584] bridge1: entered promiscuous mode [ 110.797630][ T6584] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 110.805407][ T6584] bond1: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 110.821622][ T6584] bond1: left promiscuous mode [ 110.827240][ T6584] bridge1: left promiscuous mode [ 111.010729][ T6594] syzkaller0: entered promiscuous mode [ 111.016461][ T6594] syzkaller0: entered allmulticast mode [ 111.737738][ T84] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.573933][ T6561] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 112.775150][ T2171] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.813520][ T6602] netlink: 28 bytes leftover after parsing attributes in process `syz.1.180'. [ 112.843008][ T6603] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input5 [ 112.854725][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.539101][ T6625] syzkaller0: entered promiscuous mode [ 113.544846][ T6625] syzkaller0: entered allmulticast mode [ 113.791410][ T6639] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 113.818117][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.826267][ T5742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.866556][ T2171] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.428305][ T1763] block nbd0: Connection timed out, retrying (0/2 alive) [ 115.442995][ T1763] block nbd0: Connection timed out, retrying (0/2 alive) [ 115.451567][ T1763] block nbd0: Connection timed out, retrying (0/2 alive) [ 115.459612][ T1763] block nbd0: Connection timed out, retrying (0/2 alive) [ 115.467175][ T1763] block nbd0: Dead connection, failed to find a fallback [ 115.475694][ T1763] block nbd0: shutting down sockets [ 115.483281][ T1763] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 115.497854][ T1763] Buffer I/O error on dev nbd0, logical block 3, async page read [ 115.506191][ T1763] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 115.515295][ T1763] Buffer I/O error on dev nbd0, logical block 2, async page read [ 115.523117][ T1763] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 115.532246][ T1763] Buffer I/O error on dev nbd0, logical block 1, async page read [ 115.540155][ T1763] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 115.550311][ T1763] Buffer I/O error on dev nbd0, logical block 0, async page read [ 115.560257][ T5641] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 115.570206][ T5641] Buffer I/O error on dev nbd0, logical block 0, async page read [ 115.583483][ T5641] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 115.592599][ T5641] Buffer I/O error on dev nbd0, logical block 1, async page read [ 115.600650][ T5641] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 115.609755][ T5641] Buffer I/O error on dev nbd0, logical block 2, async page read [ 115.618517][ T5641] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 115.627640][ T5641] Buffer I/O error on dev nbd0, logical block 3, async page read [ 115.635608][ T5641] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 115.646432][ T5641] Buffer I/O error on dev nbd0, logical block 0, async page read [ 115.654334][ T5641] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 115.665347][ T5641] Buffer I/O error on dev nbd0, logical block 1, async page read [ 115.678187][ T5641] ldm_validate_partition_table(): Disk read failed. [ 115.694470][ T5641] Dev nbd0: unable to read RDB block 0 [ 115.705615][ T5641] nbd0: unable to read partition table [ 115.735343][ T5641] ldm_validate_partition_table(): Disk read failed. [ 115.751153][ T5641] Dev nbd0: unable to read RDB block 0 [ 115.763924][ T5641] nbd0: unable to read partition table [ 115.899663][ T2171] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.081924][ T6648] tipc: Enabling of bearer rejected, failed to enable media [ 116.100673][ T6664] syzkaller1: entered promiscuous mode [ 116.122175][ T6664] syzkaller1: entered allmulticast mode [ 116.430668][ T6694] netlink: 24 bytes leftover after parsing attributes in process `syz.4.201'. [ 116.465720][ T6693] netlink: 'syz.1.200': attribute type 11 has an invalid length. [ 116.481218][ T6693] netlink: 199828 bytes leftover after parsing attributes in process `syz.1.200'. [ 116.577246][ T6703] netlink: 132 bytes leftover after parsing attributes in process `syz.3.204'. [ 116.614565][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.661902][ T6703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.854767][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.934817][ T84] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.987128][ T6720] netlink: 12 bytes leftover after parsing attributes in process `syz.1.206'. [ 117.005445][ T5632] Bluetooth: hci0: link tx timeout [ 117.011451][ T5632] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 117.023011][ T5632] Bluetooth: hci0: link tx timeout [ 117.029186][ T5632] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 117.037322][ T5632] Bluetooth: hci0: link tx timeout [ 117.042468][ T5632] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 117.051017][ T5632] Bluetooth: hci0: link tx timeout [ 117.056344][ T5632] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 117.064024][ T5632] Bluetooth: hci0: link tx timeout [ 117.069502][ T5632] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 117.077477][ T5632] Bluetooth: hci0: link tx timeout [ 117.083594][ T5632] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 117.092657][ T5632] Bluetooth: hci0: link tx timeout [ 117.098046][ T5632] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 117.442277][ T6748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.644247][ T6750] warning: `syz.3.207' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 117.905403][ T6765] tipc: Enabled bearer , priority 0 [ 117.975899][ T84] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.986102][ T2171] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.000780][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.009700][ T6750] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 118.034825][ T6759] syzkaller0: entered promiscuous mode [ 118.054222][ T6759] syzkaller0: entered allmulticast mode [ 118.087513][ T6765] tipc: Resetting bearer [ 118.104372][ T6756] netlink: 8 bytes leftover after parsing attributes in process `syz.1.208'. [ 118.163869][ T6754] syzkaller0: entered promiscuous mode [ 118.170539][ T6754] syzkaller0: entered allmulticast mode [ 118.179284][ T6758] tipc: Resetting bearer [ 118.211777][ T6758] tipc: Disabling bearer [ 118.552786][ T6775] syzkaller0: entered promiscuous mode [ 118.581729][ T6775] syzkaller0: entered allmulticast mode [ 119.094841][ T5632] Bluetooth: hci0: command 0x0406 tx timeout [ 120.056364][ T5734] net_ratelimit: 2 callbacks suppressed [ 120.056388][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.809556][ T6786] syzkaller0: entered promiscuous mode [ 120.815463][ T6786] syzkaller0: entered allmulticast mode [ 121.016447][ T5742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.096392][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.735082][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.938304][ T6848] netlink: 104 bytes leftover after parsing attributes in process `syz.4.221'. [ 122.138662][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.402366][ T6850] syzkaller0: entered promiscuous mode [ 122.424302][ T6850] syzkaller0: entered allmulticast mode [ 122.776907][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.174741][ T84] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.824533][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.992870][ T6860] syzkaller0: entered promiscuous mode [ 123.998539][ T6860] syzkaller0: entered allmulticast mode [ 124.028453][ T6870] tipc: Enabled bearer , priority 0 [ 124.038662][ T6859] tipc: Resetting bearer [ 124.056649][ T5742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.107960][ T6859] tipc: Disabling bearer [ 124.197955][ T6891] syzkaller0: entered promiscuous mode [ 124.211934][ T6891] syzkaller0: entered allmulticast mode [ 124.218760][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.232561][ T6892] netlink: 8 bytes leftover after parsing attributes in process `syz.1.228'. [ 124.363039][ T6897] netlink: 'syz.0.232': attribute type 1 has an invalid length. [ 124.486742][ T6897] 8021q: adding VLAN 0 to HW filter on device bond3 [ 124.539002][ T6901] bond3: (slave syz_tun): Enslaving as a backup interface with an up link [ 124.627964][ T6907] syzkaller0: entered promiscuous mode [ 124.633715][ T6907] syzkaller0: entered allmulticast mode [ 124.732843][ T6903] syzkaller0: entered promiscuous mode [ 124.743906][ T6903] syzkaller0: entered allmulticast mode [ 125.091832][ T6927] xt_hashlimit: size too large, truncated to 1048576 [ 125.258519][ T84] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.463901][ T6938] netlink: 'syz.3.239': attribute type 1 has an invalid length. [ 125.496038][ T6939] netlink: 32 bytes leftover after parsing attributes in process `syz.1.238'. [ 125.642950][ T6943] netlink: 'syz.4.241': attribute type 1 has an invalid length. [ 126.121744][ T6948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.298573][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.792703][ T6943] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 127.097213][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.122966][ T6957] syzkaller0: entered promiscuous mode [ 127.141746][ T6957] syzkaller0: entered allmulticast mode [ 127.172272][ T6961] netlink: 4 bytes leftover after parsing attributes in process `syz.2.243'. [ 127.184514][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.360377][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.610141][ T6969] syzkaller0: entered promiscuous mode [ 127.621923][ T6969] syzkaller0: entered allmulticast mode [ 128.222321][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.374884][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.256116][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.438669][ T2171] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.668737][ T7050] tipc: Enabled bearer , priority 0 [ 129.687511][ T7051] syzkaller0: entered promiscuous mode [ 129.716146][ T7051] syzkaller0: entered allmulticast mode [ 129.811278][ T7067] xt_hashlimit: size too large, truncated to 1048576 [ 129.862805][ T7051] tipc: Resetting bearer [ 129.894132][ T7048] tipc: Resetting bearer [ 129.950562][ T7048] tipc: Disabling bearer [ 130.100773][ T7078] syzkaller0: entered promiscuous mode [ 130.125800][ T7078] syzkaller0: entered allmulticast mode [ 130.294488][ C0] net_ratelimit: 1 callbacks suppressed [ 130.294505][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.393183][ T7088] tipc: Enabled bearer , priority 0 [ 130.418016][ T7088] syzkaller0: entered promiscuous mode [ 130.439796][ T7088] syzkaller0: entered allmulticast mode [ 130.455587][ T5817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.503073][ T7089] netlink: 32 bytes leftover after parsing attributes in process `syz.3.261'. [ 130.535316][ T7088] tipc: Resetting bearer [ 130.559209][ T7086] tipc: Resetting bearer [ 130.617112][ T7086] tipc: Disabling bearer [ 131.334487][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.495501][ T5817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.809233][ T7149] tipc: Enabled bearer , priority 0 [ 131.897862][ T7143] bond2 (unregistering): Released all slaves [ 132.045740][ T7149] syzkaller0: entered promiscuous mode [ 132.051326][ T7149] syzkaller0: entered allmulticast mode [ 132.122329][ T7162] xt_hashlimit: size too large, truncated to 1048576 [ 132.178243][ T7161] tipc: Resetting bearer [ 132.186494][ T7166] syzkaller0: entered promiscuous mode [ 132.199405][ T7166] syzkaller0: entered allmulticast mode [ 132.262141][ T7148] tipc: Resetting bearer [ 132.329353][ T7148] tipc: Disabling bearer [ 132.333172][ T7171] netlink: 12 bytes leftover after parsing attributes in process `syz.3.275'. [ 132.535984][ T5817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.587623][ T7180] tipc: Enabled bearer , priority 0 [ 132.667360][ T7180] syzkaller0: entered promiscuous mode [ 132.677138][ T7180] syzkaller0: entered allmulticast mode [ 132.699677][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.734889][ T7180] tipc: Resetting bearer [ 132.747322][ T7186] tipc: Enabled bearer , priority 0 [ 132.763384][ T7179] tipc: Resetting bearer [ 132.797119][ T7179] tipc: Disabling bearer [ 132.818486][ T7186] syzkaller0: entered promiscuous mode [ 132.832127][ T7186] syzkaller0: entered allmulticast mode [ 132.892524][ T7186] tipc: Resetting bearer [ 132.947959][ T7185] tipc: Resetting bearer [ 132.980433][ T7198] netlink: 12 bytes leftover after parsing attributes in process `syz.3.280'. [ 133.027510][ T7185] tipc: Disabling bearer [ 133.068049][ T7198] netlink: 2 bytes leftover after parsing attributes in process `syz.3.280'. [ 133.175286][ T5819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.297981][ T7211] syzkaller0: entered promiscuous mode [ 133.341846][ T7211] syzkaller0: entered allmulticast mode [ 133.581821][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.596995][ T7227] netlink: 104 bytes leftover after parsing attributes in process `syz.3.284'. [ 133.688058][ T7233] netlink: 'syz.0.288': attribute type 7 has an invalid length. [ 133.713649][ T7230] tipc: Enabled bearer , priority 0 [ 133.736067][ T7230] syzkaller0: entered promiscuous mode [ 133.752154][ T7230] syzkaller0: entered allmulticast mode [ 134.268389][ T7229] tipc: Resetting bearer [ 134.380759][ T7229] tipc: Disabling bearer [ 134.430345][ T7277] xt_hashlimit: size too large, truncated to 1048576 [ 134.500539][ T7280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.588228][ T7282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.617300][ T5630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.690460][ T7239] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.777710][ T7263] syzkaller0: entered promiscuous mode [ 134.791965][ T7263] syzkaller0: entered allmulticast mode [ 134.858112][ T7265] syzkaller0: entered promiscuous mode [ 134.863622][ T7265] syzkaller0: entered allmulticast mode [ 135.659811][ T5735] net_ratelimit: 6 callbacks suppressed [ 135.659828][ T5735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.224978][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.279931][ T7290] tipc: Enabling of bearer rejected, failed to enable media [ 136.312266][ T7239] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.468873][ T7239] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.537075][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.548154][ T5742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.570167][ T7315] syzkaller0: entered promiscuous mode [ 136.575330][ T7319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.590559][ T7315] syzkaller0: entered allmulticast mode [ 136.602971][ T7319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.626544][ T7319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.638790][ T7320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.652478][ T7319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.664006][ T7319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.687594][ T7239] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.952393][ T6013] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.999563][ T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.009643][ T7331] syzkaller0: entered promiscuous mode [ 137.019776][ T7331] syzkaller0: entered allmulticast mode [ 137.135445][ T7338] netlink: 'syz.4.302': attribute type 13 has an invalid length. [ 137.143230][ T7338] netlink: 48 bytes leftover after parsing attributes in process `syz.4.302'. [ 137.782371][ T157] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.905674][ T6011] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.930816][ T7340] syzkaller0: entered promiscuous mode [ 137.947977][ T7340] syzkaller0: entered allmulticast mode [ 138.096005][ T7345] syzkaller0: entered promiscuous mode [ 138.101810][ T7345] syzkaller0: entered allmulticast mode [ 138.146777][ T7347] ip6t_srh: unknown srh match flags 4000 [ 138.291325][ T7346] syzkaller0: entered promiscuous mode [ 138.300439][ T7346] syzkaller0: entered allmulticast mode [ 138.474341][ T7354] tipc: Enabled bearer , priority 0 [ 138.490763][ T7356] syzkaller0: entered promiscuous mode [ 138.507032][ T7356] syzkaller0: entered allmulticast mode [ 138.580205][ T7354] tipc: Resetting bearer [ 138.602950][ T7353] tipc: Resetting bearer [ 138.630193][ T7353] tipc: Disabling bearer [ 138.681983][ T7367] syzkaller0: entered promiscuous mode [ 138.688451][ T7367] syzkaller0: entered allmulticast mode [ 138.833430][ T7369] syzkaller0: entered promiscuous mode [ 138.847305][ T7369] syzkaller0: entered allmulticast mode [ 139.353838][ T7393] syzkaller0: entered promiscuous mode [ 139.363124][ T7393] syzkaller0: entered allmulticast mode [ 139.566414][ T7398] tipc: Enabled bearer , priority 0 [ 139.573695][ T7398] syzkaller0: entered promiscuous mode [ 139.579828][ T7398] syzkaller0: entered allmulticast mode [ 139.594320][ T7398] tipc: Resetting bearer [ 139.601228][ T7397] tipc: Resetting bearer [ 139.618508][ T7397] tipc: Disabling bearer [ 139.806156][ T7403] syzkaller0: entered promiscuous mode [ 139.826378][ T7403] syzkaller0: entered allmulticast mode [ 140.011804][ T7412] syzkaller0: entered promiscuous mode [ 140.017492][ T7412] syzkaller0: entered allmulticast mode [ 140.128360][ T7417] tipc: Enabled bearer , priority 0 [ 140.138090][ T7417] syzkaller0: entered promiscuous mode [ 140.143612][ T7417] syzkaller0: entered allmulticast mode [ 140.176952][ T7417] tipc: Resetting bearer [ 140.196905][ T7416] tipc: Resetting bearer [ 140.236192][ T7416] tipc: Disabling bearer [ 140.252319][ T7414] netlink: 32 bytes leftover after parsing attributes in process `syz.4.321'. [ 140.541600][ T7433] netlink: 12 bytes leftover after parsing attributes in process `syz.4.328'. [ 140.628676][ T5642] block nbd1: Receive control failed (result -1) [ 140.640092][ T5642] [ 140.642436][ T5642] ====================================================== [ 140.649451][ T5642] WARNING: possible circular locking dependency detected [ 140.656486][ T5642] syzkaller #0 Not tainted [ 140.660898][ T5642] ------------------------------------------------------ [ 140.667899][ T5642] kworker/u9:8/5642 is trying to acquire lock: [ 140.674034][ T5642] ffff88803326e0e0 (sk_lock-AF_INET6){+.+.}-{0:0}, at: inet_shutdown+0x6a/0x390 [ 140.683088][ T5642] [ 140.683088][ T5642] but task is already holding lock: [ 140.690429][ T5642] ffff888072ef7a68 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x1c19/0x1d40 [ 140.699293][ T5642] [ 140.699293][ T5642] which lock already depends on the new lock. [ 140.699293][ T5642] [ 140.709680][ T5642] [ 140.709680][ T5642] the existing dependency chain (in reverse order) is: [ 140.718673][ T5642] [ 140.718673][ T5642] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 140.726302][ T5642] __mutex_lock+0x1a3/0x1550 [ 140.731402][ T5642] nbd_queue_rq+0x37b/0x1100 [ 140.736493][ T5642] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 140.742548][ T5642] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 140.749385][ T5642] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 140.755872][ T5642] blk_mq_run_hw_queue+0x348/0x4f0 [ 140.761491][ T5642] blk_mq_dispatch_list+0xd16/0xe10 [ 140.767197][ T5642] blk_mq_flush_plug_list+0x48d/0x570 [ 140.773077][ T5642] __blk_flush_plug+0x3ed/0x4d0 [ 140.778444][ T5642] __submit_bio+0x28d/0x580 [ 140.783450][ T5642] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 140.789597][ T5642] block_read_full_folio+0x599/0x830 [ 140.795392][ T5642] filemap_read_folio+0x137/0x3b0 [ 140.800922][ T5642] do_read_cache_folio+0x358/0x590 [ 140.806543][ T5642] read_part_sector+0xb6/0x2b0 [ 140.811812][ T5642] adfspart_check_ICS+0xb1/0x960 [ 140.817257][ T5642] bdev_disk_changed+0x817/0x1770 [ 140.822786][ T5642] blkdev_get_whole+0x380/0x510 [ 140.828146][ T5642] bdev_open+0x31e/0xd30 [ 140.832897][ T5642] blkdev_open+0x470/0x610 [ 140.837810][ T5642] do_dentry_open+0x785/0x14e0 [ 140.843078][ T5642] vfs_open+0x3b/0x340 [ 140.847657][ T5642] path_openat+0x2e08/0x3860 [ 140.852768][ T5642] do_file_open+0x23e/0x4a0 [ 140.857779][ T5642] do_sys_openat2+0x113/0x200 [ 140.862962][ T5642] __x64_sys_openat+0x138/0x170 [ 140.868318][ T5642] do_syscall_64+0x15f/0xf80 [ 140.873422][ T5642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.879817][ T5642] [ 140.879817][ T5642] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 140.887013][ T5642] __mutex_lock+0x1a3/0x1550 [ 140.892105][ T5642] nbd_queue_rq+0xc6/0x1100 [ 140.897110][ T5642] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 140.903167][ T5642] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 140.910003][ T5642] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 140.916521][ T5642] blk_mq_run_hw_queue+0x348/0x4f0 [ 140.922137][ T5642] blk_mq_dispatch_list+0xd16/0xe10 [ 140.927861][ T5642] blk_mq_flush_plug_list+0x48d/0x570 [ 140.933740][ T5642] __blk_flush_plug+0x3ed/0x4d0 [ 140.939099][ T5642] __submit_bio+0x28d/0x580 [ 140.944109][ T5642] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 140.950248][ T5642] block_read_full_folio+0x599/0x830 [ 140.956034][ T5642] filemap_read_folio+0x137/0x3b0 [ 140.961566][ T5642] do_read_cache_folio+0x358/0x590 [ 140.967181][ T5642] read_part_sector+0xb6/0x2b0 [ 140.972476][ T5642] adfspart_check_ICS+0xb1/0x960 [ 140.977938][ T5642] bdev_disk_changed+0x817/0x1770 [ 140.983480][ T5642] blkdev_get_whole+0x380/0x510 [ 140.988844][ T5642] bdev_open+0x31e/0xd30 [ 140.993598][ T5642] blkdev_open+0x470/0x610 [ 140.998517][ T5642] do_dentry_open+0x785/0x14e0 [ 141.003798][ T5642] vfs_open+0x3b/0x340 [ 141.008391][ T5642] path_openat+0x2e08/0x3860 [ 141.013502][ T5642] do_file_open+0x23e/0x4a0 [ 141.018611][ T5642] do_sys_openat2+0x113/0x200 [ 141.023814][ T5642] __x64_sys_openat+0x138/0x170 [ 141.029190][ T5642] do_syscall_64+0x15f/0xf80 [ 141.034295][ T5642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.040702][ T5642] [ 141.040702][ T5642] -> #4 (set->srcu){.+.+}-{0:0}: [ 141.047819][ T5642] __synchronize_srcu+0xca/0x300 [ 141.053265][ T5642] elevator_switch+0x1e8/0x7a0 [ 141.058538][ T5642] elevator_change+0x2cc/0x450 [ 141.063809][ T5642] elevator_set_default+0x36c/0x430 [ 141.069514][ T5642] blk_register_queue+0x3e9/0x4e0 [ 141.075044][ T5642] __add_disk+0x677/0xd50 [ 141.079878][ T5642] add_disk_fwnode+0xfb/0x480 [ 141.085058][ T5642] nbd_dev_add+0x72c/0xb50 [ 141.089977][ T5642] nbd_init+0x168/0x1f0 [ 141.094635][ T5642] do_one_initcall+0x250/0x870 [ 141.099908][ T5642] do_initcall_level+0x104/0x190 [ 141.105355][ T5642] do_initcalls+0x59/0xa0 [ 141.110190][ T5642] kernel_init_freeable+0x2a6/0x3e0 [ 141.115894][ T5642] kernel_init+0x1d/0x1d0 [ 141.120728][ T5642] ret_from_fork+0x514/0xb70 [ 141.125822][ T5642] ret_from_fork_asm+0x1a/0x30 [ 141.131088][ T5642] [ 141.131088][ T5642] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 141.138886][ T5642] __mutex_lock+0x1a3/0x1550 [ 141.143979][ T5642] elevator_change+0x1b3/0x450 [ 141.149247][ T5642] elevator_set_none+0xb5/0x140 [ 141.154603][ T5642] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 141.160911][ T5642] nbd_start_device+0x17f/0xb10 [ 141.166266][ T5642] nbd_genl_connect+0x165b/0x1cf0 [ 141.171790][ T5642] genl_family_rcv_msg_doit+0x22a/0x330 [ 141.177837][ T5642] genl_rcv_msg+0x61c/0x7a0 [ 141.182843][ T5642] netlink_rcv_skb+0x232/0x4b0 [ 141.188113][ T5642] genl_rcv+0x28/0x40 [ 141.192592][ T5642] netlink_unicast+0x75c/0x8e0 [ 141.197856][ T5642] netlink_sendmsg+0x813/0xb40 [ 141.203136][ T5642] ____sys_sendmsg+0x972/0x9f0 [ 141.208411][ T5642] ___sys_sendmsg+0x2a5/0x360 [ 141.213600][ T5642] __x64_sys_sendmsg+0x1bd/0x2a0 [ 141.219045][ T5642] do_syscall_64+0x15f/0xf80 [ 141.224134][ T5642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.230528][ T5642] [ 141.230528][ T5642] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 141.239120][ T5642] blk_alloc_queue+0x546/0x680 [ 141.244406][ T5642] __blk_mq_alloc_disk+0x197/0x390 [ 141.250021][ T5642] nbd_dev_add+0x499/0xb50 [ 141.254939][ T5642] nbd_init+0x168/0x1f0 [ 141.259601][ T5642] do_one_initcall+0x250/0x870 [ 141.264869][ T5642] do_initcall_level+0x104/0x190 [ 141.270322][ T5642] do_initcalls+0x59/0xa0 [ 141.275157][ T5642] kernel_init_freeable+0x2a6/0x3e0 [ 141.280861][ T5642] kernel_init+0x1d/0x1d0 [ 141.285692][ T5642] ret_from_fork+0x514/0xb70 [ 141.290784][ T5642] ret_from_fork_asm+0x1a/0x30 [ 141.296053][ T5642] [ 141.296053][ T5642] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 141.303253][ T5642] fs_reclaim_acquire+0x71/0x100 [ 141.308701][ T5642] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 141.315013][ T5642] __alloc_skb+0x1d0/0x7d0 [ 141.319935][ T5642] __ip6_append_data+0x2d3c/0x3f60 [ 141.325555][ T5642] ip6_append_data+0x10f/0x280 [ 141.330825][ T5642] rawv6_sendmsg+0x12d3/0x18e0 [ 141.336090][ T5642] ____sys_sendmsg+0x80a/0x9f0 [ 141.341365][ T5642] ___sys_sendmsg+0x2a5/0x360 [ 141.346551][ T5642] __x64_sys_sendmsg+0x1bd/0x2a0 [ 141.351994][ T5642] do_syscall_64+0x15f/0xf80 [ 141.357085][ T5642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.363479][ T5642] [ 141.363479][ T5642] -> #0 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 141.371196][ T5642] __lock_acquire+0x15a5/0x2cf0 [ 141.376552][ T5642] lock_acquire+0x106/0x350 [ 141.381555][ T5642] lock_sock_nested+0x41/0x100 [ 141.386820][ T5642] inet_shutdown+0x6a/0x390 [ 141.391823][ T5642] nbd_mark_nsock_dead+0x2e9/0x560 [ 141.397433][ T5642] recv_work+0x1c2e/0x1d40 [ 141.402351][ T5642] process_scheduled_works+0xb5d/0x1860 [ 141.408401][ T5642] worker_thread+0xa53/0xfc0 [ 141.413493][ T5642] kthread+0x388/0x470 [ 141.418064][ T5642] ret_from_fork+0x514/0xb70 [ 141.423155][ T5642] ret_from_fork_asm+0x1a/0x30 [ 141.428426][ T5642] [ 141.428426][ T5642] other info that might help us debug this: [ 141.428426][ T5642] [ 141.438632][ T5642] Chain exists of: [ 141.438632][ T5642] sk_lock-AF_INET6 --> &cmd->lock --> &nsock->tx_lock [ 141.438632][ T5642] [ 141.451302][ T5642] Possible unsafe locking scenario: [ 141.451302][ T5642] [ 141.458729][ T5642] CPU0 CPU1 [ 141.464073][ T5642] ---- ---- [ 141.469417][ T5642] lock(&nsock->tx_lock); [ 141.473816][ T5642] lock(&cmd->lock); [ 141.480296][ T5642] lock(&nsock->tx_lock); [ 141.487211][ T5642] lock(sk_lock-AF_INET6); [ 141.491695][ T5642] [ 141.491695][ T5642] *** DEADLOCK *** [ 141.491695][ T5642] [ 141.499812][ T5642] 3 locks held by kworker/u9:8/5642: [ 141.505074][ T5642] #0: ffff888027a57140 ((wq_completion)nbd1-recv){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 141.516282][ T5642] #1: ffffc90003ddfc40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 141.528007][ T5642] #2: ffff888072ef7a68 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x1c19/0x1d40 [ 141.537300][ T5642] [ 141.537300][ T5642] stack backtrace: [ 141.543183][ T5642] CPU: 0 UID: 0 PID: 5642 Comm: kworker/u9:8 Not tainted syzkaller #0 PREEMPT(full) [ 141.543200][ T5642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 141.543210][ T5642] Workqueue: nbd1-recv recv_work [ 141.543233][ T5642] Call Trace: [ 141.543244][ T5642] [ 141.543250][ T5642] dump_stack_lvl+0xe8/0x150 [ 141.543267][ T5642] print_circular_bug+0x2e1/0x300 [ 141.543286][ T5642] check_noncircular+0x12e/0x150 [ 141.543306][ T5642] __lock_acquire+0x15a5/0x2cf0 [ 141.543325][ T5642] ? irqentry_exit+0x218/0x730 [ 141.543338][ T5642] ? lockdep_hardirqs_on+0x7a/0x110 [ 141.543359][ T5642] ? inet_shutdown+0x6a/0x390 [ 141.543373][ T5642] lock_acquire+0x106/0x350 [ 141.543391][ T5642] ? inet_shutdown+0x6a/0x390 [ 141.543409][ T5642] lock_sock_nested+0x41/0x100 [ 141.543426][ T5642] ? inet_shutdown+0x6a/0x390 [ 141.543440][ T5642] inet_shutdown+0x6a/0x390 [ 141.543454][ T5642] nbd_mark_nsock_dead+0x2e9/0x560 [ 141.543471][ T5642] recv_work+0x1c2e/0x1d40 [ 141.543490][ T5642] ? lockdep_unlock+0x5d/0xd0 [ 141.543509][ T5642] ? __pfx_recv_work+0x10/0x10 [ 141.543527][ T5642] ? process_scheduled_works+0xa70/0x1860 [ 141.543544][ T5642] ? lock_acquire+0x221/0x350 [ 141.543558][ T5642] ? process_scheduled_works+0xa70/0x1860 [ 141.543571][ T5642] ? process_scheduled_works+0xa70/0x1860 [ 141.543585][ T5642] process_scheduled_works+0xb5d/0x1860 [ 141.543611][ T5642] ? __pfx_process_scheduled_works+0x10/0x10 [ 141.543627][ T5642] ? assign_work+0x3d5/0x5e0 [ 141.543641][ T5642] worker_thread+0xa53/0xfc0 [ 141.543663][ T5642] kthread+0x388/0x470 [ 141.543680][ T5642] ? __pfx_worker_thread+0x10/0x10 [ 141.543693][ T5642] ? __pfx_kthread+0x10/0x10 [ 141.543709][ T5642] ret_from_fork+0x514/0xb70 [ 141.543725][ T5642] ? __pfx_ret_from_fork+0x10/0x10 [ 141.543738][ T5642] ? __switch_to+0xc79/0x1410 [ 141.543758][ T5642] ? __pfx_kthread+0x10/0x10 [ 141.543775][ T5642] ret_from_fork_asm+0x1a/0x30 [ 141.543796][ T5642] [ 141.732673][ C0] net_ratelimit: 10 callbacks suppressed [ 141.732689][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.779874][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.819770][ T7437] netlink: 12 bytes leftover after parsing attributes in process `syz.3.329'. [ 141.847885][ T7437] ieee80211 phy17: Selected rate control algorithm 'minstrel_ht' [ 141.867714][ T7448] syzkaller0: entered promiscuous mode [ 141.875361][ T7448] syzkaller0: entered allmulticast mode [ 142.614621][ T5742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.784537][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.855263][ T5630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.814600][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.895737][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.854707][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.944658][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.654670][ T5742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.776113][ T24] net_ratelimit: 2 callbacks suppressed [ 146.776126][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.015823][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.415428][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.055422][ T5630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.454492][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.094780][ T5735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.504549][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.814600][ T5742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.134844][ T5735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.534606][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog