last executing test programs: 50.180803562s ago: executing program 3 (id=516): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x40001f9, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f00000004c0)={0x3, &(0x7f0000000040)=[{0x50, 0x0, 0x0, 0x8ed}, {0x20, 0x7f, 0x2, 0xfffff034}, {0x6, 0xfc, 0x4, 0x23a8}]}, 0x10) write$binfmt_aout(r3, &(0x7f0000000000)=ANY=[], 0xfdef) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace(0x4207, r5) syz_clone3(&(0x7f0000000400)={0x4008000, 0x0, 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, 0x0}, 0x58) flock(0xffffffffffffffff, 0x4) r6 = syz_clone(0x0, 0x0, 0xfffffffffffffd00, 0x0, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r7, 0x0, 0x0) ptrace(0x4208, r6) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 40.295697086s ago: executing program 3 (id=532): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00008100ffffffffffffaaaaaaaaaa3f08004500002040810000062f90030001012300000000a001880b"], 0x32) 34.435639408s ago: executing program 3 (id=546): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0xfc, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}, [@mark={0xc, 0x15, {0x35075a, 0x3}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=@newsa={0x138, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@remote, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x27}, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x2, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0x40}, 0x70bd2a, 0x3503, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 31.255591924s ago: executing program 3 (id=550): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r4 = socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4e90}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r4, &(0x7f0000000700)={&(0x7f0000000680)=@xdp={0x2c, 0x7, r3, 0x3c}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) 30.321895936s ago: executing program 3 (id=556): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00008100ffffffffffffaaaaaaaaaa3f08004500002040810000062f90030001012300000000a001880b"], 0x32) 29.609269707s ago: executing program 3 (id=559): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) add_key$keyring(&(0x7f0000000280), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@volatile={0x0, 0x0, 0x0, 0x2}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x28}, 0x28) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r3, 0x1) r4 = socket$pppl2tp(0x18, 0x1, 0x1) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$PPPIOCGL2TPSTATS(r4, 0x80487436, &(0x7f0000000540)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f1, &(0x7f0000010640)={'tunl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x29, 0x5, 0x0, 0x4, 0x7, 0x0, 0x3, 0x28, 0x0, 0xfc, 0x3, 0x9, 0x4, 0xff, 0x0, 0x45}}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="7dd5e4f906f615b3e1ed3f3a583f61875487362012c46150f4b22d40fba6b7565e8f622f2ce38bc2a4a9772f4b86fe43877ecd90c762b26bea93e9681c4957c00b08363f0253d05731fad23e6ef88ee9fc2bada86c632a80642b390406b82283f0e6b13b84f123557a6e91c99628f6", @ANYRES16, @ANYBLOB="10002abd7000ffdbdf2512000000"], 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x800) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x9, 0x8, 0x8, 0x90, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x1, 0x2}, 0x48) 14.140712805s ago: executing program 32 (id=559): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) add_key$keyring(&(0x7f0000000280), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@volatile={0x0, 0x0, 0x0, 0x2}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x28}, 0x28) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r3, 0x1) r4 = socket$pppl2tp(0x18, 0x1, 0x1) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$PPPIOCGL2TPSTATS(r4, 0x80487436, &(0x7f0000000540)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f1, &(0x7f0000010640)={'tunl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x29, 0x5, 0x0, 0x4, 0x7, 0x0, 0x3, 0x28, 0x0, 0xfc, 0x3, 0x9, 0x4, 0xff, 0x0, 0x45}}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="7dd5e4f906f615b3e1ed3f3a583f61875487362012c46150f4b22d40fba6b7565e8f622f2ce38bc2a4a9772f4b86fe43877ecd90c762b26bea93e9681c4957c00b08363f0253d05731fad23e6ef88ee9fc2bada86c632a80642b390406b82283f0e6b13b84f123557a6e91c99628f6", @ANYRES16, @ANYBLOB="10002abd7000ffdbdf2512000000"], 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x800) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x9, 0x8, 0x8, 0x90, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x1, 0x2}, 0x48) 7.86413799s ago: executing program 0 (id=608): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$describe(0x6, r1, &(0x7f00000003c0)=""/118, 0x76) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@volatile={0x0, 0x0, 0x0, 0x2}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x28}, 0x28) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x80) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) fremovexattr(r3, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r4, 0x1) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$PPPIOCGL2TPSTATS(r5, 0x80487436, &(0x7f0000000540)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x89f1, &(0x7f0000010640)={'tunl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x29, 0x5, 0x0, 0x4, 0x7, 0x0, 0x3, 0x28, 0x0, 0xfc, 0x3, 0x9, 0x4, 0xff, 0x0, 0x45}}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="7dd5e4f906f615b3e1ed3f3a583f61875487362012c46150f4b22d40fba6b7565e8f622f2ce38bc2a4a9772f4b86fe43877ecd90c762b26bea93e9681c4957c00b08363f0253d05731fad23e6ef88ee9fc2bada86c632a80642b390406b82283f0e6b13b84f123557a6e91c99628f6", @ANYRES16, @ANYBLOB="10002abd7000ffdbdf2512000000"], 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x800) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x9, 0x8, 0x8, 0x90, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x1, 0x2}, 0x48) 7.856443927s ago: executing program 2 (id=609): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@mcast2, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x1, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@private=0xa010101, 0x0, 0x3c}, 0x0, @in6=@loopback, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB="bc00000021000100ffffffff00000000fc020000000000000000000000000001fe80000000000000008000000000003a00000000000000000a0000202e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000500011000a0101010000000000000000000000007f0000010000000000000000000000007f00000100"/64], 0xbc}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 6.990650565s ago: executing program 2 (id=611): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xfff1, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4e90}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000680)=@xdp={0x2c, 0x7, r3, 0x3c}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) 6.841123173s ago: executing program 4 (id=613): r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {0xf}, {0xffff, 0xffff}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x3, 0x1, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4005c}, 0x0) 6.544069411s ago: executing program 0 (id=614): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16, @ANYBLOB="01002ebd7000fddbdf252000000008000300", @ANYRES32=r2, @ANYBLOB="3c002d80080003000900000008000200030000000500040001000000050001"], 0x58}, 0x1, 0x0, 0x0, 0x4000004}, 0x20004000) 6.084900007s ago: executing program 1 (id=615): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', &(0x7f0000000440), 0x1000) ptrace$setregset(0x4205, r0, 0x200, &(0x7f0000000080)={&(0x7f0000000380)="9d6c565cdd807ddf4d9276d8e556d657b1e54d69290a51d300f8ed72d84d4a7bffcbdc2b9e9d814275d5e0e455250261e84a6bc7d6806e1aa6ad89eb773d9d87edfdd734a055d5bc618e92217de0ae070b769d5cb56588b8707665883ca52739b56917", 0x63}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x8}}, 0x240440c0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x0, 0xe, 0x0, 0x0, 0xfffffffd, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc, 0x60000002}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x0, @loopback}}]}, 0x70}, 0x1, 0x7}, 0x0) 5.929340937s ago: executing program 4 (id=616): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="18020000661c00000000000003000000850000001700000085000000d000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f00000003c0)="6f11ba816056a1827a33ae059cf3", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x6}, 0x50) 5.821927179s ago: executing program 0 (id=617): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r0, 0xc0205866, &(0x7f00000001c0)={&(0x7f0000000140)=0x7fffffffffffffff, 0x3, &(0x7f0000000300)=[{}], &(0x7f0000000180)}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x3fff, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x4}, {0xffff, 0xffff}, {0xfff1, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0xdc}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r3, {0xffff}, {}, {0x2, 0x6}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x81, '\x00', 0xfffff000, 0x2f, 0x3, 0x581}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x40054) 4.935073766s ago: executing program 4 (id=618): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000680), 0x9) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x9, 0x3, 0x2a0, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x1d0, 0xffffffff, 0xffffffff, 0x1d0, 0xffffffff, 0x3, &(0x7f0000000240), {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @loopback, [0xffffffff, 0xffffffff, 0xffffff00, 0xff000000], [0xffffffff, 0xffffffff, 0xff000000, 0xff], 'nicvf0\x00', 'batadv0\x00', {0xff}, {0xff}, 0xc, 0xb, 0x0, 0x30}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@icmp6={{0x28}, {0x1b, 'c$', 0x1}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@loopback, @loopback, [0x0, 0xffffffff, 0xffffff00, 0xff], [0xff, 0xff], 'dvmrp1\x00', 'ip6gretap0\x00', {}, {}, 0x2e, 0x9, 0x4, 0x13}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x0, 0x2}, {0x2, 0x1, 0x5}, {0x4, 0x1, 0x6}, 0x3, 0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x300) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r3 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) close(r6) r7 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r7, 0x0, 0x4000811) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r8, 0x0, 0x80, 0x8) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) socket$nl_route(0x10, 0x3, 0x0) 4.636111841s ago: executing program 1 (id=619): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20004005) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000022c0)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0x2, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x3ff, 0x5, 0x6, 0x3, 0x6, 0xfffffffe, 0x4, 0x5, 0x80000001, 0x5, 0x7, 0x8, 0x4, 0x6, 0x300, 0x6, 0x2, 0x3, 0x1ff, 0x3, 0x5, 0x3a7, 0x6, 0x6, 0xeea, 0x4, 0x4, 0x9, 0x9, 0x7, 0x0, 0x3fca, 0x62e6, 0x3, 0x4, 0x8, 0x2e2, 0x400, 0x6, 0x3, 0x9, 0xffffffff, 0x7f, 0xd, 0x1, 0x4, 0x7f, 0x9, 0x0, 0x0, 0x5a4, 0x101, 0x3, 0x3, 0xeb, 0x2, 0x8, 0x7, 0xffff8000, 0x0, 0x5, 0x8, 0x6, 0xb2, 0xca0e, 0x5, 0x200, 0x9, 0x1, 0x6, 0xffffffff, 0x3, 0x80, 0x6, 0x1b0, 0x2, 0x6, 0x8, 0xfffffffc, 0x3ad, 0x47d1, 0x4, 0x1, 0xf, 0x189, 0x9, 0x3, 0x3, 0x5, 0x4, 0x0, 0x2, 0x5, 0x2, 0x1, 0x6b3, 0x3, 0x4, 0x8, 0xffff8001, 0x3, 0x81, 0x7, 0xcb0a, 0xe51, 0x6, 0x8000, 0x5, 0x9, 0x8c73, 0x1, 0x81, 0x800, 0xffffffff, 0x10000, 0x8, 0x7fffffff, 0x3, 0x80, 0x6, 0xffffffa5, 0x1, 0x4f23dcfd, 0x0, 0xfd, 0x65, 0x9, 0x1ff, 0x101, 0x3, 0x0, 0xb, 0x80, 0x3, 0x7f, 0x9, 0xfffffff8, 0x1ff, 0x8000, 0xa, 0x8, 0x2, 0x1, 0x5, 0x3, 0x0, 0x1, 0x4, 0x200000, 0x10000000, 0xffffffff, 0xe, 0x2, 0x2bf4, 0x1d50, 0x9, 0x400, 0x4, 0x1, 0x7, 0x1000, 0x5af7, 0x6, 0x40, 0x5, 0x44, 0x15dbc6d1, 0xfd, 0x7fffffff, 0x0, 0x2, 0x6, 0x2, 0x10000, 0x0, 0x6, 0x1000, 0xe314, 0x5, 0x9, 0xffffff45, 0x2, 0x3f, 0xffffffff, 0x5, 0x7, 0x4, 0xd7, 0xe, 0x6, 0x9, 0x0, 0x7, 0x8, 0x9, 0x53e90d17, 0x2, 0x80, 0x8d4, 0x7, 0xf5, 0x8000, 0xbb6, 0x0, 0x10001, 0xd7, 0x4, 0x0, 0x7, 0x0, 0x0, 0x60, 0x0, 0x0, 0x4, 0x3, 0x8, 0xf9a0, 0x0, 0xd48, 0xf24, 0x1, 0x1, 0x6, 0x8, 0x2, 0x7, 0x22e, 0x6f4, 0x5, 0xfffffff9, 0x9, 0x3ff, 0xd91, 0x5, 0x1, 0x40, 0x9, 0xcd, 0xfffffffa, 0x2, 0x6, 0x6, 0x10, 0x2, 0x4, 0xffffff00, 0x6223, 0x7, 0x100, 0x9, 0x0, 0x6, 0x2, 0x3]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.270184167s ago: executing program 2 (id=620): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@mcast2, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x1, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@private=0xa010101, 0x0, 0x3c}, 0x0, @in6=@loopback, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB="bc00000021000100ffffffff00000000fc020000000000000000000000000001fe80000000000000008000000000003a00000000000000000a0000202e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000500011000a0101010000000000000000000000007f0000010000000000000000000000007f00000100"/64], 0xbc}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 3.929801193s ago: executing program 0 (id=621): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x38, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_USERDATA={0x6, 0xd, 0x1, 0x0, "63ef"}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5, 0x84}}}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x20050800) 3.714676263s ago: executing program 2 (id=622): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(r0, 0x0, 0x20004000) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmmsg(r1, 0x0, 0x0, 0x20008000) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r3, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r4, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) 3.641158869s ago: executing program 0 (id=623): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$describe(0x6, r3, &(0x7f00000003c0)=""/118, 0x76) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@volatile={0x0, 0x0, 0x0, 0x2}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x28}, 0x28) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x80) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) fremovexattr(r5, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r6, 0x1) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r8, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$PPPIOCGL2TPSTATS(r7, 0x80487436, &(0x7f0000000540)) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x89f1, &(0x7f0000010640)={'tunl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x29, 0x5, 0x0, 0x4, 0x7, 0x0, 0x3, 0x28, 0x0, 0xfc, 0x3, 0x9, 0x4, 0xff, 0x0, 0x45}}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="7dd5e4f906f615b3e1ed3f3a583f61875487362012c46150f4b22d40fba6b7565e8f622f2ce38bc2a4a9772f4b86fe43877ecd90c762b26bea93e9681c4957c00b08363f0253d05731fad23e6ef88ee9fc2bada86c632a80642b390406b82283f0e6b13b84f123557a6e91c99628f6", @ANYRES16, @ANYBLOB="10002abd7000ffdbdf2512000000"], 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x800) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x9, 0x8, 0x8, 0x90, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x1, 0x2}, 0x48) 3.57133017s ago: executing program 4 (id=624): r0 = socket$inet6(0xa, 0x80003, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x9, @loopback, 0x6}, 0x31) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x0, 0xfffe, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x800000000000000, 0x4, 0x0, 0x9, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private=0x10000000, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7, 0x0, 0x0, 0x1}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 3.262428106s ago: executing program 1 (id=625): r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0xf}, {0xffff, 0xffff}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x3, 0x1, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4005c}, 0x0) 3.004450575s ago: executing program 4 (id=626): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16, @ANYBLOB="01002ebd7000fddbdf252000000008000300", @ANYRES32=r2, @ANYBLOB="3c002d80080003000900000008000200030000000500040001000000050001"], 0x58}, 0x1, 0x0, 0x0, 0x4000004}, 0x20004000) 2.82189426s ago: executing program 2 (id=627): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000040)=0x2, 0x4) sendmsg$802154_dgram(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x24, @long={0x3, 0x3}}, 0x14, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x810) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000000)=0xf3f, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0xbf}]}}}]}, 0x40}}, 0x0) sendto$packet(r2, &(0x7f0000000240)="3f031c000302140006001e0089e9aaa911d7c229", 0x14, 0x0, &(0x7f0000000540)={0xc9, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6gretap0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)={0x34, r6, 0x301, 0x70bd25, 0x25dfdbfe, {0x1c}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x805}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x29c}}, 0x4048010) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x50) close(r9) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x2, &(0x7f00000017c0)=@raw=[@btf_id={0x18, 0x9, 0x3, 0x0, 0x4}], &(0x7f0000000380)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000003c0)=""/4096, 0x41000, 0x70, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd97}, 0x94) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r8, 0x8982, &(0x7f0000000100)={0x2, 'veth0_to_team\x00', {0xdbc4}, 0x45}) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r12, 0x84, 0xd, &(0x7f0000003140)=""/4111, &(0x7f0000000080)=0x100f) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="180000001c00010029bd7000fedbdf2507"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) 2.404677325s ago: executing program 1 (id=628): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', &(0x7f0000000440), 0x1000) ptrace$setregset(0x4205, r0, 0x200, &(0x7f0000000080)={&(0x7f0000000380)="9d6c565cdd807ddf4d9276d8e556d657b1e54d69290a51d300f8ed72d84d4a7bffcbdc2b9e9d814275d5e0e455250261e84a6bc7d6806e1aa6ad89eb773d9d87edfdd734a055d5bc618e92217de0ae070b769d5cb56588b8707665883ca52739b56917", 0x63}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x8}}, 0x240440c0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x0, 0xe, 0x0, 0x0, 0xfffffffd, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc, 0x60000002}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x0, @loopback}}]}, 0x70}, 0x1, 0x7}, 0x0) 2.203136237s ago: executing program 4 (id=629): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xfff1, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4e90}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000680)=@xdp={0x2c, 0x7, r3, 0x3c}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) 1.6510631s ago: executing program 0 (id=630): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r0, 0xc0205866, &(0x7f00000001c0)={&(0x7f0000000140)=0x7fffffffffffffff, 0x3, &(0x7f0000000300)=[{}], &(0x7f0000000180)}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x3fff, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x4}, {0xffff, 0xffff}, {0xfff1, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0xdc}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r3, {0xffff}, {}, {0x2, 0x6}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x81, '\x00', 0xfffff000, 0x2f, 0x3, 0x581}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x40054) 781.329269ms ago: executing program 1 (id=631): socket$netlink(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x2, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x44}}, 0x2000800) 104.022324ms ago: executing program 1 (id=632): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x38, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_USERDATA={0x6, 0xd, 0x1, 0x0, "63ef"}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5, 0x84}}}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x20050800) 0s ago: executing program 2 (id=633): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000040)=0x2, 0x4) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000080), 0x4) sendmsg$802154_dgram(r0, &(0x7f0000000540)={&(0x7f00000003c0)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0302}}}, 0x14, &(0x7f0000000400)={&(0x7f00000006c0)="cd62aa1a2c5cd7ecb03d9bb63e4b46e147db694de1af077daaf1529c86be71d45c050474f11ea3a0e31d31de6d74cb0f43658ce4656debc0bf128d3b9d75d6c72380d245b48fb12507d40b0819269b21efc58a61e4f37d246b230dbb08ba2b5f3fc4d3", 0x63}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.121' (ED25519) to the list of known hosts. [ 154.893739][ T5757] cgroup: Unknown subsys name 'net' [ 155.021513][ T5757] cgroup: Unknown subsys name 'cpuset' [ 155.035340][ T5757] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 160.590912][ T5757] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 164.728017][ T5777] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 164.754540][ T5777] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 164.764449][ T5777] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 164.777467][ T5777] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 164.795524][ T5777] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 164.838683][ T5777] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 164.847929][ T5777] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 164.857592][ T5777] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 164.870451][ T5777] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 164.886836][ T5777] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 164.926668][ T5777] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 164.935899][ T5777] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 164.964328][ T5777] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 164.977408][ T5777] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 164.988330][ T5777] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 165.022280][ T5777] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 165.041593][ T5777] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 165.050796][ T5777] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 165.064308][ T5777] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 165.083823][ T5777] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 165.133976][ T49] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 165.175112][ T5788] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 165.193705][ T5788] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 165.207914][ T5788] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 165.218838][ T5788] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 166.429576][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 166.595911][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 166.656687][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 166.748225][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 166.832971][ T5777] Bluetooth: hci0: command tx timeout [ 166.915283][ T5777] Bluetooth: hci1: command tx timeout [ 167.004256][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 167.082849][ T5777] Bluetooth: hci2: command tx timeout [ 167.233649][ T5777] Bluetooth: hci3: command tx timeout [ 167.312997][ T5777] Bluetooth: hci4: command tx timeout [ 167.562456][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.571043][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.580654][ T5775] bridge_slave_0: entered allmulticast mode [ 167.590950][ T5775] bridge_slave_0: entered promiscuous mode [ 167.701336][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.714015][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.721624][ T5775] bridge_slave_1: entered allmulticast mode [ 167.733821][ T5775] bridge_slave_1: entered promiscuous mode [ 167.744675][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.752125][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.760010][ T5781] bridge_slave_0: entered allmulticast mode [ 167.771141][ T5781] bridge_slave_0: entered promiscuous mode [ 167.887007][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.894882][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.902427][ T5781] bridge_slave_1: entered allmulticast mode [ 167.911187][ T5781] bridge_slave_1: entered promiscuous mode [ 167.943618][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.951089][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.959663][ T5784] bridge_slave_0: entered allmulticast mode [ 167.967937][ T5784] bridge_slave_0: entered promiscuous mode [ 168.008294][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.040770][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.048652][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.056244][ T5785] bridge_slave_0: entered allmulticast mode [ 168.064704][ T5785] bridge_slave_0: entered promiscuous mode [ 168.075596][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.083216][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.090591][ T5784] bridge_slave_1: entered allmulticast mode [ 168.099610][ T5784] bridge_slave_1: entered promiscuous mode [ 168.138403][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.170851][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.178691][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.186447][ T5785] bridge_slave_1: entered allmulticast mode [ 168.195156][ T5785] bridge_slave_1: entered promiscuous mode [ 168.228009][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.235928][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.243547][ T5779] bridge_slave_0: entered allmulticast mode [ 168.251568][ T5779] bridge_slave_0: entered promiscuous mode [ 168.296203][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.356047][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.363748][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.371140][ T5779] bridge_slave_1: entered allmulticast mode [ 168.380254][ T5779] bridge_slave_1: entered promiscuous mode [ 168.423259][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.528438][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.547528][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.595814][ T5775] team0: Port device team_slave_0 added [ 168.632396][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.650866][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.690757][ T5775] team0: Port device team_slave_1 added [ 168.796797][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.837064][ T5781] team0: Port device team_slave_0 added [ 168.901135][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.913379][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.920457][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.922981][ T5777] Bluetooth: hci0: command tx timeout [ 168.948210][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.971521][ T5781] team0: Port device team_slave_1 added [ 168.984129][ T5785] team0: Port device team_slave_0 added [ 168.992903][ T5777] Bluetooth: hci1: command tx timeout [ 169.002484][ T5784] team0: Port device team_slave_0 added [ 169.033011][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.040058][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.066970][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.107201][ T5785] team0: Port device team_slave_1 added [ 169.140404][ T5784] team0: Port device team_slave_1 added [ 169.153092][ T5777] Bluetooth: hci2: command tx timeout [ 169.266122][ T5779] team0: Port device team_slave_0 added [ 169.283990][ T5779] team0: Port device team_slave_1 added [ 169.291991][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.299230][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.326511][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.333623][ T5777] Bluetooth: hci3: command tx timeout [ 169.343179][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.350278][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.376641][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.390551][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.398019][ T5777] Bluetooth: hci4: command tx timeout [ 169.398174][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.430730][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.556726][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.564046][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.590562][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.604459][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.611559][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.638960][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.674813][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.681913][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.708818][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.726640][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.733777][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.760420][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.790183][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.797366][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.823604][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.876465][ T5775] hsr_slave_0: entered promiscuous mode [ 169.885445][ T5775] hsr_slave_1: entered promiscuous mode [ 169.991658][ T5781] hsr_slave_0: entered promiscuous mode [ 170.000225][ T5781] hsr_slave_1: entered promiscuous mode [ 170.008236][ T5781] debugfs: 'hsr0' already exists in 'hsr' [ 170.014168][ T5781] Cannot create hsr debugfs directory [ 170.200963][ T5785] hsr_slave_0: entered promiscuous mode [ 170.209469][ T5785] hsr_slave_1: entered promiscuous mode [ 170.217689][ T5785] debugfs: 'hsr0' already exists in 'hsr' [ 170.223640][ T5785] Cannot create hsr debugfs directory [ 170.279703][ T5779] hsr_slave_0: entered promiscuous mode [ 170.288487][ T5779] hsr_slave_1: entered promiscuous mode [ 170.296478][ T5779] debugfs: 'hsr0' already exists in 'hsr' [ 170.302304][ T5779] Cannot create hsr debugfs directory [ 170.416586][ T5784] hsr_slave_0: entered promiscuous mode [ 170.425649][ T5784] hsr_slave_1: entered promiscuous mode [ 170.433415][ T5784] debugfs: 'hsr0' already exists in 'hsr' [ 170.439271][ T5784] Cannot create hsr debugfs directory [ 170.992943][ T5777] Bluetooth: hci0: command tx timeout [ 171.073158][ T5777] Bluetooth: hci1: command tx timeout [ 171.232953][ T5777] Bluetooth: hci2: command tx timeout [ 171.403022][ T5777] Bluetooth: hci3: command tx timeout [ 171.473084][ T5777] Bluetooth: hci4: command tx timeout [ 171.597035][ T5775] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 171.617155][ T5775] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 171.649154][ T5775] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 171.668753][ T5775] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 171.792243][ T5781] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 171.832041][ T5781] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 171.849725][ T5781] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 171.869102][ T5781] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 172.073325][ T5779] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 172.093211][ T5779] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 172.163710][ T5779] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 172.205250][ T5779] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 172.348296][ T5784] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 172.389592][ T5784] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 172.447508][ T5784] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 172.497029][ T5784] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 172.753082][ T5785] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 172.788815][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.818034][ T5785] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 172.840336][ T5785] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 172.898817][ T5785] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 172.997994][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.074168][ T5777] Bluetooth: hci0: command tx timeout [ 173.098467][ T138] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.106029][ T138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.154506][ T5777] Bluetooth: hci1: command tx timeout [ 173.220437][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.227806][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.296721][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.313801][ T5777] Bluetooth: hci2: command tx timeout [ 173.458433][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.475217][ T5777] Bluetooth: hci3: command tx timeout [ 173.553695][ T5777] Bluetooth: hci4: command tx timeout [ 173.567808][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.596800][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.604229][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.732000][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.749563][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.757400][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.884322][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.999665][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.040833][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.048406][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.117108][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.124860][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.212206][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.219772][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.239444][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.246831][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.411189][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.659223][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.689549][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.858589][ T138] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.867076][ T138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.925044][ T138] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.932492][ T138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.430607][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.616832][ T5775] veth0_vlan: entered promiscuous mode [ 175.851718][ T5775] veth1_vlan: entered promiscuous mode [ 175.911943][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.104243][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.161645][ T5781] veth0_vlan: entered promiscuous mode [ 176.358534][ T5781] veth1_vlan: entered promiscuous mode [ 176.457049][ T5775] veth0_macvtap: entered promiscuous mode [ 176.577017][ T5775] veth1_macvtap: entered promiscuous mode [ 176.812193][ T5779] veth0_vlan: entered promiscuous mode [ 176.871103][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.984908][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.052324][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.082092][ T5781] veth0_macvtap: entered promiscuous mode [ 177.109145][ T5779] veth1_vlan: entered promiscuous mode [ 177.185301][ T35] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.197162][ T35] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.241050][ T5781] veth1_macvtap: entered promiscuous mode [ 177.260797][ T35] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.270328][ T35] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.425581][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.517175][ T5779] veth0_macvtap: entered promiscuous mode [ 177.543464][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.649876][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.659876][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.707018][ T5779] veth1_macvtap: entered promiscuous mode [ 177.825597][ T5785] veth0_vlan: entered promiscuous mode [ 177.836731][ T138] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.888307][ T138] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.994143][ T5785] veth1_vlan: entered promiscuous mode [ 178.044038][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.059986][ T5784] veth0_vlan: entered promiscuous mode [ 178.118019][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.279400][ T83] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.303231][ T83] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.312190][ T83] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.394996][ T5784] veth1_vlan: entered promiscuous mode [ 178.412230][ T83] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.594365][ T5785] veth0_macvtap: entered promiscuous mode [ 178.640936][ T5785] veth1_macvtap: entered promiscuous mode [ 178.869090][ T5784] veth0_macvtap: entered promiscuous mode [ 178.949610][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.015192][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.031701][ T5784] veth1_macvtap: entered promiscuous mode [ 179.169471][ T35] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.244891][ T35] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.259520][ T35] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.303268][ T35] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.328251][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.415003][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.540091][ T138] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.560600][ T138] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.631173][ T2121] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.662969][ T2121] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.312584][ T1813] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.357704][ T1813] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.624702][ T1813] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.642576][ T1813] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.855418][ T1813] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.892792][ T1813] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.081597][ T5775] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 183.099901][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.154685][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.662996][ T1813] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.671000][ T1813] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.135341][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.212832][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.987143][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.063142][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.235581][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.288621][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.643255][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.651279][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.912204][ T2121] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.925583][ T2121] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.607378][ T5998] syz.0.13 uses obsolete (PF_INET,SOCK_PACKET) [ 188.043479][ T6002] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14'. [ 188.792424][ T6007] syzkaller0: entered promiscuous mode [ 188.800993][ T6007] syzkaller0: entered allmulticast mode [ 189.014073][ T6011] syzkaller0: entered promiscuous mode [ 189.051310][ T6011] syzkaller0: entered allmulticast mode [ 189.826790][ T6027] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan0, syncid = 3, id = 0 [ 190.169506][ T1720] IPVS: starting estimator thread 0... [ 190.224584][ T6035] netlink: 4 bytes leftover after parsing attributes in process `syz.4.27'. [ 190.303090][ T6036] IPVS: using max 240 ests per chain, 12000 per kthread [ 190.402295][ T6040] sock: sock_timestamping_bind_phc: sock not bind to device [ 191.171329][ T6046] netlink: 'syz.3.29': attribute type 4 has an invalid length. [ 193.354321][ T6068] netlink: 4 bytes leftover after parsing attributes in process `syz.3.33'. [ 193.461898][ T6053] syzkaller0: entered promiscuous mode [ 193.474832][ T6053] syzkaller0: entered allmulticast mode [ 193.613568][ T6073] loop1: detected capacity change from 0 to 512 [ 193.657251][ T6073] EXT4-fs: Ignoring removed orlov option [ 193.679153][ T6075] netlink: 8 bytes leftover after parsing attributes in process `syz.4.35'. [ 193.738106][ T6073] EXT4-fs: Ignoring removed mblk_io_submit option [ 193.793391][ T6073] EXT4-fs error (device loop1): ext4_iget_extra_inode:5025: inode #15: comm syz.1.34: corrupted in-inode xattr: e_value size too large [ 193.807999][ T6073] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 193.812793][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 193.824416][ T6073] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.34: couldn't read orphan inode 15 (err -117) [ 193.828686][ C0] EXT4-fs (loop1): initial error at time 1773711880: ext4_iget_extra_inode:5025: inode 15 [ 193.828850][ C0] EXT4-fs (loop1): last error at time 1773711880: ext4_iget_extra_inode:5025: inode 15 [ 193.879281][ T6073] loop1: lost filesystem error report for type 5 error -117 [ 193.963875][ T6073] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.178850][ T6080] netlink: 12 bytes leftover after parsing attributes in process `syz.2.36'. [ 194.872301][ T6091] netlink: 28 bytes leftover after parsing attributes in process `syz.0.40'. [ 195.141160][ T6094] netlink: 4 bytes leftover after parsing attributes in process `syz.3.41'. [ 197.097939][ T6114] syzkaller0: entered promiscuous mode [ 197.167600][ T6114] syzkaller0: entered allmulticast mode [ 197.439598][ T6120] netlink: 12 bytes leftover after parsing attributes in process `syz.4.49'. [ 197.730079][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.096193][ T6124] syzkaller0: entered promiscuous mode [ 198.149229][ T6124] syzkaller0: entered allmulticast mode [ 198.788975][ T6134] syzkaller0: entered promiscuous mode [ 198.832607][ T6134] syzkaller0: entered allmulticast mode [ 199.898614][ T6151] netlink: 12 bytes leftover after parsing attributes in process `syz.3.63'. [ 199.939972][ T1720] IPVS: starting estimator thread 0... [ 200.073318][ T6153] IPVS: using max 192 ests per chain, 9600 per kthread [ 200.517709][ T6158] netlink: 16 bytes leftover after parsing attributes in process `syz.4.60'. [ 200.528059][ T6158] netlink: 8 bytes leftover after parsing attributes in process `syz.4.60'. [ 200.537513][ T6158] netlink: 8 bytes leftover after parsing attributes in process `syz.4.60'. [ 200.547545][ T6158] netlink: 128 bytes leftover after parsing attributes in process `syz.4.60'. [ 202.847213][ T6168] syzkaller0: entered promiscuous mode [ 202.880988][ T6168] syzkaller0: entered allmulticast mode [ 203.141104][ T6173] netlink: 4 bytes leftover after parsing attributes in process `syz.0.70'. [ 203.981400][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 203.988619][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 206.532237][ T6189] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 206.983451][ T6189] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 207.135370][ T6184] warning: `syz.1.72' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 207.428115][ T6184] 8021q: VLANs not supported on gre0 [ 209.021298][ T6218] netlink: 16 bytes leftover after parsing attributes in process `syz.0.79'. [ 209.031225][ T6218] netlink: 8 bytes leftover after parsing attributes in process `syz.0.79'. [ 209.040565][ T6218] netlink: 8 bytes leftover after parsing attributes in process `syz.0.79'. [ 209.050445][ T6218] netlink: 128 bytes leftover after parsing attributes in process `syz.0.79'. [ 210.824072][ T6226] syzkaller0: entered promiscuous mode [ 210.863050][ T6226] syzkaller0: entered allmulticast mode [ 212.623441][ T6236] team0: No ports can be present during mode change [ 213.752911][ T6241] syzkaller0: entered promiscuous mode [ 213.758584][ T6241] syzkaller0: entered allmulticast mode [ 214.460534][ T6263] netlink: 4 bytes leftover after parsing attributes in process `syz.1.93'. [ 214.482492][ T6263] netlink: 24 bytes leftover after parsing attributes in process `syz.1.93'. [ 214.637408][ T6267] Bluetooth: MGMT ver 1.23 [ 214.668646][ T6267] netlink: 4 bytes leftover after parsing attributes in process `syz.1.93'. [ 215.269596][ T6267] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.489124][ T6267] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.182108][ T6295] syzkaller0: entered promiscuous mode [ 217.203323][ T6295] syzkaller0: entered allmulticast mode [ 217.768781][ T6301] syzkaller0: entered promiscuous mode [ 217.774849][ T6301] syzkaller0: entered allmulticast mode [ 218.786722][ T6322] Driver unsupported XDP return value 0 on prog (id 16) dev N/A, expect packet loss! [ 220.069135][ T6340] Zero length message leads to an empty skb [ 222.017529][ T6365] syzkaller1: entered promiscuous mode [ 222.030547][ T6365] syzkaller1: entered allmulticast mode [ 222.799989][ T6375] syzkaller0: entered promiscuous mode [ 222.806160][ T6375] syzkaller0: entered allmulticast mode [ 224.160646][ T6383] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.169977][ T6383] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.440754][ T6383] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.507988][ T6383] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.704833][ T53] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.753067][ T53] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.793321][ T83] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.853483][ T53] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.665037][ T6421] syzkaller0: entered promiscuous mode [ 227.703018][ T6421] syzkaller0: entered allmulticast mode [ 227.985299][ T6427] netlink: 40 bytes leftover after parsing attributes in process `syz.3.148'. [ 228.270575][ T6432] syzkaller0: entered promiscuous mode [ 228.276511][ T6432] syzkaller0: entered allmulticast mode [ 230.424626][ T6465] netlink: 28 bytes leftover after parsing attributes in process `syz.0.160'. [ 231.798937][ T6472] syzkaller0: entered promiscuous mode [ 231.876671][ T6472] syzkaller0: entered allmulticast mode [ 231.970923][ T6482] syzkaller0: entered promiscuous mode [ 231.990495][ T6482] syzkaller0: entered allmulticast mode [ 233.954460][ T6510] syzkaller0: entered promiscuous mode [ 233.996975][ T6510] syzkaller0: entered allmulticast mode [ 234.216237][ T6514] netlink: 28 bytes leftover after parsing attributes in process `syz.4.173'. [ 237.122455][ T6553] netlink: 'syz.0.183': attribute type 1 has an invalid length. [ 237.804938][ T6553] 8021q: adding VLAN 0 to HW filter on device bond1 [ 238.464748][ T6567] syzkaller0: entered promiscuous mode [ 238.523188][ T6567] syzkaller0: entered allmulticast mode [ 242.364287][ T6609] netlink: 16 bytes leftover after parsing attributes in process `syz.4.201'. [ 242.373793][ T6609] netlink: 8 bytes leftover after parsing attributes in process `syz.4.201'. [ 242.383009][ T6609] netlink: 8 bytes leftover after parsing attributes in process `syz.4.201'. [ 242.392029][ T6609] netlink: 128 bytes leftover after parsing attributes in process `syz.4.201'. [ 243.674244][ T6616] syzkaller0: entered promiscuous mode [ 243.679911][ T6616] syzkaller0: entered allmulticast mode [ 244.266364][ T6623] netlink: 'syz.0.206': attribute type 1 has an invalid length. [ 248.212486][ T6661] netlink: 16 bytes leftover after parsing attributes in process `syz.1.215'. [ 248.221811][ T6661] netlink: 8 bytes leftover after parsing attributes in process `syz.1.215'. [ 248.230951][ T6661] netlink: 8 bytes leftover after parsing attributes in process `syz.1.215'. [ 248.240199][ T6661] netlink: 128 bytes leftover after parsing attributes in process `syz.1.215'. [ 249.695827][ T6673] netlink: 104 bytes leftover after parsing attributes in process `syz.2.216'. [ 249.831095][ T6683] netlink: 28 bytes leftover after parsing attributes in process `syz.0.222'. [ 249.904752][ T6683] netlink: 4 bytes leftover after parsing attributes in process `syz.0.222'. [ 250.059988][ T6688] netlink: 4 bytes leftover after parsing attributes in process `syz.1.223'. [ 250.945375][ T6698] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 251.126566][ T6698] bond1: (slave lo): Enslaving as an active interface with an up link [ 251.196275][ T6698] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 251.845851][ T6705] netlink: 16 bytes leftover after parsing attributes in process `syz.3.227'. [ 251.855173][ T6705] netlink: 8 bytes leftover after parsing attributes in process `syz.3.227'. [ 254.536956][ T5777] Bluetooth: hci4: link tx timeout [ 254.542565][ T5777] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 255.344496][ T6736] __nla_validate_parse: 2 callbacks suppressed [ 255.344569][ T6736] netlink: 4 bytes leftover after parsing attributes in process `syz.2.235'. [ 255.696604][ T6742] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 256.601373][ T5788] Bluetooth: hci4: command 0x0406 tx timeout [ 257.108717][ T6747] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.118229][ T6747] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.978467][ T6747] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.174970][ T6747] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 260.283311][ T1813] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.331242][ T1813] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.396602][ T1813] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.461543][ T1813] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.945109][ T6798] netlink: 4 bytes leftover after parsing attributes in process `syz.0.250'. [ 262.971439][ T6822] syzkaller0: entered promiscuous mode [ 262.977479][ T6822] syzkaller0: entered allmulticast mode [ 265.415878][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.422485][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 266.374952][ T6863] netlink: 4 bytes leftover after parsing attributes in process `syz.1.266'. [ 267.444246][ T6881] netlink: 'syz.1.268': attribute type 1 has an invalid length. [ 268.359799][ T6899] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 268.367499][ T6899] IPv6: NLM_F_CREATE should be set when creating new route [ 268.723862][ T6904] netlink: 'syz.1.275': attribute type 1 has an invalid length. [ 268.827366][ T6905] netlink: 28 bytes leftover after parsing attributes in process `syz.1.275'. [ 269.657887][ T6904] bond2: entered promiscuous mode [ 269.691525][ T6904] 8021q: adding VLAN 0 to HW filter on device bond2 [ 270.081980][ T6905] bond2: entered allmulticast mode [ 270.432401][ T6904] bond2: (slave bridge1): making interface the new active one [ 270.533181][ T6904] bridge1: entered promiscuous mode [ 270.566994][ T6904] bridge1: entered allmulticast mode [ 270.655573][ T6904] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 270.943325][ T6912] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 270.984645][ T6929] netlink: 4 bytes leftover after parsing attributes in process `syz.3.278'. [ 271.003243][ T6912] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 271.218961][ T6918] tipc: Started in network mode [ 271.293704][ T6918] tipc: Node identity ba5d69c6b266, cluster identity 4711 [ 271.397344][ T6918] tipc: Enabled bearer , priority 0 [ 271.521284][ T6932] tipc: Resetting bearer [ 272.278127][ T6944] netlink: 8 bytes leftover after parsing attributes in process `syz.1.281'. [ 272.368195][ T6932] tipc: Disabling bearer [ 272.443737][ T6946] syzkaller0: entered promiscuous mode [ 272.458134][ T6946] syzkaller0: entered allmulticast mode [ 272.778952][ T6956] netlink: 'syz.0.283': attribute type 1 has an invalid length. [ 273.367441][ T6955] syzkaller0: entered promiscuous mode [ 273.373475][ T6955] syzkaller0: entered allmulticast mode [ 274.558009][ T6979] netlink: 4 bytes leftover after parsing attributes in process `syz.0.292'. [ 277.948531][ T6975] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.958011][ T6975] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.717212][ T6975] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 278.774132][ T6975] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 279.623545][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.685941][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.753558][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.797514][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.223906][ T7048] sit1: entered promiscuous mode [ 282.601937][ T7056] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 282.609575][ T7056] IPv6: NLM_F_CREATE should be set when creating new route [ 282.837250][ T7058] netlink: 4 bytes leftover after parsing attributes in process `syz.0.305'. [ 284.734690][ T7072] netlink: 8 bytes leftover after parsing attributes in process `syz.3.309'. [ 285.232018][ T7078] netlink: 76 bytes leftover after parsing attributes in process `syz.1.310'. [ 286.209222][ T7078] syzkaller0: entered promiscuous mode [ 286.253353][ T7078] syzkaller0: entered allmulticast mode [ 288.034038][ T5788] Bluetooth: hci0: command 0x0406 tx timeout [ 288.040966][ T5788] Bluetooth: hci1: command 0x0406 tx timeout [ 288.047747][ T5777] Bluetooth: hci2: command 0x0406 tx timeout [ 288.054543][ T7085] Bluetooth: hci3: command 0x0406 tx timeout [ 288.129333][ T7104] sit1: entered promiscuous mode [ 293.607362][ T7162] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 294.880359][ T7175] tipc: Failed to remove unknown binding: 66,0,0/0:3884948836/3884948839 [ 295.108212][ T7175] tipc: Failed to remove unknown binding: 66,0,0/0:3884948836/3884948838 [ 295.287718][ T7172] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 295.427075][ T7179] tipc: Failed to remove unknown binding: 66,0,0/0:3884948836/3884948839 [ 295.641642][ T7179] tipc: Failed to remove unknown binding: 66,0,0/0:3884948836/3884948838 [ 297.217922][ T7195] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 303.045265][ T7261] bond1: (slave lo): Releasing backup interface [ 303.075720][ T7261] bond1: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 303.131713][ T7261] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 303.360642][ T7267] syzkaller0: entered promiscuous mode [ 303.387809][ T7267] syzkaller0: entered allmulticast mode [ 307.899262][ T7314] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 308.373964][ T7322] netlink: 8 bytes leftover after parsing attributes in process `syz.4.387'. [ 308.506081][ T7321] syzkaller0: entered promiscuous mode [ 308.543341][ T7321] syzkaller0: entered allmulticast mode [ 310.574524][ T7349] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 311.168455][ T7355] netlink: 'syz.4.395': attribute type 1 has an invalid length. [ 311.663199][ T7361] macsec1: entered promiscuous mode [ 311.698566][ T7361] dummy0: entered promiscuous mode [ 311.741976][ T7361] dummy0: left promiscuous mode [ 312.630904][ T7372] syzkaller0: entered promiscuous mode [ 312.661490][ T7372] syzkaller0: entered allmulticast mode [ 315.638872][ T7401] dummy0: entered promiscuous mode [ 315.658728][ T7401] macsec2: entered promiscuous mode [ 315.730441][ T7401] dummy0: left promiscuous mode [ 316.400751][ T7415] netlink: 16 bytes leftover after parsing attributes in process `syz.4.419'. [ 319.604473][ T7443] netlink: 'syz.1.429': attribute type 1 has an invalid length. [ 322.027346][ T7463] netlink: 16 bytes leftover after parsing attributes in process `syz.2.432'. [ 323.176734][ T7476] netlink: 16 bytes leftover after parsing attributes in process `syz.3.441'. [ 323.186497][ T7476] netlink: 8 bytes leftover after parsing attributes in process `syz.3.441'. [ 323.195654][ T7476] netlink: 8 bytes leftover after parsing attributes in process `syz.3.441'. [ 323.204782][ T7476] netlink: 128 bytes leftover after parsing attributes in process `syz.3.441'. [ 324.002462][ T7473] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.012226][ T7473] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.907762][ T7473] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 325.900460][ T1813] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.971864][ T1813] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.009934][ T1813] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.042854][ T53] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.785614][ T7499] netlink: 16 bytes leftover after parsing attributes in process `syz.0.448'. [ 326.854636][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 326.861249][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 328.187301][ T5831] IPVS: starting estimator thread 0... [ 328.293672][ T7523] IPVS: using max 240 ests per chain, 12000 per kthread [ 329.496480][ T7527] syzkaller0: entered promiscuous mode [ 329.506229][ T7527] syzkaller0: entered allmulticast mode [ 331.942352][ T7541] syzkaller0: entered promiscuous mode [ 331.981194][ T7541] syzkaller0: entered allmulticast mode [ 335.866490][ T7559] syzkaller0: entered promiscuous mode [ 335.872157][ T7559] syzkaller0: entered allmulticast mode [ 340.034717][ T6992] IPVS: starting estimator thread 0... [ 340.183551][ T7581] IPVS: using max 192 ests per chain, 9600 per kthread [ 340.881443][ T7580] syzkaller0: entered promiscuous mode [ 340.933184][ T7580] syzkaller0: entered allmulticast mode [ 342.799935][ T7605] syzkaller0: entered promiscuous mode [ 342.817552][ T7605] syzkaller0: entered allmulticast mode [ 350.788693][ T7644] syzkaller0: entered promiscuous mode [ 350.823355][ T7644] syzkaller0: entered allmulticast mode [ 351.597069][ T7654] syzkaller0: entered promiscuous mode [ 351.602930][ T7654] syzkaller0: entered allmulticast mode [ 352.614355][ T7667] netlink: 4 bytes leftover after parsing attributes in process `syz.0.512'. [ 357.861202][ T7693] syzkaller0: entered promiscuous mode [ 357.961103][ T7693] syzkaller0: entered allmulticast mode [ 358.287368][ T7695] syzkaller0: entered promiscuous mode [ 358.327723][ T7695] syzkaller0: entered allmulticast mode [ 359.764545][ T7712] netlink: 4 bytes leftover after parsing attributes in process `syz.4.525'. [ 364.089483][ T7733] syzkaller0: entered promiscuous mode [ 364.095792][ T7733] syzkaller0: entered allmulticast mode [ 364.126786][ T7735] syzkaller0: entered promiscuous mode [ 364.144042][ T7735] syzkaller0: entered allmulticast mode [ 365.104683][ T7748] syzkaller0: entered promiscuous mode [ 365.110362][ T7748] syzkaller0: entered allmulticast mode [ 366.215000][ T7746] syzkaller0: entered promiscuous mode [ 366.220677][ T7746] syzkaller0: entered allmulticast mode [ 372.707495][ T7780] syzkaller0: entered promiscuous mode [ 372.743658][ T7780] syzkaller0: entered allmulticast mode [ 373.285160][ T7787] syzkaller0: entered promiscuous mode [ 373.313727][ T7787] syzkaller0: entered allmulticast mode [ 374.188896][ T7789] syzkaller0: entered promiscuous mode [ 374.237851][ T7789] syzkaller0: entered allmulticast mode [ 379.415097][ T7828] syzkaller0: entered promiscuous mode [ 379.484925][ T7828] syzkaller0: entered allmulticast mode [ 380.353893][ T7105] Bluetooth: hci4: command 0x0406 tx timeout [ 381.643216][ T7846] netlink: 8 bytes leftover after parsing attributes in process `syz.2.574'. [ 381.652209][ T7846] netlink: 20 bytes leftover after parsing attributes in process `syz.2.574'. [ 382.065724][ T7848] syzkaller0: entered promiscuous mode [ 382.071384][ T7848] syzkaller0: entered allmulticast mode [ 382.505532][ T7852] macsec1: entered promiscuous mode [ 382.545283][ T7852] dummy0: entered promiscuous mode [ 383.084210][ T7855] Cannot find set identified by id 0 to match [ 383.264731][ T7859] syzkaller0: entered promiscuous mode [ 383.293286][ T7859] syzkaller0: entered allmulticast mode [ 384.418451][ T7874] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 385.225208][ T7891] dummy0: entered promiscuous mode [ 385.250832][ T7891] macsec1: entered promiscuous mode [ 388.296871][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 388.303600][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 390.108427][ T7911] syzkaller0: entered promiscuous mode [ 390.817805][ T7911] syzkaller0: entered allmulticast mode [ 391.549870][ T7917] netlink: 28 bytes leftover after parsing attributes in process `syz.4.598'. [ 392.334041][ T7923] netlink: 'syz.4.600': attribute type 1 has an invalid length. [ 392.817401][ T7105] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 392.845004][ T7105] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 392.854812][ T7105] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 392.868748][ T7105] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 392.889476][ T7105] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 392.990195][ T7927] netlink: 24 bytes leftover after parsing attributes in process `syz.0.602'. [ 393.856526][ T7932] netlink: 4 bytes leftover after parsing attributes in process `syz.4.604'. [ 394.065592][ T7932] netlink: 4 bytes leftover after parsing attributes in process `syz.4.604'. [ 394.311023][ T2121] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 394.389672][ T2121] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 394.837831][ T1813] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 394.993865][ T7105] Bluetooth: hci5: command tx timeout [ 395.097288][ T1813] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 396.078255][ T7952] netlink: 28 bytes leftover after parsing attributes in process `syz.2.609'. [ 396.566432][ T7924] chnl_net:caif_netlink_parms(): no params data found [ 397.073129][ T7105] Bluetooth: hci5: command tx timeout [ 397.358068][ T7964] netlink: 'syz.4.613': attribute type 1 has an invalid length. [ 397.899741][ T7962] syzkaller0: entered promiscuous mode [ 397.957928][ T7962] syzkaller0: entered allmulticast mode [ 399.021517][ T7996] x_tables: duplicate underflow at hook 3 [ 399.152927][ T7105] Bluetooth: hci5: command tx timeout [ 399.550890][ T8006] netlink: 28 bytes leftover after parsing attributes in process `syz.2.620'. [ 399.799237][ T7924] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.818433][ T7924] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.834113][ T7924] bridge_slave_0: entered allmulticast mode [ 399.865804][ T7924] bridge_slave_0: entered promiscuous mode [ 399.969343][ T7924] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.983617][ T7924] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.016174][ T7924] bridge_slave_1: entered allmulticast mode [ 400.039601][ T7924] bridge_slave_1: entered promiscuous mode [ 400.637430][ T7924] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 400.857616][ T7924] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 401.283240][ T7105] Bluetooth: hci5: command tx timeout [ 402.765936][ T7924] team0: Port device team_slave_0 added [ 403.290993][ T7924] team0: Port device team_slave_1 added [ 403.391333][ T13] bridge_slave_1: left allmulticast mode [ 403.428070][ T13] bridge_slave_1: left promiscuous mode [ 403.463819][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.535220][ T13] bridge_slave_0: left allmulticast mode [ 403.551958][ T13] bridge_slave_0: left promiscuous mode [ 403.573182][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.714246][ T8066] ===================================================== [ 403.722021][ T8066] BUG: KMSAN: uninit-value in ieee802154_hdr_push+0x9a4/0xa30 [ 403.730105][ T8066] ieee802154_hdr_push+0x9a4/0xa30 [ 403.735657][ T8066] ieee802154_header_create+0x854/0xb90 [ 403.741484][ T8066] dgram_sendmsg+0xb55/0x16f0 [ 403.746629][ T8066] ieee802154_sock_sendmsg+0x91/0xe0 [ 403.752132][ T8066] ____sys_sendmsg+0xf37/0xfd0 [ 403.759294][ T8066] ___sys_sendmsg+0x271/0x3b0 [ 403.764266][ T8066] __x64_sys_sendmsg+0x211/0x3e0 [ 403.769842][ T8066] x64_sys_call+0x1e20/0x3ea0 [ 403.774946][ T8066] do_syscall_64+0x134/0xf80 [ 403.779786][ T8066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.786175][ T8066] [ 403.788571][ T8066] Uninit was stored to memory at: [ 403.794153][ T8066] ieee802154_hdr_push+0x99d/0xa30 [ 403.799457][ T8066] ieee802154_header_create+0x854/0xb90 [ 403.805432][ T8066] dgram_sendmsg+0xb55/0x16f0 [ 403.810284][ T8066] ieee802154_sock_sendmsg+0x91/0xe0 [ 403.817136][ T8066] ____sys_sendmsg+0xf37/0xfd0 [ 403.822326][ T8066] ___sys_sendmsg+0x271/0x3b0 [ 403.827552][ T8066] __x64_sys_sendmsg+0x211/0x3e0 [ 403.832818][ T8066] x64_sys_call+0x1e20/0x3ea0 [ 403.837686][ T8066] do_syscall_64+0x134/0xf80 [ 403.842437][ T8066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.848848][ T8066] [ 403.851250][ T8066] Local variable hdr created at: [ 403.856523][ T8066] ieee802154_header_create+0x4e/0xb90 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 403.862160][ T8066] dgram_sendmsg+0xb55/0x16f0 [ 403.867218][ T8066] [ 403.869667][ T8066] CPU: 0 UID: 0 PID: 8066 Comm: syz.2.633 Not tainted syzkaller #0 PREEMPT(full) [ 403.879183][ T8066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 403.889674][ T8066] ===================================================== [ 403.896830][ T8066] Disabling lock debugging due to kernel taint [ 403.907790][ T8066] Kernel panic - not syncing: kmsan.panic set ... [ 403.914372][ T8066] CPU: 0 UID: 0 PID: 8066 Comm: syz.2.633 Tainted: G B syzkaller #0 PREEMPT(full) [ 403.925326][ T8066] Tainted: [B]=BAD_PAGE [ 403.929720][ T8066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 403.939908][ T8066] Call Trace: [ 403.943290][ T8066] [ 403.946317][ T8066] __dump_stack+0x26/0x30 [ 403.950837][ T8066] dump_stack_lvl+0x50/0x1c0 [ 403.955595][ T8066] ? dump_stack+0x12/0x25 [ 403.960103][ T8066] dump_stack+0x1e/0x25 [ 403.964403][ T8066] vpanic+0x7b4/0x1430 [ 403.968653][ T8066] panic+0x15d/0x160 [ 403.972746][ T8066] kmsan_report+0x31a/0x320 [ 403.977516][ T8066] ? __msan_warning+0x1b/0x30 [ 403.982350][ T8066] ? ieee802154_hdr_push+0x9a4/0xa30 [ 403.987841][ T8066] ? ieee802154_header_create+0x854/0xb90 [ 403.993751][ T8066] ? dgram_sendmsg+0xb55/0x16f0 [ 403.998775][ T8066] ? ieee802154_sock_sendmsg+0x91/0xe0 [ 404.004424][ T8066] ? ____sys_sendmsg+0xf37/0xfd0 [ 404.009504][ T8066] ? ___sys_sendmsg+0x271/0x3b0 [ 404.014487][ T8066] ? __x64_sys_sendmsg+0x211/0x3e0 [ 404.019734][ T8066] ? x64_sys_call+0x1e20/0x3ea0 [ 404.024756][ T8066] ? do_syscall_64+0x134/0xf80 [ 404.029850][ T8066] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.036061][ T8066] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.042271][ T8066] ? dgram_sendmsg+0xb55/0x16f0 [ 404.047290][ T8066] ? ieee802154_sock_sendmsg+0x91/0xe0 [ 404.052928][ T8066] ? ____sys_sendmsg+0xf37/0xfd0 [ 404.058010][ T8066] ? ___sys_sendmsg+0x271/0x3b0 [ 404.062997][ T8066] ? __x64_sys_sendmsg+0x211/0x3e0 [ 404.068259][ T8066] ? kmsan_get_metadata+0xf1/0x160 [ 404.073555][ T8066] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 404.080061][ T8066] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 404.086298][ T8066] ? kmsan_get_metadata+0xf1/0x160 [ 404.091591][ T8066] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 404.098012][ T8066] ? kmsan_get_metadata+0xf1/0x160 [ 404.103300][ T8066] ? kmsan_internal_memmove_metadata+0x181/0x230 [ 404.109804][ T8066] ? kmsan_get_metadata+0xf1/0x160 [ 404.115108][ T8066] __msan_warning+0x1b/0x30 [ 404.119770][ T8066] ieee802154_hdr_push+0x9a4/0xa30 [ 404.125101][ T8066] ? __msan_memcpy+0x105/0x1c0 [ 404.130031][ T8066] ieee802154_header_create+0x854/0xb90 [ 404.135771][ T8066] ? kmsan_get_metadata+0xf1/0x160 [ 404.141144][ T8066] dgram_sendmsg+0xb55/0x16f0 [ 404.146023][ T8066] ? __pfx_ieee802154_header_create+0x10/0x10 [ 404.152270][ T8066] ? __pfx_dgram_sendmsg+0x10/0x10 [ 404.157550][ T8066] ieee802154_sock_sendmsg+0x91/0xe0 [ 404.163020][ T8066] ? __pfx_ieee802154_sock_sendmsg+0x10/0x10 [ 404.169218][ T8066] ____sys_sendmsg+0xf37/0xfd0 [ 404.174192][ T8066] ___sys_sendmsg+0x271/0x3b0 [ 404.179012][ T8066] ? kmsan_get_metadata+0xf1/0x160 [ 404.184340][ T8066] ? __rcu_read_unlock+0x6c/0xd0 [ 404.189619][ T8066] ? __fget_files+0x3b4/0x4a0 [ 404.194518][ T8066] ? __fget_files+0x3b9/0x4a0 [ 404.199329][ T8066] ? kmsan_get_metadata+0xf1/0x160 [ 404.204623][ T8066] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 404.210617][ T8066] __x64_sys_sendmsg+0x211/0x3e0 [ 404.215716][ T8066] ? kmsan_get_metadata+0xf1/0x160 [ 404.221034][ T8066] x64_sys_call+0x1e20/0x3ea0 [ 404.225923][ T8066] do_syscall_64+0x134/0xf80 [ 404.230699][ T8066] ? clear_bhb_loop+0x50/0xa0 [ 404.235545][ T8066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.241598][ T8066] RIP: 0033:0x7f1bd339c799 [ 404.246119][ T8066] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 404.265859][ T8066] RSP: 002b:00007f1bd423b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 404.274433][ T8066] RAX: ffffffffffffffda RBX: 00007f1bd3615fa0 RCX: 00007f1bd339c799 [ 404.282518][ T8066] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000004 [ 404.290596][ T8066] RBP: 00007f1bd3432c99 R08: 0000000000000000 R09: 0000000000000000 [ 404.298679][ T8066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 404.306747][ T8066] R13: 00007f1bd3616038 R14: 00007f1bd3615fa0 R15: 00007ffdfc21e678 [ 404.314866][ T8066] [ 404.318160][ T8066] Kernel Offset: disabled [ 404.322532][ T8066] Rebooting in 86400 seconds..