last executing test programs: 8.492481411s ago: executing program 3 (id=302): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0x10, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3ff, 0x0, 0x0, 0x9, 0x1, 0x5fba}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 8.073908445s ago: executing program 3 (id=309): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) chmod(&(0x7f0000000140)='./file0\x00', 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)={0x38, 0x2, 0x8, 0x302, 0x0, 0x0, {0x5}, [@CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @fccp}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x10001}]}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7fffffff}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004844}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.811935413s ago: executing program 3 (id=311): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) sendto$inet6(r0, 0x0, 0x0, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x9000, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr', 0x3) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) 7.693774526s ago: executing program 3 (id=314): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$packet(0x11, 0x3, 0x300) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=@newqdisc={0x468, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x10}, {}, {0x2, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x9, 0x100, 0x2, 0xc91, 0x5, 0x400, 0x1000, 0x2, 0x5, 0x3ff, 0x2, 0x200, 0x7, 0x2, 0x6, 0xdb6, 0x401, 0x6, 0xf, 0x5, 0x3, 0xb, 0x5, 0x77dedf80, 0x100, 0x7, 0x2, 0x4, 0x1, 0x5, 0x5, 0x5, 0x4, 0x7, 0x6, 0x6, 0x4, 0x0, 0x0, 0x3, 0x5, 0x2, 0x10, 0x101, 0x8, 0xd6, 0x8, 0x800, 0x3, 0x4, 0x10001, 0x66a, 0x7, 0x7, 0x6c, 0xa6d, 0x4, 0x6, 0x3, 0x8, 0x2, 0x3d, 0x4, 0x80000000, 0xc, 0x8, 0x40, 0x7, 0x2, 0x4, 0xfffffffe, 0x2, 0x4, 0xb0, 0xe7, 0x8, 0x8001, 0x7, 0xb, 0x4, 0x3, 0x2, 0x6, 0x1, 0x5, 0x10001, 0x3, 0x4, 0xffffffff, 0x5, 0x4, 0x7, 0x5, 0x3, 0x8, 0x8, 0x0, 0x374, 0x2, 0x1, 0x7, 0x81, 0xa, 0x7f, 0x9, 0x0, 0x4, 0x6, 0x2, 0xa08d, 0x100, 0x5, 0xffff248d, 0x5, 0x7, 0xa, 0x0, 0x671, 0x3, 0x10000, 0x8c, 0x2ea, 0xd6, 0x7b, 0x9, 0x9, 0xc, 0xccf, 0x2, 0xb, 0x5, 0x100, 0x158, 0x4, 0x2, 0x7, 0x1, 0x401, 0x6, 0x5, 0xfffffffb, 0xffffffff, 0x6, 0x80000001, 0x2, 0x7, 0x5, 0xab7, 0x6f18f07b, 0x80000001, 0x0, 0x9, 0xc1, 0x5, 0x4, 0x8, 0x7, 0x3, 0x8, 0x3ff, 0x0, 0x9, 0x203a, 0x3, 0x0, 0x8, 0x2, 0x7, 0x7, 0x8, 0x0, 0x4, 0x7ff, 0x4, 0x9, 0x2, 0x5, 0x8000, 0x200, 0x0, 0x1, 0xfffffff6, 0x0, 0x7b, 0xfd, 0x5b653309, 0xe5, 0x14f, 0x6, 0x10001, 0x1, 0x7, 0x2, 0xffffffff, 0x1, 0x40100, 0x197, 0x3ff, 0x9, 0x4, 0x200, 0xcbf, 0x1ff, 0x80, 0x9, 0x2f70, 0x4, 0x1, 0x9, 0x0, 0x4, 0x8, 0x8000, 0x5, 0x8, 0xf, 0x9, 0x6057, 0x101, 0x8001, 0xad, 0x4, 0x7, 0x7, 0x2, 0x80000001, 0x8c6b, 0xd87, 0x82, 0x100, 0x0, 0x80000000, 0x0, 0x9a, 0x9, 0xfc3, 0x89, 0xa, 0x80000001, 0x2, 0x1, 0xffffffff, 0x4, 0x8000, 0x2, 0x3, 0x10000, 0x8486, 0x3, 0x8, 0x6, 0x0, 0x1, 0x3, 0x2, 0x9]}, @TCA_TBF_RATE64={0xc, 0x4, 0xe21e83a7f31f40a6}, @TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x1, 0xfffb, 0xfff, 0xfff6, 0xd3940000}, {0x7, 0x1, 0x2, 0x101, 0x4, 0x5}, 0x0, 0x5, 0x1106}}]}}]}, 0x468}, 0x1, 0x0, 0x0, 0xb3538085985bb3d6}, 0x0) 7.315270929s ago: executing program 3 (id=323): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x300, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfffe}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x44884) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0x38, 0x2c, 0xd27, 0x2070bd2d, 0x25dfdffd, {0x0, 0x0, 0x0, r1, {0x6, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x7, 0xc}}]}}]}, 0x38}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00-\x00Y'], 0xfe33) 6.209549904s ago: executing program 3 (id=341): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$nl_xfrm(0x10, 0x3, 0x6) close(r0) socket$inet6_icmp(0xa, 0x2, 0x3a) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socket$igmp(0x2, 0x3, 0x2) socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) socket$kcm(0x10, 0x2, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSMRRU(r2, 0x4004743c, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3}, 0x0, &(0x7f0000000280)}, 0x20) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x5, 0x0, @void}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) 2.109774943s ago: executing program 1 (id=383): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff5644d, 0x70b923, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xe, 0xb}, {0xf, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x808, 0x205, 0x1, 0xc}, 0xb, 0x1, 0x32, 0x5, 0xa, 0x2, 0x9, 0xd, 0x1, 0xfffffffb, {0xffff1c72, 0x23, 0x7, 0xc, 0xfffffffe, 0x7583}}}}]}, 0x78}}, 0x20048040) sendto$packet(r4, &(0x7f00000001c0)="fad33075218151db00316f3a277fedbc86dd46fe76", 0x15, 0x880, &(0x7f0000000080)={0x11, 0x8100, r3, 0x1, 0xda}, 0x14) 1.794609584s ago: executing program 1 (id=387): socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1.664345467s ago: executing program 1 (id=390): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000000)={0x28, 0x4, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x40090) 1.461711204s ago: executing program 4 (id=392): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) capset(0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x2040021}, 0x800) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000140)='pimreg0\x00', 0x0, 0xffffffffffffffff) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x401, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0xfffffffffffffffe, 0x4, 0xefffffffffffffff, 0x0, 0xf, 0x2000000, 0x20000, 0xcb5e, 0x0, 0x200, 0x1]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.461587764s ago: executing program 1 (id=393): sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd70000e0000000100000008000100", @ANYRES32=r2, @ANYBLOB="08000200"], 0x24}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) 1.446089084s ago: executing program 0 (id=394): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004044}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000022c0)=@newtfilter={0x90, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_simple={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x40, 0x9, 0x20000000, 0xb, 0x7}}, @TCA_DEF_DATA={0xa, 0x3, 'basic\x00'}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x11}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)="27032400000514000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000780)="f058050000007f8f", 0x8}], 0x2}, 0x5) 1.325022978s ago: executing program 2 (id=395): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)={0x40, 0x2, 0x8, 0x302, 0x0, 0x0, {0x5}, [@CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @fccp}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x10001}]}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004844}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.207968302s ago: executing program 4 (id=396): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) chmod(&(0x7f0000000140)='./file0\x00', 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)={0x38, 0x2, 0x8, 0x302, 0x0, 0x0, {0x5}, [@CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @fccp}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x10001}]}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7fffffff}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004844}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.130537234s ago: executing program 2 (id=397): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff5644d, 0x70b923, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xe, 0xb}, {0xf, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x808, 0x205, 0x1, 0xc}, 0xb, 0x1, 0x32, 0x5, 0xa, 0x2, 0x9, 0xd, 0x1, 0xfffffffb, {0xffff1c72, 0x23, 0x7, 0xc, 0xfffffffe, 0x7583}}}}]}, 0x78}}, 0x20048040) sendto$packet(r4, &(0x7f00000001c0)="fad33075218151db00316f3a277fedbc86dd46fe76", 0x15, 0x880, &(0x7f0000000080)={0x11, 0x8100, r3, 0x1, 0xda}, 0x14) 885.815062ms ago: executing program 4 (id=398): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000004"], 0x48) unshare(0x60600) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) 876.367583ms ago: executing program 1 (id=399): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)={0xb0, r1, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x94, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "403a050c5baee2004ef2b6d713459a7a"}, @NL802154_KEY_ATTR_ID={0x74, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x68, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0x300}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}]}, 0xb0}}, 0x0) 871.359472ms ago: executing program 0 (id=400): socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 748.101446ms ago: executing program 0 (id=401): mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x16, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x80}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfeff}, {0x85, 0x0, 0x0, 0x86}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x80000000}}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0xacb}, @call={0x85, 0x0, 0x0, 0xac}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x500}}}, &(0x7f0000000000)='GPL\x00', 0xb, 0xfed, &(0x7f0000000780)=""/4077, 0x41000, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000d}, 0x94) 748.030817ms ago: executing program 4 (id=402): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900000000000000000007000000140001800500020001"], 0x28}}, 0x0) 681.758279ms ago: executing program 1 (id=403): pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x3) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044) r1 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in=@multicast2, @in=@local, 0x3, 0x8, 0x4e23, 0x10, 0x2}, {0x0, 0x0, 0x2000000, 0x2, 0xfffffffffffffff6, 0x2000000, 0x1, 0xfffffffffffffffd}, {0x1ff, 0x800000000000, 0x4, 0xbfffffffffffff7f}, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3}, {{@in6=@empty, 0xffffffff, 0x2b}, 0xa, @in=@loopback, 0x3504, 0x4, 0x0, 0x0, 0xffffffff, 0x6, 0x9}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) unshare(0x26020400) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRESHEX=r2, @ANYRESDEC=r0, @ANYRES16=r1, @ANYRES16=r1, @ANYBLOB="4f51cce6c7c6c91b509f14526cd79f768619884a0d34576d39919dfdf0580e79c9a57401f6ef2320569ea5bafce2eedaea19a2787ee463d9ee8254a9ad592de78d92769f07f67547a36d3620923d1eafb00e1e53b993dc0f998f4fe202b0576a0a3403293048e141d12fae043b869006f3357cd70c12e9"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ffe}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@ipv6_newaddrlabel={0x38, 0x48, 0x1, 0x70bd29, 0x25dfdbfc, {0xa, 0x0, 0x10, 0x0, 0x0, 0x80}, [@IFAL_LABEL={0x8, 0x2, 0x6}, @IFAL_ADDRESS={0x14, 0x1, @mcast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004040}, 0x20000000) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r2, &(0x7f0000000140)="a60a0188c583d7db1cc35f7e6fabafe1438c3d8d76d6"}, 0x20) 681.089319ms ago: executing program 2 (id=404): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c783, 0x4, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x0, 0xc}, {0xffff, 0xffff}, {0x2, 0xffff}}}, 0x24}}, 0x20080800) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="05031600d3fc140000004788031c09103328", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) 577.811722ms ago: executing program 0 (id=405): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001280)=@mangle={'mangle\x00', 0x2, 0x6, 0x630, 0x1b0, 0x350, 0x440, 0x280, 0x440, 0x560, 0x560, 0x560, 0x560, 0x560, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [0xff000000], [], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21}, 0x0, 0x188, 0x1b0, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x18}, @local, @private2, [], [], [0x0, 0x0, 0xffffff00]}}, @common=@inet=@multiport={{0x50}, {0x0, 0xfd}}]}, @HL={0x28}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x2a}, @dev, [], [], 'veth1_macvtap\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x5, 0x0, 0x52}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0xf}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'netdevsim0\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback, 0xfc}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x690) 556.208523ms ago: executing program 4 (id=406): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) capset(0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x2040021}, 0x800) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000140)='pimreg0\x00', 0x0, 0xffffffffffffffff) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x401, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0xfffffffffffffffe, 0x4, 0xefffffffffffffff, 0x0, 0xf, 0x2000000, 0x20000, 0xcb5e, 0x0, 0x200, 0x1]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 508.962234ms ago: executing program 2 (id=407): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000180)={0x1, 0x915c}, 0x8) sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840) write(0xffffffffffffffff, &(0x7f00000000c0)="29000000140005b7ff000051915f95eb01010003a606a40e07fff024bb000000000000000040000000", 0x29) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x48, 0x30, 0x105, 0x70bd28, 0x0, {}, [{0x34, 0x1, [@m_simple={0x30, 0x3ffd, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x40880) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESDEC=r0, @ANYRES16, @ANYBLOB="010000000000000000000500000018"], 0x44}}, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32], 0x1c}}, 0x840) bind$nfc_llcp(r1, &(0x7f0000000040)={0x27, 0x0, 0x0, 0x3, 0x2, 0x1, "5688408dae1461bfabb28cb55c47065c5bb435ee906d43431ab08988fd8e73695a79cdcf976669731773b721abc319c9306e1c3406353ddb4d0000354c2891", 0x20}, 0x60) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000240)={'netdevsim0\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x4, 0x1000, 0x8, 0x1, 0xa84, 0xe0, 0xa, 0xfffffffa}}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000003a00010325bd7000fcffffff03000000"], 0x5a}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r5) socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x80080, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000001d80), 0x80800, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) 457.748865ms ago: executing program 0 (id=408): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) chmod(&(0x7f0000000140)='./file0\x00', 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)={0x38, 0x2, 0x8, 0x302, 0x0, 0x0, {0x5}, [@CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @fccp}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x10001}]}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7fffffff}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004844}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r2, 0xae80, 0x0) 292.2105ms ago: executing program 4 (id=409): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r1 = socket$key(0xf, 0x3, 0x2) unshare(0x2c020400) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000b00000003000000140000110500000000000000040000000000000b000000000f0000000000000904000000002e61005f005f615f3000793dd26168966f17ef59dd585b4693c834"], &(0x7f0000000380)=""/175, 0x4b, 0xaf, 0x1, 0x7, 0x10000}, 0x28) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x15, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000095000000000000000032dda5093d5b8e5f9cbd6775138aac09b6e8305852825b327791c09df6fb1b34dc246ab17b95598bd4b84f402e2a77fa817170243ffd50efdd167bebc7c3f6fca2e93a303fc42152582717976f4b642cf201e325d0df760f029d36b31150ae53353244aaffd003c7bd"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x22, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000008d}, 0x94) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$sock_attach_bpf(r4, 0x1, 0x34, &(0x7f0000000040)=r3, 0x4) socket$inet(0x2, 0x800, 0x4) sendmsg$key(r1, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x10, 0x32, 0x3, 0x0, 0x0, 0x0, 0x0, @in=@rand_addr=0x10006c00, @in6=@private2}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x80}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000000)="0c000000010001", 0x7) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$sock_buf(r6, 0x1, 0x4a, 0x0, &(0x7f0000000080)) socket$kcm(0x2, 0xa, 0x2) r7 = socket$tipc(0x1e, 0x2, 0x0) r8 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r8, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) connect$inet(r8, &(0x7f0000000080)={0x2, 0x4e20, @rand_addr=0x64010002}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000003ac0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c40)=""/112, 0x70}, 0x40}], 0x1, 0x45833af96e4a38de, 0x0) sendmmsg$inet(r8, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r9 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r10 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000000040)={0x41, 0x0, 0x3}, 0x10) socket$kcm(0x2, 0xa, 0x2) 200.591603ms ago: executing program 0 (id=410): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004044}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x11}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)="27032400000514000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000780)="f058050000007f8f", 0x8}], 0x2}, 0x5) 171.468965ms ago: executing program 2 (id=411): socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 0s ago: executing program 2 (id=412): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)={0x2c, r1, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0xa6}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x2}]}, 0x2c}}, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff000000000000000458000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r5, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) connect$llc(r5, &(0x7f0000000040)={0x1a, 0x300, 0x6, 0x2, 0x9, 0xd5, @random="0d0728c880c3"}, 0x10) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in=@rand_addr=0x64010102, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x0, 0x0, 0x0, 0xa0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x2, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0xf, 0xedcb, 0x9, 0x10}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(r8, &(0x7f0000000080), 0x12) pselect6(0x40, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x2, 0x8, 0x6, 0x40, 0x8000}, 0x0, &(0x7f0000000240)={0x1f, 0x111, 0x0, 0x0, 0x0, 0x0, 0x519, 0x4000000000000004}, 0x0, 0x0) write$cgroup_devices(r8, 0x0, 0x8) sendmsg$nl_xfrm(r7, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)=@newsa={0x138, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x2b}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0x100, 0x1000000000000192, 0x8000000009ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3f9, 0x5}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x844) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_GET(r3, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x28, 0x1409, 0x806, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x14}, 0x24004000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) bind$unix(r9, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.32' (ED25519) to the list of known hosts. [ 54.815577][ T4175] cgroup: Unknown subsys name 'net' [ 54.950402][ T4175] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 56.398484][ T4175] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 57.728056][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 57.805651][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 57.880747][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 57.899224][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.907290][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.916142][ T4187] device bridge_slave_0 entered promiscuous mode [ 57.938964][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.946444][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.954394][ T4187] device bridge_slave_1 entered promiscuous mode [ 58.004451][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 58.030740][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.037991][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.046623][ T4189] device bridge_slave_0 entered promiscuous mode [ 58.056095][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.070845][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.086505][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.093587][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.101801][ T4189] device bridge_slave_1 entered promiscuous mode [ 58.126604][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 58.164030][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.171416][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.179338][ T4188] device bridge_slave_0 entered promiscuous mode [ 58.189636][ T4187] team0: Port device team_slave_0 added [ 58.221468][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.228857][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.236776][ T4188] device bridge_slave_1 entered promiscuous mode [ 58.245216][ T4187] team0: Port device team_slave_1 added [ 58.258791][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.270968][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.320205][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.327384][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.353659][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.373942][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.381135][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.407317][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.432833][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.444473][ T4189] team0: Port device team_slave_0 added [ 58.471776][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.482313][ T4189] team0: Port device team_slave_1 added [ 58.496946][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.504256][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.512947][ T4190] device bridge_slave_0 entered promiscuous mode [ 58.521018][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.528406][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.536903][ T4191] device bridge_slave_0 entered promiscuous mode [ 58.550299][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.558390][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.566874][ T4191] device bridge_slave_1 entered promiscuous mode [ 58.584881][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.592064][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.600932][ T4190] device bridge_slave_1 entered promiscuous mode [ 58.626422][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.633415][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.660221][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.681653][ T4188] team0: Port device team_slave_0 added [ 58.697669][ T4187] device hsr_slave_0 entered promiscuous mode [ 58.704339][ T4187] device hsr_slave_1 entered promiscuous mode [ 58.712184][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.719285][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.746307][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.766387][ T4188] team0: Port device team_slave_1 added [ 58.773719][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.787307][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.798977][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.823198][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.868168][ T4190] team0: Port device team_slave_0 added [ 58.906539][ T4190] team0: Port device team_slave_1 added [ 58.915132][ T4191] team0: Port device team_slave_0 added [ 58.922963][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.930170][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.956322][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.971889][ T4189] device hsr_slave_0 entered promiscuous mode [ 58.979072][ T4189] device hsr_slave_1 entered promiscuous mode [ 58.985965][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.994077][ T4189] Cannot create hsr debugfs directory [ 59.013551][ T4191] team0: Port device team_slave_1 added [ 59.019999][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.027599][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.053880][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.087640][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.094777][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.121059][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.139767][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.146861][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.172904][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.209555][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.217439][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.244388][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.256721][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.263701][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.289840][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.348583][ T4190] device hsr_slave_0 entered promiscuous mode [ 59.355564][ T4190] device hsr_slave_1 entered promiscuous mode [ 59.362304][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.370389][ T4190] Cannot create hsr debugfs directory [ 59.384055][ T4188] device hsr_slave_0 entered promiscuous mode [ 59.391230][ T4188] device hsr_slave_1 entered promiscuous mode [ 59.398260][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.405884][ T4188] Cannot create hsr debugfs directory [ 59.435898][ T4191] device hsr_slave_0 entered promiscuous mode [ 59.443077][ T4191] device hsr_slave_1 entered promiscuous mode [ 59.449680][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.458312][ T4198] Bluetooth: hci3: command 0x0409 tx timeout [ 59.458516][ T4191] Cannot create hsr debugfs directory [ 59.470846][ T23] Bluetooth: hci1: command 0x0409 tx timeout [ 59.534735][ T4198] Bluetooth: hci4: command 0x0409 tx timeout [ 59.534870][ T23] Bluetooth: hci0: command 0x0409 tx timeout [ 59.547146][ T23] Bluetooth: hci2: command 0x0409 tx timeout [ 59.764110][ T4187] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 59.776659][ T4187] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 59.789546][ T4187] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 59.800559][ T4187] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 59.839963][ T4189] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 59.849561][ T4189] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 59.860020][ T4189] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 59.871127][ T4189] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 59.953395][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.987487][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.997865][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.009695][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.021604][ T4190] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 60.033046][ T4190] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 60.046313][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.056367][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.066197][ T3062] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.073356][ T3062] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.094189][ T4190] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 60.109258][ T4190] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 60.121210][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.130015][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.139474][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.148689][ T3062] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.155796][ T3062] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.164433][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.173800][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.210955][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.220657][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.230606][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.241036][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.249908][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.259033][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.267888][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.276790][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.286518][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.301098][ T4191] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 60.314869][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.337443][ T4191] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 60.365767][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.375045][ T4191] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 60.427332][ T4191] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 60.439275][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.448780][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.461513][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.477108][ T4188] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 60.495972][ T4188] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 60.512380][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.522072][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.530944][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.538084][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.547810][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.572331][ T4188] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 60.608357][ T4188] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 60.632986][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.642553][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.651338][ T156] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.658479][ T156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.670634][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.682839][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.691768][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.715240][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.727023][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.751558][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.762389][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.773148][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.786201][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.795448][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.819817][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.830898][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.840852][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.858834][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.867978][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.881962][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.894180][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.905679][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.917219][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.953694][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.962236][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.972942][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.981697][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.989964][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.998169][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.013114][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.025505][ T4187] device veth0_vlan entered promiscuous mode [ 61.037831][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.051020][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.065845][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.078941][ T4187] device veth1_vlan entered promiscuous mode [ 61.100820][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.110263][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.119634][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.129428][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.136690][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.146092][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.155154][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.163547][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.170698][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.180675][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.206253][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.224822][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.233146][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.250801][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.260405][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.267675][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.275588][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.284171][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.293799][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.313477][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.322639][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.332761][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.341869][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.349080][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.358200][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.378068][ T4187] device veth0_macvtap entered promiscuous mode [ 61.399948][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.408407][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.420200][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.429037][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.438103][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.446565][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.453979][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.462245][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.471429][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.481226][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.490136][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.500313][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.516003][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.523809][ T4187] device veth1_macvtap entered promiscuous mode [ 61.535172][ T4234] Bluetooth: hci3: command 0x041b tx timeout [ 61.540832][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.549230][ T4232] Bluetooth: hci1: command 0x041b tx timeout [ 61.558578][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.567254][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.577378][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.586237][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.594018][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.602017][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.611101][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.620055][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.627927][ T4232] Bluetooth: hci2: command 0x041b tx timeout [ 61.634055][ T4232] Bluetooth: hci0: command 0x041b tx timeout [ 61.641006][ T4232] Bluetooth: hci4: command 0x041b tx timeout [ 61.663650][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.675559][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.685056][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.696441][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.705336][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.713583][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.734346][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.754305][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.763483][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.776789][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.787686][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.796786][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.803847][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.811891][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.820602][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.830118][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.837240][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.845616][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.853791][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.862792][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.871224][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.880400][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.888967][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.896971][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.912683][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.921811][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.936527][ T4189] device veth0_vlan entered promiscuous mode [ 61.966887][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.988479][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.007753][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.021324][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.030158][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.039787][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.053415][ T4189] device veth1_vlan entered promiscuous mode [ 62.076546][ T4187] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.103123][ T4187] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.126451][ T4187] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.144667][ T4187] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.167064][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.177452][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.188127][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.196811][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.205692][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.213961][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.223805][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.232697][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.242286][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.261639][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.279525][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.297368][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.308371][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.417846][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.433904][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.443397][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.451120][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.458971][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.469621][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.486986][ T4190] device veth0_vlan entered promiscuous mode [ 62.501047][ T4189] device veth0_macvtap entered promiscuous mode [ 62.510606][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.525621][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.533620][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.550150][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.562219][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.586008][ T4190] device veth1_vlan entered promiscuous mode [ 62.598269][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.616669][ T4189] device veth1_macvtap entered promiscuous mode [ 62.644096][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.659771][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.672117][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.685232][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.707367][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.722041][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.733663][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.757788][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.777418][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.789779][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.800683][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.810594][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.835695][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.844548][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.853848][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.863337][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.893962][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.901611][ T4189] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.904948][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.921908][ T4189] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.930889][ T4189] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.939875][ T4189] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.970102][ T4190] device veth0_macvtap entered promiscuous mode [ 62.995183][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.008203][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.017373][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.026527][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.037497][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.074264][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.093043][ T4190] device veth1_macvtap entered promiscuous mode [ 63.107831][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.118477][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.124217][ T4188] device veth0_vlan entered promiscuous mode [ 63.133467][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.143946][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.152766][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.165003][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.175735][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.183991][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.195733][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.223090][ T4191] device veth0_vlan entered promiscuous mode [ 63.245973][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.255509][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.264152][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.277142][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.290388][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.301555][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.312934][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.323662][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.341210][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.361825][ T4188] device veth1_vlan entered promiscuous mode [ 63.374195][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.390337][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.399215][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.411113][ T4191] device veth1_vlan entered promiscuous mode [ 63.450165][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.473961][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.494619][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.508435][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.519939][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.549196][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.563860][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.572447][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.587303][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.597111][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.610413][ T4190] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.614837][ T4234] Bluetooth: hci1: command 0x040f tx timeout [ 63.627314][ T4234] Bluetooth: hci3: command 0x040f tx timeout [ 63.634492][ T4190] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.643601][ T4190] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.669098][ T4190] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.692787][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.701713][ T4234] Bluetooth: hci4: command 0x040f tx timeout [ 63.706555][ T4273] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6'. [ 63.709334][ T4234] Bluetooth: hci0: command 0x040f tx timeout [ 63.722899][ T4234] Bluetooth: hci2: command 0x040f tx timeout [ 63.723864][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.762987][ T4188] device veth0_macvtap entered promiscuous mode [ 63.769508][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.780108][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.817248][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.832791][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.843447][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.868794][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.895693][ T4191] device veth0_macvtap entered promiscuous mode [ 63.917402][ T4188] device veth1_macvtap entered promiscuous mode [ 63.927344][ T156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.947751][ T156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.961793][ T4191] device veth1_macvtap entered promiscuous mode [ 63.977257][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.986025][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.994067][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.003296][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.029050][ T4277] device syzkaller0 entered promiscuous mode [ 64.068501][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.087539][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.105610][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.117231][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.127227][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.137853][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.149053][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.157853][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.168772][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.180003][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.190784][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.201570][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.212374][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.224552][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.236103][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.248133][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.258407][ T4277] tipc: Started in network mode [ 64.263417][ T4277] tipc: Node identity 5659048091c5, cluster identity 4711 [ 64.271458][ T4277] tipc: Enabled bearer , priority 0 [ 64.287773][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.296650][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.307004][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.317593][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.328759][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.340895][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.351137][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.361879][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.371764][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.382220][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.393306][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.403962][ T4276] tipc: Resetting bearer [ 64.431884][ T4276] tipc: Disabling bearer [ 64.461919][ T156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.470465][ T156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.496899][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.510095][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.521126][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.532004][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.542091][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.552840][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.563491][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.574544][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.586109][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.593514][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.601754][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.611631][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.622101][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.631622][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.643213][ T4191] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.652899][ T4191] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.662214][ T4191] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.671338][ T4191] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.697075][ T4188] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.707078][ T4188] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.717940][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.730976][ T4188] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.744732][ T4188] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.765947][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.814010][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.831366][ T4288] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 65.013817][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.035357][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.068830][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.070579][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.103167][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.124148][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.145943][ T156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.168747][ T156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.182021][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.209032][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.219934][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.233685][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.351409][ T4288] kvm [4287]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x495a [ 65.369212][ T4288] kvm [4287]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 65.381586][ T4303] tipc: Started in network mode [ 65.399097][ T4303] tipc: Node identity 9a50fc00be6e, cluster identity 4711 [ 65.419844][ T4288] kvm [4287]: vcpu0, guest rIP: 0x18e vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x100b, nop [ 65.424098][ T4303] tipc: Enabled bearer , priority 0 [ 65.435090][ T4288] kvm [4287]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0x5956 [ 65.464201][ T4304] device syzkaller0 entered promiscuous mode [ 65.479191][ T4288] kvm [4287]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0x9c5 [ 65.495990][ T4303] device syzkaller0 entered promiscuous mode [ 65.515536][ T4309] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13'. [ 65.531648][ T4288] kvm [4287]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0x61ea [ 65.541804][ T4309] device ipvlan1 entered promiscuous mode [ 65.542739][ T4309] device ipvlan1 left promiscuous mode [ 65.559484][ T4288] kvm [4287]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x4939 [ 65.569977][ T4288] kvm [4287]: vcpu0, guest rIP: 0x1b8 ignored wrmsr: 0x11e data 0xbe702111 [ 65.586977][ T4288] kvm [4287]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x187 data 0x4a56 [ 65.588266][ T4303] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 65.602432][ T4288] kvm [4287]: vcpu0, guest rIP: 0x18e vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x11c7, nop [ 65.695709][ T4234] Bluetooth: hci3: command 0x0419 tx timeout [ 65.716359][ T4234] Bluetooth: hci1: command 0x0419 tx timeout [ 65.775566][ T4234] Bluetooth: hci2: command 0x0419 tx timeout [ 65.785407][ T4234] Bluetooth: hci0: command 0x0419 tx timeout [ 65.799068][ T4234] Bluetooth: hci4: command 0x0419 tx timeout [ 65.860458][ T4303] tipc: Resetting bearer [ 65.992293][ T4316] device syzkaller0 entered promiscuous mode [ 66.032713][ T4302] tipc: Resetting bearer [ 66.063954][ T4302] tipc: Disabling bearer [ 66.272968][ T4327] TCP: TCP_TX_DELAY enabled [ 66.716069][ T4354] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 66.959063][ T4369] device syzkaller0 entered promiscuous mode [ 67.489755][ T4394] netlink: 28 bytes leftover after parsing attributes in process `syz.2.41'. [ 67.548651][ T4394] netlink: 28 bytes leftover after parsing attributes in process `syz.2.41'. [ 67.618127][ T4394] device erspan0 entered promiscuous mode [ 67.665698][ T4394] device gretap0 entered promiscuous mode [ 67.721165][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 68.082157][ T4236] hid-generic 0005:10CF:7FFF.0001: item fetching failed at offset 0/1 [ 68.165401][ T4236] hid-generic: probe of 0005:10CF:7FFF.0001 failed with error -22 [ 68.181068][ T4372] ODEBUG: Out of memory. ODEBUG disabled [ 69.184074][ T4476] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 69.256219][ T4477] netlink: 'syz.0.65': attribute type 2 has an invalid length. [ 69.264153][ T4477] netlink: 199828 bytes leftover after parsing attributes in process `syz.0.65'. [ 69.294193][ T4480] netlink: 244 bytes leftover after parsing attributes in process `syz.0.65'. [ 69.430226][ T4486] netlink: 8 bytes leftover after parsing attributes in process `syz.2.68'. [ 69.492010][ T4488] netlink: 8 bytes leftover after parsing attributes in process `syz.1.70'. [ 69.502769][ T4488] netlink: 8 bytes leftover after parsing attributes in process `syz.1.70'. [ 69.513387][ T4488] netlink: 1 bytes leftover after parsing attributes in process `syz.1.70'. [ 69.544740][ T4490] syz.4.71 uses obsolete (PF_INET,SOCK_PACKET) [ 70.203514][ T4514] capability: warning: `syz.4.82' uses deprecated v2 capabilities in a way that may be insecure [ 70.344504][ T4518] netlink: 44 bytes leftover after parsing attributes in process `syz.4.83'. [ 70.421329][ T4516] device bridge1 entered promiscuous mode [ 70.443609][ T4516] team0: Port device bridge1 added [ 70.486099][ T4516] bridge0: port 3(team0) entered blocking state [ 70.503014][ T4516] bridge0: port 3(team0) entered disabled state [ 70.541150][ T4516] device team0 entered promiscuous mode [ 70.551499][ T4516] device team_slave_0 entered promiscuous mode [ 70.562139][ T4516] device team_slave_1 entered promiscuous mode [ 70.571987][ T4516] bridge0: port 3(team0) entered blocking state [ 70.578632][ T4516] bridge0: port 3(team0) entered forwarding state [ 70.598903][ T4524] netlink: 8 bytes leftover after parsing attributes in process `syz.0.84'. [ 70.624482][ T4524] netlink: 24 bytes leftover after parsing attributes in process `syz.0.84'. [ 70.902405][ T4535] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 71.147119][ T4543] netlink: 4 bytes leftover after parsing attributes in process `syz.2.91'. [ 71.223029][ T4541] tipc: Enabled bearer , priority 0 [ 71.241058][ T4541] device syzkaller0 entered promiscuous mode [ 71.288767][ T4541] tipc: Resetting bearer [ 71.303676][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.310461][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.373746][ T4540] tipc: Resetting bearer [ 71.450150][ T4540] tipc: Disabling bearer [ 71.887976][ T4558] device syzkaller0 entered promiscuous mode [ 72.013856][ T4372] Set syz1 is full, maxelem 65536 reached [ 72.602418][ T4593] Zero length message leads to an empty skb [ 73.382620][ T4628] can: request_module (can-proto-0) failed. [ 73.918323][ T4661] IPv6: ADDRCONF(NETDEV_CHANGE): nr6: link becomes ready [ 74.269448][ T4683] tipc: Started in network mode [ 74.274467][ T4683] tipc: Node identity 7a1f1b674be2, cluster identity 4711 [ 74.283102][ T4683] tipc: Enabled bearer , priority 0 [ 74.293246][ T4683] device syzkaller0 entered promiscuous mode [ 74.340808][ T4688] xt_hashlimit: size too large, truncated to 1048576 [ 74.445966][ T4691] tipc: Resetting bearer [ 74.493612][ T4681] tipc: Resetting bearer [ 74.571596][ T4681] tipc: Disabling bearer [ 74.737717][ T4703] __nla_validate_parse: 3 callbacks suppressed [ 74.737734][ T4703] netlink: 60 bytes leftover after parsing attributes in process `syz.0.149'. [ 75.264318][ T4724] device syzkaller0 entered promiscuous mode [ 75.538015][ T4732] device syzkaller0 entered promiscuous mode [ 75.562719][ T4733] tipc: Started in network mode [ 75.584246][ T4733] tipc: Node identity 4e99e7cdebf8, cluster identity 4711 [ 75.605107][ T4733] tipc: Enabled bearer , priority 0 [ 75.613754][ T4736] device syzkaller0 entered promiscuous mode [ 75.668681][ T4733] tipc: Resetting bearer [ 75.692657][ T4729] tipc: Resetting bearer [ 75.734673][ T4729] tipc: Disabling bearer [ 76.328725][ T4758] device syzkaller0 entered promiscuous mode [ 76.638866][ T4768] tipc: Enabled bearer , priority 0 [ 76.705966][ T4776] device syzkaller0 entered promiscuous mode [ 76.766057][ T4768] tipc: Resetting bearer [ 76.810862][ T4767] tipc: Resetting bearer [ 76.909786][ T4767] tipc: Disabling bearer [ 77.272280][ T4789] tipc: Cannot configure node identity twice [ 77.567561][ T4800] device syzkaller0 entered promiscuous mode [ 77.917871][ T4813] tipc: Enabled bearer , priority 0 [ 77.956445][ T4813] device syzkaller0 entered promiscuous mode [ 78.025299][ T4813] tipc: Resetting bearer [ 78.055590][ T4812] tipc: Resetting bearer [ 78.105818][ T4812] tipc: Disabling bearer [ 78.645170][ T4839] device syzkaller0 entered promiscuous mode [ 78.678317][ T4841] Illegal XDP return value 4294967282, expect packet loss! [ 78.753442][ T4843] netlink: 60 bytes leftover after parsing attributes in process `syz.2.203'. [ 78.812633][ T4843] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.821054][ T4843] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.195589][ T4857] tipc: Started in network mode [ 79.200535][ T4857] tipc: Node identity b6e568bdab5e, cluster identity 4711 [ 79.226374][ T4857] tipc: Enabled bearer , priority 0 [ 79.234264][ T4857] device syzkaller0 entered promiscuous mode [ 79.290779][ T4857] tipc: Resetting bearer [ 79.310653][ T4855] tipc: Resetting bearer [ 79.354057][ T4855] tipc: Disabling bearer [ 79.760508][ T4882] device syzkaller0 entered promiscuous mode [ 79.849868][ T4885] netlink: 12 bytes leftover after parsing attributes in process `syz.0.219'. [ 80.354845][ T4910] tipc: Enabled bearer , priority 0 [ 80.427815][ T4920] device syzkaller0 entered promiscuous mode [ 80.519566][ T4910] tipc: Resetting bearer [ 80.561005][ T4909] tipc: Resetting bearer [ 80.582039][ T4909] tipc: Disabling bearer [ 80.611389][ T4925] device syzkaller0 entered promiscuous mode [ 80.745421][ T4927] netlink: 14 bytes leftover after parsing attributes in process `syz.0.232'. [ 81.101259][ T4952] SET target dimension over the limit! [ 81.137429][ T4952] netlink: 8 bytes leftover after parsing attributes in process `syz.4.242'. [ 81.428239][ T4969] tipc: Enabled bearer , priority 0 [ 81.477320][ T4973] device syzkaller0 entered promiscuous mode [ 81.503671][ T4969] device syzkaller0 entered promiscuous mode [ 81.536860][ T1108] cfg80211: failed to load regulatory.db [ 81.568715][ T4969] tipc: Resetting bearer [ 81.647333][ T4968] tipc: Resetting bearer [ 81.664351][ T4968] tipc: Disabling bearer [ 82.500361][ T5032] device syzkaller0 entered promiscuous mode [ 82.532464][ T5034] tipc: Enabled bearer , priority 0 [ 82.584718][ T5034] device syzkaller0 entered promiscuous mode [ 82.612576][ T5034] tipc: Resetting bearer [ 82.623054][ T5033] tipc: Resetting bearer [ 82.678741][ T5033] tipc: Disabling bearer [ 82.821695][ T5047] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 83.421626][ T5082] device syzkaller0 entered promiscuous mode [ 83.587341][ T5090] tipc: Enabled bearer , priority 0 [ 83.612609][ T5090] device syzkaller0 entered promiscuous mode [ 83.653458][ T5090] tipc: Resetting bearer [ 83.694340][ T5089] tipc: Resetting bearer [ 83.768808][ T5089] tipc: Disabling bearer [ 84.212718][ T5127] device syzkaller0 entered promiscuous mode [ 84.360601][ T5134] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.299'. [ 84.593286][ T5141] tipc: Enabled bearer , priority 0 [ 84.629951][ T5141] device syzkaller0 entered promiscuous mode [ 84.705646][ T5141] tipc: Resetting bearer [ 84.712963][ T5147] netlink: 48 bytes leftover after parsing attributes in process `syz.2.305'. [ 84.750899][ T5140] tipc: Resetting bearer [ 84.785156][ T5140] tipc: Disabling bearer [ 85.119800][ T5167] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 85.407070][ T5176] device syzkaller0 entered promiscuous mode [ 85.597156][ T5183] netlink: 8 bytes leftover after parsing attributes in process `syz.4.317'. [ 85.621275][ T5187] tipc: Enabled bearer , priority 0 [ 85.642360][ T5187] device syzkaller0 entered promiscuous mode [ 85.731463][ T5187] tipc: Resetting bearer [ 85.827951][ T5186] tipc: Resetting bearer [ 85.861971][ T5186] tipc: Disabling bearer [ 85.901230][ T5204] device syzkaller0 entered promiscuous mode [ 86.306771][ T5221] netlink: 4 bytes leftover after parsing attributes in process `syz.4.332'. [ 86.760373][ T5238] tipc: Enabled bearer , priority 0 [ 86.796816][ T5237] device syzkaller0 entered promiscuous mode [ 86.816212][ T5238] device syzkaller0 entered promiscuous mode [ 86.833411][ T5241] device syzkaller0 entered promiscuous mode [ 86.913670][ T5245] tipc: Resetting bearer [ 87.011752][ T5235] tipc: Resetting bearer [ 87.052809][ T5235] tipc: Disabling bearer [ 87.195380][ T5256] netlink: 'syz.1.346': attribute type 1 has an invalid length. [ 87.229038][ T5256] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 87.236834][ T5256] IPv6: NLM_F_CREATE should be set when creating new route [ 87.839579][ T5277] device syzkaller0 entered promiscuous mode [ 87.864323][ T5277] tipc: Enabled bearer , priority 0 [ 87.903873][ T5277] tipc: Resetting bearer [ 87.944113][ T5274] tipc: Resetting bearer [ 87.973143][ T5274] tipc: Disabling bearer [ 88.404197][ T5298] tipc: Enabled bearer , priority 10 [ 88.488148][ T5300] device syzkaller0 entered promiscuous mode [ 88.751602][ T5308] netlink: 12 bytes leftover after parsing attributes in process `syz.4.358'. [ 88.802440][ T5308] netlink: 4 bytes leftover after parsing attributes in process `syz.4.358'. [ 88.835773][ T5308] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.845263][ T5308] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.855254][ T5308] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.864023][ T5308] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.952255][ T5308] netlink: 4 bytes leftover after parsing attributes in process `syz.4.358'. [ 89.005748][ T5308] netlink: 4 bytes leftover after parsing attributes in process `syz.4.358'. [ 89.406156][ T4240] tipc: Node number set to 608107520 [ 89.695571][ T5336] device syzkaller0 entered promiscuous mode [ 89.848118][ T5340] device syzkaller0 entered promiscuous mode [ 90.203981][ T5352] device syzkaller0 entered promiscuous mode [ 90.898099][ T5376] device syzkaller0 entered promiscuous mode [ 91.059522][ T5379] netlink: 'syz.4.384': attribute type 10 has an invalid length. [ 91.096187][ T5379] netlink: 40 bytes leftover after parsing attributes in process `syz.4.384'. [ 91.126901][ T5379] device dummy0 entered promiscuous mode [ 91.310099][ T5389] device sit0 entered promiscuous mode [ 91.372486][ T5389] netlink: 8 bytes leftover after parsing attributes in process `syz.4.388'. [ 91.692140][ T5405] device syzkaller0 entered promiscuous mode [ 92.011865][ T5412] device syzkaller0 entered promiscuous mode [ 92.292226][ T5424] netlink: 8 bytes leftover after parsing attributes in process `syz.4.402'. [ 92.963026][ T5456] device syzkaller0 entered promiscuous mode [ 93.091170][ T5465] [ 93.093564][ T5465] ====================================================== [ 93.100685][ T5465] WARNING: possible circular locking dependency detected [ 93.107725][ T5465] syzkaller #0 Not tainted [ 93.112159][ T5465] ------------------------------------------------------ [ 93.119195][ T5465] syz.2.412/5465 is trying to acquire lock: [ 93.125188][ T5465] ffff88807b090d60 (sk_lock-AF_INET6){+.+.}-{0:0}, at: inet_sk_diag_fill+0xf5e/0x1ca0 [ 93.134799][ T5465] [ 93.134799][ T5465] but task is already holding lock: [ 93.142176][ T5465] ffffc900018c4458 (&h->lhash2[i].lock){+.+.}-{2:2}, at: mptcp_diag_dump+0x917/0x12b0 [ 93.151786][ T5465] [ 93.151786][ T5465] which lock already depends on the new lock. [ 93.151786][ T5465] [ 93.162209][ T5465] [ 93.162209][ T5465] the existing dependency chain (in reverse order) is: [ 93.171443][ T5465] [ 93.171443][ T5465] -> #1 (&h->lhash2[i].lock){+.+.}-{2:2}: [ 93.179532][ T5465] _raw_spin_lock+0x2a/0x40 [ 93.184666][ T5465] __inet_hash+0xe3/0x960 [ 93.189566][ T5465] inet_csk_listen_start+0x22f/0x320 [ 93.195632][ T5465] inet_listen+0x2e1/0x590 [ 93.200609][ T5465] __sys_listen+0x19d/0x220 [ 93.205761][ T5465] __x64_sys_listen+0x56/0x60 [ 93.210998][ T5465] do_syscall_64+0x4c/0xa0 [ 93.215970][ T5465] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 93.222505][ T5465] [ 93.222505][ T5465] -> #0 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 93.230366][ T5465] __lock_acquire+0x2c42/0x7d10 [ 93.235778][ T5465] lock_acquire+0x19e/0x400 [ 93.240836][ T5465] mptcp_diag_get_info+0x1f2/0x9e0 [ 93.246493][ T5465] inet_sk_diag_fill+0xf5e/0x1ca0 [ 93.252068][ T5465] mptcp_diag_dump+0xce6/0x12b0 [ 93.257466][ T5465] __inet_diag_dump+0x1f6/0x380 [ 93.263007][ T5465] netlink_dump+0x694/0xcf0 [ 93.268068][ T5465] __netlink_dump_start+0x523/0x700 [ 93.273909][ T5465] inet_diag_handler_cmd+0x1d3/0x2b0 [ 93.279745][ T5465] sock_diag_rcv_msg+0x164/0x3e0 [ 93.285232][ T5465] netlink_rcv_skb+0x1f5/0x440 [ 93.290639][ T5465] sock_diag_rcv+0x26/0x40 [ 93.295614][ T5465] netlink_unicast+0x774/0x920 [ 93.300934][ T5465] netlink_sendmsg+0x8ba/0xbe0 [ 93.306618][ T5465] sock_write_iter+0x2a6/0x3a0 [ 93.311930][ T5465] do_iter_readv_writev+0x47e/0x5f0 [ 93.317780][ T5465] do_iter_write+0x205/0x7b0 [ 93.322916][ T5465] do_writev+0x281/0x480 [ 93.327700][ T5465] do_syscall_64+0x4c/0xa0 [ 93.332677][ T5465] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 93.339118][ T5465] [ 93.339118][ T5465] other info that might help us debug this: [ 93.339118][ T5465] [ 93.349368][ T5465] Possible unsafe locking scenario: [ 93.349368][ T5465] [ 93.356970][ T5465] CPU0 CPU1 [ 93.362877][ T5465] ---- ---- [ 93.368263][ T5465] lock(&h->lhash2[i].lock); [ 93.372971][ T5465] lock(sk_lock-AF_INET6); [ 93.380205][ T5465] lock(&h->lhash2[i].lock); [ 93.387426][ T5465] lock(sk_lock-AF_INET6); [ 93.391951][ T5465] [ 93.391951][ T5465] *** DEADLOCK *** [ 93.391951][ T5465] [ 93.400104][ T5465] 6 locks held by syz.2.412/5465: [ 93.405151][ T5465] #0: ffffffff8d447768 (sock_diag_mutex){+.+.}-{3:3}, at: sock_diag_rcv+0x17/0x40 [ 93.414593][ T5465] #1: ffffffff8d447628 (sock_diag_table_mutex){+.+.}-{3:3}, at: sock_diag_rcv_msg+0x217/0x3e0 [ 93.425018][ T5465] #2: ffff888061f47698 (nlk_cb_mutex-SOCK_DIAG){+.+.}-{3:3}, at: __netlink_dump_start+0x11f/0x700 [ 93.435864][ T5465] #3: ffffffff8d521828 (inet_diag_table_mutex){+.+.}-{3:3}, at: __inet_diag_dump+0x181/0x380 [ 93.446284][ T5465] #4: ffffffff8c31f320 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 93.455638][ T5465] #5: ffffc900018c4458 (&h->lhash2[i].lock){+.+.}-{2:2}, at: mptcp_diag_dump+0x917/0x12b0 [ 93.465702][ T5465] [ 93.465702][ T5465] stack backtrace: [ 93.471622][ T5465] CPU: 0 PID: 5465 Comm: syz.2.412 Not tainted syzkaller #0 [ 93.478941][ T5465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 93.489189][ T5465] Call Trace: [ 93.492497][ T5465] [ 93.495458][ T5465] dump_stack_lvl+0x188/0x250 [ 93.500166][ T5465] ? load_image+0x400/0x400 [ 93.504695][ T5465] ? show_regs_print_info+0x20/0x20 [ 93.510007][ T5465] ? print_circular_bug+0x12b/0x1a0 [ 93.515230][ T5465] check_noncircular+0x296/0x330 [ 93.520192][ T5465] ? add_chain_block+0x940/0x940 [ 93.525151][ T5465] ? lockdep_lock+0xf1/0x1f0 [ 93.529772][ T5465] ? mark_lock+0x94/0x320 [ 93.534128][ T5465] __lock_acquire+0x2c42/0x7d10 [ 93.539101][ T5465] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 93.545119][ T5465] ? verify_lock_unused+0x140/0x140 [ 93.550355][ T5465] ? lockdep_hardirqs_on_prepare+0x770/0x770 [ 93.556469][ T5465] ? verify_lock_unused+0x140/0x140 [ 93.561699][ T5465] ? __local_bh_enable_ip+0xd7/0x1c0 [ 93.567007][ T5465] ? __local_bh_enable_ip+0x136/0x1c0 [ 93.572456][ T5465] ? lockdep_hardirqs_on+0x94/0x140 [ 93.577776][ T5465] ? __local_bh_enable_ip+0x136/0x1c0 [ 93.583167][ T5465] ? _local_bh_enable+0xa0/0xa0 [ 93.588139][ T5465] ? nla_put+0x130/0x1e0 [ 93.592418][ T5465] lock_acquire+0x19e/0x400 [ 93.596953][ T5465] ? inet_sk_diag_fill+0xf5e/0x1ca0 [ 93.602191][ T5465] ? read_lock_is_recursive+0x10/0x10 [ 93.607591][ T5465] ? rcu_lock_release+0x5/0x20 [ 93.612386][ T5465] ? __lock_acquire+0x7d10/0x7d10 [ 93.617443][ T5465] ? inet_sk_diag_fill+0xf5e/0x1ca0 [ 93.622673][ T5465] mptcp_diag_get_info+0x1f2/0x9e0 [ 93.627812][ T5465] ? inet_sk_diag_fill+0xf5e/0x1ca0 [ 93.633124][ T5465] inet_sk_diag_fill+0xf5e/0x1ca0 [ 93.638185][ T5465] ? inet_diag_msg_attrs_fill+0x930/0x930 [ 93.644037][ T5465] ? do_raw_spin_lock+0x128/0x2f0 [ 93.649096][ T5465] ? __rwlock_init+0x140/0x140 [ 93.653881][ T5465] ? inet_diag_bc_sk+0x18b/0x1120 [ 93.658939][ T5465] mptcp_diag_dump+0xce6/0x12b0 [ 93.663909][ T5465] ? mptcp_token_join_cookie_init_state+0x460/0x460 [ 93.670527][ T5465] __inet_diag_dump+0x1f6/0x380 [ 93.675411][ T5465] netlink_dump+0x694/0xcf0 [ 93.679936][ T5465] ? netlink_lookup+0x1d0/0x1d0 [ 93.684812][ T5465] ? __inet_diag_dump_start+0x805/0x970 [ 93.690424][ T5465] __netlink_dump_start+0x523/0x700 [ 93.695655][ T5465] inet_diag_handler_cmd+0x1d3/0x2b0 [ 93.700969][ T5465] ? rcu_lock_release+0x20/0x20 [ 93.705846][ T5465] ? inet_diag_handler_get_info+0xb90/0xb90 [ 93.711767][ T5465] ? inet_diag_dump_start+0x20/0x20 [ 93.716990][ T5465] ? inet_diag_dump+0x50/0x50 [ 93.721803][ T5465] ? rcu_lock_release+0x20/0x20 [ 93.726772][ T5465] sock_diag_rcv_msg+0x164/0x3e0 [ 93.731740][ T5465] netlink_rcv_skb+0x1f5/0x440 [ 93.736528][ T5465] ? sock_diag_bind+0xa0/0xa0 [ 93.741234][ T5465] ? netlink_ack+0xb50/0xb50 [ 93.745849][ T5465] ? __lock_acquire+0x7d10/0x7d10 [ 93.750990][ T5465] sock_diag_rcv+0x26/0x40 [ 93.755430][ T5465] netlink_unicast+0x774/0x920 [ 93.760230][ T5465] netlink_sendmsg+0x8ba/0xbe0 [ 93.765115][ T5465] ? netlink_getsockopt+0x570/0x570 [ 93.770431][ T5465] ? aa_sock_msg_perm+0x94/0x150 [ 93.775488][ T5465] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 93.780889][ T5465] ? security_socket_sendmsg+0x7c/0xa0 [ 93.786496][ T5465] sock_write_iter+0x2a6/0x3a0 [ 93.791290][ T5465] ? sock_read_iter+0x380/0x380 [ 93.796166][ T5465] do_iter_readv_writev+0x47e/0x5f0 [ 93.801474][ T5465] ? aa_path_link+0x880/0x880 [ 93.806174][ T5465] ? generic_file_rw_checks+0x280/0x280 [ 93.811744][ T5465] ? common_file_perm+0x171/0x1c0 [ 93.816783][ T5465] ? fsnotify_perm+0x5d/0x560 [ 93.821472][ T5465] ? security_file_permission+0x75/0xa0 [ 93.827036][ T5465] do_iter_write+0x205/0x7b0 [ 93.831772][ T5465] ? import_iovec+0x6f/0xa0 [ 93.836396][ T5465] do_writev+0x281/0x480 [ 93.840672][ T5465] ? do_readv+0x460/0x460 [ 93.845030][ T5465] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 93.851130][ T5465] ? lock_chain_count+0x20/0x20 [ 93.856009][ T5465] ? vtime_user_exit+0x2c8/0x3e0 [ 93.860982][ T5465] ? lockdep_hardirqs_on+0x94/0x140 [ 93.866300][ T5465] do_syscall_64+0x4c/0xa0 [ 93.870716][ T5465] ? clear_bhb_loop+0x30/0x80 [ 93.875386][ T5465] ? clear_bhb_loop+0x30/0x80 [ 93.880063][ T5465] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 93.885948][ T5465] RIP: 0033:0x7fc71995ee59 [ 93.890434][ T5465] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.910042][ T5465] RSP: 002b:00007fc717bb8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 93.918453][ T5465] RAX: ffffffffffffffda RBX: 00007fc719bd7fa0 RCX: 00007fc71995ee59 [ 93.926435][ T5465] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000005 [ 93.934419][ T5465] RBP: 00007fc7199f4d6f R08: 0000000000000000 R09: 0000000000000000 [ 93.942380][ T5465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.950343][ T5465] R13: 00007fc719bd8038 R14: 00007fc719bd7fa0 R15: 00007ffcf0759148 [ 93.958311][ T5465] [ 93.963265][ T5465] BUG: sleeping function called from invalid context at net/core/sock.c:3291 [ 93.973136][ T5465] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 5465, name: syz.2.412 [ 93.982123][ T5465] INFO: lockdep is turned off. [ 93.986905][ T5465] Preemption disabled at: [ 93.986915][ T5465] [<0000000000000000>] 0x0 [ 93.995761][ T5465] CPU: 0 PID: 5465 Comm: syz.2.412 Not tainted syzkaller #0 [ 94.003155][ T5465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 94.013293][ T5465] Call Trace: [ 94.016563][ T5465] [ 94.019489][ T5465] dump_stack_lvl+0x188/0x250 [ 94.024162][ T5465] ? show_regs_print_info+0x20/0x20 [ 94.029351][ T5465] ? load_image+0x400/0x400 [ 94.033938][ T5465] ___might_sleep+0x493/0x610 [ 94.038607][ T5465] ? __might_sleep+0xf0/0xf0 [ 94.043453][ T5465] ? read_lock_is_recursive+0x10/0x10 [ 94.048823][ T5465] ? rcu_lock_release+0x5/0x20 [ 94.053616][ T5465] __lock_sock_fast+0x2f/0xe0 [ 94.058297][ T5465] ? inet_sk_diag_fill+0xf5e/0x1ca0 [ 94.063514][ T5465] mptcp_diag_get_info+0x1fe/0x9e0 [ 94.068618][ T5465] inet_sk_diag_fill+0xf5e/0x1ca0 [ 94.073642][ T5465] ? inet_diag_msg_attrs_fill+0x930/0x930 [ 94.079377][ T5465] ? do_raw_spin_lock+0x128/0x2f0 [ 94.084432][ T5465] ? __rwlock_init+0x140/0x140 [ 94.089215][ T5465] ? inet_diag_bc_sk+0x18b/0x1120 [ 94.094260][ T5465] mptcp_diag_dump+0xce6/0x12b0 [ 94.099125][ T5465] ? mptcp_token_join_cookie_init_state+0x460/0x460 [ 94.105730][ T5465] __inet_diag_dump+0x1f6/0x380 [ 94.110592][ T5465] netlink_dump+0x694/0xcf0 [ 94.115110][ T5465] ? netlink_lookup+0x1d0/0x1d0 [ 94.119970][ T5465] ? __inet_diag_dump_start+0x805/0x970 [ 94.125523][ T5465] __netlink_dump_start+0x523/0x700 [ 94.130739][ T5465] inet_diag_handler_cmd+0x1d3/0x2b0 [ 94.136235][ T5465] ? rcu_lock_release+0x20/0x20 [ 94.141117][ T5465] ? inet_diag_handler_get_info+0xb90/0xb90 [ 94.147014][ T5465] ? inet_diag_dump_start+0x20/0x20 [ 94.152209][ T5465] ? inet_diag_dump+0x50/0x50 [ 94.156898][ T5465] ? rcu_lock_release+0x20/0x20 [ 94.161750][ T5465] sock_diag_rcv_msg+0x164/0x3e0 [ 94.166702][ T5465] netlink_rcv_skb+0x1f5/0x440 [ 94.171470][ T5465] ? sock_diag_bind+0xa0/0xa0 [ 94.176143][ T5465] ? netlink_ack+0xb50/0xb50 [ 94.180728][ T5465] ? __lock_acquire+0x7d10/0x7d10 [ 94.185754][ T5465] sock_diag_rcv+0x26/0x40 [ 94.190164][ T5465] netlink_unicast+0x774/0x920 [ 94.194932][ T5465] netlink_sendmsg+0x8ba/0xbe0 [ 94.199701][ T5465] ? netlink_getsockopt+0x570/0x570 [ 94.204898][ T5465] ? aa_sock_msg_perm+0x94/0x150 [ 94.209838][ T5465] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 94.215126][ T5465] ? security_socket_sendmsg+0x7c/0xa0 [ 94.220586][ T5465] sock_write_iter+0x2a6/0x3a0 [ 94.225347][ T5465] ? sock_read_iter+0x380/0x380 [ 94.230202][ T5465] do_iter_readv_writev+0x47e/0x5f0 [ 94.235486][ T5465] ? aa_path_link+0x880/0x880 [ 94.240168][ T5465] ? generic_file_rw_checks+0x280/0x280 [ 94.245713][ T5465] ? common_file_perm+0x171/0x1c0 [ 94.250744][ T5465] ? fsnotify_perm+0x5d/0x560 [ 94.255426][ T5465] ? security_file_permission+0x75/0xa0 [ 94.260971][ T5465] do_iter_write+0x205/0x7b0 [ 94.265734][ T5465] ? import_iovec+0x6f/0xa0 [ 94.270237][ T5465] do_writev+0x281/0x480 [ 94.274481][ T5465] ? do_readv+0x460/0x460 [ 94.278897][ T5465] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 94.284878][ T5465] ? lock_chain_count+0x20/0x20 [ 94.289744][ T5465] ? vtime_user_exit+0x2c8/0x3e0 [ 94.294680][ T5465] ? lockdep_hardirqs_on+0x94/0x140 [ 94.299965][ T5465] do_syscall_64+0x4c/0xa0 [ 94.304494][ T5465] ? clear_bhb_loop+0x30/0x80 [ 94.309171][ T5465] ? clear_bhb_loop+0x30/0x80 [ 94.313849][ T5465] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 94.319751][ T5465] RIP: 0033:0x7fc71995ee59 [ 94.324168][ T5465] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.343856][ T5465] RSP: 002b:00007fc717bb8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 94.352268][ T5465] RAX: ffffffffffffffda RBX: 00007fc719bd7fa0 RCX: 00007fc71995ee59 [ 94.360383][ T5465] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000005 [ 94.368356][ T5465] RBP: 00007fc7199f4d6f R08: 0000000000000000 R09: 0000000000000000 [ 94.376323][ T5465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.384293][ T5465] R13: 00007fc719bd8038 R14: 00007fc719bd7fa0 R15: 00007ffcf0759148 [ 94.392368][ T5465]